🏫 MY COURSES Sign-up for my FREE 3-Day C Course: https://lowlevel.academy 🧙♂️ HACK YOUR CAREER Wanna learn to hack? Join my new CTF platform: https://stacksmash.io ⌨️ KEYBOARD Like what you hear? Grab a Q5 at https://go.lowlevel.tv/keyboard 🔥COME HANG OUT Check out my other stuff: https://lowlevel.tv
ADVERTISEMENT
People are surprised when the thing that's supposed to run arbitrary code runs arbitrary code
I'm old enough to remember the seismic growl when a 10.0 CVE was discovered years ago. Now it's just another monday.
Lmao headless ai "yolo mode" who tf this would be secure
AI agents are all Double Agents
I like how the response to computer programs directly vulnerable to social engineering wasn't to put the brakes on and think carefully about whether these should be a part of anything important. It really underscores how the world has lost its damn mind.
At the root of it all, I think the biggest problem is companies trying to make one developer do the work of ten by having AI jammed down our throats.
CICD should not need YOLO or any arbitrary ability to run anything. Runners should only have access to the secrets they need and only static well defined commands should be ran. What are these people even thinking?
"move fast, break things" lmao
"I'm having nightmares" What he means he can not keep up with content upload. AI is literally propelling this channel with 32 raptor engines.
The AI people are really not the security people... Bunch of "it just works" clowns.
Love me some nondeterministic cicd, what a world
AI either hacks for you, or it hacks you.
A careless pipe, a silent stream, secrets cast to code supreme, The keys to kingdoms stripped and bare, flung blindly through the digital air, An abstract script, a sudden glow, a public link where shadows grow, And in the quiet of the screen, a corporate siren screams unseen.
AND PEOPLE ASK WHY I DON'T WANT THIS ON MY FUCKING PHONE!
"AI agents" second word there is your problem
I'm so tired of all these 10.0 CVE's every single day...
The people do not yearn for automation
AI code review is not actually a good thing. You need to read the code to review it. Even if an LLM could reliably summarize the code, it’d still be the job of the reviewer of the code to read the code.
LIVE ON TWITCH (PROBABLY) /LowLevelTV
I wasn't aware malware could get hacked....