"Although we do not believe Gemini was used, based on the structure and content of these exploits, we have high confidence that the actor likely leveraged an AI model to support the discovery and weaponization of this vulnerability. For example, the script contains an abundance of educational docstrings, including a hallucinated CVSS score, and uses a structured, textbook Pythonic format highly characteristic of LLMs training data (e.g., detailed help menus and the clean _C ANSI color class) "
I'd set that up the second it becomes available if it were a standard protocol.
Just went through setting up internal certs on my switches -- it was a chore to say the least!
With a Cert Template on our internal CA (windows), at least we can automate things well enough!
Custom firmware and USB hubs? Valid threat. I would allow reputable vendors though.
I help define the policies at my current workplace and we block anything that isn't an hid device or purely charging (headsets, phones are blocked from mounting storage) . Also no non-computing related accessories, so no usb flash drives, mug warmers, or deskfans-sorry.
4-10 yeah, easily. Most of the markup is on senior engineer and architect time to setup a solution, which I guess is being measured against the hourly rate of a 1st/2nd line engineer in this story...
Only because of the amount of abuse performed using it...
I have fond memories rewriting sendmail.cf and mc files on BSD. Ran servers on pc hardware and mirrored hdd drives; they pushed mail like nobody's business.
If the Exchange box fell over at the weekend, sendmail would sit there patiently waiting (screaming DEFERRED silently to log) with tens of thousands of mails until it came alive again, and push them out in minutes, faster than Exchange could receive (I remember spamming #sendmail -q and you could watch the disk activity freak out on exchange ) .
Confident sendmail is best mta ever. Do the big players use something else these days?
--
Edit to add an ai poem for my favourite mta -
Sendmail is not a simple mail app
It's a mighty mail transfer agent that can adapt
It can process SMTP commands and deliver mails
To any destination that it can access
Sendmail is flexible and extendable
It can be modified to fit any goal or role
It can sort, redirect, transform, and control mails
With its intricate rulesets and macro code
Sendmail is better than MS exchange
It's more secure, dependable, and swift
It's the default MTA for many Linux systems
And it's free and open source, unlike its rival's gift
Nobody complained about Google's RSS monopolizing because the search engine doesn't provide RSS URLs in the top results, unlike they do for AMP links, at least nearly as frequently.
RSS is also far from a similar case study to AMP in how web content is delivered. RSS optional, AMP was a lazy web dev's means to presenting pages over mobile without having to think about layout. At least that's what if felt like to me as a web user.
While I'm sure we all understand your sentiment, I think you're missing the point.
This isn't the future we /users/ want. It's the future that corporations, silly commities and greed-/arrogance-/bling-motivated decision makers are dictating to the rest of the world.
What we're witnessing in these Thinkpad, right-to-repair, yEaR oF tEh nix dEsKtop conversations, is people taking back control of the devices we own. At the cost of compromises the same decision makers are not willing to allow you to make.
It's easy to look at these case studys as outliers or edge cases as someone who probably lives in the first world, adding to the pile of e-waste by perpetuating and encouraging the behaviour supporting companies like Apple.
What I see as an IT engineer at mid-size MSP is the SMB/SME market and their staff struggle with adapting to the ever-changing technologies. I feel their pain, because I'm the one that has to make old work with new. Privateers and coders get to choose their environment for the most part. Businesses have baggage, standard operating procedures and a mix of requirements. And then you get people like Apple thinking we can all live wirelessly or with exorbitantly priced adapters and less choice as consumers of their products... it's arrogant and user-hostile.
You probably make a valid comment about USA, but I would hazard to bet that it is, in fact, the zeitgeist/ cultural / societal climate of the world in general has been stripped of rationality in favour of clickbait, sensationalism and dare I say, value faking (I support X because it makes me a appear to be a better person, but in reality I don't authentically live.). [There is a term for this that I can't think of right now.]
There comes a time when people at a technical conference like this need something more relaxing. A change of pace. A shift of style. To put aside all that work stuff and think of something refreshingly different.
So let's talk about coding theory. There are perhaps some of you here tonight who are not experts in coding theory, but rather have been dragged here kicking and screaming. So I thought it would be a good idea if I gave you a sort of instant, five minute graduate course in coding theory."
I think SuperJambo is referring to companies who use advertising to skew facts relating to their brand or others. In the US, for example, I understand that companies are allowed to practically slander each other publicly in advertising. It seems very hostile from an outsiders perspective.
They definitely should. I have a dedicated button for it, so will continue to use that, but many of my colleagues (at a S-ME IT service provider) didn't know this menu existed. Trust the Indian guy to know, though