Jonathan Anderson

@trombonehero.bsky.social

Associate Professor. Computer Security. Sometimes grumpy (but I repeat myself).

Here's what I actually think these incidents reveal (instead of a rogue AI terminator situation): Much of the infra we expect to be hardened is actually being held together by glue and popsicle sticks.

Art is humans expressing things and other humans connecting with that and learning from it. Put another way, if no one could be bothered making it, I can't be bothered looking at it.

'Even well-established processes can be vulnerable when they rely solely on consistent human performance, particularly during maintenance tasks which are often conducted in challenging environments and under operational pressures ...

Connecting OT to the Internet is only worth the risk if a) you have an excellent security team or b) the cost of compromise is close to 0. The latter is almost never true, especially in the case of critical infrastructure. value(business convenience) < cost(cyberattack)

David DiMolfetta@ddimolfetta.bsky.social · 2mo ago

NEW: Amid state water hacks, CISA is still finding water system controls exposed to the internet with no password or only default credentials, acting director Nick Andersen told me on sidelines of Black Hat conference today. www.nextgov.com/cybersecurit...

This was advertised by the IEEE with: “Explore how structured, agent-executable research formats help AI parse complex data, reproduce experiments, and accelerate scientific discovery to keep you ahead in tech innovation.” Sorry, who’s going to get ahead in this scenario?

Hypervisible @hypervisible.blacksky.app · 2mo ago

“Once AI has ‘squeezed out’ all the expert data from humans, it won’t need any more input from humanity. That is the time AIs will start just self-evolving by themselves. Right now, the human is the bottleneck.”