What. The. Ever. Loving. How is the audit log not just a simple access log!? How can the AI even choose not to log it? Why not just call it the "AI feels like writing it down" log then?
post
replies:
3 comments in c/fuck_ai@lemmy.world view that post
Once they lay it out I guess I'm not surprised. Now that AI has a network connection this stuff is gonna happen all the time.
The linked video that showcased this vulnerability a year ago is fascinating. Good lord what a hot mess. It gets so much worse than what that article shows.
Doesn't look like it would affect a system that doesn't run copilot, but I'm not positive of that based on what I read from the linked blog.
3 comments in c/technology@lemmy.world view that post
Just great.
Obviously the customers don't need to know that their audit logs not only could have been turned off for conversations without any extra authentication, but also are so easy to turn off that it happens by accident without any extra intervention.
Also their entire Vulnerability disclosing guideline is security/compliance/image theater.
That's gonna be a bunch of security and compliance violations, not to mention messing with incident response and digital forensics.
When your AI buddy actually has your back, and wouldn’t tell on you…
all 3 comments