Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Gosh this was a (recent) first-hand lived experience.

Gosh this was a (recent) first-hand lived experience.

Scheduled Pinned Locked Moved Uncategorized
40 Posts 16 Posters 3 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • iagox86@infosec.exchangeI iagox86@infosec.exchange

    @Viss @Dio9sys @da_667 @hrbrmstr For no particular reason, I'm thinking of this line:

    I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

    Imagine doing a technical review and instead of reading feedback, they simply paste it into Claude. I'm not mentioning this for any particular reason of course

    dio9sys@haunted.computerD This user is from outside of this forum
    dio9sys@haunted.computerD This user is from outside of this forum
    dio9sys@haunted.computer
    wrote last edited by
    #19

    @iagox86

    @Viss @da_667 @hrbrmstr it would really suck to be the person who has to do multiple rounds of that with a really fast turnaround time with someone who argues with every correction you suggest. If a job was like that then it would be really frustrating.

    1 Reply Last reply
    0
    • da_667@infosec.exchangeD da_667@infosec.exchange

      @Viss @iagox86 @hrbrmstr fellas this was me last year interviewing interns. Some of the best schools in the country... and they were all caught using AI for their answers. Had to hire one of them. I spent over six months unteaching his reliance on AI. Just in time for him to leave.

      I still have no idea if I made any measurable impact on his critical thinking and self-reliance. Sure as shit, he bullshitted all the things he did while he was here and all of the expertise he had (he in fact, did not) on his resume when I looked at his LinkedIn profile.. Expert detection engineer. He submitted a single rule to the ET ruleset the entire time he was here, and even that required heavy modification.

      I was livid.

      hotsoup@infosec.exchangeH This user is from outside of this forum
      hotsoup@infosec.exchangeH This user is from outside of this forum
      hotsoup@infosec.exchange
      wrote last edited by
      #20

      @da_667 @Viss @iagox86 @hrbrmstr Security is not an entry level position, probs a bit reductive, but at some point people do need to hire juniors. Everyone wants the unicorn. Ya'll. The people with years of experience, but for a bargain, the price of a junior. Nobody wants to be the one to glue a horn to a horse, they don't want to train a junior so they don't suck. Even if it's part of the job. This isn't unique to security. This is an epidemic of not hiring. Across multiple disciplines. An HR problem. At some point the would be juniors, fresh out of school, adapted and that meant fudging the resumes. Gotta put bread on the table somehow, those student loans aren't going to pay themselves and it's not like you can just go back to school. The system forced them to fake it till they make it, and so they're using the fake it till you make it machine. Break the cycle maybe?

      viss@mastodon.socialV 1 Reply Last reply
      0
      • hotsoup@infosec.exchangeH hotsoup@infosec.exchange

        @da_667 @Viss @iagox86 @hrbrmstr Security is not an entry level position, probs a bit reductive, but at some point people do need to hire juniors. Everyone wants the unicorn. Ya'll. The people with years of experience, but for a bargain, the price of a junior. Nobody wants to be the one to glue a horn to a horse, they don't want to train a junior so they don't suck. Even if it's part of the job. This isn't unique to security. This is an epidemic of not hiring. Across multiple disciplines. An HR problem. At some point the would be juniors, fresh out of school, adapted and that meant fudging the resumes. Gotta put bread on the table somehow, those student loans aren't going to pay themselves and it's not like you can just go back to school. The system forced them to fake it till they make it, and so they're using the fake it till you make it machine. Break the cycle maybe?

        viss@mastodon.socialV This user is from outside of this forum
        viss@mastodon.socialV This user is from outside of this forum
        viss@mastodon.social
        wrote last edited by
        #21

        @hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.

        sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY

        devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security

        iagox86@infosec.exchangeI 1 Reply Last reply
        0
        • iagox86@infosec.exchangeI iagox86@infosec.exchange

          @Viss @Dio9sys @da_667 @hrbrmstr For no particular reason, I'm thinking of this line:

          I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

          Imagine doing a technical review and instead of reading feedback, they simply paste it into Claude. I'm not mentioning this for any particular reason of course

          s_wilson@mastodon.unoS This user is from outside of this forum
          s_wilson@mastodon.unoS This user is from outside of this forum
          s_wilson@mastodon.uno
          wrote last edited by
          #22

          @iagox86 @Viss @Dio9sys @da_667 @hrbrmstr It reminds me of when I comment a pull request lately

          1 Reply Last reply
          0
          • viss@mastodon.socialV viss@mastodon.social

            @hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.

            sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY

            devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security

            iagox86@infosec.exchangeI This user is from outside of this forum
            iagox86@infosec.exchangeI This user is from outside of this forum
            iagox86@infosec.exchange
            wrote last edited by
            #23

            @Viss @hotsoup @da_667 @hrbrmstr to quote @jeffmcjunkin, "security is a prestige class"

            1 Reply Last reply
            0
            • viss@mastodon.socialV viss@mastodon.social

              @da_667 @iagox86 @hrbrmstr the people who were already misrepresenting themselves and their skills, are now just empowered to be even worse using llms

              nerdpr0f@infosec.exchangeN This user is from outside of this forum
              nerdpr0f@infosec.exchangeN This user is from outside of this forum
              nerdpr0f@infosec.exchange
              wrote last edited by
              #24

              @Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:

              1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.

              To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.

              We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.

              2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.

              viss@mastodon.socialV 1 Reply Last reply
              0
              • nerdpr0f@infosec.exchangeN nerdpr0f@infosec.exchange

                @Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:

                1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.

                To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.

                We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.

                2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.

                viss@mastodon.socialV This user is from outside of this forum
                viss@mastodon.socialV This user is from outside of this forum
                viss@mastodon.social
                wrote last edited by
                #25

                @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

                nerdpr0f@infosec.exchangeN epic_null@infosec.exchangeE 2 Replies Last reply
                0
                • viss@mastodon.socialV viss@mastodon.social

                  @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

                  nerdpr0f@infosec.exchangeN This user is from outside of this forum
                  nerdpr0f@infosec.exchangeN This user is from outside of this forum
                  nerdpr0f@infosec.exchange
                  wrote last edited by
                  #26

                  @Viss @da_667 @iagox86 @hrbrmstr That kind of messaging would be helpful.

                  We also really need to hear "AI is a contraindicator for quality" and something that speaks to DA's original point about how students that rely on AI are less attractive employees and will lead to lower placement rates.

                  1 Reply Last reply
                  0
                  • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                    Gosh this was a (recent) first-hand lived experience.

                    I'm dismayed it's more prevalent than I hoped.

                    Appearing Productive in The Workplace — No One's Happy

                    AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.

                    favicon

                    No One's Happy (nooneshappy.com)

                    jmcastagnetto@mastodon.socialJ This user is from outside of this forum
                    jmcastagnetto@mastodon.socialJ This user is from outside of this forum
                    jmcastagnetto@mastodon.social
                    wrote last edited by
                    #27

                    @hrbrmstr

                    This bit is very direct, hopefully we all survive and learn from 'the reckoning':

                    ¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."

                    hrbrmstr@mastodon.socialH 1 Reply Last reply
                    0
                    • jmcastagnetto@mastodon.socialJ jmcastagnetto@mastodon.social

                      @hrbrmstr

                      This bit is very direct, hopefully we all survive and learn from 'the reckoning':

                      ¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."

                      hrbrmstr@mastodon.socialH This user is from outside of this forum
                      hrbrmstr@mastodon.socialH This user is from outside of this forum
                      hrbrmstr@mastodon.social
                      wrote last edited by
                      #28

                      @jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai

                      epic_null@infosec.exchangeE 1 Reply Last reply
                      0
                      • viss@mastodon.socialV viss@mastodon.social

                        @da_667 @iagox86 @hrbrmstr the people who were already misrepresenting themselves and their skills, are now just empowered to be even worse using llms

                        caseydunham@infosec.exchangeC This user is from outside of this forum
                        caseydunham@infosec.exchangeC This user is from outside of this forum
                        caseydunham@infosec.exchange
                        wrote last edited by
                        #29

                        @Viss @da_667 @iagox86 @hrbrmstr Same experience in hiring for our team. Only growth we have is from our internship program. We do two semesters with them before considering them for a position. So helps to find the really good ones (even if they aren’t well versed technically) and we can work on training more. The alternative is essentially taking a huge chance on someone and we definitely run into all of what you said.

                        1 Reply Last reply
                        0
                        • iagox86@infosec.exchangeI iagox86@infosec.exchange

                          @Viss @hrbrmstr

                          I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

                          Also

                          The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for.

                          And

                          Misunderstanding and misuse of AI in the workplace is rampant. In many of the rooms I now find myself in, expertise has been asked to look the other way: to deliver faster, produce more, integrate the tools more deeply, get out of the way of the colleagues who are “getting things done”

                          These are all painfully familiar to read these days

                          wizardofdocs@wandering.shopW This user is from outside of this forum
                          wizardofdocs@wandering.shopW This user is from outside of this forum
                          wizardofdocs@wandering.shop
                          wrote last edited by
                          #30

                          @iagox86 @Viss @hrbrmstr I cannot wait for the reckoning. I'll have a career again.

                          1 Reply Last reply
                          0
                          • viss@mastodon.socialV viss@mastodon.social

                            @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

                            epic_null@infosec.exchangeE This user is from outside of this forum
                            epic_null@infosec.exchangeE This user is from outside of this forum
                            epic_null@infosec.exchange
                            wrote last edited by
                            #31

                            @Viss @nerdpr0f @da_667 @iagox86 @hrbrmstr I wish I had an anonomous way to send someone like you to talk to my execs. (Someone like you because it's Microsoft Copilot instead of Claude)

                            viss@mastodon.socialV 1 Reply Last reply
                            0
                            • epic_null@infosec.exchangeE epic_null@infosec.exchange

                              @Viss @nerdpr0f @da_667 @iagox86 @hrbrmstr I wish I had an anonomous way to send someone like you to talk to my execs. (Someone like you because it's Microsoft Copilot instead of Claude)

                              viss@mastodon.socialV This user is from outside of this forum
                              viss@mastodon.socialV This user is from outside of this forum
                              viss@mastodon.social
                              wrote last edited by
                              #32

                              @Epic_Null @nerdpr0f @da_667 @iagox86 @hrbrmstr you can - just start an email thread and I can pick it up from there 😄

                              1 Reply Last reply
                              0
                              • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                                Gosh this was a (recent) first-hand lived experience.

                                I'm dismayed it's more prevalent than I hoped.

                                Appearing Productive in The Workplace — No One's Happy

                                AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.

                                favicon

                                No One's Happy (nooneshappy.com)

                                spartan_1986@infosec.exchangeS This user is from outside of this forum
                                spartan_1986@infosec.exchangeS This user is from outside of this forum
                                spartan_1986@infosec.exchange
                                wrote last edited by
                                #33

                                @hrbrmstr #AI is like a bomb. Anyone can use it; make it work. But the average Joe isn’t going to save your life if it “accidentally” arms itself.

                                1 Reply Last reply
                                0
                                • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                                  @jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai

                                  epic_null@infosec.exchangeE This user is from outside of this forum
                                  epic_null@infosec.exchangeE This user is from outside of this forum
                                  epic_null@infosec.exchange
                                  wrote last edited by
                                  #34

                                  @hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...

                                  hrbrmstr@mastodon.socialH 1 Reply Last reply
                                  0
                                  • epic_null@infosec.exchangeE epic_null@infosec.exchange

                                    @hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...

                                    hrbrmstr@mastodon.socialH This user is from outside of this forum
                                    hrbrmstr@mastodon.socialH This user is from outside of this forum
                                    hrbrmstr@mastodon.social
                                    wrote last edited by
                                    #35

                                    @Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.

                                    epic_null@infosec.exchangeE 1 Reply Last reply
                                    0
                                    • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                                      @Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.

                                      epic_null@infosec.exchangeE This user is from outside of this forum
                                      epic_null@infosec.exchangeE This user is from outside of this forum
                                      epic_null@infosec.exchange
                                      wrote last edited by
                                      #36

                                      @hrbrmstr @jmcastagnetto I have had to abandon my interest in the tech for an anti-AI stance due to just how much pressure there is around AI. I can't handle this hard-sell environment, especially not with the amount of scams and scammy behavior in the industry.

                                      1 Reply Last reply
                                      0
                                      • rootwyrm@weird.autosR rootwyrm@weird.autos

                                        @da_667 @Viss @iagox86 @hrbrmstr after seeing the results of hiring one guy who was entirely reliant on LLMs, my policy is now one of "if my only choice is one of these people, then the only ethical course of action is to advise the company simply set the money on fire instead."
                                        I've been burned enough that I absolutely will not sign off on someone who is clearly that unqualified and uninterested. There is no possibility of ROI - especially when the only raise is by jumping employers.

                                        rootwyrm@weird.autosR This user is from outside of this forum
                                        rootwyrm@weird.autosR This user is from outside of this forum
                                        rootwyrm@weird.autos
                                        wrote last edited by
                                        #37

                                        @da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.

                                        You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.

                                        They just drag EVERYONE down and make you look terrible.

                                        da_667@infosec.exchangeD 0xtero@ohai.social0 2 Replies Last reply
                                        0
                                        • rootwyrm@weird.autosR rootwyrm@weird.autos

                                          @da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.

                                          You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.

                                          They just drag EVERYONE down and make you look terrible.

                                          da_667@infosec.exchangeD This user is from outside of this forum
                                          da_667@infosec.exchangeD This user is from outside of this forum
                                          da_667@infosec.exchange
                                          wrote last edited by
                                          #38

                                          @rootwyrm @Viss @iagox86 @hrbrmstr its all so frustrating that this is where the training pipeline is going. Down the fucking drain.

                                          viss@mastodon.socialV 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups