Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. Gosh this was a (recent) first-hand lived experience.

Gosh this was a (recent) first-hand lived experience.

Scheduled Pinned Locked Moved Uncategorized
40 Posts 16 Posters 3 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • hotsoup@infosec.exchangeH hotsoup@infosec.exchange

    @da_667 @Viss @iagox86 @hrbrmstr Security is not an entry level position, probs a bit reductive, but at some point people do need to hire juniors. Everyone wants the unicorn. Ya'll. The people with years of experience, but for a bargain, the price of a junior. Nobody wants to be the one to glue a horn to a horse, they don't want to train a junior so they don't suck. Even if it's part of the job. This isn't unique to security. This is an epidemic of not hiring. Across multiple disciplines. An HR problem. At some point the would be juniors, fresh out of school, adapted and that meant fudging the resumes. Gotta put bread on the table somehow, those student loans aren't going to pay themselves and it's not like you can just go back to school. The system forced them to fake it till they make it, and so they're using the fake it till you make it machine. Break the cycle maybe?

    viss@mastodon.socialV This user is from outside of this forum
    viss@mastodon.socialV This user is from outside of this forum
    viss@mastodon.social
    wrote last edited by
    #21

    @hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.

    sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY

    devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security

    iagox86@infosec.exchangeI 1 Reply Last reply
    0
    • iagox86@infosec.exchangeI iagox86@infosec.exchange

      @Viss @Dio9sys @da_667 @hrbrmstr For no particular reason, I'm thinking of this line:

      I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

      Imagine doing a technical review and instead of reading feedback, they simply paste it into Claude. I'm not mentioning this for any particular reason of course

      s_wilson@mastodon.unoS This user is from outside of this forum
      s_wilson@mastodon.unoS This user is from outside of this forum
      s_wilson@mastodon.uno
      wrote last edited by
      #22

      @iagox86 @Viss @Dio9sys @da_667 @hrbrmstr It reminds me of when I comment a pull request lately

      1 Reply Last reply
      0
      • viss@mastodon.socialV viss@mastodon.social

        @hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.

        sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY

        devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security

        iagox86@infosec.exchangeI This user is from outside of this forum
        iagox86@infosec.exchangeI This user is from outside of this forum
        iagox86@infosec.exchange
        wrote last edited by
        #23

        @Viss @hotsoup @da_667 @hrbrmstr to quote @jeffmcjunkin, "security is a prestige class"

        1 Reply Last reply
        0
        • viss@mastodon.socialV viss@mastodon.social

          @da_667 @iagox86 @hrbrmstr the people who were already misrepresenting themselves and their skills, are now just empowered to be even worse using llms

          nerdpr0f@infosec.exchangeN This user is from outside of this forum
          nerdpr0f@infosec.exchangeN This user is from outside of this forum
          nerdpr0f@infosec.exchange
          wrote last edited by
          #24

          @Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:

          1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.

          To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.

          We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.

          2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.

          viss@mastodon.socialV 1 Reply Last reply
          0
          • nerdpr0f@infosec.exchangeN nerdpr0f@infosec.exchange

            @Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:

            1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.

            To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.

            We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.

            2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.

            viss@mastodon.socialV This user is from outside of this forum
            viss@mastodon.socialV This user is from outside of this forum
            viss@mastodon.social
            wrote last edited by
            #25

            @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

            nerdpr0f@infosec.exchangeN epic_null@infosec.exchangeE 2 Replies Last reply
            0
            • viss@mastodon.socialV viss@mastodon.social

              @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

              nerdpr0f@infosec.exchangeN This user is from outside of this forum
              nerdpr0f@infosec.exchangeN This user is from outside of this forum
              nerdpr0f@infosec.exchange
              wrote last edited by
              #26

              @Viss @da_667 @iagox86 @hrbrmstr That kind of messaging would be helpful.

              We also really need to hear "AI is a contraindicator for quality" and something that speaks to DA's original point about how students that rely on AI are less attractive employees and will lead to lower placement rates.

              1 Reply Last reply
              0
              • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                Gosh this was a (recent) first-hand lived experience.

                I'm dismayed it's more prevalent than I hoped.

                Appearing Productive in The Workplace — No One's Happy

                AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.

                favicon

                No One's Happy (nooneshappy.com)

                Link Preview Image
                jmcastagnetto@mastodon.socialJ This user is from outside of this forum
                jmcastagnetto@mastodon.socialJ This user is from outside of this forum
                jmcastagnetto@mastodon.social
                wrote last edited by
                #27

                @hrbrmstr

                This bit is very direct, hopefully we all survive and learn from 'the reckoning':

                ¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."

                hrbrmstr@mastodon.socialH 1 Reply Last reply
                0
                • jmcastagnetto@mastodon.socialJ jmcastagnetto@mastodon.social

                  @hrbrmstr

                  This bit is very direct, hopefully we all survive and learn from 'the reckoning':

                  ¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."

                  hrbrmstr@mastodon.socialH This user is from outside of this forum
                  hrbrmstr@mastodon.socialH This user is from outside of this forum
                  hrbrmstr@mastodon.social
                  wrote last edited by
                  #28

                  @jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai

                  epic_null@infosec.exchangeE 1 Reply Last reply
                  0
                  • viss@mastodon.socialV viss@mastodon.social

                    @da_667 @iagox86 @hrbrmstr the people who were already misrepresenting themselves and their skills, are now just empowered to be even worse using llms

                    caseydunham@infosec.exchangeC This user is from outside of this forum
                    caseydunham@infosec.exchangeC This user is from outside of this forum
                    caseydunham@infosec.exchange
                    wrote last edited by
                    #29

                    @Viss @da_667 @iagox86 @hrbrmstr Same experience in hiring for our team. Only growth we have is from our internship program. We do two semesters with them before considering them for a position. So helps to find the really good ones (even if they aren’t well versed technically) and we can work on training more. The alternative is essentially taking a huge chance on someone and we definitely run into all of what you said.

                    1 Reply Last reply
                    0
                    • iagox86@infosec.exchangeI iagox86@infosec.exchange

                      @Viss @hrbrmstr

                      I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

                      Also

                      The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for.

                      And

                      Misunderstanding and misuse of AI in the workplace is rampant. In many of the rooms I now find myself in, expertise has been asked to look the other way: to deliver faster, produce more, integrate the tools more deeply, get out of the way of the colleagues who are “getting things done”

                      These are all painfully familiar to read these days

                      wizardofdocs@wandering.shopW This user is from outside of this forum
                      wizardofdocs@wandering.shopW This user is from outside of this forum
                      wizardofdocs@wandering.shop
                      wrote last edited by
                      #30

                      @iagox86 @Viss @hrbrmstr I cannot wait for the reckoning. I'll have a career again.

                      1 Reply Last reply
                      0
                      • viss@mastodon.socialV viss@mastodon.social

                        @nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.

                        epic_null@infosec.exchangeE This user is from outside of this forum
                        epic_null@infosec.exchangeE This user is from outside of this forum
                        epic_null@infosec.exchange
                        wrote last edited by
                        #31

                        @Viss @nerdpr0f @da_667 @iagox86 @hrbrmstr I wish I had an anonomous way to send someone like you to talk to my execs. (Someone like you because it's Microsoft Copilot instead of Claude)

                        viss@mastodon.socialV 1 Reply Last reply
                        0
                        • epic_null@infosec.exchangeE epic_null@infosec.exchange

                          @Viss @nerdpr0f @da_667 @iagox86 @hrbrmstr I wish I had an anonomous way to send someone like you to talk to my execs. (Someone like you because it's Microsoft Copilot instead of Claude)

                          viss@mastodon.socialV This user is from outside of this forum
                          viss@mastodon.socialV This user is from outside of this forum
                          viss@mastodon.social
                          wrote last edited by
                          #32

                          @Epic_Null @nerdpr0f @da_667 @iagox86 @hrbrmstr you can - just start an email thread and I can pick it up from there 😄

                          1 Reply Last reply
                          0
                          • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                            Gosh this was a (recent) first-hand lived experience.

                            I'm dismayed it's more prevalent than I hoped.

                            Appearing Productive in The Workplace — No One's Happy

                            AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.

                            favicon

                            No One's Happy (nooneshappy.com)

                            Link Preview Image
                            spartan_1986@infosec.exchangeS This user is from outside of this forum
                            spartan_1986@infosec.exchangeS This user is from outside of this forum
                            spartan_1986@infosec.exchange
                            wrote last edited by
                            #33

                            @hrbrmstr #AI is like a bomb. Anyone can use it; make it work. But the average Joe isn’t going to save your life if it “accidentally” arms itself.

                            1 Reply Last reply
                            0
                            • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                              @jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai

                              epic_null@infosec.exchangeE This user is from outside of this forum
                              epic_null@infosec.exchangeE This user is from outside of this forum
                              epic_null@infosec.exchange
                              wrote last edited by
                              #34

                              @hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...

                              hrbrmstr@mastodon.socialH 1 Reply Last reply
                              0
                              • epic_null@infosec.exchangeE epic_null@infosec.exchange

                                @hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...

                                hrbrmstr@mastodon.socialH This user is from outside of this forum
                                hrbrmstr@mastodon.socialH This user is from outside of this forum
                                hrbrmstr@mastodon.social
                                wrote last edited by
                                #35

                                @Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.

                                epic_null@infosec.exchangeE 1 Reply Last reply
                                0
                                • hrbrmstr@mastodon.socialH hrbrmstr@mastodon.social

                                  @Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.

                                  epic_null@infosec.exchangeE This user is from outside of this forum
                                  epic_null@infosec.exchangeE This user is from outside of this forum
                                  epic_null@infosec.exchange
                                  wrote last edited by
                                  #36

                                  @hrbrmstr @jmcastagnetto I have had to abandon my interest in the tech for an anti-AI stance due to just how much pressure there is around AI. I can't handle this hard-sell environment, especially not with the amount of scams and scammy behavior in the industry.

                                  1 Reply Last reply
                                  0
                                  • rootwyrm@weird.autosR rootwyrm@weird.autos

                                    @da_667 @Viss @iagox86 @hrbrmstr after seeing the results of hiring one guy who was entirely reliant on LLMs, my policy is now one of "if my only choice is one of these people, then the only ethical course of action is to advise the company simply set the money on fire instead."
                                    I've been burned enough that I absolutely will not sign off on someone who is clearly that unqualified and uninterested. There is no possibility of ROI - especially when the only raise is by jumping employers.

                                    rootwyrm@weird.autosR This user is from outside of this forum
                                    rootwyrm@weird.autosR This user is from outside of this forum
                                    rootwyrm@weird.autos
                                    wrote last edited by
                                    #37

                                    @da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.

                                    You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.

                                    They just drag EVERYONE down and make you look terrible.

                                    da_667@infosec.exchangeD 0xtero@ohai.social0 2 Replies Last reply
                                    0
                                    • rootwyrm@weird.autosR rootwyrm@weird.autos

                                      @da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.

                                      You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.

                                      They just drag EVERYONE down and make you look terrible.

                                      da_667@infosec.exchangeD This user is from outside of this forum
                                      da_667@infosec.exchangeD This user is from outside of this forum
                                      da_667@infosec.exchange
                                      wrote last edited by
                                      #38

                                      @rootwyrm @Viss @iagox86 @hrbrmstr its all so frustrating that this is where the training pipeline is going. Down the fucking drain.

                                      viss@mastodon.socialV 1 Reply Last reply
                                      0
                                      • da_667@infosec.exchangeD da_667@infosec.exchange

                                        @rootwyrm @Viss @iagox86 @hrbrmstr its all so frustrating that this is where the training pipeline is going. Down the fucking drain.

                                        viss@mastodon.socialV This user is from outside of this forum
                                        viss@mastodon.socialV This user is from outside of this forum
                                        viss@mastodon.social
                                        wrote last edited by
                                        #39

                                        @da_667 @rootwyrm @iagox86 @hrbrmstr i tried. i really did. fourteen times. and i documented it. out of fourteen people, only one appeared to actually want to learn stuff - everyone else just wanted cheatcodes to bypass having to learn stuff

                                        1 Reply Last reply
                                        0
                                        • rootwyrm@weird.autosR rootwyrm@weird.autos

                                          @da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.

                                          You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.

                                          They just drag EVERYONE down and make you look terrible.

                                          0xtero@ohai.social0 This user is from outside of this forum
                                          0xtero@ohai.social0 This user is from outside of this forum
                                          0xtero@ohai.social
                                          wrote last edited by
                                          #40

                                          @rootwyrm @da_667 @Viss @iagox86 @hrbrmstr This is a realisation I’ve reached as well over the last couple of years in the AI bubble. Can’t teach people who are unwilling to learn. It’s a fools errand. And the pull of easy answers from LLM prompt is far stronger than actually trying to inspire people to figure out the hard stuff by themselves.

                                          1 Reply Last reply
                                          0
                                          • R relay@relay.publicsquare.global shared this topic
                                            R relay@relay.mycrowd.ca shared this topic
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups