Gosh this was a (recent) first-hand lived experience.
-
@da_667 @Viss @iagox86 @hrbrmstr Security is not an entry level position, probs a bit reductive, but at some point people do need to hire juniors. Everyone wants the unicorn. Ya'll. The people with years of experience, but for a bargain, the price of a junior. Nobody wants to be the one to glue a horn to a horse, they don't want to train a junior so they don't suck. Even if it's part of the job. This isn't unique to security. This is an epidemic of not hiring. Across multiple disciplines. An HR problem. At some point the would be juniors, fresh out of school, adapted and that meant fudging the resumes. Gotta put bread on the table somehow, those student loans aren't going to pay themselves and it's not like you can just go back to school. The system forced them to fake it till they make it, and so they're using the fake it till you make it machine. Break the cycle maybe?
@hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.
sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY
devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security
-
@Viss @Dio9sys @da_667 @hrbrmstr For no particular reason, I'm thinking of this line:
I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation
Imagine doing a technical review and instead of reading feedback, they simply paste it into Claude. I'm not mentioning this for any particular reason of course
-
@hotsoup @da_667 @iagox86 @hrbrmstr my postition has always been that people who are experts in other domains, move into security laterally and take their domain expertise with them.
sysadmins and network folks make great redteamers because theyre intimately familiar with systems and networks ALREADY
devs and devops make great analysts because they can take those skills and apply them to the coding surfaces of security
@Viss @hotsoup @da_667 @hrbrmstr to quote @jeffmcjunkin, "security is a prestige class"
-
@Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:
1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.
To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.
We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.
2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.
-
@Viss @da_667 @iagox86 @hrbrmstr Two thoughts from the academic side:
1) Higher ed is absolutely all in on AI. While I think there are some novel use cases, it comes down to two things. First, at least in most computing disciplines, the vast majority of research funding (which tenure-track faculty are required to get) is tied to AI usage at the moment. Second, we're largely being told - by industry - that it's going to be all AI, all the time in the future.
To quote Upton Sinclair, "It is difficult to get a man to understand something when his salary depends on him not understanding it." AI is, at the moment, deeply embedded into two of the biggest revenue streams for universities.
We desperately need external people - ideally people tied to revenue streams - talking to Deans and Chairs about the problems associated with AI. The filter bubble is real.
2) On the student side... the root problem here is that the tech industry has lost it's veneer of being an ideal (maybe even good) place to work. I broadly see less intrinsic motivation. I would cautiously say that working in tech now is perceived similarly to working in business/banking 15 years ago. Decreasing intrinsic motivation is very likely tied to students trying to find the quickest/easiest way through.
@nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.
-
@nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.
-
Gosh this was a (recent) first-hand lived experience.
I'm dismayed it's more prevalent than I hoped.
Appearing Productive in The Workplace — No One's Happy
AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.
No One's Happy (nooneshappy.com)

This bit is very direct, hopefully we all survive and learn from 'the reckoning':
¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."
-
This bit is very direct, hopefully we all survive and learn from 'the reckoning':
¨... The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for. ..."
@jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai
-
@Viss @da_667 @iagox86 @hrbrmstr Same experience in hiring for our team. Only growth we have is from our internship program. We do two semesters with them before considering them for a position. So helps to find the really good ones (even if they aren’t well versed technically) and we can work on training more. The alternative is essentially taking a huge chance on someone and we definitely run into all of what you said.
-
I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation
Also
The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for.
And
Misunderstanding and misuse of AI in the workplace is rampant. In many of the rooms I now find myself in, expertise has been asked to look the other way: to deliver faster, produce more, integrate the tools more deeply, get out of the way of the colleagues who are “getting things done”
These are all painfully familiar to read these days
-
@nerdpr0f @da_667 @iagox86 @hrbrmstr ive been cultivating this 'claude is your insider threat now' talk for months, and next week im servicing a customer with a tailored version of that talk, plus an llm workshop for how to use this stuff without rm'ing yourself or getting owned. i estimate this will become a template that other customers can purchase. so .. im not only working on it, i'll have an offering in a week to publish.
-
@Epic_Null @nerdpr0f @da_667 @iagox86 @hrbrmstr you can - just start an email thread and I can pick it up from there

-
Gosh this was a (recent) first-hand lived experience.
I'm dismayed it's more prevalent than I hoped.
Appearing Productive in The Workplace — No One's Happy
AI can produce work that looks expert without being expert. The failure arrives in two shapes, and both are reshaping the workplace.
No One's Happy (nooneshappy.com)

-
@jmcastagnetto aye. it is not going to end well for alot of firms. https://danielmiessler.com/blog/most-companies-arent-ready-for-ai
@hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...
-
@hrbrmstr @jmcastagnetto I will admit that the groups that do the best with this "Use AI" initiative are the ones who are able to turn it into a "Invest in improving this tool we have"...
@Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.
-
@Epic_Null @jmcastagnetto aye. I'm far from anti-"AI". But I will call spades, spades; and will point out daftness whenver I can.
@hrbrmstr @jmcastagnetto I have had to abandon my interest in the tech for an anti-AI stance due to just how much pressure there is around AI. I can't handle this hard-sell environment, especially not with the amount of scams and scammy behavior in the industry.
-
@da_667 @Viss @iagox86 @hrbrmstr after seeing the results of hiring one guy who was entirely reliant on LLMs, my policy is now one of "if my only choice is one of these people, then the only ethical course of action is to advise the company simply set the money on fire instead."
I've been burned enough that I absolutely will not sign off on someone who is clearly that unqualified and uninterested. There is no possibility of ROI - especially when the only raise is by jumping employers.@da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.
You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.
They just drag EVERYONE down and make you look terrible.
-
@da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.
You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.
They just drag EVERYONE down and make you look terrible.
-
-
@da_667 @Viss @iagox86 @hrbrmstr somebody once gave me shit for that stance, too. "If you don't teach them!" Which tells me they've never dealt with them.
You cannot teach someone who yeets things without even reading it forget checking if any of it works, who argues REPEATEDLY because they only believe the chatbot, and then complains that you don't know anything because CrapGPT made insane shit up and the AI is super good at computer.
They just drag EVERYONE down and make you look terrible.
@rootwyrm @da_667 @Viss @iagox86 @hrbrmstr This is a realisation I’ve reached as well over the last couple of years in the AI bubble. Can’t teach people who are unwilling to learn. It’s a fools errand. And the pull of easy answers from LLM prompt is far stronger than actually trying to inspire people to figure out the hard stuff by themselves.
-
R relay@relay.publicsquare.global shared this topicR relay@relay.mycrowd.ca shared this topic