this post was submitted on 13 Aug 2026
196 points (99.5% liked)
Technology
87279 readers
2468 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 3 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Can anyone who works in the security space tell me if we are as cooked as I think we are?
With ai I'm assuming any script kiddie with motivation has access to a SIGNIFICANTLY larger surface area of attacks. And sometimes I do stupid things like wait an extra few days before updating my pc/software.
I have this suspicion that everything digital is far more vulnerable now than it ever was. But I have only surface level knowledge in the space. Is it as bleak as I think?
Not really, lot of this is hyped up sales bullshit. The reality is that security software has been getting better and better. It's not this ecosystem of "that matches this hash or IP" anymore. For the last decade ML has been used heavily. It doesn't look for just the stuff it knows is bad, it looks for things that are out of place.
End of the day...you can't fix everything and you can't fix your users...but the script kiddies aren't what to worry about, it's the large gov backed groups. Those have always been the problem.
Possible IT attacks are so sophisticated, that for example rowvolt uses out of os processor voltage regulation to target specific AES cycles to produce errors so the initial password can be decoded. Row Hammer is an attack where by hammering ram spaces with random numbers you can do electric but flips in adjacent ram transistors wich make the system write Infos in wrong address spaces. Both attacks are physical attacks on hardware through software and impossible to defend against. However the in nature attacks are mostly social profiling and not software related. Software related attacks are seldom in the wild. Even the attack here is basically a social engineering attack because ppl installed Maleware on their systems by their own accord.
Info
This looks pretty bad