A swarm of AI agents will just grind that down, target/blackmail multiple users at the same time to loosen up security as they will have identified all the vulnerabilities.
Prove it.
Swarm is the new thought terminating cliche to come out of Open Anthropic labs to try and force the government to stifle competition.
If 20 people suddenly request PIM elevation thats more likely to lead to a general halt than if it was only 1.
"Identified all the vulnerabilities"
Doesnt really matter. Assuming its even true, which is unlikely, even if they have 3 novel vulnerabilities for your environment, Security is not predicated on software working perfectly all the time. You implement multiple, overlapping security controls. Nothing modifies your firewall config without tripping an alert, no one dirwalks your website without your waf firing off an alert. Nothing modifies your config files, docker images, registries anything without firing off an alert. Your docker containers are running rootless anyway. There's no horizontal movement in your environment except for the explicit application ports. Everything is centrally logged. By the time the LLM is creeping about an OS you have the environment forensically isolated and you are updating your waf config to block/ban any successful strings while you wait for vulns to be patched.
Of course, not everyones running best practice security, but if you build it right you have nothing to worry about. Because you are already not placing a mountain of trust on your software being invulnerable.
(That's not even mentioning the swiss-cheese OSes are in general due to kernel that are way too permissive).
If it can say hello to an OS without tripping 3 alarms you are doing it wrong obviously.
I'm afraid the base problem is that people have limited computation versus a digital LLM that doesn't as long as it has enough resources.
You are assuming infinite computation? Lmao. That shits expensive. No, Security has basically been solved so you do all the work ahead of time. Its Asymmetric, but not in the favour of the expensive LLM.
Comments
Prove it.
Swarm is the new thought terminating cliche to come out of Open Anthropic labs to try and force the government to stifle competition.
If 20 people suddenly request PIM elevation thats more likely to lead to a general halt than if it was only 1.
"Identified all the vulnerabilities"
Doesnt really matter. Assuming its even true, which is unlikely, even if they have 3 novel vulnerabilities for your environment, Security is not predicated on software working perfectly all the time. You implement multiple, overlapping security controls. Nothing modifies your firewall config without tripping an alert, no one dirwalks your website without your waf firing off an alert. Nothing modifies your config files, docker images, registries anything without firing off an alert. Your docker containers are running rootless anyway. There's no horizontal movement in your environment except for the explicit application ports. Everything is centrally logged. By the time the LLM is creeping about an OS you have the environment forensically isolated and you are updating your waf config to block/ban any successful strings while you wait for vulns to be patched.
Of course, not everyones running best practice security, but if you build it right you have nothing to worry about. Because you are already not placing a mountain of trust on your software being invulnerable.
If it can say hello to an OS without tripping 3 alarms you are doing it wrong obviously.
You are assuming infinite computation? Lmao. That shits expensive. No, Security has basically been solved so you do all the work ahead of time. Its Asymmetric, but not in the favour of the expensive LLM.