Yann LeCun评论一篇关于Mythos的实用文章，讨论AI攻击与补丁应对
Finally a semi-useful read on Mythos that is free of myth and talks about what this means more practically (not this is the end of the world as we know it, but how do we deal with faster patches and attacks from AI as other models scale to chained exploits)?
This is the kind of conversation we need, not idiotic ones about the end of all software.
We need "what is the right answer?" because these models are coming and will get better so how to we put our heads together and make better/more secure software across the world?
And it can't just be patching the 100 or so projects that got access to Project Glasswing.
That is not gonna help the world.
We need to figure out how does everyone else who is not part of the special chosen people to get blessed with access to test and patch their stuff, aka the open source projects and closed software that is not Office or Cloudflare but the 99.99% of software that runs everything else in the world?
What is the right loop cycle to help people patch and fix things at the source?
In the long run, AI will make software more secure, not less.
But it will change how teams have to work to get there.
Figuring that out means putting it in more team's hands sooner rather than later.
This is the kind of conversation we need, not idiotic ones about the end of all software.
We need "what is the right answer?" because these models are coming and will get better so how to we put our heads together and make better/more secure software across the world?
And it can't just be patching the 100 or so projects that got access to Project Glasswing.
That is not gonna help the world.
We need to figure out how does everyone else who is not part of the special chosen people to get blessed with access to test and patch their stuff, aka the open source projects and closed software that is not Office or Cloudflare but the 99.99% of software that runs everything else in the world?
What is the right loop cycle to help people patch and fix things at the source?
In the long run, AI will make software more secure, not less.
But it will change how teams have to work to get there.
Figuring that out means putting it in more team's hands sooner rather than later.