lifeisloving

>Prospero is a native GUI application for Windows, macOS, and Linux

But right above this statement, on the Professional Edition purchase page, it says its only for Windows and Mac..

This one is particularly bad, like they probably made $7500 (not much tbh) for p1, atleast spend a few hours to write the blog post.

Lots of panic around these incidents. This is a healing process. Companies who sacraficed on security for a long time are incurring the consequences, they'll adjust their posture or go out of business. In a year I think platforms will be a lot more hardened. Its not because AI is unstoppable, its just revealing holes and the importance of hiring competent people.

(or things will stay messy because people will throw AI at the problems instead of hiring real security professionals)

The sky isn't falling.

So is any other hypothesis about why Claude can RE now... You just want to default to some worldview where AI isn't being gamed for certain outcomes, and is some evolving intelligent thing.

Thanks for the very thought provoking reply tho!!!!!!!!!!!

It can clone photoshop.. Have you considered why?

The ability to clean room Adobe products came at about the same time Claude's RE abilities suddenly improved.. Hmm lets think about this a little more.

Anthropic sucked the bones dry of the public domain, literature and all of opensource. It seems likely that Anthropic RL'd Claude into being a great reverse engineer because it needed more training data.

I believe that Anthropic turned Claude into a digital software shredder and started decomping proprietary code, like adobes.

So the reason Claude can suddenly clean room Photoshop isnt because it became a more capable programmer, but rather, the Adobe code is literally in its training data now.

Ciscos internal legacy code is not going to be in Claude's data (yet).

The decision to increase Claudes ability to RE is brilliant, because now everyone is doing the source code decomp for them, and sending them fresh data from previously closed source repositories of code.

Its really not that hard to secure your servers, especially if your not a high value target. If you are a high value target, you should have security professionals on staff.

I dont think my security posture is all that much different than it was last year. Use a Secret Manager and or encryption, have backups, strong firewall rules, use canaries of some kind.

If anything llms are making security worse because there's more people offloading their thinking on llms, or people that skipped some steps in their learning journey because they just ask the llm to do everything. I dont think its necessarily because attackers have llms now, but that contributes.

Edit:

Damn Im getting mega downvoted for saying this. So are people of just at a consensus that there's nothing you can do? That we're in security armagedon???

Have you ever thought to consider that security took hit along with the general degradation of software because of AI??

I dont know a single person who uses this tool (but im sure there are some) our annual subs recently ran out, I hadnt used mine in 6 months, we did not renew.

Elon did the typical boomer tech guy thing when they interact with any slightly impressive AI tool.. Lose their fkn mind and spend tons of money on it. He just took it to another level..

Its like those tech boomers that got obsessed with openclaw and instantly started spending 20k a month on a thing that read their calender outloud to them.

Thats the only site Ive encountered issues. Im okay with that. I dont think they just let anyone edit anymore anyways.

Ive been hearing the same cope since 2016, bud. Its so tiring.

Im not saying its for everyone, its definately not for normies like yourself

Ive had more money stolen, and not refunded in traditional bank accounts (thousands) than Ive ever had stolen in crypto (none).

Okay I'll conceed there, but I dont think my rule applies to businesses that were already slop factories pre-ai.

Been told this every bear market since 2017. Who said I dont have own the S&P?

Why, because you read a single Youtube title that said ledger got hacked, that you didn't even watch and dont know the specifics?

Sorry, the likelihood of my banking creds, or other important accts getting hijacked via an infostealer or some other method is about 100x more likley than me buying a tampered ledger device.

A hardware supply chain attack is easily mitigated by inspecting your hardware and buying from a reputable source and not a singular random malaysian shopify site selling hardware wallets...

Whats an example of a company, that existed pre-AI that has so far failed to take advantage of AI and has fallen behind?

I see a ton of examples of companies overusing AI and destroying their brand/image and products, but not many who abstained and are hurting. Using AI does not give you automatic wins, and using it solely because its available does not make you competent.

There's a lot of people on this site who think successful tech execs and founders should be able to do whatever they want to anyone and their communities. They all think they'll become one soon enough, so they're protecting their imaginary class interests.

They're sheep being herded by tech billionaires, who've gotten them to think they're pets and that they definately won't slaughter the second they're hungry.