Post
“why not just take the site down to make updates instead of using ai” there was no official patch for old versions because even the the latest version fix took a long time. the company that broke the disclosure embargo even said “It really did take them months to build a real, working patch for it.”
when it comes to mitigating abuse online, you have to meet the match of the abusers at their tooling and that tooling today is ai. ‘All it took was a “basic prompt of ‘find bad vulnerabilities in PHP,’” Lorenc wrote in a subsequent LinkedIn post.”
3 reposts35 likes
people should be challenging ai use! it’s understandable that they are pissed, they likely don’t have all the context/info needed to work nuance into their framework for addressing ai usage around them. they are not the bad guys, nor are IA. the people attacking sites knowing this vulnerability are.