Post #4167696

2026-07-28 12:34 UTC

@buherator@infosec.place @drwhax@infosec.exchange Yup same. It's what we do at $dayjob to motivated customers, partially. I'm waiting for a cohort to realize that, if nobody does anything, nobody will look too bad. And yup. It's all a bit fuked up. :3

Replies (1)

@mweiss@infosec.exchange 2026-07-28 15:48

@ljrk@todon.eu @buherator@infosec.place @drwhax@infosec.exchange Part of the source of this is the lawyers. In business, companies are typically shielded from liability if they follow "standard and customary business practices". So if "everyone else" is doing it that way, you can too without taking on the liability. Of course, that takes you only so far. If your business is unable to function for two months, legal liability may well be the least of your concerns. But the problem with that threat is that it's a gray rhino risk. Those are really really hard to get businesses to spend on mitigating. For better or worse, LLM-based attacks may remove most of the gray from those risks and reduce the resistance to mitigation.

Open ##4167695