

Damn that AI is verbose and boring, a high ‘this AI takeover could have been a skeet’.
(Also doubt a lot of people would notice as in my exp where a computer has an unexpected popup the first thing people do is try to close that thing with as little reading as possible. (Yes, parents, the message you kept ignoring for 2 weeks, which you didn’t tell me about was the operating system telling you the computer was having trouble, I can’t help you fix the problem after it totally stops working)).

The php exploit might not have been a big deal.
“I don’t think this PHP vulnerability is that exploitable. I think that 5 years ago people would’ve understood this, but now people are being deluded by their LLMs telling them they have an exploit when they don’t.”
I expect that we will see this a lot, as it turns out most of the exploits generated are not working, not new, or not a big deal. I also expect this to cause more burnout among cybersecurity people, and that people will autogen ‘fixes’ which will be lower quality than the bugs, and massively increase attack surface. (Heard one php fix was 12k lines of code).
My suggestion is to have offline backups and move a lot of your important stuff out of the cloud (or get backups of those). But you should do both anyway.
E: I saw the EFF fear mongering with ‘25% of all exploits found ever were found this October, secure yourself’ and looking at how stuff is still up everywhere, compared to 25 years ago, and I them I realized this is all critihype again.
E2: not a lone voice https://blog.luitjes.it/posts/i-want-my-wednesday-back/
(Cloudflare did say they saw exploits however. Not sure if those were real or ‘attempts at’ or just marketing).
E3: don’t let your takeway from this that we shouldn’t do emergency patching and stuff like everybody did last week btw.