@schroeder you’re a ciso, right?

Our conversation reminded me that at my work, our ciso banned the use of GenAI for many things… which IMO isn’t a bad decision.

Sorry to bother you

@security_paranoid that's right

Any technology, any opportunity, comes with a risk that needs to be managed. The problem I have is not with the quality of AI, but rather that AI is being added to things willy-nilly without the possibility of a risk assessment before it's in my user's hands.

I love GenAI. I use it every day and it helps me be a better CISO. But I use it in a particular way. It's my intern. I can give it grunt tasks and it produces a passable result that I can then improve. It saves me a ton of time and offers perspectives that I've forgotten or hadn't considered. But I would never copy/paste its output anywhere. Just as I wouldn't copy/paste an interns work into a production document.

@schroeder that’s a good way to think about it, an intern.

AI can be safe, and can be useful if it’s used safely, but the user must always make the final decision(s).

Being a ciso must be hard work!

@security_paranoid this year we won't do much, finances are a bit tight... we moved to our house, the week before moving our car blew the engine and got totaled, my FIL had an stroke mid November and we had to travel there in short notice, our new used car had bad tires because we just bought it and we had to buy new ones during the trip... so it was a rough half of year.

but we told the kids that next year probably will be better... we don't even have a xmas tree, there were so many things happening at once we forgot to buy one... our last tree was a bit old, and we left it behind during the move.

I clicked the unsubscribe link on an email sent to me because someone signed up for some service using my email instead of their own. It was not a confirmation email. The unsubscribe link was a magic link ...

It logged me in to the guy's account. I have all the info he entered into his profile.

The kicker? The service was a cyber ID Theft protection service...

"We have met the enemy. And he is us ..."

Sometimes I want to change careers. Being a plumber sounds nice.