Posted by bluehatbrit 2 hours ago
They aren’t hiding behind industry best practices or a solid liability punting contract
There saying the best practices should change, apologizing, and changing their own behavior
Take notes
How was this ever okay pre AI? It seems just as bad.
It was 5-10% less bad before. It didn't undergo a major shift.
Sure the AI can translate “exploit this” into an exploit but that doesn’t change anything at a fundamental level.
You can't blame a hammer hurting a user when they were being stupid, but if the default configuration of the hammer is to be made of a material that can bounce back with force and stick in the users forehead then some reengineering may be needed.
That's what this article is about. Better configurations and defense in depth. This is actually a wonderful position for the company to think about and take.
But the people with the actual desire and understanding aren't using the defaults anyway. And the people who don't want to understand will just turn things off and "just get it working."
The only way out of this is extreme accountability and intentional design from person implementing the technology.
It was always the prize. It wasn't okay then either.
Please, when commenting on HN, don't use AI to write your comments. You can afford to help keep this a human-centric place.