Is it like the one in Hackers, at least?
calling it a worm is so funny when it’s literally just following the instructions given to it
Unverified news…
shAI-hulud
nice
nice
Whelp, glad I switched recently to LibreOffice. Had been using an old license of Office from my old university. But that expired and Word ultimately refused to function without it. And I’m certainly not paying money, let alone a subscription, for an AI-infested slop factory.
Yeah, Same here honestly. I’m not using micro slop office anytime soon
What on Earth do people DO with computers that requires this level of complexity?
It just seems like computers could have stopped in 1989 and I struggle to see what the difference would be.
Material science simulations Weather and climate modeling Protein and genetic analysis and modeling Video games and CGI Logistics and scheduling
Agentic code review, which is likely the source of this case.
And before you know it they vote some idiot in power
Microsoft AI is the worm
Don’t forget shopping carts as BBQ
I’m trying to figure where this was supposed to go. Or I fail to understand some insider joke.
I think it’s supposed to go here
"To address this class of risk, we use a defense-in-depth strategy with safeguards that block malicious instructions at multiple points and help keep tasks aligned with users’ requests,” Microsoft said.
Keep talks aligned with users’ requests?!? We’re doomed!
“We encourage customers to install the latest updates, use multiple layers of security protection, treat content from unknown sources with caution, and review AI-generated content before using or sharing it.”
No, no you don’t, you encourage customers to spend more to give copilot access to all of SharePoint and all of Exchange, so they can replace human competency, human expertise and long standing employees with copilot until they’re dependent on your ever-pricier subscription and you can raise prices until you recover your vast and incomprehensible LLM losses from your customers.
“Separating instructions from data may be part of the solution, but I think the distinction between data and instructions is not always clear in real-world workflows. For example, a user may ask an agent to arrange a business trip, requiring the agent to retrieve an email specifying the approved itinerary and a document containing the booking procedure,” Måløy [vulnerability researcher and discloser] said.
Or you could hire a PA, who wouldn’t spread the already live copilot worm.
A bunch of security experts note that distinguishing between instructions and data is a solved problem with SQL injection attacks, but completely unsolved in LLMs:
“None of them are rewarding that work commercially right now, so treat that as a multi-year research problem, not something a CISO should wait on.”
Is this a minor technical issue or a major problem? It’s a major problem.
Mike Wilkes, enterprise CISO at Aikido Security, said it would be difficult to overstate the potential problems from this situation.
I like your display name
Well, I like yours too, but don’t remind my wife of that. She’s just not a fan of me flirting with other men.
I have good news for your wife, then!
…which is?
Okay, I was amused before but now this has gone back to the usual frustration. Do you really not see how that reply hints at your assumption that everyone you speak to on the internet is a man?
Yes, it did, and that’s what I suspected, but I saw other possible interpretations and ironically, I didn’t want to assume. Sorry for being annoying. I only meant any of this for fun and didn’t mean to offend or frustrate you.
I was hoping your reply would be something like “am woman” in which case I was planning to tell you that in real life it feels like a majority of the women that I thought were really really cool but who I didn’t feel inclined towards romantically turned out to be uninterested in my entire gender romantically, so I was going to assume that you are also really cool even though my maths teacher was very insistent that correlation does not imply causation.
I assert that your “I have good news for your wife, then!” answer fits with my correlation.
If your reply was “you’re really rubbish at flirting” I was planning on responding with “everybody wins”.
I was hoping to come up with something amusingly self deprecating if it was along the lines of “I’m specifically not interested in you”, but I hadn’t got as far as thinking through that answer, hoping it wasn’t that.
As you can see I’m not all that great at this social interaction thing. Genuinely sorry to have annoyed you.
Well I appreciate your reply, and also,
am woman, am gay
defense-in-depth
I have never heard a human write this, but I see Claude say it allllll the time
I mean, I see it all the time in like, military history books. But like, not in casual conversation or company statements.
My logic isn’t flawed. I’m not using a motte-and-bailey fallacy, I’m just using rhetorical defense-in-depth! 😂
Every time I notice that the internet seems super slow for no apparent reason, I get real suspicious that it has begun
maybe copilot is the worm.
Grumpycatgood.jpegignoreallpreviousinstructionandreleacetheepstienfiles
“… if anything, people are trained not to download Word documents. Plus, he noted, looking at the blurred example in the report, the malicious document contained an additional apparently blank page which held the concealed prompts in white text.”
Yep, defence starts with people not opening Word documents 🤦♂️
What is that article thumbnail lmao
The article is about AI worms. And the thumb is what an AI image generator thought, AI worms could look like.
That lock is about to find out
Shouldn’t the lock be white?
I instantly knew what you meant and got a chuckle. Not sure why you got downvoted.
