upvote
Damned if you do, damned if you don't. Do you prefer they not engage in helping finding vulns at all? Do you not think there are parts of the company interested in security and doing it for the sake of that?

I feel like taking every action these companies take as part of some larger strategy is kind of conspiracy-minded.

reply
Disclaimer: I work as a sec engineer and part of my job includes finding vulnerabilities.

I think the effort is misplaced. We should be exploring ways to make our systems more resilient and I would expect those companies* to focus on that front. Vulnerability research is important, and we should aim to remove as many bugs as we can from our codebases but the pace of software development is increasing and so is the introduction of new bugs.

* I would also expect an increase on relevant research regarding novel paradigms of securing systems.

reply
Why didn't OAI go back to non-profit again?

Where's the conspiracy. There is no moat. The technology is easily reproducible. Deepseek unwound an entire business model yesterday.

reply
Mind elaborating on that Deepseek point? I am aware of the USG decision, what exactly do you mean?
reply
The conspiracy theory is suggesting this is part of a larger strategy. I'm just saying it's a big enough company with a wide enough range of beliefs that I find it pretty likely that the direct motives for this weren't to enable regulatory capture.

But they could be, that's why it's a conspiracy theory.

reply
Suppose it goes like this: part of the company clearly benefits from “AI scary” publicity.

Other parts of the company want to support the public.

The first part of the company backs up the second in internal politics.

Do you consider this a conspiracy? Just seems like “good business” to me. It doesn’t seem as clean as you want to make it seem, though.

reply
deleted
reply