When we see a breach of AWS or GCP or leading banks, basically any org that has good security, I'll believe technical security is impossible.
replyOtherwise, I think this is a issue of vendors, even if potentially most vendors fit into the basket of having insufficiently good cyber posture in AI-era.
Isn't Linode pretty darn close? IaaS/PaaS provider. Sure it's not one of the Big Three but that is it's role.
replyThere is zero reason to suggest security is impossible. This is like musing "what if architecture is technically impossible" after the nth bridge collapse in the 1800s~early 1900s. At some point we take it seriously as a society. Until then, bridges will collapse out of choice to pursue short-term profit above all else.
replythere is hypothetically impossible and practically impossible
replyif AI tools get good enough that they can exploit ingrained hardware properties such as subtle timing and race conditions and swarms off them become cheap enough to deploy so that they can persistently exploit low probability events we could reach a state where I think it's actually practically impossible.
Then we will simply make better hardware too. There is nothing impossible about that, it's simply not something that has been prioritized amidst a culture of shortcut-taking. So far, this culture has been predicated on gambling that the one taking the shortcut will not be the one paying the consequences when the toll eventually comes due. If immediate exploitation of flaws becomes a certainty, the behavior will correct itself.
reply> There is zero reason to suggest security is impossible.
replyOne reason: There is zero reason to suggest security is possible.
> Presumably it means much more behavioral security and inherent friction built in to everything we do.
replyIronic, after decades of defrictioning.