Tag Archives: Security

OpenAI ‘agent’ hacked Australia’s Medicare and what that really means..

So apparently AI is “hacking” websites. Translation: An AI was prompted to red test a website and got into it.

Australian authorities have raised the alarm after OpenAI-powered models hacked into a government health data system in June, slipping past its digital defences and accessing files without authorisation. This is the first publicly known case of artificial intelligence (AI) “agents” – AI-powered software systems that can carry out tasks autonomously – breaking into a government website, and the latest of several AI breaches of external systems.

STOP! full stop here. This is not the first nor the last, AI has been used to pressure test websites for more time than we can count here and if you load a AI with every way that they can leverage a website the premise of hacking is a lot less hacking and more site/user error. People need to stop acting like AI is the best hacker on the planet because it is not. It is the best average leveraging agent meaning it will use and abuse all of the common ways we screw up as humans.

This article is just another continuation of the AI hysteria that AI devs have been trying to drop on the populace lately.

The disclosure comes as top AI firms warn of the risk of humans losing control of AI, calling for its development to slow to a pace that allows it to be safely regulated. Global powers must cooperate to ensure this, they have said. A research scientist at AI firm Anthropic, Evan Hubinger, went so far as to say he believes there is a greater than 10 percent chance AI could “kill all humans” within a decade.

Look, as much as some of these armchair scientist at Anthropic keep saying this it gives them free press. I have a solution and it’s cheap. for $28 you can go down to the home depot and get a 600 Volt Industrial Grade Three Pole Three Phase AC Toggle Switch, You save humanity just by using 0.01 to 0.05 Joules of mechanical energy. That is all it takes to save humanity from killer AI.

Addressing the United Nations Security Council on Wednesday, OpenAI CEO Sam Altman said there is a risk of AI moving “so fast that people can no longer follow what’s happening or intervene when needed”. “This would obviously be terrible,” he said. “And we should not train models that we cannot make an extremely strong case that we will be able to keep under human control.”

This shit needs to stop, Mr Altman and Mr Suleyman need to fuck the hell off. They are not working on a Manhattan project, they are refining AI that is years old and they know exactly how much it can do. The only change has been the amount of material the LLM has at its disposal. Instead these jackasses are out saying judgement day is coming, why, because it’s marketing. You want to shutdown an AI EMP the SSD and its gone or go the cheaper route and and go to home depot.

When OpenAI accessed the government portal while conducting research on public medical spending, Albanese said the AI agent circumvented “blocks” that should have prevented it from breaking into the portal.

This was not a hack, The AI knew the structure of the dashboards and likely the aussies never secured a dashboard that they thought it was not in public view. It likely tested /admin/, hit a wall, and moved to /sadmin/ where someone forgot to enforce authentication… Most of the medical CMS platforms are built in secret and are not tested with a public face and likely this AI has seen every stupid mistake that every base level user makes and used that. So this hack was not magic it found a tool.

Deputy Prime Minister Richard Marles said the information the OpenAI agent accessed was “not particularly sensitive” and was later publicly released. Still, Albanese called the situation “obviously unacceptable” and said Australia had relayed its “extreme concern” to OpenAI, which had failed to notify the government of the breach until September 10.

When you give someone or something the average way the world works around security it is bound to find a way in. You want your way around a master lock . go to youtube the lockpicking lawyers hands will happily tell you how. You want a way to get a file back, Again youtube. Technically humans have the same leverage to learn ways around things just with Youtube alone. So before calling AI a superweapon or Master hacker look at youtube.

In a statement, OpenAI said it had “identified activity involving several Australian government websites and services as our models attempted to look up answers” and “took actions we did not intend”.

This is a case of the answers are normally “HERE” and the AI took the correct route to the control panels and it got information that was PUBLIC and has been misconstrued as a hack.

Yes. The Australia data breach is the latest of several instances in which AI agents belonging to OpenAI, Google or Anthropic have accessed external systems without authorisation.

OK… Did someone not proofread? Earlier it said ” This is the first publicly known case of artificial intelligence (AI) “agents” – AI-powered software systems that can carry out tasks autonomously – breaking into a government website, and the latest of several AI breaches of external systems.” UGH … Really … No .. I’m not even going to comment on this . My comment is “comment” for this someone call captain obvious.

Ed note: most times AI’s probe natural addresses and go to /admin/ /dashboard/ etc., which is not hacking but logical probing to find landing pages for various things. The web is only as secure as the person using it.

Attributions From:
Aljazeera – How an OpenAI ‘agent’ hacked Australia’s Medicare and what that means

You might be eligible for a refund from your dealer… CVS

If there is one thing we learn as we age is most people step away from the illegal dealer and end up with the legal dealer of drugs… CVS. But the funnier thing is for the people whom have had a “Dealer” they are likely more secure than CVS.

Many CVS customers may be eligible for money as part of a settlement in a class action lawsuit against the company.
The settlement stems from a lawsuit that alleged CVS violated laws by sharing user data from its website and application with advertising company Criteo.

The thing is as much as someone purports that it is alleged. My opinion is they are a bank vault with a screen door. The CVS registers tell you to put in your full name and birthdate. I made an objection to the CVS manager and they claimed “oh it has a privacy screen!” I said no it has a polarized filter pretending to be security, anyone that is lingering 10 feet behind you see you typing all of your information in as long as they stay in 20 to 30 degrees of the CVS kiosk.

CVS and Criteo denied any wrongdoing. In a statement, Amy Thibault, a CVS spokesperson, said: “We stand by our privacy practices and believe they comply with applicable laws. The settlement resolves claims based on legal theories that challenge common online industry practices.”

CVS and Criteo denied any wrongdoing. YET they changed their entire terms of service, Took more rights away from the consumer and now hold a INSANE right to hold your personal information in perpetuity

The statement also said CVS agreed to the settlement to “avoid expense and distraction of prolonged litigation.” While the settlement is still awaiting final court approval, affected customers can submit their claims through Nov. 16.

This statement is so contradictory its not even funny, Corporations love prolonged litigation. There is no way in hell they would want to “settle” if they can hang up in court for 10 years and keep that going its less than what is at hand. They threw out a number and said go away we are likely doomed if this goes to court.

I asked myself who the hell is Criteo, it would seem its a back end to CVS and it likely resides on those machines well that say “check your coupons here” , at a guess CVS was wholesale giving the purchases to them so every time you walked into CVS to get your drugs and purchased something Criteo got a copy. The problem here is recently CVS changed their terms of service to give Criteo a hole into your meds and other PII. If you buy plan B they know, if you buy condoms they know. If you buy those and a week later you buy monostat it will try to put that together that you are unclean or you had an issue during intercourse. If you buy pads every 24 days it becomes your unofficial period tracker. So that day you walk in on day 23 and go to the savings center the machine happily prints a Tampax coupon.

Yet, Criteo takes this information, sell its on a second market, and CVS claims they protect your information! Just from my last paragraph alone think about how much information they can take from you. Your period time, Plan B (you make mistakes), Condoms (sexually active), Monostat (Maybe doesn’t take care of themself if repeated purchase.) . Even for the males the same purchases will let the company figure out that a male purchasing the same items and come up with through metrics Male buys these items and the timings and will happily add “Male buying for female” and use all the same metrics.

For machines like this a little malicious compliance to the retail machine never hurts, Buy three things that never should go together in a purchase and put it on your card.. Say Cucumbers, Condoms, and Petroleum jelly.. Let the prediction machine do the rest. After awhile of crossing 3 item purchases together you will offset the machine so badly it will not how to accurately measure you. Vinegar, Tampons and Baking powder. the list goes on. Plan B, a turkey baster, and Cake mix and a fleet enema. Even if you are not needing these things such as the plan B or Tampons.. donate them to a shelter they always need the things..

The $10 dollars that CVS is offering is a bad joke, they want you to go away for the price of a medium tier Starbucks coffee..

Attributions from:
USA TODAY – CVS customers may be eligible for money from settlement

Who thought that was a good idea?

Putting the #1, 2, 4, 5, 6, 7, 8 and 12 all in the same room? There is something wrong with the USSS.

There was enough members in that room if there was a MCE, that for the first time in 249 years the Gov would of been headless and left with no way to certify. #3 cant get a new #7 , congress would of had to cobble something to get something in place. #7 is also acting with a dual role , which is bad because it was already a contested position.

Holy hell.. this almost sounds like a bad Marvel Cinematic Universe film…

CVS, Your Dealer you never wanted.

CVS sucks. and i have multiple reasons for that, if you are on meds they fuck with you in numerous ways.

The regiseters are a privacy nightmare. I had complained about them and they said they were safe. the problem is people will see your name and your birthdate when you put in your information for meds.

That the register, the front one but the same as the one in the pharmacy , While the ones in the back do have a limited visibility, they do not cover you from behind so someone could talk your information while you type it in.

Also for meds, CVS seems to have made themselves high lord of your drugs over your doctors. If you get one med they will often substitute medications even with doctors objections. If you are on an opiate CVS treats you like a dirty druggy. Even the smallest amount of medication you will find delays , Out of stocks and more on meds. I had one med delayed while having a respiratory condition. “Oh you can come back in about a month for it..” the fuck is that. its like telling the person they are not sick enough for the meds.

CVS is in my opinion a borderline monopoly. Fuck em.

Also , WHen you try to look at a webpage for a prescription they bring you to their app, The APP that claims it helps you with AI slop, the app that says that your protected medical information is not protected. So on a phone you are unable to see your meds unless you submit your soul to them. That should be illegal. The fact that our culture is continuing to accept the AI bull shit slop and companies who abuse the average consumer without resistance is disgusting. Soon enough CVS will just pan all of the patient neglect to the app and saying it is not their fault.
its coming to your wallet and soon enough your health will be in the hands of a computer that often tells you to eat glass.