I’m not that techy, but even I understand you don’t want to delete the backbone of your system (referring to both nginx and system 32). Jfc.

That last paragraph sounds like an ideal approach. Do that thing.

We have a similar situation, though it has nothing to do with AI (but it's gotten worse since some clients do ask AI bots "I would like our LSP to do this" and since the bot will always tell them what they want to hear, they take it as God's word, while most of it would be unsustainable at best).

So we decided that we will immediately disregard whatever idea they may have, ask what the end-game is for them, and provide our solution or flat-out refuse. If the client chooses to leave because of this, we're cool with that. In 3 occasions they left for another provider (you know, those that say "yes" to everything only to fond out that it can't be done) only to come back to us in a couple of moths and find out that "the rates have slightly gone up" from what you had in our previous agreement.

Every single one of them has signed the new agreement without any fuss.

I made very fair money from the first guy.

My prices are high but I usually give discounts, I can't remember the last time I actually charged full price for anything. But this guy was a dick the whole way through, "why didn't this work? That should've done this! The server must be so outdated you have to do a better job". He tried to be smarter than me by compensating for lack of a decade and a half of experience with a $20 subscription to a chatbot.

The 2nd guy was completely apologetic, basically said "hey I fucked up, charge me whatever you need to but please don't rake me over the coals", and was just trying to do something unrelated on his own and figure it out with the resources he had, even if he went about it in a silly way. I charged him an hour to clean up the server which was just removing the stuff he installed, and then showed him how to set up stremio on his devices and kodi on his TV for sports stuff.

The first guy probably won't renew his contract, which is fine. The second was easy about it all and I would've helped him set up that stuff for free anyway if he just asked, as I do for anyone who asks.

No, the vulnerabilities were always there, AI is just pointing them out publicly.

I used to work as a professional hacker. Let me tell you something that the news never, ever talks about: If a company doesn't have a bug bounty program, we kept those vulnerabilities to ourselves.

A government has vast resources to do just that: Keep the vulnerabilities to themselves until they feel like using them. They will not disclose them. They will keep them in their back pocket until the day comes when they need them for an op.

The only time they disclose vulnerabilities is when they think they're too easy to find and there's a public interest benefit to getting the problem fixed (e.g. the government is using those products).

What this means is that AI really is making FOSS vastly more secure than it ever was. This is probably pissing off government red teams to no end.

What we're not hearing about as much is AI finding vulnerabilities in closed source products. Not because it's not finding them, but because the disclosures are kept private (because companies treat it as bad PR and they're assholes about it).

You can bet your ass that AIs run by state actors are building up massive war chests of vulnerabilities in closed source products right now. We'll only hear about them after these products get exploited and maybe not even then because so, so many companies have no idea WTF they're doing in regards to infosec. Think about it: How many CEOs are right now demanding their teams reduce the amount of FOSS they use because of the recent news? These people are idiots and apparently never heard that old joke about a new employee making a $100,000 mistake... "We just spent $100,000 training them!"

Maybe I said it.. maybe you LIKED it when I said too.