一位技术工作者在评论文章中指出,当前AI行业存在严重的失焦问题,尽管AI公司投入巨资参与漏洞研究项目并发现了数千个新漏洞,但这些努力并未真正提升整体安全水平1。作者认为,真正的瓶颈并非漏洞发现本身,而在于补丁的实际部署1。他主张将这些工程资源转向基础防御工作,包括资产清单建立、自动化更新和攻击面枚举等更具实际价值的领域1。
该评论还指出AI广泛应用带来的多重问题1。在环境层面,AI公司面临巨大的环保成本压力,需要消耗大量水、能源以及以化石燃料驱动的数据中心资源1。在技能层面,AI在安全工作流中的循环应用——用AI发现漏洞、生成补丁、审查代码——导致代码库变得不透明,最终造成组织整体理解力下降和人员去技能化1。
A technology professional has published a scathing critique of the artificial intelligence industry, arguing that current priorities are fundamentally misguided despite massive capital investment.1 The author contends that while AI companies have poured engineering resources into vulnerability research programs that have uncovered thousands of new flaws, this effort has failed to meaningfully improve overall security because the true bottleneck lies not in bug discovery but in patch deployment.1
The commentary highlights a systemic disconnect in how the industry allocates resources to address cybersecurity challenges.1 Rather than focusing on vulnerability detection through AI systems, the author argues that capital and engineering talent should be redirected toward foundational defensive practices such as comprehensive asset inventories, automated update mechanisms, and systematic attack surface enumeration.1 The thousands of newly discovered vulnerabilities remain largely irrelevant, the author suggests, so long as organizations struggle with the practical implementation of security patches.1
Beyond security concerns, the critic raises broader objections to the industry's trajectory.1 The widespread deployment of AI systems has created a concerning cycle of opacity—using artificial intelligence to identify vulnerabilities, generate patches, and review code—that has eroded organizational understanding and deskilled technical personnel.1 Additionally, the author emphasizes the significant environmental cost of AI infrastructure, which demands substantial quantities of water and energy, heavily reliant on fossil fuel-powered data centers.1 These combined concerns suggest, in the author's view, that the industry has lost sight of practical priorities and ethical considerations in pursuit of technological novelty.1
评论
还没有评论,欢迎留下第一条。