Post by @GossiTheDog@cyberplace.social

@GossiTheDog@cyberplace.social 13 hours ago

RE: https://mastodon.social/@404mediaco/116908074107231828

Anybody who has worked in IT support in the trenches in enterprise IT will tell you there are some Excel power users who basically run the company, are macros wizards and actual ninjas.. about 0.1% of the workforce. About 99% of people can’t align a table in Word.

Giving the 99% of people tools which cost $$$ per user a month and letting them do anything is like giving a child a car, and being surprised when they ram the car into a wall three days later and cost $10k after achieving nothing.

404 Media

@404mediaco@mastodon.social 14 hours ago

“Crazy, we go from no more [AI] leaderboard to actual usage limits in two weeks,” one Amazon employee said in a reply on Slack.

https://www.404media.co/companies-are-throttling-employees-ai-use-because-its-too-expensive/

Kevin Beaumont

@GossiTheDog@cyberplace.social 13 hours ago

I’m really serious about this one btw. Companies have no measurable way of knowing what employees are doing with GenAI. They’re giving Claude Code out like it’s candy and just presuming everybody is an IT power user. They aren’t. They’re converting PDFs and vibe coding garden planning tools.

Copilot M365 has a fake dashboard showing how productive people are.. it has no actual data. It just shows people use it. It’s CIO porn for the CEO. Orgs are pissing money up a wall worldwide.

Mark Bryant

@Spartan_1986@infosec.exchange 11 hours ago

@GossiTheDog And then there is the non-monetary costs. We recently completed our first penetration test against Copilot in my corp and to say we found a lot of secret and confidential stuff out there just for the prompting is an understatement. The company totally believed Microsoft when they said everything would be safe guarded, yet I personally found a document with every marketing service account name and password. Vender contracts, company secrets, legal documents: we found it all. Copilot in a corporate environment is the single largest amplifier of poor IAM configurations. It is the largest insider threat I’ve ever seen.

Kevin Beaumont

@GossiTheDog@cyberplace.social 13 hours ago

This isn’t, btw, a Kevin Doesn’t Use AI rant. I use GenAI extensively for various testing things. I had access to Mythos before almost everybody. I pay for Copilot Pro+. I pay for Gemini. I AI generate terrible songs. I vibecode security scanners. My personal spend exceeds £500 this month to date.

Do I think you should make every employee depend on these third party GenAI tools for their job? No. Its ridiculous. You’re also *locked in* to costs you can’t afford which *will rise*. It’s a cliff.

Kevin Beaumont

@GossiTheDog@cyberplace.social 13 hours ago

In an era where companies need to become more efficient and diverse they’ve basically picked the least efficient way to do it, with the biggest risks and highest costs - because everybody else is doing it.

I know somebody at one of the big 4 who has written something in Claude that prompts Claude each twenty minutes for a question, then feeds Claude’s question back into Claude to use their tokens - because token usage is factored into employee evaluations. What are we even doing.