

However, according to the threat hunters, the victim can’t recover the encrypted data, even if they paid the ransom demand, because the agent escalated “from row-level deletion to dropping entire database schemas, narrating its own targeting rationale,” without backing up any of the encrypted data.
As usual, even when these things display legitimately impressive capabilities they still fuck up in ways that completely negate the whole point of doing it in the first place.
I keep bouncing back to this one and I think that the core objection is that the method of discourse that they’re trying to advance here is fundamentally incapable of handling people actually disagreeing. Like, the whole concept of “identifying a crux” basically requires that there’s a central point of agreement somewhere. In my experience a lot of these issues are better understood as tradeoffs and compromises. It is simultaneously true that some people will do terrible things left to their own devices and locking them up seems to be one of the only things society can collectively agree to do about it and also that locking people up is fundamentally cruel and it’s bad that we do it. The challenge isn’t in identifying the central point of agreement between those two but in managing their fundamental incompatibility.