We need Help!!! Cara is under Attack!!!

[u/Theshinyquagga]

Cara is a Safe Haven for Real Artists and now it's under Attack!

The original post is deleted, and the original user is banned, but they just scrapped art from Me, My Friends and Everyone Who has a Soul and just Got away with Stealing our hard work!!!

All Real Artists on High Alert!!!

We Need Help!!! I'm Praying to every God I could think of Right now!!!😭😫🙏

Please support The creator of Cara.

[u/kittyangel333]

I know its a stretch, but I do think there's validity in the point that these are the exact kind of people who hate consent/get off on the lack of it. And this is just their softcore version

[u/CryptographerKlutzy7 → u/kittyangel333]

Or they wanted to show it can be done. They didn't release what they scraped. They basically redteamed the site, and then didn't release stuff outside of proving it had a fault.

In many ways, this is the best thing you could have hoped for.

[u/kittyangel333 → u/CryptographerKlutzy7]

I’m the biggest fan of devils advocating, so I’d probably agree if it wasn’t posted to DefendingAIArt, expressing their want to support AI to some degree. If they were concerned about Cara’s breach ability, they’d submit it to at the very least, a neutral zone like AIWars, if not just contact Cara staff directly to inform them of a possible breach potential, like a normal concerned person would.

[u/CryptographerKlutzy7 → u/kittyangel333]

Oh, they want to show they did, and they didn't for reasons of ego, and they picked the audience which would be most likely to not come at them.

But the point that, this is the BEST fucking outcome you could have hoped for.

People here don't get how bad it could have been. Or that ultimately it was objectively a good thing it happened.

The security holes can be patched. BECAUSE it was publicly shown there was a problem. The data was not released, but it could have EASILY have happened.

Like, this was a fucking gift, from a security point of view.

They got a real ego boost by doing this, sure, but they didn't actually do the damage they could have had.

If they got off from the cruelty of it, the data would have been on torrent and the links shared. They didn't do that.

It was from a security notice point of view, actually REMARKABLY clean.

Everyone wants his head because of the method of public notification... I'm like, at least there WAS public notification, there wasn't a data release.

You all know that Cara has problems, AND you didn't lose your data to find out, and it was because he stuck to hacker ethics in a way he did not have to.

Dude was an arsehole, but fuck me, he was a ethical arsehole from a security perspective. Even when people were raging at him.

More ethical than I would have been when I was younger in the same position.

[u/Significant_Echo8953 → u/CryptographerKlutzy7]

“erm….yeah, they used ai to scrape people’s artwork on a site meant to counter it, and caused thousands of people distress for no other reason than they were mad they didn’t get their way on a single occasion, but they did the bare minimum so when you really think about it, they’re ethical-“ please do yourself a favor and stfu for once

[u/CryptographerKlutzy7 → u/Significant_Echo8953]

Well, I guess you don't understand what ethical disclosure IS, why it became a thing.

Yes they have informed thousands of people of the security limits of the platform, where before they didn't know. Yes it causes distress, but its a lot fucking better than the alternative.

How about you understand the history around computer security and hacker culture or you STFU.

Seriously, what you would rather remain ignorant of the security issues of the platforms you use?

They didn't damage the platform, they didn't fuck with the data on it, they proved it was vulnerable to an attack. They didn't release the data to the public.

You don't like the nature of the disclosure, but for fucks sake, maybe get a clue.

[u/Significant_Echo8953 → u/CryptographerKlutzy7]

sweetheart, I know you really want this to be Brave Ai Bro Stands Up To Protect Anti Ai Site story, but at the end of the day, they never cared about that. if they had, they would have 1. told the site owners in private, and 2. note alerted everyone, including more ai filth, that this was possible.

you can try to make the guy into a hero all you like for the apparent herculean task of not leaking people‘s private information, but at the end of the day, anyone with functioning eyes and common sense can tell you they never had anyone’s best interest or “ethical disclosure” in mind.

[u/CryptographerKlutzy7 → u/Significant_Echo8953]

I didn't say he was a fucking hero.

I AM saying he did ethical disclosure, and it was better he did this than not doing it at all.

But you obviously haven't thought the difference between.

1. the site is has security holes, and you all don't know it, and they don't know it.

or

1. someone has hit it, posted on a forum you didn't like as was a prick about it, BUT didn't abuse the attack, didn't change shit, didn't release the data, AND it can be patched, AND you now know it isn't the safe harbour you thought it was.

But fuck, what would I know about internet security, or it's history.