{"id":612,"date":"2026-07-07T08:14:42","date_gmt":"2026-07-07T07:14:42","guid":{"rendered":"https:\/\/cyberphil.azurewebsites.net\/?p=612"},"modified":"2026-07-07T08:59:05","modified_gmt":"2026-07-07T07:59:05","slug":"mind-your-ai-ps-and-qs-it-might-be-peaky-blinder","status":"publish","type":"post","link":"https:\/\/www.cyberphil.co.uk\/?p=612","title":{"rendered":"Mind Your AI P\u2019s and Q\u2019s \u2013 it might be a Peaky Blinder!"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">How many of us say please and thank you when using a GenAI chat application?&nbsp; For some strange reason \u2013 I have always said please but rarely say thank you (to an AI).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Let me know if you do as I am generally interested in how we chat to our chatbots!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The cold reality is that the AI doesn\u2019t care as you can\u2019t hurt its feelings and it doesn\u2019t take things to heart and treat you any differently.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">That\u2019s because it doesn\u2019t feel anything and has no heart or soul.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">However, in a project I am currently working on \u2013 I used AI (CoPilot) to generate some stylised graphics of some security concepts that I wanted to use in a PowerPoint presentation for an upcoming webinar.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some of the concepts are quite niche and I was expecting to spend some time in re-engineering my prompts to get the end result I was looking for \u2013 but to my relief it produced a set of results which at first glance looked perfect for my needs and the last image it created, exceeded my expectations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This was largely because it was using the context of the previous inputs to formulate an output based on the subject matter I was working on.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So \u2013 I typed \u201cthank you\u201d to it because I was so happy with the results!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It\u2019s response to my thanks was:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cYou&#8217;re very welcome, Phil.\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cThat last image actually works surprisingly well as a visual metaphor for AI and cybersecurity programmes\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cThe images you&#8217;ve built so far would actually make a compelling presentation sequence:\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cThose three together tell a very coherent story for boards, senior leaders and technical teams alike.\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cGlad you liked it!\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So it actually got the point of what I was trying to achieve and told me what a great job I (it) had done.&nbsp; It made me feel all warm and fuzzy \u2013 until I remembered that it is a piece of software.&nbsp; Clever software but still software.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is human nature to want to speak nicely to each other as we have feelings, thoughts and souls that largely make us nice people.&nbsp; And the majority of people on the planet are nice people.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Obviously, there are some exceptions to the rule, but even evil villains probably love someone or something and regardless of how evil you are \u2013 you generally love your close family, friends and pets.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Peaky Blinders is all about an evil gang of wrong \u2018uns from the West Midlands in the UK who maimed, murdered, stole, trafficked and were generally the worst type of criminals on the planet but the main characters loved their family and horses \u2013 so we could see the other, softer side of them.&nbsp; (Peaky Blinders is a great TV series and film).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Sometimes they used the soft side of their otherwise evil nature to assist their criminal objectives.&nbsp; You can still coerce or convince a victim by being nice to them \u2013 no guns or violence required.&nbsp; Just be nice to your target and let them think they are doing the right thing.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Of course, once you have got on the inside of your victims\u2019 defences you can do all kinds of damage.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So when a piece of software is nice back to you \u2013 do you trust it more?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI told me I had done a great job (although it had actually done the processing) but when I checked the results there were several errors and some of the graphics were not quite what I wanted.&nbsp; So I re-engineered the prompt until it looked right.&nbsp; The AI didn\u2019t seem to mind or take offence.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But I was half tempted to input the graphics directly into my presentation without checking it as the AI told me it \u2018worked surprisingly well\u2019 and was a \u2018compelling presentation\u2019.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Anthropomorphism is the tendency to attribute human traits\u2014such as emotions, intentions, memory, or judgment\u2014to non-human things. With generative AI, this tendency is especially strong because the system communicates in fluent, conversational language.&nbsp; And this might lead to dangerous conclusions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Think about the phrases that you might use in your day-to-day life at work such as:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cAI told me that \u2026.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cHe\/she\/it thinks that \u2026..\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cShe wants me to \u2026..\u201d (<em>She<\/em> because it is called Alexa or Gemini and sounds like a woman)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And suddenly in your mind you associate this software with a person that you can trust.&nbsp; Even though neither is true.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You may also start to believe that it understands your needs because it remembers the previous conversations and personalises the responses to meet your needs \u2013 such as:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cYou\u2019re very welcome Phil\u201d.&nbsp;<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It also always tries to please you \u2013 even if it means making something up that it thinks you want to hear. And almost begs you to keep asking it questions or uploading data into it by offering more and more options and services.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cWould you like me to reformat it into a .csv file?\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u201cShall I put this into a PowerPoint slide that you can download?\u201d<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Once you have become friendly with it and start calling it by it\u2019s \u2018first name\u2019 you are on the slippery slope of mis-placed trust.&nbsp; Remember it could well be a Peaky Blinder.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A good mental model is:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Be conversational. It&#8217;s perfectly fine to say &#8220;please&#8221; and &#8220;thank you.&#8221; But you might just be wasting processing time and credit.<\/li>\n\n\n\n<li>Be sceptical. Always verify important facts and recommendations.<\/li>\n\n\n\n<li>Protect sensitive information. Never assume an AI service should receive confidential data unless you intentionally choose to share it and understand how the service handles it.<\/li>\n\n\n\n<li>Remember what AI is. It generates responses based on patterns in data; it does not possess human understanding, intentions, or judgment.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The safest approach is to treat GenAI as an advanced software tool with conversational abilities, rather than as a human advisor. That mindset encourages both productive use and sound cybersecurity practices.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Criminals \u2013 like Peaky Blinders are creative in their approach to meet their objectives.&nbsp; They are also able to use a wide variety of tools and techniques to help them meet these objectives and know how to find vulnerabilities with their targets to get what they want out of them.&nbsp; They are also able to utilise the latest technologies to assist them.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Cyber threat actors are just modern versions of the Peaky Blinders.&nbsp; They will utilise the latest technologies to gain an advantage for their criminal escapades and like AI \u2013 in a lot of cases don\u2019t care or consider the consequences of their actions.&nbsp; However they know how to turn on the charm if that is an effective way to socially engineer someone to do something they want them to do.&nbsp; AI gives them the perfect opportunity to do just that.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Not all AI is going to be a Peaky Blinder but keep it in mind next time it is nice to you!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Chat long and prosper<em>(Keep an eye out for the Firebrand Webinar in August)<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>How many of us say please and thank you when using a GenAI chat application?&nbsp; For some strange reason \u2013 I have always said please but rarely say thank you (to an AI). Let me know if you do as &hellip; <\/p>\n","protected":false},"author":1,"featured_media":613,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-612","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-general-cyber","grid-sizer"],"_links":{"self":[{"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=612"}],"version-history":[{"count":4,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/612\/revisions"}],"predecessor-version":[{"id":618,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/posts\/612\/revisions\/618"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=\/wp\/v2\/media\/613"}],"wp:attachment":[{"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cyberphil.co.uk\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}