AntiMalwareAugust 17, 2026🇷🇺Translated from Russian

GPT-4 Boosts Skilled Kenyan Entrepreneurs by 15% Profit While Costing Unprepared Businesses 10% in Six-Month Study

A six-month experiment by researchers from UC Berkeley, Harvard, and Columbia University tested how a GPT-4-powered AI advisor influenced small business owners in Kenya.

The most capable entrepreneurs increased their profits by 15 percent after using the tool. They treated the model’s suggestions as starting points rather than ready-made instructions and adapted them to real-world constraints, such as purchasing generators to handle frequent power outages or expanding their service offerings.

In contrast, less experienced participants lost approximately 10 percent of their income. They frequently implemented the AI’s generic recommendations without scrutiny, for example by lowering prices in ways that reduced overall revenue despite appearing logical in the chat interface.

The study concludes that GPT-4 functions less as a business consultant and more as a highly confident generator of losses when users forgo critical evaluation. The researchers emphasize that the problem stems primarily from the human tendency to stop thinking critically rather than from any flaw in the underlying technology.

Supporting evidence comes from an earlier Dickinson College experiment in which 97 percent of participants copied a clearly wrong answer generated by ChatGPT on a straightforward task, while the control group without AI performed better. A simple prompt reminding users to verify the output doubled accuracy rates.

Analysis of 1.4 million work sessions at KPMG produced similar findings: roughly 95 percent of users request a draft or summary and accept the first result, whereas only 5 percent treat the model as a collaborative reasoning partner by supplying context, guiding the chain of thought, and questioning outputs.

For organizations, these patterns mean that simply providing access to generative AI tools says little about expected productivity gains. Universal guidelines can even prove counterproductive because different tasks require different degrees of human oversight. The technology can accelerate strong performers while convincingly leading weaker users in the wrong direction.

Related articles

SecuritylabOther

HTTP Methods Explained: GET, POST, PUT, PATCH, DELETE and the New QUERY Standard

HTTP methods define the actions a client requests from a server regarding a resource. The core semantics are outlined in RFC 9110, with extensions for specialized protocols. A new standardized method called QUERY was introduced in June 2026 via RFC 10008 to handle complex queries that include a request body while remaining safe and idempotent. The article details safe and idempotent properties, compares each method including GET, HEAD, POST, PUT, PATCH, DELETE, OPTIONS, TRACE, CONNECT, and QUERY, and explains their correct usage to avoid breaking caches, proxies, and infrastructure expectations. It also covers WebDAV extensions and other registered methods in the IANA registry.

SecuritylabOther

From Web Perimeter Breaches to Domain Takeover: How Standoff Hackbase Trains Pentesters on Real Corporate Infrastructure

wr3dmast3r, a senior pentester and BSCP certification guide author, rose to first place on the Standoff Hackbase ranking by shifting focus from initial perimeter access to full internal infrastructure compromise. The platform replicates large-scale corporate networks from various industries, forcing participants to map service relationships, harvest credentials, escalate privileges, and chain pivots across segments. Unlike CTF challenges that end with a single flag, Hackbase tasks require building complete attack paths that can lead to data theft, process disruption, or cross-domain movement. The interview highlights practical techniques such as time-boxing hypotheses, manually modeling infrastructure after automated scans, and using AI only as an information accelerator rather than an autonomous operator. wr3dmast3r also details a memorable chain that began with a bot, moved through VPN and Outlook access, leveraged SCCM tokens for privilege escalation, and ended with compromise of a second domain containing the target system.

HabrOther

OTUS Publishes September Digest of Free Lessons on Linux Administration, PostgreSQL, CI/CD and Infrastructure Security

OTUS has released a new digest listing free September webinars aimed at infrastructure engineers, DevOps specialists and system administrators. The program covers practical topics including Linux server configuration, PostgreSQL 18 performance tuning, high-availability clusters with Patroni, CI/CD pipelines in GitLab, eBPF observability and infrastructure security practices. All sessions are delivered by practicing OTUS instructors who share real-world production experience. Separate tracks address RAID and LVM management, GPO policies, release management in 1C environments, Go profiling, mitmproxy traffic analysis and responsible use of AI tools for incident investigation and code review. The webinars run throughout September at 19:00 or 20:00 Moscow time and require only free registration. The digest also includes sessions on career growth from tech lead to CTO and effective responsibility distribution for team leads.

AntiMalwareOther

Top LLMs Misidentify Poisonous Mushrooms in Every Ninth Case, Benchmark Shows

Polish developer Piotr Migdal evaluated leading large language models on their ability to identify mushrooms from photographs, using a dataset of 1040 images covering 55 species common in Poland. The images came from the FungiTastic dataset derived from the Atlas of Danish Fungi, with expert labels and partial DNA confirmation. Models were asked to return the five most likely species names in Latin without additional training or tools. Gemini 3.8 Flash performed best with 65 percent top-1 accuracy and 85 percent top-5 accuracy, followed closely by other Gemini variants. However, safety-critical errors remained high: Gemini models labeled poisonous mushrooms as edible in roughly 11 percent of cases, while GPT-5.6 Sol reached 24 percent, Claude Opus 5 reached 29 percent, and Qwen 3.8 27B reached 36 percent. The study did not ask models directly whether a mushroom was edible; species identifications were later cross-checked against toxicity tables.