Library › Cybersecurity AI › College students
Explain a famous security flaw to your roommates
- For College students
- You practice Saying who it's for
- Time about 5 minutes
About this exercise
Your roommates (a nursing major and an art major) asked what 'Log4Shell' was after it came up in your class. Explain it in exactly 3 lines starting 'What it was:', 'Why it was bad:' and 'What fixed it:', using only the summary below and no jargon (no JNDI, LDAP, RCE or 'payload'). Plain text, under 100 words.
Common mistakes when you ask AI for this
- A textbook answer. The AI writes paragraphs with technical detail your roommates won't follow. Try: Give the shape: "3 lines: What it was:, Why it was bad:, What fixed it:"
- Jargon. The AI explains it with JNDI lookups and LDAP servers. Try: Add: "No JNDI, LDAP, RCE or payload. Explain like they're not in CS."
- Repeating the rumor. The AI goes along with the 'Minecraft virus' framing. Try: Say: "Use only the class summary. It doesn't say worlds were deleted."
- Leaving out the mechanism. Cut for length, the AI just says 'a bad bug'. Try: Ask: "Say how text sent to a program could make it run someone else's code."
- Letting markdown in. AI adds bold and headings by default, and in a chat message they show up as stray symbols. Try: Add: "Plain text only, no bold, no headings."
What a strong prompt includes
- Says who it's for
- Gives the 3 labels
- Bans jargon
- Keeps it to the material
- Sets a word limit
Related exercises
- Answer a cyber insurance form honestly from your notes (Cybersecurity AI · Small business owners)
- Answer a director's accrual question as a short Q&A (Finance AI · Accountants)
- Answer a patient's billing question in plain words (Writing AI · Nurses and healthcare workers)
- Answer an employee's worried question about a breach rumor (Cybersecurity AI · Managers and team leads)
- Answer your CMO's campaign question in one Slack message (Marketing AI · Marketing and content)