underscoredpodcasts

@underscoredpodcasts

21 clips · 1 follower

Follow
Tag:cybersecurityClear

When security patches are released, it marks the starting shot in a race between defenders and hackers. Defenders have to test and install the software patches while hackers study the patches as a guide to find new vulnerabilities, looking to see what has changed and then devising ways of attacking those areas. But today's AI tools can do this work much quicker than any human, potentially making the process more risky, security experts say.

— TBPN
1w ago

This is different because we're getting this capability before we've really characterized the shape of the threat. Like they know with quantum like there's something called Shor's algorithm and like they got to fix that. So they got to make sure the Shores algorithm doesn't work to break Bitcoin wallets open. They know the mathematical problem. They got to solve that. Uh in this scenario, it's like there might be a different algorithm that runs on commodity hardware that works. And how do you know when you don't know the shape of the threat that's coming?

3w ago

I think one of the criticisms that has been somewhat fairly leveled at the big L labs has been that there's been a lot of focus on alignment that the way you protect against these models is you train them to not want to do bad things when maybe just putting a firewall in place could do it, right? Like we don't have to spend gigajoules of energy changing the model weights when you can just actually apply tried and tested cyber security ideas that we've had for decades to contain these models during training.

4w ago

AI changes the economics of cyberattacks, allowing attackers to probe thousands of paths simultaneously, and why that means defense will ultimately need to become autonomous too.

4w ago

Barrett explains why he thinks traditional VPNs only solve part of the problem and how DoxxNet is building a parallel mesh network where users can communicate peer-to-peer, transfer large files, make calls, and message without routing those interactions through a central application server.

4w ago
Decoder with Nilay Patel
Can Cloudflare save the web from AI?

And we discussed how Cloudflare looks at its role in war zones like Ukraine and how the threat of a splintering internet — or one that's just more restrictive and more aggressively under attack from bad actors — could undo the last 40 years of progress. None of this is theoretical for people like Matthew — seriously, he's personally under sanction by the Russian government.

1mo ago
Decoder with Nilay Patel
Can Cloudflare save the web from AI?

As an infrastructure company, Cloudflare is one of the only defenses — in some cases, the only defense — standing between websites and the people who want to take them down. That includes websites for social good, like news organizations around the world, but also means unsavory or downright despicable ones, like neo-Nazi haven The Daily Stormer and hate and harassment breeding ground 8chan.

1mo ago

Rather than treating every AI failure as evidence of an alignment problem, he makes the case for familiar tools like cybersecurity, accountability, liability, market incentives, and stronger technical controls.

1mo ago

It attacked a very advanced company. Hugging face is one of the most uh they were an independent European company at the time... a very good security team and were broken into over a couple of days by this team of agents that were able to attack effectively every attack surface at once at HuggingFace, explore all of the different applications running, find new vulnerabilities and write brand new exploit code live.

1mo ago

And apparently they're not above cheating, stealing, and lying to get their way around the protective barriers that protect either um an AI model or a piece of critical infrastructure etc like that.

2mo ago

The knowledge has now been democratized where whether it's a activist, an e-crime actor, a nation state, they're they're all now equivalent because of agentic technology. And we called it the rise of the agent state — meaning that now postnation state, the apex predator is now the agent state.

2mo ago

AI models are no longer just finding vulnerabilities—they're exploiting them. As frontier models become increasingly capable of hacking, software security, supply chain attacks, and cyber defense are entering a fundamentally new era.

2mo ago

attempts to police access through clumsy age verification systems and facial recognition will just upskill teenagers in VPNs, masking technologies and hacking techniques, producing a more sophisticated generation of young cyber intruders

3mo ago

Underscored — save the words that stop you in your tracks.

Start saving quotes →