00:54:36 · Feross Aboukhadijeh, Jordi Hays, John Coogan
So we built a solution to this called certified patches. And what this is is basically kind of a deterministic way to, in kind of one click, make your vulnerabilities and your open source code go away. So we use we use a whole bunch of AI and kind of produce these patches that make the VULN go away without any work on the on the part of the developer. There's no kind of burden of of upgrading packages. You just sort of in a click the Vault is gone from your dependencies and you can kind of keep the rest of your code and your application the same. And so it's really kind of a quick fix to the problem that we hope is going to be part of the solution. And by the way, we're giving away all the critical patches to the community for free so we can try to disseminate this widely to as many people as possible. [00:55:21] S1: Are there are you able are you finding any companies that are completely asleep at the wheel or is everyone like giving this an [00:55:28] S0: Who should I hack today?
00:55:28 · John Coogan, Jordi Hays, Feross Aboukhadijeh
[00:55:28] S0: Who should I hack today? [00:55:30] S1: No. Just want like I imagine like part of why the business is growing so quickly is this is like a hair on fire Yeah. Problem, concern every single day. Right? You're seeing these like vulnerabilities or issues pop up. And so I would have to imagine that every every software company online where the technical leadership there uses the Internet, which I would imagine is all software companies are like pretty like leaning into this problem. But do you ever do you ever like I'm curious even from like an outbound sales marketing standpoint, are there people that are like, oh, this is just like not that important for us right now? Or or or would like a no be like, we we have a solution, it's with someone else? [00:56:13] S7: We we okay. So we've met one company that has literally no software. They produce toilet paper and they didn't [00:56:21] S0: have Christopher, no one of of business. No Yeah. Smart
00:56:21 · John Coogan, Feross Aboukhadijeh
[00:56:21] S0: have Christopher, no one of of business. No Yeah. Smart [00:56:26] S7: I I think yeah. I think that it's it's become a universal problem. When we started, it was kind of this, like, maybe more niche problem where people said, okay, you know, I got a lot of other problems that are more important than this. And we we initially had a really good uptick uptick of the product in the cryptocurrency community because they have a lot of software supply chain risk and when when these hacks happen, it's kind of an irreversible thing for them where they, like, lose all their their funds. And then I would say kind of AI labs were the next to pick it up and sort of SF tech companies realized that the kind of people that are ahead of the curve. And now it's become, I mean, it's like a top, I'd say top one or top two concern at like nearly every company we talk to. It's a it's a board level concern a lot of the times now, and CSOs and heads of engineering are being asked to figure out, like, what is our solution to make sure that next time one of these things happens, we're protected. And the next time is probably going to be, like, you know, tomorrow. Like, it's so it's it's become so it's literally like, you know Yeah. [00:57:28] S0: Every day. [00:57:29] S7: Yeah. Literally, our end of quarter was, you know, the end of last month. We, you know, we already were super busy and then there were three major software supply chain attacks that happened that same day. It's it's wild. It's it's like more than we've ever seen and it's totally unprecedented.
00:57:29 · Feross Aboukhadijeh, John Coogan, Tae Kim, Jordi Hays
[00:57:29] S7: Yeah. Literally, our end of quarter was, you know, the end of last month. We, you know, we already were super busy and then there were three major software supply chain attacks that happened that same day. It's it's wild. It's it's like more than we've ever seen and it's totally unprecedented. [00:57:44] S0: Was the GitHub issue that I saw a supply chain attack or was that something else? I saw like a couple posts but I didn't get to dig into it. [00:57:52] S7: So I I don't think they've released that information yet. Yeah. There's definitely been some speculation. Mean, the the timing right now, every time a company gets popped or their source code leaks, it's it's it's the first question that people think of now. [00:58:04] S3: Yeah. [00:58:05] S7: And the group, I believe that claimed responsibility is this Team PCP group that has been responsible for a lot of the attacks. And so, you know, I wouldn't be surprised if that's what we learned, but I I don't think, you know, that's something that we know right now and I wouldn't want to speculate. [00:58:18] S0: Yeah. I wonder if there will be movements to find, like, the compute infrastructure for Team PCP at some point or like the hackers because at a certain point you would imagine that they're [00:58:28] S1: Well, they don't. I mean, some of this a lot of this is still social engineering. Right? So it doesn't doesn't they don't necessarily need, you know, a country of geniuses [00:58:36] S0: Yeah. [00:58:36] S1: Data center. Can just
00:58:36 · Jordi Hays, John Coogan, Feross Aboukhadijeh, Dylan Field, Tae Kim
[00:58:36] S1: Data center. Can just [00:58:38] S0: couple dudes with phones. Who knows? Well, congratulations on the progress. [00:58:42] S1: Yeah. Incredible [00:58:43] S0: coming on the show. [00:58:44] S1: Thanks for keeping us all safe. [00:58:46] S0: And we'll talk to you soon. [00:58:47] S7: Cool. Thanks, guys. [00:58:48] S0: Have a good one. Goodbye. Up next, we have Tae Kim from KeyContext, the hottest substack on the Internet. We have Tay Kim in the waiting room. Let's bring him in to the TV and Ultra Home. Tay, how are doing? Hey, guys. Awesome. Here we go. Kicking it off strong. Oh, good. Good fit. That you know what we need to do? We need to figure out how to do a, like, real time real time recognition of the face face tracking and then land your glasses on the correct on the correct face. [00:59:21] S1: For next For next [00:59:23] S6: AI. I'd like that. [00:59:23] S0: Yes. And maybe before we get into AI and and different companies, I'd love to just know how a key context is going. How like, what what it's been like since we last checked in. How is life? [00:59:39] S3: It's much better. It's going great. I think the last time we talked was March 30 and the market was right at the bottom. [00:59:46] S0: Yeah. That's right. [00:59:47] S3: Weary. Everything was going terrible. [00:59:50] S1: Yeah. You never worried though. [00:59:52] S3: I did not. [00:59:53] S6: I Trust her. [00:59:54] S3: Tripled, quadrupled down on here and said CPU shortage Yeah. Five CPU, five memory, Yeah. All those ideas are up 50 to a 150. [01:00:04] S0: Oh. That's
01:00:04 · John Coogan, Tae Kim, Jordi Hays, Immad Akhund
[01:00:04] S0: Oh. That's [01:00:05] S3: pretty good. I said I think 13 out of our 14 ideas are solidly in the green. I I joke that like Shoei Ohtani numbers with like three It's $4 not gonna last, but it it worked out. I [01:00:18] S0: mean Yeah. [01:00:19] S3: We trusted in the actual would love memory stocks. [01:00:22] S1: Yeah. Right? I think [01:00:24] S3: he would. I'm sure he his his financial adviser's long HBM stocks. I'm sure [01:00:30] S0: Yeah. Yeah. I read some I read some report that in in South Korea, there's folks who are liquidating insurance plans to go long SK Hynix. It's a huge, huge moment over there in South Korea. [01:00:40] S3: And everyone's making fun of these Koreans for being long memory stocks, but, I mean, we're talking single digit PE multiples. [01:00:47] S0: Wow. [01:00:47] S3: Probably going to lots two, three two to three more years Mhmm. Triple digit growth. I mean, I I quoted this Michael Dell thing where he spoke to a Wall Street conference. He said, it's twenty five twenty five. That's the thing you need to know about memory stocks. AI accelerators gonna have 25 times more like, AI GPUs from NVIDIA, two years from now, gonna have 25 times more memory per GPU. [01:01:11] S5: Mhmm.