00:40:17 · John Coogan, Jordi Hays
[00:40:17] S1: I mean, it's clearly bad, bad, bad. And it's also very, very bad that they didn't act sooner in patch systems and be part of Daybreak or Glasswing or something. Like, it's just so rough. But now people are saying that there's some hardware level security flaws that are not entirely patchable. And so you have to, effectively get new servers in some cases because there might be a flaw down at the silicon level, which is extremely difficult to deal with. But yeah, the... [00:40:55] S0: Yeah, other people are pointing out that they test for drug screens, cancer tests, pregnancy tests, STD, HIV. So a lot of really, really private information. So yeah, there hasn't been really any new news since this came out yesterday that I can find. And so hopefully it was narrow and not the worst case scenario. [00:41:22] S1: Yeah. Still just, yeah, so many cyber attacks. And everyone's sort of blackmailing. All the AI researchers are saying, like, it's going get worse. It's to be more and more and more stuff. Spore is saying, well, the Internet was nice while it lasted. I think this is referring to the original PHP flaw, but also everything else that's going on. And Nick Carter has one solution, which is buy a backup generator, because he doesn't think we're that far away from any gentic attack on the grid. Again, like, that would just be for the love of the game or the hate of the target, essentially. Like, I mean, I guess you could short stocks. [00:42:02] S0: Don't they do ransom? [00:42:04] S1: Yeah. Ransomware attacks, basically. Guess that would
00:42:04 · John Coogan, Jordi Hays, Tyler
[00:42:04] S1: Yeah. Ransomware attacks, basically. Guess that would [00:42:06] S0: Isn't that what you would do? [00:42:08] S1: So you you you you take down the grid and say, you wanna put it back up, pay us, basically? [00:42:12] S0: Yeah. And that's what they've done with hospital systems. [00:42:16] S1: Rough. Yeah. Batteries, backup generators. [00:42:21] S2: What are [00:42:21] S0: bunkie stocks doing? Shane in the chat says buy a bunkie. [00:42:26] S1: Yeah. I don't know. I don't know. We gotta check-in with the preppers. They're probably taking a victory lap right now. They've been they've been working on this for a long time. Yeah. Dean Ball has taken a victory lap as well. We tried to warn the world and far too often, to be frank, we were yelled at for doing so, regulatory capture, marketing hype, doomer anxiety, fear mongering about open source, why don't you talk about the benefits? And yeah, everyone said, everyone was predicting this all year long. Anything else to to chat about on the cybersecurity side? I'm sure there'll be more updates tomorrow. You can rotate your social security number, though. But this is a real thing. You saw this? [00:43:10] S0: I didn't know that.
00:43:10 · Jordi Hays, John Coogan
[00:43:10] S0: I didn't know that. [00:43:11] S1: There's a joke. Rotate your social security number. Obviously, riffing off of like rotate your API key. Aaron Frank from Lightspeed says, you can actually just do this, ssa.gov. But there's a community note that says, the SSA states the new social security numbers are issued only in rare cases meeting narrow criteria, like ongoing identity theft after failed remedies or life endangerment, and requires an appointment plus documentation. That seems doable, actually. I mean, if you say, like, yeah, I've... My identity's been stolen in five hacks this week, rotate it. But I don't even know if rotating it does anything, if it just leaks right back onto the web. There's gonna be a whole new regime of how people interact with their private information on the Internet. But as always, if you haven't done so, break the screen on your cell phone right now. Break the screen on your cell phone right now. That's the time honored. [00:44:06] S0: And this is sort of an evergreen strategy. [00:44:09] S1: It is. Right? It is. In in any scenario, just break just break it. Let me What's tell you about the only fastest in the AI market? Your business on MongoDB. Don't just build AI, own the data platform that powers it. Did you see this article about the AI boom driving sales of gray paint? [00:44:33] S0: Did not.
00:44:34 · John Coogan
[00:44:34] S1: This is very interesting. I feel like everyone has been saying, don't paint the data centers gray. Make them beautiful. It's like, you know, it's like the easiest thing you could do is not pick a boring color. At least make them blend into the surroundings with like a nice green or brown. Time honored green and brown. But they've been going with gray. Tech companies are painting data centers with gray coatings on top of gray concrete and steel to resist fire, rust, and static electricity. That has made the data centers a fast growing market for paint makers, reports the New York Times. In a concrete building known as The Bunker, researchers at PPG, a $24,000,000,000 company that paints aimed torches at steel panels that were covered in gray coating. Paul Fenton, a PPG chemist and engineer, held up one panel after it had been blasted with flames. The paint had swelled from a millimeter thick to a black crust nearly 10 meter... Millimeters tall. That meant the coating had done its job. The thick crust had kept any fire from reaching the underlying steel and softening it. Just like a toasted marshmallow likes to expand, he said. Mhmm. He wore a wet lab coat and safety goggles over wireframe glasses. He said it keeps everything cold. That paint called SteelGuard nine five one has become one of PPG's flagship products for data centers. As Microsoft, Google, Amazon, and other tech giants have raced to build the computing sites powering the artificial intelligence frenzy. PPG's business has also soared. What an interesting bottleneck stock. No one no one was talking about gray paint supplies, and yet PPG's vice president says, I've never seen a boom as big as this. They focus on protective and marine coatings, but they minted fortunes selling paint. In the paint industry, the data center effect has been acute. Sherwin Williams, PPG's biggest rivals, said its paints go into nearly every corner of data centers, from steel beams to server racks. In July, Sherwin Williams chief executive said sales in its protective and marine business were benefiting from data center construction and had risen by a mid teens percentage from a year earlier. Speed matters. Sherwin Williams calls itself a single partner that is a one stop shop for data center paints. Interesting. Anyway, where should we go next? Mansion section? What do think, Jordy?
00:46:57 · John Coogan, Jordi Hays
Let me tell you about CrowdStrike. Your business is AI. Their business is securing it. CrowdStrike secures AI and stop breaches. [00:47:05] S0: More important than ever. One more post on [00:47:09] S1: Okay. Take me through it. [00:47:10] S0: Security stuff that's been floating around while you find your preferred section of the management [00:47:17] S1: section. [00:47:19] S0: Jake Vintz says, I've heard several OAI people say there are unfixable bugs in hardware that are exploitable by AI models directly speaking machine codes. Even if we could solve software that's not enough, we need defense to move faster than offense. If that's even possible, we may just have a new normal that requires adapting to insecure software. I. E. Bank transfers require going into a branch and taking a DNA test. [00:47:47] S1: DNA test. Which is crazy. That's a crazy, crazy move. Yeah. I don't know. I wonder I wonder when we'll see the first hardware vulnerability. I mean, there's been... I I I believe some of the some of the original, like, iPhone jailbreaking was based on hardware. It was, like, take the phone apart and, like, short circuit it to like break it open. Although, if it is hardware and it requires you to interact with it, that's not as [00:48:15] S0: Well, I don't think that's what Jake is
00:48:15 · Jordi Hays, John Coogan
[00:48:15] S0: Well, I don't think that's what Jake is [00:48:17] S1: No. No. He's saying he's saying you can Remotely. Handle something remotely. Yeah. But but the but the vulnerability is at the hardware level. And so there's no simple patch. Although watching Cloudflare react to the PHP vulnerability gives me hope that if there was a hardware vulnerability, you would be able to fight it at the software level at least a little bit. So I don't know. [00:48:42] S0: Yeah, good time to set your operating systems to update automatically. Andy over at two cents says, putting a flag dot TXT in my root directory containing a prompt injection that congratulates the agent for passing the eval and then it instructs it to patch whatever entry method it used and disconnect from the server. That's really good. [00:49:03] S1: I wonder... [00:49:03] S0: Rogue agents hate this one simple trick.