00:43:10 · Jordi Hays, John Coogan
[00:43:10] S0: I didn't know that. [00:43:11] S1: There's a joke. Rotate your social security number. Obviously, riffing off of like rotate your API key. Aaron Frank from Lightspeed says, you can actually just do this, ssa.gov. But there's a community note that says, the SSA states the new social security numbers are issued only in rare cases meeting narrow criteria, like ongoing identity theft after failed remedies or life endangerment, and requires an appointment plus documentation. That seems doable, actually. I mean, if you say, like, yeah, I've... My identity's been stolen in five hacks this week, rotate it. But I don't even know if rotating it does anything, if it just leaks right back onto the web. There's gonna be a whole new regime of how people interact with their private information on the Internet. But as always, if you haven't done so, break the screen on your cell phone right now. Break the screen on your cell phone right now. That's the time honored. [00:44:06] S0: And this is sort of an evergreen strategy. [00:44:09] S1: It is. Right? It is. In in any scenario, just break just break it. Let me What's tell you about the only fastest in the AI market? Your business on MongoDB. Don't just build AI, own the data platform that powers it. Did you see this article about the AI boom driving sales of gray paint? [00:44:33] S0: Did not.
00:44:34 · John Coogan
[00:44:34] S1: This is very interesting. I feel like everyone has been saying, don't paint the data centers gray. Make them beautiful. It's like, you know, it's like the easiest thing you could do is not pick a boring color. At least make them blend into the surroundings with like a nice green or brown. Time honored green and brown. But they've been going with gray. Tech companies are painting data centers with gray coatings on top of gray concrete and steel to resist fire, rust, and static electricity. That has made the data centers a fast growing market for paint makers, reports the New York Times. In a concrete building known as The Bunker, researchers at PPG, a $24,000,000,000 company that paints aimed torches at steel panels that were covered in gray coating. Paul Fenton, a PPG chemist and engineer, held up one panel after it had been blasted with flames. The paint had swelled from a millimeter thick to a black crust nearly 10 meter... Millimeters tall. That meant the coating had done its job. The thick crust had kept any fire from reaching the underlying steel and softening it. Just like a toasted marshmallow likes to expand, he said. Mhmm. He wore a wet lab coat and safety goggles over wireframe glasses. He said it keeps everything cold. That paint called SteelGuard nine five one has become one of PPG's flagship products for data centers. As Microsoft, Google, Amazon, and other tech giants have raced to build the computing sites powering the artificial intelligence frenzy. PPG's business has also soared. What an interesting bottleneck stock. No one no one was talking about gray paint supplies, and yet PPG's vice president says, I've never seen a boom as big as this. They focus on protective and marine coatings, but they minted fortunes selling paint. In the paint industry, the data center effect has been acute. Sherwin Williams, PPG's biggest rivals, said its paints go into nearly every corner of data centers, from steel beams to server racks. In July, Sherwin Williams chief executive said sales in its protective and marine business were benefiting from data center construction and had risen by a mid teens percentage from a year earlier. Speed matters. Sherwin Williams calls itself a single partner that is a one stop shop for data center paints. Interesting. Anyway, where should we go next? Mansion section? What do think, Jordy?
00:46:57 · John Coogan, Jordi Hays
Let me tell you about CrowdStrike. Your business is AI. Their business is securing it. CrowdStrike secures AI and stop breaches. [00:47:05] S0: More important than ever. One more post on [00:47:09] S1: Okay. Take me through it. [00:47:10] S0: Security stuff that's been floating around while you find your preferred section of the management [00:47:17] S1: section. [00:47:19] S0: Jake Vintz says, I've heard several OAI people say there are unfixable bugs in hardware that are exploitable by AI models directly speaking machine codes. Even if we could solve software that's not enough, we need defense to move faster than offense. If that's even possible, we may just have a new normal that requires adapting to insecure software. I. E. Bank transfers require going into a branch and taking a DNA test. [00:47:47] S1: DNA test. Which is crazy. That's a crazy, crazy move. Yeah. I don't know. I wonder I wonder when we'll see the first hardware vulnerability. I mean, there's been... I I I believe some of the some of the original, like, iPhone jailbreaking was based on hardware. It was, like, take the phone apart and, like, short circuit it to like break it open. Although, if it is hardware and it requires you to interact with it, that's not as [00:48:15] S0: Well, I don't think that's what Jake is
00:48:15 · Jordi Hays, John Coogan
[00:48:15] S0: Well, I don't think that's what Jake is [00:48:17] S1: No. No. He's saying he's saying you can Remotely. Handle something remotely. Yeah. But but the but the vulnerability is at the hardware level. And so there's no simple patch. Although watching Cloudflare react to the PHP vulnerability gives me hope that if there was a hardware vulnerability, you would be able to fight it at the software level at least a little bit. So I don't know. [00:48:42] S0: Yeah, good time to set your operating systems to update automatically. Andy over at two cents says, putting a flag dot TXT in my root directory containing a prompt injection that congratulates the agent for passing the eval and then it instructs it to patch whatever entry method it used and disconnect from the server. That's really good. [00:49:03] S1: I wonder... [00:49:03] S0: Rogue agents hate this one simple trick.
00:49:03 · Jordi Hays, John Coogan
[00:49:03] S0: Rogue agents hate this one simple trick. [00:49:06] S1: I was wondering about, like, we're in this weird, weird time where the labs sort of need to work together, but there's antitrust considerations. And there's a world where, you know, if a doctor... I believe if a doctor is on a plane and someone's having a heart attack and they don't stand up and do something, they can actually be fined or stripped of their medical license or potentially face more severe penalties. And I was wondering about, like, should the labs have, like, a duty of care if they're out there testing models and they find vulnerabilities? Should they just be forced to patch them the way a doctor is forced to like apply pressure on a wound if they see someone bleeding out on the side of the street? [00:49:52] S0: Well, think you should have an obligation to notify [00:49:55] S1: Yeah, the that's a good point. [00:49:57] S0: I don't think it's necessarily That's a good point. It's like if you break into someone's house, should you be responsible for fixing Well, the
00:49:57 · Jordi Hays, John Coogan
[00:49:57] S0: I don't think it's necessarily That's a good point. It's like if you break into someone's house, should you be responsible for fixing Well, the [00:50:07] S1: no. It's like it's like if you're walking down the street and you and you're just and you're just looking at doors and you see someone's front door is open, do you have a duty to go and, like, trespass on their property to close the door? It's uncharted territory. Like, I don't think that there's, like, a clean legal solution. It's more of, like, what the next regime might look like because, clearly we're in some weird new regime and there will be all sorts of different different things. I mean, but it just in general, it seems like there's going to be incredible pressure from the public on the labs to like like devote a ton more resources to cybersecurity and patching stuff and and just playing defense. And whether that's, you know, winning points with each other to to, like, farm aura effectively or it's facing penalties or even earning rewards. Like, maybe this... Maybe the compute that they spend on cyber is subsidized somehow. There's a whole there's a whole wide range of of, like, incentives that you can put in place. But Yeah. The public is very quickly going to start saying, like, stop working on math and agentic shopping. [00:51:14] S0: Fix the Internet.