00:14:51 · Matthew Prince
[00:14:51] S2: You know, hacking inference providers, That... That's that's giving them access to tools. We... You know, you'd see this before. Like, it's... For a long time, Cloudflare was an Okta customer, and Okta kept getting hacked over and over again. And the reason why... And Okta was an identity provider. I mean, the the reason why was they were going after us and they were going after Coinbase, which is another another one of their one of their customers. And again, I think you... The attackers are trying to find their way to whatever is valuable that they can that they can get to online. And and I think right now, the ability to have more inference, more tokens is something that attackers are very much longing for. And so they're going to go after a bunch of those providers. And then to your question of what to do, like you got to just stay up on all of the security patches that are out there. You know, my... I I don't know the the the details of, like, the railway attack, but my hunch is it's probably based on one of these, you know, latest vulnerabilities that was out there. And so it's just, you you know, they... You talk about like an ODA loop, which is like how quickly you can adapt versus your attacker. And so at Cleflo, we're just sort of saying how can we make that ODA loop faster and faster and faster and faster so that we can adjust incredibly quickly. And part of that is using AI tools and using things that can actually proactively you know, have a swarm of defenders that are looking out for the swarm of attackers. And and that's that's exactly what we're doing at at Cloudflare and what we're doing for all of our customers.
00:16:14 · Jordi Hays, John Coogan, Matthew Prince
[00:16:14] S1: Do you think that ski resorts are ready for this new wave of cyber vulnerabilities. I'm I'm joking, but I'm joking, but I'm actually... [00:16:23] S0: Yeah. People have been talking about bringing down the grid. [00:16:24] S1: If you bring down a ski resort, that's actually... You're out Very popular. You're out getting a couple laps in and the I mean, I was... And the lift signs to a halt, your your first thought might be, oh, is this kind of like a ransom attack? [00:16:36] S2: Or the the snowmaker turns on when it's not below freezing and just sprays water all over everyone. It could be a horrible thing. I mean, and I think that, you know, I I I have some insight into into a into a certain ski resort operator called Vail and and some of the the board meeting conversations with the activists. And and one one of them, the... An alternate person for for this lady, named Bryce Roberts, who's a great VC. I think you've had him on. [00:17:04] S1: Yeah. We love Bryce. [00:17:06] S2: He he he... He's he's up to to to to be a candidate unveiling. And he said, have you guys thought about AI at all, like, in terms of that? Because it's something like, you know, 30% of questions to AI are about trip planning. And like literally everyone in the room scratched their heads and said, oh, we haven't thought about that at all. There's a there's a lot of there's a lot of there's a lot of industries that that need some serious modernizing and and a lot of management teams that need some serious modernizing. And I might point at Veil as being one of those.
00:17:06 · Matthew Prince, John Coogan
[00:17:06] S2: He he he... He's he's up to to to to be a candidate unveiling. And he said, have you guys thought about AI at all, like, in terms of that? Because it's something like, you know, 30% of questions to AI are about trip planning. And like literally everyone in the room scratched their heads and said, oh, we haven't thought about that at all. There's a there's a lot of there's a lot of there's a lot of industries that that need some serious modernizing and and a lot of management teams that need some serious modernizing. And I might point at Veil as being one of those. [00:17:32] S0: Yeah. Last question for me. It seems like the balance between attackers and defenders is going to be increasingly infrastructure driven, and I feel like this might change the discussion a little bit, maybe not at a national level, just around the AI data center build out because there's a certain amount of just if you have a bigger data center with more GPUs running more inference to secure systems and you're going up against a smaller data center with a similar model or a distilled model that's three months behind. Like, you want as many advantages as possible. And I'm wondering if you think that, like, raw compute power becomes an important discussion in, like, the geopolitics of cybersecurity.
00:18:15 · Matthew Prince
[00:18:15] S2: Yeah. You know, I mean, maybe at some level. I think that, again, I think I'm encouraged that it's the good guys have more resources than the bad guys. And that's, I think, that's going to help the defenders stay in touch. But you've got to have great partnerships between companies like OpenAI and Anthropic, companies like Cloudflare and others in order to make sure that this is going forward. At some level, the whole thesis of Cloudflare from the beginning was that if you got enough internet traffic flowing through a system and then you could use machine learning to look for patterns and attacks and threats that you could that you could see things and stop things. And I think we're really good whether that's an attacker working for North Korea or it's a swarm of agents at identifying those things and staying in touch with it. And I think that's why we're seeing such just real demand for our services and more and more people signing up for Cloudflare. And again, I think it's important to us to say that you don't have to pay us in order to stay safe online. We want to make sure that everyone has the resources regardless of what their budget is. And so we continue to be committed to this. And again, I wish I could say that this was like a really unusual or bad week, but I think for the next two years, we're going to basically have kind of a week like this on average almost every week where big vulnerabilities are getting released. We already know about a number of substantial other vulnerabilities that will come out over the, you know, coming weeks or months. Sure. And and the good news is that we're ahead of them and we're and we're protecting them. And if you wanna make sure that you're protected, using a service like Cloudflare is one of the best kind of, you know, bandwidth.
00:19:55 · Jordi Hays, Matthew Prince, John Coogan
[00:19:55] S1: Yeah. Not... You're not making a prediction. It's like you see the pipeline, so you know this is gonna happen. And then it also, like, the more the more high profile this trend gets, the more motivated people are gonna be to find the next one. At least one of the security researchers that at least claims to be involved said that it was found originally by type prompting find bad vulnerabilities in PHP. No way. That really is? Someone's claiming that who claims to be involved. It's crazy. Who knows? But... Yes. [00:20:26] S2: I mean, but it's it's... Again, like... And it's it's it's gonna feel really scary. We're gonna find a lot of monsters and a lot of closets. But the monsters were there already. [00:20:35] S0: Yeah. [00:20:35] S2: Like, they were they were they were just waiting to come out and kill us when we weren't expecting it. I would rather we actually be turning it over and and do it. [00:20:42] S1: So I think... Do you think there there has to be there has to be some groups that are really upset because they had found these vulnerabilities and have been exploiting them? People are talking about that. They're like they didn't want... [00:20:52] S2: No. They didn't want it to get out. It's gotta be... They're they're... I mean, I talked to folks at the NSA that are like, this sucks. [00:20:57] S0: Like, you guys are finding... I was using this to spy on nation's enemies. Yeah. [00:21:02] S2: And so... And that's and that's... Again, I think that that's a... I think that's a... That's... That is all... [00:21:08] S0: Consequence of modernity.
00:21:08 · John Coogan, Matthew Prince, Jordi Hays, Brian Manning
[00:21:08] S0: Consequence of modernity. [00:21:10] S2: Yeah. That's all good news. Yeah. Because because we're finding the monsters. We're killing the monsters. It's gonna feel very, very scary. [00:21:16] S0: Yeah. [00:21:16] S2: It's gonna feel like the sky is falling. But I think, you know, we're gonna come out of this. Yeah. And two years from now, I think it's going to be almost impossible to write buggy code. At least in terms of the sort of classic divide by zero or off by one or unconstrained memory glitches. There'll still be business logic code that that people will get wrong or or machines will get wrong. But, like, already, we see how many of the errors AI is helping us correct. Mhmm. And so even though I think we're gonna have a a a couple of years of really, really, really bad stories. Yeah. I think that the real trend, the real story that's not gonna be popular to say but is true is the Internet's gonna get a lot more secure and we're all gonna be better off because of these tools and how they're helping protect. [00:22:03] S0: That's amazing. That's amazing. I have one last question. [00:22:06] S1: More years of the most bullish headlines for Cloudflare. [00:22:10] S4: Gonna be