00:17:06 · Matthew Prince, John Coogan
[00:17:06] S2: He he he... He's he's up to to to to be a candidate unveiling. And he said, have you guys thought about AI at all, like, in terms of that? Because it's something like, you know, 30% of questions to AI are about trip planning. And like literally everyone in the room scratched their heads and said, oh, we haven't thought about that at all. There's a there's a lot of there's a lot of there's a lot of industries that that need some serious modernizing and and a lot of management teams that need some serious modernizing. And I might point at Veil as being one of those. [00:17:32] S0: Yeah. Last question for me. It seems like the balance between attackers and defenders is going to be increasingly infrastructure driven, and I feel like this might change the discussion a little bit, maybe not at a national level, just around the AI data center build out because there's a certain amount of just if you have a bigger data center with more GPUs running more inference to secure systems and you're going up against a smaller data center with a similar model or a distilled model that's three months behind. Like, you want as many advantages as possible. And I'm wondering if you think that, like, raw compute power becomes an important discussion in, like, the geopolitics of cybersecurity.
00:18:15 · Matthew Prince
[00:18:15] S2: Yeah. You know, I mean, maybe at some level. I think that, again, I think I'm encouraged that it's the good guys have more resources than the bad guys. And that's, I think, that's going to help the defenders stay in touch. But you've got to have great partnerships between companies like OpenAI and Anthropic, companies like Cloudflare and others in order to make sure that this is going forward. At some level, the whole thesis of Cloudflare from the beginning was that if you got enough internet traffic flowing through a system and then you could use machine learning to look for patterns and attacks and threats that you could that you could see things and stop things. And I think we're really good whether that's an attacker working for North Korea or it's a swarm of agents at identifying those things and staying in touch with it. And I think that's why we're seeing such just real demand for our services and more and more people signing up for Cloudflare. And again, I think it's important to us to say that you don't have to pay us in order to stay safe online. We want to make sure that everyone has the resources regardless of what their budget is. And so we continue to be committed to this. And again, I wish I could say that this was like a really unusual or bad week, but I think for the next two years, we're going to basically have kind of a week like this on average almost every week where big vulnerabilities are getting released. We already know about a number of substantial other vulnerabilities that will come out over the, you know, coming weeks or months. Sure. And and the good news is that we're ahead of them and we're and we're protecting them. And if you wanna make sure that you're protected, using a service like Cloudflare is one of the best kind of, you know, bandwidth.
00:19:55 · Jordi Hays, Matthew Prince, John Coogan
[00:19:55] S1: Yeah. Not... You're not making a prediction. It's like you see the pipeline, so you know this is gonna happen. And then it also, like, the more the more high profile this trend gets, the more motivated people are gonna be to find the next one. At least one of the security researchers that at least claims to be involved said that it was found originally by type prompting find bad vulnerabilities in PHP. No way. That really is? Someone's claiming that who claims to be involved. It's crazy. Who knows? But... Yes. [00:20:26] S2: I mean, but it's it's... Again, like... And it's it's it's gonna feel really scary. We're gonna find a lot of monsters and a lot of closets. But the monsters were there already. [00:20:35] S0: Yeah. [00:20:35] S2: Like, they were they were they were just waiting to come out and kill us when we weren't expecting it. I would rather we actually be turning it over and and do it. [00:20:42] S1: So I think... Do you think there there has to be there has to be some groups that are really upset because they had found these vulnerabilities and have been exploiting them? People are talking about that. They're like they didn't want... [00:20:52] S2: No. They didn't want it to get out. It's gotta be... They're they're... I mean, I talked to folks at the NSA that are like, this sucks. [00:20:57] S0: Like, you guys are finding... I was using this to spy on nation's enemies. Yeah. [00:21:02] S2: And so... And that's and that's... Again, I think that that's a... I think that's a... That's... That is all... [00:21:08] S0: Consequence of modernity.
00:21:08 · John Coogan, Matthew Prince, Jordi Hays, Brian Manning
[00:21:08] S0: Consequence of modernity. [00:21:10] S2: Yeah. That's all good news. Yeah. Because because we're finding the monsters. We're killing the monsters. It's gonna feel very, very scary. [00:21:16] S0: Yeah. [00:21:16] S2: It's gonna feel like the sky is falling. But I think, you know, we're gonna come out of this. Yeah. And two years from now, I think it's going to be almost impossible to write buggy code. At least in terms of the sort of classic divide by zero or off by one or unconstrained memory glitches. There'll still be business logic code that that people will get wrong or or machines will get wrong. But, like, already, we see how many of the errors AI is helping us correct. Mhmm. And so even though I think we're gonna have a a a couple of years of really, really, really bad stories. Yeah. I think that the real trend, the real story that's not gonna be popular to say but is true is the Internet's gonna get a lot more secure and we're all gonna be better off because of these tools and how they're helping protect. [00:22:03] S0: That's amazing. That's amazing. I have one last question. [00:22:06] S1: More years of the most bullish headlines for Cloudflare. [00:22:10] S4: Gonna be
00:22:10 · Brian Manning, John Coogan
[00:22:10] S4: Gonna be [00:22:10] S0: There's... There there there was a lot of debate throughout the year over the the the pros and cons of these staged rollouts. Like, Mythos goes super viral, definitely draws people's attention, but a lot of people are like, ah, I I wanna use that for my business. And then Fable comes out, and it's sort of nerfed in cybersecurity, and then Daybreak comes out. And there's there's different ways... Glasswing. There's different ways to get into these programs. Looking backwards, it feels like I like the idea of, you know, everyone gets amazing AI, but I also like the idea of everything getting patched before the before the negative things affect me. I don't necessarily wanna need to, you know, inference the most advanced model just to, like, use the web myself and write... Hack into the service that I'm using to patch it before I give it my Social Security number, etcetera. Like, are you happy with the current flow of intelligence breakthroughs staging out, getting to you a couple of weeks early before something else happens? Is the current model sustainable? Is it correct? Or does there need to be a rejiggering there?
00:23:13 · Matthew Prince, John Coogan, Brian Manning
[00:23:13] S2: Yes. I would say that you know, from our perspective at Cloudflare, we have loved the partnerships that we've had with OpenAI and Thropic, the other I leading frontier think we've gotten trusted access to a lot of the models ahead of time. And then we've been able to use that to help protect more of the web and work in coordination with that. But I do think that it's a tough problem. Like when I meet with European banks or leaders and they're like, well, why don't we get any of these things? I mean, they feel very vulnerable it's a tough thing to figure out exactly what you do. In this particular case, there are a lot of people who are like, well, why didn't you tell me about this PHP bug And it's hard to get that perfectly right. The more people you tell, the more access that you give, the more risk there is that it falls into the hands of someone who will do real harm with it. And so, it's a game of trust in a lot of ways. And I remember when Clavicle was a small startup, you know, we were always like, why aren't you telling us about [00:24:19] S0: the new security vulnerabilities? Trust us, trust [00:24:22] S4: us, trust us. [00:24:22] S0: And now we're