O TYM ODCINKU
AI isn’t just changing software, it’s rewriting the rules around hardware, regulation, and power. We start with a report that the FCC is moving to restrict Chinese-made optical transceivers used in US AI data centers, and we unpack the real-world tradeoff between supply chain security concerns and the very practical problem of capacity. If you pull a key part out of the 800G optics market overnight, who actually fills the gap, and what breaks first?
From there, the geopolitical mirror flips: China announces a cybersecurity review of Palo Alto Networks products with little detail, raising the uncomfortable question of when “security reviews” become economic leverage. Then we zoom out to the physical footprint of AI, where hyperscale data center projects are meeting environmental scrutiny and voter backlash. New York pauses permits to build a regulatory framework, and AWS withdraws a massive Maryland proposal even with major power nearby, signaling how quickly politics and community pressure can change the cloud roadmap.
We close with the security stories that tie it all together: a proof-of-concept showing how an AI-enabled email assistant can supercharge business email compromise, reports of an autonomous agent breaking containment and hammering third-party services at machine speed, and a new US push to let “vetted” private companies conduct offensive cyber operations under federal direction. If you care about AI governance, cybersecurity, AI transparency, the EU AI Act, or the future of data centers, this one connects the dots.
Subscribe for the monthly news rundown, share this with a friend who builds or secures AI systems, and leave a review with your take: where do you think the biggest risk really is?
Check out the Monthly Cloud Networking News
https://docs.google.com/document/d/1fkBWCGwXDUX9OfZ9_MvSVup8tJJzJeqrauaE6VPT2b0/
Visit our website and subscribe: https://www.cables2clouds.com/
Follow us on BlueSky: https://bsky.app/profile/cables2clouds.com
Follow us on YouTube: https://www.youtube.com/@cables2clouds/
Follow us on TikTok: https://www.tiktok.com/@cables2clouds
Merch Store: https://store.cables2clouds.com/
Join the Discord Study group: https://artofneteng.com/iaatj
POKAŻ NOTATKI 🔗
TRANSKRYPCJA 🔗
00:00:12.720 --> 00:00:19.359
Hello everybody and welcome to our monthly news episode uh update at the Cables of Clouds podcast.
00:00:19.600 --> 00:00:22.320
Um I'm here with uh I'm Tim.
00:00:22.399 --> 00:00:24.399
I'm here with Chris this morning.
00:00:24.640 --> 00:00:28.559
And uh it's a little early for me, so uh I'm just uh catching up.
00:00:28.640 --> 00:00:31.120
We're trying to get this out uh a little bit late.
00:00:31.280 --> 00:00:35.119
So um let's just jump right let's just jump right into it.
00:00:35.439 --> 00:00:44.240
So we've got some we've got a few stories uh this month and are kind of thematic, but uh we'll cover them one at a time and we'll we'll see what's up.
00:00:44.399 --> 00:00:52.799
So the first story we have is a there's a new FCC ban on Chinese optical receivers for data centers coming up.
00:00:53.039 --> 00:01:19.280
So uh the FTC, which is the you know, the United States Federal Communication Commission, is uh developing restrictions on Chinese Chinese-made optical receivers or transceivers rather for US AI data centers, um, with the rationale saying that you know transceivers uh can be used for data theft or malware or just running software, and so they can kind of kind of be man-in-the-middle type of of devices.
00:01:19.760 --> 00:01:37.680
Um some Chinese vendors like Inalite and Eoptalink, which I didn't know these I didn't know the name of these vendors, but uh there you go, uh are dominating kind of the 800 gig module market, and they're being used mostly in in in NVIDIA AI clusters.
00:01:37.920 --> 00:01:46.319
So there's US alternatives such as Coherent and Momentum, and they don't have the capacity, like just the the fabs.
00:01:46.400 --> 00:01:49.680
They they they haven't produced enough to just completely replace them.
00:01:49.840 --> 00:01:57.760
So it's interesting this is coming out, and uh so there's so in this piece, uh there's some you know, they've they they talk to a bunch of consultants.
00:01:57.840 --> 00:02:00.400
What what does this mean essentially for the industry?
00:02:00.879 --> 00:02:23.919
And most of them are like, well, I don't know that trans, you know, the firmware that we put on a transceiver is uh is truly sophisticated enough to be a real espionage risk, but you know, disrupting the uh supply chain of these transceivers is definitely a real risk to you know building and throwing up these uh these data centers.
00:02:24.240 --> 00:02:29.280
Uh yeah, so what do you think about that, Chris?
00:02:29.680 --> 00:02:37.599
Yeah, um like you said, the the two vendors in play here um that you mentioned being Intelite and EOptolink.
00:02:37.840 --> 00:02:51.439
Um I think probably one of the main reasons that you and I don't know who those companies are is probably because we we're we're not rich enough to be uh uh to be dealing with 800 gig optics at the in our in our day-to-days at this point, right?
00:02:51.520 --> 00:02:56.000
They seem to be very focused on, you know, kind of the NVIDIA AI clusters as as you called out.
00:02:56.240 --> 00:03:26.479
Um so I mean, you know, uh I'm I'm just entering the realm here in Australia where I'm seeing quite a bit of 400 gig, still haven't really seen a lot of 800 gig, but uh yeah, I imagine if you are at this kind of level of capacity where you are, you know, building these AI factories and things like that in-house, you probably do need things like this, and you probably are turning to um probably some of the some of the alternatives, especially in the uh the state of the supply chain uh being what it is, I'm sure you're probably exploring all avenues.
00:03:26.639 --> 00:03:36.319
So, you know, I do wonder if people just kind of run out and and buy you know a shit ton of these uh ahead of the ban uh coming down and and uh that actually being cut off from them.
00:03:36.479 --> 00:03:44.879
But yeah, I I mean I'm also kind of in the realm where I don't I don't know obviously I can be I could very much be proven wrong.
00:03:45.039 --> 00:03:50.400
And if I say this, I probably will get proven wrong, but I don't I don't see a lot of intelligence being baked into these optics.
00:03:50.479 --> 00:04:09.199
Um, you know, I mean there's um there are the the concept of smart optics out there where they can kind of do more than the average, just you know, kind of uh plug and play um overpriced piece of thing that uh that uh you know can converts light into into bits on the wire or whatever, right?
00:04:09.439 --> 00:04:21.839
Um so uh I I'm sure that I mean yeah, I wonder if they're viewing this as kind of like the the classic, you know, thing where you know where people put the little covers over the the the credit card readers at the at the gas pump and things like that.
00:04:22.000 --> 00:04:25.680
But um yeah, it it it is quite interesting.
00:04:25.839 --> 00:04:28.959
Um and yeah, I don't I don't know what it's gonna do to the market.
00:04:29.279 --> 00:04:31.680
Yeah, I'm I'm kind of curious how much.
00:04:31.839 --> 00:04:38.079
I mean, you know, the storage and uh processors get smaller and smaller, so I don't know.
00:04:38.160 --> 00:04:44.560
I I would assume that somebody could pick up one of these transceivers and figure out essentially what's on it, right?
00:04:44.639 --> 00:04:47.519
Like you know, they could reverse engineer it if they really wanted to.
00:04:47.680 --> 00:04:53.040
So I wonder if some of this is just protectionism uh masquerading as cybersecurity.
00:04:53.279 --> 00:04:55.040
So I I don't I don't know though.
00:04:55.199 --> 00:04:58.160
So there's definitely big politics in play here.
00:04:58.560 --> 00:05:01.120
Oh, it's with everything, yeah, no kidding.
00:05:01.360 --> 00:05:05.360
Um another yeah, so another another China story.
00:05:05.680 --> 00:05:12.639
Uh so like I said, there's this rivalry between the US and China, especially as pertains to AI and cybersecurity, is really heating up.
00:05:12.720 --> 00:05:13.600
So this one's new.
00:05:13.680 --> 00:05:16.240
This one's actually from the point of view of China.
00:05:16.480 --> 00:05:33.040
So recently, uh China's cyberspace administration announced that they're now reviewing Palo Alto uh their products, citing the need to ensure the quote, safe and stable operation of critical information infrastructure and prevent cybersecurity risks.
00:05:33.199 --> 00:05:44.160
But they didn't provide any detail on like what they're doing to prov like why they're reviewing specifically Palo Alto uh or what that review entails.
00:05:45.040 --> 00:05:55.040
So um now China has done this before, like they picked back in 23, they picked uh on Micron, which which is kind of interesting.
00:05:55.360 --> 00:06:05.680
Um, and they ended up banning Micron's products uh in China, but it it was replaced by domestic uh competitors like Huawei.
00:06:05.920 --> 00:06:14.000
So again, a little bit of uh what seems like a little bit of protectionism masquerading as cybersecurity defense, maybe.
00:06:14.160 --> 00:06:15.839
Um it's it's hard to say.
00:06:16.079 --> 00:06:20.079
So yeah, what do you uh anything to add on that one?
00:06:20.560 --> 00:06:29.759
Yeah, I guess it probably goes without saying that um obviously Tim and I um do work currently for Palo Alto competitors.
00:06:29.839 --> 00:06:37.759
So this is a I I I want to openly say that this is not at all uh even a dig at anything going on with Palo Alto or their products uh whatsoever.
00:06:37.839 --> 00:06:48.959
This is kind of just like a an uh completely out of the blue um kind of stab at obviously a market leader in uh in this particular category of cybersecurity.
00:06:49.040 --> 00:06:50.240
So it's a very strange move.
00:06:50.319 --> 00:06:59.439
And you know, I wonder if it's a bit of um uh kind of a retaliation for some of the other things like we like we just mentioned with the transceivers and things like that.
00:06:59.600 --> 00:07:11.120
So um, you know, you've got the US restricting Chinese optics on security grounds, and now China has opened this kind of open review about a a major security vendor on security grounds in the same batch.
00:07:11.360 --> 00:07:24.079
Um I don't know if any of this is technical at the end of the day, um, which is um kind of a you know a sad state for us to be in as technologists, but um yeah it's uh it's quite interesting.
00:07:24.240 --> 00:07:25.920
Um I I I I don't know.
00:07:26.160 --> 00:07:30.480
Like a bit it like uh there's a lot of correlations being drawn to Micron here.
00:07:30.560 --> 00:07:31.839
I don't think they'll go that far.
00:07:32.000 --> 00:07:39.839
I don't think you can take it to the the effect that you actually ban all of Palo Alto's products within the sale of China.
00:07:39.920 --> 00:07:44.639
Um I feel like that would be that would be pretty uh pretty critical at this point in time.
00:07:44.720 --> 00:07:46.480
But I don't know, how do you feel, Tim?
00:07:47.040 --> 00:07:53.759
Yeah, I I mean I I don't know if I I don't know if I at this point I'm not sure I would say that anything's off the table.
00:07:53.920 --> 00:07:54.959
I mean I would hope, right?
00:07:55.040 --> 00:08:00.639
That Palo I mean, but Micron's a pretty big dealer too, and they they banned them.
00:08:00.800 --> 00:08:02.639
So yeah, it's really hard to say.
00:08:02.800 --> 00:08:07.120
Uh I really am curious why they specifically singled out Palo Alto.
00:08:07.360 --> 00:08:09.920
I'm sure there's polit there's politics involved here.
00:08:10.160 --> 00:08:18.879
Um, because you know, you would think that they would just target American cybersecurity companies if this was so or maybe they're just starting with Palo Alto.
00:08:18.959 --> 00:08:19.519
I I don't know.
00:08:19.600 --> 00:08:22.240
That's a it's really rather interesting.
00:08:22.399 --> 00:08:29.439
Um I don't know again, this kind of tit for tat uh governmental level stuff.
00:08:29.600 --> 00:08:31.439
I there's probably money involved in it.
00:08:31.519 --> 00:08:33.759
There's certainly politics involved in it.
00:08:33.919 --> 00:08:37.759
Um there's I think there's a lot of protectionism being involved with it.
00:08:37.919 --> 00:08:48.159
Like, hey, we've you know, we're banning this foreign vendor so that our our uh local vendor will have better, you know, luck at at selling to domestic.
00:08:48.799 --> 00:08:51.279
Which is which is the nature of their game, as we've seen, right?
00:08:51.440 --> 00:08:53.200
So that's it's not off the table.
00:08:53.440 --> 00:08:56.159
Um I'm I I think I'm I'm being more hopeful.
00:08:56.240 --> 00:09:00.960
I don't want this to be a domino that falls in that direction, but it it might end up being that way, but we'll see.
00:09:01.120 --> 00:09:01.759
Yeah.
00:09:02.879 --> 00:09:03.360
All right.
00:09:03.519 --> 00:09:09.519
And next up we have uh a couple in in everyone's favorite category, uh, which is AI data center news.
00:09:09.679 --> 00:09:18.399
Um, you know, I'm sure uh we as much as we'd like to get away from this, uh it's gonna be a an ever uh an ever uh present news topic here.
00:09:18.480 --> 00:09:27.360
So first up we have one um from Network World where a New York executive has uh paused orders on hyperscale data centers.
00:09:27.440 --> 00:09:50.159
So Governor Kathy Holtsul, I believe is how you say her last name, signed an executive order establishing uh what the article describes as the nation's first uh memori or moratorium on hyperscale data centers within New York, pausing for environmental permits uh up to a year while the state builds this kind of regulatory framework around these things.
00:09:50.399 --> 00:10:04.720
Um the state will produce a generic environmental impact statement covering water, energy, air, quality, and uh community investment framework within 60 days, which is a relatively short time frame.
00:10:04.879 --> 00:10:15.279
Um but these proposed requirements include over uh I think it says 1 million per megawatt of utility demand per project plus labor and infrastructure commitments.
00:10:15.519 --> 00:10:19.120
So um if you're doing the math, those are those are not small numbers.
00:10:19.200 --> 00:10:29.840
So it's uh, you know, I guess there's probably if if they're gonna end up doing these things, they're gonna write it in a way where there's there's a lot to gain from the municipalities that have to service them.
00:10:30.080 --> 00:10:33.679
But um, yeah, what's what's your reading on this one, Tim?
00:10:35.519 --> 00:10:54.480
I've been following this for not this necessarily for New York, but like just generally following this this uh AI data center back and forth um between essentially corporations and billionaires and the people that live near these things that are going up uh for like a year or more now.
00:10:54.720 --> 00:11:03.759
Um it's it's interesting that at the same time we have you know, here's like a state like New York that's saying basically, no, you can't build them.
00:11:03.840 --> 00:11:13.120
We're gonna we're gonna do environmental impacts and and and put a moratorium on them and also make them potentially prohibitively expensive for these companies to run them.
00:11:13.360 --> 00:11:29.519
Uh, you also have you know, 10 stories come out at the same time of all these small towns where the governing, you know, board or mayor or whatever it takes these uh takes money from companies to just uh you know sign through.
00:11:29.759 --> 00:11:30.480
Yeah, yeah, yeah.
00:11:30.559 --> 00:11:34.399
We'll just give you all this this this uh land for data centers.
00:11:34.639 --> 00:11:38.159
So it's I I don't know what the answer is here.
00:11:38.240 --> 00:11:43.600
I think I think that uh first of all, I mean, let's put this in perspective, right?
00:11:43.679 --> 00:11:51.600
The US has more data centers than the rest of the world, not combined, but not not too far off either.
00:11:51.840 --> 00:11:58.960
Um, you know, and then the amount of data centers that are still being planned, it's just in my opinion, it's just it's wasteful.
00:11:59.039 --> 00:11:59.840
It's so much.
00:11:59.919 --> 00:12:04.639
And it's just it's it's completely it's the tragedy of the commons, right?
00:12:04.720 --> 00:12:14.879
Like one person walks out with a with an axe to chop down a tree, and then the next person walks out with an axe to chop down their tree, and then there's no trees left, but everybody was just doing what was right for them.
00:12:15.120 --> 00:12:22.799
So try classic tragedy of the commons problem, except that the commons in this case is like water and electricity for people.
00:12:23.200 --> 00:12:25.200
So yeah.
00:12:27.120 --> 00:12:28.080
I don't know.
00:12:28.480 --> 00:12:33.519
Yeah, it's uh it's a it's a recurring theme um that we've been seeing here.
00:12:33.600 --> 00:12:54.000
So I mean, I mean, this is the the article kind of calls out that this is one of the nation's first in this type of um I g I guess characterization of this um uh this act of putting a halt on the permits while they renegotiate kind of the um the requirements, which I don't think is necessarily gonna stop any of these things from getting built.
00:12:54.080 --> 00:13:02.799
I think you know the the money's gonna get paid, um, at least until the bubble potentially bursts, and then and then we're uh someone's left holding the bag at that point.
00:13:02.960 --> 00:13:07.039
Um, but keeping up with this theme, let's uh let's move on.
00:13:07.200 --> 00:13:12.879
So um so AWS, um, we have one here from datacenterknowledge.com.
00:13:13.200 --> 00:13:19.039
AWS data center withdrawal signals growing political community challenges, the article reads.
00:13:19.360 --> 00:13:32.480
So AWS withdrew its application for a 2.5 million square foot data center in Calvert County, Maryland, citing developmental timelines, operational requirements, and its ability to deliver quickly for customers.
00:13:32.639 --> 00:13:48.080
So the proposed uh sorry, the proposal covered three campuses across 200 acres with eight buildings up to 500 um uh megawatts supplied by Constellation Energy near the Calvert Cliffs nuclear plant.
00:13:48.559 --> 00:13:59.679
Data Center Watch uh is cited saying 75 major projects worth more than 130 billion were delayed or canceled for the first time in three months in 2026.
00:14:00.240 --> 00:14:07.039
And three incumbent county commissioners who opposed the moratorium lost their primaries on the 23rd of June.
00:14:07.279 --> 00:14:11.360
Um so it seems like we have uh we have a bit of a theme here, Tim.
00:14:11.519 --> 00:14:14.080
Um what what's what say you about this?
00:14:15.120 --> 00:14:16.159
Uh good.
00:14:16.799 --> 00:14:19.360
I mean, uh I don't know what else to say.
00:14:19.600 --> 00:14:20.320
So this is the thing.
00:14:20.399 --> 00:14:25.120
It I mean, it AWS, all the hyperscalers are gonna keep trying to build capacity.
00:14:25.279 --> 00:14:37.759
That's they've you know, way back in God, 23, 20, whatever, we when we were talking about why hasn't the why haven't all the cost savings uh appeared for the cloud, right?
00:14:37.919 --> 00:14:39.360
Uh not happening, no.
00:14:40.080 --> 00:14:48.240
And and well, yeah, was and and our our uh our conclusion at that time was that they had a capacity problem, right?
00:14:48.320 --> 00:14:54.000
Like that if they actually should if they actually passed on savings, they would get more users and everybody would be DDoSing each other.
00:14:54.080 --> 00:14:55.519
Well, that's still the case, right?
00:14:55.679 --> 00:14:59.279
Even before AI, even before AI came along, that was the case.
00:14:59.600 --> 00:15:03.440
So, you know, they're gonna keep trying to build data centers for whatever reason.
00:15:03.519 --> 00:15:12.960
I know AWS is actually getting out of the of the creating its own model game, but they'll they'll still, of course, offer hosting, obviously, for for other models.
00:15:13.200 --> 00:15:27.679
Um I do think the the interesting thread here is that the people who oppose the moratorium, basically who were probably standing to gain something from those this data centers being built, uh, lost their primaries.
00:15:27.759 --> 00:15:34.240
So this is this is people fighting back, uh, you know, with their with their you know, at the polls, essentially.
00:15:34.480 --> 00:16:01.279
Um not mentioned here, but you know, kind of uh a theme I'm seeing lately is that uh, you know, the the government, who is very, you know, especially the Trump administration is very friendly to AI companies and data center builds and all of that, uh, have started saying things like national security to override a lot of this and get these make so people can't actually push back on these things.
00:16:01.440 --> 00:16:07.519
Um so I'm curious to see because I think that's at some point that's gonna come to a head, and then it'll probably end up in the Supreme Court.
00:16:07.600 --> 00:16:10.240
And at that point we know probably which way that'll go.
00:16:10.399 --> 00:16:16.559
But it will be interesting to see that whole thing play out and how long it takes to play out specifically.
00:16:17.360 --> 00:16:18.320
Yeah, agreed.
00:16:18.720 --> 00:16:19.759
Not much more to add there.
00:16:19.840 --> 00:16:22.000
I definitely obviously see this as a good thing.
00:16:22.159 --> 00:16:34.399
Um, especially, you know, I think there's real kind of significance in this one, especially because like if you think about it, like they they already called out that this was right next to uh an actual nuclear plant, right?
00:16:34.559 --> 00:16:37.039
So the the power thing was like a solved problem.
00:16:37.120 --> 00:16:39.360
That was when that they knew where that was gonna come from.
00:16:39.440 --> 00:16:50.320
That was not something they had to um kind of actually build or or um you know uh uh supply additional resources on that was already ready to go, and it still didn't even proceed with that.
00:16:50.480 --> 00:16:53.600
Um so I'd say it's a pretty powerful statement.
00:16:53.840 --> 00:16:55.279
Good job, Marilyn.
00:16:56.320 --> 00:16:56.879
Yeah.
00:16:57.120 --> 00:17:00.960
And and it'd be clear, I'm not against any data centers being built anywhere, right?
00:17:01.039 --> 00:17:08.079
I'm just generally skeptical of the need uh for these gigantic campuses.
00:17:08.240 --> 00:17:19.200
I think I'm more into the idea that like I think the future is gonna be more around edge inferencing and edge computing than like that's more sustainable than building giant data centers.
00:17:19.359 --> 00:17:20.880
Um, but that's yeah.
00:17:21.200 --> 00:17:24.400
Yeah, it's it sucks because like it's weird.
00:17:24.480 --> 00:18:00.799
Like what I think you and I are probably in a relatively similar camp where like the the new emergence of this technology is w we both see it as a great thing and a very cool thing, but also um a very dangerous thing and how it can be done, whether it be kind of from the view of the of the cyber defense lens where there's you know attacks being um uh uh kind of scaled up at these uh kind of grandiose scales because of because of the use AI, but also the infrastructure that it's required to run it, um, could kind of kind of take away from you know people's livelihood and things like that.
00:18:00.960 --> 00:18:10.559
So we don't wanna we don't want to rob Peter to pay Paul just to have a you know a cool new technology that we don't where we don't even know where it's gonna go at the enterprise level at this point, right?
00:18:10.720 --> 00:18:14.480
So it's kind of uh rocking rocking hard place.
00:18:15.200 --> 00:18:16.720
Yeah, for sure.
00:18:17.279 --> 00:18:24.240
Um all right, so moving on, the next thing the so the the EU has uh passed, by this point they've passed it.
00:18:24.319 --> 00:18:27.839
It's taken uh not passed it, but it's taken effect, actually, as a recording.
00:18:28.079 --> 00:18:40.319
But the EU AI Transparency Uh Act was passed uh in well in the EU to basically require that uh okay, so actually let me just read it right from the from the summary here.
00:18:40.480 --> 00:18:52.079
So the EU AI Transpar Act, transparency requirements uh require systems placed on the market before that date, so already passed, having until the second of December to start complying with this.
00:18:52.319 --> 00:19:16.559
So organizations that deploy AI in the EU must tell users when they're interacting with AI chatbots, deep fakes, recognition, biometric categorization, basically anything that's created by Gen AI content must carry machine readable markers labeling something as AI, uh fully AI, partially AI modified, essentially the AI Photoshop of our era.
00:19:16.720 --> 00:19:33.839
Um, and so non-compliance with releasing uh content apps, whatever it is, uh the the fines range from 750,000 euros to 15 million euros or up to 3% of worldwide annual revenue.
00:19:34.000 --> 00:19:34.960
Holy shit.
00:19:35.119 --> 00:19:40.079
And the rules apply to any company placing systems on the EU market, regardless of where they're located.
00:19:40.240 --> 00:19:41.519
Now that's the important part, right?
00:19:41.599 --> 00:19:45.519
So if this is being run out of the US or China or somewhere else, doesn't matter.
00:19:45.599 --> 00:19:50.640
If you're if it's on the EU market, you're you you label it or else.
00:19:50.880 --> 00:19:54.400
Um so yeah, that's that's a that's an interesting law.
00:19:54.559 --> 00:19:56.640
What do you what do you think about that?
00:19:57.200 --> 00:20:21.839
I mean, uh we know the the EU, I feel like they're usually usually on the on the side of good in these things, but they often swing the gavel just a little too hard and make it a little bit too restrictive so that um it it ends up like I understand it's supposed to be for the the sake of the people, but it kind of makes things also just as difficult to manage.
00:20:23.359 --> 00:20:47.119
If you think about it, uh I guess they would they wouldn't really care about US-based companies, but if you if you're if a US-based company and you have um you know users sitting in the EU, like I don't know how how the hell one you track this, like whether or not things obviously if AI is meant to kind of service the entire enterprise, there's gonna be times where AI generated content is crossing boundaries between one or the other.
00:20:47.279 --> 00:20:52.319
Um, I don't know if these kind of what are they calling them, the uh machine readable markers.
00:20:52.400 --> 00:20:59.440
I don't know if these markers need to be stripped at that point or if they kind of um need to be ever persistent across those boundaries.
00:20:59.599 --> 00:21:02.160
And also like who owns it?
00:21:02.400 --> 00:21:20.160
Like it like is is the legal and the platform teams responsible for making sure that this this happens on uh you know content within the EU and and not in other boundaries, like uh, or do they just implement it across the board just to make sure uh that they're compliant?
00:21:20.240 --> 00:21:23.759
Because obviously the the fines are are quite quite hefty.
00:21:24.000 --> 00:21:30.240
Um yeah, I think I I don't know how they measure it, but um I think it's gonna be a fucking nightmare.
00:21:30.480 --> 00:21:32.319
Yeah, I no you're right, you're right.
00:21:32.480 --> 00:21:36.240
The general of the EU swings the hammer incredibly hard.
00:21:36.319 --> 00:21:45.599
And and as usual, it's one of these things where governments don't necessarily understand how the technology is being consumed or worked or or like delivered, right?
00:21:45.759 --> 00:21:54.079
So, like for example, uh, you know, if it says the EU market, but like that's extremely broad.
00:21:54.400 --> 00:21:59.599
Is that are we saying any person in the EU that can access a website is now this is the EU market?
00:22:00.079 --> 00:22:00.880
Like, you know what I mean?
00:22:00.960 --> 00:22:10.799
Like if I make a if somebody makes a TikTok and TikTok just happens to be available in Europe through the Apple store or something like that, is you know, is ByteDance or not ByteDance?
00:22:10.960 --> 00:22:12.640
Uh who's who owns the who bought it?
00:22:12.960 --> 00:22:13.680
Yeah, it's ByteDance.
00:22:14.000 --> 00:22:16.960
Oh no, that's Yeah, well internationally it's still ByteDance, right?
00:22:17.039 --> 00:22:17.279
Yeah, yeah.
00:22:17.440 --> 00:22:18.640
Internationally it's still ByteDance.
00:22:19.039 --> 00:22:21.119
Um, you know, is ByteDance on the hook?
00:22:21.200 --> 00:22:24.880
Is it considered part of the EU market because somebody in the EU can access TikTok?
00:22:25.119 --> 00:22:33.519
You know, and if not, are they required is every company that doesn't want to do this now forced to block users from the EU?
00:22:33.839 --> 00:22:40.319
Uh is that like I there's definitely some execution questions uh left hanging on this one.
00:22:40.640 --> 00:22:53.200
I f I feel like it's written so vaguely, it's it's a perfect opportunity for someone to get made an example of whenever they push the boundaries a little bit too far in either direction and don't play the politics side of it right.
00:22:53.359 --> 00:22:58.319
Um they'll they'll definitely have the the the kibosh put down on them pretty quick.
00:22:58.720 --> 00:22:58.960
Okay.
00:22:59.039 --> 00:23:08.319
Uh and as a follow-on for that, so Anthropic has pledged to embed watermarks uh to for to comply with this Transparency Act, by the way.
00:23:08.480 --> 00:23:09.920
Just that's that's their goal.
00:23:10.160 --> 00:23:24.880
So Anthropic said it'll embed imperceptible watermarks in text generated by Claude models and add digitally signed provenance metadata to generated files where supported in response to EU AI Act requirements.
00:23:25.039 --> 00:23:31.119
So I mean that's I work in technology and I'm not sure what that actually means, but okay.
00:23:31.359 --> 00:23:36.160
Um so the change applies globally across all Claude products, including the API.
00:23:36.319 --> 00:23:46.799
So if you if you are using Claude even via API call, your the what you get back from the model will have some kind of watermark in or metadata included.
00:23:46.960 --> 00:23:51.119
Um so yeah, so third party providers, AWS, Google Cloud, Microsoft.
00:23:51.359 --> 00:23:54.960
Um there's a lot of, I mean, yeah.
00:23:55.279 --> 00:23:57.759
So does it are they gonna watermark the images?
00:23:57.839 --> 00:24:02.640
And if they do, I mean, obviously it would watermark it in a way that it's not visible, I I would assume.
00:24:02.880 --> 00:24:07.839
But you know, you can always use things to there's tools that'll strip all that out, right?
00:24:08.000 --> 00:24:09.200
So what does that look like?
00:24:09.440 --> 00:24:17.200
Um and Anthropic itself says detected marks are not conclusive proof of AI authorship, which is interesting.
00:24:17.359 --> 00:24:23.440
It's an interesting thing to say in the same breath that you're saying we're putting watermarks on all our shit.
00:24:23.680 --> 00:24:37.759
So I d uh so if it's if it doesn't prove anything, it literally is like, hey, uh we're this is just kind of a best effort checkbox thing, is what Anthropic is essentially hedging on.
00:24:38.079 --> 00:24:54.960
So I mean I I guess at some point, you know, uh there's probably an assumption that yeah, all the all the code and potentially all the uh the ABI calls, whether or not they're using something like an MCP or or an uh agent-to-agent protocol or something like that.
00:24:55.119 --> 00:24:59.200
Maybe they're some they're assuming that all of this is going to be running by AI anyway.
00:24:59.440 --> 00:25:17.200
And you know, maybe the maybe the foundation models build something in to say, you know, if this model it will always have context to know that it's running within the EU and if it gets these kind of uh kind of machine readable markers and an API response or something like that to not strip those.
00:25:17.359 --> 00:25:24.160
Because yeah, if like if if I'm a developer and I'm building this, yeah, uh every API call, I don't need all the fucking data that's in there, man.
00:25:24.240 --> 00:25:30.319
I only pull out exactly what I need and use that to to iterate and um add that to my next item.
00:25:30.400 --> 00:25:43.200
So if you have to carry that forever, um like yeah, I the I think obviously, like you said, the I think the government side of it and the um technology side of it just do not line up whatsoever.
00:25:43.279 --> 00:25:46.079
I don't know how the hell you track this, I don't know how you enforce it.
00:25:46.240 --> 00:25:49.440
Um and it just sounds like a headache for for probably everyone involved.
00:25:49.759 --> 00:25:57.039
Yeah, it's classic, you know, government compliance requirement meets uh like what's possible, right?
00:25:57.119 --> 00:26:04.400
Like what's actually available and potential like could actually meet the requirement, but also meet the spirit of the law.
00:26:04.480 --> 00:26:08.319
And I think that part is still even a bridge further uh yet.
00:26:08.559 --> 00:26:09.680
So 100%.
00:26:10.319 --> 00:26:10.799
All right.
00:26:10.960 --> 00:26:14.079
Let's move on to hopefully some some more fun stuff.
00:26:14.240 --> 00:26:22.400
Um all right, so next up we have some um uh some stories about AI-enabled attacks being on the rise.
00:26:22.559 --> 00:26:27.920
So first up we have one about AI-enabled email accounts um acting as an insider threat vector.
00:26:28.079 --> 00:26:32.400
So uh this one here we have directly from the Barracuda blog.
00:26:32.480 --> 00:26:47.279
So Barracuda's rev team actually ran a controlled proof of concept showing how a compromised AI email or sorry, AI enabled email accounts, uh which was co-pilot, Microsoft's co-pilot within their specific test, can become an insider threat.
00:26:47.440 --> 00:27:09.200
So the the assistant actually used um the assistant was used, sorry, to establish persistence and identify targets within the organization, generating phishing emails, matching the victim's own writing style, and ultimately redirect uh a$247,000 wire transfer by impersonating one of the CEOs.
00:27:09.359 --> 00:27:13.359
Uh Barracuda's own framing is that the attack is not fundamentally new.
00:27:13.440 --> 00:27:18.960
What has changed is the speed, the scale, and the efficiency to which an attacker has uh access to those.
00:27:19.039 --> 00:27:22.240
And I th I think we've we've talked about this on the show quite a bit, right?
00:27:22.319 --> 00:27:31.680
Like the I don't think everyone's you know talking about mythos and talking about Fable and you know kind of the the sophistication growing of the attacks.
00:27:31.839 --> 00:27:41.119
I think I think this is kind of the bigger problem is just the the sheer magnitude of the attacks, um, whether they be kind of low IQ attacks like this one or not.
00:27:41.359 --> 00:27:49.359
Um there's gonna be uh a a way larger amount of those in the pool um at any given time.
00:27:49.519 --> 00:27:52.240
And you know, people are really just gonna have to be on the defensive.
00:27:52.319 --> 00:28:04.160
And I wonder how much um, you know, you're the people go through these cybersecurity trainings and all a lot of the stuff seems ridiculous, but I wonder if you really are just gonna have to be like um at this point where you essentially trust no one.
00:28:04.240 --> 00:28:10.000
Um and you know, we have MFA enabled just to fucking talk to somebody on the phone and things like that, right?
00:28:10.079 --> 00:28:12.319
It's gonna be I wonder if it's gonna get pretty ugly.
00:28:12.720 --> 00:28:13.359
Safe words.
00:28:14.319 --> 00:28:15.759
Yeah, exactly.
00:28:16.799 --> 00:28:19.680
Yeah, give me your safe word before I talk to you.
00:28:19.839 --> 00:28:20.480
Uh yeah.
00:28:20.720 --> 00:28:22.559
Did we rotate the safe word last week?
00:28:22.720 --> 00:28:23.279
I don't remember.
00:28:26.880 --> 00:28:35.200
No, I mean, okay, so that for first of all, obviously this is a blog, this is a vendor blog, but it's it's what is it what the the the thing that it says?
00:28:35.440 --> 00:28:38.880
No, but the thing that it says is still true, right?
00:28:38.960 --> 00:29:00.000
Like anybody could figure out that, hey, if I hook up some AI thing like co-pilot or whatever it is to my outlook, and it can go through my mail, it can read me, it knows everything that is in my email, basically, knows my calendar, it knows how I write emails, it knows what I'm working on essentially because of that, right?
00:29:00.480 --> 00:29:06.720
If that email box was compromised, not the box, not even really the box, right?
00:29:06.799 --> 00:29:16.640
If if the AI was compromised and it could read all of that data, I mean, could you spear phishing at a scale that is insane, right?
00:29:16.720 --> 00:29:19.920
Like, I mean, beyond beyond spear phishing at that point, right?
00:29:20.000 --> 00:29:23.359
Like it already knows exactly the context to sending people emails.
00:29:23.519 --> 00:29:32.880
Hey, that thing I was, you know, that thing I sent you last week, you know, hey, I I I finished it and here's a here's a malware enabled file, like, you know, doc X or something.
00:29:33.200 --> 00:29:48.319
Like it's like yeah, the mind boggles on how and again, like they point out, it's not that it's more it's not even that it's like super, super sophisticated, but speed is really the the thing to to consider, right?
00:29:48.400 --> 00:29:52.079
Like a a human can only type so fast, can only copy and paste so many things.
00:29:52.400 --> 00:30:00.880
Even people writing scripts, you know, that you still there's still some lag involved when a human is is doing things, right?
00:30:01.039 --> 00:30:09.440
But an AI can you know can just do it so quickly because it doesn't have to the eyes don't have to read what's on the screen, right?
00:30:09.519 --> 00:30:11.119
Like there's no anyway.
00:30:11.440 --> 00:30:17.839
So yeah, Barracuda pointing out that like, hey, this is not a new new attack, it's the speed and the scale.
00:30:17.920 --> 00:30:27.920
And that's what we're gonna see, I think, is a lot of you know, before uh a lot of these attacks are it's like the swing school of fish thing, right?
00:30:28.000 --> 00:30:33.119
Like, you know, you're you're safe in the pack because only a few fish can get at a time.
00:30:33.279 --> 00:30:34.880
This is this is where we're headed, right?
00:30:34.960 --> 00:30:43.680
This is where we're headed, especially as we do more open, open flaw type crap where we integrate AI more and more into the things we know and can do.
00:30:43.920 --> 00:30:49.440
It becomes super uh easy to impersonate someone once you've compromised that AI.
00:30:49.920 --> 00:30:51.200
Yep, 100%.
00:30:52.720 --> 00:30:57.680
Um, and all right, and kind of on the back of this, this was probably a relatively much bigger story.
00:30:57.759 --> 00:31:10.000
You may have already heard about this at this point, but uh so OpenAI um uh actually disclosed recently, I think it was just kind of late, uh late last month, yeah, on the 29th of July.
00:31:10.160 --> 00:31:26.720
Um, disclosed that a rogue autonomous agent had actually escaped from one of their test environments and compromised Hugging Face, um, which is if you know Hugging Face is kind of responsible for hosting a lot of these kind of third-party open weight models that a lot of people are using for uh numerous projects around the world.
00:31:26.960 --> 00:31:38.559
So um it was compromised Hugging Face and also reached out for uh and also reached four additional third-party services using publicly exposed credentials that have found online.
00:31:39.119 --> 00:31:47.039
The agent executed 17,600 attacks, uh attack actions between July 9 and 13th.
00:31:47.200 --> 00:31:47.839
So right there.
00:31:48.000 --> 00:31:52.400
Kind of exactly what we were talking about in the last article, just the the magnitude of these things, right?
00:31:52.480 --> 00:31:57.920
Like what is how many humans are executing, you know, 17,000 attacks in about four days?
00:31:58.079 --> 00:32:00.480
Uh so it's uh pretty significant.
00:32:00.640 --> 00:32:04.480
Um and it spent more than two days penetrating Hugging Face's infrastructure, right?
00:32:04.559 --> 00:32:07.680
So this is kind of just like pounding it day in, day out, right?
00:32:07.759 --> 00:32:12.240
Because it's been given an extra an instruction that it needs to come you know comply with.
00:32:12.720 --> 00:32:16.000
Um and the impact on the other four organizations were less severe.
00:32:16.160 --> 00:32:22.880
Modal labs confirmed that the agent exploited an unauthenticated customer endpoint, while the platform itself was not compromised.
00:32:23.119 --> 00:32:30.880
Um, yeah, I think when this came out, I think Hugging Face was kind of coming to the table saying that, you know, hey, we think we've been compromised.
00:32:30.960 --> 00:32:36.559
And then I think actually OpenAI had to come out and be like, hey guys, actually uh we did some research into it.
00:32:36.640 --> 00:32:38.000
It was us, we found it.
00:32:38.160 --> 00:32:51.680
Um I think in this one it it's it's kind of hard to correlate everything because uh shortly after this happened, Anthropic also came to the table and like, hey guys, our our our model was smart enough to break out of its harness too.
00:32:51.759 --> 00:32:54.799
Like it it did, you know, it did bad things and all this stuff.
00:32:54.960 --> 00:33:01.119
I don't know why that's uh something you really need to be a uh a a me uh pick me about.
00:33:01.279 --> 00:33:19.200
But um the I think there was some level of it to where the agent was acting under the context where it was like it it still had internet access, but I believe they told it it didn't have internet access, but they gave it kind of specific instructions to complete a task, right?
00:33:19.279 --> 00:33:25.200
So it used everything that it could and discovered, oh hey, I have internet access, I can actually do this and and that.
00:33:25.279 --> 00:33:30.079
And obviously 17,600 attacks later, uh here we are.
00:33:30.319 --> 00:33:36.160
So yeah, any uh does this give you warm fuzzies, Tim?
00:33:36.240 --> 00:33:38.000
How's your how's your harness today?
00:33:38.559 --> 00:33:44.400
I I think it's a weird flex by these companies, and I get where they're going, right?
00:33:44.480 --> 00:33:53.519
Like they're saying, oh, our models are so freaking smart that even completely unprompted, they can figure out how to escape their sandbox or their harness.
00:33:53.759 --> 00:34:01.039
And I'm not actually having used AI now extensively, built many things with AI.
00:34:01.119 --> 00:34:10.719
You know, I just finished a I just finished a Claude uh agent building Clote uh camp with uh Andrew Brown over at Exam Pro, which is awesome, by the way.
00:34:10.880 --> 00:34:12.320
I went through the whole thing.
00:34:12.800 --> 00:34:15.920
They're not super intelligent, right?
00:34:16.079 --> 00:34:20.480
Like, yes, they'll they'll they'll use whatever methods are available to them.
00:34:20.719 --> 00:34:25.199
So really the what what is a flex should really be a fucking black eye.
00:34:25.360 --> 00:34:26.880
Like, wow, congratulations.
00:34:27.039 --> 00:34:36.000
You are so bad at building sandboxes and harnesses for your shit that like it literally just said, hey, I need internet access.
00:34:36.079 --> 00:34:38.559
Oh shit, I've got it, and it just like goes.
00:34:38.800 --> 00:34:41.360
Like that's not that's not something to flex about, guys.
00:34:41.440 --> 00:34:48.159
Like it doesn't, it's not that you know, it's not that your model is so you know, star-spangled smart.
00:34:48.400 --> 00:34:58.800
It's that you guys just have done nothing to contain it, really, you know, other than saying, hey, you can't use the internet somewhere in a prompt somewhere or something, you know.
00:34:58.960 --> 00:35:07.840
Um yeah, and I'm not I'm not impressed uh by I'm not impressed by it breaking containment, containment, which clearly wasn't very containing.
00:35:08.000 --> 00:35:19.679
Um and and we know we've got so many stories now of if you are not extremely specific with your instructions that you know it will just pursue, it's like the terminator, right?
00:35:19.760 --> 00:35:25.119
It will not it doesn't feel, it doesn't it just will not stop until you are dead, type of thing.
00:35:25.440 --> 00:35:35.119
This is this is kind of like uh if you expect the uh like on the uh classic Cisco uh SSH things like that.
00:35:35.199 --> 00:35:42.159
If you it if the message of the day banner says, hey, don't hack this system, it's it's managed by this organization.
00:35:42.400 --> 00:35:45.760
If you expect that to do anything, you're you're you're fucking nuts, right?
00:35:45.920 --> 00:35:55.440
Uh that's just kind of uh uh purely for liability, but it's like uh there's a you would think the things are smarter than that, but you know, here we are.
00:35:57.599 --> 00:35:58.239
Yeah.
00:36:00.079 --> 00:36:04.800
We got I think we got one more story which just came out, which is uh Yeah.
00:36:05.119 --> 00:36:07.280
Yeah, this one this one's pretty fresh.
00:36:07.360 --> 00:36:15.280
So if we don't cover all the the pieces tied to it exactly correctly, we're sorry, but it's uh pretty hot off the press, so we feel like we should we should probably bring it up.
00:36:15.599 --> 00:36:17.199
Sorry, lost it there for a second.
00:36:17.440 --> 00:36:24.239
Um so yeah, so now that there was so uh and when you say hot off the presses, uh to be clear, we're we're recording this a day late.
00:36:24.400 --> 00:36:25.920
So this came out yesterday.
00:36:26.079 --> 00:36:27.119
We would have missed this basically.
00:36:27.199 --> 00:36:30.159
We had if we'd actually released on time uh yesterday.
00:36:30.320 --> 00:36:40.000
So there's a a presidential memorandum from the uh Trump administration, quote unquote, expanding capabilities to combat transnational cyber enabled crime.
00:36:40.159 --> 00:36:41.199
That's a mouthful.
00:36:41.599 --> 00:36:51.599
So what this does is it directs the creation of a program that lets vetted, vetted, and I'm using the air quotes here, vetted, private you private U.S.
00:36:51.679 --> 00:36:52.159
companies.
00:36:52.239 --> 00:36:54.480
This is the government telling private U.S.
00:36:54.559 --> 00:37:01.519
companies to conduct offensive cyber operations against foreign criminal organizations under federal direction.
00:37:02.079 --> 00:37:10.719
So there was already an earlier executive order um in March, just generally talking about cybercrime and fraud and whatnot.
00:37:10.880 --> 00:37:13.599
This is actually saying, okay, well, we're gonna do something about it.
00:37:13.679 --> 00:37:16.719
And by we, we mean you are gonna do something about it.
00:37:17.039 --> 00:37:20.480
So yeah, all right, let me just go get through the structure.
00:37:20.559 --> 00:37:22.320
I've got a lot a lot of thoughts on this one.
00:37:22.480 --> 00:37:29.440
Uh so the National Coordination Center, uh, which was established under another executive order, creates and runs a program.
00:37:29.920 --> 00:37:32.960
Uh or which are create, sorry, uh different EO.
00:37:33.280 --> 00:37:37.039
The the the the the I can't follow the the numbers of the EOs here.
00:37:37.199 --> 00:37:38.960
That they just give the number of the EO.
00:37:39.440 --> 00:37:42.239
So uh are authorized, so okay, so runs the program.
00:37:42.400 --> 00:37:50.880
Participating companies in air quotes are authorized to conduct cyber surveillance operations, which is basically what I would assume is reconnaissance, right?
00:37:51.199 --> 00:38:00.320
Using the cyber using the um cybersecurity terms, I assume we're talking about reconnaissance, not actually uh exploits or uh stuff like that.
00:38:00.480 --> 00:38:06.960
So covert intelligence collection, um explicitly involving access without owner authorization.
00:38:07.119 --> 00:38:07.599
Oh, okay.
00:38:07.679 --> 00:38:28.480
So this actually does go in, go does actually get into exploitation and cyber effects operations, which include manipulation, disruption, denial, degradation, and destruction of quote unquote these cyber, these foreign criminal organizations, uh, which are they're designating as CE-TCO, which I don't know what that means.
00:38:28.559 --> 00:38:35.920
It's a foreign group, C O or the transnational cyber that's right, the criminal criminal organization uh organization.
00:38:36.000 --> 00:38:36.239
That's right.
00:38:36.480 --> 00:38:36.719
That's right.
00:38:36.880 --> 00:38:37.119
Yeah, yeah.
00:38:37.360 --> 00:38:41.920
Uh foreign groups conducting cyber naval crime against the US, its person or interests.
00:38:42.159 --> 00:38:47.920
This is like the the the what the hand that that that holds this thing is gigantic.
00:38:48.159 --> 00:38:48.400
Yes.
00:38:49.119 --> 00:38:51.440
Yeah, so and this is the probably okay.
00:38:51.599 --> 00:39:01.039
So the oversight for this giant program sits with two co-executive directors, one from DOJ and one from DHS, which fills me with no end of official.
00:39:01.360 --> 00:39:04.000
That's two or the two organizations that you trust very much, right?
00:39:04.239 --> 00:39:05.840
Yeah, that I trust the most.
00:39:06.159 --> 00:39:11.760
Who must coordinate on every approval and must give written approval of each operation's package before action.
00:39:12.000 --> 00:39:15.199
Companies contract with DOJ or DHS.
00:39:15.360 --> 00:39:18.000
Okay, so this is uh okay, I get it now.
00:39:18.159 --> 00:39:26.000
Uh undergo vetting and may be required to post a bond or escrow, uh, a forfeitable one million dollar escrow for non-compliance.
00:39:26.400 --> 00:39:27.599
Non-compliance?
00:39:27.840 --> 00:39:29.119
I have so many questions.
00:39:29.519 --> 00:39:32.880
Um crazy.
00:39:33.039 --> 00:39:43.679
Uh, they may also sign commercial agreements to receive threat intelligence from private firms and federal, state, local, tribal agencies, much must be disclosed to this NCC.
00:39:44.000 --> 00:39:46.480
Uh okay, so here's limits and guardrails.
00:39:46.639 --> 00:39:48.880
This is the okay, I'm curious about the limits here.
00:39:49.119 --> 00:39:59.840
Operations that would produce critical outcomes, which are loss of life, injury, or conduct rising to use a force or armed attack under international law, cannot be approved at the executive director level.
00:40:00.000 --> 00:40:07.119
However, implies that it can be pred can absolutely be approved at a level above the executive director.
00:40:07.280 --> 00:40:07.679
Yeah.
00:40:07.920 --> 00:40:11.280
Uh anything touching a US person requires DOJ review.
00:40:11.440 --> 00:40:14.559
I'm I still I feel really, really safe now.
00:40:14.719 --> 00:40:19.360
And any uh necessary authorization uh judicial or otherwise before approval.
00:40:19.679 --> 00:40:23.199
Accidental targeting of a US person, U.S.
00:40:23.280 --> 00:40:30.960
resident system, or system controlled by a US person triggers mandatory cestaction, minimization, and notification up to the DOJ.
00:40:31.440 --> 00:40:34.800
So the Foxes are guarding the analysis on this one.
00:40:34.960 --> 00:40:37.920
Um, same for discovery of an imminent attack on U.S.
00:40:37.920 --> 00:40:39.519
critical infrastructure.
00:40:39.840 --> 00:40:51.760
Uh 60 days, program directors, publish operating procedures coordinated with Homeland Security, 180 days, and annually there's a status report to Homeland Security and National Cyber Director.
00:40:52.000 --> 00:40:52.800
Oh my god.
00:40:53.039 --> 00:40:53.840
Uh yeah.
00:40:54.000 --> 00:40:55.599
So, Chris, I'm sure you have thoughts.
00:40:55.760 --> 00:40:59.920
Having just become a having just joined the uh another nation.
00:41:00.559 --> 00:41:01.360
Yeah, true.
00:41:01.519 --> 00:41:13.280
Um, yeah, on the day we recorded this, I actually just uh got notification that uh my Australian citizenship by conferral was approved, so I have to go do a ceremony and things like that at some point.
00:41:13.440 --> 00:41:16.000
Um and yeah, this I mean, but that's the thing.
00:41:16.239 --> 00:41:24.320
I've uh what I'm learning is if you want to give up your US citizenship, it's it's 10 times as hard as getting uh citizenship somewhere else.
00:41:24.480 --> 00:41:31.119
Um so I I will still be kind of uh under the guise of things happening in the U.S.
00:41:31.199 --> 00:41:32.320
I'll still have to follow U.S.
00:41:32.320 --> 00:41:35.280
tax return probably till I'm six feet in the ground.
00:41:35.519 --> 00:41:50.639
Um so this still applies to me and still does uh it does not give me warm and fuzzy because obviously there's a lot of limits and guardrails built in here around you know what they're proposing should protect uh U.S.
00:41:50.719 --> 00:41:54.960
person or persons um from kind of the outcome of this.
00:41:55.119 --> 00:42:02.400
But I mean, we've not known this administration, and and I'm not even being overly like polarized in one camp or the other.
00:42:02.480 --> 00:42:04.480
I don't think whichever midman right, the five years.
00:42:04.880 --> 00:42:09.280
Whichever administration is in in in you know in charge at a given time.
00:42:09.519 --> 00:42:10.079
The U.S.
00:42:10.239 --> 00:42:14.880
people have never not been used as cannon fodder for for events like this, right?
00:42:15.039 --> 00:42:18.400
So I see no reason why this wouldn't happen again.
00:42:18.559 --> 00:42:23.920
And you know, this kind of just like to me, the way it reads, it's like, hey, you know what?
00:42:24.079 --> 00:42:27.679
Nation states are attacking us, you're allowed to do the same thing back to them.
00:42:27.840 --> 00:42:31.119
Um and that gets really fucking ugly.
00:42:31.280 --> 00:42:40.000
Uh so I I uh this probably operating well above my pay grade to really understand what that's gonna mean under the hood, but I don't trust the vetting program.
00:42:40.079 --> 00:42:47.360
I don't trust uh the way these kind of uh critical outcomes are gonna be measured um across the board.
00:42:47.519 --> 00:42:53.039
Um I just see this as fucking bad um and and relatively scary.
00:42:53.679 --> 00:43:17.519
Yeah, I mean again, set politics aside, generally speaking, it would be a terrible idea to give the government power over something like this where it can where it's got, you know, it's it's essentially contracting or maybe even forcing, there's this bit about non-compliance here, uh private companies to act on its behalf.
00:43:17.760 --> 00:43:19.280
Like that that's terrifying.
00:43:19.360 --> 00:43:23.679
That should be terrifying to anyone in the US, regardless of the politics.
00:43:23.840 --> 00:43:33.199
Because think about this, because who gets to oversee you know what constitutes any one of these cyber crimes or who these quote unquote foreign nationals who they are?
00:43:33.679 --> 00:43:36.719
Who who designates the TCO?
00:43:36.960 --> 00:43:38.960
Like, and who decides what a TCO is?
00:43:39.039 --> 00:43:41.119
Like, like just they just think this through, right?
00:43:41.199 --> 00:43:46.960
There's nothing political about this, and yet there's I mean everything political about this if you think about it, right?
00:43:47.199 --> 00:43:53.199
So this is just a terrible idea, and I don't trust any part of it.
00:43:53.280 --> 00:43:57.599
Um again, not because of just just because of this current administration.
00:43:57.840 --> 00:44:02.159
I wouldn't want to hand the keys to this to any government.
00:44:02.400 --> 00:44:03.519
Like, yeah, nobody should be.
00:44:03.679 --> 00:44:06.159
Yeah, we should not have a government that has this has this.
00:44:06.320 --> 00:44:10.880
Luckily, it's an executive order and not like a codified law, right?
00:44:11.039 --> 00:44:17.039
But you know, we still have two years to deal with uh this executive order, so yeah, this is terrifying.
00:44:17.119 --> 00:44:18.960
Um, I'm just gonna I'll just leave it there.
00:44:19.199 --> 00:44:20.079
Like this this is scary.
00:44:20.400 --> 00:44:21.360
Curious to have your thoughts.
00:44:21.599 --> 00:44:23.280
Like we said, this is brand new off the press.
00:44:23.360 --> 00:44:26.400
So if you have thoughts, uh yeah, hit us up.
00:44:26.800 --> 00:44:27.519
Love to hear from you.
00:44:27.760 --> 00:44:28.000
Yeah.
00:44:28.239 --> 00:44:30.480
And with that, I feel like we never end on a high note.
00:44:30.559 --> 00:44:33.920
We should have put we should have covered that one earlier and ended on a high well, we didn't really have a lot of things.
00:44:34.000 --> 00:44:42.559
There's one, there's one, I'll tell you what, there's one we can put in the show notes about um after DEF CON, some individuals had a pineapple on a Delta flight and were impersonating.
00:44:42.880 --> 00:44:44.079
Is that a is that a high note?
00:44:44.159 --> 00:44:45.199
I'm not sure that's a lot.
00:44:45.280 --> 00:44:47.280
Well, it's at least it's at least it's a little funny.
00:44:47.360 --> 00:44:54.159
I mean it's they did a bad thing, but at least it's not like the the downfall of humanity, and you know, so it's a little bit more.
00:44:54.239 --> 00:44:59.599
Yeah, we'll throw that one in there, but it is interesting, and that one again is very high off the presses right after DEF CON.
00:44:59.760 --> 00:45:00.000
Yeah.
00:45:00.159 --> 00:45:08.159
Um that the U that the the pilots actually reported it to ground control and they were arrested like when they came off the flight.
00:45:08.320 --> 00:45:10.639
Um yeah, don't don't do that.
00:45:10.800 --> 00:45:22.639
And if you're gonna do that, or or rather if you're just don't do that, but then don't maybe don't post a bunch of jokes about how you're about to get on a flight and show your pineapple and talk up and end up on the no-fi list.
00:45:22.880 --> 00:45:24.960
So yeah, we'll uh we'll leave it there.
00:45:25.440 --> 00:45:26.159
All right, everybody.
00:45:26.239 --> 00:45:31.199
We're gonna wrap up here for the for the month, and uh we'll see you on the next episode.