The Audit 2025: Deepfakes, Quantum & AI That Changed Everything

WEBVTT
00:00:00.080 --> 00:00:02.720
Hi, I'm Joshua Schmidt, and welcome back to the audit.
00:00:02.720 --> 00:00:07.919
As we close out the year, I wanted to take a beat and look back at some of the conversations that really stuck with us.
00:00:07.919 --> 00:00:16.719
The episodes that made us think differently, the guests who challenged our assumptions, and the moments where we realized cybersecurity isn't just evolving, it's fundamentally transforming.
00:00:16.719 --> 00:00:19.679
This is our 2025 year in review.
00:00:19.679 --> 00:00:29.440
Okay, for our first clip, I wanted to share something from episode 72 of the audit that honestly changed how I think about hiring.
00:00:29.440 --> 00:00:34.799
We sat down with Justin Marciano and Paul Van from Valydia to talk about the deepfake workforce.
00:00:34.799 --> 00:00:36.640
And this isn't just some distant threat.
00:00:36.640 --> 00:00:37.759
This is happening right now.
00:00:37.759 --> 00:00:44.560
Now, towards the end of our conversation, they showed us just how ridiculously easy it is to create a convincing deepfake for a job interview.
00:00:44.560 --> 00:00:46.560
We're talking minutes, not hours.
00:00:46.560 --> 00:00:47.840
And the implications?
00:00:47.840 --> 00:00:49.280
Well, they're staggering.
00:00:49.280 --> 00:00:55.520
We're looking at national security threats, intellectual property theft, and entire industries vulnerable to infiltration.
00:00:55.520 --> 00:00:59.600
So settle in and let's take a look back at a year that proved one thing beyond any doubt.
00:00:59.600 --> 00:01:02.560
In cybersecurity, standing still means falling behind.
00:01:02.560 --> 00:01:03.840
Let's dive in.
00:01:03.840 --> 00:01:10.159
Logged back in here on the audit to um to talk with uh I don't know.
00:01:10.159 --> 00:01:11.680
Who are we talking to today, fellas?
00:01:11.920 --> 00:01:12.959
Who do we have?
00:01:12.959 --> 00:01:17.840
Uh it's Justin Marciana here in uh in a different body in my roommate's body.
00:01:17.840 --> 00:01:20.480
Shout out, shout out Edward Masarro.
00:01:20.480 --> 00:01:24.400
Um sorry for putting you on the podcast here.
00:01:24.400 --> 00:01:28.879
Uh, but uh did give me permission to use your name, image, and likeness.
00:01:28.959 --> 00:01:30.079
Uh so here we are.
00:01:30.079 --> 00:01:37.920
And then we've got uh we've got me as Justin Marciano here, uh a live deepfake we prepared uh a little bit before this call.
00:01:38.879 --> 00:01:40.879
That is really wild.
00:01:41.200 --> 00:01:45.680
So yeah, honestly, as a great explanation, here's here's kind of two different versions, right?
00:01:45.680 --> 00:01:48.400
Paul's is a live deep fake that was pre-recorded.
00:01:48.400 --> 00:01:54.719
Um, we can stream live via uh, like if we wanted to actually do a live deep fake, we can.
00:01:54.719 --> 00:02:02.879
Um the purpose of what I'm doing or this actual product here is more for people that are on the road, on a ski lift.
00:02:02.879 --> 00:02:06.959
You can essentially just be in a controlled environment and you train a model on that.
00:02:06.959 --> 00:02:11.680
So that's what's running in the background right now through this camera and with the uh with the voice.
00:02:11.680 --> 00:02:25.520
And then on Paul's end, you know, you can legitimately produce real-time beepfakes nowadays where you know you take someone's face um and use an audio uh changing tool at the same time and have a conversation just like that.
00:02:25.759 --> 00:02:28.639
And Justin, is that tool called Pickle, the one that you're using?
00:02:28.879 --> 00:02:29.120
Yeah.
00:02:29.120 --> 00:02:33.199
So I'm using Pickle and then uh Paul, what what tool did you use again?
00:02:33.199 --> 00:02:35.280
There's a there's a million open source ones.
00:02:35.520 --> 00:02:38.240
The the video that I recorded is actually fully open source.
00:02:38.240 --> 00:02:39.840
It's uh using Deep LiveCam.
00:02:39.840 --> 00:02:44.000
You can install it on your Mac and you can connect your webcam and in real time swap your face.
00:02:44.000 --> 00:02:49.039
Like I said, this one's pre-recorded, but yeah, we did this one live and just screen recorded the the live rendition.
00:02:50.319 --> 00:02:51.680
Meaning as Elon Musk.
00:02:52.000 --> 00:02:52.479
Oh yeah.
00:02:52.479 --> 00:03:03.120
There's a lot of there's a lot of videos on uh on X of people doing that, like a live screen with like as with his face, which has caused actually some pretty significant scams too.
00:03:03.120 --> 00:03:05.360
That's the reality of it.
00:03:05.759 --> 00:03:16.479
The one that pickle that Justin's using, I could see how someone could use that today, and then maybe maybe they freeze it intentionally and just go, oh hey, my my screen's frozen or my my camera's frozen.
00:03:16.560 --> 00:03:21.919
And uh so this is me in a similar environment, not the same environment.
00:03:21.919 --> 00:03:24.719
Give it a sec to to start the lip sync control.
00:03:24.719 --> 00:03:28.879
Um I probably filmed it right in this room, the same room.
00:03:28.879 --> 00:03:33.599
So give it a second, and then uh we'll be able to do the yep, lip sync is now back on.
00:03:33.599 --> 00:03:34.960
So yeah.
00:03:34.960 --> 00:03:40.319
A little bit wider of a mouth for sure, but it goes to show you can have different personas.
00:03:40.319 --> 00:03:49.439
It's supposed to be just of you for context, but you know, adversaries and and people who use technology for whatever purpose they want.
00:03:49.439 --> 00:03:52.159
So I uh got to use my roommate there too.
00:03:52.159 --> 00:03:55.520
Might get me banned from the platform, but it is what it is.
00:03:57.120 --> 00:03:58.719
I just downloaded Pickle.
00:04:00.639 --> 00:04:01.680
Well, there you go, Paul.
00:04:01.680 --> 00:04:02.479
You switched it.
00:04:02.479 --> 00:04:02.879
Nice.
00:04:03.120 --> 00:04:08.319
Yeah, I actually just used uh like I so to create these deep fakes, you have to have a virtual camera.
00:04:08.319 --> 00:04:10.560
I was just able to swap my uh my virtual camera.
00:04:10.560 --> 00:04:11.360
It's pretty cool though.
00:04:11.360 --> 00:04:14.159
You can actually see that I can almost double up.
00:04:14.159 --> 00:04:19.680
Uh I can double up in a way and have the have a little bit here, a little bit there.
00:04:19.680 --> 00:04:23.759
Uh but uh yeah, that's you know, virtual cameras are are are fantastic.
00:04:23.759 --> 00:04:27.120
That's I mean, that's how people are creating these deep fakes today.
00:04:28.480 --> 00:04:30.160
All right, we're on to clip number two.
00:04:30.160 --> 00:04:33.120
This is where things get real interesting and kind of nerdy.
00:04:33.120 --> 00:04:39.199
Bill Harris joined us to talk about quantum computing and what happens to all of our encryption when quantum becomes practical.
00:04:39.199 --> 00:04:42.639
Now, Bill's knowledge goes way beyond just the security implications.
00:04:42.639 --> 00:04:43.839
Now, I know what you're thinking.
00:04:43.839 --> 00:04:46.879
Parallel universes on a cybersecurity podcast.
00:04:46.879 --> 00:04:48.240
Just trust me on this one.
00:04:48.240 --> 00:04:50.079
I'll let Bill break it down.
00:04:51.600 --> 00:04:55.279
So I got one more thing that actually goes into philosophy a little bit here.
00:04:55.279 --> 00:05:03.920
So um I want to call out something that says that Google uncovered, uh, and then something that NASA uncovered.
00:05:03.920 --> 00:05:06.560
So Google was doing some quantum operations.
00:05:06.560 --> 00:05:08.240
Uh, this wasn't that long ago.
00:05:08.240 --> 00:05:10.240
I think it might have been last year.
00:05:10.240 --> 00:05:24.399
And there's a blog on their on their post about it uh that said they they got some unexpected results that they believe lend credence to the theory of parallel universes.
00:05:24.399 --> 00:05:30.399
And they put this right out there on their blog and and they write it, and they wrote a bit about it, which I found really surprising.
00:05:30.399 --> 00:05:35.600
But what was even stranger was that there is this story circulating.
00:05:35.600 --> 00:05:39.120
And the story itself, the the first part of the story is true.
00:05:39.120 --> 00:05:48.879
NASA shut down its quantum computer in February of 2024 because they got some unexpected results that they said challenge contemporary thinking.
00:05:48.879 --> 00:05:53.920
And they shut it down, and with no further comment, they were they began looking into it.
00:05:54.160 --> 00:05:55.120
Well, hold on a minute.
00:05:55.120 --> 00:06:05.120
Is that like the Catholic Church shutting down science in the 1400s because the sun is no longer the center of the universe?
00:06:05.120 --> 00:06:07.600
Well, not necessarily.
00:06:07.759 --> 00:06:11.839
So what people, it might be that, but you're doing what people are doing, right?
00:06:11.839 --> 00:06:14.560
People were wondering, well, what's happening here?
00:06:14.560 --> 00:06:17.600
So imaginations have really run rampant.
00:06:17.600 --> 00:06:32.480
And the stories right now range from something, you know, like, well, they just found, you know, some new math that they're trying to resolve, to they've stumbled into some alternate reality or they have uh stumbled across some type of extraterrestrial intelligence.
00:06:32.480 --> 00:06:34.480
Yes, like the movie Contact.
00:06:34.480 --> 00:06:34.879
Remember that?
00:06:37.279 --> 00:06:38.160
Great flick.
00:06:38.639 --> 00:06:39.199
Yes.
00:06:39.199 --> 00:06:43.680
I yeah, I had it sitting back here for like six months and I finally threw it out.
00:06:43.920 --> 00:06:45.439
Get it out because I'm bringing it there.
00:06:45.439 --> 00:06:46.160
Here we go.
00:06:46.160 --> 00:06:48.879
Have you heard of the Mendala effect or the Mendela?
00:06:48.879 --> 00:06:51.279
I want to say yes, but go ahead.
00:06:51.279 --> 00:06:52.720
Hit us with it, Josh.
00:06:52.720 --> 00:06:57.839
This is going on, this is going on like wildfire over the last probably five plus years on the internet.
00:06:57.839 --> 00:06:59.439
Have you heard of it, Bill?
00:06:59.439 --> 00:07:01.279
I've I've not.
00:07:01.279 --> 00:07:08.240
Maybe it was the big host the what's the what's the particle accelerate accelerator in Switzerland called?
00:07:08.240 --> 00:07:11.199
Is it the big host of the large hadron colliding?
00:07:11.199 --> 00:07:12.319
Yeah, yeah.
00:07:12.319 --> 00:07:14.959
The the theory goes that CERN started messing with that.
00:07:14.959 --> 00:07:16.560
We slipped into a different timeline.
00:07:16.560 --> 00:07:19.600
So there's people that remember things inaccurately.
00:07:19.600 --> 00:07:29.519
If and and Nelson Mandela uh dying is one of those, where some people remember him passing away, and then some people remember him being released from prison.
00:07:29.519 --> 00:07:36.399
Another example would be the Bernstein Bears, the way it's spelt, the Bernstein Bears or the Bernstein Bears.
00:07:36.399 --> 00:07:43.199
Um, it goes into pop culture, uh verbal cues, um, like mirror, mirror on the wall from Snow White.
00:07:43.199 --> 00:07:45.360
It's actually magic mirror on the wall.
00:07:45.360 --> 00:07:49.279
So they're saying that we slipped into a different timeline at some point.
00:07:49.600 --> 00:07:54.720
I'm gonna use this in my next argument at home with my wife, right?
00:07:54.720 --> 00:07:59.439
Where it's like I'm constantly I'm like, yo, you're in a different uh dimension here.
00:07:59.439 --> 00:08:00.800
That's the best case.
00:08:01.600 --> 00:08:14.000
So maybe that's you know, lending some credence to uh to this yo, so it's funny you should say that because that's exactly kind of where some of these arguments are going.
00:08:14.000 --> 00:08:17.759
They're drifting off into quantum memories.
00:08:17.759 --> 00:08:28.879
Um and the theory that the theory that you actually never really die because at every juncture in your life, you like Schroeder's cat, you either live or you die.
00:08:28.879 --> 00:08:35.200
And so a version of yourself will live in perpetuity as it always junctures off.
00:08:35.200 --> 00:08:42.399
And so you'll die an infinite number of times, but there's always another one of you out there in some type of an alternate universe.
00:08:42.720 --> 00:08:46.480
Why did why did they shut it down if they found something interesting?
00:08:46.879 --> 00:08:48.639
They didn't understand the results.
00:08:48.639 --> 00:08:57.440
Um so they they um it the results that they got from their quantum machine uh did not correlate with their understanding of physics.
00:08:57.440 --> 00:08:59.759
Or they just didn't like what they got back.
00:09:01.440 --> 00:09:03.200
All right, moving on to clip number three.
00:09:03.200 --> 00:09:08.399
Our next clip, we're jumping back in time to episode 75 with Alex Bratton from LexTech.
00:09:08.399 --> 00:09:13.440
Now, Alex came on to talk about something every business is dealing with right now: AI integration.
00:09:13.440 --> 00:09:19.440
And here's the thing companies are racing to adopt AI tools faster than they're thinking about the security implications.
00:09:19.440 --> 00:09:27.519
Alex breaks down why businesses need to pump the brakes and actually think through the ramifications of integrating AI before it's too late.
00:09:28.559 --> 00:09:38.080
And that is the challenge that we've got right now because people are blazing straight ahead and rewinding a little bit, and I'll use the iPad as the example uh when it came into the business world.
00:09:38.080 --> 00:09:45.039
It was brought into the business world by business leaders who were like, I need this, I want this, and whether that was a doctor or a CEO, it didn't matter.
00:09:45.039 --> 00:09:50.879
And the technology teams were so far behind that it was it made it difficult for everybody.
00:09:50.879 --> 00:09:52.879
They couldn't figure out, okay, how does this connect to the network?
00:09:52.879 --> 00:09:53.919
How do I secure it?
00:09:53.919 --> 00:09:55.120
How do I do anything with it?
00:09:55.120 --> 00:10:00.639
And many IT teams today, at any company size, are doing the exact same thing.
00:10:00.639 --> 00:10:01.519
They're struggling.
00:10:01.519 --> 00:10:06.320
There are so many ways that we can empower teams, but is this tool secure?
00:10:06.320 --> 00:10:10.799
Did somebody just sign up for a tool that's free that's stealing all of our information?
00:10:10.799 --> 00:10:16.639
Which so that step number one is this the stepping back and communicating with the team around hey, what are our expectations?
00:10:16.639 --> 00:10:19.360
What is responsible use of AI?
00:10:19.360 --> 00:10:26.720
It doesn't mean here's the five tools you're allowed to use, or something we see very frequently in big companies is the answer to AI use is no.
00:10:26.720 --> 00:10:28.639
Well, that's not real.
00:10:28.639 --> 00:10:29.759
Come on.
00:10:29.759 --> 00:10:31.360
What are we gonna do with it?
00:10:31.360 --> 00:10:32.879
What does responsible mean?
00:10:32.879 --> 00:10:37.039
Number one, you have to understand what are the licensing terms of this thing we're using.
00:10:37.039 --> 00:10:38.879
What does it do with our information?
00:10:38.879 --> 00:10:43.600
And for non-geeks looking at legal agreements, that does that's not awesome.
00:10:43.600 --> 00:10:46.480
Um internally, we wrote a custom GPT to analyze that.
00:10:46.480 --> 00:10:52.320
So we could give it a tool name, it would go out, grab all the documents, bring it down and say, yes, they're gonna train on your data.
00:10:52.320 --> 00:10:53.919
And that that's the magic question.
00:10:53.919 --> 00:10:59.039
Um but the simple statement being if it's free, you're giving them your data.
00:10:59.039 --> 00:11:00.080
Forget it.
00:11:00.080 --> 00:11:01.120
Don't ever do that.
00:11:01.120 --> 00:11:06.080
If it's paid, okay, well then get somebody involved if you're gonna use it officially.
00:11:06.080 --> 00:11:09.120
But while you're tinkering, don't give it state secrets.
00:11:09.120 --> 00:11:11.200
That doesn't work.
00:11:11.200 --> 00:11:16.639
Um but taking those to the point where we know what's going on.
00:11:16.639 --> 00:11:23.360
Um now for me personally, again, coming in on the Vision Pro, um, one of the things I love about Apple is their privacy stance.
00:11:23.360 --> 00:11:40.159
I think one of the huge challenges, and I don't know that folks see it coming, is that when we couple AI with the company that hosts all of our emails and our documents and that makes money by selling advertising, that's a bad combo.
00:11:40.159 --> 00:11:47.120
And we have two megacorps that sit there at the center of that, that's dangerous.
00:11:47.519 --> 00:11:49.440
You you lobbed it up perfectly, Alex.
00:11:49.440 --> 00:11:52.879
I'm was thinking about these things along the same lines.
00:11:52.879 --> 00:12:07.759
We're in a we need to, if organizations haven't gotten or stood up a governing body for AI, get a get a board of people, four or five people, whatever you decide on, and start deliberating on what direction you're taking with AI.
00:12:07.759 --> 00:12:09.279
Because it's coming, you gotta do it.
00:12:09.279 --> 00:12:15.200
You have to do it now because we run the risk of if we don't do that, your employees are gonna do it on their own anyway.
00:12:15.600 --> 00:12:16.960
Chat OIT is real, it's gonna happen.
00:12:16.960 --> 00:12:17.519
Of course.
00:12:17.679 --> 00:12:21.120
Yeah, we've seen it all the time through uh plugging proof point.
00:12:21.120 --> 00:12:28.080
You know, we see it at one of our clients that they're emailing each other back the their work and their personal, they're emailing back and forth.
00:12:28.080 --> 00:12:29.120
So what do you think they're doing, right?
00:12:29.120 --> 00:12:36.720
They're taking their information that they're working on at work and they're sending it to their LLM and their personal machine, and they're sending it back with their output, right?
00:12:36.720 --> 00:12:38.960
So we're they're using it already.
00:12:38.960 --> 00:12:42.000
Uh sometimes they might be using it uh, you know, on their machine.
00:12:42.000 --> 00:12:45.919
But so first off, it's you know, figure out the direction you want to go.
00:12:45.919 --> 00:12:56.639
Let's peel the hood back and figure out where you want to go, what we want to use it for, if you're gonna run it, uh, if you're gonna let if you're gonna use Claude, if you're gonna run on Cloud or if you're gonna run on-prem, right?
00:12:56.639 --> 00:12:57.919
How are you gonna do this?
00:12:57.919 --> 00:13:01.679
Um, and then you have to get policies and procedures out.
00:13:01.679 --> 00:13:07.279
You have to uh educate your staff, and then you have to train your staff on how to actually use it, right?
00:13:07.279 --> 00:13:10.320
It's one thing for us to say, oh, don't use state secrets, right?
00:13:10.320 --> 00:13:11.200
That's just a given.
00:13:11.200 --> 00:13:15.519
That's things that the three of us we just know that is a no-no, we're not gonna do that.
00:13:16.000 --> 00:13:17.279
But what does it work really mean?
00:13:17.440 --> 00:13:17.600
Yeah.
00:13:17.600 --> 00:13:18.879
What does it really mean?
00:13:18.879 --> 00:13:19.840
Exactly, right?
00:13:20.080 --> 00:13:21.039
Yeah, totally agree.
00:13:21.039 --> 00:13:23.039
And it's helping them be comfortable with it.
00:13:23.039 --> 00:13:26.480
And again, for me, that's about how are we baking this into our culture?
00:13:26.480 --> 00:13:27.840
This is the new norm.
00:13:27.840 --> 00:13:32.240
This isn't as simple as, hey, we're just gonna hand everybody Excel who doesn't have it.
00:13:32.240 --> 00:13:34.399
It's it we're not giving you a tool.
00:13:34.399 --> 00:13:37.039
We have to change how we're thinking about work.
00:13:37.039 --> 00:13:41.519
Every time I'm about to do a task, how could AI maybe help me with this?
00:13:41.519 --> 00:13:47.360
And just giving simple guidance, not IT scary stuff of no, no, no tools.
00:13:47.360 --> 00:13:50.799
Like no, we have we have to embrace the whole company in surfacing this stuff.
00:13:50.799 --> 00:13:51.919
IT can't own all of it.
00:13:51.919 --> 00:13:52.799
Totally agree.
00:13:52.960 --> 00:13:53.919
Totally, totally agree.
00:13:53.919 --> 00:13:58.639
I I I actually think organizations could run a risk of overprotecting this.
00:13:58.639 --> 00:14:01.919
You can tighten the bolts too hard.
00:14:01.919 --> 00:14:05.919
Um, and that and we run that balance in cybersecurity all the time, right?
00:14:05.919 --> 00:14:09.360
We people need to be function, they need to be able to function, right?
00:14:09.360 --> 00:14:12.559
I mean, if we're in a perfect world, we would just disconnect from the internet, right?
00:14:12.559 --> 00:14:13.600
And then we're good, right?
00:14:13.600 --> 00:14:16.799
In the cybersecurity world, that's not an option for us, right?
00:14:16.799 --> 00:14:21.120
So we got to ride that razor thin line of tightening the bolts too hard.
00:14:21.120 --> 00:14:22.720
And we're having the same problem, I think, with AI.
00:14:22.720 --> 00:14:29.519
I think a lot of organizations are gonna come in and they're gonna put too many policies, procedures around it.
00:14:29.519 --> 00:14:32.480
We should be deleting enough or we realize we need to add things back.
00:14:32.799 --> 00:14:36.480
It's interesting when you hit on the potentially clamping down too hard.
00:14:36.480 --> 00:14:46.240
Um, that's something that we see very, very frequently in the big businesses in the Fortune 500 because they have very sophisticated IT, security, and data teams.
00:14:46.240 --> 00:14:52.240
So, especially over the past year or two, many of those teams have raised their hands saying, we own everything.
00:14:52.240 --> 00:14:55.600
Nobody touch it, nobody do anything.
00:14:55.600 --> 00:15:01.919
And unfortunately, many of them have been successful in wrapping their arms around it and kind of shutting everybody out.
00:15:01.919 --> 00:15:06.000
And which again has totally missed why does this technology exist?
00:15:06.000 --> 00:15:12.399
It doesn't exist for that group of people, it actually exists for the people who aren't the experts, aren't the geeks?
00:15:12.399 --> 00:15:16.080
Wait, I can just talk to something, I can chat with something.
00:15:16.080 --> 00:15:21.039
And so where we're seeing people be successful is actually focusing on the employees.
00:15:21.039 --> 00:15:24.080
Maybe it's an airline pilot or a flight attendant, maybe it's a salesperson.
00:15:24.080 --> 00:15:26.240
What would help this person do their job?
00:15:26.240 --> 00:15:27.679
What would empower them?
00:15:27.679 --> 00:15:29.440
What would take friction out of the way?
00:15:29.440 --> 00:15:41.840
And the part that again, the groups that are locking it down are missing is if we can identify the couple things we want to help people with, we can just trace a thin line through the back-end systems, the data, the policies.
00:15:41.840 --> 00:15:43.600
We can figure out that part first.
00:15:43.600 --> 00:15:46.480
And then we can do the next line and figure out that part.
00:15:46.480 --> 00:15:48.399
Instead, we're boiling two oceans.
00:15:48.399 --> 00:15:51.840
We're boiling the ocean of what's all of our data, make it accessible.
00:15:51.840 --> 00:15:56.080
Well, you know, to power something for this person over here, you might not even have the right data yet.
00:15:56.080 --> 00:16:01.279
But most folks say, hey, let's we have this, so let's take our our ocean and figure that out.
00:16:01.279 --> 00:16:03.039
And then let's look at the systems.
00:16:03.039 --> 00:16:06.559
How do we AI enable all of these systems and make them all accessible?
00:16:06.559 --> 00:16:10.799
I appreciate the thinking, but spending three years on that means you are gonna be so far behind.
00:16:10.799 --> 00:16:19.200
When I look at mid-market and smaller businesses, I love the passion of business leaders saying, we have to do this, hey team, let's figure this out.
00:16:19.200 --> 00:16:28.639
And they are moving so much faster, which is actually hinting to me that I think we're gonna see a lot of leadership positions in a bunch of different industries change.
00:16:28.720 --> 00:16:38.799
Aaron Powell Is that a sea change in thinking of employees not just as another cog in the wheel to accomplish a task, but treating each individual like their own entrepreneur within the company?
00:16:38.799 --> 00:16:42.960
Um, is that kind of where you're coming from with that AI enablement?
00:16:43.360 --> 00:16:44.960
Uh and that's an interesting way to put it.
00:16:44.960 --> 00:16:50.159
And that that that is my core belief is that things like AI should be giving people superpowers.
00:16:50.159 --> 00:16:59.200
We should be helping that one person be 10 or 100 times more effective, not how do I implement AI so I can fire my whole team?
00:16:59.200 --> 00:17:06.240
I think anybody doing that, number one, you're focused on cost cutting and that's not good for growth, that's not where you grow.
00:17:06.240 --> 00:17:12.880
Number two, the great ideas of where AI is going to transform the business come from those people.
00:17:12.880 --> 00:17:15.119
And they're the ones that have the idea.
00:17:15.119 --> 00:17:21.440
So once they get comfortable and they can lean in and have that entrepreneurial always learning, hey, what if?
00:17:21.440 --> 00:17:28.000
When they start to ask the what if at times 10 or 100 or 1,000 employees, that changes everything.
00:17:28.400 --> 00:17:31.599
Seems like it started with an ultra kind of an altruistic stance.
00:17:31.599 --> 00:17:33.200
I mean, baked into the name, right?
00:17:33.200 --> 00:17:34.160
Open AI.
00:17:34.160 --> 00:17:40.799
It started out open source, I believe, but now we have this kind of AI arms race going on with nation states.
00:17:40.799 --> 00:17:56.319
Um, how do you see that squaring off with kind of it seems like things should be moving more to open source if everybody's enabled to kind of be their own entrepreneur and um everyone has Leonardo da Vinci and Albert Einstein in their pocket?
00:17:56.319 --> 00:18:02.960
How do we get from where we are in this kind of like keeping things close, but allowing people certain liberties?
00:18:02.960 --> 00:18:05.680
And how are we going to balance all that moving forward?
00:18:06.319 --> 00:18:07.839
That's an interesting one.
00:18:07.839 --> 00:18:11.119
Um I don't know that it necessarily needs to go open source.
00:18:11.119 --> 00:18:21.359
And I think again, back to what we the humans control, we control being great communicators, we control coming up with the ideas and framing what it is that we want the AI to do.
00:18:21.359 --> 00:18:23.839
Um and then even, hey, here's the process.
00:18:23.839 --> 00:18:28.640
When we're building things, for example, even in the agentic world, I mentioned Chat GPT earlier.
00:18:28.640 --> 00:18:30.000
You know, it's a simple go-to.
00:18:30.000 --> 00:18:31.279
But you know what?
00:18:31.279 --> 00:18:38.079
If I'm writing code on my Mac and I want to be having it generate different types of code, I might be pointing at different systems.
00:18:38.079 --> 00:18:45.920
So the the simple statement of not ever being locked into a single vendor is more important now than ever in technology.
00:18:45.920 --> 00:18:49.759
We have to be crafting things in such a way that there's flexibility there.
00:18:51.200 --> 00:18:52.640
And on to our final clip.
00:18:52.640 --> 00:18:57.519
This comes from episode 65 with Dan Schaefer and Adam Warner, where we talked about Piehole.
00:18:57.519 --> 00:19:00.079
Now, Piehole is a great network-level ad blocker.
00:19:00.079 --> 00:19:01.039
You may have heard of it.
00:19:01.039 --> 00:19:04.799
But what really struck me about this conversation wasn't just the tool itself.
00:19:04.799 --> 00:19:08.559
It was what Dan and Adam showed us about how tech communities can come together.
00:19:08.559 --> 00:19:10.319
This is open source at its best.
00:19:10.319 --> 00:19:21.039
People who care about security and privacy, building something valuable, sharing it freely, and creating a whole community of like-minded folks who just want to take back a little control over their digital lives.
00:19:21.039 --> 00:19:24.880
Here's Dan and Adam on what makes the Pi Hole community so special.
00:19:26.160 --> 00:19:34.160
Like we were talking about earlier, this is really enterprise grade technology that is at fractions of the cost.
00:19:34.160 --> 00:19:43.119
So you could you could bring it in and plug it into a network and it doesn't consume much resources at all.
00:19:43.119 --> 00:19:55.599
And a really big shout out to the pie hole community because there are some people out there that are curating and generating lists that we all then consume and use.
00:19:55.599 --> 00:19:58.079
And the lists are up to date.
00:19:58.079 --> 00:19:59.759
I think some of them are updated.
00:19:59.759 --> 00:20:08.640
Daily, if not more frequently, with really new and emerging malicious uh sites.
00:20:08.640 --> 00:20:14.079
And we can consume that, and then we're just as safe as an enterprise organization.
00:20:14.559 --> 00:20:26.640
Adam, maybe you could speak to just the value of the community and how how those people have been generating those lists and how you into how you integrate that information into what you and Dan are working on.
00:20:27.039 --> 00:20:30.079
Every block list that's out there is community maintained.
00:20:30.079 --> 00:20:32.480
We don't have we don't have an opinion.
00:20:32.480 --> 00:20:36.319
So as as as the software itself, we we don't care what you're blocking.
00:20:36.319 --> 00:20:38.960
You can block as much or as little as you like.
00:20:38.960 --> 00:20:41.920
Um it's really it's up to you how you use it.
00:20:41.920 --> 00:20:57.680
Um so when we um initially install just to make sure it works and just to sort of lower the barrier to entry, we have one suggested list um which we found works quite well, doesn't block too much, doesn't break a lot.
00:20:57.680 --> 00:21:00.400
Um and that's just there to get sort of people started.
00:21:00.400 --> 00:21:11.039
But uh yeah, there are, I mean, certainly on Reddit, there's a guy, uh forget his name, Wally3K, um, who uh maintains a list of lists.
00:21:11.039 --> 00:21:19.519
So not not just his own lists that he puts together, but he also um I think he goes through and and kind of optimizes uh a few other people's lists.
00:21:19.519 --> 00:21:22.720
Um Firebog.net, I believe, is is where he keeps those.
00:21:22.720 --> 00:21:23.599
Firebog.
00:21:23.599 --> 00:21:31.039
And then you've got that there's just there are so many people out there that are just coming up with the different things.
00:21:31.440 --> 00:21:34.000
One list to rule them all, it sounds like.
00:21:34.000 --> 00:21:39.759
And there you have it, just a small sample of incredible conversations we had in 2025.
00:21:39.759 --> 00:21:45.119
If you enjoyed this look back, make sure you're subscribed so you don't miss the thing we have coming in 2026.
00:21:45.119 --> 00:21:47.440
Because trust me, we're just getting started.
00:21:47.440 --> 00:21:49.680
You can find us wherever you get your podcasts.
00:21:49.680 --> 00:22:00.319
Check out our YouTube channel for video episodes and shorts, Spotify for video and audio, and connect with us at ITAudit Labs.com or on LinkedIn for more cybersecurity insights.
00:22:00.319 --> 00:22:03.599
Until next time, stay curious and stay secure.
00:22:03.599 --> 00:22:07.039
This is Joshua Schmidt with the audit, and we'll catch you in the next one.
00:22:07.599 --> 00:22:11.359
You have been listening to the audit presented by IT Audit Labs.
00:22:11.359 --> 00:22:20.160
We are experts at assessing risk and compliance while providing administrative and technical controls to improve our clients' data security.
00:22:20.160 --> 00:22:32.880
Our threat assessments find the soft spots before the bad guys do, identifying likelihood and impact, or all our security control assessments rank the level of maturity relative to the size of your organization.
00:22:32.880 --> 00:22:37.279
Thanks to our devoted listeners and followers, as well as our producer, Joshua J.
00:22:37.279 --> 00:22:41.440
Schmidt, and our audio video editor, Cameron Hill.
00:22:41.440 --> 00:22:54.720
You can stay up to date on the latest cybersecurity topics by giving us a like and a follow on our socials, and subscribing to this podcast on Apple, Spotify, or wherever you source your security content.