เกี่ยวกับตอนนี้
(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)
Three Buddy Problem - Episode 111: OpenAI finally published a technical Hugging Face post-mortem, and Costin's verdict is blunt. He reads it as a document written for policymakers rather than for the blue teams who have to survive a thousand-agent swarm.
We also dig into NVIDIA's $12.9 billion acquisition of Hugging Face, why JAGS thinks a frontier lab standing against open-source looks weak, and what that new industry open letter on cyber defense actually asks anyone to do. Plus, hotel Wi-Fi tradecraft after CaptiveCrunch, the FBI's ORB network takedown with Lumen, Chinese routers that ship backdoored from the factory, and the TeamPCP arrests in Australia.
Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.
Timestamps:
0:00 Introductory banter
1:11 TLPBlack, incident response, and why it starts at the router
4:11 CaptiveCrunch and Juanito's travel router kit
7:59 Costin's VPN/hotel WiFi stack
12:36 State of Statecraft, LABScon, and Offensive AI Con
17:16 OpenAI's Hugging Face post-mortem technical report
21:43 A swarm of a thousand agents
27:35 Who was OpenAI’s report written for?
33:05 Fail2ban, canaries, and catching agents in your logs
40:34 NVIDIA buys Hugging Face for $12.9 billion
44:42 The open weights fight and rooting for China
52:47 Nemotron, DGX Spark, and the RAM price spiral
1:03:26 Open letter on collective AI-powered cyber defense
1:30:21 Lumen's Quartermaster and the FBI ORB takedown
1:59:05 Backdoored ZBT routers, Chinese phones, and the TeamPCP arrests
Links:
- Transcript
- The Hugging Face incident and the road ahead (OpenAI)
- OpenAI - Hugging Face Technical Report (PDF)
- Independent investigation of OpenAI agents’ behavior (METR)
- The Defender’s Window (Greg Brockman)
- Open Letter: A call for collective action on cyber defense (OpenAI)
- Inside China-nexus cyber espionage infrastructure (Lumen)
- Nvidia to Buy Open Source AI Platform Hugging Face For $12.9 Billion
- Nemotron AI Models (NVIDIA)
- NVIDIA DGX Spark
- NVIDIA DGX Platform
- FBI Seize Platforms Used by China State-Sponsored Hackers (DOJ)
- Michael Horka at LABScon
- Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Brian Krebs)
- Australia police statement on TeamPCP arrests
- Austin Larsen at LABScon
- Chinese Implants in the Supply Chain (VulnCheck)
- More Than 4,000 Legacy Routers Compromised by AryStinger
- The Massive Android Botnet with 1.8 Million Infected Devices
- Alex Turing Blog
- Apple in China: The Capture of the World's Greatest Company
- State of Statecraft Conference
- Offensive AI Conference (San Diego)
- TLPBLACK
