S1: If you're building B2B SaaS, you probably want to sell
S1: to enterprises at some point. The challenge is that selling
S1: to enterprises requires you to support complex features like Saml,
S1: single sign on, skim provisioning, audit logs, and fine grained
S1: authorization that require months of development time and ongoing maintenance work.
S1: OS solves this with APIs that are flexible and easy
S1: to use. It makes adding enterprise features to your app
S1: a quick and painless process. Work OS also has user
S1: management solution called auth Kit that is free up to
S1: 1 million monthly active users. It comes standard with MFA, Rbac,
S1: bot protection, user impersonation and more. Auth kit is built
S1: with radix components, which means zero compromises in design. You
S1: get limitless customizations and modular templates designed for quick integrations.
S1: Work OS is already used by hundreds of fast growing
S1: companies like cursor, Vercel, Perplexity and Sierra. Check it out
S1: at work OS Com that is working os. Com. Welcome
S1: to Unsupervised Learning, a security, AI and meaning focused podcast
S1: that looks at how best to thrive as humans in
S1: a post AI world. It combines original ideas, analysis, and
S1: mental models to bring not just the news, but why
S1: it matters and how to respond. All right, welcome to
S1: unsupervised learning. This is Daniel. All right. So settling in
S1: for a couple of light holiday weeks trying to chill
S1: out as much as possible, reading a bunch of lit RPG.
S1: I don't think I'm going to play too much path
S1: of Exile. It's like a religion. I've already got too
S1: many religions. I've got reading as a religion, I've got
S1: AI as a religion, got security work. I'm building a
S1: bunch of tech. I just I don't have time to
S1: invest in getting good at Poe. It's just too intimidating. Plus,
S1: the little bit that I did play was mostly like
S1: hitting the space bar and dodging way too much dodging.
S1: So don't think I'm going to be playing that any
S1: time soon. But I do watch other people play it,
S1: so that's kind of fun. Please go subscribe to the
S1: YouTube channel if you're watching this on YouTube. That's probably
S1: kind of silly because you're probably already on the channel
S1: and hopefully you're subscribed, but always forget to promote that.
S1: So trying to remember wrote a piece for days. Been
S1: wanting to get out for a while. It's basically about
S1: how updated context is going to be like the centerpiece
S1: of vulnerability management, because the problem isn't finding villains, it's
S1: actually fixing them. So go check that out and let's
S1: get into security. So full face masks for facial recognition evasion.
S1: So realistic masks that you could put on I'm going
S1: to open this up. This is why we do it live.
S1: Look at this thing. So it's like a stocking or whatever.
S1: But you put it over your face and then it
S1: kind of pulls to contort to your face and look
S1: at that from a distance. That is not so bad.
S1: not so bad at all. And look at all these
S1: different faces you got so pretty cool. Yeah. Bruce Schneier
S1: is the one I think I saw that from. But yeah,
S1: I'm curious. I'd love to see some testing done from
S1: the security community to buy a bunch of these. And
S1: then maybe if we have access to like a facial
S1: recognition system to see if we could get it to
S1: match someone else. I think the big thing is like,
S1: is it only visual or is there like an active component?
S1: I think, and I don't think most do have an
S1: active component. I know face ID does, but I think
S1: most facial recognition does not have an active component. And
S1: what that would mean is like is something actually bouncing
S1: off your face, which would go through the stocking. So
S1: it'd be able to see like where your cheekbones are,
S1: where your chin is, and, you know, eyes, foreheads, stuff
S1: like that. That would seem to break the system or
S1: break the masks. But yeah, I don't I don't think
S1: most are doing that, but I'm not sure. Visual Studio
S1: Code remote tunnel hacks. So some Chinese attackers are caught
S1: stealing V's codes, remote tunnel feature, or using the feature
S1: to hack it. Service providers in South Europe and China
S1: starting to limit the sale of critical drone drone components
S1: to the US and Europe that are needed for Ukraine's
S1: fighting efforts. So this is all part of the trade
S1: war of us limiting their access to chips. So now
S1: they're limiting our access to key materials to actually build stuff,
S1: and now they're limiting drone stuff. I really can't wait
S1: to get our drone systems up and running. I'm really
S1: worried that the any war, any conflict, hopefully not a
S1: major war, but any conflict that we have with China,
S1: it's going to be about drones, like aircraft carriers I
S1: don't think are going to be as big of a deal.
S1: I remember seeing a piece or like a series or something.
S1: I was in the Army at the time, so this
S1: was like mid 90s and I was reading about this
S1: thing called the Assassin's Mace weapon, which is a Chinese concept,
S1: I believe, where it's like when you have an enemy
S1: that is much too big and powerful for you, you
S1: don't bring force against force. What you do is you
S1: bring some kind of weapon that is highly asymmetrical, that
S1: is capable of hurting this thing when regular force has
S1: no chance whatsoever. And drones are that. And once again,
S1: I've recommended this multiple times, but I recommend you read
S1: the book Kill Decision by Daniel Suarez. It is fantastic
S1: and it's all about mini drones and implications and stuff
S1: like that. FBI is shut down Redux, a cybercrime marketplace
S1: operating since 2016, and they arrested three Kosovo nationals who
S1: were running it. Russian state backed APT Kameraden has been
S1: targeting Russian speaking individuals with two Android spyware families called
S1: Bone Spy and Plain Gnome, and it can record calls,
S1: capture photos and collect. SMS messages. Yahoo cut 25% of
S1: its cybersecurity team, which is also known as the Paranoids.
S1: Over the last year, paranoids are kind of og famous
S1: in the security community, so kind of sad to see
S1: them getting cut down. And I know the attrition has
S1: happened for a long time over the years, but I
S1: presented and taking classes over there in the facility that
S1: they were based out of. And yeah, sad to see
S1: kind of this old school kind of organization going away.
S1: Another run of augmented happening in February. It's actually February
S1: 3rd of this coming year, and this is going to
S1: be a full discussion and workshop on building out your
S1: personal Telos files and using AI to access them and
S1: use them, manipulate them. So it is $495, but you
S1: get 25% off if you are a member and you
S1: can go and reserve a slot. I think they're still open,
S1: but you definitely want to check it out. Probably will
S1: be full soon. And if you become a member to
S1: get the discount, the discount is actually more than the
S1: cost of the membership. So really good time to become
S1: a member if you've been thinking about it. Super annoyed
S1: about the fact that ChatGPT Pro, which I use constantly,
S1: is not as good, unfortunately, as Claude AI. I have
S1: more problems with it. It sends me down more rat holes.
S1: It doesn't follow my instructions as closely as Claude does,
S1: and it generally produces code that's not as good. The
S1: code quality is a little bit closer than than the
S1: other aspects. What Claude does really, really well, and let's
S1: not frame it as ChatGPT pro being bad. It's more
S1: like what Claude does really well is it follows your
S1: instructions and it responds like a human, and it's like
S1: you're actually working with a coworker. So if you tell it, look,
S1: I only want one instruction at a time. This is
S1: one of my instructions. I only want one instruction at
S1: a time. Because oftentimes we're going to need to troubleshoot that.
S1: I have to go and run it and see if
S1: it works, and then let you know if it doesn't work.
S1: Claude follows that almost perfectly. And OpenAI or ChatGPT, it'll
S1: be like, okay, boom, here's seven more steps. So I'm
S1: scrolling to get back up to whatever. And I'm just like,
S1: why did you give me seven steps? The thing before
S1: didn't work. I told you not to do this. And
S1: then we give me code and it's like, here's a
S1: little bit of code. And then at the bottom it's like,
S1: here's the rest of the code or insert the rest
S1: of the code. I said explicitly in the instructions not
S1: to do that. Also, here's the other instruction I gave it.
S1: And also to Claude. Write out files using echo and EOF,
S1: which is end of file. That way I could just
S1: copy the thing and paste it, and it writes the
S1: file in my directory, as opposed to just giving me
S1: the raw code. Then I have to open the file
S1: delete paste close, which saves. So those extra steps Claude
S1: follows perfectly hardly ever misses that. And ChatGPT like 60%
S1: of the time misses it. So I'm really hopeful that
S1: ChatGPT is going to catch up and hopefully even get better.
S1: But it's really annoying to pay $200 for a thing
S1: and have that thing not be as good as the
S1: thing that's free. Or I guess I'm paying the $20
S1: subscription for anthropic. Not even sure. But anyway, I'm not
S1: paying $200 for it and it's better. And this is
S1: Claude not even having shipped anything recently. I have a
S1: feeling when Claude ships its new thing, it's going to
S1: jump way ahead of Google and way ahead of ChatGPT,
S1: but I'm sure again it's just leapfrogs. Constant leapfrogs, and
S1: I think 2025 is going to be even more. It's
S1: going to. Accelerate in the difference between one to the other.
S1: So I think Apple is. Actually doing exceptionally well on
S1: the AI front. Most people think that they're kind of
S1: way behind. And Apple intelligence. Isn't very good. The one
S1: thing I agree with is Siri is still massively broken,
S1: but it is getting better. But the thing I think
S1: that I realize that a lot of people don't, and
S1: keep in mind, I'm an Apple fanboy, so you got
S1: to take that bias into account. I don't think it
S1: actually applies. In fact, I think it gives me a
S1: benefit here. But I do want to make it very
S1: clear that I am an Apple fanboy. So if I
S1: were to be wrong, that would definitely be part of
S1: the reason. Um, so I believe that Apple is building
S1: life OS and that they've been slowly and quietly adding
S1: I to that. And they kind of have been for
S1: a long time. But with Apple intelligence, you should never
S1: expect them to jump out in front and do something
S1: crazy with their AI. That is just not the way
S1: the apple works. What they're doing, though, is they're adding education,
S1: they're adding health, they're adding, you know, the ability to
S1: see more and hear more with like the AirPods. They're
S1: just they're slowly incorporating more and more of our lives
S1: into their ecosystem. And the whole advantage of Apple, what
S1: they have over everyone else is how cleanly and in
S1: a unified way, they unify all their different ecosystem components
S1: to work together. Okay. So that's what they're known for.
S1: That's what they're best at. That's what makes them so compelling.
S1: That's why everyone switches off of Android. Because when you
S1: have Apple stuff, the more Apple stuff you use, the
S1: better everything gets. Now add AI on top of that,
S1: which runs securely inside of the Secure Enclave or in
S1: their new secure cloud infrastructure that they built. It's going
S1: to be insane. Absolutely insane. I mean, imagine an AI
S1: agent having full access to all your health data, and
S1: if you're a security person, you're probably freaking out about it.
S1: But with Apple, you you actually don't have to freak
S1: out about it. I worked there for three years in security.
S1: I've been watching them security wise for over a decade
S1: before that, and I have never seen a company more
S1: crazy about doing security and specifically privacy really, really well
S1: than them. And that's why also it takes them a
S1: little bit longer to do things, because they have to
S1: be very particular and meticulous about it. So people are saying, oh,
S1: they're going slow, they're being left behind. I assure you,
S1: they are not being left behind. And here's what I'm
S1: telling you to do. Let's have this conversation at the
S1: end of 2026, or even the end of 2025. What
S1: happens is they're small little winds in the ecosystem world
S1: and also in the AI world on top of the ecosystem,
S1: they're small little winds slowly build. They build and build
S1: and build. And then one day some some YouTuber is
S1: going to be like, wow, Apple just came out with
S1: all this amazing stuff. They really surprised us. Didn't surprise me,
S1: didn't surprise a lot of people who were watching Apple closely.
S1: It's slow, incremental, methodical improvements. Every little OS update that
S1: comes out, they tweak one little thing, which helps it
S1: work with these nine other things. Then they tweak nine
S1: other things, helps it work with this other thing. And
S1: slowly it's it's not just improving each component, it's pulling
S1: the components tighter to work better together. So Apple is
S1: building life OS. Okay. Not work. OS. Not, you know,
S1: personal os. A unified life os. That's mental health. It's health,
S1: it's fitness, it's career, it's creativity. It's all those things
S1: unified together. The way I like to think about it
S1: is if you watch the most advanced sci fi about
S1: an AI agent, something like her, that is essentially what
S1: Apple is building. Okay. It's building something like her. But
S1: imagine it more with like AR in addition, because that
S1: was mostly just voice. But imagine, you know, glasses or
S1: contact lenses. So you're seeing overlays. If you look at my, um,
S1: my peace AI's predictable path, that is what AI is
S1: going to look like. And I think Apple's going to
S1: get there first each component, they won't get there first,
S1: but having it all unified into a platform, into an ecosystem,
S1: they will get to that first. And then even when
S1: other people arrive, It'll be cleaner with Apple, which is
S1: why everyone will continue to use it. All right. Former
S1: OpenAI researcher who publicly criticized the criticized the company's data practices,
S1: was found dead in his San Francisco apartment. Suchir Balaji,
S1: 26 years old, dead of suicide and a lot of
S1: conspiracy going around this. The one thing I will say
S1: about this I don't know anything about the case, you know,
S1: probably wasn't foul play. Just just from the math of it.
S1: When people are whistleblowers, which is what he was, what
S1: a lot of people don't realize is you are you
S1: are shunning your community. You're taking somebody who's usually pretty
S1: powerful inside of your community, and you're basically blowing the
S1: whistle on them, which means they that big company or
S1: that big person kind of. I'm not saying OpenAI did this.
S1: I'm saying in general going back, you know, hundreds of years,
S1: this concept is that the community turns against you. You
S1: get looked at as like a rat or a a
S1: tattletale or a narc or something, and it's just like
S1: it's very lonely. Like, the most dangerous thing right now
S1: is loneliness. Right. And and I'm just projecting here. I'm
S1: just saying this is a common thing that happens with
S1: whistleblowers is they get ostracized, which is isolating, and it's stressful.
S1: That is, in my opinion, the most likely cause of
S1: something like this. But who knows? I mean, some conspiracies, sometimes, uh,
S1: whistleblowers are actually attacked. It doesn't mean it needs to
S1: be open. I it could have been someone who is
S1: friendly to OpenAI. Who who knows? I don't know, but
S1: I just wanted to add that dynamic there. Y Combinator
S1: backed startup called artisan is running ads all over San
S1: Francisco with slogans like stop hiring humans, and artisans won't
S1: complain about work life balance. This is brilliant. Okay, first
S1: of all, the CEO says I did that on purpose.
S1: It was dystopian on purpose. We're not actually dystopian. Uh,
S1: don't believe you. I remember that thing from, uh. What
S1: was it? I can't remember the name of it. It's, um,
S1: not Woody Harrelson. Damn it. What is this guy's name?
S1: Will Ferrell. Will Ferrell on? Um. Damn. What is the
S1: name of that? I can't remember the name of that
S1: damn show. Anyway, it's the one where he's a newscaster,
S1: and he's just like, I don't believe you. And that's
S1: exactly how I feel about this. I don't believe you.
S1: So I think he thought that was going to be cool.
S1: I don't know, maybe I'm not giving him enough benefit
S1: of the doubt. Maybe he actually did it. It has
S1: dual purpose, right? When you do this, it makes people
S1: look and go, Holy crap, artisans won't complain about work
S1: life balance. That's going to make a whole lot of
S1: people mad. All press is good press, right? So bad press, look,
S1: we're talking about it. A lot of people are talking
S1: about it. So automatically they got attention. But even more
S1: sinister than that, there are a whole lot of hiring
S1: managers who are tired of humans complaining about work life balance,
S1: and they're tired of people not showing up to work,
S1: and they're tired of tired of people doing half the
S1: work that they're supposed to be doing. And so this
S1: is actually an appeal to them directly as well, to
S1: fire your humans or stop hiring humans. So it's brilliant
S1: in two different ways. And I'm curious if they're actually
S1: going to do well. ChatGPT can now analyze real time
S1: video through your phone's camera. Okay. ChatGPT has this. OpenAI
S1: has this. I don't know if anthropic has it. I
S1: haven't messed with the Claude app that much. The actual
S1: static app, but, um, or the desktop app or phone app,
S1: it is unbelievable to pull up an I have a
S1: screen showing like I'm showing right now. And then to
S1: say to it, um, hey, do you see what I'm
S1: looking at? Hey, do you see that code? Help me
S1: troubleshoot this thing over here. It's over here. Working and
S1: returning code for you. But what? But watch this. You
S1: didn't type anything. You're just talking. You're just talking. And
S1: guess what? You're actually hearing it. Come back and say
S1: things to you. So you are literally having a voice
S1: conversation essentially with a colleague. And that colleague knows everything
S1: about coding and is helping you code. But it's not
S1: just coding. It can help you write or research or
S1: do whatever. And this is the end of 2020 for
S1: that that shipped and that was from Google. This one
S1: is ChatGPT works the same. I only got it working
S1: on my phone, though I haven't seen it on the
S1: desktop app because it's a lot more powerful on a
S1: desktop when you can see all your screens. And I'm
S1: telling you, it is kind of like a ChatGPT moment
S1: from late 2022, when you could literally have a regular
S1: conversation with a thing that sees it's like it's over
S1: your shoulder, it's sitting next to you. This is where
S1: AGI starts to happen, where not quite, but where you
S1: have a colleague that understands everything you're saying and can
S1: just go and do general tasks. So hugely impressive. I
S1: recommend you go check it out. The one that's really
S1: impressive is the Google AI studio. Okay, Gemini two and agents. Yeah,
S1: this is what I was just talking about. Completely surreal
S1: to just talk to an AI that you can basically
S1: see your screen. So let's see if this one actually
S1: does it. Um, do do they usually put it at
S1: the bottom. Damn it. Can't find it. All right. So
S1: this is basically what I was talking about. Uh, Gemini two. Okay.
S1: Now I really have to go find this thing. It's
S1: annoying me. Yeah, hopefully you can hear that. I can't
S1: hear it, but hopefully you can. Yeah. So you're basically
S1: just talking to it. It's really cool. All right, next story.
S1: Exxon is building its first ever external power plant focused
S1: on AI data centers. This is insane. Exxon. They are
S1: so good at seeing the future and I'm very mad
S1: at them for many reasons. Well, like in the 1970s,
S1: they saw the future of carbon going up and they
S1: chose to bury that research. That's the thing that most
S1: makes me angry. But in this case, they're seeing the
S1: future of AI needing needing power. So they are going
S1: into the business of providing AI data centers with power.
S1: They're starting a whole new branch of business. I mean,
S1: that is just absolutely brilliant. And like what what is
S1: their stock? Yeah. Let's look at like I don't like
S1: this graph one day okay. All yeah that's ExxonMobil. Look
S1: at this. Since October 1st 2020 it was $33. And
S1: today it's $120. So they're doing okay. So yeah really
S1: really smart basically providing power to AI. Yeah. So one
S1: is tracking health data in markdown files instead of apps.
S1: I love doing everything in text. So really, really enjoyed
S1: this article. Center click is released a line of GPS
S1: based server appliances. You know I got one. Even though
S1: I already have a time server, I got another one
S1: because I am stupid and this is actually fairly cheap.
S1: It's only like 250 bucks. Yeah, it was like 250 bucks.
S1: So I will probably give the other one away. Whichever
S1: one I like the least, I will probably give away
S1: and I might end up keeping this one. It seems
S1: like the metrics might be a little bit nicer, but anyway,
S1: what it is, it's a time server. It's stratum one,
S1: which means instead, okay, stratum two is you're pulling from
S1: a stratum one. Stratum one is or no. Is it
S1: stratum zero? I'm going to pull mine up and have
S1: my IP address in there. Um, I can't remember if
S1: it's stratum one is the one that goes to satellites. No,
S1: it's stratum zero is stratum zero I think. So basically
S1: the most direct one you can have okay. The absolute
S1: most direct one is you actually on on board these satellites.
S1: This is the GPS system manages. It's the most accurate
S1: time system in the world. It's 24 different satellites who have, um,
S1: I believe cesium clocks. Either cesium or the other one.
S1: I can't remember the other atom, but cesium is the
S1: most accurate one. Their atomic clocks on the satellites. 24
S1: of them. And they're in different orbit patterns. These 24 satellites,
S1: if you connect to them, give you the most accurate
S1: time that you can get on the planet, essentially, um,
S1: because all their clocks are synced and they're all working
S1: in conjunction and they agree on what the time is,
S1: and then they provide that time to the world. And
S1: this is how we have accuracy with GPS and everything.
S1: So if you have a time server like time.com or whatever,
S1: that is usually a I can't remember if that's stratum one.
S1: Let me see okay. Stratum one. Yeah. Stratum one is
S1: the original one. It's the one that has access to
S1: actual satellites. So you see that S1 right there. That
S1: S1 means it's the stratum one server. So look at this.
S1: I am 0.001680 milliseconds off of the true time on
S1: the satellites. And if I do mine, which is time,
S1: I don't want to do it because it's got my
S1: IP address in there. Not really a security risk, just
S1: kind of stupid to do on a video. But um,
S1: mine is even more accurate because it's actually running from
S1: my server room and it's got an actual antenna talking
S1: to actual satellites. I just love that I've always been
S1: obsessed with time. So bottom line, if you want to
S1: get into some super geeky time stuff for only like
S1: 2 or 300 bucks, you should get one of these things.
S1: They are super cool. Look at this United Airlines, which
S1: is my favorite airline. They are adding share item location
S1: into the mobile app. So if you lose your luggage,
S1: you can actually add your link to your AirTag and
S1: help United find your bag. That is the coolest thing ever.
S1: YouTube is seeing massive growth in TV viewing, with sports
S1: content up 30%. Users watching over 400,000,000 hours of podcasts
S1: on TV's monthly YouTube. Just absolutely killing it. Someone in
S1: Louisiana got a bird flu and they are hospitalized. I
S1: actually heard a conflicting report. Somebody was saying or some
S1: report was saying 60% of people die. I've heard a
S1: lot of other people might have been this article that
S1: said a lot of people got better from it. So
S1: it wasn't like killing everybody. So maybe we don't have
S1: a pandemic, maybe we do. And it's more like Covid
S1: and it's not so bad because we have, you know,
S1: vaccines come out. I mean, we already have flu vaccines,
S1: so maybe, maybe it won't be so bad. I don't know,
S1: don't really want to think about it, honestly. Tokyo is
S1: trying to increase births by giving its 160,000 government workers
S1: a four day workweek starting in April. I mean that
S1: the birth rate is down to 1.2 babies per woman,
S1: and they're trying to get that that back up. Um,
S1: expecting fewer than 700,000 newborns this year, lowest since records
S1: started in 1899. So they're trying to give people a
S1: four day work weeks. So basically a three day weekend. Hopefully,
S1: you know, go out, have a good time, uh, meet
S1: somebody and make a baby. Research shows ketones don't just
S1: provide energy to the brain. They actually help remove misfolded proteins. Okay,
S1: I actually have my buddy Danny gave me some ketone drinks.
S1: I don't know, a little bit cautious of that. I'm
S1: going to wait till the science is a little bit better.
S1: All right. Discovery Stack Analyzer detects more than 500 technologies
S1: in your code base. You basically point it to a
S1: GitHub repo, and it tells you all the different tech
S1: that it uses, all the different security talks at Reinvent.
S1: Thanks to Clint for showing me this link. And in
S1: a series of compression tests, Zstd consistently outperformed gzip and
S1: zlib across speed, compression and decompression efficiency. Metrics and recommendation
S1: of the week downtime, fiction, family, friends, downtime, fiction, family, friends,
S1: and the aphorism of the week. Almost everything will work
S1: again if you unplug it for a few minutes, including you.
S1: Almost everything will work again if you unplug it for
S1: a few minutes, including you, Anne Lamott. Unsupervised learning is
S1: produced and edited by Daniel Miessler on a Neumann U87
S1: AI microphone using Hindenburg. Intro and outro music is by
S1: Zomby with a Y, and to get the text and
S1: links from this episode, sign up for the newsletter version
S1: of the show at Daniel missler.com/newsletter. We'll see you next time.