S1: Wiz is the number one cloud security platform based on
S1: independent customer reviews that helps security leaders and developers protect
S1: everything they build and run in the cloud. Leading organizations
S1: from the fortune 100 to high growth companies all trust
S1: Wiz to innovate at the pace of cloud while staying secure.
S1: Click the link in the show notes or head to wizaya.
S1: Slash lowercase ul to request a personalized product tour with
S1: a Wiz expert. Unsupervised Learning Podcast listeners also get a
S1: free Cloud Security Health scan by going to wisdom IOL.
S1: That's wisdom. Tolowercase ul. Welcome to Unsupervised Learning, a security,
S1: AI and meaning focused podcast that looks at how best
S1: to thrive as humans in a post AI world. It
S1: combines original ideas, analysis and mental models to bring not
S1: just the news, but why it matters and how to respond.
S1: All right. Welcome to unsupervised learning. This is Daniel Miessler. Okay.
S1: What do we have here? All right. This is, uh,
S1: when sysop makes you release a patch for your end
S1: of life product. Because the vulnerability is so bad, I have.
S2: Abandoned my child. Say it. I abandoned my child. Say
S2: it louder. Say it louder! I've abandoned my child. I've
S2: abandoned my child. I've abandoned my boy.
S3: That's so.
S1: Good. Okay, uh, fabric is now supporting OpenAI's new model
S1: oh one preview. So you basically just pass it the
S1: switch R flag, which it sends the request using user
S1: rather than system, because, oh one preview is not allowing
S1: system access, so you only have to send it in.
S1: User results aren't that much different honestly. And you also
S1: can't send the temperature parameter which we were doing before.
S1: So this raw option allows you to use zero one
S1: preview with fabric and that works great. Got an insane
S1: cookbook use case 401 preview. So this person actually used
S1: it to. I'm going to open this up to actually
S1: create synthetic data and then validate whether the data was
S1: accurate or not. Really really cool. Really really cool stuff.
S1: And just one of the things that you could do
S1: for zero one preview that you can't actually do with
S1: other models. Okay. So let's see here. Back to kickboxing.
S1: I'll be kickboxing today so hopefully it won't be dead
S1: later tonight. I got a connect on LinkedIn button here
S1: in the newsletter. So if you want to go and
S1: connect there if you connect with me I will mutual connect. Okay.
S1: Last week's comments on current AI advances. So last podcast,
S1: if you're listening to this one, you might have already
S1: listened to that one, but I did a real deep
S1: dive on like the current state of like the path
S1: to AGI. I talked about the oh one preview.
S4: Um.
S1: And I just did a whole bunch of analysis, but
S1: you should check that out if you didn't listen to
S1: that one. And I wrote a new essay called the
S1: Art Quality Tier List. Pull this one up. And this
S1: is basically a way of rating art. And keep in
S1: mind this is for if you're a beginner, if you're
S1: already like an advanced art person, you already know art
S1: back and forward, then like you need to teach me stuff.
S1: I'm not teaching you anything. This is for someone who
S1: is thoughtful but is not an art expert. Even though
S1: I did take an art history class in college. But anyway,
S1: I don't really remember any of it, and I've basically
S1: just not understood what art was for the longest time.
S1: And I finally came up with a definition which I
S1: think is pretty decent. It is indirect expression of something
S1: that matters to humans. And I basically got a hierarchy
S1: here of like the different ways you could look at it.
S1: So going from not art to like proto art to
S1: like hollow art, which is kind of like a IoT,
S1: is one example where it might actually look pretty cool,
S1: or it might actually make you feel a certain way,
S1: but the artist didn't feel anything. And there was a
S1: little bit of a caveat here. If the artist feels something,
S1: but they're using AI to try to make the art,
S1: bring it out. So there's a little bit of a
S1: caveat there. And then decent art is where the artist
S1: feels it and the audience feels it. Great art is like, yeah,
S1: and people like it. And then S-tier or Brilliant is like,
S1: it's recognized as like a world talent or world class
S1: art and that's, that's basically it. So six different levels.
S1: And I even have a methodology for enjoying art. And
S1: this might be especially useful, especially useful for beginners. So
S1: start by feeling the piece. No thinking no analyzing. Just
S1: take it in and experience how it makes you feel.
S1: Do that for a number of, you know, seconds or minutes,
S1: however long you want to take. Now that you have
S1: a sense of how it affected you, analyze the message
S1: you believe is trying to convey. Then, once you have
S1: the message, think about how it was transmitted to you. Like,
S1: was it a song or was it paint or whatever
S1: it was? And this one's really important. If you're with
S1: a friend, do this in silence. Do one through three
S1: in silence for however long you want to spend on
S1: it for each piece, and then discuss your results with them.
S1: It's a really fun way to do this, you know,
S1: get a glass of wine or whatever it is. The
S1: first time I ended up doing this, I was doing
S1: it with my partner and with my friend Sasha, and
S1: we were doing this, I think it was the the
S1: Big Art Museum in New York, and we had lots
S1: of fun, like we all felt like novices, but we
S1: did something like this methodology and it made it a
S1: lot of fun. Okay, so that is that newsletter just
S1: went out, by the way, and security. So US is
S1: evidently super reliant on Chinese cranes. This is freaking me out.
S1: Particularly from this one company. Zpmc. And this report says 80%
S1: of US ship to shore cranes are owned by this
S1: Chinese company. I thought it was going to be like
S1: 25 or 50%. But yeah, I hope someone is actually
S1: tracking this stuff in a war room somewhere. And I'm
S1: pretty sure they are doing doing war room exercises. Fortinet
S1: has confirmed a data breach after someone called. I'm not
S1: going to say that word. Something naughty claimed to have
S1: stolen 440 gigs off of their SharePoint server, and they're
S1: talking about third party risk as being the problem. GitLab
S1: release critical updates to fix multiple vulnerabilities. Got 9.9 on
S1: the Richter scale here. Enable remote exploitation with minimal user
S1: interaction and low privileges. Lazarus Group, which is North Korea,
S1: been targeting Python developers with a piece of malware disguised
S1: as coding tests. They've been doing this for about a
S1: year now, thanks to material for sponsoring, Mastercard is buying
S1: Recorded Future from Insight Partners for $2.65 billion, and they
S1: bought it for 780 million. So nice ROI on that one.
S1: And what I noticed here is like this motion from okay,
S1: it's a startup that does this piece of functionality. Now
S1: we're going to bring it into a platform. In this
S1: case the platform is like Mastercard. So you have good
S1: ideas and execution. And their natural home is within some
S1: sort of ecosystem. And I think this is a good
S1: way to think of startups. It's like a petri dish
S1: for features that will live inside of something bigger, a
S1: bigger platform, bigger ecosystem or a framework. Security. Canary Maturity
S1: Model is a framework designed to help organizations assess and
S1: improve their security posture by using Canary tokens. I love
S1: this concept of detection maturity model. I was just talking
S1: to dropzone about this actually. So here's like a percentage
S1: of your most likely minor behaviors that you're likely to
S1: see based on who you are. And you know what
S1: percentage of these can you detect. And thanks to Defend
S1: defy for sponsoring as well. Australia is set to criminalise
S1: doxxing with penalties up to seven years in jail as
S1: part of a new legislation aimed at modernizing the Privacy Act,
S1: criminalizing doxxing. Seven years in jail. I like it. I
S1: like it. I think, yeah, it does really come down
S1: to there are times that this happens accidentally. In fact,
S1: last week I was worried I accidentally did it, which
S1: I could have just rerecorded, but I caught it and
S1: realised it wasn't doxxing so I didn't have to rerecord.
S1: But the point is, hopefully they're doing it for purely
S1: malicious people, which I'm sure they are. This piece discusses
S1: how AI powered autonomous weapons are changing warfare. So a
S1: bunch of Abrams tanks had to pull back after being
S1: targeted by kamikaze drones run by the Russians. Yeah, definitely.
S1: Go read kill decision by Daniel Suarez. This is the book.
S1: It is extraordinary. What? Did I read this? I read
S1: it in 2016. Yeah, really, really good. Russia's naval activity
S1: around undersea cables is freaking people out in the US.
S1: They're worried that they're going to sabotage underwater infrastructure through
S1: a unit called Goochie. Goochie goochie something. So this unit
S1: operates submarines, surface vessels and naval drones and has been
S1: spotted near critical deep sea cables. And these carry 95%
S1: of international data. US is drafting a New York joint
S1: statement to bolster security of submarine communication cables. Focus on
S1: excluding Chinese firms from the supply chain. Yeah, I think
S1: we need comprehensive critical infrastructure dependency analysis. And like I
S1: said before, I'm pretty sure this is already happening. I
S1: just hope we're using really good red teamers to emulate
S1: the capabilities of these adversaries. US House has voted to
S1: block the purchase of new drones from DJI. So much
S1: coverage of Counter China stuff lately seems like leadership is
S1: getting the message here, which is great. State Department has
S1: declared that Russia's state owned RT news has become a
S1: key player in the Kremlin's military intelligence operations. I mean,
S1: I remember a friend of mine talking about how awesome
S1: art he was because he was hearing stories he'd never
S1: heard anywhere before. And he's like, yeah, you know, the
S1: US has really messed up. And I'm finding out how
S1: messed up the US is from this channel. And I'm like, okay,
S1: what's the channel? And it's RT and I'm like, dude,
S1: you realize this is like, this is just a Russian
S1: state media, media, right? This is like this is pretty
S1: close to propaganda. And he started watching more and he's like,
S1: oh yeah, it was absolutely. But he didn't know he
S1: was being manipulated until it was called out to him.
S1: And this is like so long ago. This might have
S1: been like 2015 or something. All right, sir, he flash
S1: Biscan Kostov is a civilian radio enthusiast who has become
S1: a key figure in Ukraine's drone defence strategy against Russia,
S1: operating from a mobile intelligence centre in his Volkswagen van.
S1: He monitors Russian radio transmissions and shares his findings with
S1: over 127,000 followers, including soldiers and government officials. I'm not
S1: sure I'd be giving this guy a lot of press.
S1: It is basically putting a bounty on him. I and
S1: tech newspaper had humans, and I create novel research ideas,
S1: and then had human experts rate the ideas to see
S1: which ones they liked, and they actually liked the AI
S1: ideas better. And I think this is the way to
S1: measure the abilities of AI, not with like standalone benchmarks,
S1: but like what you do is you have AI results,
S1: you have human results, and then you have a rating system,
S1: which is humans later. We could use AI for that,
S1: but in the meantime, we have humans doing that. And
S1: then we essentially say, which ones did you like better?
S1: And they're blinded. Of course, they don't know which one
S1: is which. So when they pick the AI ones, that's
S1: a pretty good estimate. Estimation that the AI ones are better.
S1: And I think that's how we should do a whole
S1: bunch of these. Otherwise it's going to be a lot
S1: of bias. OpenAI releases their new zero one preview model
S1: focused on reasoning. We've talked a bunch about this one. Um, yeah.
S1: Got my thoughts on it so far in the podcast.
S1: And the big difference I just want to point this
S1: one out. That's why I kept the story in here.
S1: Big difference is that it uses chain of thought reasoning
S1: and the fact that it actually spends time and actually tokens,
S1: which means money thinking before responding, because before it would
S1: be tokens in and tokens out. And that was pretty
S1: much it. Klarna's CEO says that I could replace enterprise.
S1: Enterprise software giants like Salesforce and Workday claims that conversational AI,
S1: like OpenAI's strawberry, can handle natural language commands to build
S1: custom apps. 100%, this is what I've been saying Sbca
S1: that's going to happen. And yeah, this is my Fpca piece,
S1: and this is what I think future software looks like.
S1: You've got, uh, see, I can find the thing. There
S1: we go. State policy questions, action. I think that is
S1: the vibe. AI powered SAR satellites are now capable of
S1: detecting aircraft from space due to new radar tech, which
S1: enables real time monitoring of air traffic, good for both
S1: civilian and military uses. Cardio tech? That's a good name.
S1: Leveraging AI to tackle cardiovascular disease. Leading cause of death.
S1: Partnering with 65 hospitals to build a massive human heart tissue.
S1: Multi-omics dataset to identify new drug candidates. Super exciting because
S1: the AI I needs data to form its model of
S1: the world, and this is a whole bunch of that
S1: data to model it, because then you could figure out
S1: that's kind of the punchline here. You can figure out
S1: if drugs might work or that's the plan anyway. If
S1: you have a really good model of how the heart works,
S1: you can have drugs, potentially synthetic testing of drugs to
S1: see if they will work without doing trials or without
S1: doing as many trials, or for as long or as expensive.
S1: Salesforce just launched Agent Force, a suite of AI powered
S1: agents designed to enhance human workers across various business functions. Yeah, yeah,
S1: definitely designed to enhance human workers. Not designed at all
S1: to replace them. Yep, yep. Waymo's latest data shows that
S1: human drivers are responsible for most serious collisions involving its
S1: driverless cars. 16 out of 23 severe crashes being rear
S1: ended by human driven vehicles. Tesla's Cybertruck is spiking in
S1: the truck segment. Well, electric truck segment with 61% of
S1: sales surge in July, a surge of 61% in July.
S1: Did way better than the R1t's and the Ford F-150 lightning.
S1: I think we didn't. We just see a story saying
S1: the lightning was crushing it. I don't know why there's
S1: a big jump right now, but I have seen a
S1: whole bunch more very recently. Anecdotally, USPS has rolled out
S1: a new delivery vehicle. Let's see if we can get
S1: a picture of this thing, which I saw. Yeah, look
S1: at that. Looks like a duck. Looks like a duck, Bill,
S1: doesn't it? Yeah. Evidently the drivers love them. They're very,
S1: very practical, but they look very strange. Dmitri Greenberg has
S1: managed to run Linux and Ultrix on a business card,
S1: turning it into a tiny computer, eight kilobytes of Ram
S1: and 32kB of flash storage. New studies showing that debunk bot,
S1: an AI chatbot can effectively persuade users to abandon conspiracy theories.
S1: The bot made significant progress in changing people's beliefs, challenging
S1: the notion that facts and logic cannot combat conspiracies. I mean,
S1: this makes sense to me. So this is what I
S1: wrote you. You can convince. If you can convince somebody
S1: of something, you can convince them as well. This is
S1: why I'm optimistic about having AI on us all the time, 100%.
S1: It can be Orwellian, or it could be a defender
S1: or protector or tutor or coach, etc. that's always with us.
S1: Community college had to cancel its CS career fair because
S1: no companies reached out. Super sad, but super expected. If
S1: you have people coming out of college with four year
S1: degrees and master's in CS and they can't find jobs,
S1: what do you think? Do you think companies are rejecting right?
S1: The companies who would come to the job fair, they're
S1: rejecting the master's degree people, but they're going to go
S1: to community college? I don't think so. This is why
S1: we need human 3.0. Future is connecting directly to individuals
S1: not going through these credential forms. Google has officially killed
S1: off cache links, which is sad because that's how I
S1: used to see old versions of the site. And you
S1: can see the site even if it was down, like, whatever.
S1: United Airlines is partnering with SpaceX to bring free Starlink
S1: Wi-Fi to all of its planes. I'm a united person.
S1: I'm so happy that I'm a united person right now, man,
S1: because I fly JSX as well, and the Starlink is
S1: so good. It's better than a lot of my friends.
S1: Wi-Fi at their house. Ukraine just launched its biggest drone
S1: attack on Moscow yet, hitting the region with 144 drones.
S1: I still don't understand how Ukraine could possibly be winning
S1: this war. Completely insane to me, but in a good way.
S1: Sweden is increasing how much it's paying migrants to go home.
S1: It's now up to $34,000, roughly paying them to just leave.
S1: NASA's advanced composite solar sail successfully been deployed its ultra
S1: thin solar sail is now in low Earth orbit means
S1: it's visible in the night sky from various locations. It
S1: could be as bright as serious. Sirius is the brightest
S1: star out there. The dog star. It is very bright,
S1: so I can't wait to go find this thing and
S1: I wonder. I mean, it would be crazy to see
S1: something as bright as Sirius actually moving, so I can't
S1: wait to see this thing. Got a comet? They're calling
S1: it the comet of the century. I feel like these astronomer, uh,
S1: journalists are always saying it's the brightest. You will not
S1: see another solar eclipse for 900 years or whatever. And
S1: then it turns out, well, not one that comes directly here.
S1: Not one that falls on a Friday. Not one that
S1: you could see while standing upside down or whatever. And
S1: then you look and you're like, okay, when is the
S1: actual next eclipse? Oh, nine months from now or whatever. Anyway,
S1: this is going to be a cool one. It's going
S1: to be bright. So I'm going to try to remember
S1: these times. I'm sure they'll say more about it at
S1: the time so I can go take a look. US
S1: is closing a trade loophole that e-commerce people like Temu
S1: and Shine. Shine, shine have been exploiting. Loophole allows them
S1: to ship goods directly to customers without paying tariffs. So
S1: the US government is going after that. There's a leaked
S1: PDF that details Mr. Beast's unique company culture, and it
S1: got a one page summary of it here. Pretty, pretty
S1: smart business stuff. Although he is, I think being investigated
S1: for some some stuff. See here. Uh, person says sunlight
S1: cured their migraines. It's not a study. It's really just
S1: somebody talking about it. But I figure most people who
S1: have migraines have tried everything else, so why not try this?
S1: It's basically sunlight getting lots of sunlight, I think in
S1: the morning. Love this concept from Laura Hogan. Be a thermostat,
S1: not a thermometer. That's that's cool. I mean, it's cool
S1: if you don't even read the article. Be a thermostat,
S1: not a thermometer. Content driven development is a strategy for
S1: making progress on side projects by focusing on small, shareable
S1: pieces of work. So you finish a thing you share,
S1: you finish a thing you share. In 1913, Vienna was
S1: quite a place to hang out. Hitler, Leon, Trotsky, Tito,
S1: Sigmund Freud, Joseph Stalin all hanging out in the same city.
S1: And by the way, this is before Hitler. And I
S1: guess Stalin turned evil. And whoever else in that list
S1: was evil. Not sure how evil Trotsky was, because that's
S1: how poorly read I am about Russian history. Discovery merkel
S1: map CLI command line tool lets you search and enumerate
S1: subdomains using the merkel Map API. Okay, 71TB, ZFS, NAS
S1: 24 four terabyte drives. It has lasted without a single
S1: drive failure for over a decade, thanks to a strategy
S1: of keeping the server off when not in use. Cheating?
S1: I feel like it's cheating. Doctor Mordechai Guri She has
S1: unveiled a new side channel attack called Rambo, which uses
S1: radio signals from a device's Ram to exfiltrate data over
S1: Airgapped networks. I was like, I know this is Israeli.
S1: I know for sure, I guess Tel Aviv, but it
S1: was actually a different Israeli university. But yes, it was Israeli.
S1: Israelis are the side channel goats. Six techniques I use
S1: to create a great user experience for shell scripts. This
S1: was a great read. User friendly shell scripts with techniques
S1: like comprehensive error handling, colorful output, and progress reporting. These
S1: things really do make a difference. They make it feel
S1: like an actual app. Two people made a tool that
S1: lets you transfer playlists between Apple Music and Spotify and
S1: YouTube music. Those are kind of the three big ones.
S1: Nothing is a timer that celebrates the art of doing
S1: absolutely nothing. And how to create a pipeline with pinecone
S1: and semantic image search CLI CLE ideas. I love it
S1: when experts completely disagree about a really important thing. Like
S1: for example, I have no idea if China is thriving
S1: right now and is about to take over the world,
S1: or if they are about to have this demographic collapse
S1: and their economy is tanking, and they've got the housing
S1: crisis and they're just in major upheaval, and she is
S1: facing pressure and time is running out. And they have
S1: brain drain going to the west. And they're super screwed
S1: because they're slowing down AI and they're going to get
S1: passed up. I don't know if that's true or if
S1: they're about to invent their own chips. They're about to
S1: not need Nvidia. They're about to take over everything because
S1: the West is stupid. And I could find the world's
S1: best experts who tell me both of those things and
S1: tell me that the other set of experts is completely wrong.
S1: I find that fascinating, and I've read a whole bunch
S1: of books. I've read probably 12 deep, like large books
S1: about China or dedicated just to China and its development,
S1: probably the most important one being like Chip Wars, although
S1: that was more about chips than it was about China.
S1: But it definitely talked about China a lot. But I
S1: read a whole bunch that were dedicated just to China.
S1: And I mean, it didn't tell me the answer. I mean,
S1: I have all these opinions and I listen to these
S1: opinions of like, the smartest people, but the fact that
S1: I still don't know, after reading all those books and
S1: seeing all the data and listening to all these smart
S1: experts and I still don't know, that is exhilarating to me.
S1: I'm like, wow. I mean, I love the idea of
S1: like and I'm happy with myself for not like picking
S1: one and just saying, oh, this is what I think
S1: is going to happen. I tend to it's like strong opinions,
S1: loosely held, you know, and the recommendation of the week
S1: actively guard against age related lock in, which starts around 30.
S1: I'm guessing I made that up, but roughly around there,
S1: maybe even late 20s. And for some people it doesn't
S1: kick in. I've been very resistant to it, although I
S1: am writing this also to myself because you actively have
S1: to fight it. Listen to new music, read new books
S1: with new ideas in them, talk to new people. Go
S1: to strange restaurants. Try new foods. Don't let your experiences
S1: reduce into a tighter and tighter death spiral. Variation keeps
S1: your mind young and the aphorism of the week. Choosing
S1: not to read great books has the same effect as
S1: not being allowed to. Choosing not to read great books
S1: has the same effect as not being allowed to. Unsupervised
S1: learning is produced and edited by Daniel Miessler on a
S1: Neumann U87 AI microphone using Hindenburg. Intro and outro music
S1: is by zombie with a Y. And to get the
S1: text and links from this episode, sign up for the
S1: newsletter version of the show at Daniel miessler.com/newsletter. We'll see
S1: you next time.