Talkin' Bout [Infosec] News

This episode of BHIS - Talkin' Bout [infosec] News covers South Korea’s free government AI services, new efforts to secure the U.S. power grid from foreign-made components, and the use of SS7 and fitness-tracking data in military operations. The panel also discusses the FBI’s disruption of Chinese botnets targeting critical infrastructure, the alleged McKesson patient-data breach, arrests connected to Team PCP, and reports of NVIDIA acquiring Hugging Face. Additional topics include competition among AI coding platforms, critical vulnerabilities affecting Ubiquiti, Gitea, NetScaler, WebLogic, and PaperCut, and calls for an AI-powered surge in cyber defense.

Join us LIVE on Mondays, 4:30pm EST.
A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
https://www.youtube.com/@BlackHillsInformationSecurity

Chat with us on Discord! -
https://discord.gg/bhis
🔴live-chat


Chapters
  • (00:00) - PreShow Banter™ — What is the whole point of RAM?
  • (07:47) - South Korea Offers Free AI Services – 2026-08-31
  • (08:44) - South Korea Offers Free Government AI Services
  • (18:38) - White House Targets Foreign Components in the U.S. Power Grid
  • (24:11) - How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved
  • (25:15) - Iranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data Suggests
  • (27:44) - The Strava Heat Map and the End of Secrets
  • (29:37) - Officer reportedly leaks location of French aircraft carrier with Strava run
  • (30:09) - FBI Disrupts Chinese Botnets Targeting Critical Infrastructure
  • (32:31) - ShinyHunters Claims Theft of 284 Million McKesson Records
  • (37:23) - Alleged Team PCP Hackers Arrested in Australia
  • (39:08) - Rumored NVIDIA Acquisition of Hugging Face
  • (49:48) - OpenAI, Cursor, and Competition Between AI Coding Platforms
  • (53:11) - Critical Vulnerabilities in Ubiquiti, Gitea, NetScaler, and More
  • (55:51) - PaperCut warns of NG, MF flaw exploited in zero-day attacks
  • (56:20) - Technology Companies Call for an AI Defensive Surge
  • (57:42) - 58 arrested in international cybercrime crackdown
  • (58:48) - How to start the AI-accelerated defense
  • (01:02:21) - TRAINING: Fundamentals of Cybersecurity: Threats and Defenses
  • (01:07:07) - TRAINING: Hacking and Defending Satellite Infrastructure

Links
South Korea Offers Free Government AI Services
White House Targets Foreign Components in the U.S. Power Grid
How Tehran’s Use of Cyber Operations in the U.S.-Iran Conflict Has Evolved
Iranian Cyberattackers Tracked Phones of U.S. Military Personnel, Data Suggests
The Strava Heat Map and the End of Secrets
Officer reportedly leaks location of French aircraft carrier with Strava run
FBI Disrupts Chinese Botnets Targeting Critical Infrastructure
ShinyHunters Claims Theft of 284 Million McKesson Records
Alleged Team PCP Hackers Arrested in Australia
Rumored NVIDIA Acquisition of Hugging Face
OpenAI, Cursor, and Competition Between AI Coding Platforms
Critical Vulnerabilities in Ubiquiti, Gitea, NetScaler, and More
PaperCut warns of NG, MF flaw exploited in zero-day attacks
Technology Companies Call for an AI Defensive Surge
58 arrested in international cybercrime crackdown
How to start the AI-accelerated defense
TRAINING: Fundamentals of Cybersecurity: Threats and Defenses
TRAINING: Hacking and Defending Satellite Infrastructure



Click here to watch this episode on YouTube.




🔗 Register for FREE Infosec Webcasts, Anti-casts & Summits 
https://poweredbybhis.com

Brought to you by:
Black Hills Information Security 
https://www.blackhillsinfosec.com

☯️ Introducing BHIS Fusion Penetration Testing
https://www.blackhillsinfosec.com/fusion-penetration-testing/

Antisyphon Training
https://www.antisyphontraining.com/

Active Countermeasures
https://www.activecountermeasures.com

Wild West Hackin Fest
https://wildwesthackinfest.com

Creators and Guests

Host
Bronwen Aker
Bronwen Aker is a BHIS Technical Editor who joined full-time in 2022 after years of contract work, bringing decades of web development and technical training experience to her roles in editing pentest reports, enhancing QA/QC processes, and improving public websites, and who enjoys sci-fi/fantasy, Animal Crossing, and dogs outside of work.
Host
Corey Ham
Corey Ham has been with Black Hills Information Security (BHIS) since 2021 delivering red teaming and OSINT services. Currently, Corey leads the ANTISOC team at BHIS, providing subscription-based continuous red teaming to BHIS clients. Outside of his time at BHIS, you can find him out in the woods or up on a mountain somewhere.
Host
Hayden Covington
Hayden Covington joined Black Hills Information Security (BHIS) in the Summer of 2022 as a SOC Analyst. He chose BHIS after hearing many great things over the years and seeing the quality of work, as well as finding people who have the same passion for the field as he does. His favorite part of the job so far has been the community. Previously, Hayden worked in a SOC for a Naval contractor, where he also served as their SOAR project manager and SME, as well as insider threat lead. When he’s not working, Hayden can be found doing anything athletic (like triathlons!), as well as enjoying video gaming and Formula 1.
Host
John Strand
John Strand has both consulted and taught hundreds of organizations in the areas of security, regulatory compliance, and penetration testing. He is a coveted speaker and much loved SANS teacher. John is a contributor to the industry-shaping Penetration Testing Execution Standard and 20 Critical Controls frameworks.
Host
Ralph May
Ralph is a U.S. Army veteran and former DoD contractor who supported the United States Special Operations Command (USSOCOM) with information security challenges and threat actor simulations. Over the past decade, he has provided offensive security services at Optiv Security and Black Hills Information Security (BHIS) across various industries. His expertise spans network, physical, and wireless penetration testing, social engineering, and advanced adversarial emulation through red and purple team assessments. Ralph has developed several tools, including Bitor (set to release in January 2025) and Warhorse, which enhance efficiency in penetration testing infrastructure and operations. He has spoken at numerous conferences, including DEF CON, Black Hat, Hack Miami, B-Sides Tampa, and Hack Space Con.
Host
Wade Wells
Wade Wells has been working in cybersecurity for a decade, focusing on detection engineering, threat intelligence, and defensive operations. Wade currently works as a Lead Detection Engineer at 1Password, where he helps build and mature scalable detection programs. Outside of his day-to-day work, Wade is deeply involved in the security community through teaching, mentoring, podcasting, and running local events
Guest
Doc Blackburn
Doc Blackburn is a seasoned (old) cybersecurity instructor with decades of experience in IT, security, and compliance. Over his career, he has worked in many areas of IT, including systems administration, programming, network design, cloud services, web development, and risk management, bringing a broad technical foundation to his teaching. For more than 13 years, Doc has trained students and professionals to understand, implement, and maintain effective security practices, drawing on real-world consulting experience in compliance frameworks such as NIST SP 800-171, CIS Critical Controls, and MITRE ATT&CK. Known for making complex concepts accessible to all audiences, he blends technical depth with practical insights, preparing learners to address today’s evolving cyber threats.
Guest
Michael "Shecky" Kavka
Shecky, as he is commonly called, has been in the professional world of IT for nearly 30 years the last 11 as a blue team security engineer. He is focused on detection engineering, threat intel and analysis. Outside of his day to day he is involved in Bsides312, Hak4Kidz and Burbsec (Chicago's cybersecurity meetup conglomerate).
Producer
Ryan Poirier
Ryan Poirier began his time at Black Hills Information Security (BHIS) as the Video Producer and Editor in August 2020. Ryan polishes and perfects every webcast, podcast, and workshop on the BHIS, ACM, and WWHF YouTube Channels. Prior to Ryan’s time at BHIS, he worked for one of the largest public schools in the United States, conducting their video production and live broadcasting. He joined the BHIS team because he felt like it would be a great group of people to work with, and he couldn’t pass up the perfect next step in his career. Outside of his time with BHIS, Ryan does freelance photography, attends Cars & Coffee events, and expands his knowledge of audio and videos.

What is Talkin' Bout [Infosec] News?

A weekly Podcast with BHIS and Friends. We discuss notable Infosec, and infosec-adjacent news stories gathered by our community news team.
Join us live on YouTube, Monday's at 4:30PM ET

Ralph May:

I only game on Mac now. I I just exclusively game rich?

Corey Ham:

You I'm sure that

Bronwen Aker:

It's from all those classes he's teaching.

Corey Ham:

He's like, alright, guys. Day one of my class. Give me RAM. The the the price isn't in dollars anymore. The price is in GDDR.

Corey Ham:

How many chips

Ralph May:

of RAM can you give me?

Corey Ham:

Do you yeah. Is this DDR five? Alright. You're good for both days. A DDR four, you're gonna need you're gonna need one each day.

Ralph May:

Yeah. After going down the rabbit hole of actually building, you know, an AI a local a local AI rig, like, so what's the whole point of RAM? Right? So in some of those mixture of expert models, right, not all of them, but some of them, you can, in essence, offload some of the inference some of the the experts into RAM. Right?

Ralph May:

And so that's one of the other reasons that DDR five has has gone up. Obviously, the main one being that they make HBSs instead of DDR five memory. But, also on the secondhand market, DDR five is more expensive because it's faster than DDR four, And that speed ends up relating into the tokens per second that you get from

Corey Ham:

Yeah. DDR four is basically only general purpose compute. It's so slow. Like, I had this long term conversation with Claude about like because I have a ton of d d r four memory just from my home lab. Uh-huh.

Corey Ham:

But it's like, the speed is so slow. It, like, wouldn't be worth trying to use it for inference. It'd be like, 10 tokens per second or whatever. Super, like, they're unusably slow. Like, it's like miles per gallon.

Corey Ham:

Right? Where, like, okay. 20 is like, okay. It's fine. Like, you know, you're you're driving a truck.

Ralph May:

You're, 20 miles. Yeah.

Corey Ham:

Six miles per gallon? Okay. Now you're already, like you literally refill, like, a $100 to drive to

Corey Ham:

the grocery store or whatever. Yeah. But yeah. I mean, it is what it is. But

Ralph May:

It it is interesting. Yeah. When you go down that road, like, if you if you want to offload, you know, and it's as opposed to, in essence, buying a bunch of GPUs that have an insane amount of, you know, high speed memory. Right? That can get really expensive.

Ralph May:

So, hey, could I go over to memory or RAM as opposed to the opposite? So it's kinda interesting.

Corey Ham:

Yeah. I mean, also just even, you know, regardless of AI in the mix, you still need VMs and infrastructure around it. Right? Like Yeah.

Corey Ham:

If you, you know, if you're running Hermes or whatever, that doesn't run on a GPU. Right? If you're running, like

Ralph May:

Uh-huh.

Corey Ham:

You know, whatever you're running, it still has to run on a VM. It still has to, like, work on RAM. Yeah. You still need memory for that. Yeah.

Corey Ham:

You can't just be like, well, I I sold all my computers. I can't browse the web, but I have a really fast GPU. I've got a forty ninety with a dream. Okay?

Ralph May:

Yeah.

Bronwen Aker:

Yes. You guys heard that NVIDIA is talking about buying Hugging Face. Right?

Ralph May:

Oh, no. They're they're definitely doing it. Yeah.

Corey Ham:

We got an article about it. Way to spoil the news, bro. Oh my god.

Bronwen Aker:

I'm sorry. I couldn't find the article. There's there's so much here.

Corey Ham:

Didn't you think what what do you think this is a news podcast or something, Bronwen? What's going on?

Bronwen Aker:

Silly me. I'm actually trying to be prepared.

Wade Wells:

My audio working? I know.

Corey Ham:

You can hear me? Yeah. How's it going?

Ralph May:

I'm gonna

Corey Ham:

finish the latest dungeon crawler Carl book?

Wade Wells:

Dude, come on. I finished it years ago.

Corey Ham:

Did you just binge it? Yeah. I finished it last weekend.

Wade Wells:

How'd you feel?

Corey Ham:

I mean, I'm good with it. I feel like it's on track.

Wade Wells:

Dude, Are

Corey Ham:

you salty about it?

Wade Wells:

No. No. No. I know some people who aren't as excited about it as much as like I was, but I I'm all about it, dude. I am

Corey Ham:

Yeah. I mean, I I think it's like any any pop culture or any like media. It's like the first season or whatever is always the best. Right? Like but I do think they up the game.

Corey Ham:

Like, I I don't do like the the I don't do like the, you know, fully produced audiobooks, but I just do the regular audiobook. Oh, yeah. And like the the like karaoke scene really has

Wade Wells:

Dude, with the audio?

Bronwen Aker:

Guys, spoilers. I've only read the first book.

Ralph May:

He don't get any karaoke in it. Spoiler.

Wade Wells:

Wait, what book is? Dungeon Crawler Carl. You've never heard of

Corey Ham:

It's series. It's a it's just a nerdy

Wade Wells:

Ralph, I'll email you. I'll email later. I'll email you

Corey Ham:

I It's got just a fun thing that Wade showed me years ago and I've been slowly digging my way through

Bronwen Aker:

the It's It's a lit RPG.

Wade Wells:

But it's like the lit RPG like they got greenlit by Seth. So Seth, Seth Meyer? No. What's the Seth who does Family Guy? McFarlane.

Wade Wells:

McFarlane is running is producing the TV show.

Bronwen Aker:

Oh, that's gonna be good.

Wade Wells:

And then they also have, like the voice the main odd the main voice actor for the actual book is doing donut. So it's like gonna be true. Okay.

Hayden Covington:

Are you are you talking about Dungeon Crawler Carl?

Wade Wells:

You you know it. We are not.

Ralph May:

Welcome to the chat.

Wade Wells:

Corey, my favorite is okay. You know how everyone says like, Carl sounds like the guy who plays like Cronk from Emperor's

Ralph May:

Yeah, Right?

Wade Wells:

I didn't realize this, but they had that actor come in and voice Carl's evil twin. And that one that one part of the book. And that's that's who that voice was. And I was like, oh, my god. Like, I saw the video clip of him doing the voice.

Wade Wells:

I was like, that makes a lot more sense now. This is crazy.

Corey Ham:

That's really funny. Yeah. It's just a silly fun book. It's just the it's the equivalent of like a piece of candy. That that isn't, you know, it's it's very entertaining.

Corey Ham:

Mental

Bronwen Aker:

Yeah. Mental candy floss.

Corey Ham:

I Totally.

Ralph May:

I don't wanna tell you, but I already have this series and I have not listened to it. But do. Okay.

Hayden Covington:

Well, I've read them all.

Corey Ham:

I've listened to them all.

Hayden Covington:

Go for You need to

Corey Ham:

I would say the other the thing that is genuinely unique about it is that they do a lot if you're into audiobooks, they do a much heavier audio production than you're expecting. Like, it's not just a narrator.

Ralph May:

Sure.

Corey Ham:

And in a and they pull it off in a way that makes it much more compelling. That's kind of fun versus like the print version. And they do like a fully cast Yeah. Produced also in addition. But just the regular audiobook still gets a lot of like little touches and things.

Wade Wells:

So there's some crazy the author has a Patreon that you can go and read while he's writing the book. And you can make suggestions that he will actually put into place. So like, one of the one of the actual books is called the Anarchist Cookbook. It was the community who voted in the Anarchist Cookbook as an item, and then that becomes a pivotal item.

Bronwen Aker:

Anarchist Cookbook was I that

Corey Ham:

is Yeah. That's a real

Bronwen Aker:

stable from the old days.

Wade Wells:

Yeah. Yeah.

Bronwen Aker:

You don't wanna know how old I was when I read

Wade Wells:

it the

Ralph May:

first time.

Hayden Covington:

If you look behind Corey on his bookshelf back there.

Corey Ham:

Yeah. I mean, I remember downloading off the Internet when I was like in my four chan era and thinking I was a really cool kid like Did you I got the anarchist cookbook? Yeah. I was like without the cookbook just building bombs in my spare time for fun as one does.

Ralph May:

You don't need the cookbook for that.

Corey Ham:

You don't need the cookbook. Just put exploding bits into a thing and you got a bomb.

Wade Wells:

Remember reading the thing from it. It was like going to Radio Shack, go into every clock radio you can and schedule an alarm for like five minutes into the future. And then keep going down for more and more in five minutes and then leave and then just watch the chaos. I did it. It was amazing.

Wade Wells:

A lot of people were upset.

Corey Ham:

Alright. Now that we're fully monetized, let's roll the finger

Ralph May:

and get on each monetized.

Corey Ham:

Thanks for your help, everyone. Alright. Roll it. Hello, and welcome to Black Hills Information Securities talking about news. It's 08/31/2026.

Corey Ham:

And I'm definitely not ready for September. I don't know if you guys are,

Hayden Covington:

but No. Already.

Ralph May:

I'm not ready. So

Corey Ham:

John appears to have fished his way into the show at the very last minute.

John Strand:

Just came in, had class, talked to Erica, got some stuff out. I'm here. I'm here. What what's happened this week? We have some security?

John Strand:

So

Corey Ham:

this show, I think this is gonna be kind of a nostalgic episode, to be honest. We've got botnets. We've got ransomware. We've got like people getting arrested, hot nation state on nation state action. There's actually not that much AI stuff this week.

Corey Ham:

So if you hate AI, this is your show. However, did you talk about AI?

John Strand:

South Korea is offering free AI for all unlimited.

Corey Ham:

Yeah, that's a nothing story. It's just to interface with their government services. It's gonna be like the McDonald's chatbot.

Wade Wells:

It's to train the government's model to try to catch up.

Corey Ham:

I don't know. Yeah, I mean, okay. So let's cover this article, even though I just, you know, tease that it's gonna be an AI light article. Let's let's just go straight to

Ralph May:

my article.

Bronwen Aker:

Like, John, it's always so it's me. John. Of course,

Ralph May:

just ran after that.

Corey Ham:

He's such a Carl, guys. He just he he's chaos monkey. He is a Carl. Goddamn it, John. He's a Carl. He is a Carl.

Corey Ham:

But anyway, the he just the article I don't know if Ryan if you found it, but it's yeah. Basically, the South Korea. I'll paste it. So the article is in tech spot. Basically, South Korea has announced that they're providing free generative AI services to its entire population.

Corey Ham:

It does specifically say that is not a general it's not intended to be a general purpose chatbot. It's specifically designed to interface with government type systems. Not like it's not Hermes for all or whatever. It's it's specifically able to book doctor appointments, search for apartments, get tax guidance. I'm a little jealous.

Corey Ham:

I feel like if you ask the IRS chatbot for advice, it would just be like, I don't know, dude. Just file an amendment. I don't know what's going on. Mhmm.

Hayden Covington:

I mean, Claude is really good for, like, US taxes. Like, I got a return of, like, $400,000 this year, which was

Ralph May:

pretty much chasing. I was waiting for that one come in. Is that not normal?

Corey Ham:

Yeah. That's that's the AI will help you with tax fraud. It's a fantastic fantastic asset.

Ralph May:

Just make sure you get the, what do you call it, the the unabridged version of your, you know Yeah. Obliterated model.

Corey Ham:

There you go. Sorry. Yeah. Yeah. The IRS

Hayden Covington:

is gonna obliterate me once they

Corey Ham:

Yeah. They're gonna obliterate you. So yeah. The basically, what I would say is, I I I know we have I'm not, like, super familiar with South Korea's technology, like, world. But I do know that they're known for being very integrated.

Corey Ham:

Like, they use their phone plans to pay everything. Like, they're very like, everyone uses similar systems and similar payment. Like, they don't use like Apple Pay. They just like all use their phones to pay for everything. And like, they're they're kind of insular in their tech.

Corey Ham:

And so I could see this working really well. I could also see it being a freaking disaster. Right? Like, can only imagine all of the legal cases of like, oh, well, the the the chatbots that I didn't owe any taxes. Right?

Corey Ham:

Like, it's you can imagine all if it's officially endorsed, it opens up huge issues with like, well, I booked my doctor's appointment and the AI agent, you know, said I probably was, you know, really healthy. So I I canceled it. And then like, you die a week later or whatever. You know, I I don't know. What what is this gonna be something that

Bronwen Aker:

would your be state billing for that.

Wade Wells:

Not you. This is this

Doc Blackburn:

is the country where Squid Game comes from.

John Strand:

So Yeah. Oh, yeah. True. The question is is are tokens gonna become the new currency?

Wade Wells:

Oh, without a doubt. Yeah. Without a doubt. Absolutely. Now When you when you when they on job applications, they literally see unlimited tokens on there.

Corey Ham:

That's a perk. That's not a currency. That's a perk. I'm like, dude, if it was a if it was a currency, that would be the code of saying unlimited pay.

Ralph May:

Oh my god. That's not

Corey Ham:

a thing.

Wade Wells:

Unlimited side hustles, you know.

Ralph May:

I'm gonna put that on my van now. Unlimited tokens. Oh my god. Conversion van.

Corey Ham:

AI agents inside. Come chat with our bottle. I can see

Ralph May:

You could be like, I have RAM and GPUs in here to see how many people.

John Strand:

He's like he's like the roadrunner trying to catch Wile E. Coyote. It's like GPUs and tokens.

Wade Wells:

It's like Ralph Ralph just came up with someone's RSA van that's gonna be torn around San Francisco. You know what?

Ralph May:

You know what?

Corey Ham:

I need you guys to

John Strand:

help me remember this. We're doing this at the next RSA. We're gonna we're gonna we're gonna do is we're gonna fly to Las Vegas or not Las Vegas. We're gonna go to San Francisco, and we're gonna find the crappiest, scariest conversion van that we can find. Right?

John Strand:

And it's we're gonna spray paint on the side of it the free token van.

Corey Ham:

Yeah. And, you know Oh, unlimited, man.

John Strand:

Like, GPUs inside. Mhmm. And we're just gonna drive around the block all the time. So I need help. Here.

John Strand:

Hold on. I'm gonna go call the content community.

Corey Ham:

It'll have like okay. Strand with that rubber tire sticks hanging out the back.

Ralph May:

Yeah. Alright. Yeah. John's

Hayden Covington:

Creepiest gonna get on van that you can find.

Corey Ham:

Yeah. I I I mean, honestly, I would be I I think more countries will do something like this. But I I we'll see. It could just be chaos.

Ralph May:

Give free AI?

Corey Ham:

Yeah. Mhmm. I could see it. Like, especially for government an easy

Bronwen Aker:

way to hoover up data. I mean, it's it's

Ralph May:

it's The AI loves the data. It loves

Corey Ham:

the data.

Bronwen Aker:

The AI loves the data and the government

Corey Ham:

loves data.

Wade Wells:

It's the AI that loves Yeah.

Corey Ham:

I mean, we'll see what happens with this. I would guess, first of all, the amount of money, the amount of abuse, the like, the amount of waste that this is gonna generate of people just asking like, hey, governmental AI. I need to book a doctor's appointment. By the way, can you create me a React app with a like, you know, like, they're just all used McDonald's chatbot to make Python code, you know, to order the

Doc Blackburn:

big just nuggets. Wanna point out that we are all we fell into a trap a long time ago, we're just finally realizing we're in this trap because so much of the Internet has been free for so long, social media and all of that. And, you know, it's just like, were just mining our data all along to, here's the crime now is that they're charging us to have access to all of this data that we've been giving them for free for years now. So, we're just finally realizing that we fell down the trap a long time ago, back in the nineties, and now we're paying for it through the tokens. What a Debbie Downer.

Bronwen Aker:

The classic it's the classic addictive model. The first one's free.

Doc Blackburn:

Yeah. Well, it's drug dealers, Larry. We like that.

Hayden Covington:

Like, Anthropic put out their really great post saying that coming up soon, the 50% increase that they're giving to that they have been giving to all of their users for, like, a couple months, they're increasing the usage by decreasing it, like, down to 20% more than it was before, whatever it was. Yeah.

Corey Ham:

It was such

Hayden Covington:

a weird tweet, and it was very fascinating to see people clown on them. But I feel like we turned this into an AI episode. Thanks a

Doc Blackburn:

lot, Corey.

Wade Wells:

Get out of here.

Corey Ham:

Of here. Get Let's get on. We'll come back to that.

John Strand:

Let's blame Corey for this. It's all Yeah.

Ralph May:

We're gonna stop this.

Wade Wells:

We can't let John John pay us.

John Strand:

At Corey for making this an AI webcast.

Hayden Covington:

Listen, guys. Corey doesn't pay us.

Corey Ham:

That that's that is true. But according to the government, just according to the government AI, you aren't getting paid anyway. So it's fine. Alright. Yeah.

Corey Ham:

So other fun. Yeah. Other fun things. The grid is currently, like, OT, ICS stuff is currently a hot topic. There's a handful of articles about it.

Corey Ham:

The White House

John Strand:

Sorry. Corey.

Corey Ham:

Oh, yeah.

John Strand:

Ralph. Ralph, you're fondling your your board, and it's making me a little uncomfortable.

Bronwen Aker:

I Ralph's over here. Ralph's over

Corey Ham:

here flexing and showing off how he's got all this extra computer hardware just laying around.

Ralph May:

Just laying around. It's honestly, this is how you know that you've made it.

Corey Ham:

This yeah. This is the equivalent of, like, in COVID when you had people on, like, toilet paper phones. Yes.

Wade Wells:

Exactly. That's that's just me. I'm gonna start

Ralph May:

making a big tower of, like, computer hardware and RAM and stuff, and that'll be like the same equivalent.

Corey Ham:

That's kind of a flex. Yeah. I need to I I I pull out some, like, RAM sticks while I'm on the show or something. Oh. Yeah.

Corey Ham:

Yeah. Do. Don't think How many terabytes is that?

Ralph May:

Oh, god.

Hayden Covington:

Now we're really demonetized.

Wade Wells:

Don't even know the idea that all of us

Corey Ham:

just have random technology sitting next to us that we're not using.

Wade Wells:

Alright. Look at look I wanna point out that that Ralph a far back callback. Ralph just opened a door that I never knew was actually there. I thought that door was towards the closet.

Ralph May:

Just opening up getting some NVMe's here. Oh, my little laptop.

Corey Ham:

I know.

Ralph May:

Laying around.

Corey Ham:

Check the oh, wow. Look look at this. What's this? A Mac mini on my shoulder? No.

Corey Ham:

Flex.

Hayden Covington:

My cord's not long enough to bring my Mac mini over here.

Corey Ham:

Oh my god. I don't even have mine plugged in. That's how big how flex that is. Do you

John Strand:

guys wanna see my dongle?

Ralph May:

Floppy. Floppy. Oh my oh, that's awesome. Yeah. Where it will stop Oh my god.

Ralph May:

Bronwen's got the flexes. Bronwen

Corey Ham:

just showed the most VRAM of anyone so far. Exactly. Alright. Okay.

Hayden Covington:

Doc, are those that you have. What are those?

Doc Blackburn:

Did you

John Strand:

just ask what are those?

Wade Wells:

Those are those are images of the save button. Oh, that's right.

Hayden Covington:

Yeah. That's how you

Corey Ham:

save it. Oh, he printed he printed out the save button?

Doc Blackburn:

WordPerfect 4.1.

Ralph May:

Oh my gosh. Oh my god. Told you

Corey Ham:

it should

Doc Blackburn:

be in the South Shapla. Oh

Ralph May:

my gosh. Perfect. Oh.

Corey Ham:

What perfect Dude, I think you might need to clean your desk. You just had that

Ralph May:

ready to go.

Wade Wells:

Had them ready to go. Here they are.

Corey Ham:

I'm I need to say to Erica. Well, you never know when my Microsoft Word subscription gets canceled. Have to switch. Alright. Getting it back on track.

Corey Ham:

The White House today has issued a national emergency or sorry. This is August 26 about basically banning Chinese and other foreign made components in bulk power systems, which is like energy grid stuff.

Ralph May:

The normal stuff.

Corey Ham:

We can all speculate about why this is happening. We've talked multiple times in the last few weeks about grid hacks, and there were some water plants getting attacked in The US. Also, is kind of a repeat. Like, Trump did this in 2020. This isn't necessarily new.

Corey Ham:

It also doesn't have any cutting language in it. It's basically says, we're gonna let the DOE come up come up with some rules and give up to us in the next hundred and twenty days. This got rolled back when he did it last time because it's functionally impossible. Impossible. Yeah.

Corey Ham:

It it's impossible to remove this stuff from the actual grid. Like, replace every inverter. Okay. Well, right now, because of the way supply chains work, if you were to buy an inverter, you'd get it in like four years. So Mhmm.

Corey Ham:

Like, unless you're just gonna take the grid down for four years, this isn't necessarily feasible. But we'll see. I think it's probably not a bad idea to look at cybersecurity related concerns and supply chain risks and things like that when it comes to OT and ICS. Especially bulk power, which for the energy nerds, that's like the real transmission infrastructure. Like, anything over 96,000 volts, I believe, is like the official, like, number.

Corey Ham:

So basically, everything that is, you know, huge infrastructure grid stuff, not just like home inverters and stuff like that.

John Strand:

I Yeah. I don't understand. Like, you know, we talked about this last time. Right? This is not something that you're gonna be able to do quickly and easily.

John Strand:

And it goes all the way back to I wanna say it was 2005. I remember running around a secure facility trying to pull down all of the Cisco gear that had very specific ranges of serial numbers because there was like a backdoor that was put into them. Right? And I remember thinking then, I was like, well, this is gonna be the end of Cisco. I'm sure, you know, backdoor is showing up in gear, and no one cared.

John Strand:

Right? It's just this has been a problem that's existed for an incredibly long time, and it's not really all that fixable at this moment. So it's bad, and I don't know what the solution is.

Corey Ham:

I just don't Also, this is totally I I think and I I'm, you know, not in the energy industry, but I I think this is making a mountain out of a molehill. It's more a political thing. I mean, if you okay. Yes. Like 10 water districts were hacked in Minnesota and like, some person like, nothing actually happened.

Corey Ham:

That's the thing with this I o t I c s stuff. It's like, we always freak out about like, oh, The UK. Well, they had a power plant go offline, but they're like, guys, this power plant was a rounding error. It was like point 002% of our generation capability. Well Obviously, we've seen it in Ukraine.

Corey Ham:

We've seen it like there had been some real attacks that affected the grid. But it's always like, oh, but a guy drove with his truck and just turned it back on. Like, it's never actually a sweeping cascading crazy thing.

John Strand:

That's where I disagree about the possibility of this. The United States power grid is very interconnected all except for Texas. We won't talk about you, But it it's very much connected. And, yeah, you can actually have a power station go down. That's a very small power station that has catastrophic consequences across the rest of the grid.

John Strand:

Earlier this summer, maybe it was last summer. I don't know. They all blend together. There was a power station that went down in Wyoming, a small one. And the rumor is

Corey Ham:

that It was just a horse on a treadmill.

John Strand:

No. It was a tumbleweed avalanche that tumbleweeds got sucked up into it, and it started a fire, and then it started it's a Wyoming thing.

Bronwen Aker:

And I remember that.

John Strand:

Shut down a large section of power well beyond just that particular power station. So I do think that there is more possibility of it being worse in The United States, mainly because we aren't nearly as up to date with our power grid infrastructure as the rest of Europe actually is. And we're so good.

Corey Ham:

Because that means nothing has computers in it, John. It's fine.

John Strand:

Good point. You can't hack it. Touche. Point, Corey. So

Corey Ham:

Yeah. I mean, I generally agree with this as a concept of, like, supply chain analysis and making sure there's not back doors in your stuff. Like, that's good. But it's like anything else where the implementation has to follow realistic expectations for timing and so we'll see.

Ralph May:

What we could do to secure this better though is add AI to those systems, and then be better. Right?

Corey Ham:

That's true. I never thought of that. I'll I'll put it in order for the US DOE ordering some AI stuff. I'm sure it'll get delivered tomorrow and not in six years. Yeah.

Corey Ham:

Yeah. I I'm basically, like, the high level here is, when we're talking about China specifically, solar is really their area that they lead. So this is gonna hurt the solar folks more than anyone else. And then we're talking about other concerns with this is that if the DOE says that Europe and Korea are both in, like, the banned foreign entities list, then everyone's, like, in big trouble. Because we do not have domestic manufacturing capabilities for most of this stuff.

Corey Ham:

It's mostly either Korean or European. And so if that gets tied up in this, it's gonna create major issues. If it's just China, it mostly creates issues for solar. But yeah. We'll see.

Corey Ham:

I mean, obviously, one of these executive orders happens every five minutes. But It's hard to keep

Ralph May:

hard to keep up.

Wade Wells:

Yeah.

Corey Ham:

But there's also a pretty interesting article just talking about general ways in which, yeah, cyber operations have influenced The US Iran conflict. I think the most interesting one that I we never talked about, but I thought it was really fascinating was that, apparently, they abused SS seven, which is like the text messaging protocol to discover where soldiers were located and then actually played that into a kinetic attack. Like, I didn't realize I don't know if we just didn't talk about it, but apparently, it's real. John, did you know anything about that one?

John Strand:

So this this is specific for I thought it was just GSM. Am I wrong about that? Or

Corey Ham:

I'll I'll link the article in

John Strand:

our timed article. Okay. So this gets into there there are specific firewalls I know for, like, c d GSMA and some of the other ones. But it's yeah. So this is kind of hard because how do you actually shut this down?

John Strand:

Honestly, the answer is you don't allow troops to have cell phones. So because you remember, when you look. Whenever you're using your cell phone, your cell phone has to give up its location. It absolutely has to give up its location. That's the way it freaking works.

John Strand:

Right? And you have no right to privacy for the location of where that phone is because you have to route it to the appropriate towers so it can get from point a to point b and back at the same time. And if you remember at the beginning of the Ukrainian war, and I still think still now, a lot of Russians are were bringing their phones to the front lines with them, and they were using this to basically go through and pinpoint where the location of soldiers were. And they were doing this through a number of different ways, not just this, but also social media posts where they were doing location and things like that. But whenever you're looking at it, s s seven is used for, like, how your phone handles roaming and your location.

John Strand:

And I this is how they track celebrities, like, with their cell phones. Once they identify where their cell their actual cell phone number, then people can stalk them a little bit better. So I find it very interesting that, one, Iran was able to hook into that back end network. And two, that there were troops that were taking personal cell phones to certain locations, which I guess it makes sense because we had bases in Bahrain and Kuwait and a bunch of places that we consider to be safe locations that weren't like, you know you know, forward operating bases right on the front lines. They were back far enough probably thought to not be at risk is what I'm thinking is happening.

John Strand:

But I just know anytime I've done anything with the military and DOD and IC, it's like no cell phones ever. So I find this interesting. Like, how many troops are using personal cell phones that can then be tracked is a question that someone should be asking. And I thought we've already asked that question and answered it a number of years ago.

Corey Ham:

Yeah. I mean, basically

Bronwen Aker:

have ever done anything they're not supposed to. I mean, come on.

John Strand:

No. Never ever has that happened. So

Corey Ham:

Yeah. I mean, basically, it's an interesting, you know, like, checkpoint on this conflict how, you know, there's a lot of different Iranian cyber capabilities. That s s seven is just one small piece of that. But there's also, you know, we've seen them

Wade Wells:

Well

Corey Ham:

potentially going after US based operational technology stuff. There's been, you know, just like sewing chaos throughout. But yeah. I don't know. It's an

John Strand:

interesting time. I did like the article that I was also brought up about Strava. There are a lot of people in the military that are running, and they're using their watches, and they're constantly tracking their progress and things like that. And we did this when Tim Tomes, Landmaster fifty three, was still working at BHIS. We were able to use this to track some very, very sensitive places in The Middle East as well.

John Strand:

So this is not new. It's just basically, it's history repeating itself again and again and again.

Hayden Covington:

Yeah. And and the frustrating part about that is Strava has, like, privacy controls. Like, you can just toggle that on to where it hides your your maps.

John Strand:

It does. It does. And it also has the ability to kind of obfuscate where your starting point was, which doesn't help that much if you're running around the outside perimeter fence. Or sorry, the inside of the perimeter fence of a secure area, and you do it every single day. It's kind of like, well, here's kind of the bounds of where things are.

Corey Ham:

Yeah. And I I think there were I can't remember

Hayden Covington:

the article. It was a few years ago, but there was one I felt like that came out that said even when you were obscuring your map, they have, like, their global heat map showing overall user traffic. And so they had an area, like, in the middle of a desert that just had, like, a heat map, and you could probably figure out what that might be. Even if people's maps aren't showing it, like

John Strand:

But once again, I wanna say it was, like, 2014 is when maybe even earlier than that, 2013? I don't know.

Bronwen Aker:

Somebody on Discord said 2017.

John Strand:

2017?

Corey Ham:

Well, okay. I

John Strand:

remember the military I remember the military basically telling people that once again, I know that people break the rules. I get that. But the military was basically outright telling people, do not effing do this. This is bad.

Corey Ham:

And Yeah. So it happened again. Like, know, to repeat John's theme of, like, what is old is new again. It happened again this year. I just posted the article.

Corey Ham:

But, yeah, basically, we talked about on the show, a French air Oh, I did see that. Whatever we're calling it, French baguette or whatever they call themselves. A wish baguette. Basically, accidentally recorded a Strava run, like, on an aircraft carrier.

Hayden Covington:

But but dude, recording a run on a boat, you are so fast. But then, you're also so slow going the other way.

Corey Ham:

Yeah. It's like, woah, dude. You are you're running at 20 knots and then negative 20 knots. Yeah. So fast.

Corey Ham:

Yeah. Anyway, moving on. Hot nation state on nation state action. There was also the FBI disrupted a Chinese botnet used for targeting US critical infrastructure. So this is like not Iran, it's China.

Corey Ham:

But basically, there's two botnets, QT router and Q scan, both are your classic residential IoT proxy type network. They were I will say, like, it makes it sound scary. It makes it sound like, you know, Trump probably read this one was like, NASA got hacked. That's not necessarily what what the article says. It says that they were targeted.

Corey Ham:

The other kinda interesting read between the lines on this one is that they, you know, published Lumen Technology, which is an ISP. They published, you know, a a write up or kind of like a research project about this, about, like, identifying these residential proxies that are used for evil purposes. And I didn't even realize that these ISPs had, like, labs and research, like, threat hunter type people like this. So that's kind of good to know. But, yeah, it's an interesting write up.

Corey Ham:

And mostly, I think this comes down to compromised IoT, like compromised home routers and TVs and phone chargers or whatever else probably shouldn't have Wi Fi but it does. Yeah.

Wade Wells:

I was gonna say Wi

Corey Ham:

six because that's a US company. But

Wade Wells:

but you're like, jailbreak a fire if

Bronwen Aker:

you They're using Kung Fu hardware.

Wade Wells:

If you jailbreak a fire stick and just put on some illegal streaming surfaces on there, who knows what type of weird background

Corey Ham:

is the gonna Chinese equivalent of a fire stick. Right? Like some kinda Amazon, Alibaba type streaming stick that is, you know yeah. I mean, I personally participate in these botnets through my robot vacuum, but it's so useful that I don't

Ralph May:

to do it.

Corey Ham:

Yeah. That's my strava map at

Hayden Covington:

my house is my vacuum. Yeah.

Corey Ham:

Exactly. It's fine. When that thing starts driving up, plugging USB sticks into my laptop, I'm like, oh, hey, buddy. What's going on? What?

Bronwen Aker:

That's not why

Corey Ham:

he keeps running over my foot. Cleaning my laptop? When you clean up my laptop, can you can you stop?

Ralph May:

Do you need some stairs? He's Yeah. Think he needs swing.

Corey Ham:

Yeah. It's a little uncomfortable, but, you know, whatever. I I'm glad he's trying. It's AI.

Ralph May:

He's caring.

Corey Ham:

Yeah. So as I mentioned, it's gonna feel very old school. There was a classic shiny hunters breached two hundred and eighty four million patient records of McKesson. That's claimed. I don't necessarily think basically they've confirmed the incident, but they have not confirmed the scope of the incident.

Corey Ham:

This is probably social engineering. Is probably I mean, it's shiny hunters. They probably called some person, said, hey, need you to log into this portal, got someone Salesforce token and export the entire Salesforce database or whatever or snowflake, you know, pick a SaaS product.

Ralph May:

Pick one.

Corey Ham:

And I mean, it could be Microsoft, you know. But right now, the ransom set at 55 mil. I think we all know that's not gonna happen. But yeah, it's it's a bummer because it's a lot of patient data, you know. Things like medical record numbers, Medicaid numbers, patient IDs, illnesses, diagnoses.

Corey Ham:

So huge bummer. Anytime medical stuff gets breached, it's a huge bummer because you can't change if you are diagnosed with something. That's not something you can oh, well, change your credit card number. Well, you can't really do that. But yeah.

Corey Ham:

Bummer.

Doc Blackburn:

The I don't know. I'm pretty sure there's a lot of things they know about McKesson security that I can't divulge, but I can just tell you guys that this is not surprising. What is surprising for me is that it didn't happen sooner.

Corey Ham:

They were working their way down the list, you know, like, all those

Doc Blackburn:

phone calls take time.

Hayden Covington:

It well, it was too it was it was vishing. Right? It was two employees with Salesforce and Snowflake, like you said. Yeah. I mean, I I don't like the health data being exposed, but I've also noticed a trend where, like, all of the AI providers can now hook into your health data.

Hayden Covington:

So there's a lot of people that are very, like, openly exposing their health data to chat GPT and, like, chat GPT finance. And, like, I think the socials and and, like, anything for, like, identity theft is probably more of a concern. I feel like private data is becoming more and more a thing of the past where people are, like, giving up their data privacy just for, like, slightly better AI analysis that doesn't really matter.

Corey Ham:

I mean, that's

Bronwen Aker:

fair because there's a difference it

Hayden Covington:

versus a big ticket.

Corey Ham:

Yeah. Yeah. Well, there's that. But there's also a difference between OpenAI or Anthropic or even DeepSeac having it versus shiny hunters. Yeah.

Corey Ham:

Like, the the thing about the the thing that's very insidious about shiny hunters and the reason they've been so successful for so many years is because they go after data that then directly benefits them in their next social engineering campaign.

Hayden Covington:

Yeah. That's true.

Corey Ham:

So next time they get prompted for, oh, what's the medical record number on your account? Now they have that for two hundred and eighty four million people. They're like, hey,

Hayden Covington:

I heard about your rash. I have something for you.

Wade Wells:

That's up. If don't reveal, if you don't give me the password, I'm gonna tell everyone about that rash you have.

Corey Ham:

Yeah. Right? Like, everyone everyone who has diabetes, you're gonna lose

Wade Wells:

Wait a minute. I had to step

John Strand:

out for a second.

Corey Ham:

What do

John Strand:

know about that?

Bronwen Aker:

We're we're talking about the McKesson breach. So well, here's another thing. The the medical records information can be helpful for buying lots of skinny jabs, Ozempic or whatever it is, because more and more doctors in The US are not prescribing it unless you have diabetes. So there's there's all kinds of ways that this could be leveraged for buying drugs or I mean, legal pharmaceutical drugs, not

Corey Ham:

I mean, I I mean, honestly, now that you're Now that you're going doom and gloom, I'm gonna go even one step further. The war the real worst case scenario is that insurance providers buy it, and then they're like, oh, we can't cover you anymore. We're dropping you because you have

Bronwen Aker:

all problems.

Doc Blackburn:

Doing that anyway. Been the concern all along. All I know is that I'm sure there's some Canadian pharmaceutical company that's putting together an offer to shiny hunters right now.

Corey Ham:

Yeah. They'll they'll pay that 55

Hayden Covington:

mil. No problem.

Doc Blackburn:

All they want is your they want your email address and what your affliction is. And it's like, they'll now you're have to

Ralph May:

AI model and figure out how to maximize profit.

Doc Blackburn:

Wow, this email is very specific to me.

Corey Ham:

It's like, I'd probably be less I'd be less likely to click an email that's like, we heard about your rash.

Wade Wells:

That's what John was worried about.

Corey Ham:

What about the LinkedIn message though? I don't about wanna that anymore.

Ralph May:

I've been looking for unsubscribers. Just

Doc Blackburn:

remember the three things that Steve Martin said, and I won't repeat a few of them, but one of them is see a doctor and get rid of it. Yeah.

Corey Ham:

Yeah. Yeah. Alright. Yeah. On the on the, you know, flip side, yin and yang of the shiny hunters successful hack is that who team PCP hackers were arrested in Australia.

Corey Ham:

This is basically team PCP is the supply chain people. They're the CICD pwnage folks. And I guess, couple of them were arrested down under. There's a full write up in Krebs on security about it. But basically, this, you know, team BCP was the, you know, very prolific, very successful threat actors going after CICD type environments.

Corey Ham:

And couple have been arrested aged. You'll support this this will shock everyone here. It was two men aged 21 and 23. Yeah. Who could see who could see that coming?

Wade Wells:

In their

Ralph May:

prime. Just got to see that coming.

John Strand:

I I, you know, I always think it's interesting whenever these people get arrested sometimes if you can read some of the court cases and some of the court filings, and you can get some of the details of how technical they actually were. And the vast majority of the time, they are not that technical at all. And I think one of the things that frightens me about this, especially as we kind of move into the new economy with AI and everything, how many people are gonna be entering into the market getting desperate and having actual really good technical skills that are starting to get desperate to make money anywhere? And this looks pretty enticing. So I'm really curious to see what the court filings and the evidence starts to look like that comes out for these two to see just how technical they actually were.

John Strand:

Are they were just leveraging a whole bunch of existing technology that was already easily available?

Corey Ham:

Well, either way, both are illegal. So we'll see.

John Strand:

They are.

Corey Ham:

There was also some rumors. I don't think this is necessarily been confirmed, but it is sort of interesting that Nvidia is gonna acquire Hugging Face.

Hayden Covington:

I did hear that.

Corey Ham:

For $12,900,000,000, which for Nvidia is like, I don't know, two weeks worth of That's one GPU. They make something like $55,100,000

John Strand:

per employee. Yeah. Wow. That's crazy.

Corey Ham:

Oh, that's their market cap, which is mostly hype. But yeah, basically Yeah. That's true. I mean I just Yeah. They're Go ahead.

Corey Ham:

I think they're just going after those logs from the OpenAI thing. No.

John Strand:

Perfect sense. So here's here's the thing I'm trying to wrap my head around, and I wanna get you guys' opinion on this. Bronwen, can you hold up your Spark real quick? The one that you hold held up earlier. Like, you can actually get this.

John Strand:

What is it? A 178 gig of memory in that thing, and I think it's

Corey Ham:

Woah. 45

Ralph May:

Woah. Woah. Woah. Gotta keep 180. Here.

Ralph May:

It's one twenty eight.

John Strand:

One twenty eight. Sorry. Reversed.

Corey Ham:

I don't know why. Two to the end. Upside down. Two to

Wade Wells:

the end. Right?

John Strand:

That's a lot of memory, and NVIDIA is building those. Right? And now with this hugging face thing, and, like, you can still get that. Right? You can still get them.

John Strand:

$4,500 is expensive, but it's Mhmm. For a lot of and you can cluster them together into

Corey Ham:

And they're all gone.

Ralph May:

They're gone. They're gone. Thank you, John. Did you

Corey Ham:

It was gone

John Strand:

like Rand at Here's my theory on this. They're they're making these things affordable. They're acquiring Hugging Face. I would really be concerned if I was OpenAI and Anthropic. Because I think that NVIDIA is looking at the future of the market space, and I think that this is just my opinion.

John Strand:

OpenAI and Anthropic are screwed because they have nothing. They have absolutely nothing that is patentable, that is their secret sauce. Sure, they have their models, but Hugging Face has a lot of great models that you can pull down as well, that open weight models and things of that nature. It's all about the hardware. Right?

John Strand:

And I think that this is some insulation for them as a company. So when these two companies implode, then all NVIDIA has to do is say, yeah, OpenAI and Anthropic, they jacked up their prices and they imploded. Anyway, what you can do is you can still run on our hardware, which you can still buy, and you can go and pull down models from Hugging Face, and you can run anything you want on your own hardware. Because seriously, NVIDIA doesn't shouldn't give a rat's ass at all about Anthropic and OpenAI. The only thing that they care about is AI models running on hardware regardless of who that is.

John Strand:

So that's my theory behind this, and I'm seeing more and more alignment that it looks like NVIDIA is hedging against something catastrophic happening financially to OpenAI and Anthropic.

Hayden Covington:

I mean, it has to happen to one of them. There there will be a loser. Right? Like, there's no situation where both of them win at the end of the day.

John Strand:

There's there's a there is a situation where they both lose

Hayden Covington:

to Yes.

Wade Wells:

Absolutely. I use Yahoo all the time.

Ralph May:

I have no clue what you're talking about. Right? Okay. It's the last time.

Corey Ham:

You use

Wade Wells:

Google. Use Google at the end. I don't

John Strand:

I use one time. Because Google's forcing Gemini to answer your freaking Google questions now instead of doing searching. It's like, here's a Gemini answer. It's like, f you, Google. I'm going to DuckDuckGo.

Corey Ham:

And then if

Ralph May:

you type in DuckDuckGo, it does the same thing now.

Corey Ham:

It does. It does.

Bronwen Aker:

But you can turn it

Corey Ham:

off.

Ralph May:

A lot more easily with DuckDuckGo. I'm not gonna knock on DuckDuckGo because if the devil is Google, DuckDuckGo is at least a light.

John Strand:

But does that make sense? Like, doing

Corey Ham:

all Awesome. I would basically say this is different approach to the market. Right? This is this is like you could It is. You you could you could make a bunch of different analogies here about, you know, VHS versus Betamax versus, you know, like it's there is different ways to approach this market.

Corey Ham:

NVIDIA is clearly going. First of all, they're hedging their bets because they also are selling GPUs to the commercial providers. They're selling GPUs to the Frontier Labs. They're not just like only targeting the home consumer. But, yes, I agree with you, John, that their market approach is clearly based more on the do it yourself style to AI versus, you know, combining with Hugging Face versus, like, paying for a fancy model like Anthropic.

Corey Ham:

But Yeah. I don't know. Mean, arguably, you can build your own car. Do you? I mean

Bronwen Aker:

generally, no.

Corey Ham:

There are a bunch

John Strand:

But once again, if we look at the open weight models, I can't remember where I heard the statistic. But if you go back a year ago, it was like single digits, people running their own open weight models as far as token usage. And now it's up to, like, 53% of all token usage.

Ralph May:

The whole party

Corey Ham:

bot is important. Tracked, though? Like, who is who are odometers?

John Strand:

FFI know. But I

Bronwen Aker:

do know that I wanna build on John's point, though. One of the things that I think is gonna happen too, because the the AI anti AI backlash is building, and it's building a lot. And I'm guessing that sometime Oh,

Corey Ham:

data center. You're talking about data centers?

Wade Wells:

I think that it's it's tied in

John Strand:

That's the bogus point.

Ralph May:

But

Bronwen Aker:

yeah. The data centers are tied in with everything else. It's it's the grease drop thing going on. If you've ever had a a barbecue and you put burgers on the grill, the grease drops on, and sooner or later, it goes, phoom. And right now, what's happening is you've got privacy concerns.

Bronwen Aker:

You've got, data being pulled into these models that shouldn't be pulled in. You've got the destructive scanning of old books that predate AI. You've got all of these grease drops, and eventually, it's gonna go boom, and that's when the .com or the AI bubble is gonna do weirdness. I think NVIDIA is hedging their bets because just as we went through centralized computing into decentralized computing, right now, all of the AI stuff is centralized. And I think that the next wave is going to be decentralized AI use, and that's where NVIDIA is expecting things to go and why they're hedging their bets.

Bronwen Aker:

The wild.

Michael "Shecky" Kavka:

I I think that you're right on that, but it's gonna move, I think, pretty quickly back to centralized. Take a look at us with cloud computing nowadays. We went from decentralized back into a centralized system with all this cloud computing, and AI itself has brought us back is bringing us back into a centralized system. At some point, everything's gonna cycle right back on through again. The question is is what's gonna be left standing after the initial wave?

Corey Ham:

Probably not companies at $2,000,000,000 a year in deficit spending, but anyway, we'll see.

John Strand:

Well, let's let's keep rolling. I I think we keep need to keep watching this space.

Corey Ham:

I do.

John Strand:

It's gonna get

Corey Ham:

I do I get spicy.

Ralph May:

Just wait till next week. It'll be totally different.

Corey Ham:

It will. Yeah. I I do think it is definitely worth noting that this is one of the plays that a a large company who is, you know, very important is making that is, I would say, counter to the, like, market trend. Right? Like that, which is notable in and of itself.

Corey Ham:

I would never have thought Hugging Face could possibly be worth $12,000,000,000.

Hayden Covington:

But I mean, there there must be something there that they want as well. Right? Because I get that NVIDIA wins when people use local models, and NVIDIA wins when the big labs purchase their hardware. Right? Like, NVIDIA wins either way, but there has to be more to it to spend that much money on just, you know, on hugging face.

Hayden Covington:

Right? Like, what do they have that makes them unique?

Ralph May:

They're hosting all the models to the platform that everybody wants to be at for all the models.

Doc Blackburn:

That's it's Right.

Corey Ham:

I mean, I will say, it what they actually have more than anyone else is the answer to John's question about what is the percentage of inference locally versus model usage versus tokens versus AI, like OpenAI. Like, they actually do have a very rich data set on the consumer preferences in this space of, like, they're self hosted or AI research. I mean, there's also I I was just gonna

Ralph May:

say there's also a lot of local models right now that are really killing it. Right? That you can do amazing amounts of work and run on commodity hardware. So that shift is changing. Right?

Corey Ham:

So I yeah. I I I the other thing that's super fascinating about this is, probably five years ago, the only people who had ever heard of Hugging Face were like AI researchers, Yeah. Like like the only like, I knew about it because I was like, how do I do OCR with a bird? Or what like, you know, something like that. But like, most people wouldn't have known about it.

Corey Ham:

And now, I think it's kind of entering the the public knowledge space. So it becomes more valuable as a brand. I also, you know, talk about in shitification or whatever you wanna talk about. Like, is this gonna mean that I can't get obliterated models on Hugging Face? Is that the move?

Corey Ham:

Is this a control play? Or we're trying to like because right now, can just go to Hugging Face and be like, well, I wanna make a, you know, whatever it is and download an obliterated model. It's very open source. It's very like, widely Yeah. Is that gonna change?

Corey Ham:

Are they gonna make it are they gonna put rules? Is it gonna be a GitHub scenario where Microsoft is like, no. No more malware, but then it's like kind of allowed, but I don't know. We'll see. Well, if they try to police it,

Hayden Covington:

like something else just crops up. Right? Like, it's it's not like they have anything critical that only they can do. So I think NVIDIA, they're making a bet on something. What whatever that might be, it's it's the the local models and the the frontier labs.

Hayden Covington:

Like, NVIDIA wins. But I don't really see a situation where they make a massive investment and then very knowingly just, like, kneecap that investment by removing a big reason that people go to local models is because they don't want those controls for

Wade Wells:

one It takes one good lawsuit for them to break down all those obliterated models.

Corey Ham:

Yes. That's exactly what I was saying.

Wade Wells:

Target on their back for how

Corey Ham:

much money is It's a

Hayden Covington:

good point.

Corey Ham:

Yes. I will say, I I do think that they have a good mix of legitimate business and like sketchy stuff on there. Like, it's not just like porn models or whatever. Like, there are like actual, like, real research. But it's definitely a lot of open models that could be used for, you know, like we the whole thing was happening with x AI.

Corey Ham:

It's it was trained on CSAM data. There is some risk there. Like, there

Ralph May:

is some real

Hayden Covington:

concern. Those wouldn't be so bad.

Ralph May:

No. No.

Corey Ham:

But my point is, there is they are taking on that risk of like

Ralph May:

That is true.

Corey Ham:

Someone, you know, this data, they they host transformers, they host data sets that are potentially very ripe for abuse. And so, you know, they'll have to walk that line. Will this be like the utility thing? Is this a public utility? Or is this, you know, curating?

Corey Ham:

I don't know.

Wade Wells:

Speaking of x AI, did you see the tweet from OpenAI about no longer Yes.

Corey Ham:

No longer working with cursor. Cursor.

Ralph May:

Yes. Elon. And the fact that he doesn't follow contract. That's the summarization. Yeah.

Ralph May:

Oh, shocking. Yes. Shocking. Just like the fact that x or whatever, SpaceX is worth $1,000,000,000,000. That's also shocking.

Ralph May:

But there's a lot of shocking things going on here.

Corey Ham:

So okay. Cursor is is that like a Claude code competitor? That's that's

Ralph May:

Cursor would be original hold on. It's like, do you have original?

Corey Ham:

Why do I not know what it is?

Ralph May:

You have be for doing coding. Right? So what they do is they aggregate all the different models. Right? But before before Claude had Claude code, it was just Claude or whatever.

Ralph May:

And it would aggregate these models. They wrapped it in their own, what do you call it, agent and their Versus code reframe to help coding. Right? Their whole they were like the original, the OG. And then eventually, the larger frontier models came out with their own, which is like Cloud Code or OpenAI's codex.

Ralph May:

And so they originally did that. They work with all the models, but OpenAI has decided that they don't wanna work with them anymore.

Corey Ham:

Okay.

Hayden Covington:

I mean, they're now owned by a competitor. Right?

Ralph May:

Are owned by SpaceX. They were bought for, like, it was, like, 60,000,000,000 or a $120,000,000,000. It was all made up money. It's all funny money at this point. Because it was all stock.

Ralph May:

He didn't actually pay cash. It was just stock in in, you know, what it could be in the future. But yeah. So he bought Cursor so that he would they would all use Grok, where they could get the data for Grok essentially getting a coding

Corey Ham:

handle. Everyone right now is it's like the browser wars thing. Everyone's buying the on ramp into their ecosystem. Like, that's part of the market. You have to be like, you have to have an on ramp into your AI.

Corey Ham:

If you're Google, that's just your website. If you're x AI, I like me personally, I have no reason to use their models. I don't use Twitter or any of their other products. So why would I ever use an x AI model?

Ralph May:

The the wildest part about cursor and their whole model was that they're reselling other models. So they didn't have their own and then eventually, they did come up with their own little thing. But the wildest part is they're actually up charging on those models. So they're charging API rates plus a little bit extra. So that's how they're like reselling it.

Ralph May:

So without those models being having access to it, they don't really have anything except for just an application that you could get, you know, in like 10 different ways.

Hayden Covington:

Yeah. And if you install zed, you replace cursor in twenty minutes

Doc Blackburn:

with a

Ralph May:

model that powers it.

Wade Wells:

Cursor cursor stood

Ralph May:

had a purpose before Absolutely. Or before codex when you also had these, you know, model agent, like, wrappers. I I'm thinking of the word here. Harness. Harness.

Ralph May:

Thank you.

Corey Ham:

Harness. Yeah.

Ralph May:

God sakes. Harness. Yes. And there's a bunch of different harnesses. In fact, Deepsea has also released an open source harness that you can totally modify and do whatever you want as a coding harness.

Corey Ham:

Apparently, it's ton. There's so many. There I mean, there there's like, for every day, another thousand star GitHub project is released with another freaking coding model. Another star is born. Yeah.

Corey Ham:

Oh, have you heard of this? It's Emacs, but for AI. Yeah. Like, whatever. It's way better.

Corey Ham:

Yeah. So we'll take a quick step into

Bronwen Aker:

not being an AI.

Corey Ham:

I know. I blame John. I'm trying. I don't really

John Strand:

have any You got

Bronwen Aker:

the ball rolling.

John Strand:

I'm not talking about AI.

Corey Ham:

Alright. Got

Bronwen Aker:

the ball rolling. It's all you, Corey.

Corey Ham:

It's always my fault. Thanks We for your got some patches. Patch your ubiquity stuff. We're just gonna these are gonna be like quick fires. Three max security vulnerabilities in Unify gear.

Corey Ham:

Patch your stuff if you Yeah. I also everything has to auto update or also it's pwned. There is also some git git git git? I don't know. Gitea.

Corey Ham:

Gitea. Yes.

Ralph May:

It's a open source GitHub alternative.

Corey Ham:

Yeah. It's basically it's become super is it really Gitea? I don't know. Yes. I don't know how to pronounce it.

Corey Ham:

But basically, this has and all my hacker friends like Ralph use this now because they hate GitHub. It's like GitLab, but less terrible, I guess. And you can self host it. I don't know. I don't super understand how it fits into the market.

Corey Ham:

But basically, patch your Gutias also in addition to your UniFi stuff. This is really a bad week for Home Labbers.

Ralph May:

I mean, it's just AI running through and everybody There's so many different security firms that are like, I got sixteen o days. Right? I actually heard I heard another story where the the new attack for security firms is actually to go look on the perimeter, find a common product, find the oday in that product with the AI, and then compromise that system with an oday. But before, you wouldn't think about that, like, progression. You would just be like, oh, I'm not gonna spend my time to find a zero day in this product.

Ralph May:

But because you can get the source code for this or whatever it is that they're using, find the o day, you know, if so facto that's your way in. So

Corey Ham:

For sure. Tenable also posted a blog basically talking about they posted 93 different CVEs, different edge devices, which that's like your firewalls and and there's a bunch. A lot of them are old. There's stuff from 2023. You know, obviously, what Ralph just said, way more advanced than people just never patching anything.

Corey Ham:

Yeah. But, yeah. Basically, these are

Ralph May:

That's just it though. It it you're you're seeing the outcome. They're finally running it through and finding all of these things and they're patching it all in a row. But like, if you can get to it before, it's wild. Like, we're in this like weird race where now you could throw an agent at it, find the zero day before they're actually able to patch it because maybe they don't care anymore.

Ralph May:

Maybe this company thinks that AI is not for them. Okay? So

Corey Ham:

Yep. There was a net scaler RCE that got the max severity. There was a web logic Oracle thing that got the max severity. There's basically, you know, classic

Wade Wells:

Tens for everybody. It's like Tens. Tens across the board.

Corey Ham:

It's tens. It's all tens. I'm just gonna hold

Doc Blackburn:

this down.

Ralph May:

Sign up that has 10 up on everything.

Corey Ham:

Yeah. There's something I mean, I'm just gonna keep going. There's so many. There's something called paper cut I've never even heard of. They have a max severity flaw.

Corey Ham:

Hurts. Paper cuts hurt. It's just a lot. Yeah. Paper

Ralph May:

cuts used a lot in document management. Management.

Corey Ham:

Okay.

Ralph May:

Gotcha. Prior company that I worked for ten plus years ago Yeah. Was worrying I about I think that's what we're also gonna see, like, this product that's been inside of this company for a long time, and it's out there so somebody could get it, and then they just find a bunch of zero days in it.

Corey Ham:

So Yeah. I mean, basically, it's the era of and I I will say to kind of culminate this, I don't even know if we have an article about it, but there was like a joint warning signed by all the major tech companies that was basically like, it's it's too fast. We can't do it. Like, I I'll see if I can find the actual, like, official news article about it. But basically, there was like a joint statement or whatever signed by a bunch of different tech companies that was just like, we're we're not equipped to handle the AI threat.

Ralph May:

And that's a Alright. Good

Corey Ham:

I mean, there's a lot more. There's so much more. There's a breach of The UK airports were breached, and they were canceling flights last year or last week. There was yeah. Netscaler.

Corey Ham:

We already talked about that one.

Ralph May:

Hot aviation.

Corey Ham:

What was the other one?

Wade Wells:

Fifth Did you read the 58 arrested one? An international crackdown?

Corey Ham:

Crack? Crack.

Wade Wells:

It's really another another another win for Us law enforcement agencies in 22 countries coordinated on an eight month cybercrime. They arrested 15 people. 58 people. Sorry. Italy, Argentina, South Africa.

Corey Ham:

15 year olds.

Ralph May:

That's what I was gonna say.

Wade Wells:

Did you imagine?

Hayden Covington:

20 rings.

Corey Ham:

I thought I was Here was the article about old fashioned d ducks. Based it at yeah. The basically, this is the sorry. I just were whiplashing all over the place. I just based an article about tech companies calling for a defensive surge.

Corey Ham:

Microsoft, Anthropic, Google, Amazon.

Bronwen Aker:

See, here's the irony. The company is calling for us to slow down are the ones who still have their foot on the gas pedal.

Ralph May:

True.

Bronwen Aker:

They need to stop doing the Texas two step. Okay?

Ralph May:

Here's the worst part. It's true. The it's like the cat's out of the bag now. Even if you cut off Claude and you cut off OpenAI, I could just start running local models and still get, like, a lot to happen. Correct.

Corey Ham:

And and it's

Hayden Covington:

easy to say, hey, slow down. But like, if your competitor also doesn't slow down, like Yes.

Corey Ham:

You're cook Well, hold They didn't they didn't say slow down for the record. They said, speed up defenders. Defenders. They basically said Oh.

Hayden Covington:

They said skill issue is what they said.

Corey Ham:

They said, buy more tokens and boost up. Max

Hayden Covington:

your tokens. Alright.

Corey Ham:

It's fine. Just buy more I

Wade Wells:

have an article for you blue teamers to speed up.

Hayden Covington:

Oh, god.

Wade Wells:

Oh, no. Don't click it. Don't click it. I was

Corey Ham:

just Okay. No. We're getting into the plugs. It's all good. Wait.

Ralph May:

What do

Wade Wells:

you It's an ad.

Corey Ham:

It's an ad.

Wade Wells:

It's an ad. No. It's not an This is real. This is a real thing. It is It

Corey Ham:

a is a good article. They wrote it.

Ralph May:

Thank you.

Corey Ham:

It doesn't care. He doesn't he doesn't work in advertising.

Wade Wells:

I don't. I I wrote I

Ralph May:

read your article. That's how much I like you.

Wade Wells:

That is? Okay. So I wrote a quick article. Like, I will admit so they didn't wanna put this meme in this article. Scroll down a little bit.

Wade Wells:

And I had to fight memes, people. I legit had to fight

Ralph May:

for I the

Wade Wells:

legit. And they're like, alright. You know what, Wade? Put in the meme, and it's the best meme ever.

Corey Ham:

They're like, this is copyrighted? This meme's copyrighted.

Wade Wells:

That's literally what they said. They're like, are the memes, like, they could be copyrighted. But this is just a quick on how, we increase detection engineering, with an AI accelerated defense. That's the thing pretty much. It's like, if you have a good inventory, you win.

Wade Wells:

Who would who would not who would have guessed? Right? But, yeah, that's a fun one. Dude, writing blog posts during the age of AI is hard. I wrote this thing with no punctuation to try to show that I was not AI.

Wade Wells:

And then everyone else came in and like, need a comma here. Need to hear it. Oh, my

Corey Ham:

God. Yeah. And They're so No.

Wade Wells:

Get it all out.

Ralph May:

Mind it. I've seen people write

Hayden Covington:

one or write one by hand and then someone's like, oh, what AI did you use?

Corey Ham:

And I'm like, shut up. None of them.

Wade Wells:

Right? Right.

Bronwen Aker:

Have you

Ralph May:

seen people doing that though? They're like, listen. I leave all my mistakes in here now just so you know that I spent the time to make that statement. Right?

Wade Wells:

I got a bunch likes be

Bronwen Aker:

There's a whole thing on Pinterest and Instagram where people are showing their handwritten signs.

Ralph May:

Look, I wrote this for you.

Corey Ham:

I had

Wade Wells:

a bunch of Wade as I was in here. Like, callbacks to, like, the podcast, like, a bunch of different things. And they're like, nah. This isn't professional enough. And I'm like, goddamn it.

Wade Wells:

That's the only way people are gonna know it's me.

Corey Ham:

It has to be unprofessional for it to be real.

Wade Wells:

They took out the chicken quote. I was quite upset.

Ralph May:

I was quite upset. Oh. Oh.

Corey Ham:

Alright. What else you got to plug, Wade? You got DeathCon or whatever it's called?

Wade Wells:

DeathCon. Come to DeathCon, please. San Diego, DeathCon. That's all I got.

John Strand:

Dad. I gotta try to convince Wade to come here because remember, I just texted my marketing director telling her I need to buy a junked out van in San Francisco that we can spray paint free AI tokens inside, and then we'll hand out comics from the back of it. Now she did respond. What the hell is wrong with you?

Corey Ham:

Have to

Bronwen Aker:

be a John, the only thing that would be better is a Scooby van. That's

John Strand:

that's a conversion

Doc Blackburn:

machine.

Ralph May:

Yeah. Yeah. Only one point hole window, you know, on the side. That's Yep.

Corey Ham:

Yeah. Just some ram sticks hanging out the back. Alright. Who else has stuff to plug? Because I feel like there's a lot of people here and only five minutes left.

Corey Ham:

Doc, you got anything to plug?

Doc Blackburn:

Yeah. But before but before I do, I just I just have to point out the irony that years ago, we were trying to convince computers that we were human by checking a box that says that you're not a robot. And now, now with AI, now we're trying to convince our friends and coworkers that we're human by the things that we're writing. And so, it's come full circle. We're trying to convince each other that we're actually human.

John Strand:

This is progress, right?

Ralph May:

This is be progress.

Corey Ham:

Don't look at it too closely.

Doc Blackburn:

So what else are we needing to convince people that we are actually some sort of human here? But I just wanted to reach out to everybody and for all of you who attended last week's about Infosec news, I want to tell you all that I'm really disappointed in you. I am. Very disappointed because I told all of you, I implored of you, I asked you kindly, please tell your friends about this, my intro to security course that's happening at Wild West Hackenfest, and I know you didn't do it. Come on, admit did.

Doc Blackburn:

Did you? I really appreciate that. Because

John Strand:

I Other get people my did not.

Doc Blackburn:

But, So. This Fundamentals of Cybersecurity Threats and Defenses, remember, for two different groups. First, firstly and foremost is for the those friends and family members who keep telling you, I'd love to be able to get into cybersecurity, but I have no idea how to do it. This is the best way to do it. But the other group is all of you folks.

Doc Blackburn:

You really should attend this course because it's all about analyzing the threats and thinking like defenders. And as and we'll we'll plug something else, Bronwen and I, with Mark Williams, is writing a book where we are going to change the hearts and minds of all of us cybersecurity defenders about what we really do in our jobs, and this course is going to be covering those areas. So, this is also for all of us who think that we actually know what we're doing in our jobs. Folks, security isn't it. And so, we need to do better at that.

Doc Blackburn:

So, this course is for you guys as well. There's still options to take the course without traveling to Deadwood. We'd love to see you online as well as in person. So, that's all I wanted to plug there. And just a reminder that John, me and Bronwen and Mark are still working on that book, and so we'll we'll give you something soon so you can write a forward for it.

Doc Blackburn:

We're just working on it.

John Strand:

Alright. And I'm gonna do a plug real quick. The one thing that AI can't do very well at all right now is ride a bike. Go buy a bike. Go get outside.

John Strand:

Go get active. Go do something. Because that's where I'm going.

Bronwen Aker:

Something analog.

Corey Ham:

It's Bye, John.

John Strand:

It's been it's been a busy day with the intro to security class that I'm teaching. And with that, I'm gonna go get some sunshine.

Corey Ham:

Alright. Buy any vans you can see along the way.

John Strand:

I I will. I'm on it. Maggie's a little confused. So

Corey Ham:

You know you know what I was thinking while you were talking about like, you know, AI? I was like, I'm just gonna start putting my phone number. It's like, if you have any questions about this blog, call me. Like, no one's gonna do it. Right?

Corey Ham:

No one I'm calls anyone gonna put my freaking phone number on the internet, and then just talk to people about my blog. Like, yeah, I'm a human. I wrote it. What's up?

John Strand:

No, really. No, I did.

Hayden Covington:

Just do your work number.

Corey Ham:

Yeah. I'll do my work number. You're a human?

Ralph May:

I have an AI for that.

Corey Ham:

It's like the Nintendo support hotline. Oh, if you can pick the support from back in the eighties. It's like, hey. I was reading your blog, and I'm stuck on the step where you have to install nMAP. And I'll be

Wade Wells:

like, I can help you with that. Can help Can you ping Google real quick? Ping Google. Okay. You have a network connection.

Corey Ham:

Hold on. Let me give you

Wade Wells:

this TV or The screen saver file? Can you run the screen saver file?

Corey Ham:

Yeah. I have this. Yeah. Have this. Yeah.

Corey Ham:

Totally legit. Alright. Who else has things to plug? We have our something's coming up. Bronwen, you got anything?

Bronwen Aker:

Not until well was Hackin' Fest.

Corey Ham:

That's a month away. Right? Ish?

Hayden Covington:

Yeah. It's not Thirty five

Bronwen Aker:

days and counting.

Corey Ham:

I'm scared.

Bronwen Aker:

I know. I know.

Corey Ham:

Shecky, you got anything to plug? I feel like you definitely should have something to plug even though well, you know, I gotta plug. Shecky's karaoke. I'm just gonna say.

Doc Blackburn:

Come to a sack and fast.

Corey Ham:

The come Shecky do karaoke. It's amazing.

Bronwen Aker:

The man is a master. Beautiful. Pipes.

Michael "Shecky" Kavka:

Y'all are too kind. No. I don't really have anything to plug. I'm not making Deadwood this year.

Corey Ham:

Oh. So how we was it wait. What do I we gonna do virtual karaoke?

Michael "Shecky" Kavka:

New job that I started has not given me what they want me to what they're going to allow me to be reimbursed for at this point in time. So I am waiting to see what and where. I put in for it a few a couple of months ago, and I still haven't heard anything. So I'm going through processes and

Corey Ham:

We will start we will start a freaking go fund me Oh,

Wade Wells:

heck yeah. Oh, heck yeah.

Corey Ham:

Anyway, Ralph, you have anything to plug? You got a class? Your physical exploitation?

John Strand:

No. You're teaching with me on

Ralph May:

I am.

Corey Ham:

I am. Uh-oh. Uh-oh.

Ralph May:

We're gonna be teaching, some sat some sat fun. Right? Hacking and defending satellites.

John Strand:

I've gotta be honest with you. If if you wanna know what that class is, it's all like legacy IoT and software defined radio. And by the way

Ralph May:

Don't worry. I bring in some AI to it, John. It'll be amazing.

John Strand:

Awesome. I've got Ray Ray has got a bunch of hands on labs where we're gonna be emitting signals, and we can capture it. And it's gonna be pretty cool, and it's gonna be in my barn. And I'm simultaneously co teaching with you and Connor as well downstairs. He's doing the Android class, so I'll be jumping back and forth

Ralph May:

up house. Live band type event.

John Strand:

It is. It's gonna be really cool. I'm excited for it because there are two topics that I love, and it should be a lot of fun. So and we're gonna grill out on my back porch. We got local, like, beef from our ranch, and it's gonna be a

Bronwen Aker:

good time. So

Corey Ham:

I know these should be taught at one of these myth lows you can buy in South Dakota. Oh, man.

Ralph May:

I would buy one for sure.

Corey Ham:

Anyway, that's where I'm putting my data center. See you. Later. So, yeah. Wade, you already plugged.

Corey Ham:

Hayden, you have anything to plug? You got a class? You probably have a class.

Hayden Covington:

I I am teaching at at Deadwood as well on on how to build a sock. So that's a

Corey Ham:

knitting or crochet?

Ralph May:

It's like, what kind of material? Is it all cotton or are you using the spandex?

Corey Ham:

Dude, we got these one.

Hayden Covington:

Fancy yarn. My wife loves to crochet, so we buy it in next

Corey Ham:

year. Alright. Nice.

Wade Wells:

I bought I bought the tough socks. Dude, I'm never going back.

Corey Ham:

Corey

Wade Wells:

made the recommendation and like, I I converted my entire wardrobe sock drawer to nothing but those. And I'm like

Corey Ham:

So good.

Hayden Covington:

If you run, try features too. Those are so Nope.

Corey Ham:

Darn tough. Darn tough. Both. Lifetime warranty. Both.

Corey Ham:

Lifetime warranty. Yeah. Same You're never gonna find you're never gonna find a sock company with a I a mean, it's in his class. Just take Hayden's class and you'll you'll find out.

Ralph May:

You'll find out.

Corey Ham:

Alright. Anyone else that I forgot? Anyone else have anything to plug?

Bronwen Aker:

Think it's time. It is time for time.

Corey Ham:

Thank you all for coming and, you know, hanging out with us in Discord, we'll see you next week. It's Labor Day. I'm assuming. Are we Tuesday, Ryan? Next week?

Corey Ham:

What happens? Need to My know

Bronwen Aker:

day is Labor Day.

Corey Ham:

Yeah. We need to know

Ralph May:

Ryan, help. We'll make an announcement.

Corey Ham:

We don't know.

Bronwen Aker:

We'll let you know when we figure Tuesday.

Corey Ham:

Ryan says Tuesday. Alright. See you Tuesday.

Ralph May:

Okay. Bye.

Corey Ham:

Bye bye. Bye bye. So

Ralph May:

have you have you guys has anyone read about what is it? Business Brains?

Corey Ham:

No. Mm-mm. Please tell me about Business Brains.

Bronwen Aker:

Oh, is that the the brain material on circuit boards?

Ralph May:

It's AI. It's AI. Right?

Corey Ham:

So Oh, god.

Hayden Covington:

That's well, I think I know what you're talking about.

Ralph May:

Yeah. Yeah. Yeah. Have you have there alright. So people have posted about this.

Ralph May:

So essentially, you make personas Yes. With your business. Yes. And then the personas all perform the different actions inside the business. And then you let them talk to each other so that they can, like, ask each other about the different personas in the business.

Ralph May:

And then they'll send you and, like, notify you about, like, things. Right? It's it's It's the new Sims, bro. It's the new Sims. It's wild, dude.

Corey Ham:

How do you come with a being like, oh, I'm a startup with $50,000,000 value creation. Yes. And 10 employees, but all the employees are just AI props.

Ralph May:

Don't play a video game, damn it. Alright. Alright. Alright. I've I'll just I'm just gonna give you one example of what, like, magical stuff starts to happen.

Ralph May:

Okay? So if you give this business brain enough information, right, And you give these personas, and they can obviously find things that you probably are gonna miss. Right? So I'm gonna give you one wild thing that it found. Right?

Ralph May:

So it literally found that we were using a a support ticketing software. And one of the head of security found that recent CVEs had been released for this software and didn't know what the version was. So immediately let me know that it could be out of date and unpatched and that these CVEs were recently announced. Wow. Yes.

Ralph May:

It's it is

Bronwen Aker:

Is this businessbrain.a

Corey Ham:

or businessbrain-ai.com

Ralph May:

or something Yeah. No. No. No. No.

Ralph May:

It's custom.

Corey Ham:

Insane, dude. It it fired one of the other models that's why it's so weird. Locked Ralph out. It's like you're over permissioned. You're highly over permissioned.

Corey Ham:

Put it on

Hayden Covington:

a performance improvement plan. Yeah.

Corey Ham:

Pip. Yeah. I get a

Ralph May:

pip email. You're on a performance.

Corey Ham:

Oh, it pips you? It pips you? Yes. It pips. My god.

Corey Ham:

Dude, yeah. You you you get a fifteen minute calendar invite at 3PM, Friday afternoon. You're like, oh. It watches your token outputs. Oh god.