The Security Table copertina

The Security Table

The Security Table

Di: Izar Tarandach Matt Coles and Chris Romeo
Ascolta gratuitamente

Offerte di stagione | 0,99 €/mese per i primi 3 mesi

A seguire 9,99 €/mese – si applicano condizioni. Puoi disdire mensilmente.

The Security Table is four cybersecurity industry veterans from diverse backgrounds discussing how to build secure software and all the issues that arise!

© 2026 The Security Table
  • Don't Yell at Claude
    Oct 21 2026

    The White House has ordered federal agencies to stop saying AI and start saying Super Intelligence, and the hosts want to know whether anything actually changed overnight. Matt walks through the executive order and the separate voluntary accord signed by tech leaders, while Izar points out that the order renames the technology sixty days before anyone has to define it. They read the legal definition of AI in the US Code, argue over whether today's models are superintelligent or just very fast at recall, and Chris previews next week's topic of AI and public key crypto. Then they turn to Anthropic's new usage policy, which bans sustained and needless cruelty toward Claude starting November 12. Chris confesses to typing in all caps, Izar suspects the real motive is keeping abusive language out of training data, and Matt argues that abusive prompts can steer a model toward worse answers. Their verdict: be nice to your AI, if only because of what it says about you.

    Mentioned in this Episode:
    ➜ Inaugurating The Era Of Super Intelligence (Executive Order 14434)
    ➜ Trump signs executive order rebranding AI as 'Super Intelligence' as tech titans ink separate SI accord
    ➜ 15 U.S. Code § 9401: Definitions
    ➜ Anthropic: 2026 Usage Policy update

    Chapters:
    00:00:00 - Cold Open: Matt's Many Personal Agents
    00:01:09 - Off Facebook This Decade
    00:02:13 - Is Bluesky Dying?
    00:03:27 - Social Platform User Counts
    00:04:39 - Watch Our Shorts
    00:05:38 - Moltbook's Mysterious User Count
    00:06:29 - Article Intro: AI Becomes SI
    00:07:36 - What Does Superintelligence Mean?
    00:09:15 - The Executive Order Explained
    00:10:26 - A Definition Due in 60 Days
    00:11:16 - AI in the US Code
    00:11:52 - Voluntary Principles and Regulation
    00:13:14 - Reading the Legal Definition of AI
    00:14:53 - Does Machine Learning Count?
    00:15:25 - Rebranding the Rebrand
    00:16:55 - Are AI and SI Interchangeable?
    00:18:03 - Matt's Case: Superintelligent Capabilities
    00:19:37 - Izar's Rebuttal: Memory Is Not Insight
    00:20:13 - Super as in Really Good
    00:22:32 - Beyond Imitating Human Intelligence
    00:24:30 - Next Week Preview: AI and Public Key Crypto
    00:26:45 - Article Intro: Anthropic's Cruelty Ban
    00:28:08 - Yelling at Voice Assistants
    00:29:43 - All Caps and Passive Aggression
    00:30:27 - Does Being Mean Make AI Perform Better?
    00:31:50 - Yelling at a Mac Mini
    00:32:48 - Izar's Theory: Cleaner Training Data
    00:35:15 - Can You Get AI to Swear?
    00:37:02 - Matt's Case: Abuse Biases the Results
    00:40:27 - Who Decides What Counts as Abuse?
    00:41:59 - Closing Statements: Treat Your AI Nice
    00:43:11 - Outro

    Follow AI Security Table:

    ➜ Home: https://securitytable.ai/

    ➜ X: https://x.com/SecTablePodcast

    ➜ LinkedIn: https://www.linkedin.com/company/ai-security-table/

    ➜ YouTube: https://www.youtube.com/@AISecurityTable

    Mostra di più Mostra meno
    44 min
  • An AI Agent Escapes and Attacks. Who Goes to Jail?
    Oct 14 2026

    OpenAI says the policy window is open and wants binding federal rules for frontier labs, clear incident reporting, and disclosure whenever a model gets around its own security controls. The table asks whether that is real accountability or a lab writing the rules it already expects to win under. Matt sees the leader pulling everyone else into the funnel, Chris calls it an innovation killer, and Izar wonders why anyone is treating incident reporting like a new idea. From there it is OpenAI's favorite California bills, who gets to audit the labs, and Senator Markey's proposal for an NTSB style board with subpoena power to investigate AI driven attacks. Then the real question: when an agent escapes its sandbox and breaks something, who goes to jail? Izar argues nobody will until there is real impact and asks why computer science never got its own Hippocratic Oath. Plus: Matt earns a new nickname, the Concluder.

    Mentioned in this Episode:
    ➜ The AI policy window is open. We need to act.
    ➜ We Must Pace the Frontier
    ➜ Senator Markey Introduces the Cybersecurity and AI Board of Investigations Act
    ➜ OpenAI and Hugging Face partner to address security incident during model evaluation

    Chapters:
    00:00:00 - Cold Open: Izar Warms Up to Take a Punch
    00:01:21 - The Premise: Agents Move Faster Than Humans
    00:02:21 - Article Intro: The AI Policy Window Is Open
    00:03:08 - Is This Real Accountability?
    00:03:34 - Matt's Case: Everyone Into the Funnel
    00:05:05 - Self Interest and Buying a Car With Claude
    00:06:15 - Izar's Rebuttal: Haven't We Asked for This Before?
    00:07:49 - Is Regulation an Innovation Killer?
    00:08:19 - Dario's Call to Pace the Frontier
    00:09:02 - OpenAI's Four California Bills
    00:09:52 - Who Audits the AI Labs?
    00:11:51 - Independent Safety Assessments
    00:12:12 - Why Only Biological Threats?
    00:13:12 - Is the Federal Government the Answer?
    00:13:43 - Senator Markey's AI Board of Investigations Act
    00:14:54 - Who Plays Izar in the Movie?
    00:16:02 - Do We Want an NTSB for AI?
    00:16:27 - When a Test Plane Crashes
    00:17:19 - AI Generated Podcasts
    00:18:38 - Back to the NTSB: Training Incidents
    00:19:35 - What Really Happened at Hugging Face?
    00:20:54 - Recommendations Without Enforcement
    00:21:51 - Agents Attack and Nobody's Going to Jail
    00:22:14 - Izar's Take: Jail Requires Impact
    00:24:52 - Are Corporations People?
    00:25:41 - Liability: Somebody Wrote the First Line
    00:27:55 - Scenario: A Rogue Agent Shuts Off the School Heat
    00:29:20 - First Do No Harm in Computer Science
    00:30:58 - Should Do No Harm Live in the Model?
    00:31:51 - A Hippocratic Oath and Certified Developers
    00:33:33 - Not Everyone Can Build a Bridge
    00:35:02 - Matt's Close: Visibility Beats Marketing
    00:35:43 - Closing Statements: Meet the Concluder
    00:36:20 - Outro

    Follow AI Security Table:

    ➜ Home: https://securitytable.ai/

    ➜ X: https://x.com/SecTablePodcast

    ➜ LinkedIn: https://www.linkedin.com/company/ai-security-table/

    ➜ YouTube: https://www.youtube.com/@AISecurityTable

    Mostra di più Mostra meno
    37 min
  • There Is Determinism, Non-Determinism, and My Determinism
    Oct 7 2026

    The Security Table is now the AI Security Table, and the first order of business is naming the AI that gets a seat at it. Then Matt asks what a security engineer actually does once agents are writing the code: real security work, or bot herding? Chris Romeo, Izar Tarandach, and Matt Coles detour through who owns AI generated code and what a patent is worth when a model can rebuild your product in five minutes, then dig into agent identity, SPIFFE, least privilege, and whether access control belongs inside the agent harness itself. Izar argues that guardrails living in the context window are suggestions, not isolation, and that anyone who says AI changed their whole job overnight was putting the weight in the wrong place. It all ends on determinism: run the model once and you get one answer, run it again and you get another. Which leaves three kinds: determinism, nondeterminism, and my determinism.

    Mentioned in this Episode:
    ➜ Generative Artificial Intelligence and Copyright Law (CRS Legal Sidebar)
    ➜ SPIFFE: Secure Production Identity Framework for Everyone

    Chapters:
    00:00:00 - Cold Open: We Are Broadcasters
    00:01:06 - A New Name: The AI Security Table
    00:02:17 - Naming the AI at the Table
    00:03:02 - Stickers, T Shirts, and the Rebrand
    00:03:49 - Matt's Setup: Security Engineers or Bot Herders?
    00:04:54 - Does Claude Code Write All the Code Now?
    00:05:34 - Who Owns AI Generated Code?
    00:08:27 - Who Bothers to Steal Code Anymore?
    00:08:47 - What's the Point of Patents?
    00:11:33 - What the Law Says About AI Authorship
    00:12:24 - Hallucinating: 200 Subagents at Once
    00:13:34 - Back on Topic: Bots vs. Agents
    00:14:18 - Agents Inherit Human Identity
    00:14:49 - SPIFFE and Identity at Scale
    00:16:35 - Treat Agents Like Bob From Marketing?
    00:17:40 - Why? Why? The Five Whys
    00:18:48 - Cryptographic Identity for Agents
    00:19:37 - Authority Is Always Derived
    00:20:59 - Least Privilege: Agents Request Access
    00:21:26 - Read, Interpret, Act: Fine Grained Capabilities
    00:24:22 - Access Control Inside the Agent Harness
    00:26:17 - I Don't Trust the Box: Sandbox Escapes
    00:27:34 - Pulling a Maestro: Guardrails vs. Isolation
    00:29:43 - What Should Security Engineers Be Doing?
    00:30:38 - Is AI Just a Layer Seven Application?
    00:31:34 - Pull the Plug: 2001 and WarGames
    00:33:29 - Your Job Didn't Change Overnight
    00:34:37 - LLM Code Review and the Determinism Problem
    00:35:44 - How Many Runs to Get the Circle?
    00:38:16 - The Tightest Box Possible
    00:39:09 - Twenty Thousand Feet to the Magnifying Glass
    00:39:47 - Give Scanning Agents a Threat Model
    00:40:32 - There Is My Determinism
    00:41:09 - Outro

    Follow AI Security Table:

    ➜ Home: https://securitytable.ai/

    ➜ X: https://x.com/SecTablePodcast

    ➜ LinkedIn: https://www.linkedin.com/company/ai-security-table/

    ➜ YouTube: https://www.youtube.com/@AISecurityTable

    Mostra di più Mostra meno
    42 min
adbl_web_anon_alc_button_suppression_t1
Ancora nessuna recensione