USE PASSWORDMANAGER

“No. In my mind, it is obvious why. Like, if you're a corporation and you release a tool and people with no real technical expertise are able to use it and within a few hours discover a novel exploit in the Linux kernel and then take over other people's machines to cause crimes, you might be held liable as a corporation. You will get in trouble at like, there will be congressional hearings. So companies just in their rational self interest do not want to sell cyber weapons on the open market.”

“One of the things we document that's new here is as a condition of the exit of the board members who had moved against Sam that he wanted out. They insisted on an outside investigation. What happened there is, in my view, quite extraordinary, which is, yes, at private companies, sometimes reports of this type, when a law firm is brought in to restore legitimacy can be kept out of writing. Often, it's to limit liability, And often, legal experts say it's a bit of a red flag. And what we report in this piece for the first time is there wasn't a report. For years, people were like, where's the report? Where's the report? There wasn't a report because it was kept out of writing.”

“Number two, and this is just in time for pride. They will tell you when there is a rainbow in your neighborhood. This is such a good idea for a weather app. Yes. Who does not wanna be sitting at your wage slave job? You haven't been outside in, like, seven and a half hours, and then ACME weather tells you, hey. Guess what? There's a rainbow in your neighborhood. You're gonna book it outdoors, and you are gonna behold the majesty of creation.”

“Relatedly, by the way, a a lot of announcements over there right concentrated around when they knew we were gonna be running and right developed in the period where we were in these intensive conversations with them. And many of them sort of pointed at the topics in the piece. You know, they announced this new safety fellowship that's very airy. They announced this new governance plan that's very sort of airy and ethereal, but are meant to, I think, you know, occupy space in the conversation on the same topics.”

“So they are at least claiming that they are trying to get ahead of what they envision will be a reckoning, was what was the word they used, to force cybersecurity. And it seems plausible to me that in the next kind of six ish months, every major piece of software in the world is going to need to be patched, rewritten, and rereleased.”

“Anthropic has been running this model internally for several weeks now, and they claim that this thing has found vulnerabilities in every major operating system and web browser. They gave some examples, that have already been patched. One of them was that this model apparently found a twenty seven year old security flaw in OpenBSD. OpenBSD is an open source operating system that runs on firewalls and routers. It is sort of like a critical security layer on the Internet, and it was designed specifically to be hard to hack.”

“One more piece on on the regulatory front. It is crazy to me that model development of this scale and seriousness remains essentially unregulated in this country. Right? Here you have a private company saying, well, we have now created software that can create so many different kinds of novel exploits that all software might have to be rewritten, and they are not really under any kind of regulatory regime. And the regulatory regime that previous administration tried to put into place was thrown out by the current one because it might harm American competitiveness.”

“And then there is the white hot center of the rivalry, the stuff you mentioned that I think is in a very different category, which is, you know, Elon Musk and other direct competitors really amplifying everything they can come up with. And in some cases, we document things that are inflated or trumped up or just seem to not be true. So Elon Musk, in particular, has intermediaries circulating some pretty spicy and pretty unsubstantiated material in Silicon Valley, and we talk about that.”

“But I asked my friend, do you have a password manager, and do you reuse passwords for the same thing? And she said, you know, I've never really been able to to get one of those, password managers to work for me, and I do sometimes reuse my passwords. So I said, like, look. If if you're looking for something that you can do, just make sure that you have done your basic online cybersecurity hygiene. You should use a password manager. I use one password. There are many others out there that are just as good. Don't use the same password for anything. Your passwords should be randomly generated and not, you know, the name of your pet or whatever. And then use multifactor authentication where you can.”