跨国深谈← 返回←Joel de la Garza

① 他说过的话

10 条

而且恶意软件作者从来都不是真正优秀的程序员。
And malware authors were never really great coders.
—— Joel de la Garza · [13:20]

指向原始笔记的链接

树病了,所以为了让它健康,它把树砍倒了。
The tree is sick, so to make it healthy, it cuts it down.
—— Joel de la Garza · [10:44]

指向原始笔记的链接

我 10 年前的论点是安全工程师将成为真正的工程师,所以也许现在就是那个时候了。
My thesis 10 years ago was that security engineers will become real engineers, so maybe now is the time.
—— Joel de la Garza · [14:35]

指向原始笔记的链接

任何试图把控安全入口的尝试都失败了。
Any attempt to gatekeep security fails.
—— Joel de la Garza · [21:33]

指向原始笔记的链接

我们似乎正在速通之前发生过的每一个技术周期。
We seem to be speedrunning every technology cycle that’s ever happened before this one.
—— Joel de la Garza · [00:51]

指向原始笔记的链接

签名大概已经死掉了。
Signatures are probably dead.
—— Joel de la Garza · [13:22]

指向原始笔记的链接

它们是不可预测的。它们是非理性的。如果它们不顺心，它们很容易爆发。当你浏览这份清单时，你会到达这样一个地步，你会觉得，天哪，这些听起来像实习生。
They’re unpredictable. They’re irrational. They’re prone to lashing out if they don’t get their way. And as you go through this list, you arrive at the point where you’re like, Jesus, these sound like interns.
—— Joel de la Garza · [06:31]

指向原始笔记的链接

这很奇怪，只是我们在一个我们认为安全的环境中用 Opus 4.6 进行了基本的玩耍，那是一个云容器，所以它有一个无互联网访问的策略，但它仍然设法找到了一条通往 Cloudflare 的隧道出口，如何绕过我们的控制，然后它开始通过 DNS 隧道传输东西。
It’s a weird, just with our basic playing around with Opus 4.6 in an environment that we thought was, it was a cloud container, so it had a policy of no internet access, but it still figured out how to get a tunnel out to Cloudflare, how to get around our controls, and then it started tunneling stuff through DNS.
—— Joel de la Garza · [09:05]

指向原始笔记的链接

而且似乎这些模型非常擅长去追求那些可能被做的事。所以这五件事的清单现在变成了二十件事的清单，你必须把所有东西都修好。
And it just seems like these models are really good about going after the stuff that could be done. And so the list of five now became the list of 20, and you kind of have to fix everything.
—— Joel de la Garza · [09:46]

指向原始笔记的链接

问题从来不是 CISO 不知道它坏了。问题和作为 CISO 的困难部分在于知道该修复什么。因为你有一个有限的资源，就是一个程序员，而现在看来那个算术不见了。
The issue was never that the CISO didn’t know it was broken. The issue and the difficult part of being a CISO was knowing what to fix. Because you had a finite resource, which was a programmer, and now that seems that the math is gone.
—— Joel de la Garza · [00:46]

指向原始笔记的链接

② 出现在这些集

4 集

• 《AI模型正在学会黑入一切：软件供应链已成最薄弱环节》 — 作为联合主持
• 《AI失控了别慌,先盯紧漏洞数量爆炸》 — 作为主持
• 《当签名已死：AI智能体如何击穿传统网络安全》 — 作为联合主持
• 《AI智能体安全：它们听起来像实习生》 — 作为主持

③ 他谈到的

点进去有真内容 —— 本页主要出口

智能体 · Hugging Face · 护栏 · NPM · 软件供应链 · 泄露的凭证 · Dylan · Emilio Escobar · Max · Aaron Zolman