AI Expands the Open Source Attack Surface

• (00:44) - Meta Launches Muse Spark
• (18:24) - Anthropic's Mythos
• (30:19) - 𝕏 Timeline Reactions
• (36:12) - Robo-Lamp
• (41:13) - Luther Lowe, Head of Public Policy at Y Combinator, discusses the challenges small tech companies face due to the control exerted by major platforms like Apple and Google over app distribution. He highlights the restrictive nature of app stores, likening Apple's App Store to "the worst DMV in the world," and emphasizes the need for policy interventions to curb anti-competitive practices. Lowe also mentions Y Combinator's support for the BASE Act, aimed at preventing self-preferencing by dominant platforms, to foster a more competitive and innovative tech ecosystem.
• (58:30) - Dan Primack, a journalist specializing in business and finance, discusses the legal landscape of prediction markets, highlighting a recent New Jersey appeals court decision favoring Kalshi, a prediction market platform. He anticipates the issue may escalate to the Supreme Court, with potential congressional intervention being necessary for significant changes. Primack also notes the bipartisan nature of opposition to such markets, citing concerns from both casino interests and anti-gambling advocates.
• (01:20:42) - Lior Susan, founder and Managing Partner of Eclipse Ventures, discusses his firm's focus on investing in physical industries by supporting companies like Cerebras and VulcanForms. He highlights the importance of wafer-scale integration in chip design and the use of multiple lasers in metal part manufacturing to drive innovation and scalability. Additionally, Susan emphasizes the significance of disciplined company-building practices in capital-intensive sectors and expresses optimism about the future of real asset companies in public markets.
• (01:33:21) - Feross Aboukhadijeh, founder and CEO of Socket, a developer-first security platform, discusses how Socket rapidly detected a malicious update to the widely-used Axios npm package within six minutes. He explains that Socket's system downloads and analyzes every open-source package across 19 ecosystems, employing static analysis, maintainer behavior analysis, AI, and human researchers to identify supply chain attacks and cybersecurity threats. Aboukhadijeh also details the sophisticated social engineering tactics used by North Korean state actors to compromise the Axios maintainer's account, leading to the publication of poisoned package versions that installed Remote Access Trojans, enabling attackers to remotely control infected devices and exfiltrate sensitive data.
• (01:50:24) - Qasim Mithani, co-founder and CEO of DepthFirst, discusses the company's mission to build AI capable of detecting, triaging, and remediating software vulnerabilities at scale. He highlights their recent $80 million Series B funding, raised less than 90 days after a previous round, driven by significant customer traction and the need to enhance research efforts. Mithani also emphasizes the importance of security in the AI era, noting partnerships with major AI labs and the development of in-house models to address complex enterprise environments.
• (01:57:57) - Jaleh Rezaei, CEO and co-founder of Mutiny, discusses the company's AI agent that assists businesses like Rippling and Snowflake in creating personalized customer-facing materials to streamline the sales process from initial contact to deal closure. She explains how the agent generates tailored content such as landing pages, battle cards, and ROI proposals, enhancing efficiency and effectiveness in customer engagement. Additionally, Rezaei shares the origin of Mutiny's name, emphasizing its mission to challenge traditional go-to-market dependencies, and recounts the story behind their raccoon mascot, Achoo, highlighting the company's culture of authenticity and spontaneity.
• (02:05:53) - Jeremy Philip, after 12 years at Meta focusing on trust and safety, left to address AI-powered scams by founding Charlemagne Labs, which developed Agent Charley, an on-device AI agent for real-time threat detection. He discusses the increasing sophistication of phishing attacks, emphasizing that AI enables scammers to craft highly personalized and convincing messages, making traditional phishing indistinguishable from spear phishing. Philip highlights the necessity for proactive, real-time defenses like Agent Charley to protect users from these advanced threats.

Follow TBPN: 

https://TBPN.com

https://x.com/tbpn

https://open.spotify.com/show/2L6WMqY3GUPCGBD0dX6p00?si=674252d53acf4231

https://podcasts.apple.com/us/podcast/technology-brothers/id1772360235

https://www.youtube.com/@TBPNLive