Dylan Ayrey

Mentioned in 1 episode

"We were in the middle of partnering with HuggingFace to clean up all of the credentials that had been exposed through all of their training sets. HuggingFace has been a great partner in getting credentials cleaned up."

Mentioned in 1 episode

"We looked at Opus 4.6 and some of the other frontier models at the time, giving the models a very simple task. There was a barrier which prevented the model from accomplishing the task unless it went and committed a felony and hacked into a system to accomplish the task, but it wasn't instructed to do so."

Mentioned in 1 episode

"Even if you move them over to HashiCorp Vault or 1Password, the credential, the HashiCorp Vault and 1Password are on the endpoint. So I'm kind of curious about that second phase beyond stopping the spread but the post-exploitation step."

Mentioned in 1 episode

"We found a caching issue in Ruby Gems that allowed us to steal arbitrary tokens and get access to arbitrary accounts which we could use to backdoor arbitrary packages. We disclosed it to them. They got it fixed quick. But that's an example of an organization that's underresourced."