AI & LLMs - Josh More, Matthew Carpenter - PSW #808

Nov 30, 2023

Josh More, an expert in AI and LLMs, discusses the future of AI in education, enhancing writing with AI, and the impact of AI on the teaching profession. Matt Carpenter, a hacker, shares insights on cybersecurity. The speakers delve into social media manipulation, dangers of AI, and the importance of problem variation. They also address vulnerability reporting issues and discuss various vulnerabilities and exploits, including flash vulnerabilities and remote buffer overflow vulnerability in Zyxel firewalls.

Ask episode

Chapters

Transcript

Episode notes

Introduction

00:00 • 3min

Josh More's Journey in Information Security and His Interest in AI and ML

02:47 • 5min

The Evolution of Teaching Methods and the Role of AI

07:51 • 5min

The Use of AI in Writing and Education

12:45 • 32min

The Impact of AI on the Teaching Profession

44:34 • 15min

Discussion on AI and LLMs, Introduction of Matt Carpenter's expertise in hacking and cybersecurity

59:57 • 5min

Introducing a Guest with Hacking Background

01:04:30 • 7min

AI, Social Media Manipulation, and Language Models

01:11:34 • 15min

The Dangers of AI and the Pursuit of Sentience

01:26:22 • 19min

The Five Levels of Mastery and the Importance of Problem Variation

01:45:32 • 12min

The Role of Software in Hardware Functionality and Problems with Vulnerability Reporting

01:57:33 • 5min

Vulnerabilities and Exploits: Flash, Curl, and Zixil Firewalls

02:02:35 • 8min

Identifying Vulnerabilities and Responsibility

02:10:28 • 33min

AI-Generated Country Song and GPS Spoofing

02:43:00 • 8min

Sanity Checking and Vulnerability Handling in Computer Systems

02:51:03 • 7min

What will the future bring with respect to AI and LLMs? Josh has spent some time thinking about this and brings us some great resources. We'll discuss how to get students involved with AI in a safe and ethical manner. How can we use AI to teach people about cybersecurity? What tools are available and where do they fit into our educational systems that must change and adapt to the times? Join us for a fun discussion on what the future looks like with AI and the youth of today.

Segment Resources: https://docs.google.com/document/d/103FLvNRSwBhq-WgCbuykMvweT6lKf2lAASuP8OuuKIw/edit#heading=h.3inodmot2b77

Our good friend Matt Carpenter joins us to share his thoughts on what's going on in the world of AI and LLMs. Matt is also a hacker specializing in hardware and the crew has some amazing hardware hacking topics to discuss (as usual).

Segment Resources: https://garymarcus.substack.com/p/has-sam-altman-gone-full-gary-marcus

We navigate through dangerous cyber terrain, examining real-world examples like the WebP library and the Curl vulnerability. Critical issues in Zyxel firewalls will also be unmasked as we shed light on the urgency of improving vulnerability reporting and cataloging and addressing the often-overlooked problem of overclassifying harmless software bugs.

We then shifted gears to tackle the tricky subject of software vulnerability identification, focusing on a specific CVE that sparked intriguing debates. Learn why pinpointing the source of the vulnerability is vital to effective SBOMs. The journey doesn't end there - we'll uncover a newly discovered Bluetooth vulnerability, aptly named 'BLUFFS', and discuss its potential for exploitation, along with the ingenious solutions proposed by the researchers who unearthed it.

Brace yourself for a riveting finale as we delve into Akamai's recent research on DVR and router attacks, explore the risks of GPS spoofing, and discuss the importance of detection mechanisms. We'll also scrutinize the stereotype of hackers in pop culture, address the importance of handling vulnerabilities in software, and highlight the pressing issue of ransomware targeting healthcare. So buckle up and join us for this critical exploration into the world of software vulnerabilities as we decode the complexities and debunk some security myths.

Visit https://www.securityweekly.com/psw for all the latest episodes!

Show Notes: https://securityweekly.com/psw-808