Real Alpha
Try Pro free

Cheeky Pint · 3 min · Oct 29, 2026

AI scans may uncover more serious software vulnerabilities

Sam Altman · CEO, OpenAI

Models are improving at vulnerability discovery, but have barely been applied across the internet's vast codebase.

In this episode

Full analysis
  1. 11:14Agent teams may improve both capability and alignmentPro pick 3 min
  2. 16:12AI math breakthroughs put discovery and researchers in tension7 min
  3. 42:41Personal agents could make business interfaces less important4 min
  4. 26:56Memory makers are cautious because past cycles punished capacity investment3 min
  5. 31:38Math-training methods may transfer to AI research3 min
  6. 0:06AI scans may uncover more serious software vulnerabilities3 min
  7. 37:42Altman wants five-year gigawatt costs down from $70B to $20B3 min
  8. 4:33OpenAI favors iterative deployment to keep people in control3 min
“we are in a world of many more serious vulnerabilities than we expect”
Sam Altmanat 0:51 · Cheeky Pint
0:51

Takeaways

  1. Improving models have not yet been used across much of the internet's code.
  2. Altman expects vulnerability counts to rise as scanning spreads.
  3. New architectures may be more durable than patching legacy software.

About this segment

Models are improving at vulnerability discovery, but have barely been applied across the internet's vast codebase. Sam Altman expects broader scans to expose more serious flaws and spur new software architectures.

Sam Altman

Sam Altman is CEO of OpenAI.

Co-founded OpenAI and has led it since 2019, overseeing ChatGPT's launch; formerly president of Y Combinator.

  • John Collison, Host · Co-founder & president, Stripe

    Sold his first startup, Auctomatic, at 17, then co-founded Stripe in 2010.

From “Why Sam Altman is against a single superintelligence”, Oct 29, 2026. Watch the full episode

Answers “What will AI look like in the next few years?” See all 169 answers

Transcript

Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there.

  1. 0:12

    I want to ask about PHP Week. Yeah. First off, how did it... Why did it take so long to find these bugs? Because it sounds like they were kind of... Why did it take, like, the 20 years, or why did it take the last few months? No, why did, like, exactly, why did it take a year? Maybe start by explaining the bug. Or the problem. So the problem is that although we have known for a while that these models are getting good at finding vulnerabilities in the wild, A, they continue to get better fairly rapidly, and B, people just hadn't really used them to go look at everything out there.

  2. 0:48

    There's like a lot of service area and a lot of code on the internet. And as people have started to do that, I think we're going to find that we are in a world of many more serious vulnerabilities than we expect, even though many people who have been following this for a while expect a lot. Yeah, I just feel like a lot of the discussion ends up being around we need to fix the software. And sure, yeah, we should fix the software, but also we maybe need to change the architectures, which is harder, but a much more durable fix.

  3. 1:17

    Like that seems to me like what needs to happen. It would seem really hard, except we have this amazing new tool to do it with. So I kind of think that's what's going to happen. And you've already seen a new generation of startups talking about building this new kind of internet or new kind of application architecture for this world where you assume that the models get smarter and smarter. What do you think the global software upgrade looks like?

  4. 1:40

    For example, is a PHP code base just a bad idea and you should rewrite a nice clean version in Rust or do we upgrade PHP? But yeah, everyone thinks that we need to upgrade all hand-spun software. Just what form will that actually take? Like, is this huge for Infosys and all those guys? Because it's going to be a lot more software consulting project. I mean, people are talking more and more about just, like, let's re-architect what it means to be a router or an operating system or an application.

  5. 2:17

    And, you know, I've seen some of these new startups saying that they're just going to, like, make a whole new stack. And that would have seemed insane two years ago. You would have been like, there's no way there's too much. you can't write all that and now maybe soon you can i would bet that we have a completely new sort of model of how we make systems and networks what else reminds you of the early internet days