Shared software primitives make vulnerability fixes faster

Transcript

Transcribed by machine (Whisper) from the episode’s audio, so a word may be off here and there.

1. 22:43

   One obviously huge risk that everybody is facing these days is the risk of cyber attack. How are you dealing with that? Obviously you have a code base that goes back many years. Are you, there's many people are talking about, we have to move everything to rust. We got to do a ground up rewrite. We've got to be memory safe. We got to have all these things. Otherwise we're just way too exposed. Where, how much investment do you plan to make there? We're making a lot of investment there. And obviously we're thinking about two things. Like we have our own platform, our own infrastructure or find our own business operations where we're thinking about this. But we also have all the thousands of systems that our customers have built on our platform. And we think about risk in that domain. And in both those cases, the first thing we think about is speed remediation,

2. 23:32

   right? Like the velocity of cyber threat is increasing, the pace with which everybody needs to be able to respond to that. We need to be able to respond, patch our own systems. We need customers to be able to respond and patch their own, their systems. And there's two worlds. Let's paint. Let's paint the world where you've got a concentrated portfolio running on a platform where there's a lot of shared primitives.

3. 23:56

   There is just something a lot easier about speed remediation in that context than in the alternative context where you've got hundreds of AI built systems, each running on their own frameworks and stacks and using various open source components and so forth. And you're like, okay, now there's a vulnerability. How do I even find out where I have it, much less how do I remediate? So there's just an inherent benefit in the kind of platform approach to the kind of, hey, Wild West AI builds all the things.

4. 24:34

   So, that's one place where we think about the benefit of a platform like ours for speed to remediation from our customers. Well-architected systems with a lot of reuse of common components means that any remediation can be tackled kind of once in a spot and have a broad impact anywhere. And so, that's one thing that we think about when we think about this. but are we Upping our game? Absolutely. Are we adding resources? Are we bringing the world's most powerful AIs in to try and run our own pen tests on our own things? Are we encouraging our customers to do the same thing? Are we automating a lot of that testing and the build process and the test and the deployment process inside our own platform so that customers don't have to think about that as much? Yes, all of those things are important investments for us as we think about, you know,

5. 25:29

   an increasingly risky cyber environment. Do you think that will be a sort of permanent tax on the software industry that the frontier companies just collect in perpetuity because they're constantly creating new cyber risks that only they can help you solve? Or do you envision the alternative would be like, we close all the bugs, you know, and we're in a happy place in, I don't know, 18 months or something. There is no finish line on security and cyber threat, right? Like as technology evolves and gets better at all things, it also gets better at cyber attack. And the world is full of legacy technology today. So the big enterprise, we have lots of customers out there who still have 60 year old COBOL systems running in corner as 400 lotus notes like all of it and there's so many of these systems like the idea

6. 26:29

   that at some point we reach a stasis and everything is perfectly uh you know secure i think is a pipe dream so no i don't think it ever gets to the point where there's nothing now are the model companies who are both fueling the tech that can discover vulnerability and penetrate right gonna benefit also from the use of those models for protection right and and white hat and everything yes for sure like obviously that's driving a lot of token burn today