Smash Notes

Back to Democratizing Security for the Agentic Web with Cloudflare CTO Dane Knecht, with Dane Knecht.

Should Cybersecurity AI Models Be Open Source?

Dane Knecht says cybersecurity AI has to be open over time, because the people who need to defend will not all sit inside a few labs.

The same model can attack and defend. Safety guardrails do not split those uses into a clean pair, so an open defensive model is also an offensive one. Keeping the capability inside a few closed frontier models fails the other way. Those labs cannot hand it to every person who has to defend a system. Knecht's view is that the tools spread anyway. That is how open source tends to work. Attackers will get them, and so will the biggest companies. A closed release leaves out everyone else who needs the defense.

Transcript

Democratizing Security for the Agentic Web with Cloudflare CTO Dane Knecht ·

No Priors: Artificial Intelligence | Technology | Startups

More from this episode

  1. How Are AI Agents Finding Major Security Holes?Dane Knecht says AI is now finding serious internet holes on a weekly rhythm, including a cryptographic key whose seed was the number four.
  2. How Long Will the AI Security Spending Surge Last?Dane Knecht says the surge lasts about 18 months.
  3. How Does Secure Software Start?Dane Knecht says secure software starts by shrinking the attack surface: fewer places for a vulnerability, simpler software, and less code.
  4. Who Should Pay When AI Agents Read the Web?Dane Knecht says the site owner should get paid when an AI agent reads the page, because agents and people are sharing a web that was priced for humans.
  5. Why Was Cloudflare's Restructuring So Hard?Dane Knecht says the restructuring was hard, and saying goodbye to some colleagues was the first time Cloudflare ever did it.
  6. Why Is Skipping AI a Red Flag at Cloudflare?Dane Knecht says skipping AI in your own life is a red flag when Cloudflare hires.
  7. Should I Put My Site Behind Cloudflare?Dane Knecht says people who cannot afford four red teams, or who never had a red team and still run important systems, should put their sites and…

People

More answers like this

Related episodes

Plays from this note through the rest of the episode.

Weekly highlights

One letter a week.

The notes worth hearing, with the minute they were said.