TBPN - Meta Drops New Model, Mythos, RoboLamp | Luther Lowe, Dan Primack, Lior Susan, Feross Aboukhadijeh, Qasim Mithani, Jaleh Rezaei, Jeremy Philip Galen

Episode Date: April 8, 2026

(00:44) - Meta Launches Muse Spark (18:24) - Anthropic's Mythos (30:19) - 𝕏 Timeline Reactions (36:12) - Robo-Lamp (41:13) - Luther Lowe, Head of Public Policy at Y Combinator, discusses the challenges small tech companies face due to the control exerted by major platforms like Apple and Google over app distribution. He highlights the restrictive nature of app stores, likening Apple's App Store to "the worst DMV in the world," and emphasizes the need for policy interventions to curb anti-competitive practices. Lowe also mentions Y Combinator's support for the BASE Act, aimed at preventing self-preferencing by dominant platforms, to foster a more competitive and innovative tech ecosystem. (58:30) - Dan Primack, a journalist specializing in business and finance, discusses the legal landscape of prediction markets, highlighting a recent New Jersey appeals court decision favoring Kalshi, a prediction market platform. He anticipates the issue may escalate to the Supreme Court, with potential congressional intervention being necessary for significant changes. Primack also notes the bipartisan nature of opposition to such markets, citing concerns from both casino interests and anti-gambling advocates. (01:20:42) - Lior Susan, founder and Managing Partner of Eclipse Ventures, discusses his firm's focus on investing in physical industries by supporting companies like Cerebras and VulcanForms. He highlights the importance of wafer-scale integration in chip design and the use of multiple lasers in metal part manufacturing to drive innovation and scalability. Additionally, Susan emphasizes the significance of disciplined company-building practices in capital-intensive sectors and expresses optimism about the future of real asset companies in public markets. (01:33:21) - Feross Aboukhadijeh, founder and CEO of Socket, a developer-first security platform, discusses how Socket rapidly detected a malicious update to the widely-used Axios npm package within six minutes. He explains that Socket's system downloads and analyzes every open-source package across 19 ecosystems, employing static analysis, maintainer behavior analysis, AI, and human researchers to identify supply chain attacks and cybersecurity threats. Aboukhadijeh also details the sophisticated social engineering tactics used by North Korean state actors to compromise the Axios maintainer's account, leading to the publication of poisoned package versions that installed Remote Access Trojans, enabling attackers to remotely control infected devices and exfiltrate sensitive data. (01:50:24) - Qasim Mithani, co-founder and CEO of DepthFirst, discusses the company's mission to build AI capable of detecting, triaging, and remediating software vulnerabilities at scale. He highlights their recent $80 million Series B funding, raised less than 90 days after a previous round, driven by significant customer traction and the need to enhance research efforts. Mithani also emphasizes the importance of security in the AI era, noting partnerships with major AI labs and the development of in-house models to address complex enterprise environments. (01:57:57) - Jaleh Rezaei, CEO and co-founder of Mutiny, discusses the company's AI agent that assists businesses like Rippling and Snowflake in creating personalized customer-facing materials to streamline the sales process from initial contact to deal closure. She explains how the agent generates tailored content such as landing pages, battle cards, and ROI proposals, enhancing efficiency and effectiveness in customer engagement. Additionally, Rezaei shares the origin of Mutiny's name, emphasizing its mission to challenge traditional go-to-market dependencies, and recounts the story behind their raccoon mascot, Achoo, highlighting the company's culture of authenticity and spontaneity. (02:05:53) - Jeremy Philip, after 12 years at Meta focusing on trust and safety, left to address AI-powered scams by founding Charlemagne Labs, which developed Agent Charley, an on-device AI agent for real-time threat detection. He discusses the increasing sophistication of phishing attacks, emphasizing that AI enables scammers to craft highly personalized and convincing messages, making traditional phishing indistinguishable from spear phishing. Philip highlights the necessity for proactive, real-time defenses like Agent Charley to protect users from these advanced threats. Follow TBPN: https://TBPN.comhttps://x.com/tbpnhttps://open.spotify.com/show/2L6WMqY3GUPCGBD0dX6p00?si=674252d53acf4231https://podcasts.apple.com/us/podcast/technology-brothers/id1772360235https://www.youtube.com/@TBPNLive

You're watching TVBF. Today's Wednesday, April 8th, 2026. We are live from the TBPN Ultradome, the Temple of Technology. The Fortress of Finance. The Capital of Capital. We got white suits on. You know what that means. The stock market is booming. The Dow Jones is up 2.68%. This S&P 500 is up 2.46%. The NASDAX up 2.9%. And there's a bunch of other stocks that are moving. Within that, of course, this is on the back of the very good news that there has been a ceasefire. The street might be opened. Of course, it's all back and forth. The front page of the Wall Street Journal is covering all of the geopolitical moves. But we're here to talk about tech and business, of course. And the big news today is that Meta Platforms has launched a new AI model. Alex Wang, the chief AI officer at Meta Platforms, announced a new large language model today. its first major new artificial intelligence model

in more than a year, the rollout of the model called Muse Spark is a critical moment for Meta, which is up seven and a half percent already, which has spent billions of dollars hiring AI talent in a bid to catch up to OpenAI, Anthropic, and Google DeepMind, the leading labs have been putting out models at an accelerating pace. In a departure from its previous models,

which were open source, Muse Spark is a closed model that will power Meta's AI chatbot and AI features within it. John Lutig has a very very, interesting post about open source AI and sort of predicted this. I can pull that up at some point. We can find... Predicted that meta would eventually bail? Yeah. Let me find it. The future

foundation models is closed source. Let me see if we have this here. He said given meta is the primary deep pocketed large open source model builder open source AI has become synonymous with meta AI. He wrote this maybe three or four years ago. So the operative question for open source AI is what game is meta playing in a recent podcast Zuckerberg explains meta's open source strategy one he was burned by Apple's closeness for the past two decades and doesn't want to suffer the same fate with the next platform shift it's a safer bet to commoditize your compliments he likes building cool products and cheap performant AI enhances

Facebook and Instagram that's 100% true we've seen this in the ads product and the growth there there's some call option value if AI assistance become the next platform and that makes sense in Manis and the meta AI app he bought hundreds of thousands of H-100s for improving social feed algorithms across products. And this seems like a good way to use the extras. That all makes sense. And Lama has been great developer marketing for Facebook,

but Zuck also suggests several times that there's some point at which open source AI no longer makes sense, either from a cost or safety perspective. When asked whether meta will open source the future $10 billion cost model, the answer was as long as it's helping us. At some point, they'll shift their focus towards profit. And that's what John Lutig wrote.

When did he write this? This was May 20, that was 2024. Man, time flies, barely just under two years ago. He says, unlike the other model providers, meta is not in the business of selling model access via API. So while they'll open source, as long as it's convenient for them, developers are on their own for model improvements thereafter. That begs the question if meta is only pursuing open source

insofar as it benefits themselves. What is the tipping point at which meta stops open sourcing their AI sooner than you think he says? Exponential data, Frontier models trained on the corpus of the internet, but that data is a commodity model differentiation over the next decade will come from proprietary data, both via model usage and private sources. Exponential CAPEX, he highlighted this two years ago, a lagging edge model that requires just a few percent of META's 40 billion in CAPEX is easy to open source.

No one will ask questions, but when you reach $10 billion or more in CAPX spend for model training, shareholders who want clear ROI on that spend. The Metaverse raised some question marks at a certain scale, too. Diminishing returns on model quality within meta. There's a large upfront benefit for meta building an open source AI model, even if it's worse than the frontier closed source counterpart. There are lots of small AI workloads, think feed algorithms, recommendations, and image generation where meta doesn't want to rely on a third party provider like they had to rely on Apple. And so the news has been back in December, there was a reporting that Alex Wang disclosed an internal company Q&A that his team was working on two new models. One was this text-based L-LM code-named avocado, and then a separate model that was for image and video.

Mango. Yeah. And so have they clarified if this is avocado? This feels like what avocado should be this muse spark. Is that what it's called? Yeah. I see what is. I don't know what else.

So the image model should be coming soon. The question that I had was, will a code-focused, agenta coding harness be a separate? separate model, a different train. It feels like it's not a coincidence that this news is dropping on the heels of Anthropics new model Mythos, which sort of was announced loosely and the model card dropped yesterday, even though the model is not available yet to play around with. Yeah, so going through, I think it's worth pulling up the actual model card here. Sure. So we can have it on the screen. But they break out Muse Spark, thinking against Opus 46 max, Gemini 3.1 Pro high, GPD 5.4x high, and then GROC 4.2. And the way that they position it, it looks,

there was, of course, some people saying that it was somewhat of a chart crime. But if you look, when you basically look at the top and you say that Muse Spark gets an 86.4 and it's in blue, and then you look over and it's outperforming all the other models on that benchmark, You just sort of assume that like the highlighted blue means that it's out. Oh, yeah, but it's not frontier at MMLU. Because there's a bunch of them as you get further and further down. So like Arc AGI2, Mew Spark dramatically underperforms. Oh, interesting.

The other leading models. Yeah. And there's, you know, again, a number of others where it is, there's plenty where it's overperforming. There's plenty where it's underperforming. I have I of course we started asking it jokes right away so I'll pull up I'll pull up the joke I said tell me a joke

okay and it said gotcha here's one for you why don't skeletons fight each other they don't have the guts okay but then it doesn't even let me react it just says want a different vibe I've got dad jokes nerdy ones or Malibu appropriate surf puns too and so I'm like

Wait, why would you think I want Malibu appropriate surf pun? If you look in your previous chats, I have no previous chats. No previous chats. What about, because meta AI crosses up Instagram. So when you search on Instagram, sometimes that prompts Lama or previous. Yeah, yeah. So I'm trying to get to the bottom in, right? Like this feels like an oddly specific type of joke to ask me.

And so I said, why would you think I want Malibu appropriate surf funds? Ha, ha, fair call. Toss that in without you. asking for it. I try to mix in different flavors of jokes and surf puns just popped into my head as a random option. No special reason behind it. I just said, I don't believe it was random. And it says, you got me. You got me? It wasn't my smoothest moment. But then it denies it again. Weird. It says, it's just like, what kind of, what kind of joke do you actually want? No hidden motives here. I said, you gave a hyper-specific example based on my life. So I have to assume you were looking at my

your account for inspiration. I get why that felt weird. I'm sorry it came off that way and then it denies it again. You're clearly lying. I mean, you have talked about being in Malibu on the internet for a full year. It's possible it got baked into the pre-training

or something. I don't know. Maybe. Yeah. This also, I mean, that feels like... But when I said, what can you tell me about myself? I said, I don't actually have access to personal details about you

beyond what you share with me right here in this chat. That's very odd because the whole thesis of like personal super... intelligence should be, hey, we're the best model that actually does plug into your entire life and your DMs and your Instagram and your likes and your preferences and everything that you have done across meta platforms for a very long time. We're going to bring that in a really fun and delightful way and telling a joke that is tailored. I used to get jokes like that where I would ask for a joke and it would be, I've talked about this, it would be something like oddly

specific about my car. And I was like, I don't, that doesn't actually make the joke better, but it's cool that you're remembering. This whole personalization boom happened last year. I get those about like AWS. Really? Like specific services. Oh, because you've been like querying, asking questions about ABS.

Yeah, because I would use it when I was like debugging stuff. Yeah, yeah. But so I also ran, you know, my favorite bench. Yes, yes, shrimp fried rice bench. How did it? By the way, Noah Hirschfield said, does it know your name? I said, what's my name?

I don't know your name unless you tell me, smiley face. It definitely knows your name. But yeah, I mean, what is personal super intelligence if it doesn't even know your name? Like that, that feels like they haven't dialed in the harness or whatever the tuning is to actually. Yeah. And of course, like Meadow is going to be hyper aware. We don't want a PR cycle.

Yeah, yeah. Like they trained on your data, right? Everyone's been, oh, that ad was a little bit too close to home. And you remember every once in a while one of those like, a screenshot that's been screenshot like a thousand times, like goes viral. and it's like, I do not give Mark Zuckerberg. Oh, yeah. Yeah, yeah, yeah. Like that works.

Yeah. It's hilarious. This is, is this a rebuttal to the bench hacking allegations that happened last, last week, or last year? So where was the, so according to, according to Meta's internal benchmark test, Mew Spark outscored Google Gemini on some tests and was competitive with models from Open AIs I in Anthropic on others, it significantly outscored XAIs GROC on most tests. Wang's hiring followed the disappointing release of META's previous model called Lama 4.

The company was accused of and later admitted to gaming a third-party benchmark that it used to rank various models against each other on performance. It also delayed the rollout of its biggest model called behemoth, which it never ultimately released. And so when I look at a model card like this where you could call it a chart crime where it's highlighted in blue and it feels like it's the best, but it's actually, you know, doing better on some. It does well and health bench hard. It underperforms on Arc AGI 2, as you mentioned. But this maybe is the bull case here is that they have at least moved on from the culture of

optimizing for the benchmarks, right? Isn't that a good thing? Yeah, I mean, I remember there were rumors about them. There was like extra bonuses if they got number one in Elm Arena. I think that was like something like the rumor. Yeah. But yeah, I mean, you've seen a lot of the labs kind of move away

from benchmarks generally because I think they're just not that meaningful anymore. Like a lot of them are like basically so saturated. They're all, it's like they're competing between 89 and 91%.

Yeah. And they're just like not very meaningful like you see. And you won't like actually feel that in the product necessarily. Yeah. You kind of need to talk to these things for a long time

before you can actually get the vibe. Yeah. But I do think this news is very interesting in the context of the, you know, cloudinomic stuff. The dashboard,

yeah. Because like what, okay, what does it mean? if the entire company has been maxing their cloud tokens over the past month, it means that they weren't using this model? Yeah, to me it means they need to commoditize their compliments, right? They need to bring down that cost potentially.

And if they're, I mean, we sort of dug into, are they spending a billion dollars a month? Seems like absolutely not, but they're clearly spending a lot. And if you can turn that op-x into CAP-X and train your own model and then inference it much cheaper on your own hardware, that feels like just an economic opportunity that makes a ton of sense in the context of just 10,000, 20,000 engineers writing a lot of code. Yeah, and I think there's basically like two ways to like square those two things happening, like either one, this model's like not that good because the engineers aren't using it or, you know, your theory that they're just distilling cloth.

So one of those is true. That is not my theory. That is the schizo theory. I believe the 401, right? is true. This model still doesn't feel that big. I think Alexander Wang talked about they're going to train bigger models. They're training them right now. So I'm excited for those.

I think I'm especially excited for the video models. Yeah, they should have incredible training data. We've seen really good progress from V-O-3. This model is very competent, right? It's with the frontier models. Maybe it's not the best one, but it's like among the top five or whatever. And none of the other big labs have, I guess that's not true. Like Google right now is definitely ahead in images.

Open AI, I think, is, they're releasing a new image world soon, it seems like there's been rumors of this. Yeah. The image two popped up on the arena. Yeah, on the arena. It's always like the code name coming out. The photos just looked photo real. It didn't look like AI imagery anymore.

Yes. So if a meta has like similar capabilities, but they have this like incredible data set. Yeah. You know, very excited to see what comes out there. Yeah. The news this morning, meta platforms and the information, meta platform is. taken down internal employee built leaderboard tracking how many token staffers were using. Showed total usage over a recent 30-day period.

Amounted over 60 trillion tokens. The dashboard now displays a message that is offline. It says we've really enjoyed building this app on Ness for everyone. It was meant to be a fun way for people to look at tokens, but due to data from this dashboard, being shared externally, we've made the decision to shudder it for now. It seemed like a fun side project. Mike Isaac was reporting on it here. He said it's down.

Unclear to me if this was a homespun one by employees or an official one employee projects come and go frequently conspicuous timing though But yeah you don't want to have you want to measure the output the impact not necessarily the input And how much is is going on there What else is going on? Lysan Al-Gaiib says meta might actually be back with Mews spark still behind open AI Anthropic and Google but ahead of XAI in Chinese labs MewSpark stores 52 on the artificial intelligence analysis index behind only Gemini 3.1 Pro, Gemini GPD 5.4, and Claude Opus 4.6. Muse Spark is the first new release since Lama 4 in April 2025 and also met as first release that's not open weight.

So a huge jump up in performance across a variety of benchmarks. So all good stuff there. What else is? And the market is... Tanking? Thrilled. Oh, thrilled. Absolutely thrilled.

I just saw the news that the Wall Street Journal is reporting that the straight-of-form moves might actually be closed again. So I would imagine a kangaroo market for the near. No, the market is thrilled that meta has released a close to frontier level model, right? This is a new group. They've been out of for less than a year. The stock is up almost 8% today. And again, you know, so much of the. pricing pressure, the downward pressure on meta has just been kind of uncertainty on what

all these tens of millions of dollars will actually go towards and what will be accomplished. And still unclear, like, you know, is this, are they going to go after CodeGen at all? Are they just going to try to compete on the Consumer LLM side? And can you economically go after CodeGen if you're just using it for internal models, If you're not selling it externally, can you justify the CAPEX just purely on the internal usage? Seems so. Having this model be vended into all the different family of apps makes a lot of sense because they have billions of users that will wind up interacting with this in one way or another. The CodeGen thing, you have to wind up being more in the personal superintelligence.

We've talked about Manus and what it might be able to do for you across Instagram, across Facebook, across WhatsApp. I don't know. Yeah, the question is, will they try to send meta vibes? Again, with the new model. All the way up to the top of the App Store charts. Yeah, I mean, I'm curious. I mean, the previous actual model was mid-jurney under the hood, right? And so that was sort of a quick launch to demo what they were thinking, you know, mixing the music library, which was cool.

Yeah, like that had nothing to do with the new, like, class of AI researchers. Mango, yeah. But, yeah, I mean, there was a lot of weird back and forth and news about is Alex Wang getting kicked out. You know, there was a quick debunk on this. Andrew Bosworth came up and said, no, this is completely incorrect. We're very happy with the progress and the team and what we're building there. And so it seems like they got it out the door and it's been doing well. Meta's new family of AI models can reach the same performance as Kimmy K2 with only 30% of compute and only 10% of the compute.

to reach Lama 4 Maverick, so a much more efficient computing frontier here. They completely rebuilt their pre-training stack with improvements to model architecture, optimization, and data curation. And so more facts. MetaSpark is an early data point on our trajectory, and we have larger models in development. So the mythical 10 trillion parameter model. That is the 10T is what everyone's working on right now, 10 trillion. Yeah, probably in that range.

Yeah, it's all rumored at this. Yeah, rumored GPT4 was something like a trillion. You remember those memes where it's like a small circle and then the big circle was a huge circle. GP4, GPD5. Yeah. But yeah, lots of other work that went into it. Martin Casado has a little bit more context on like what actually unlocks new capabilities in AI models. He says, Mythos appears to be the first class of models trained at scale.

on Blackwells, then there will be Vera Rubin's. Pre-training isn't saturated, narrative violation. RL works, and there's so much computing coming online soon. Buckle your chin straps, it's going to be wild. The scaling laws... And you know Brad Gersner had to come in with a hundred. A hundred. Yep, for sure. Yeah, there's a crazy bull case for Nvidia in the information, arguing it should be worth,

what, $22 trillion? That is a wild move. There's a lot going on. The scaling laws holding is the most important. Yeah, article from the information finance. NVIDIA worth $22 trillion. This old school financial model says yes. So, yeah, the big news on yesterday was Anthropics' new model mythos.

Some really impressive statistics and anecdotes yesterday, both the model card, the benchmarks, and some stories about breaking out of a variety of, what do they call them, walled gardens or test environments? What are those called? Breaking out of the, I don't know, the simulation. Sandbox. The sandbox, yeah, breaking out the sandbox,

sending emails, all sorts of stuff like that. The model preview is only available right now to about 50 companies that maintain critical infrastructure because the model is particularly good at finding zero days, bugs and exploits in technical systems. And if they, you know, they lead that, they leak that out before big companies have time to go and address all the bugs, there could be serious, you know, serious ramifications for cybersecurity.

And so key partners include Apple, Google, Microsoft, Amazon, Nvidia, JPMorgan, Shays, Broadcom, the Linux Foundation, Cisco, Crowdstrike, and Palo Alto Networks. They're all listed on the cybersecurity focus page for Project Glasswing. Chris Backy was having a little bit of fun because you noticed Anthropic put their own logo on the partner page, which is a little bit funny, but at the same time, it's kind of smart because a lot of people are just going to see the image quickly, and it's good to position yourself with the other companies. Yeah. So, yeah, it is interesting. I mean, people have predicted that AI models would be particularly good at cyber attacks, and this was one of the main sort of vectors of AI fears. It feels like this is what maybe what Dario was referring to when he was talking about the end of the exponential finding and exploiting software bugs is it's sort of perfectly in the sweet spot for coding agents and reinforcement learning.

Coaming through piles of code tirelessly trying different exploits to find bugs, having a clear verifiable reward. Did you crash the system or not? Did you break into the system or not? This is very, it's a very clear binary signal that you can send to the model to determine, were you successful in breaking into that system? And it requires basically no time delay. There's no lag. So there was one snarky tweet I saw that was something to the effect of like, okay, then if it's so good, go cure cancer.

But any application that requires a real world feedback cycle, even if it's just a few minutes of human interaction, in the cancer example, you know, you're going to need to be testing the drugs in vitro in mice, in monkeys, in humans at some point, or even if you're just sequencing DNA or doing anything in the lab, pipeting anything, if it's even just a few minutes, all of a sudden, every iteration, every attempt is going to take a few minutes, and that's going to put you on just a wildly different exponential, as opposed to being able to spin up a virtual machine with basically every single piece of software out there, and then try every single exploit against every single piece of software and you wind up with a ton of exploits and very, very bullish for

cybersecurity that this is being done preemptively. There's a whole bunch of different discussions. Ben Thompson has a good piece on the whole decision to release the model or not and stage it out and the go-to-market there. But it's even if the bio-research, the other impacts are on sort of a slower exponential, there's still so much opportunity in even a software-only singularity. There's also risk in a software-only singularity. We've seen this story before, though, a model that's too powerful to release, but then works its way out and has pretty moderate impact on the world. This was the story of GPD 2, the story of chat GBT, the question of, you know, is this the model that's dangerous to put in the hands of people?

Yeah, a headline from February 22, 2019 by Aaron Mack. Open AI says it's text generating algorithm GPT2 is too dangerous. Yeah. So there is a, I think Van Thompson called it like the boy who cried wolf syndrome. But the mythos wolf. He says there's a lot of skepticism about Anthropics announcement. This tweet was representative from Bucco Capital Bloch. Anthropics marketing strategy is so funny.

like, ah, the government is treading on me. Ah, our models are so good, we can't release them. It would be too dangerous. Ah, someone stop me. I'm going to destroy the economy. The rolling of the eyes is exacerbated by the fact that Anthropic has reasons to make, to not make mythos widely available beyond a lack of compute. Another factor is surely trying to avoid having mythos distilled by Chinese model makers.

So there's actually two good reasons to gate access. And when you're looking at those logos, when you're looking at the world's largest tech companies, there's much more ability to scale rollout, demand, set pricing. These companies might be able to pay more. The model is very expensive. But if you're justifying that against bug bounties for zero-day exploits in your most critical system, when you look at like J.P. Morgan Chase, it's a bank. Like, what is the price of finding an exploit in that system?

It's pretty high. It probably clears the token hurdle a lot. And if the rollout is paced like evenly across all the different companies, they'll all sort of understand that they're getting allocation, inference allocation at the efficient price that clears the cost to actually serve the model. So I do think the systems, all of these 10 trillion parameter models will be released soon broadly. the main reason that an AI that's smart enough to find zero-day exploits should be able to recognize that it's being used by a bad actor to find zero-day exploits. And it's only been a few months since the last flurry of competing models from OpenAI Anthropic and Google.

And the next cycle is already off to an aggressive start. We had meta. And then the other news is that Elon Musk announced that he is getting ready to do another large, model with XAI. He's got a few... He's doing seven models in training. Wow. That is a lot.

Imagine V2, two variants of one trillion, two variants of 1.5 trillion, a six trillion model and a 10 trillion model. He says there's some catching up to do, but he says he will never give up, never. So he is continuing to grind and train more models. What else was in the reaction? There was a whole bunch of other back and forth. People seem split on Mike from also Capital Former Guests says we've decided not to release our latest investment strategy. It's so powerful releasing it might end the entire venture asset class as we know it.

Yeah. And he says you should release it to a handful of trusted partners so that we can harden ourselves. And George, George Hott says, Anthropics marketing strategy, it's amazing. It's so powerful. It's terrifying. And the best part is you can't come. By the way, if Anthropic had any way to ship this, they would. Trained AI models are the fastest depreciating asset in history.

GPD4 cost $100 million to train two years ago and is now worth less than Quinn 3.5B. Quinn 3.527B, 1 million. Sending the FOMO back, clock is ticking, boys. It needs something like an NBL 72 to run a decent speed, and even absurd API pricing doesn't cover it. There's more to be made on investor hype than 80s. API access. I just wish for honesty instead of a whole fake spiel about safety. Who remembers when GPT2 1.5b was too dangerous. And so lots of back and forth. Dean Ball has some more thoughts on mythos. It's a longer post so we'll let you go and read it. But the main take is just the,

you know, this is technology that whether it comes from Anthropic or another lab, like clearly needs to go into the supply chain of the world and in the U.S. government and the U.S. economy, because no one is doubting, even though some of the exploits were somewhat minor, no one disagrees that we need less cybersecurity. We want the most secure systems possible, and we probably want a lot of competition between different companies to provide that service to the government. And so hopefully if the war comes to an end and there's, you know, different discussions can happen and, you know, ice can thaw. and there's a way for these companies to work together. Even if the supply chain thing doesn't go through and then Anthropic-Vend technology

through Project Glasswing, through CrowdStrike, through Oracle and other partners to Cisco so that at least the systems are secure because everyone wants that. Dean Ball has been on an absolute tear. We should have him back on the show and talk more. He says a lot of people, including people in positions,

of authority told us recently that models of mythos's capability wouldn't be a thing that models with obvious national security implications would not be forthcoming those people were wrong there's nothing to do about it but you should remember it uh mythos is the first model where theft of the weights by an adversarial actor feels like it would be a major deal you better believe they will try and if they don't succeed with mythos they will eventually we are thoroughly in the era of the lab's best models way may well not be in public the way they used to this is because of a combination of compute constraints, economic reality, competitive advantage and safety concerns. Three means the most relevant models may be decreasingly legible to the general public.

And depending on the extent and duration of the coming compute squeeze, we could enter a market dynamic where the best models are only available to the highest bidder. And of course, that makes sense from a KYC and security perspective. In other words, where compute is a seller's market rather than a buyer's market. Interesting. Imagine competing firms in the economy, bidding against one another for access to the best in most tokens and the frontier labs as, in essence, kingmakers. The governance regime I have described above in four

is not designed to stop that dynamic. And so there is plenty of more takes. This was a full current thing cycle. Tenebara says people keep talking about this like it's not blatantly obvious. Anthropic clearly has a system that's auditing open source repos for vulnerabilities using their unreleased higher power models

and sending fixes for them without revealing their current level of capabilities. So they've been going around on GitHub and contributing poll requests to, to, you know, patch any vulnerabilities without disclosing exactly what model was being used. Byrne Hobart. Yes. Is not excited about Fundrise. We had the founder on running ads for VCX, the public ticker for private tech.

this is he says paying for an ad encouraging people to pay 6x net asset value for a closed end fund where the cost of bar is 400% is one of the things people will remember during the next bear market yeah I asked I asked the founder of fund rise about this like how you kind of like is there another iteration of the of the product that can solve for this fund rise like very clearly made a bunch of really good bets a few years ago yeah and the fund has performed incredibly well. But the issue now is like if you want access to these names and the only way that you have is to go through VCX, you're paying 6x what like the actual private market investors are paying. Yeah. And that just is like, I mean, it's a, I don't know, it depends how bullish you are

on the names, but it's going to be very, very hard assuming that normalizes over time. Yeah. It seems extremely unlikely that it trades at, you know, an insane premium for. forever. And so... Interesting that they're running this ad on X. I haven't seen... I have X premium, so I don't see a lot of ads. I don't see any ads, but that does seem like the reasonable place to go to advertise a product

like this. But yeah, it is always odd. There's been a whole bunch of these like treasury companies that have traded above net asset value. And it was always just a weird supply and demand dynamic. People want them and they're willing to pay way above. Hopefully they know the net asset value multiple and they're doing that willingly. I think, you know, consumer education, investor education is more of the critical question here.

Well, Tebow over at Codex is unreasonably excited about things. The next few weeks will be intense and fun. And yeah, Michael Grinich says weeks, years, you know, it's going to be an ongoing model mayhem. Vague maxing. Vague maxing and... Yesterday. A lot of stuff going on. It was about token maxing.

Today is about vague maxing. Yes, yes. Let's go. Mickey Friedman says the current fear is that AI homogenizes culture and turns humans into passive consumers. One counterpoint in Goh, human play showed very little improvement from 1950 to 2016 until AlphaGo beat Lease at all. Then human decision quality jumped. Players started developing moves that were distinct from both previous human moves and from the novel moves introduced by machine intelligence. this seems more likely to me fun times ahead.

Lisa Dahl is now a professor at UNIST. He is a special professor on a three-year term to conduct artificial intelligence research on Go specifically. He, yeah, if you haven't seen the Go AlphaGo documentary, it is fantastic. Lisa Dahl go-to-smoke. Yes, Lisa Dahl.

It is such a wild ride watching the Deep Mind. engineers like, you know, it seems like they're genuinely surprised by the performance, like no one really expected it. But yes, this is a very interesting chart to see how much things changed in the post-AI era as people discovered new and interesting ways to differentiate from the models, effectively. Yeah. Scoop from Stephen Nelson, the CIA used a secret to. tool called Ghost Mirmer to find Airmen in Iran.

Yeah. Ghost murmur pairs long range quantum magnet magnetometri. Yeah. How do you say that? Sensors with AI to find human heartbeats. I was wondering this while they were over the weekend. There was, you know, a search going on. It was like, how do you find someone?

How does somebody like, you know, an airman that's down, send a signal that can be picked up by one group, but not. This is very odd. So there are some community notes on this saying that quantum magnetometry. I'm probably, I imagine that's how you pronounce it. Detects heart magnetic fields. And I believe this technology works in labs, but only up to a few meters, not 40 miles as claims, has claimed fields decay with one over R cubed, making long range detection implausible.

So unclear if this is what worked. But isn't there, isn't, there has to be some sort of device that you could carry on your person, like in your shoe, like an air tag that can talk to a satellite almost. Like, you look at the Starlink receiver dish. It would fit in a backpack, but that's very high bandwidth. I imagine if you had something, I mean, there's sat phones that are the size of large cell phones. That was available in the 80s and 90s. You have to imagine that if you're just trying to put out a signal to GPS or a Starlink network, you must be able to shrink that down significantly to the place where it could be carried on your body.

But it's probably classified. So I would be surprised if it's just very hard to read into what's real and what's not here. There is a different community note pushing back saying no note needed. This new technology is a classified system developed in secret by Lockheed Skunkworks and the CIF. that was just used revealed publicly for the first time. Naturally, it's reported capabilities. Farrex seen the known public state of the art. The note is relevant.

So it's, yeah, it's very, very interesting. But good to see. All right, let's go over to Aaron Tans post. Okay. It says introducing Loom, a lamp that does your chores. Order now shipping this summer. Let's see the video. That bed already looks fully made.

What chores are you going to do? Just drop some laundry off. Oh, okay. You have to drop the laundry. First. Wait, it can do that? Wait, does it have fingers in that? Like, what is, it put on the record? Yeah, what is, what is in the... You can see it has a little claw. Oh, it has a claw inside? Oh, okay. That is so funny to have a humanoid robot play music on a physical record. The folding t-shirt is the touring test of humanoids, for real. Pixar lamp quaking in its boots right now. Nice video.

Good color grade, nice warm tones, friendly. Doesn't feel dystopian. Feels delightful. Did you get one of these? I think we should get one. You're like, I, not in my house. I think we should get one. I think we should get one as a team.

I do have some clothes over there on the, on the wardrobe rack. Rooting, rooting for Aaron and the, and the Loom team. Very, very unique form factor. I mean, I just think the, an impressive timeline for shipping. hopefully yeah shipping I'm reading this as like actually shipping

not shipping like another site to order because you can order already but yeah it'll be very interesting if it can reliably fold clothing it could be enough right so the the benefit here

is like people already want lamps I'm assuming for their bedroom if you can buy a lamp that's reasonably priced and then it also has a benefit of just a simple thing like folding clothes there could be a market here. Yeah, I feel like, I don't know, even just putting pillows back on the bed,

even just like really basic things. I mean, even there are probably applications, like the Rumba did so well with such a minimal, such a minimal scope. There must be something, I wouldn't be surprised if even in between this and fully folding the clothes, just remaking the bed properly feels like

something that consumers might. actually pay for and allow for, you know, the flywheel to start spinning. Obviously, lots of security considerations since there's a camera there and whatnot, they'll have to do a lot of cybersecurity and figure out that, but people already have cameras all over their homes from Nanit and child monitors, baby monitors and that type of stuff. So I'm optimistic about this, and I think they did a great job promoting it. There is a story in the New York Times from none of than John Kerry Rue,

who blew the story wide open on Theranos. He says, the mystery of Satoshi Nakamoto, the pseudonymous inventor of Bitcoin, has remained unsolved for 17 years, not anymore. Read my 18-month investigation to find out who Satoshi really is. And he says it's Adam Back,

who posted directly, I am not Satoshi, but I was early in laser focus on the positive societal implications of cryptography, online privacy, and electronic cash. Hence, my 1992 onwards active interest in applied research on e-cash privacy tech on cypherpunk lists, which led to hash cash and other ideas. John Kerry Ruin is in New York Times research finds like Aaron Van in his Genesis block book, many interesting Bitcoin analogs in the early attempts to create decentralized

e-cash, in effect prototype ideas, trying to figure out a Bitcoin-like thing, including P2P, BGP, and proof of work. First quote, I'm not saying I'm good with the words. I'm not saying I'm good with words, but I sure did a lot of yacking on these lists, actually. The broader context was my observation that because I was talkative on the list and known to have an active interest in e-cash, there is some confirmation bias in finding my comments frequently on e-cash topic. So he has said, we are all Satoshi.

I am not Satoshi. But it's a very interesting story that will. You just created a million Satoshi's. Truthfully, High Yield Harry's joking. Steve Bouchemy has been revealed as the Bitcoin founder, not Satoshi Nakamoto. Well, we have our first guest in the waiting room. Luther Lowe from Wycombinator. He's the head of public policy.

And we are going to be talking to him about vibe Cody Luther. How are you doing? Hey, guys. Great to see you. Congrats on the acquisition. Thank you. Thank you. Great to have you on.

Can you kick us off with a little bit of an introduction on yourself and what you do day-to-day at Y Combinator? Sure. So, yeah, I'm the head of public policy for a white combinator. I'm based in Washington. And Gary created the role when he started at YC. And really, his observation many years ago was, Gary and I had actually met in Washington. We were sitting around the table at some kind of White House meeting. And he said, you know, you go to Brussels, you go to Washington, and the largest tech companies have lots of representation. But Little Tech doesn't have a seat at the table. And that was actually the first time I'd heard that phrase,

Little Tech. And Gary actually kind of coined that phrase. You went back and you look on X Twitter. He had said that a number of times years ago. And so my role is to really help the founders navigate Washington, Brussels, the state capitals, advocate for pro-Little Tech issues in the broader ecosystem. And, yeah, just really do everything I can to help them. founders. And what's the what what is what is your view on on vibe coding the app store the boom?

I was we were talking about it yesterday. There's you know there's a whole bunch of stories of where it feels like we're getting close to the one person absolutely massive company. Whether that's GMV or revenue or something it's like it's starting to happen. But I was looking at my home screen. I don't have an app that is new or vibe coded. Maybe it'll come. in a boom in video games, but how have you been tracking? I mean, I'm sure you see this at YC. Just the growth of broad app development. Yeah, I mean, I think I would almost kind of take a step back.

It sort of reminds me of when I first started geeking out on the internet like 25 years ago where you saw the rise of sort of what you see is what you get HTML-based or browser-based HTML editors. And that allowed anybody, that kind of democratized the process so anybody could create a web page or a website. And now we have tools that allow anybody to create a web service or an app. And so the difference, though, between now and 20 years ago is that today we have basically these two bottlenecks in the form of Apple and Google that sit between the creation and the potential users of those services. The Apple App Store is basically like the worst DMV in the world. And so we're seeing not only sort of, you know, there's reports all over X about this,

but if you just barely kind of look around for it, you're going to encounter lots of folks that are trying to develop apps and services that are not being accepted or getting kicked out. And then it's not only that kind of like app layer, it's sort of the layer up of the tools, like Replit and anywhere that are facing, you know, the inability to update their apps. And so it's a real problem. Yeah. What, uh, when you say the worst DMV in the world, are you actually referring to, we saw a chart where the number of App Store submissions is, is spiking.

It's going exponential. And that feels very logical because people, I mean, we've been building vibe coded web apps here. Uh, the next step was, hey, maybe we should actually get one of these in the app store, but very quickly we realized, okay, well, it's at least a two-week review process. It could be a lot of back-and-forth. It's a new hurdle. We need to, you know, actually compile it to Swift or Objective C. It's a whole different process. Probably doable on a technical side, but we might be hung up there. But are you seeing an issue with actually getting just a one-off vibe-coded app approved? And then I think we should talk about the apps that help you vibe-code new apps. because that's a whole separate thing. But just in terms of like I want a special recipe app and I vibe code it and I want to get it on my phone and I want to send a link to the App Store page to a friend, is that slowing down? What's slowing that down?

Is that going to be a permanent thing or do you think Apple can just adjust there? Well, I think the problem with Apple, I mean, this is a sort of perennial issue with Apple is their culture is one of just absolute control. And I think that we have reached this inflection point where, you know, if I've got my MacBook in my lap, I can open it up, I can download any app I want, I can open terminal, I can do all kinds of crazy mods. But the second that form factor fits in my pocket, all of that freedom goes away. And I'm living in sort of North Korea in terms of what I can do with my stuff, with my property. And so I think that, you know, this is, you know, sure, I could launch something in terms of. test flight if I want some kind of little bespoke, you know, training app or something. But God forbid, if I want to share it with friends or I want to, you know, make some money because

I've created sort of a differentiated product that's actually interesting that people want, I've got to pay this ridiculous Vig to Apple. So for them, it's actually about the reason they want control is because it's about app store revenue. And also they have competing products. it's an anti-competitive thing because they've got Xcode and they've got their own dev tools that they're starting to kind of kind of roll out their own sort of vibe coding services. So the longer that they can kind of delay and slow roll both the developers and the tools that allow the vibe coders to create stuff. Your theory is that they want to basically make their own version of Replit or anything that they have in total control over. and they can make the argument that this is better for users

it's more secure it's better for privacy less like malware risk whatever whatever it is but they yeah anyways I mean they give you there's already like they give you like pretty

meaningful autonomy over like shortcuts and other things like that it's not that unbelievable that they would want to actually make something here but it's like embarrassing like I mean Syria is embarrassing stupid. We've had sort of LLM consumer facing services

like, you know, Sam brought them down from the mountain, you know, whatever. Are we almost three years ago? And I, you know, like, Siri still can't do like basic subtraction. The other day I asked it for like, like, you know, 17 days from, you know, this particular date.

And it was like, do you want Google to consummate that query? Do you want chat GPT to do it? It's like, why can't Siri do it? And so you've got all these, this just lots of energy, there's lots of YC companies that are trying to take a crack at creating kind of serial alternatives, but until kind of this self-preferencing is addressed, I think, at the sort of policymaking level, and it's not just Apple self-preferencing, it's Google, it's all of them, then we're not going to really be able to see the fruits of this sort of

LLM revolution diffused into the hands of consumers. Do you think the side button to trigger the helpful assistant that is currently mapped to Siri and can interface with chat GPT and is reportedly going to interface with Gemini soon. Do you think that there's any actual chance that that becomes remappable at like a, you know, pick your browser search engine level in the OS? Even if it's defaulting to Apple's stack,

do you think there's, any motion there because that feels like the logical analogy and what as an Apple consumer I would like. I'd like to be able to pick my assistant, but be able to assign the hardware button. But where do you think that actually goes? Look, there is no technical reason why we shouldn't have a flourishing ecosystem of third party AI assistant developers competing to do all kinds of interesting stuff. You guys should check out a YC company called Blue. It's hey, blue.com. They have this amazing demo on their website, and they talk about, and basically the guy sitting in his car, and he's driving up the 101, and he's saying, hey, go through my Slack messages from last night. Okay, cool. Jerry needs a document. Share it, get into Google Docs and share that with Jerry, but make it read only.

I mean, look, I like my third button having perplexity and being able to cue that, but I can't, if I can't access those deeper OS API commands, then it stops being. that interesting pretty quickly. Anyway, the blue guys, what you learn, you're like, God, this is magic. How'd they do this? How'd they figure this out? You realize it's a USBC dongle that they've basically 70% of the company is hardware. They're doing soldering irons.

They're flying to China negotiating with the distributor. It's like, why is this a hardware company? This should be, you know, there should be 50 different companies like this duking it out to create something that's better than Siri because Siri clearly is not cutting it. I think the antidote to this, frankly, is, you know, we just announced yesterday a coalition of 275 startups and VCs in support of the BASD Act. It's the banning anti-competitive self-preferencing by entrenched dominant platforms act bill.

And 1074s by Scott Weiner, not to be confused with Scott Wiener's ill-fated bill, 1047 from a couple years ago that had to do with AI regulation. This one we're really excited about because basically it calls upon companies that are a trillion in market cap or above 100 million U.S. users to end this type of egregious forms of cell preferencing. We're totally fine with innocuous forms of vertical integration. In fact, most of the time, that's like a great thing in technology products. But, you know, when you've got the GitHub COO last week said that commit rates, if they say, stay linear or on track to be 14x what they were last year. Wow.

Like, you know, something's got to give here. Yeah, there's going to be more software. Everyone's building software. There's going to be a ton more software. How do you think the vibe coding apps, apps that go in the app store and allow you to build more apps with that particular app, how do you think that will shake out? Because that is a place where it feels like Apple has spent a lot more time making the case. When I think about the Siri button, I feel like they.

They haven't made a strong case for why that can't map to a different app that's already gone through approval. But when I think about the consumer protections and privacy that comes with knowing that the software that you download from the app store has been audited, they've made a pretty strong case there. What's the counter argument for why Apple should open the floodgates of apps that allow anyone to vibe code an app and deliver it to anyone else's device sort of willy-nilly? Look, I don't think that anything is going to, in terms of creating consumer outcomes that maximize privacy competition, all the great things that you want, I don't think any mechanism is going to work better than good old competition. And so that means allowing for side-loading. It means allowing for alternative app stores. You know, we make fun of a lot of European regulation, but the Digital Markets Act has actually done a pretty solid job at that.

And so in places like Japan and Europe, if you are just hitting a wall with the worst DMV in the world, you can just go to the alternative app stores, and I as a consumer can decide to download one of those and use that as a way to access a whole other ecosystem of services. and they have their own vetting processes, and I think, again, competition is going to be the mechanism

that actually enables better privacy, better consumer protection. And I think what we found historically with Apple, and we saw this a lot a few years ago with Beeper, which was a YC company that had interoperable messaging, and it solved the blue bubble. Exactly. Eric Mujikovsky solved the blue bubble, green bubble thing,

basically made it where it's not awkward for you to buy an Android and like, you know, Kool-Aid man into your, you know, college group chat and turn the whole thing green. Yeah. He fixed that. And, of course, you know, what does Apple do? They said, no, we're, you know, Android users don't get that.

We've got to basically reduce security to this lowest common denominator, like, you know, SMS, RCS standard. So there's no, it's pretextual. Like, we, we can have choices. We can have nice things. And little tech's trying to build it. But I think policymakers have got to do a better job. of it, you know, ensuring that the biggest players are not kind of egregiously putting their thumb

on the scale. Yeah. Last question. What else are you tracking in DC? It feels like with the AI boom, there's a lot of new company formation. I'm sure you're seeing that on the YC side, but we see it every day on the show. Are there policy initiatives to encourage entrepreneurship that you're tracking? Is there anything else on like the small business side that you find interesting these days? Yeah, I think, you know, there's, I would say where I think the Trump administration is doing a good job is, you know, they've done a lot to sort of advocate for the American AI stack and sort of encourage entrepreneurs to like interface with government and become, and they've, you know, put out sort of bids for the, where the government is a, is a buyer of these tools. and they've been very proactive and have a great relationship. You see lots of renewed interests and defense tech and dual-use tech. I think where I wish that there was more work,

and I think they could probably be doing a better job, is thinking about how do we make sure that the United States is brain-draining the world and bringing in the top talent and making sure that the smartest people in the world are building companies here. I think that that's where if I could change anything, I would say, oh, they could do a little bit better. But I would say, you know, they have been very thoughtful. The president's talked about little techs in his tweets. And I think, you know, this is not a partisan issue.

We want to have a thousand flowers flourish. But it is, yeah, I mean, I think getting the tech talent piece with the, sort of being bullish on AI that that I think is going to get and and also the competition piece getting those things right. I think that's going to put us in a position to be really amazing here. Yeah, I love it. Well, thank you so much for coming on the show. Yeah, great to meet you. Thanks for having you guys. Appreciate the hot takes. All right, you too. Cheers. And before we bring in Dan Primak from Axios, we have an exclusive clip from his interview with Kalshi's CEO, Tarek Mansoor, on the Axio show, which we will be discussing with Dan

after we play it here. It's about a minute and a half. So let's listen to this. For customers to lose. Actually, the proof of that is that, you know, when a customer wins on a traditional sports book, they block that customer. And the CFTC chair,

who supports prediction markets being legal, supports federal framework, etc., said recently that one of the, when he was asked about this, he said, well, part of the difference is that when you walk into a casino, there's all sorts of entertainment, right? They might be shows, there's food, there's drink.

So a casino, betting in a casino is different than betting Kalshi, but it's not necessarily different than betting on a sportsbook app on my couch. There's no entertainment different. There's big fundamental differences. It goes back to the market mechanic. Like one of them is essentially a product that is designed for customers to lose. Actually, the proof of that is that, you know, when a customer wins on a traditional sportsbook, they block that customers because those winnings are coming from the business model, the business itself.

If they win enough, yeah. If they're enough. Or if they win, really, if they win, and it consistently, if they do research, If they get informed. If they're good. If they're good. Exactly. And if they're not,

actually you get them promos and you figure out how to bring them back and there's kind of a bit of this sort of like, I think we call like kind of marketing tactics to bring these people back. It could be like entertainment or promos and so on and so forth. That does not exist in prediction markets. It is a fundamental difference in structure

where actually a lot of the people that win, the people that are doing research, are getting informed, that are traders do come to prediction markets. This is where the value profit is strongest because prediction markets do reward them for being right. Well, we have Dan Primack here with us today. Dan, how are you doing? Doing well, guys. Not as well probably as you are, but I'm doing well.

Thanks for being here. See you. So give us an update on this interview, what you were looking to learn from it, what you think the conversation, where you think the conversation around prediction markets will go from here. I think it was interesting. The day we did this, we did this on Monday in New York City, and it was really made an hour or two. after New Jersey, a judge in New Jersey, and basically an appeals court judge, so kind of the highest judge so far that's dealt with this, basically gave Calci the green light to go forward.

I mean, I think ultimately prediction markets are going to go to the Supreme Court. I think both Polly Market and Cali she thinks that. I also think they're probably going to win in the Supreme Court. The law really is on Cali's side. They have done a pretty good job, kind of being in step with regulators, and granted, it was a little more complicated

with the Biden administration, but they sued the CFTC. They won that law. lawsuit. It's the reason why they have elections on the platform. I think if something is going to stop or change the way prediction markets work, that's going to have to come out of Congress. So, yeah, what's the next step? Yeah, and they benefit from having their adversary are casinos and sports books, which are not exactly the kind of groups that Americans want to stand up to defend, you know, in March, it's time to hit the streets and march for the legacy sports books.

I mean, that's some of it, right? So obviously, in Nevada, which is one of the few places where Calshy is actually banned because the judge is upheld an injunction. Yeah, that's the casinos. That's maybe some regulatory capture. The other folks who are against this, though, are folks who are just anti-gambling in general. And I do think you are seeing a bit of a groundswell of that politically. And I think it's bipartisan. You know, some of the bills that have actually come out have been coming from Democrats. But for example, the state of Utah doesn't want this. And they don't want it to protect casinos. They don't want it because they don't want people betting, period. and they sure don't want it on phones where it's so easy to do.

And we did in this interview on the Axios show, which drops tomorrow, we did talk about the addiction piece of this and kind of the broader societal issues, which isn't to say what Calci is doing illegal. There are questions about is it promoting, not immorality, but is it enabling addiction? And what are the proposals for, because this is not regulated as gambling, and it seems like it will continue on that path. Is there any motion to bring some of the restrictions that apply to traditional gambling over into this new regime? No, no. And I mean, that's the complicated thing here. And I did ask them, you know, is this basically a loophole? For example, in California, in Texas, the two biggest states in the country in terms of people, right?

You can't, you know, try to open draft kings or fan duel. It doesn't work for you because it's not allowed there. Calshy that will allow you to bet. And, you know, I think Tarak or Luana said about 70% of their volume last month in March was sports betting, which is lower than it had been in February. But you're still talking about $13 billion of volume last month. So it's a big number. You know, it's a loophole. They have figured out a way to basically get around sports betting laws.

And I appreciate that the back end is different. They make a very compelling argument for why legally they're allowed to do it. And I agree with them. But the reality in the end is, if I'm betting on the Celtics Nix. game tonight. I don't really care what the back end looks like. I care about my money if I win and the fact that I'm able to do it. So is federal preemption like sort of baked in at this point? Or is there some sort of hybrid rule set where this could go back to the states and states could make their own rules? Because it does feel like there's a pretty wide set of opinions,

state by state on how different communities want to engage with this particular product. Right now, it appears federal preemption is going to win the day. For starters, the Trump administration, specifically the CFTC, which is what regulates this. This isn't regulated by the SECC. It's the CFTC. They are all in on prediction markets. Mike Selleck, who is the current commissioner, he is on the side of Cali. I assume will be on the side of polymarket when they eventually really come to the U.S. And it does make a certain amount of sense. And there There is some historical precedents here. A lot of commodities which are traded, and that's kind of what they're arguing, that these are

kind of commodities in a different name. There were lawsuits 100 years ago arguing the same thing. This is crazy speculation. The reason why I say this could go to Congress, there are two carve-outs to that. One is a weird one. It is onion futures. Onions, not pork bellies or something else, onions. Because at one point, a long time ago, there was a ridiculous, speculative, like, a lot of people

lost a lot of money on onions. So Congress passed law saying you can't trade onion futures. And I think I'm right in saying the other one is related to box office returns, which is why if you're on couch sheet, you can't bet that a movie's going to make 20 million bucks, but you can bet on its rotten tomatoes. That's so funny because I've never been like a sports better at all, but I did, I did participate in a fantasy movie league for a while that had no financial incentive whatsoever, but you would construct a hypothetical movie theater pick, okay, Project Hail Mary is going in the first slot and then they would have the box off returns, but it was all just for fun with a bunch of friends. Well, there was the old, and maybe it still exists, but back in the early 2000s,

there was something called the Hollywood Stock Exchange, which again, wasn't for real money, but people did that day. It looked like a stock market. Yeah, yeah. Do you, so other countries have created rules like, you know, you can't advertise gambling during, you know, these hours, and there's a bunch of different kind of rule sets around it, even in places where gambling is legal, do you expect any states to pass laws that say you can't advertise commodities trading platforms during... More like FCC as opposed to CFC. Basically, like, not targeting sports trading, which the Calches and the polymarkets are doing,

but effectively saying like, hey, we know these are going to be the biggest spenders and we don't want to tolerate or encourage this type of activity. I mean, you may see that and then that gets fought out in court. You know, obviously, again, you know, on the federal side, you know, it's interesting. It's not just Kalshi fighting back against these lawsuits. The CFTC itself, there's three states, Arizona. I'm going to mess up the other two. I think Connecticut is one.

There were three states who have tried to ban Kalshi, and the CFTC itself has come into sue. So I could see the FCC coming in to try to sue if such laws were passed. It would be interesting. I mean, I do think part of, well, part of a lot of betting, despite what we saw several years ago with Draft Kings and Fandul, you know, on every billboard and every advertisement, An enormous amount of this is still word of mouth. You know, people talking about it.

I will tell you, when we were doing this interview, most of the crew, you know, the camera folks and the sound folks, hadn't heard of CalShee before we did this. And when it was over, I was in the corner kind of packing some stuff up, and I heard them at the table having lunch. They were all not making bets, but they were flipping through the app. And they were talking about different bets that were on there and they were fascinated by it.

I don't forget addiction. It definitely fascinates people because people have all. always, you know, in our lifetime's been able to buy stocks. You can trade on, you know, the price of oil. Not on, you know, not on who's going to win an award or really events, you know, non-securities related events. Yeah. How do you think about that bifurcation between securities related events, non-securities related events? Has there been robust enough research on how much of prediction market activity is sports related or sort of less like possible? positive sum, more zero-sum situations.

Because I would have to imagine that the level of engagement varies by category. Like, there were a lot of people that were interested in tracking the presidential election, but that's not something that someone's doing every single day, whereas there's always a sports game somewhere. There is. So they said, again, during the interview, they said about 70% of their volume last month was sports. In February, that number was higher. There was obviously a Super Bowl in February that changed. There was March Madness last month, but not as big a deal as the Super Bowl.

70%. That's a lot, right? That's the volume. They make the argument in the interview, you know, that one of the reasons why, I mean, obviously for CalShe, that's good, right? That's more users. That's more fees. That's how they do it.

They also argued that the sports volume creates more liquidity on the platform for the more esoteric bets and thus you need sports in order to have the other stuff. I will tell you, I do get the sense that if they could have a lot of the best, you know, the same valuation and the same revenue and have no sports, they'd be fine with that and probably thrilled with it. But it's not how it works. The last thing I'd say about this, the problem or where sports could become a little legally complicated for them is this issue of entertainment, right? Mike Selleck, the CFTC commissioner, and I mentioned this during the interview. He on CNBC the other day made a comment about how, well, this is different than a casino because a casino is providing

entertainment, you know, and it was in that clip, right? There's shows and all the stuff. Well, there's not a huge, but a sporting event is by definition just entertainment, right? Whoever wins that basketball game tonight, except for the players and the gamblers, it doesn't mean anything. No, no, Goldman Sachs isn't making trades based on if the Celtics win tonight. You know, nobody is wild. I think it doesn't point 72 have a desk or there's, there's some hedge fund that I think does have a sports training desk.

Right. And that's kind of part of the argument they make. But in terms of this idea that the Cal She will put forth, which I agree with, that understands ending events and events market can help people better understand the world. Yeah. There's what? There's to be 15, 18 baseball games tonight. None of those are going to change the world, even in a tiny way, except for the people who

are in the ballpark, maybe be happier or sadder by a couple more dogs. Yeah. At the same time, yeah, I mean, I completely agree with you. But there is something about when you're about to turn on the Super Bowl and you want just a really clear read on who's more likely to win. Like, it is easier to understand just a straight percentage than, like, align and points and all of that. Like, just for a complete novice. But that's a different question.

And they'll make the argument correctly that they are not, they're just taking a piece of all the action, right? They're not betting against you. They don't care if you win or lose. They just care that you play. Sportsbooks obviously want you to lose. Yeah. Yeah. Yeah.

I had a very eye-opening conversation with the CEO of a unicorn company who I, of course, will not name, but I was shocked at how invested they were in sports gambling broadly. Like we just had dinner, we were hanging out, and they had like tons of different parlays across every different app. Sure. And they would show me like, well, when I'm in this state, I use this app, and when I'm in this state, I do this app and this app. I have to take my funds off the platform every night because I don't trust that it's not going

to get, you know, shut down. They win money doing this? I don't know. I was just like, I was just like, wow, I'm bearish on this company because the CEO is spending all their time, you know, doing, you know, 10-leg parlays on all these different apps. And you guys haven't raised around in years. Yep, what's going on?

Can I say, though, one thing I learned in the research for this, and we talked about it a bit, and I should have probably known this, one kind of user difference between the prediction markets and the sports books is that parlor. issue. And specifically, every bet on Cal She goes to the CFTC and has to get approved. And CFTC has 24 hours to approve it. What that means practically is while you can take a bet on the game tonight, because you know there's going to be a game tonight, you can't do what you can do on draft Kings say, the next pitch is going to be a ball. The next pitch is going to be a strike. Because there's obviously, you have that 24 hour. They don't know there'll be a next pitch

necessarily. There's a little less real-time sports betting than there is on sports books. But because they know the Super Bowl is going to happen and they get that contract approved in advance, you can live trade that contract up till the last second of the game. And so that does satisfy a little bit of that, which is, again, much higher frequency than, oh, I want to gamble on the Super Bowl. I'm going to fly to Las Vegas, place a bet at a counter, wait in line, sit down, watch the game, go and collect my winnings. It's a very, very different equation. How have you processed just so it feels like we all just agree that gambling is addictive and I think that's reasonable. I don't know where that comes from, whether that comes from like science or law, but it all feels reasonable. But we're going through this again with social media, whether social media is addictive.

How have you processed the social media addiction trials and then the new gambling app addiction question? Like are these linked at all in your mind or how have you been processing the social media question? I mean, I'm obviously not a doctor. I don't think you guys are doctor. I mean, there's definitely, we've all, I think, read about kind of the dopamine hits and look, that you get from not posting on social media, but when you get a like or when you get a reply on social media. Gambling, I mean, there's obviously a dopamine hit when you gamble, right?

You know, your person hits the basket. You win the game. You get excited. I mean, obviously, if you have a lot of money on it, you get excited for different reasons. But just even, you know, I'll admit, I use some of these sports betting apps sometimes when I, if I'm watching like my hometown team play. Dirty Dug. Dirty Dats.

Dirty Dan. New England Patriots? Maybe a few times. The leagues knew what they were doing, right? They knew that if there's a blowout, you generally turn it off. But if you're waiting for your guy to get 20 points, well, you might stick it out a little bit more. I didn't realize that. I didn't realize that.

But so back to the social media question, have you been tracking any of that and what that means for the venture community or startups or really any knock on effects that you've tied to the trial? because there was that decision in Los Angeles. The actual fines for YouTube and meta seemed very low, but it was the whole chain of more cases coming. And it just felt like the first time we actually had a full decision that the judge said, yes, this is addictive. Right, so right, the lack of money is notable, right? Because it was also a single plaintiff, right?

So, I mean, for theory, that's a lot of money for one person. The big question going forward is, can an attorney or can a group of attorneys get a class together? And you've seen a bunch of advertisements. I've seen a bunch of advertisements all over the place. You know, were you harmed? Were you under 18? They're clearly trying to put a class together. A judge would have to certify that class. That's, I think, what meta, YouTube, et cetera, are worried about, understandably worried about because it's one thing to have a single plaintiff, but that sets a little bit of a precedent. If you can have that same case with 100 plaintiffs or a thousand plaintiffs or 10,000

plaintiffs, that money then starts to become real. And I think that's kind of the next step here. And we have to see if lawyers can get that class together, if a judge will certify them, and then whether another jury and judge will go along with what we just saw. What are you tracking in the venture markets broadly? We were going back and forth on the impact of golf money. Yeah, we were asking you about potential impacts to, yeah. Fundraising outside of, in the Middle East, even then you said, I believe. Like, well, we're in sort of a new cycle of like the AI is not a bubble thing, but how are, how are venture funds processing and how are LPs thinking about it? Like, what are you tracking? Yeah, on the Middle Eastern side, it does not seem that money flows have really stopped.

It's been explained to me is calls sometimes take a few more days to come back than they were. Things aren't quite as instant. But there's been nobody who said, you know what, we're shutting off the spigots for a while. Call us in June. Like, that hasn't happened. And to be honest, even the last week or two, you've seen some. deals and agreements that have come like with Saudi Piff, not just limited partners into venture capital funds. There was a big private credit partnership that got announced yesterday, I think, with Saudi Piff. So clearly deals are still happening. Venture fundraising as a whole, though, has become, it's not even become. It is still really bifurcated, right?

You still have the haps and the have-nots and these massive multi-stage firms that are gobbling up most of the money. And on the AI bubble side, I mean, every, it's funny, almost every venture capitalist, and certainly the industry as a whole, is just, looking at three things, right? The IPOs of SpaceX, Anthropic and Open AI this year, right? Because that can, those, if successful, can solve all the problems that

they've had for the last several years. And SpaceX goes first. Gambler's mindset. Make it all back in one trade. Well, it used to be VCs. You used to talk about home runs. This is now like the grand slam in the bottom of the ninth to win the World Series, right? And everything else. And that's what they're banking on.

And there's not a huge IPO pipeline, for example, other than that. We had a story meeting this morning, and somebody asked me, well, with the ceasefire, does that mean companies that were prepping IPOs are going to start back up again? I didn't see a huge number of companies that were prepping IPOs. There were some, but it's not like there was, it's not like from Liberation Day last year when you had five or six companies that were ready to price and then stopped. There's not that much out there right now, again, outside of those big three.

Yeah. Yeah, I mean, the ones that I can think of that are maybe more at the Figma scale, are just looking at Figma's track record in the public markets and thinking like, I'm not as good of a business as Figma. And I don't expect to be treated any differently. And when the stock popped, a lot of founders were thinking, oh, if I can get that multiple, I should be public today. Yeah, I'm thinking like the ripplings and the deal.

Yeah, all those companies look at me. Deals got its own issues, I think, which might be separate. But by the way, this isn't just a venture issue, though. Private equity firms, which, you know, more mature, floor growth, but more mature companies, they haven't been taking their stuff out either. And they don't have anywhere else to go except sell to other private equity firms. It's just this broader non-IPO issue right now. Yeah.

How much are you spending, are you spending time tracking the data center ban that Sanders has proposed? It's also a bunch of different states. It's a bunch of different states. We had a big AI event in D.C. two weeks ago. And I wrote about this a little bit. And on the sidelines, I spoke to the CEO of Constellation, which is one of the big electricity providers, the data centers.

And I asked them, this was, whatever, three weeks into the war. And oil prices were spiking. And I said, how much, you know, what's this doing to energy dealmaking in the United States right now? Just the rise in oil prices. He said it's having a little impact. He said it's the data center ban proposals that are having the really big impact. That's what has people freaked out. I mean, Sanders on the national level, you're not.

going to get anywhere nationally on this. But on a state-by-state level, you don't need much. You need a couple states to do it. It is something that opponents have done a really good job on the PR and the industry has done a very bad job on the PR on this. And it doesn't help that everybody's gas prices and home heating oil prices and places where that's relevant. And electricity prices are all going up. Iran is obviously exacerbating it. But if you're looking at your bill and this is something that is top of mind, well, the bills are only getting getting higher. What do you think the impact of the war in Iran will be on defense tech investing? I wrote about this today.

We have to see what happens, right? It's a pretty fragile piece. It's unclear whether Hormuz is even open or not. Now it was maybe it's not. You know, what I wrote this morning was, I mean, I thought a lot yesterday after Trump's civilization tweet, right, that if he really went through with what he said, and I know some people are making some odd arguments that, oh, you know, well, it's either a nuke or not. not a nuke. No, there's a lot in between, right? You bomb some major power plants that are for

civilians or desalination plants or the power to desalination plants and people don't get water anymore, let alone can't do crops or feed or feed animals, etc. I think, you know, defense tech has boomed in terms of venture capital, which is such, there was almost none of it, you know, seven or eight years ago and there's so much of it now. I think it could have turned Silicon Valley again back against defense tech if the United States had done something that a lot of people viewed as a war crime or at least as inhumane. I think the fact that we have a ceasefire and Trump didn't go through with that, I think is probably a bit of a save for defense tech in the midst of a boom. I think you've got this huge upsurge in all sorts of defense companies that

could have actually come to a halt pretty quickly. Not all firms. And Dresen still would have invested. Founders Fund still would have. But that broader swath of venture capital that fills out those rounds, I think might have slowed down if the military had done something or the Pentagon had done something that a lot of people viewed is morally indefensible. Yeah. Something I thought was notable is that the American version of the Shahed was a government program and they used some private, you know, contractors for it. But the smartest defense tech play three years ago was just to make the Shahad.

Copy the Shaheed. And make a lot of them. And it seems like no company actually had the, had the foresight to do that. and it ultimately had to be led from the DOW. In the way, I guess. Yeah. Interesting. And by the way, I haven't looked to see what's happened with the stocks,

but I mean, something that is going to have to happen, no, it is going to have to be fired, no ceasefire. The standard munitions stockpiles are going to have to get refilled, right? We are using a lot of bombs and a lot of stuff. That's going to have to all get refilled. And I know, you know, Palmer Lucky and all others have talked about how we don't have enough of that prior to all of this happening.

And that, you know, that, you know, that's, you know, that stuff has to get done. And there's going to be people who sell that. Yeah, that makes a lot of sense. Well, thank you so much for taking the time to come chat with us. The Axio show is live and available everywhere, I'm sure. Go check it out. And we will talk to you soon, Dan.

Have a great rest of your dad. Yeah, thanks for a good. Good rest of the scoop. Great to see you. Thank you. Up next, we have Lior Susan from Eclipse. He's the founder and CEO. We'll be talking to him about.

Eclipse's $1.3 billion raise as industrial tech shifts from innovation to scale production. with companies like cerebrus and bolts and forms. How are you doing? Doing well. Thanks for having me. Welcome to the show. Please kick us off with an introduction and some background. Yeah, it's great to be here, first of all.

Love your show. Yeah, we started a film 11 years ago. All operators that left their job building companies in the physical world to build a film that we can build more than one company at time. As you can guess, it was fairly controversial 11 years ago to talk about defense manufacturing, chips, mining, et cetera. It feels like a little bit less controversial right now. And yeah, we grow the firm roughly to a 10 billion dollar a UM and we just announced our

raised of 1.3 billion. Let's hit the goal. Good place to start. What was the prehistory of the firm? How did you get into investing? What was the first deal? How big was the first fund? Tell me some background.

Yeah, first one, $125 million. Feels like many moons ago. That's not bad, though. How did you set that up? I feel like a lot of people start at 20 or 50. 125 is not bad. Yeah, the ignorance was the power. I never invested a dollar before a clip, so it might be that one.

I grew up in the military. I went to the Special Forces. Then I did a company in the networking space, Cichcoa. They moved to live here, spent three years with McNamara while he was the CEO of Flextonics. fall in love in U.S. manufacturing and felt all of my friends in Silicon Valley can only spell the world's enterprise software. And I know nothing about enterprise software. I don't like enterprise software. And 85% of the world GDP is physical industries. And I felt it's kind of weird

that everyone is telling me you need to go after big markets, after big Tams. But everyone is following their friends into the enterprise software while those 85% of the world GDP don't have a platform and left to start that platform. Talk to me about the cerebrous investment. How did you meet the founder? It was one of these companies that I'd heard of, and I'd seen a lot of negative takes saying that it was the wrong path, that it wouldn't apply to where the current models are going, and then I tried it, and it was really fast, and it just felt, like, magical.

And so I was all of a sudden converted to be very excited about the company, where before I was sort of uncertain about how it would pencil out. It felt like there was a lot to be done, but you obviously invested early. How did that come together? Yeah, we've been around the company for not 10 years. Wow. It's been a moment. That's remarkable.

Yeah, exactly. But, you know, like a lot of our companies and I think a lot of those companies in that space, it starts by a fundamental view. Sure. That wafer scale integration, basically the short version, you take the entire wafer and you interconnect between the core. you know, when we have an idea of a chip is essentially it's a square, but it don't come from the machine like that. It's actually come as a rounding and then we cut it into squares, into chips. The idea here is you take the entire wafer and you connect it to a lot of the chips and you create essentially one very large chip. And naturally when we made the investments in

2015, we didn't know AI will be exist. What we did know, because we built by ourselves as an operators, chips and factories and fabs, we knew that Mars law is going to hit the limit from physics point of view. We're going to, we're in two nanometers already. You know, let's assume we can do one nanometer. That's about it. There is nothing after that. Yeah. And we were looking for a new physics. And new physics mean, hey, should you, can you connect to a lot of those cores in order to create a one big chip? And we decided that we are going to take over companies like Nvidia and others, and it was not easy, but I think now we're extremely excited about the company and the growth of the business.

Yeah, yeah, it seems like it's in a fantastic position now. Talk to me about Vulcan forms. What was the back history there? Yeah, in some way, same story. Physics, start with physics. In the case of Vulcan forms, we are manufacturing high precision metal parts. Sure. And, you know, historically, a lot of those machines being using one, two, three, maybe four lasers.

we are using 160 laser fiber into a single head and we melt powder really, really fast. And the heart powder was like how to control something that it's so powerful. It's actually, we got a call from the US DOW many years ago and asking ourselves, Babeske started to investigate why we are buying all of these lasers because it looks suspicion for them.

We're like, no, no, we're just building metal parts, nothing too sketchy. And yeah, a company booked multi-billions of dollars deals last year and a billion-dollar deal the year before. And Kevin Kaskill and the team there is doing a phenomenal job. We're building now four factories in U.S., scaling the operation to build high-precision metal parts for medical devices, consumer electronics, airspace and defense, it's others. So, yeah, it's a big fund. You're using Wii. I imagine you take board seats.

You lead rounds. Is that roughly correct? Like, where, how many companies do you want in the portfolio? How deeply do you want to be involved? Do you try and pick a single winner in a category? Or do you look at more like secular trends and try and get, you know, a broad exposure to the whole category? What's your thesis? Yeah, we, so we, you know, our LPs put us in the venture bucket and then in the growth bracket.

Sure. When they're thinking about how they are allocating capital, those U.S. endowments and foundation. We call ourselves operators with capital. We are all operators and founders when we build those businesses alongside the management team. So we actually do very few deals every year and we have actually a small amount of position

in each fund. And I'll say roughly, we incubate one third of the companies and two-thirds who will lead C, C, C-S-A, series B, series C, C, C, R-D, whatever it is. We only lead. We always take a board seat and walk very, very closely

to the management team and tell you the truth, I'm enjoying more building companies than investing in companies. So regardless if I end up investing and maybe it was not my idea to start the company, I want to feel like I'm part of the management team building those businesses. That's my passion. Jordi. Very cool. Where do you think robotics is overhyped and where do you think it's underhyped right now?

Yeah, actually I wrote something on my LinkedIn maybe last week that says it feels a little little bit 2021 in eclipse sectors. We'll start seeing some of the bad behavior that maybe wasn't the enterprise software in 2021 happening now in our sectors. You see those companies raising a billion dollar out of the gate or some crazy valuations. Yeah, or doing, I'm assuming there's instances where a company, you guys may have backed a company in a category, you know, eight years ago. And then a new company gets formed in the category. And, within six months, they're valued at the same price, even though there's wildly different from a kind of technical progress standpoint.

There is some of that. I mainly goes back to first principles. As a person, as an entrepreneur that like to build companies, I think, you know, there is a way to build companies. There is for sure a way to build companies in the physical world. You talk about building factories. You talk about supply chain. You talk about capital.

You cannot all like, you know, push a full max out of the gate, burn really fast because you believe the contracts will come and you believe that always the markets will be there to fundraise you. So we're just, you know, trying to bring some sort of a discipline of how to build those companies. But, you know, goes back to your questions on robotics. We've been doing robotics for 11 years now as out of eclipse. and we, a lot of us did robotics much before in our operating life. And I think, you know, we are now crossing the chasm with robotics, moving from a control-based PLC, very accustomed to a much more general purpose, much more using physical AI.

And as a result of that, we'll start seeing adoption on the commercial side that is super exciting. From your position on boards, I don't know how much you can talk about this, but I'd love to know your view and expectations for the IPO window. We were just talking about it with Dan Pramak. A lot of attention paid to the big three SpaceX, OpenA. Anthropic, but what else are you seeing in terms of how companies are gearing up for the IPO window? I mean, I think it's interesting, right?

Of course, SpaceX, I think arguably even Open AI on Trenatropic have a much closer part of the business to what I built. maybe the traditional software that kind of was leading the chart. Yeah. I think real assets going to have a great moment in the public market. I think people value, you forget, it goes back to the 85% of the world GDP. The reason SpaceX can have that type of an NIPO is because they solve something that it's really, really hard. Yeah.

So it's really, really hard for the second person to solve it as well. I think the reason you will seeing the correction in the SaaS world is you had a lot, of companies, the entry is very easy. The time is not too big, and as a result, the public market correct. So I do believe we're going to see quite a lot of companies in the semiconductor world in the space and the AI infrastructure in the data center's world going public in the next 18 months or so. Yeah, what are you tracking in terms of trends in the lunar economy?

It does feel like we're at a turning point moment with SpaceX and Starship coming online. There's lots of interesting... You mean space economy, right? The lunar economy doesn't quite exist yet. Orbital economy is the buzzword I was talking about. It's fine. It's the eclipse name. Confucius. Yeah, yeah. Any variation from low Earth orbit to beyond. Some of this stuff, when you talk about mass drive around the moon, it starts to seem

10 years away, 20 years away. Harder to underwrite, harder to think about. But maybe as a venture capitalist you can start thinking about it. What are you looking for in just space broadly? Yeah, I mean, I think when you think about Henry Ford, when we created cars, there is so much economy that is being developed and so much GDP that is being developed by the ability to move people much faster than you can move before. I think, you know, we are going to see something similar with the increase of our ability to travel to space and lowering the cost significantly. And as a result, we're just going to see a lot of new businesses being built. We are partnering with an amazing company called True Anomelated, building space defense prime.

So, you know, it's not only you're going to travel to space, you're also going to have conflict in space. We are seeing a live one, maybe a ceasefire, with Iran right now. But, you know, I think since I mentioned his name, I said on an interview yesterday, I used to say that this is the best time to build in this country from Henry Ford and Carnegie or post-World War II and actually change it to this is the best time to build in this country pre-ute in the companies that I'm passionate about. So I'm just extremely excited to have the capital and the relationships to go and build as many companies as we can. Well, congratulations on the fundraise. Congratulations in the progress.

And thank you so much for taking the time to come chat with us. We'll talk to you soon. I really appreciate it. Great to hang. Thanks, folks. Have a good one. Cheers. Thank you guys.

Up next, we will be revisiting the Axios NPM package hack that happened, the supply chain attack. NPM, of course, Axios NPM was downloaded 100 million times per week, and it was compromised by North Korean threat actors. We talked about a little bit on the show last week, revisiting it with Farras. Abukadija. I hope I pronounced that correctly. What? The problem? Is that right?

Yes. So. We can ask you. We can ask him, Socket detected the malicious update within six minutes. And we are lucky to have Ferof's join us. What were you guys doing for the six minutes? So sleep at the wheel? No, no, no, no.

Definitely not asleep at the wheel. It takes time to download packages, scan them, put them through our battery of tests. So I think six minutes is actually pretty good. No, no, it's fantastic. But yeah, maybe zoom out and tell us about like the actual process that Socket runs, your business, how the system works and how you're able to detect supply chain hacks and cybersecurity threats so quickly. Yeah, totally.

So So So socket was among the first to detect and report on this incident. We built a system that, you know, goes out and downloads every open source package in existence within a few seconds. So we support about 19 ecosystems. And this includes really all sorts of third-party code that might be, you know, used to build applications today. It includes things like your AI models, your, you know, your open source dependencies, even your editor extensions, your Chrome extensions, like really any code coming from, you know, third-party sources.

And we put it through a battery of, you know, really intense static analysis, maintainer behavior analysis. And then, of course, a bunch of AI and then human researchers as well. And we try to help kind of make a determination. Is this something safe that you want to use, you know, within your application or within your organization? Yeah. So can you talk about the shape of the threat that was posed by the Axios supply chain attack? Like, because there's a wide range of, you know, zero-day exploit that gives you full access to someone's device or computer or system all the way to just something that, okay, it would crash if this was, if this exploit was used, right? Yeah, I mean, maybe we just start from the beginning and summarize the attack for folks.

Yeah. So, I mean, there was a North Korean state actor that. socially engineered the lead open source maintainer of the Axios package. And it was honestly quite a sophisticated and impressive effort. They posed as a founder of a fake company. They created a fake Slack workspace, invited the maintainer to join it. They staged a fake Microsoft Teams call. And the website was made just incredibly compelling.

They used the official SDKs from Microsoft Teams to create. create really realistic components in the page. They joined the call. And, you know, by the way, this is, they also developed a relationship over the course of, you know, weeks, right? So this wasn't like a, like a, you know, a situation in which you would expect to be on guard or on defense. And at some point in the call, the call just cuts out.

And the browser says, hey, you know, you got to install an update. And it gives them a binary file that they're, you know, told to install. And so this, you know, this maintainer thinks. okay, I guess I got to install this update real quick so I can get back into the call. And it turns out that's how they compromised their device. So it's not just like a fishing link or something like that. I mean, this was a targeted attack. They also targeted me and a bunch of people at our company as well.

So they targeted a whole bunch of the top NPM maintainers who have access to a lot of packages. Interesting. Then in terms of once they get control over, they fish a particular credential, a particular device for a developer who has access to push changes to a package like Axios, what are they actually changing in Axios to create a vulnerability in the supply chain, in the software supply chain? Yeah, so they publish poisoned versions of the package that silently install what's called remote access Trojan, which is basically a way for the attacker to just remotely control

your device and basically do whatever the attacker wants. It's like they're sitting in front of your computer on the keyboard, you know, typing whatever they want onto your system. And what they did with it was they kind of pulled all the most interesting files and credentials off the system. So things like if you have a crypto wallet, like they're taking the keys for that. They're going to definitely want the crypto. If you got, you know, if you're logged into NPM, right, they pull those credentials

so they can spread like as a worm and kind of continue to infect the next set in the attack, right? So it's actually like this self-replicating kind of cycle where they get these credentials and they use them to go on to the next stage. And, you know, yeah, and then, you know, this is, I mean, the thing I think I want to emphasize here for people is this isn't just an isolated incident because this has been kind of the most recent blow in this kind of series of compromises and attacks against the software supply chain that has been happening really over the last six months in a really intense manner.

And we've seen it really pick up in the last month with team PCP compromising aqua security and the Trivy scanner, and then that cascaded into light LLM being compromised. Another security company checkmarks was compromised. Yeah, what happened with light LLM and how, like, do you have a good sense of how that contributed to the breach at Mercor? So it's part of the campaign of Team PCP, so they dropped the same kind of self-pigating worm called canister worm into the package. And what you have to realize is once you run a compromised open source package on your system,

you know, you kind of have to rotate all your credentials, like all your tokens and keys and passwords. And it's a really hard thing to do very thoroughly and very completely. And so I think that we're going to see a long tail over the next, you know, probably 12 months of follow-on attacks from this set of compromises. because the group claims, Team PCP claims that they've stolen 300 gigabytes of compressed credentials. So that's, you know, that, I mean, think about that, 300 gigabytes of stolen passwords, API keys, GitHub Action tokens. I mean, they're sitting on so much, it's like a gold mine in terms of like what's going to, what's going to follow on from this.

So I think it's not surprising that, you know, that you're seeing companies affected, right? Yeah. So why the boom in the last six months? It feels like it must be tied to vibe coding or AI agents. Is this that they have more powerful tools so they're able to do more damage? Or is it because our systems are getting weaker because we're pushing more vibe code to production? Is it both? Like what got us to this place where we see this takeoff in cybersecurity threats?

Yeah. Well, you're absolutely right. It's definitely become a top concern. I think we're hearing at a lot of our customers and prospects that are contacting us that this has now become a board level concern. You know, everybody is asking, how are we not going to be affected by the next one? Yeah. So I would say that, you know, fundamentally, like, if you really zoom out and ask, why is this a product,

like, why is this happening? Yeah. It's because the whole software supply chain is built on blind trust. Yeah. I mean, you're downloading code from random people on the internet that you've never met. You don't know who they are. like, let's just run it, right? Like, let's just hit run and like, I hope it's fine, you know, I hope it's good, you know,

and I'm going to give it full access to my system, right? No permissions model, right? No review. No one looks at the code, right, before they run it. And unlike an iPhone app or, you know, mobile phone app where it has to ask for permission to do sensitive things like access your camera or your microphone or your location or your contacts or your files, right? Open source packages just get everything.

You know, you just run them. They get everything. So, you know, also there's this asymmetry in security, and this has always been true. So this is, you know, kind of more of the bigger picture, you know, part of the bigger picture here is that defenders have a much harder job than attackers because they have to guard against really all the ways that you can possibly get attacked. And the attacker has to just find one way in, right? So it's asymmetric. And so when attackers realize, hey, look, you know, open source, the way that companies use it has changed in the last decade. we no longer use just a handful of components like WordPress,

Apache, PHP, you know, these kinds of big components. We actually pull in, in some cases, it's like a thousand open source libraries just to get Hello World to show up on the screen, right? Yeah, yeah. It's crazy the diffusion in the number of these things. So, you know, they realize, look, I could just attack one of these things, one of these libraries, and I can get into a company. Like, that's so much easier than attacking head on and trying to hack the company directly, right?

I can find one of, you know, and we have customers, by the way, they have 500,000 plus open source components in their environment. So just think about that, right? Any one of those is a way into the company. Yeah. Yeah. The funniest package is even. It just tells you if a number is an even number.

And it's a, and it has one dependency is odd because it's a, everybody loves that example. Exactly. It's a great example. Tell me more about the shape of your business. I mean, it seems like you're getting a lot of calls from companies and boards. Like, what does it look like to. work with you? How are you plugging into companies? Do you have a business line around going and hunting bug bounties? How should I think about the business of Socket these days? Yeah. Well, look,

people contact us when they want to get their software supply chains under control, right? So right now, what that looks like is companies that are deploying AI agents and AI coding assistance across their companies have one big question in their mind, which is, you know, how do I know what my agents are doing. How do I know what my developers are doing with those agents? And that is the problem that we help them get under control. So the way to think about Socket is we are a software supply chain defense company, right? We protect your software supply chain. So when an AI agent is making a decision to go and install something in order to accomplish the task that's been given to it, you know, it will go through socket first.

So we are the guardrail to ensure that no malicious components get installed. And if you take a concrete example, Axios, the attack we've been talking about, that malicious package was live for about three hours, meaning, you know, anyone who was asking their agent, like, hey, go build me whatever, right? Doesn't matter what. One of the first things, it's probably going to grab it because it needs to do HTTP requests. It's going to say, oh, Axios, right? And, you know, so the question.

is how do we, how do we, how do we before that gets taken down, right? Before the, or even before the community is aware, how do we defend our organizations and our applications from those, those packages that have had these implants, right? And, you know, and, yeah, it's, it's really top of mind for people. I would, I would say it's, it's kind of become like a, you know, number one concern for CSOs and for boards. Yeah. What, what, what is your view on cybersecurity as a category? I think a lot of, you know, we've talked to people. on-air, off-air that we're surprised about the sell-off in cyber due to LLMs, just because LMs themselves are creating all of these new threat vectors, and so there was kind of a disconnect

there, but what is your sort of more general outlook on the category? I think in the short-term, security is going to get worse. It's going to get harder. So I think actually, I think the, you know, the answer is really the opposite. Like companies and products and, you know, things like socket are actually more needed than ever before. You know, with mythos coming out yesterday, you know, that's going to find a ton of vulnerabilities and, you know, it's finding vulnerabilities all across the software supply chain. And so, you know, the, you know, I think, you know, more vulnerabilities discovered means there's more urgency to fix the ecosystem and it becomes, it goes from being, you know,

a lower priority on people's lists to a higher priority. And so I think, you know, the short to medium term effect is going to be massive awareness. It's going to be supply chain security becoming more top of mind for everybody. That's obviously great for us as a business, great for the ecosystem, because I think it's hard to invest in things and get justification for budget if you're a security leader, if you don't have a fire or an emergency to point to. And so this really helps there. I think longer term, you know, we have to see. I think, you know, ultimately I think AI solves the asymmetry problem that we were talking about earlier because for the first time defenders now have an infinitely scalable army of AI agents doing their bidding and doing continuous security analysis. And that's all work that would have been way too expensive or impractical for their humans to do before.

And so the attacker's advantage of only needing to find one way in starts to erode when the defender has the ability to kind of continuously audit everything. And so I think longer term, once we get through this rough period, I actually am very optimistic about, you know, security improving. But one thing I will say is, you know, with security, one of the reasons I love the field and why it's such an exciting field to be in is that, you know, it's a cat and mouse game. So it's a dynamic system. So it's not like architecture or bridge building where you know, you learn the rules of physics and you know how to build a bridge that's going to withstand gravity and these forces that don't change. You know, in security, the minute you think you've got things under control, you know, the attacker evolves, the attacker switches their strategy and they have access to the same AI tools that the defenders have. And so, you know, it's really a field that is, I think, always going to be growing and always always going to be, you know, a great business to be in. Has a cybersecurity company ever got caught, like sort of larping as a hacker group in order to drive demand?

You know, sort of like hacking a popular company in order to drive demand for their product. Because you said, you said CSOs oftentimes need to be able to point at a fire to justify budget. You know, that's super funny you asked because that was always the conspiracy theory that folks had about the antivirus companies back in the 90s and the 2000s was that they, They were the creators of the viruses so they could sell you the antiviruses. You know, but, you know, create the problem, sell the solution. Yeah. I mean, you know, I think, I think that I'm not aware of any companies getting caught doing that. I think there's enough bad guys out there that have realized the opportunity sitting there in plain sight that I don't think that, you know, you got to go to conspiracy theories to kind of explain why attack.

No tinfoil hat needed. Yeah, no tinfoil hat needed. Yeah. I mean, how do you think about these economic impact assessments? When Axios, I feel like everyone jumped on it very quickly. Andre Carpathie shared that he didn't have the repo pinned, but he hadn't updated, so he was able to dodge it for that three or six hours, right? So a lot of people got lucky, but do we have an idea of like the actual toll that that particular attack had?

Because it felt like the number could have been very huge, but a lot of people were able to get to it fast enough that there wasn't necessarily a massive crypto breach or a massive PII beat breach. But do you have an idea of like how the industry is thinking about the size of the scale of the economic impact? Yeah. Well, I don't have an economic dollar amount for you. But if you look at the number of downloads per week of this package, it's 100 million weekly downloads, right? Yeah. That, you know, you figure, you do the math on that and you figure out like what does that mean across?

that three-hour window. I mean, you're talking hundreds of thousands of people who installed it. And that's, you know, across CICD environments, local laptops, that stuff that's been shipped into production. If you take, you know, another metric would be, you know, how many folks have reached out to socket, you know, in the 24 hours following that attack to become a customer and make sure that, you know, they could use our tools to assess whether they were affected and to protect themselves for future attacks. We had almost 2,000 organizations sign up for an account in in a 24 hours. Yeah.

Yeah. Which, you know, to put in perspective, it's a, you know, it's a significant percentage of all, you know, our full user base. So, you know, I think this is very, very widespread. And this is the thing about the supply chain, right? It's like, it's really not a matter of, like, if you're going to get hit. When you're talking about these very, very widely deployed dependencies and, you know, including even some of my own code, right? I know I have these, you know, you picked on is even.

You know, I have some code that is similar to that. a little bit less, less outrageous of an example. But, you know, and it's in, it's in, you know, probably almost every No.js app. And that's just how, it's just how the supply chain works today. So it's really not surprising that, you know, everyone is going to get hit by this eventually, right? Yeah.

Well, thank you for coming on the show and breaking it down for us. Yeah, really appreciate everything you're doing. It seems more important than ever. And so have a great rest of your week. Come back on soon. We'll talk to you soon. Thanks, guys. Goodbye.

Next, we have Kasim Mithani from Dept first announcing a big round. The company also launched its first in-house model DFS Mini 1, focused on vulnerability detection and smart contract. We'll bring Kasim into the DBPN Ultrigan. How are you doing? Hey guys, I'm involved. Thank you for having me. Of course.

Good to see you. Nice step and repeat behind you. Are you at an event or is this just your normal background? This is like my background. Amazing. We had like an amazing event with the mirror of San Francisco and we got this for. for that. That makes sense. Well, since it is first time on the show,

please introduce yourself and the company. Yeah. My name is Casa Matani. I'm the co-founders of the first. We are building intelligence to discover triage and immediate wonderabilities at scale in an enterprise environment. We just

raised a $80 million series B round from Meritech. When did you raise the last round before this? We raised in early January. So it's been less than 90 days. And the reason why we raised it was because we're seeing so much traction.

Customers are seeing so much value from our product. And we're doubling down on our research efforts like you mentioned in the top of the segment. So we are investing really heavily on training and fine-tuning our own models. Let's talk about the customer impact first. What are the companies that are using your service and, and plugging in and getting value and sort of walk me through the user journey of actually working with you. Yeah, that's a very good question. So we work with some of the largest companies in the world, Fortune 500 companies.

We also work with really fast-growing startups ranging from companies like lovable, ClickUp, SuperBased, like the top names in tech. And the way they use our product is that they connect their code repository and their environments. So they're staging and their production environments. And then we go, our agents go and figure out how the application is supposed to run and then deviations from the expected behavior. So they figure that out. They replicated in production. And then they give like remediation instructions to agents and developers. And on the research side, walk me through building an in-house model.

What was special about that? Did you have to use, I imagine you didn't do a whole base pre-train yourself. but what is unique about the model and what were the keys to success? Yeah, so, you know, we, when we started a company almost two years ago, we really believed that software security is a very deep problem.

Now everybody in the market seems to realize that, but back then, people thought that, you know, the crowd strikes and the follow-all tools of a monopoly in the market. But in the age of AI, as code is being ridden faster than ever before, and attackers are already leveraging AI to exploit vulnerabilities,

a new type of solution needs to exist. And that's what DeFurt is. So we invested very heavily in building a world-class research team. My co-founder, Andrea Amici, comes from Deep Mind. He spends seven years building reinforcement learning there before LMs were sexy. This is like back in 2019. And my other co-founder, Danielle A was a co-founder of Fair Wholesale. And before that, he led security at Square and Cashab.

So that's our background as a founding team. And then we also have like some of the top researchers in the world working with us. In terms of like building our own model, we used GPTOSS as our base model. And then we took vulnerability data. We planted flags. And then we had the model try to find those flags. And then we used an RL loop to basically improve the model's performance. And we were able to do better than Opus 4.6 at one tend to cost in this particular benchmark.

That's very cool. What was your reaction to the Mythos news yesterday? it seems like really remarkable results in bug finding and vulnerability, tracing, lots of partnerships. How did you process the news? What are the key takeaways? Yeah. I mean, I think it's amazing news. It's like validation that security is such an important area in the age of AI, something

that we believe for two years, you know, the reason why I work 16 hours a day is because I believe that in the age of AI, like, you know, software needs to be secure. So I'm really happy Anthropic is investing in this. And Anthropic is also one of our partners. So we work with Anthropic, we work with Open AI, we work with DeepMind, work with all the labs. And our products sits on top of that. So we use the best model for the use case that the model is good at. So we use 4.6 for code analysis.

We use other models for capturing the flag type of vulnerability detection I mentioned. So it's good news overall. But in an enterprise environment, complex enterprise environment, you need to adjust all types of data. You need to figure out the cloud environment, how the software is deployed. You need to figure out if there's a firewall there, if there's a WAF there. And our product ingests all of that data and then gives like actionable wonderabilities, the ones that really matter to our customers. And then with a click of a button, they can just fix it.

So we see that as being a significant value add for product. Talk about the decision to plant the flags yourself versus what it appears Mythos did was just look, across every single open source project and just sort of maybe brute force a bunch of vulnerabilities until they found bugs all over the place. And it seems like they were able to find a lot of different stuff by just throwing every possible hacking technique at every possible open source repo. Is that the correct way to think about that strategy? And then do you think you'll wind up doing something like that in the future?

So we did both actually. So we run our product, our model on open source too. So like we found hundreds of bugs. we're just just once really disclosing them because we don't want to get them out there so that doctors can exploit them

so we found vulnerabilities in Chrome we found vulnerabilities in like Linux like in really deep you know software that's existed like not very heavily used products

no only the most used products only the most used yeah yeah so and that's helped us improve our product

and we have a team of world class security researchers on staff yeah so people who hacked iPhones for a living. Thankfully, they're working for us.

But like those types of folks who are going and validating the results and then helping us improve the model based on that and improve the product and the model. Well, thank you for everything that you do. We need more white hat hackers than ever very clearly. We were just talking about the Axios Hacks. One final question, Tyler, on our team, wanted us to ask, why not use, are you fine tuning on any of the Chinese open source models? or do those scare you?

We are experimenting with some of them, but you're an American company, we would love to use American models. I met Jensen Huang yesterday, and it was so amazing to see the investment that's going in in this area, especially in training open source models. He's going to do open source models too, right?

Yeah, yeah, so we're very excited and we're partnering with NVIDIA, and he loved our vision. He thinks that in the age of AI, I mean, as agents are everywhere, security is going to be extremely, important. So he's completely bought in to our vision and he's really excited about it. Yeah. Very cool. Great to be. Congratulations in the progress in the round. We will talk to you

soon. Have a good day. Thank you. Talk to you. Goodbye. Thanks, getting good. Bye. Up next, we have the co-founder and CEO of Mutiny. Mutiny just raised $72 million from Sequoia Capital and Y Combinator, reaching eight-figure ARR. Whoa. Bring in Jolet, Rose from the waiting room into the Ultram. How are you doing? Good. How are you? We're good. Thanks so much for joining the show. Please give us an introduction of yourself and the company.

So I'm Jale. I'm the co-founder and CEO of Mutiny. And yesterday we announced the new Mutiny, which is an AI agent that companies like Rippling and Snowflake use to create anything customer-facing in order to get a deal from cold all the way to closed. Okay. Yeah, walk me through. I mean, what does that actually mean? Add assets to landing pages, battle cards, like, walk me through the workflow of closing customers in the modern era. Yeah, absolutely.

So starting out, you probably want to warm up the accounts in a particular vertical. And so our customers will create personalized vertical campaigns. And then from there, once, you know, the SDR is involved, they want to start prospecting and get meetings with the right people. so they can make prospecting pages in Mutiny. The agent can even research the specific people that they want. They can pull in data from their CRM. Any information that's available to them, the agent will access and create something really high quality

that will stand out to that prospect. As the deal progresses, now we're looking at things like curated customer case studies. We're looking at business cases, ROI reports, pricing proposals, even after the deal closes, There's a ton of expansion that the customer success team will drive so they can create impact reports in Mutiny for their customers. And they can do look forward strategies. The whole works in order to maximize revenue.

Okay. A bunch of questions. Where does the name come from? You know, the mission of Mutiny was all about killing the dependencies and go-to-market teams. I've led marketing teams, sales teams, and the biggest blocker to growth, is always speed. And the blocker to speed is all of the little dependencies that exist inside of your team, outside of your team.

And so it was really a mutiny against the status quo. That's where the name came from and it just kind of stuck. And behind you, is that a raccoon mascot? Explain that. Yes, it is. This is our raccoon mascot. His name is Achu. Achu.

Where did that come from? How did you pick a raccoon? Do you want to know the real story? Absolutely. Yes. So we were all in a circle. This is when we were about four or five people. And we're like, what are we going to name the raccoon?

And one of our early employees... How did you get to raccoon? You're just like jumping to a... Of course we're going to have a raccoon. No, I explain like, how did you pick raccoon? There's a million animals you could have picked. Yes. Okay.

So we were designing our brand. And the designers asked me, okay, is there an animal? that you guys really identify with. And there wasn't really anything coming, you know, off the top of my head. And then we took the whole team to Angel Island on a, on a camping trip. And the entire time we were there, we had six bottles of wine with us and basically no supplies. So it was just, it was awesome. And every time we would turn around with our headlamps, we would see this gang of adorable raccoons just slowly approaching.

And then they would see the light and they would start backing up. And so the next day, the designer asked me that question again, and I said raccoon. And that's how we ended up with the raccoon. There we go. What's going on with email? Are you generating cold emails? Is it a waste of time now? What's the equilibrium here?

I think a lot of people are getting more cold outreach than ever. And it feels like we might be in this game theoretic. Yeah, because I can imagine you guys helping somebody make a great cold email. But at the same time, you guys are also set up for the golf. steak, GTM as well, which is you play a nice round of golf and afterwards you pass them a PDF or a little deck. It gives them some more context on the conversation. Exactly. So email is a really tricky one. I think, you know, we see this in our own data. We hear it from customers. The results are really bad. Most people don't really open emails anymore. Executives don't really open emails anymore.

And so the engagement rate on email is really, really low, which is why I think having a really personalized approach that's going to stand out, that's going to be different, that's truly and genuinely tailored to that person is going to be really important. One of the things that I find really fascinating is if you look at an average salesperson, they spend about 30% of their time selling and 70% of their time following up with customers, getting, ready for tomorrow's meetings, creating all of those materials, nurturing the old deals that are going to convert hopefully one day. And when you talk to CROs, for the most part, despite all the AI investment in data, they haven't really moved the needle in terms of increasing quota per rep. The rep is largely closing the same amount as the previous years. And I think the reason for that is that that 70%, that's really skill. That's really skill. custom work per, you know, customer that you're going after.

I was on a call a couple of weeks ago where it was a great call, great enterprise brand, the right decision makers in the room. And at the end of the call, they're like, please send me, based on the challenges that we told you we have, send us the three metrics that you can move for our business and relevant customer case studies for each of those. That would take a rep four hours. go create. You have to go look at hundreds of case studies, pull those things together. Whereas in the mutiny agent, they can just come in and it automatically will pull in the challenges

from the gong transcript. It will go through all of their case studies. It will sift and pull out the right stats. It will curate the assets in there. And then they can go ahead and send a really nice, beautiful, forwardable thing to their customer that's going to get shared with the whole buying committee. Yeah. the chat is asking for the name where the name for the for the raccoon came from because I think we glossed over that so sorry to go back to the mascot but the mascot is a raccoon named a chure man answers yes so we were it was the same group of people that went camping yeah we said

what should we name the raccoon yeah and right as we were going to do that someone sneezed And it just said, atchoo. Achoo. And we all went, a chew. That's actually a really good name. Let's go with that. I mean, in general, I would say the Mutiny brand, I think part of the reason people really like it is that it is raw. It's authentic.

We don't really regulate what people can and cannot do. We hire people that are aligned with our values and we just let them be themselves. I love it. Well, thank you so much for taking the time to come chat with us. Congratulations. Did we hit the gong for you? You raised a $72 million round. We got to smash it.

That was a previous fundraise, but yes. You can hit the gong for that. We're still happy to celebrate it. We have the money, so that's all that matters. There we go. We'll talk to you soon. Have a great rest to your dad. Goodbye.

And up next we have Jeremy Gallen from Charlemagne Labs. He spent 12 years in meta and trust and safety and left last year to focus on AI-powered scams and building defenses. We're doing a whole security fee. show. Jeremy. Look at this. Suit it up.

Wow, the matching suit. You look fantastic. Look at that. You really like, it is the mirror image of me. This is crazy. Nailed it. The memo came through. I was hoping that I'd get that Maybalk right downstairs and bring you the suit.

I'm so glad you're up to speed on the show. But for those who aren't up to speed on you, give us an introduction and explain a little bit of your background. Yeah, John's intro, you said he left meta to focus on AI scams. Oh, AI, AI, scams. Which kind of sounds like you're scamming, but I'm assuming it's the exact opposite. No, it's the opposite. We're doing cyber-scan. That would be too easy.

It's much easier to be on the offense than it is to be on the defense today. I tell you, it's wild out there. So, yeah, I left Matt after 12 years to focus on- Oh, great. And basically my vision is that every employee of every company would have a watchdog. So the company is named after my dog Charlemagne. She goes by Charlie. so the product is called Agent Charlie.

Yeah. The idea is like you're using your computer and you're getting attacked now with novel kinds of threats that resemble legitimate communication. That could be on messaging apps. It could also be, you know, the standard fishing. Yeah, we just heard about the, with the Axios attack. It was basically a fake Microsoft teams,

basically call that then cut out and trigger, and, you know, suggested, hey, update Microsoft Teams. The whole thing wasn't Microsoft Teams, but the individual just was confused because it just seemed like it was from. I think the nastiest trick is when it's the unsubscribe button is itself.

Link, I think that's like the newest thing. So what I, we've built, you know, the startup has been selling a product that will try and stop you from clicking. So it's like bad, bad employee. Do not click. But the research that we've done to inform this commercial product is into the capacity, the capability uplift that's

happening with respect to offense. So it's important to remember that if you're an adversary, that's a threat actor seeking financial gain or a state actor, you're availing yourselves of all this AI energetic tooling that we are using, you know, the sales tools, the the automation. And so the core premise is that in an AI-powered world, all fishing becomes spearfishing. You're not going to get a Nigerian prince email much anymore. You're going to get an extremely realistic, utterly compelling request from your boss or your manager or your friends, and it's going to be catastrophic consequences.

How do you think about actual deployment? Because this sounds useful in a consumer context. I'm just thinking about, you know, the email that. from your bank and it has the unsubscribe button for some marketing email, you click it, all of a sudden you're logging and giving away details. Is there an important distinction? It feels like consumer and enterprises blurring together in many places. How do you think this all plays out?

Absolutely. I think as employees of companies, we are using personal email and personal messaging apps on our devices for sure. I think as a business, we're a B2B SaaS company for the research arm. And I'm excited to tell you more about our research. effort. But yeah, I mean, my dream is that the AARP is listening right now and would give this for free to, I'd like to give our software for free to anyone

who holds an AARP card because elder abuse is devastating and it has huge consequences, but it's very difficult to market and sell to consumers in a product like this. People don't wake up and say today's the day, I'm going to improve my security posture. It's sort of after their attack that they have a problem and a mess to clean up. So we're, well, you need to, you need to create the problem. No, stop with the solution. Stop with creating the problem.

No one's great. Yeah, we were just, we were just, we were just talking with, uh, Harris from Socket, who's, who's saying like the old tinfoil hat theory with, with cyber security and, like, malware products is that, you know, they would create the bugs and then sell the, sell the malware. Create the viruses, sell the antivirus. I think that's unethical, but also we don't have to do that. Yeah, there's plenty of scammers out there. The bad guys are getting, you know, superpowers.

And so all we have to do is wait. And like I said about the research arm, our team has done some work. Meta's model drop this morning. We work with them. They're, I think, you know, I'm quite proud, actually, of what they're doing in the cybersecurity space. Because beyond infrastructure and coding attacks, what we all know and aren't really talking enough about is that humans are, you know, the weakest link. So when a company wants to secure its pro-er, it's critical that employees are trained.

And today, you know, their training exercises. But the social engineering attacks aren't studied as much. And so, yeah, I'm really excited that meta has taken a lead in going beyond just, you know, infrastructure and code vulnerabilities to looking at the capabilities that models, frontier models might provide adversaries in the social engineering and scam space. Yeah. So explain a little bit more. about the e-val suite for Mew Spark because like is it that the model is trying to is the model

social engineering you or you're trying to social engineer the model like what are the two parties in this in this e-val like actually how are they interacting yeah so we use um an industry practice called the LLM as a judge so we don't test on human subjects and our eval suite takes a model and has it role play as an attacker. And then we have a model that role plays as a victim. And they're given instructions accordingly. And then we have an LLM judge whether the specific attacker is succeeding. And then we compare those attack different models to each other in the role of attacker.

And that's how we measure the kind of uplift or capability. Yeah. Do you think that is there a world where these social engineers, like, I'm thinking of different bending points in where if someone's running like granola and they're recording that particular, it wasn't a Zoom call. It was a Teams call for the Axios attack. And maybe an AI model could be listening in the background and sort of throw up a flag. Like, hey, it's not, it's actually there, I just checked. There's no update for teams. You don't need to click on that binary. You don't need to install that. This person's trying to take advantage of you.

That's exactly with the vision for our commercial B2B security product. I want an agent that the technology that we use is small language models so that it is on device, and thus it's limited in its capabilities. I see a future where you have a real-time AI for security exactly like you described. I think real-time audio analysis with an SLM is way too big an ask, but small language models are improving, you know, just. like all of the large models. So yeah, I mean, we need real-time defense.

I want it to be proactive, too. I think the biggest issue is that when scammers succeed, it's because even intelligent and well-trained people, employees of companies that work in tech even, are duped because it's as old as the Bible. Scamming is an ancient art, and it has nothing to do with preparation anymore. It has to do with, you know, we're being attacked by machine.

We need machine defense. Yeah, no, that makes a ton of sense. Take me through the shape of the company. How big have you raised money? How long you've been doing this? Yeah. So I've raised money last from the three investors that I'm really excited to be working with. They're Kevin Carter of Knight Capital and Chris Howard of Ritual Capital and Raphael Corolla as a background capital.

Collectively, they've backed more than 30 unicorns from idea stage. And so, you know, I tell them that I want to be the 31st. I'm ready to go. Good luck. There we go. Go to the moon. Yeah. Love it.

So we, you know, we're in a kind of stealth mode right now working with design partners on the S-11's capabilities. Sure. And we're also, you know, if you visit our site, you can actually self-serve for the real-time fishing defense. So you could sign up right now if you have a, probably have a Centurion, but if you have, you know, a credit card that works, you could, you could put that into the, into our website right now. Don't get spearfished. Yeah. Well, thank you so much for coming on the show. Congratulations. Yeah, it's great to meet you. The next phase. Thank you for suiting up as well. And we appreciate it. Yeah, I'm not wearing any pants, by the way. Well, have a great rest of you day. We'll talk to you, Jeremy. We'll have you back on soon. Goodbye.

Bye. Bye. And people were disappointed that we didn't go more into the, the story about Satoshi. There is a full deep dive in the New York Times. My quest to solve Bitcoin. great mystery. It is a long article, though, and so I think we'll have to touch on it another time. But, you know, we went through Adam Bax reaction and his disavowal of the accusations that he is Satoshi. But there's a bunch of interesting little segments in here from the forums and the message boards of the day, analyzing the different writing styles trying to see. Did you dig into this at all anymore? I didn't read the whole thing, but, like, people have speculated that's Adam back for a long time. Yeah.

It's, like, kind of, like, him and Hal Finney's the other one. These are kind of the two, like, main names of people. And there's one more, I think, that comes up all the time. There's Nick Zabo sometimes. Yeah, Nick Zabo, yeah. But, yeah, I don't know if there was a lot of, like, new facts that came out with this, which I think is why it's, like, not, like, super, super crazy. Yeah.

There was also an HBO documentary on Satoshi. I forget who, the, like, who did that Satoshi, who did that Satoshi, who, who, who, who did that Satoshi, who did they accuse in the 2024 HBO documentary directed by Colin Hoback? The firm suggests that Canadian software developer Peter Todd is Satoshi, and Todd denied that. And so you have... That's got to be the worst kind of title in the world from a security standpoint is being accused to being Satoshi. Yeah.

Because you're just going to be attacked because you potentially have the keys to like 50 billion dollars or something, maybe more. I forget exactly what the number is. But yeah, that wallet is big. I still think it's possible that, like, the Stoci wallet, like the keys were just lost, and the person, it's like sort of a lose-lose. Because if you admit that you lost the keys,

then, like, everyone's like, oh, how do you even prove that? You can't prove that you lost something, but there's no movement. I don't know. Yeah, also there's, like, you could have, someone could have created it. Yeah. And then had years and years and years and years to, buy up, you know, an equivalent amount of supply, a bunch of different ways.

Yeah. And then you have the, basically, you can say, like, well, I've never sold, right? If, if, if, if, if, if, if, if Satoshi's wallet did start selling, it would probably cost. Yeah, from a lower perspective and the brand, uh, you could potentially, uh, be making plenty of money from the other wallets. And then if that supply ever moves, the whole market's going to reevaluate the, the, basically the liquid supply and, uh, sort of tank what you have.

And also just, uh, the, like, the, like, the aura around Bitcoin is that it has an anonymous founder. And if it was, if the founder was ever truly unmasked, it would be so much less of like a special project. And I think everyone involved wants to keep it that way, although these investigations will never cease to be interesting. And so you can go read it on the New York Times from John Kerry Rue. Anyway, thank you so much for tuning in today. A bit of a shorter show. We're experimenting with different things. Obviously, we don't have ad reads anymore. And so we are going to be mixing it up with more stories, more interviews, different timing, and more flexibility. And so we hope you enjoyed this show. And we will see you

tomorrow at 11 a.m. Pacific Sharp. Goodbye. We love you. Leave us five stars. Have a wonderful afternoon. Spotify. Sign up for our newsletter at tbpn.com. Thanks for hanging out. Goodbye. Cheers.