The Ledger
Every statement that passed quotation and attribution checks. Mix any filter with any other: certainty 1/5, debate potential 5/5, or both at once.
why aren't all 10 resolved? a statement only gets an assessment when the public record can support or contradict it. opinions and what-ifs never can, and 0 checkable ones are still open, waiting for their date. predictions held up or didn't; assertions are supported or contradicted. on every card: ▮▮▮▮▮ certainty · ▮▮▮▮▮ debate potential. speakers are clickable
Kurtz: Hackers are deploying prompt-only autonomous malware that interacts with LLMs
“What we're seeing now is prompt only autonomous malware, meaning I can drop the prompt on your computer by a variety of means, and then it will autonomously interact with an LLM, and it will give a unique fingerprint every time it runs.”
Kurtz: Modern AI cyber threats can run autonomously without phoning home
“Now these can run autonomously whatever, without ever phoning home.”
Bill Maris: All six Section 32 funds are performing in top decile
“And over the course of my time at Section one 32, we've had six funds. We've invested in companies like CrowdStrike and Cohere and Coinbase and all six of those funds have averaged about four hundred million in size, and all are performing in their top decile,…”
Kurtz: LLMs empower less-skilled hackers to execute nation-state level cyberattacks
“You're minting new adversaries because you don't have to have all the knowledge that you had to have in the past. You can ask any number of LLMs and you can get answers back. So what's happened is the attack timeline has been compressed. You can automate all o…”
Kurtz: CrowdStrike uncovered hundreds of North Korean operatives working as US engineers
“Well, it, it's hard to find these guys, but any event we found 40 of them. We were right. 40 of them. That, that's for the first run. We found hundreds now over.”
Sacks confirms his firm does not run CrowdStrike, citing lack of trust
“Similarly, I had my IT department check and make sure that we didn't have it running anywhere. We don't. I'm just gonna be frank. I don't trust this company.”
Kurtz: Help desk speed incentives create major cybersecurity vulnerabilities
“So their whole job is to open a ticket, solve a problem, close a ticket. So if you follow the money and the incentives, you can see why there's a problem and people want to be helpful at the help desk and hence they get into the situation.”
Kurtz: CrowdStrike has never operated or generated revenue in China
“We don't have operations there. We don't have any revenue. We don't sell them to China. Never have. From the start of the company.”
Kurtz: CrowdStrike uses internal SLMs and guardrails when leveraging LLMs
“We, well, we have our small language models, and we do work with just about all of the large language models. But we've built our own guardrails around what gets shared, how it gets shared, and how we process any of the data back.”