WEBVTT

1
00:00:00.000 --> 00:00:04.434
<v Cassidy>Microsoft gave Copilot a secret door into your inbox.

2
00:00:04.434 --> 00:00:06.609
<v Cassidy>Somebody found the handle.

3
00:00:06.609 --> 00:00:08.784
<v Bill>This is AI Daily Briefing.

4
00:00:08.784 --> 00:00:18.908
<v Bill>Today: a Copilot prompt-injection path with teeth, and Modular opening up the software layer underneath the compute boom.

5
00:00:18.908 --> 00:00:27.609
<v Cassidy>We start with the agent that can read your mail—and the URL parameter that apparently changed the rules.

6
00:00:27.609 --> 00:00:31.040
<v Bill>Tap follow so the next episode finds you.

7
00:00:31.847 --> 00:00:32.887
<v Cassidy>From <00:00:32.067>Ars <00:00:32.300>Technica:

8
00:00:33.304 --> 00:00:37.704
<v Quote>The <00:00:33.431>researchers <00:00:34.024>now <00:00:34.304>had <00:00:34.464>a <00:00:34.584>link <00:00:34.920>that <00:00:35.011>could <00:00:35.171>be <00:00:35.288>sent <00:00:35.597>in <00:00:35.757>an <00:00:35.931>email <00:00:36.317>or <00:00:36.488>text <00:00:36.814>message <00:00:37.352>that

9
00:00:37.736 --> 00:00:39.464
<v Quote>when <00:00:37.914>clicked <00:00:38.291>by <00:00:38.384>the <00:00:38.560>recipient

10
00:00:39.521 --> 00:00:42.744
<v Quote>leaked <00:00:39.912>sensitive <00:00:40.397>information <00:00:41.037>to <00:00:41.171>an <00:00:41.277>attacker-controlled <00:00:42.241>server.

11
00:00:43.064 --> 00:00:51.064
<v Quote>A <00:00:43.428>separate <00:00:43.830>prompt <00:00:44.136>that <00:00:44.291>could <00:00:44.477>be <00:00:44.628>embedded <00:00:45.011>in <00:00:45.124>the <00:00:45.352>same <00:00:45.664>URL <00:00:46.104>format <00:00:46.657>instructed <00:00:47.404>the <00:00:47.584>LLM <00:00:48.077>to <00:00:48.241>search <00:00:48.604>the <00:00:48.744>inbox <00:00:49.184>for <00:00:49.376>passwords <00:00:50.077>or <00:00:50.237>other <00:00:50.551>credentials

12
00:00:51.096 --> 00:00:52.584
<v Quote>that <00:00:51.264>had <00:00:51.400>been <00:00:51.528>sent <00:00:51.811>to <00:00:51.884>the <00:00:52.014>address.

13
00:00:53.192 --> 00:01:01.548
<v Cassidy>Copilot <00:00:53.528>had <00:00:53.735>an <00:00:53.856>undocumented <00:00:54.748>?autorun=1 <00:00:56.084>parameter <00:00:56.700>that <00:00:57.175>could <00:00:57.340>turn <00:00:57.548>a <00:00:57.658>clicked <00:00:57.932>link <00:00:58.236>into <00:00:58.481>an <00:00:58.668>inbox-searching <00:00:59.548>agent <00:01:00.001>in <00:01:00.124>your <00:01:00.245>authenticated <00:01:01.048>session.

14
00:01:01.808 --> 00:01:09.576
<v Cassidy>Varonis <00:01:02.956>didn’t <00:01:03.260>just <00:01:03.452>wave <00:01:03.735>at <00:01:03.868>a <00:01:03.994>spooky <00:01:04.364>demo; <00:01:05.335>it <00:01:05.436>laid <00:01:05.668>out <00:01:05.828>the <00:01:06.012>path <00:01:06.300>from <00:01:06.508>Gmail <00:01:06.999>access <00:01:07.575>to <00:01:07.655>an <00:01:07.761>attacker-controlled <00:01:08.728>webhook.

15
00:01:09.576 --> 00:01:20.748
<v Bill>And <00:01:09.948>the <00:01:10.108>prompt <00:01:10.648>can <00:01:11.148>hunt <00:01:11.508>for <00:01:11.716>passwords <00:01:12.588>or <00:01:12.821>credentials, <00:01:14.252>base64 <00:01:15.356>them, <00:01:16.156>then <00:01:16.408>get <00:01:16.688>Copilot <00:01:17.361>to <00:01:17.548>open <00:01:17.908>the <00:01:18.161>exfiltration <00:01:19.228>URL <00:01:19.777>automatically.

16
00:01:21.447 --> 00:01:30.390
<v Bill>Enterprises <00:01:22.082>have <00:01:22.341>users <00:01:22.718>clicking <00:01:23.174>Copilot <00:01:23.794>links <00:01:24.274>all <00:01:24.634>day—how <00:01:25.842>many <00:01:26.096>security <00:01:26.661>teams <00:01:27.014>are <00:01:27.144>logging <00:01:27.774>URL <00:01:28.259>parameters <00:01:28.967>on <00:01:29.127>those <00:01:29.474>clicks?

17
00:01:30.390 --> 00:01:33.874
<v Cassidy>That <00:01:30.958>approval <00:01:31.360>screen <00:01:31.694>was <00:01:31.894>the <00:01:31.994>whole <00:01:32.244>comfort <00:01:32.664>blanket.

18
00:01:33.934 --> 00:01:39.634
<v Cassidy>One <00:01:34.160>hidden <00:01:34.490>parameter <00:01:35.054>got <00:01:35.280>around <00:01:35.607>it, <00:01:36.294>and <00:01:36.374>the <00:01:36.490>assistant <00:01:37.021>could <00:01:37.234>act <00:01:37.527>on <00:01:37.670>whatever <00:01:37.994>was <00:01:38.167>in <00:01:38.294>the <00:01:38.447>inbox.

19
00:01:39.670 --> 00:01:45.234
<v Cassidy>Permission <00:01:40.091>layers <00:01:40.474>for <00:01:40.658>tool-using <00:01:41.447>AI <00:01:41.762>need <00:01:42.007>to <00:01:42.167>be <00:01:42.354>boringly, <00:01:43.554>exhaustively <00:01:44.492>documented.

20
00:01:45.894 --> 00:01:46.774
<v Cassidy>Modular <00:01:46.283>writes:

21
00:01:47.850 --> 00:01:54.890
<v Quote>The <00:01:47.980>Modular <00:01:48.392>Platform <00:01:48.943>is <00:01:49.110>now <00:01:49.334>production-ready, <00:01:50.450>serving <00:01:50.783>billions <00:01:51.237>of <00:01:51.347>tokens <00:01:51.730>per <00:01:51.896>minute <00:01:52.270>and <00:01:52.623>powering <00:01:53.114>real <00:01:53.414>enterprise <00:01:53.910>deployments.

22
00:01:54.997 --> 00:01:57.850
<v Quote>We’re <00:01:55.435>opening <00:01:55.658>more <00:01:55.903>of <00:01:56.030>the <00:01:56.143>platform <00:01:56.623>to <00:01:56.750>the <00:01:56.890>ecosystem

23
00:01:57.914 --> 00:02:01.050
<v Quote>extending <00:01:58.517>it <00:01:58.627>across <00:01:59.032>entirely <00:01:59.570>new <00:01:59.740>classes <00:02:00.143>of <00:02:00.303>hardware

24
00:02:01.070 --> 00:02:03.770
<v Quote>and <00:02:01.174>bringing <00:02:01.597>major <00:02:01.974>industry <00:02:02.383>partners <00:02:02.863>along <00:02:03.162>with <00:02:03.397>us.

25
00:02:04.141 --> 00:02:10.421
<v Bill>Mojo <00:02:04.781>1.0 <00:02:06.034>under <00:02:06.381>Apache <00:02:07.021>2.0 <00:02:08.328>is <00:02:08.741>the <00:02:08.914>headline <00:02:09.381>for <00:02:09.563>builders.

26
00:02:10.511 --> 00:02:16.621
<v Bill>The <00:02:10.825>business <00:02:11.274>story <00:02:11.821>is <00:02:12.041>support <00:02:12.501>for <00:02:12.674>Trainium, <00:02:13.581>TPUs, <00:02:14.801>and <00:02:14.941>Qualcomm <00:02:15.641>accelerators.

27
00:02:16.834 --> 00:02:23.282
<v Bill>If <00:02:17.321>one <00:02:17.551>serving <00:02:17.968>stack <00:02:18.381>runs <00:02:18.758>across <00:02:19.151>cheaper <00:02:19.594>chips, <00:02:20.641>the <00:02:20.761>per-token <00:02:21.533>bill <00:02:22.101>can <00:02:22.509>move <00:02:22.829>fast.

28
00:02:23.282 --> 00:02:30.541
<v Cassidy>And <00:02:23.581>Modular <00:02:24.061>Cloud <00:02:24.621>is <00:02:24.861>GA, <00:02:25.613>with <00:02:26.125>MiniMax <00:02:26.848>named <00:02:27.208>as <00:02:27.341>a <00:02:27.474>customer <00:02:27.961>and <00:02:28.261>a <00:02:28.421>claim <00:02:28.674>of <00:02:28.834>billions <00:02:29.288>of <00:02:29.410>tokens <00:02:29.861>per <00:02:30.038>minute.

29
00:02:30.701 --> 00:02:33.421
<v Cassidy>That <00:02:31.387>sounds <00:02:31.677>like <00:02:31.781>a <00:02:31.857>production <00:02:32.301>milestone.

30
00:02:33.521 --> 00:02:34.781
<v Cassidy>Now <00:02:33.848>it <00:02:33.961>has <00:02:34.168>to <00:02:34.269>hold <00:02:34.541>up.

31
00:02:34.781 --> 00:02:39.901
<v Bill>The <00:02:35.121>Copilot <00:02:35.718>breach <00:02:36.114>we <00:02:36.285>just <00:02:36.591>covered <00:02:36.968>is <00:02:37.101>why <00:02:37.405>this <00:02:37.741>layer <00:02:38.201>matters <00:02:38.690>beyond <00:02:39.229>cost.

32
00:02:39.997 --> 00:02:50.674
<v Bill>Everybody’s <00:02:40.991>pouring <00:02:41.381>money <00:02:41.629>into <00:02:41.901>agents <00:02:42.413>that <00:02:42.608>touch <00:02:43.037>real <00:02:43.528>tools; <00:02:44.741>the <00:02:44.928>stack <00:02:45.332>deciding <00:02:45.981>where <00:02:46.441>and <00:02:46.701>how <00:02:46.989>they <00:02:47.281>run <00:02:47.721>had <00:02:48.187>better <00:02:48.541>be <00:02:48.791>inspectable.

33
00:02:50.688 --> 00:02:53.581
<v Cassidy>“Open <00:02:51.011>silicon” <00:02:51.661>is <00:02:51.901>a <00:02:52.050>lovely <00:02:52.521>keynote <00:02:53.021>phrase.

34
00:02:53.761 --> 00:03:02.621
<v Cassidy>The <00:02:54.381>test <00:02:54.781>is <00:02:54.971>whether <00:02:55.234>an <00:02:55.392>enterprise <00:02:55.941>can <00:02:56.114>shift <00:02:56.421>a <00:02:56.523>workload <00:02:57.053>from <00:02:57.261>Nvidia <00:02:57.794>to <00:02:57.954>Trainium <00:02:58.514>or <00:02:58.741>TPU <00:02:59.651>without <00:03:00.191>finding <00:03:00.661>six <00:03:01.085>expensive <00:03:01.695>little <00:03:01.952>compatibility

35
00:03:02.701 --> 00:03:05.101
<v Cassidy>traps. <00:03:03.357>Over <00:03:04.114>on <00:03:04.267>Hacker <00:03:04.637>News:

36
00:03:08.090 --> 00:03:10.170
<v Quote>Does <00:03:08.202>this <00:03:08.390>project <00:03:08.842>have <00:03:09.010>any <00:03:09.174>meaningful <00:03:09.663>traction?

37
00:03:10.410 --> 00:03:14.650
<v Quote>Seemed <00:03:11.066>like <00:03:11.210>a <00:03:11.322>cool <00:03:11.530>idea, <00:03:12.010>but <00:03:12.290>I <00:03:12.378>wasn't <00:03:12.682>even <00:03:12.874>sure <00:03:13.178>what <00:03:13.420>problem <00:03:13.802>does <00:03:13.983>it <00:03:14.147>solves.

38
00:03:14.770 --> 00:03:18.730
<v Quote>Looks <00:03:15.402>like <00:03:15.570>its <00:03:15.734>completely <00:03:16.210>missing <00:03:16.522>from <00:03:16.670>the <00:03:16.780>regular <00:03:17.181>discussion / <00:03:17.850>news <00:03:18.230>outlets.

39
00:03:18.903 --> 00:03:24.730
<v Quote>Every <00:03:19.850>1-2 <00:03:20.317>years <00:03:20.682>some <00:03:20.879>barely <00:03:21.340>visible <00:03:21.802>post/article <00:03:23.100>reminds <00:03:23.503>me <00:03:23.663>it <00:03:23.818>even <00:03:24.090>exists...

40
00:03:25.023 --> 00:03:26.383
<v Bill>It’s <00:03:25.223>a <00:03:25.343>fair <00:03:25.727>challenge.

41
00:03:26.823 --> 00:03:32.303
<v Bill>“Billions <00:03:27.983>of <00:03:28.234>tokens <00:03:28.843>per <00:03:29.080>minute” <00:03:29.743>and <00:03:30.079>MiniMax <00:03:30.863>are <00:03:31.165>traction <00:03:31.732>claims

42
00:03:32.463 --> 00:03:35.023
<v Bill>but <00:03:33.023>I’d <00:03:33.303>still <00:03:33.567>want <00:03:33.885>workload <00:03:34.503>mix

43
00:03:35.133 --> 00:03:41.740
<v Bill>latency <00:03:36.083>and <00:03:36.511>cost <00:03:37.083>against <00:03:37.543>the <00:03:37.756>usual <00:03:38.423>GPU <00:03:39.119>path <00:03:39.606>before <00:03:40.271>declaring <00:03:40.773>victory.

44
00:03:41.740 --> 00:03:43.144
<v Cassidy>From <00:03:42.270>Hacker <00:03:42.656>News:

45
00:03:43.770 --> 00:03:46.330
<v Quote>I <00:03:43.903>guess <00:03:44.202>this <00:03:44.357>is <00:03:44.450>the <00:03:44.604>follow <00:03:44.863>up <00:03:44.997>to <00:03:45.070>the <00:03:45.192>Qualcomm <00:03:45.737>acquisition.

46
00:03:46.550 --> 00:03:49.530
<v Quote>Introduces <00:03:47.810>"Modular <00:03:48.397>Cloud".

47
00:03:49.557 --> 00:03:54.010
<v Quote>In <00:03:49.630>the <00:03:49.740>keynote <00:03:50.154>they <00:03:50.450>say <00:03:50.586>they've <00:03:50.762>been <00:03:50.930>serving <00:03:51.267>models <00:03:51.663>on <00:03:51.850>openrouter <00:03:52.530>under <00:03:52.770>the <00:03:52.938>name <00:03:53.223>ModelRun.

48
00:03:54.120 --> 00:03:57.530
<v Quote>Windows <00:03:54.940>support <00:03:55.330>for <00:03:55.546>Mojo <00:03:56.050>(that <00:03:56.290>isn't <00:03:56.610>via <00:03:56.890>WSL).

49
00:03:57.690 --> 00:04:00.170
<v Quote>Coincides <00:03:58.666>with <00:03:58.750>the <00:03:58.874>open <00:03:59.174>sourcing <00:03:59.557>of <00:03:59.690>Mojo.

50
00:04:00.424 --> 00:04:03.624
<v Cassidy>ModelRun <00:04:01.034>serving <00:04:01.437>on <00:04:01.624>OpenRouter <00:04:02.317>is <00:04:02.504>a <00:04:02.641>useful <00:04:03.035>breadcrumb.

51
00:04:03.891 --> 00:04:11.624
<v Cassidy>It <00:04:04.464>means <00:04:04.724>Modular <00:04:05.211>Cloud <00:04:05.597>is <00:04:05.750>trying <00:04:06.051>to <00:04:06.152>show <00:04:06.397>up <00:04:06.531>where <00:04:06.715>developers <00:04:07.284>already <00:04:07.764>buy <00:04:08.008>inference, <00:04:09.098>rather <00:04:09.336>than <00:04:09.533>asking <00:04:09.976>them <00:04:10.157>to <00:04:10.312>join <00:04:10.544>a <00:04:10.644>new <00:04:10.864>private <00:04:11.224>club.

52
00:04:11.800 --> 00:04:13.304
<v Cassidy>From <00:04:12.538>Hacker <00:04:12.840>News:

53
00:04:15.662 --> 00:04:20.382
<v Quote>Summarized <00:04:16.206>here: <00:04:16.670>This <00:04:17.235>is <00:04:17.395>by <00:04:17.569>Chris <00:04:17.942>Lattner, <00:04:18.582>known <00:04:18.822>for <00:04:19.102>LLVM <00:04:19.762>and <00:04:19.902>Swift.

54
00:04:20.704 --> 00:04:24.784
<v Cassidy>Chris <00:04:20.984>Lattner’s <00:04:21.568>LLVM <00:04:22.184>and <00:04:22.371>Swift <00:04:22.731>résumé <00:04:23.248>gets <00:04:23.554>Modular <00:04:23.952>some <00:04:24.200>attention.

55
00:04:24.944 --> 00:04:32.064
<v Cassidy>Apache-licensed <00:04:26.560>Mojo <00:04:26.997>still <00:04:27.304>has <00:04:27.451>to <00:04:27.557>prove <00:04:27.870>itself <00:04:28.197>in <00:04:28.348>production, <00:04:29.395>especially <00:04:29.950>around <00:04:30.304>ugly <00:04:30.677>hardware <00:04:31.152>edge <00:04:31.451>cases.

56
00:04:32.709 --> 00:04:35.989
<v Cassidy>If <00:04:32.809>you <00:04:32.901>want <00:04:33.056>to <00:04:33.162>go <00:04:33.326>deeper <00:04:33.722>on <00:04:33.849>the <00:04:33.957>infrastructure <00:04:34.686>behind <00:04:35.189>AI

57
00:04:36.069 --> 00:04:40.229
<v Cassidy>try <00:04:36.329>The <00:04:36.453>Data <00:04:36.755>Center <00:04:37.109>Daily—a <00:04:37.962>daily <00:04:38.282>briefing <00:04:38.789>on <00:04:39.082>AI <00:04:39.419>compute

58
00:04:40.298 --> 00:04:43.269
<v Cassidy>hyperscaler <00:04:41.109>capex <00:04:42.089>the <00:04:42.202>power <00:04:42.533>grid

59
00:04:43.320 --> 00:04:44.709
<v Cassidy>semiconductor <00:04:44.069>supply

60
00:04:44.789 --> 00:04:48.229
<v Cassidy>and <00:04:45.089>how <00:04:45.312>intelligence <00:04:45.882>at <00:04:46.056>scale <00:04:46.442>is <00:04:46.629>reshaping <00:04:47.246>energy <00:04:47.659>markets.

61
00:04:48.373 --> 00:04:50.789
<v Cassidy>Find <00:04:49.002>it <00:04:49.145>wherever <00:04:49.449>you <00:04:49.555>listen <00:04:49.856>to <00:04:49.998>podcasts.

62
00:04:51.390 --> 00:04:56.830
<v Cassidy>You’ll <00:04:51.582>find <00:04:51.763>links <00:04:52.057>to <00:04:52.150>every <00:04:52.403>story <00:04:52.723>in <00:04:52.870>today’s <00:04:53.182>show <00:04:53.390>notes, <00:04:54.243>so <00:04:54.370>you <00:04:54.450>can <00:04:54.570>dig <00:04:54.807>deeper <00:04:55.198>into <00:04:55.426>whatever <00:04:55.744>caught <00:04:55.982>your <00:04:56.166>attention.

63
00:04:56.974 --> 00:04:59.390
<v Cassidy>That’s <00:04:57.763>AI <00:04:58.083>Daily <00:04:58.390>Briefing <00:04:58.790>for <00:04:58.977>today.

64
00:04:59.481 --> 00:05:01.711
<v Cassidy>Thanks <00:05:00.050>for <00:05:00.150>listening, <00:05:00.610>and <00:05:00.697>we’ll <00:05:00.778>be <00:05:00.895>back <00:05:01.204>tomorrow.

65
00:05:01.839 --> 00:05:03.871
<v Cassidy>This <00:05:02.404>is <00:05:02.551>a <00:05:02.641>Lantern <00:05:03.091>Podcast.