Latest / The Ruby AI Podcast / Omarchy, Astra Hype, and AI Security Risks

Transcript

Omarchy, Astra Hype, and AI Security Risks · The Ruby AI Podcast

• 0:00
  SPEAKER_01: Hey everybody, welcome to another episode of the Ruby AI Podcast.
• 0:04
  SPEAKER_00: I am one of your hosts today, Valentino Stoll.
• 0:07
  SPEAKER_00: And I'm the other host.
• 0:08
  SPEAKER_00: I'm Joe Leo.
• 0:10
  SPEAKER_00: Valentino, I'm excited today because we're going to roll out this new format.
• 0:14
  SPEAKER_00: We're going to start recording every week, which I think is long overdue.
• 0:18
  SPEAKER_00: People have just been climbing the walls for this show to get more of it.
• 0:22
  SPEAKER_00: So happy to bring that to you all.
• 0:24
  SPEAKER_00: But also, so what we're going to do, we're going to continue to have our episodes with guests.
• 0:30
  SPEAKER_00: We're going to do that every other week.
• 0:31
  SPEAKER_00: But then on weeks like these, we're going to have our panelist episode.
• 0:36
  SPEAKER_00: But what we're going to do is a sort of clock-based conversation about the top topics in the Ruby AI world.
• 0:47
  SPEAKER_00: How are you feeling about that?
• 0:48
  SPEAKER_01: Yeah, I love it.
• 0:49
  SPEAKER_01: I'm excited for this.
• 0:51
  SPEAKER_01: We've been uh we've been trying to get this more regular, and this is gonna be great.
• 0:54
  SPEAKER_01: Yeah, so hopefully not controversial.
• 0:56
  SPEAKER_00: If there are any sports Yeah, no, I'm well, controversy is the thing that I'll lean into and you'll lean away from, and I think that's part of what will make this fun.
• 1:04
  SPEAKER_00: Uh now, the format that we have here, if you're a big sports fan, I've taken it almost directly from Pardon the Interruption with Tony Kornheiser and Mike Wilbon, which is my favorite podcast and it's a great show.
• 1:17
  SPEAKER_00: Uh but luckily for us, there aren't that many huge sports fans listening.
• 1:22
  SPEAKER_00: And two, we're not important enough for Mike Wilbon or Tony Kornheiser to care that we're ripping off their format.
• 1:28
  SPEAKER_00: Now it may seem like we're doing this in order to mimic a popular show, but actually it works out in our favor because we actually orchestrated this so that each of us could do less work.
• 1:41
  SPEAKER_01: So that was the goal all along.
• 1:45
  SPEAKER_01: I think when we first started this, it was like, well, how much time do we really have?
• 1:49
  SPEAKER_01: And I was like, I don't know, let's just show up and record.
• 1:53
  SPEAKER_00: You did actually, and it took me a while to get there.
• 1:56
  SPEAKER_00: But luckily, we've got some really great people helping us.
• 1:58
  SPEAKER_00: We've got Paul, you know, everybody in our industry's got Paul, and we have Beatrice, who works for me at Deaf Method.
• 2:06
  SPEAKER_00: And so she has orchestrated this thing.
• 2:08
  SPEAKER_00: And of course, we've got AI orchestrating this thing to bring us these news segments.
• 2:12
  SPEAKER_00: So the idea here is just in case it sounds like we don't know what we're talking about, is because we really don't.
• 2:17
  SPEAKER_00: Uh, we have AI going through all of our various newsletters and pulling out the choicest uh topics for us to discuss here.
• 2:25
  SPEAKER_00: Uh and Valentino and I only get the brief that we're going to use for the show 15 minutes before the show starts.
• 2:32
  SPEAKER_00: And so we get almost no time to prepare, uh, just enough to really like scan the articles, look at what we're talking about, and then we just go.
• 2:41
  SPEAKER_00: Yep.
• 2:42
  SPEAKER_00: It should be fun.
• 2:42
  SPEAKER_00: So I'm excited.
• 2:44
  SPEAKER_00: It should be fun.
• 2:46
  SPEAKER_00: Uh it'll run a little bit shorter, or at least that's the idea, than the longer episodes where we have a guest.
• 2:51
  SPEAKER_00: Because when we have a guest, you probably want to hear from us or them more.
• 2:55
  SPEAKER_00: I don't think you want to hear from us that much more at all.
• 2:58
  SPEAKER_00: But I think if you were just hoping, like, man, if your least favorite part of the show, or let's just say this.
• 3:05
  SPEAKER_00: Let's say if you love the show, but you're just like, Man, I really wish Joe would just shut his mouth and stop giving his opinion on things he doesn't know everything about.
• 3:12
  SPEAKER_00: I got bad news for you.
• 3:13
  SPEAKER_00: These episodes are not going to be your favorite.
• 3:15
  SPEAKER_00: There's gonna be a lot of that.
• 3:17
  SPEAKER_01: Don't worry, I'll come in and I'll recover.
• 3:20
  SPEAKER_01: So if you don't if you don't like either of our opinions, then yes, maybe the maybe these episodes are for you.
• 3:26
  SPEAKER_00: Yeah.
• 3:27
  SPEAKER_00: All right, all right.
• 3:27
  SPEAKER_00: The gong sound, that means we're getting started.
• 3:32
  SPEAKER_00: Oh, that's funny how you started.
• 3:33
  SPEAKER_01: Okay.
• 3:34
  SPEAKER_01: All right, you want to do that.
• 3:35
  SPEAKER_01: We have to talk about the gong.
• 3:37
  SPEAKER_01: This reminds me of the UHF movie with weird Al Yankovic.
• 3:44
  SPEAKER_01: I love it.
• 3:45
  SPEAKER_01: Yeah, so first up, we've got Omachi.
• 3:49
  SPEAKER_01: I hope I'm saying that right.
• 3:50
  SPEAKER_01: I feel like I'm saying that right.
• 3:52
  SPEAKER_00: That's fine with me.
• 3:53
  SPEAKER_01: Omachi, if you're not familiar, is David Hannemeyer Hansen's newest brainchild to the programming world where he's creating his own version of Linux that suits his opinion of his style.
• 4:07
  SPEAKER_01: And you know, there's been a lot of rage, in case you haven't been on social media for a while, of people loving or at least getting reinvigorated with Linux.
• 4:17
  SPEAKER_01: I personally like it.
• 4:18
  SPEAKER_01: I like to see the publicity and to see people getting back into Linux.
• 4:23
  SPEAKER_01: Whether or not this is like the best Linux, I feel like it shouldn't really matter because they're all so easily configurable.
• 4:31
  SPEAKER_01: I've been using Ubuntu on servers for years and have it on some machines locally.
• 4:37
  SPEAKER_01: I don't know.
• 4:37
  SPEAKER_00: Have you tried Omachi?
• 4:39
  SPEAKER_00: I have not, but I am a big Linux lover myself.
• 4:42
  SPEAKER_00: Yeah, I confess I haven't run it in a while, but I used to run Ubuntu all the time, and I am also very happy by the recent invigoration around the Linux community.
• 4:52
  SPEAKER_01: Yeah, you know, I found an old MacBook.
• 4:54
  SPEAKER_01: I feel like I'm gonna have to at least try it and see what all this hype is about, as I do.
• 4:59
  SPEAKER_01: But part of this news segment is obviously since this has been vibe coded by DHH, there are some issues, as there can be when you build an operating system level of software.
• 5:12
  SPEAKER_01: And it was a root escalation bug, which is a pretty serious bug.
• 5:17
  SPEAKER_01: But I feel like the timing of this is obviously not great because they've also secured some wild funding for the project, yeah.
• 5:26
  SPEAKER_01: Which is also a little bit amusing to me personally, because why should it not get that level of funding right away?
• 5:35
  SPEAKER_01: But if you're gonna create your own Linux, it definitely is a very good thing to have in your pocket to make sure that it stays stable.
• 5:43
  SPEAKER_01: So hopefully the influx in cash can help resolve some of these uh security issues that are servicing.
• 5:51
  SPEAKER_01: But what do you think of like this whole AI-driven operating system?
• 5:55
  SPEAKER_01: I feel like we've had some guests on talk about this direction for a while.
• 5:59
  SPEAKER_00: I like the idea.
• 6:00
  SPEAKER_00: I think that there's a couple of things going on in this article.
• 6:04
  SPEAKER_00: First, there's thousands of flavors of Linux out there, right?
• 6:07
  SPEAKER_00: And people build their own and don't get any funding, and that's okay too, because that's what open source is about.
• 6:12
  SPEAKER_00: This gets funding because it's DHH, and you know, one, he's a big famous deal, and two, he owns a company called 37 Signals.
• 6:19
  SPEAKER_00: So some of the funding is coming from his company, right?
• 6:22
  SPEAKER_00: So no real surprise there.
• 6:24
  SPEAKER_00: The bug that was disclosed, yeah, it's pretty serious.
• 6:28
  SPEAKER_00: I mean, essentially every program uh running in the user's desktop session could escalate to root without password sudo or a privilege prompt.
• 6:36
  SPEAKER_00: I mean, usually you got to at least type sudo, you gotta at least type those four letters, right?
• 6:40
  SPEAKER_00: And it was and it was around for a year.
• 6:43
  SPEAKER_00: But as you've already said, it's Linux, it's the Wild West.
• 6:48
  SPEAKER_00: Like we both ran Ubuntu for years.
• 6:50
  SPEAKER_00: That's not a thing that comes with any guarantees.
• 6:53
  SPEAKER_00: You rely on the community and you rely on the fact that, hey, Ubuntu is used by millions of people and it's undergirding some really serious infrastructure, so I'm gonna trust it.
• 7:02
  SPEAKER_00: And when you come up and say, well, this is just something that a guy wrote with a bunch of AI, you have to treat it accordingly.
• 7:09
  SPEAKER_00: Like you should not be running your production level systems on.
• 7:12
  SPEAKER_00: To me, though, the wrinkle is well, one password says, okay, we're going to fund it.
• 7:18
  SPEAKER_00: And the fact is, it's DHH.
• 7:19
  SPEAKER_00: So if one password said they're gonna fund it, you're gonna get a lot of blowback no matter what, because it's DHH.
• 7:26
  SPEAKER_01: If you are using Amochi, please remember the lethal trifecta, especially if it's AI driven.
• 7:32
  SPEAKER_01: You don't want to be connecting all your MCPs.
• 7:35
  SPEAKER_01: Probably want to have a pretty limited access control setup as far as what it's touching and can touch.
• 7:43
  SPEAKER_01: But if you're just having some fun, go for it.
• 7:46
  SPEAKER_01: That's how I feel.
• 7:47
  SPEAKER_00: Yeah, you took the words right out of my mouth.
• 7:48
  SPEAKER_00: I mean, if you're gonna use that, you should use it for fun.
• 7:51
  SPEAKER_00: If you find it really incredibly useful, then use it for some local development or something, right?
• 7:56
  SPEAKER_00: Or use it to run your robot hacking in your house, right?
• 8:00
  SPEAKER_01: But uh but don't Oh man, we're gonna get back to the era of people hacking people's Alexos.
• 8:08
  SPEAKER_00: I gotta tell you, I just got a Roborock and I have just been obsessing over this thing.
• 8:14
  SPEAKER_00: Yeah, yeah, it's like the new generation of uh pet rock old uh yeah.
• 8:20
  SPEAKER_00: No, no, this is a vacuum floor cleaner.
• 8:26
  SPEAKER_00: Not an actual rock.
• 8:28
  SPEAKER_00: But yeah, I've just like my mind reels at like the different ways we can program it and have it do evil things to each other.
• 8:35
  SPEAKER_00: But anyway.
• 8:36
  SPEAKER_00: So that bell means it's time to move on.
• 8:39
  SPEAKER_00: But I think that the sponsorship controversy with one password is I don't know if it's justified or not, it's just expected because DHH comes with a lot of controversy and a lot of baggage.
• 8:49
  SPEAKER_00: Moving on.
• 8:56
  SPEAKER_00: So OpenAI's Astra is the first model to hit quote unquote critical on its own cybersecurity capability framework, which means it can find that exploit real zero days on its own.
• 9:09
  SPEAKER_00: And so just a little bit of information here.
• 9:11
  SPEAKER_00: OpenAI paused the large training runs after the hugging face breach of ill repute.
• 9:18
  SPEAKER_00: And they restarted on August 28th once safety infrastructure was hardened, and so then they publicly announced Astra on September 1st.
• 9:26
  SPEAKER_00: 100% reached 100% on OpenAI's own exploit bench, found two real zero day vulnerabilities during internal testing.
• 9:34
  SPEAKER_00: So the question is with OpenAI building a model that can find these real zero days, and then they're locking it, of course, behind review prompts and a staged rollout.
• 9:44
  SPEAKER_00: Is that the industry really taking the capability threshold seriously, or a company demonstrating a genuinely new kind of danger and calling the gatekeeping safety?
• 9:55
  SPEAKER_00: Your take, Valentina?
• 9:57
  SPEAKER_01: Our last episode, we talked about the hockey face breach, which which this caused, apparently.
• 10:03
  SPEAKER_01: The training, right?
• 10:04
  SPEAKER_01: It's kind of like a weird digit themselves.
• 10:09
  SPEAKER_01: They're just saying, oh yeah, like they're congratulating their past discretions with how great that it is at doing those discretions.
• 10:22
  SPEAKER_01: Right.
• 10:23
  SPEAKER_00: I don't want to be flip about this because the security, we're gonna talk about security a lot in this episode, and the security underpinnings and implications of this story and its ilk are real.
• 10:34
  SPEAKER_00: That said, I don't know how you or me or anyone are supposed to trust what OpenAI or Anthropic say about their own models.
• 10:43
  SPEAKER_00: I just don't.
• 10:44
  SPEAKER_00: Exploitbench, what is exploitbench?
• 10:46
  SPEAKER_00: A thing that they came up with.
• 10:48
  SPEAKER_00: You know, it's like saying the old toothpaste commercials that used to say four out of five dentists agree you should use our toothpaste.
• 10:55
  SPEAKER_00: I think that it's silly and it's marketing, except that it is real that these AIs can find and exploit vulnerabilities.
• 11:04
  SPEAKER_00: And we see that, you know, in Rails, which we're going to talk about in a few minutes, that those things are real and worth taking seriously.
• 11:12
  SPEAKER_00: Now, is it worth clutching my pearls every time OpenAI or Anthropic say their new model can exploit the Department of Defense security protocols?
• 11:22
  SPEAKER_00: I don't think it's actually that hard to exploit the Department of Defense Security protocols.
• 11:26
  SPEAKER_00: So I'm not actually that impressed.
• 11:28
  SPEAKER_00: I don't actually believe it.
• 11:30
  SPEAKER_00: And I don't even fault the companies.
• 11:31
  SPEAKER_00: I think this is marketing.
• 11:32
  SPEAKER_00: And look, they've got a few hundred billion dollars to dig out of in debt every three months, and this is how they're trying to fund it.
• 11:39
  SPEAKER_01: Yeah, you know, security tools, they've always been a thing distributed amongst community members, right?
• 11:46
  SPEAKER_01: Like if you're a white hat hacker, I guess if you want to call it that, but if you're like truly like helping people harden their systems, and that's how you make money, there's known tools that you use and you develop over time.
• 11:58
  SPEAKER_01: And now like AI is becoming involved in that.
• 12:02
  SPEAKER_01: But that doesn't change the packaging of people that have these processes all the time any differently, other than that, maybe they're folding a new model into their system.
• 12:12
  SPEAKER_01: Is this model truly a model?
• 12:15
  SPEAKER_01: Or is it like a packaged up version of those security tools?
• 12:19
  SPEAKER_01: Right?
• 12:20
  SPEAKER_01: Like that's unclear.
• 12:21
  SPEAKER_01: But also like those deserve to be open or need to be open, right?
• 12:28
  SPEAKER_01: By their whole nature.
• 12:30
  SPEAKER_01: The fact that this is a closed system kind of concerns me.
• 12:33
  SPEAKER_01: But with that said, all of these things exist.
• 12:36
  SPEAKER_01: Whether or not they call it critical, a group of people with enough motive will be able to do the same breaks.
• 12:43
  SPEAKER_01: And like whether or not you know it or not, how is this helping?
• 12:47
  SPEAKER_01: I guess.
• 12:50
  SPEAKER_00: Yeah, no, you're I agree with you 100%.
• 12:53
  SPEAKER_00: Giving us a huge announcement every 15 days or so, alternating between these two companies.
• 13:00
  SPEAKER_00: How is that actually helping?
• 13:02
  SPEAKER_00: I don't think it helps at all.
• 13:03
  SPEAKER_00: I'm not saying that these companies don't help.
• 13:05
  SPEAKER_00: I think that some of the stuff that they've set up, some of the programs that they've set up are genuinely helpful.
• 13:12
  SPEAKER_00: But no, I don't think these announcements do much.
• 13:15
  SPEAKER_00: And they certainly don't do anything to clarify things.
• 13:18
  SPEAKER_00: Nobody's using a vetted third party to run all of their tests through that says, hey, yeah, here is a benchmark, and here's a thing.
• 13:28
  SPEAKER_00: Right?
• 13:28
  SPEAKER_00: They all use their own and it makes it challenging to know.
• 13:34
  SPEAKER_01: It just like triggers the UHF and I picture we're Al Yankovich.
• 13:40
  SPEAKER_01: Okay.
• 13:43
  SPEAKER_01: Yeah, it's like any security software.
• 13:46
  SPEAKER_01: Like people are using it for two purposes.
• 13:47
  SPEAKER_01: Hopefully, you know, most people can just use it and like help prevent most of their security concerns.
• 13:53
  SPEAKER_01: The opposite side of that is people are using it to find the security vulnerabilities, right?
• 14:00
  SPEAKER_01: I always remember seeing logs when your site first opens up in Rails and you get all these alerts that are all the common security tools out there that people just scanning your site, you know, poking the holes.
• 14:13
  SPEAKER_01: I imagine the same thing is gonna happen using Ostra.
• 14:16
  SPEAKER_01: It's gonna find some common things, and you're gonna see those same kinds of logs.
• 14:21
  SPEAKER_01: So just another day in the security bucket.
• 14:24
  SPEAKER_01: Alright, what's up next here?
• 14:26
  SPEAKER_00: Next, we've got Claude Code's safety net has a hole, and Claude could see it happening.
• 14:32
  SPEAKER_00: So this is credit to uh Johan Reberger, a security researcher who found a way to get Claude Code's auto mode to stand by while malware ran on a machine it was supposed to be protecting.
• 14:45
  SPEAKER_00: Uh so he got it to download and extract a zip archive, uh, later import base 64 and accidentally load a malicious local struct.py uh hidden inside it.
• 14:57
  SPEAKER_00: So the success rate was 80%.
• 14:59
  SPEAKER_00: That's pretty unsettling.
• 15:02
  SPEAKER_00: And uh the other thing is that although Claude detects the compromise, uh auto mode blocks its cleanup command.
• 15:09
  SPEAKER_00: So basically it knows that it's getting compromised, but it isn't allowed to fix for it.
• 15:15
  SPEAKER_00: Uh so this was interesting, and uh Simon Willison wrote up uh something about it.
• 15:22
  SPEAKER_00: Um and I guess the question that we have here is that if an agent can detect its own compromise, but its own safety system won't let it clean up after itself, is auto mode actually making clawed code safer or just giving people false confidence to run agents somewhere that they shouldn't?
• 15:39
  SPEAKER_00: What do you think, V?
• 15:40
  SPEAKER_01: Yeah, I think Wills' takeaway is kind of on point.
• 15:44
  SPEAKER_01: Auto mode as safety net isn't enough.
• 15:46
  SPEAKER_01: For the same reason OpenAI's Astra isn't enough on its own.
• 15:51
  SPEAKER_01: If you have any sensitive data or compliance or anything like that, really you should know better.
• 15:58
  SPEAKER_01: But with that said, like I sandbox all my agents that are running on loops that have capability to the internet the access to the internet.
• 16:06
  SPEAKER_01: There's all network restrictions, right?
• 16:08
  SPEAKER_01: Like you gotta take precautions.
• 16:10
  SPEAKER_01: Interesting.
• 16:11
  SPEAKER_01: So what's your sandbox setup?
• 16:13
  SPEAKER_01: So I have like a an air gap system that kind of proxies it with tail scale, so I can catch kind of things, trusted sites and things like that, and keep track of blacklists and have a firewall basically for every agent as far as network is concerned.
• 16:32
  SPEAKER_01: But there's other things too, right?
• 16:33
  SPEAKER_01: Like just like a firewall, like you don't want it to like be able to SSH and you don't want it to get telnet access, right?
• 16:41
  SPEAKER_01: Or even some obscure things that exist still and are available, but you don't want them using right, some protocol that hasn't been used.
• 16:49
  SPEAKER_01: Right, exactly.
• 16:50
  SPEAKER_01: And like you don't want them connecting via fax and relaying the through the fax machine, which are there's all kinds of crazy techniques.
• 16:57
  SPEAKER_01: Well, right, through the fax.
• 16:59
  SPEAKER_00: Well, Valentino, I have applaud your sandboxing ability.
• 17:03
  SPEAKER_00: I have a another news story for you, though, which is that almost no developer has an air gapped system for their agents that is taking the same kind of precautions.
• 17:13
  SPEAKER_00: I think that that part is, I don't know, scary for another reason.
• 17:18
  SPEAKER_00: Maybe just because there aren't enough people that take it seriously or who feel like, well, what I did with a little bit of security or a little nod to security before is going to work just fine today, when actually is not at all.
• 17:34
  SPEAKER_00: An interesting thing is when I was, so I wanted to get what the cool kids had, and I wanted to get an agent running all night while I slept and knocking out a bunch of PRs, but I kept running into those checks because I don't want to run it with auto mode on.
• 17:49
  SPEAKER_00: And so I asked Claude, and Claude says to basically to not allow the thing to do anything and just whitelist.
• 17:56
  SPEAKER_00: And then when anytime it comes to you with a question, that's an opportunity to evaluate hey, going forward, do I want this to be allowed or not?
• 18:02
  SPEAKER_00: That I think is a nice way to not go through sandboxing and air gapping.
• 18:09
  SPEAKER_00: But the downside is that of course you're not going to get this thing running all day.
• 18:13
  SPEAKER_00: Yeah, it runs for an hour or so sometimes, it'll create a whole PR and I'll jump up and down because it finishes a PR in one shot.
• 18:20
  SPEAKER_00: But is it really going to do the kind of heavy lifting that the Obi Fernandez, right?
• 18:26
  SPEAKER_00: Like the people that are using these all day long, it's probably not going to get you that far.
• 18:32
  SPEAKER_01: That's true.
• 18:33
  SPEAKER_01: The way I look at it is like, why do you use auto mode?
• 18:36
  SPEAKER_01: Because you're not looking at it.
• 18:38
  unknown: Right.
• 18:39
  SPEAKER_01: Because you're not looking at like you don't want to have to look at it, you don't want to approve.
• 18:41
  SPEAKER_01: Like you want it to just run and then you come when the results are done.
• 18:45
  SPEAKER_01: That's scary to me to think about people not knowing what that means.
• 18:48
  SPEAKER_01: Yes.
• 18:49
  SPEAKER_01: And then as an example, auto mode running and then running malware that you can't undo and it you have no idea.
• 18:55
  SPEAKER_01: Yeah.
• 18:56
  SPEAKER_01: But at the same time, there are ways that you can preventative measures you can do without air gapping your system, right?
• 19:02
  SPEAKER_01: Like all of the transcripts are files and they're all preserved.
• 19:08
  SPEAKER_01: There are tools out there where you can go at and poke at those transcripts and even have an agent reviewing the transcripts and catching stuff, which I also recommend doing.
• 19:19
  SPEAKER_01: Yeah.
• 19:20
  SPEAKER_01: But yeah, be safe out there.
• 19:21
  SPEAKER_01: Be cautious and know what you're doing with auto mode.
• 19:25
  SPEAKER_00: We can do a whole episode on sandboxing your agents.
• 19:28
  SPEAKER_00: I mean, I think it's fascinating.
• 19:29
  SPEAKER_00: There's just I've got just the guess.
• 19:31
  SPEAKER_00: You know, to take the proper precautions, and if you can take the proper precautions and also be flying with your agents, that's the grail, right?
• 19:39
  SPEAKER_00: That's the holy grail.
• 19:40
  SPEAKER_01: Yeah.
• 19:40
  SPEAKER_01: I know a few people that probably should make a product out of this that I took inspiration from.
• 19:45
  SPEAKER_01: But yeah, okay.
• 19:48
  SPEAKER_01: All right, you're up.
• 19:49
  SPEAKER_01: All right, next one.
• 19:50
  SPEAKER_01: A critical rails flaw forced three emergency point releases.
• 19:54
  SPEAKER_01: We're we're hard on the security here.
• 19:56
  SPEAKER_01: This is the security.
• 19:58
  SPEAKER_01: I guess it makes sense with all of these latest easy add-ons to find vulnerabilities.
• 20:03
  SPEAKER_01: I guess it's helping the community.
• 20:05
  SPEAKER_01: But there were three emergency releases this past week after critical active storage bug was found that let attackers read arbitrary files, or worse.
• 20:17
  SPEAKER_01: And you know, one of the critical flaws is in active storage, their image variant processing, which is a common recurrence.
• 20:26
  SPEAKER_01: If you're not familiar in the Rails community, image variant processing using these third-party tools.
• 20:33
  SPEAKER_01: There's a lot of stuff that can, and funny kind of metadata you can attach to files of varying kinds that allows you to side skirt some security precautions in some of these image processing libraries that are very popular.
• 20:48
  SPEAKER_01: And they do get patched quickly when they are found, but then there's a propagation of that.
• 20:54
  SPEAKER_01: Then you have to update active storage and rails and all of these things.
• 20:59
  SPEAKER_01: And so if you're not out there and you're reading something you haven't been upgrading your active storage or Rails recently, do it now.
• 21:08
  SPEAKER_01: It's kind of urgent.
• 21:10
  SPEAKER_00: The easy way to tell, this doesn't happen all that often, but anytime you see a fourth number in uh your Rails version, right?
• 21:18
  SPEAKER_00: There's 7.2.3.2, uh, right, 8.0.5.1, which I just learned that fourth one is called a tweak version.
• 21:25
  SPEAKER_00: A tweak.
• 21:26
  SPEAKER_00: After major, minor, and tiny.
• 21:28
  SPEAKER_00: That's the tweak version.
• 21:29
  SPEAKER_00: That means that they didn't even go through the protocols of releasing a tiny version or a patch version.
• 21:36
  SPEAKER_00: They went with the tweak because it's that important to get it out there.
• 21:39
  SPEAKER_00: Definitely upgrade, it'll take two seconds.
• 21:42
  SPEAKER_00: It's probably sitting in your GitHub right now, although who knows?
• 21:44
  SPEAKER_00: GitHub might be down.
• 21:45
  SPEAKER_01: This is one where I feel like GitHub should just have something built in and just automatically apply and release for you.
• 21:52
  SPEAKER_01: Yeah, I don't know.
• 21:53
  SPEAKER_01: Although, like when you're getting to Reels and you have like a deployment process that might be more difficult, but like I feel like most people have it tied to GitHub.
• 22:00
  SPEAKER_01: Up in some mechanism to deploy, and like this is one where just like ship it, test pass.
• 22:06
  SPEAKER_01: This is more important.
• 22:08
  SPEAKER_01: Right.
• 22:08
  SPEAKER_00: This is more important than the person seeing it.
• 22:10
  SPEAKER_01: Right.
• 22:11
  SPEAKER_01: So I I do that with some things, but I feel like I'm missing some where I just don't care about them or I don't use them anymore.
• 22:18
  SPEAKER_01: And you know, I know.
• 22:20
  SPEAKER_00: I think there's at least one.
• 22:21
  SPEAKER_01: I have a project I'm working on called Frankenstein that I hope to solve that particular problem.
• 22:26
  SPEAKER_01: It'll reanimate your old projects to just make sure that they're up to date.
• 22:31
  SPEAKER_01: Oh, that's awesome.
• 22:32
  SPEAKER_01: We'll see how far it gets because it's on the stack of all my other stuff.
• 22:38
  SPEAKER_00: Yeah.
• 22:39
  SPEAKER_00: So the question here is with Rails and Ruby and RubyGems all needing emergency security fixes in the same week, is this just normal ecosystem maintenance working as intended?
• 22:49
  SPEAKER_00: Or is it a sign that the Rails attack surface is growing faster than the people patch can keep up?
• 22:55
  SPEAKER_00: And I honestly, and I think that maybe my feelings are shaded a little bit by having spent some time with the Ruby central security team at RubyConf.
• 23:06
  SPEAKER_00: But I actually think that they're or they've always been working hard, but their tools are much sharper than they were a year ago.
• 23:13
  SPEAKER_00: And I mean they know this too.
• 23:14
  SPEAKER_00: They've been writing about this.
• 23:16
  SPEAKER_00: I think that this is a sign of the community at large rising to the occasion, rising to the fact that, hey, there's a lot more stuff out there.
• 23:27
  SPEAKER_00: And just like you said earlier, oh man, we're already out of time.
• 23:31
  SPEAKER_00: Regardless of how sophisticated these models are, they're agents and they can run 24 hours a day and they're never gonna stop trying to find these vulnerabilities.
• 23:39
  SPEAKER_00: And so I think the fact that we have these is a net win for the report.
• 23:43
  SPEAKER_01: You gotta applaud the security team and really everybody helping out, contributing, because this fix got out really fast and was advertised incredibly well.
• 23:52
  SPEAKER_01: I saw it the same day that it was identified and fixed in my feeds.
• 23:56
  SPEAKER_01: Yeah.
• 23:56
  SPEAKER_01: And yeah, great work.
• 23:59
  SPEAKER_00: We need more of that.
• 24:00
  SPEAKER_01: Yeah.
• 24:00
  SPEAKER_00: And if you're curious about how all this works, we're gonna have Marty Hott, who is running the RubyGems org and running managing the security team on the show.
• 24:10
  SPEAKER_00: Um, that's gonna be great.
• 24:12
  SPEAKER_00: Looking forward to it.
• 24:12
  SPEAKER_00: Yeah, all right, Joe, what's next here?
• 24:15
  SPEAKER_00: All right, this is our last long one, then we've got a couple short ones.
• 24:18
  SPEAKER_00: So open source is quietly closing the door.
• 24:20
  SPEAKER_00: This is such an AI thing, quietly closing the door on human pull requests.
• 24:25
  SPEAKER_00: Uh so the story is that Vercel, it seems to be mostly Vercel, they're running an internal software factory of agents that are managing their thousand open issues and their 800 PRs.
• 24:38
  SPEAKER_00: And basically they're saying, no, we don't really need any humans right now.
• 24:41
  SPEAKER_00: We're just gonna have the AI build out this open source uh framework.
• 24:46
  SPEAKER_00: And then there's a new framework called Flu, which I admit I do not know.
• 24:51
  SPEAKER_00: And they have an outright no PR policy.
• 24:54
  SPEAKER_00: External PRs get auto-converted into issues, and then the best available uh LLMs decide what gets built.
• 25:01
  SPEAKER_00: Right.
• 25:02
  SPEAKER_00: So I guess the question is if AI agents can triage issues and ship well-specified PRs faster than most human contributors, is closing the door on outside PRs a maintainer being pragmatic, or open source giving up the thing that made it open.
• 25:19
  SPEAKER_00: Your thoughts, V.
• 25:20
  SPEAKER_01: Open source giving up.
• 25:23
  SPEAKER_01: You got me with that one.
• 25:25
  SPEAKER_01: People are still making these factories, right?
• 25:29
  SPEAKER_01: Like Vercel went out and they made the factory, somebody's managing that factory.
• 25:33
  SPEAKER_01: Is that giving up open source?
• 25:34
  SPEAKER_01: I feel like it's just reshaping what it means to be open.
• 25:38
  SPEAKER_01: Yeah, they still have the same controls as maintainers have.
• 25:42
  SPEAKER_01: You're not necessarily losing that aspect of what gets in or not of the system.
• 25:48
  SPEAKER_01: And to be honest, I've kind of been moving in this direction.
• 25:50
  SPEAKER_01: And Vercel's not the first ones to do this.
• 25:52
  SPEAKER_01: Like OpenAI and Anthropic have been talking about how they they auto-merge stuff and review after the fact in a lot of cases for quite a long time now.
• 26:02
  SPEAKER_01: And uh, this just seems to be straightforward.
• 26:06
  SPEAKER_01: I've actually adopted this at Czar and uh have this open source project I'm hoping to release soon called Zarmux, where you can set up these factories and the users of the system they dictate what needs to get done.
• 26:22
  SPEAKER_01: As I'm using my Zarmux TMUX pain autoprocessor with agents, I'm using it, I'm finding issues, and I'm filing it right in the session.
• 26:32
  SPEAKER_01: Other people are also doing that, and I don't want to have to sip through and triage all that.
• 26:36
  SPEAKER_01: We should all be at something, which our AI is very good at analyzing and coming to conclusions about patterns and things like that, is reasoning about what kinds of work is being requested, what needs to get done, what bugs need to be fixed, right?
• 26:52
  SPEAKER_01: It is as good as triaging as I would be.
• 26:55
  SPEAKER_00: I want to kind of be just really black and white and clear about this.
• 27:00
  SPEAKER_00: Open source maintainers can do whatever they want, anything they want.
• 27:06
  SPEAKER_00: If they don't want to listen to you and they don't want to review your PRs, that's fine.
• 27:10
  SPEAKER_00: That's totally fine.
• 27:11
  SPEAKER_00: I'm just gonna speak as somebody who has been bothering Marco Roth for the past month about his herb project, where I filed a couple of issues and I submitted a PR, and then I told him, Oh, hey, I'm gonna build this gem that embeds the herb gem on the command line and removes the need for you to package it with node because my project doesn't have any node dependency or npm dependency.
• 27:35
  SPEAKER_00: And you know, he was kind enough to keep up with some of it, but he's got another like 200 issues and people bothering about things all the time.
• 27:44
  SPEAKER_00: Creating a gem or a patch or a PR takes seconds now.
• 27:49
  SPEAKER_00: And what is this one guy who's got a job and maybe a family and like a life supposed to do?
• 27:55
  SPEAKER_00: The answer is he should do whatever it is he wants.
• 27:58
  SPEAKER_00: It's open source, it's a gift to the world.
• 28:00
  SPEAKER_01: Yep.
• 28:01
  SPEAKER_01: AIs can create new things if you don't like it, point an AI at it and say you want to manage it.
• 28:08
  SPEAKER_00: Right, yeah.
• 28:08
  SPEAKER_00: You don't like Vercell's AI SDK policy, then fork it and you make your own, and then you can talk to all of the people on the internet to your heart's content.
• 28:19
  SPEAKER_01: To that point, though, right?
• 28:20
  SPEAKER_01: Like, that's kind of where we're evolving, right?
• 28:22
  SPEAKER_01: Like, there will be communities of people that are like, I want it a little bit differently, I'm opinionated about it in some different ways.
• 28:28
  SPEAKER_01: And just like Spree, the Spree e-commerce platform in Rails.
• 28:32
  SPEAKER_01: What was it?
• 28:33
  SPEAKER_01: I forget who forked it and started operating the a solidus, right?
• 28:39
  SPEAKER_01: They still maintain it and they like the direction that they've taken.
• 28:42
  SPEAKER_01: There's spin-offs of Rails, you know, this spin-offs of Sinatra.
• 28:47
  SPEAKER_01: And people maintain those, and those communities thrive, and they like their new opinionated style.
• 28:53
  SPEAKER_01: Go for it.
• 28:54
  SPEAKER_01: Get your group together.
• 28:56
  SPEAKER_01: Yeah, we'll always have the bigger communities to fall back on.
• 28:59
  SPEAKER_00: All right, we've got uh only a couple of minutes for these.
• 29:01
  SPEAKER_00: So the first one, ChatGPT's desktop app is secretly hauling around a full copy of LibreOffice, which is really funny.
• 29:10
  SPEAKER_00: Uh Simon Willison went digging around the desktop app.
• 29:14
  SPEAKER_00: He found not just LibreOffice, but uh PDF tool poplar, Git, which is not really a surprise, some nested skills files.
• 29:23
  SPEAKER_00: Basically, it was or is 1.7 gigs of bloatware.
• 29:30
  SPEAKER_00: And it's funny because we just got finished talking about Ubuntu.
• 29:34
  SPEAKER_00: What's your take on this?
• 29:36
  SPEAKER_00: Are you okay with having a full copy of LibreOffice hidden inside your ChatGPT app?
• 29:41
  SPEAKER_01: No, obviously I want it using a shared install of some dependency like I have on all my you know the rest of my machine.
• 29:49
  SPEAKER_01: Yeah, if it's gonna use popular, great, like go install it like usual.
• 29:53
  SPEAKER_01: Yeah, I feel like there's even baked-in Apple triggers to like hook into those dependency systems.
• 30:01
  SPEAKER_01: Yeah, this one drives me a little crazy because Carmine who runs Ruby LLM, right, for the show, he has what is it, Fastify?
• 30:10
  SPEAKER_01: FastPotify?
• 30:12
  SPEAKER_01: Right?
• 30:12
  SPEAKER_01: Faster Spotify.
• 30:15
  SPEAKER_01: Right, right, yeah, where he basically was just like tired of the electron app of Spotify slowing his machine down, consuming all his resources.
• 30:21
  SPEAKER_01: I'm totally agree with him.
• 30:23
  SPEAKER_01: I use this now too.
• 30:24
  SPEAKER_01: It is great.
• 30:25
  SPEAKER_01: Oh yeah, really?
• 30:27
  SPEAKER_01: FastPotify.rocks.
• 30:29
  SPEAKER_01: That's great.
• 30:30
  SPEAKER_01: It's the same thing here.
• 30:31
  SPEAKER_01: You don't want Spotify bringing around whatever it brings around and consuming a bullet ton of resources just to play some audio files, right?
• 30:39
  SPEAKER_01: I always have to shut it down before we start the show because I'm it's just gonna eat.
• 30:46
  SPEAKER_01: Yeah.
• 30:47
  SPEAKER_01: But yeah, you know, like uh come on.
• 30:50
  SPEAKER_01: I guess it's kind of like circles back on the automated PR reviews.
• 30:56
  SPEAKER_00: Yeah, yeah, it kind of does.
• 30:58
  SPEAKER_00: Yeah, I know we're going long on this, but this reminds me, like I used to have Android phones all the time and I would root them.
• 31:04
  SPEAKER_00: But the greatest joy of that was that I got to remove all of the crap that got shipped with it.
• 31:09
  SPEAKER_00: And I don't have time anymore, and I just gave up and I use iPhone, but I still try and delete all of the stuff that they send me, and usually I'm successful.
• 31:17
  SPEAKER_00: Right.
• 31:18
  SPEAKER_00: But yeah, I don't want your chat app coming with an entire version of LibreOffice, which my god, I've used Ubuntu and know how bad LibreOffice is.
• 31:29
  SPEAKER_00: I don't want it on my Mac.
• 31:33
  SPEAKER_00: Oh yeah.
• 31:34
  SPEAKER_00: Anyway, we've got just one more story, and I know we're gonna hear the bell, but I think it's worth covering that Ractors delivered a 7x memory win.
• 31:43
  SPEAKER_00: And we're gonna celebrate that with the bell.
• 31:45
  SPEAKER_00: Woo! Edward Shins bringing Rails into the Ractor Age claims close to a seven times memory savings versus Puma on a real world app running Ractors in production.
• 31:57
  SPEAKER_00: So this is cool, and this comes from Ruby Weekly and awesome Ruby uh newsletters, both of which are great.
• 32:04
  SPEAKER_00: Uh, I'm personally interested in this because when David and I were writing the latest edition of the well-grounded Rubyist, Racters was included in Ruby 4, of course, but still listed as experimental.
• 32:17
  SPEAKER_00: We decided to give it kind of just short shrift because really a lot of it was unproven.
• 32:23
  SPEAKER_00: And interestingly, when I was at RubyConf just a month or two ago, uh we had uh a Ruby Central or a RubyConf talk about Ractors, and uh it was really interesting and it was informative, but it again was like it's kind of not really ready for prime time.
• 32:40
  SPEAKER_00: So I'm interested in this because maybe it represents a step forward, which is what the people who created Ractors and included it in Ruby were expecting.
• 32:49
  SPEAKER_00: Yeah.
• 32:50
  SPEAKER_00: So I guess my question for you is uh have you used them?
• 32:54
  SPEAKER_00: Have you seen any kind of performance gains?
• 32:56
  SPEAKER_01: I haven't used them recently, I've got to be honest.
• 33:00
  SPEAKER_01: I do have a few files where I had some bench parks set up, not in a Rails capacity, but just in a like network capacity.
• 33:08
  SPEAKER_01: And at the time, the async framework, thank you, Sammy Williams, it significantly performed better in some ways, because I feel like there were some missing pieces in Ruby still related to shared, I forget what they call it.
• 33:24
  SPEAKER_01: There's a way you have to like structure the data that gets passed through the reactors, and if you have any shared data that needs to be handled a specific way, I'm really excited that somebody has taken that on from my Rails perspective, so I don't have to think about that.
• 33:41
  SPEAKER_01: But this is like kind of the culmination of like the whole like concurrency in Ruby and Rails have being like the bottleneck of adoption, as a lot of people say, right?
• 33:52
  SPEAKER_01: Like, yeah, can you get true parallelism you know with Ruby?
• 33:56
  SPEAKER_00: And I feel like the answer is still no.
• 33:59
  SPEAKER_00: But but you're getting closer, yeah.
• 34:01
  SPEAKER_00: It was Eddie Silva, by the way, who gave that talk, okay, which was quite good.
• 34:04
  SPEAKER_00: It's called Ractors in Ruby for Message Passing Without the Pain.
• 34:08
  SPEAKER_00: And I'm with you on both things.
• 34:10
  SPEAKER_00: Well, first, that I'm glad I don't have to do it, and Rails is figuring it out for me, and also that if you really can get a performance gain, then this could be a way that we begin to design our objects for the future so that we can continue to keep up with you know the speed demands of sort of next generation computing.
• 34:29
  SPEAKER_01: Yeah.
• 34:30
  SPEAKER_01: You know, it's exciting to see that uh they got it to uh get true parallel threads without the gill getting in the way, which is just wild to see that actually coming to fruition.
• 34:40
  SPEAKER_00: Yeah, I have to take a closer look at this article because I want to know what they mean by without it getting in the way.
• 34:46
  SPEAKER_00: It's still there, so I'm curious what that means in practice, but I will take a look.
• 34:50
  SPEAKER_01: Yeah, I don't know.
• 34:52
  SPEAKER_00: If you know, come on the show and school us, you know, or shout at us.
• 34:56
  SPEAKER_00: Yeah, definitely.
• 34:57
  SPEAKER_00: Definitely on that note.
• 34:58
  SPEAKER_00: So uh we are at the end of our show.
• 35:00
  SPEAKER_00: This was fun.
• 35:01
  SPEAKER_00: I definitely want to do this again.
• 35:02
  SPEAKER_00: Excited too.
• 35:03
  SPEAKER_00: This is a lot of fun.
• 35:04
  SPEAKER_00: Our next episode will have a guest.
• 35:06
  SPEAKER_00: We've got, I think, six or seven guests already booked for the show through uh the end of the year, uh, which is really exciting.
• 35:14
  SPEAKER_00: We've got some really great guests.
• 35:15
  SPEAKER_00: And if you're interested in coming on and joining us, send us a message.
• 35:19
  SPEAKER_00: We're easy to find.
• 35:20
  SPEAKER_01: Uh, shout at us too.
• 35:21
  SPEAKER_01: If you don't like what we say, please tell us.
• 35:23
  SPEAKER_01: Let us know.
• 35:24
  SPEAKER_00: We read all comments and take them all seriously.
• 35:27
  SPEAKER_00: Seriously.
• 35:27
  SPEAKER_00: Unlike your open source maintainers, we're gonna read all of your comments and all of your comments.
• 35:32
  SPEAKER_01: Or something will at least service it to us.
• 35:34
  SPEAKER_01: Maybe we don't read them directly up front.
• 35:37
  SPEAKER_01: Yeah.
• 35:37
  SPEAKER_01: But we will find them and we will see them.
• 35:41
  SPEAKER_00: Yeah.
• 35:42
  SPEAKER_01: Yeah.
• 35:43
  SPEAKER_00: All right.
• 35:44
  SPEAKER_00: Thanks, Valentino.
• 35:46
  SPEAKER_00: Great talking with you, and thanks everybody for listening, and we'll talk to you again next week.