Thai Duong on Why Compressing Encrypted Data Leaks Secrets
Thai Duong explains why compressing data before encryption breaks web security, exposing session cookies and passwords without breaking the cipher.
PHP2Shell Won't Be the Last Big AI Cybersecurity Risk
Calif cybersecurity executives Thai Duong and Bruce Dang join hosts Joe Weisenthal and Tracy Alloway to discuss how AI models are revolutionizing software hacking, highlighted by the recent PHP2Shell vulnerability affecting 70% of websites. They explain how frontier AI is compressing exploit generation timelines, collapsing the window between software patching and exploitation, and enabling machine-speed enterprise breaches. The discussion explores why coding models are inherently dual-use hacking tools and what defenses can realistically withstand the emerging era of centaur hackers.
Key takeaways
- Classical computer science curricula taught engineers to compress data before encrypting it because encryption randomizes data and destroys compression efficiency. Read more →
- Traditional security split flaws into zero-day bugs that nobody knows and n-day bugs that vendors have disclosed and patched. Read more →
- Formal verification tools like Lean only work on isolated, small software components; they fail completely on complex platforms like web browsers. Read more →
3 articles from this episode
Thai Duong on Minus One-Day Bugs and AI Hacking
AI coding models now reverse security patches into working exploits within hours. Calif cybersecurity expert Thai Duong explains minus one-day bugs.
Why Math Cannot Fix Software Security
Formal verification fails at scale. Bruce Dang and Thai Duong explain why code churn and AI audits break traditional software defense.
More Odd Lots episodes
- What Wall Street Really Thinks About the AI Trade NowNov 1 · 5 articles
- AI Agents Are Already Changing the Price of GoodsNov 1 · 6 articles
- The Forgotten Godmother of Economic LiteratureOct 25 · 5 articles
- How a Chicago Restaurant Has Stayed Open For Nearly Three DecadesOct 25 · 3 articles