Person
1 episodes · 25 quoted claims
Dane Knecht says that before the recent AI surge, internet-wide incidents like Log4j and Shellshock occurred about once a year.
“previously on the internet, we would see these log for j moments, uh, or these shell shock or, uh, uh, type of, uh, incidents, maybe once a year”
Dane Knecht says Log4j-scale vulnerabilities now happen weekly, though not all are publicly reported.
“to these things are now happening weekly. Uh, not all of them are publicly reported on”
Dane Knecht describes a recently publicized case in which a key protecting TLS and web PKI was generated from a seed of the single number four.
“was, uh, um, was secured by the number four. Uh, literally, uh, the num- they basically”
Dane Knecht says Cloudflare uses lava lamps as a source of randomness for cryptography.
“that's why Cloudflare has our lava lamps, is so that, uh, uh, you can get good randomness.”
Dane Knecht says OpenAI recently found the seeds for the NIST elliptic curves released in the early 2000s.
“last week, I, uh, I think OpenAI, uh, found the seeds, uh, for, uh, the nis, the the nist curves, uh, that were, uh, back in 2,000”
Dane Knecht says some of the larger recent vulnerabilities were found by high school students rather than nation states.
“actually, uh, haven't been nation states, they've, they've been, uh, um, you know, high school kids, even”
Dane Knecht says bug bounties give young researchers who use AI agents a financial incentive to find vulnerabilities.
“there's financial reward for them. There's, uh, bug bounties that, uh, they get paid, uh, out, uh, you know, sizable amounts.”
Dane Knecht says companies that moved from castle-and-moat network security toward zero trust over the past five to ten years are better positioned against the new threats.
“a lot of the things that we've done over the past, you know, five or ten years, uh, moving away from a kind of a castle and moat infrastructure”
Dane Knecht says the industry is currently patching seventy years of accumulated software.
“we are patching seventy years of of, uh, software, uh, a out there. So so some of it, it, it is just catch up”
Dane Knecht says early AI coding tools are verbose and tend to create complexity, which works against reducing attack surface.
“the early AI is is, uh, very verbose. It likes to create complexity.”
Cloudflare maintains an internal document called the Codex, built from team RFCs, that sets out how to build secure and available software.
“we have a, uh, a document called the Codex, which is kind of like, uh, uh, uh, uh, you know, a buildup of a lot of RFCs that the teams have built”
Dane Knecht cites Amazon as an example of a company blocking personal shopping agents.
“you saw Amazon just say, uh, no, no, no personal, no personal shopping there, uh, from an agent.”
Cloudflare has released a monetization gateway that lets sites placed behind Cloudflare take micropayments for their content, according to Dane Knecht.
“we've released, uh, uh, uh, a conference monetization gateway where we make it easy for people to put their sites behind us”
Cloudflare is working with OpenAI on a project called Signals that helps agents discover new content without crawling the entire internet.
“project called signals, where, uh, we're making it easier for, uh, um, agents to actually discover content instead of having to crawl the entire internet”
Cloudflare OS is Cloudflare's internal platform for how employees use AI, which grew out of concerns about data leaking.
“Cloudflare OS was, uh, is our internal, uh, um, platform for, uh, how our employees, uh, use AI every day”
Dane Knecht says Cloudflare's developer platform grew over ten years from a serverless compute primitive to over a hundred tools.
“now, you know, over a hundred different, uh, uh, uh, developer platform tools, uh, from storage to databases to durable objects.”
Dane Knecht says Cloudflare OS is used more by go-to-market and G&A teams than by Cloudflare's engineering teams.
“it's actually used more by, uh, uh, our go to market teams and our GNA teams, uh, uh, than it is even used by our engineering teams.”
Dane Knecht says Cloudflare's AI-driven restructuring was the first time the company had ever laid off colleagues.
“saying goodbye to some of our colleagues, uh, it was the first time Cloudflare ever did it.”
Cloudflare replaced a three-team process for emailing customers with one tool where a product manager describes a cohort and drafts an email, which is rewritten in Cloudflare's voice and sent to a manager for approval.
“a product manager now goes in and describes the cohort. Uh, they write an email, it rewrites it in Cloudflare's voice, it sends it to their manager”
Dane Knecht says Cloudflare sends escalating usage notices for heavy AI use, going to the individual first, then their manager, then a VP, instead of running a token leaderboard.
“I think it gets to, like, 500, uh, it goes to your manager, and if it goes to a thousand, it goes to a VP in a day.”
Dane Knecht says Cloudflare had about 200 interns two years ago, whom he describes as its first fully AI-native workers.
“Cloudflare did something, uh, you know, two years ago, we had about 200 interns, and, uh, what we saw was those interns”
Cloudflare set up an agents@cloudflare email alias in January where employees could submit tasks and receive skill files in reply.
“we, uh, had an email, uh, alias called agents at Cloudflare”
Dane Knecht says Cloudflare has one red team today and expects to have four or five by the end of next year.
“today we have one red team. I I think by the end of the, you know, the end of the year next year, we will probably have four or five red teams.”
Dane Knecht says that when a major vulnerability like the React one emerged last year, Cloudflare extended its protections to all customers, not just paying ones.
“when these major vulnerabilities come out, uh, like the React one, uh, uh, last year, uh. We don't just give it to our paid customers”
Dane Knecht says that before Cloudflare started, only about 3,000 sites worldwide had a large-scale content delivery network, compared with hundreds of millions now.
“before Cloudflare started, uh, you know, uh, there were probably 3,000 sites in the world that had a large scale CDN”