Skip to main content
Bruce Schneier

Bruce Schneier

American cryptographer

Oct 13, 2026

13:54
Okay.
13:54
This is talk about how powerful the models are, and they're trying to pump up multi-billion dollar valuations for an IPO, right? They have no business model.
14:03
These companies make no sense, but they wanna cash out before everything crashes.
14:08
So anything that says how powerful and scary and effective these models are is better for the company.
14:15
The employees, I mean, the best diagnosis, if I can use that word, I've heard, is that these people are incredibly overworked.
14:23
They've been running full-tilt for a year or more.
14:27
You know, and like the sailors on that aircraft carrier, they're tired.
15:30
Okay
22:21
Is that what we're talking about now?
22:23
You know, I really often dislike worst case examples because then we're just discussing extremes.
22:29
I think the worst, I guess the worst case is the fiery death of everybody on the planet plus a zombie apocalypse.
22:37
At the same time, we have some hot zone pandemic.
22:40
I don't know.
22:42
That sounds pretty bad.
22:43
It sounds pretty bad, right? It probably makes sense to back off that pretty quickly.

14 MINS LATER

36:52
with
18:13
Yeah.
18:13
And the way to think of an agent is an AI that uses tools in a loop.
18:21
So what I mean by that is the AI has access to resources, memory, your files, the internet, other AIs, and it can do things.
18:34
send an email, control your thermostat, buy a book, book an airline ticket, drive a car from here to there.
18:43
And it does things.
18:45
It gets feedback and does another thing.
18:48
So you're not there talking to it.

24 MINS LATER

42:37
10 million AI agents systematically searching the entire rule space is something else.
11:18
So when we talk about a decentralized web, what are we actually talking about? Like what becomes possible in a decentralized system that is difficult and impossible on the internet as we know it today? And any of you can start, or I'm also happy to call you out.
11:37
Well, the web is a decentralized system.
11:40
It's like email.
11:41
Anybody can put up a website.
11:43
You can put a web server on your computer, on my computer, on someone else's computer.
11:46
You can have Google hosted.
11:48
You don't like Google, you can move it somewhere else tomorrow.

7 MINS LATER

19:12
All right,
3:37
A-and that would include, are you, um, averse to making, uh, your own projection for when the possibility of uncontrolled superintelligence, uh, emerges?
3:51
You know, it seems to be any time between next week and never, and pinning it down more than that, uh, is, is impossible.
3:59
A-and nobody can.
4:00
You know, e-even harder than predicting what will happen is when it will happen, and really, we don't know, right? The models are getting better.
4:09
They're not gonna get better forever.
4:10
They're gonna reach some asymptote, right? They're gonna level off.
4:14
There'll be new technologies.
5:06
Right.
15:38
Bruce, do you have any to add in that, in that tour, or is that a, is that a good coverage?
15:42
I mean, there, there's a lot of things in politics.
15:44
Uh, Germany, uh, where there's a, a lot of political parties, they regularly produce, uh, voter guides so voters can know what's going on.
15:53
Uh, recently, they added a chatbot functionality to that, where instead of reading a dry piece of paper, you can engage in a conversation, uh, to learn about different political parties.
16:04
That's another political one.
16:06
Uh, Chile.
16:08
Chile has a rule that when you introduce legislation, you need to explain how it affects existing legislation.
19:38
Can you say more about that, why you think that's so, and whether that's a good thing or a bad thing? I know you guys often say it's good and bad, but, um, I'm curious, um, what-- how is that gonna change the traits that make for effective political leaders?
20:45
Mm
20:45
...
20:45
in a sense it's self-fulfilling prophecy.
20:47
Uh, I mean, uh, on- only a slightly related example, uh, RSA Conference, right? The biggest conference in our, in our industry.
20:54
It's really expensive to exhibit there.
20:57
Why do you exhibit there? To prove you can exhibit there.
21:01
You know, and I, so I think Anthropic spends that kind of money to prove that they can spend that kind of money to justify their astronomical valuation so that the next, you know, person believes it.

14 MINS LATER

35:07
Novel
15:33
to? Well, before we get to sort of the doom and gloom that we're going to talk about in the context of AI in society, what are some of the positive ways in which countries, governments have been using AI to deliver better services, to communicate better with constituents? What have you seen?
15:55
So there's a lot.
15:57
And, God, I mean, the doom and gloom bothers me just as much as the utopia people do.
16:03
AI is a tool.
16:04
It enhances your power.
16:06
If you want more democracy, AI will help you.
16:09
If you want less democracy, AI will help you as well.

33 MINS LATER

49:19
What do you say? Do you agree with somebody who says that? Or do you push back and say this is anomalous?
speaker_1ADVERTISER
0:52
From the world of Legally Blonde, watch Elle, a new original series only on Prime Video July 1st.
0:58
[instrumental music] [audience applauding] So security is two different things, right? It's a feeling and it's a reality.
1:19
A- And they're different.
1:20
You could feel secure even if you're not, and you can be secure even if you don't feel it.
1:28
I mean, really, we have two separate concepts mapped onto the same word, and what I wanna do in this talk is to split them apart, figuring out when they diverge and how they converge.
1:40
And language is actually a problem here.
1:42
There aren't a lot of good words for the concepts, uh, we're gonna talk about.

14 MINS LATER

speaker_8ADVERTISER
15:24
Actual mileage and range may vary.
69:21
Could this be one thing to... balance the costs and access? Could AI give those people in working class communities the same medical care of the so-called rich and famous?
69:35
It's not the AI, it's the medical system, right? US has this horrible, expensive system ponderous medical system where people are making all sorts of money on the backs of us.
69:48
So yes, you can imagine a world or a country where that happens, where AI gives benefits to people.
69:55
You can imagine a country where all events of AI are captured by whatever private equity firm owns the hospital down the street.
70:04
It's not the tech.
70:05
It's the economic system the tech is in.
70:07
I think a lot about AI being used to augment doctors or in places in the planet where there are no doctors, where the choice isn't AI or doctor, but it's AI or somebody who got a week's of training in health somewhere.
70:37
So do you believe, Bruce Schneier, that we have to beat China?
22:56
This is my moment to remind you that the internet brings you apparently water and power and your paycheck because Bruce says this comic is accurate.
23:05
I mean, the internet, it's cobbled together.
23:07
It's perpetually in beta.
23:09
We are relying on an infrastructure that is put together by companies with their own agendas, by hobbyists who are trying to do a nice thing, and there isn't a whole lot of deliberate, "Let's pay attention to this and make it reliable."
24:12
And yet even the guy who has articulated this to us, the guy who wrote Click Here to Kill Everybody, justDoesn't seem that concerned
24:22
I think most of us are rightly not worried about that.
24:26
It's like, do you worry about electricity failing? Kind of.
24:30
You have a flashlight.
22:18
Uh, is that warning just more Anthropic hype?
22:21
Yeah.
22:21
It's hard to know because you, again, you don't get the details.
22:24
So you, uh, gave the impressive numbers.
22:27
75 of these were patched.
22:30
What? Like, how is that...
22:33
I mean, uh, it, it...
23:44
Yeah.
34:06
We need states to play their role." Talk a little bit to us about where states should have the ability to put their own, uh, thumbprint on regulation.
34:19
I, I think this is a time when we need experimentation.
34:21
That's what you get from the states.
34:23
I think the states are closer to citizens.
34:25
In the same way states regulate, you know, so many aspects o- of people's lives, uh, AI is touching those, and we need regulation there.
34:37
I mean, the argument that, you know, too many regulations are hard to follow I think is just whining on the part of these multi-hundred-billion-dollar tech monopolies.
34:48
God, if you can't figure out 50 regulations, what are you doing in business? I have no sympathy for you.

7 MINS LATER

41:40
What's your response to that?
1:18
What do you think of that sort of argument?
1:20
I mean, that's kind of a bullshit argument.
1:23
These are not tools like a hammer.
1:26
These are not passive tools.
1:29
These are models that are designed very carefully to do certain things and not do others.
1:37
It's more like an automobile.
1:44
I mean, we could probably use it as a handgun as a metaphor here.

7 MINS LATER

9:00
If we imagine that the opposite kind of bill was passed, which does, I mean, we've kind of gone into it a bit already, but one that says you are specifically liable in the event of any deaths, of anything like that, what sort of effect would that have on the open source models? And would it maybe create an inadvertent monopoly of AI companies that can afford legal cases and to pay for overstepping on that line?
3:41
And there's a complete lack of comparison in anthropics announcement to traditional tools, like you mentioned earlier as well.
3:48
Right.
3:49
And I'm not sure how much that matters.
3:51
So starting in like November, December, these tools have gotten much better at software.
3:59
We sort of hit a plateau in many chat applications, but the writing of code, of sophisticated code, of finding vulnerabilities, of exploiting them and patching them, really changed in the past few months.
4:14
So let's take Anthropic out of this for a second.
4:18
So we're now moving into a world where these AIs can find vulnerabilities in software, whether it's old things like BSD or OpenSSL, which is another commonly used piece of software that a month ago, someone found a whole bunch of old vulnerabilities in using a different model or new software being written.
9:10
With that, I suppose, aside for a second, where do you see, what's your prediction on who this will favor in the long run?
7:26
What are the ones that kind of left the either filled you with the most awe or left the most sort of meaningful impression that you're most excited about?
7:34
Oh, wow.
7:34
So I can give I can give a few different stories.
7:38
Let me start with Germany.
7:40
This is an easy one.
7:41
So Germany has a complex political system, lots of parties, and they have long had a nonpartisan voter guide.
7:50
Now, a document that voters can read to figure out what the parties stand for and who to vote for.

8 MINS LATER

15:41
Is it is that coming is keeping humans in the loop like is that a technological decision? Is that a human and societal decision? How is this going to unfold in the next couple of years?
23:18
H- how do you envision that coming about? I think it's a wonderful dream, but I'm, I am- I will confess, I'm making a struggle on seeing how do we get from, from here to there.
23:26
Yeah, the US doesn't do this, of course not.
23:29
I mean, we can't even fund, uh, you know, government weather service anymore.
23:33
I mean, the US is done.
23:34
Just assume that US government will just decay and not do any of this.
23:39
It probably couldn't before, just because we believe corporations should do all the things.
23:43
Other countries don't have that bias.

10 MINS LATER

34:09
Maybe, maybe just a couple of standouts from your perspective.
35:00
It's important to make the point that if you no longer have any, um, solid confidence that most, like, 99% of your source of information is actually true beyond an AI video generator, how on earth can you make the calculations necessary in order to form political, um, judgments?
35:29
Yeah.
35:30
I mean, this is a real interesting question.
35:31
It- it's not new, right? You know, uh, doctored pho- doctored photographs is old as photography.
35:37
Photoshop's been around since the 1980s.
35:40
What's different is, it's now easier to fabricate images a- and voices and, and videos.
35:47
I think about it if, like, if we are ever gonna argue about what to do, right? I mean, if the, the actual business of politics, we have to agree on what the world is.

8 MINS LATER

44:06
Could you just explain a little bit how that might work in practice?
7:30
I was wondering if you could give me an idea of who's doing what in this business.
7:34
You know, it's really interesting that all of the top-tier models are about the same.
7:39
You'd imagine with these different skunk works doing secret stuff, they'd be different.
7:43
But when you look at performance, they're all about the same.
7:46
My guess is that these large models will never be profitable.
7:50
That, you know, we don't want a chatbot that does everything.
7:53
We want a chatbot that is a good travel agent, or a good investment counselor, or a good talk show host, right? You know, we want to do a specialized thing.
11:33
Does it amaze you?
50:50
I was wondering if you could give me an idea of who's doing what in this business.
50:54
You know, it's really interesting that all of the top-tier models are about the same.
50:59
You'd imagine with these different skunk works doing secret stuff, they'd be different.
51:03
But when you look at performance, they're all about the same.
51:07
My guess is that these large models will never be profitable.
51:10
That, you know, we don't want a chatbot that does everything.
51:13
We want a chatbot that is a good travel agent or a good investment counselor or a good talk show host, right? You know, we wanna do a specialized thing, and we're seeing these smaller, nimbler, cheaper models.
53:40
Does it amaze you?
7:20
What does that mean to you?
7:22
So it beats a couple of things.
7:24
Power is the most important one.
7:26
If the AI system distributes power, it's generally good.
7:30
If it further concentrates power, it's probably bad.
7:33
So there are AI systems right now that help people run for office.
7:38
There's a lot of paperwork, there are things you have to do.

15 MINS LATER

23:00
How can regulation ensure AI systems used in democracy are secure, unbiased, and transparent?
2:30
Correct?
2:31
You know, I don't buy the arms race argument.
2:34
I mean, this research happens in the open.
2:35
I mean, like, I mean, the DeepSeek model, which is a Chinese model that, that did so well because they couldn't get the, uh, the good American chips.
2:42
All that research is public.
2:44
We learn from that.
2:44
They learn from us.
6:06
Do people, should people be worried, or should there be somebody cognizant of not, uh, not AIing ourselves out of, uh, workers?
105:28
Do people, should people be worried, or should there be somebody cognizant of not, uh, not AIing ourselves out of, uh, workers?
105:37
I think the market will AI workers away, right? The market seeks efficiencies.
105:42
It doesn't seek, you know, the benefit to society.
105:45
I think it's gonna be a real problem.
105:46
I mean, think about apprentice-based professions, right? It's not plumber.
105:50
It's lawyer, it's doctor, it's accountant, it's architect, right? Junior level positions will...
105:56
There'll be fewer of them, at best.
109:34
But do you think they could help expedite some, with the backup and the courts?
speaker_2UNKNOWN
13:18
So we're already seeing it and
13:23
You know, so these are attacks and it could be adversaries or our people, right? The NSA will do this too.
13:28
And they're sensibly there on our side.
13:30
So again, we're seeing AI for vulnerability finding.
13:33
So finding vulnerabilities in code, useful both attack and defense.
13:37
AIs for spam detection.
13:40
Also, that means AIs for spam detection evasion, right? So those two arms races, finding and hiding vulnerabilities, finding and hiding spam.

10 MINS LATER

23:39
the horizon for our existing public key methods? Should we start to migrate now or is this going to need to happen in five to 10 years?

We value your privacy

We use cookies to understand how you use our platform and to improve your experience. Click “Accept All” to consent, or “Decline non-essential” to opt out of non-essential cookies. Read our Privacy Policy.