Yeah.

Love to hear it.

Um, I'll give you guys a quick tour of, uh, how we made Trail of Bits AI-native so far.

Okay, so just to level set, I think this is a really common problem across the industry.

Back in February, there was a big survey of thousands of CEOs, and the result was that AI was having no measurable impact on employment or productivity.

At the time, people were calling it a new solo paradox, which is a reference to this guy, Robert Solo, an economist in 1987, who said, you can see the computer age everywhere except in the productivity statistics.

And I think the same thing is happening with AI right now.

Can't build anything else

Um, is this like a, a blip on the curve that we're, we're going through at the moment in terms of finding and fixing these things? Is this just the new normal in terms of the, the rate and velocity of fixing things? Like what, what becomes of this once, you know, the, the programs like this, I guess, you know, have, have done their job or, or need to, to wind up?

Yeah.

I think this is the new normal and we've gotta help project maintainers keep up, uh, and stay ahead of the curve.

And that's a process, you know, it's not like a magic switch that you can turn.

It's really a human process where you have to work with project maintainers to help them understand and get tooled up on the, the benefits of these tools, and as well as make the code bases amenable to having the tools used on them.

Because new models are gonna come out every single month and there's a [chuckles] enormous supply of people that wanna use them to find bugs, and we, we just need to do this in order to like skill up a lot of the community to, to stay ahead of the curve.

Uh, so this project is ongoing.

But is that because that, that hasn't come yet, like that, that sort of reckoning is not yet upon us? I'm just curious how you think about the how do you tally up all the things we're finding versus the, the actual impact that we see?

But Dan Guido says that's not enough.

The effectiveness of these techniques don't really go down.

Um, there are always people out there that haven't seen and internalized this information.

And, uh, you know, case in point, the Twitter accounts that contacted me, uh, they're still up.They're seemingly still active.

Um, they are Twitter accounts you could talk to right now.

And, uh, I would bet that there have been additional victims from those same two Twitter accounts, uh, since Trail of Bits published our blog on it.

Um, so I, I, I don't see a good reason for them to stop unless somebody actually tracks down who they are and literally arrests the people behind it.

Because while crypto might be mostly anonymous, it isn't completely untraceable.

But Dan Guido says that's not enough.

The effectiveness of these techniques don't really go down.

Um, there are always people out there that haven't seen and internalized this information.

And, uh, you know, case in point, the Twitter accounts that contacted me, uh, they're still up.

They're seemingly still active.

Um, they are Twitter accounts you could talk to right now.

And, um, I'll bet that there have been additional victims from those same two Twitter accounts, uh, since Trail of Bits published our blog on it.

Because while crypto might be mostly anonymous, it isn't completely untraceable.