Agentic Security: Permissions, Provenance, and the Agent Supply Chain — Steve Yegge, Gas Town

Summary

Steve Yegge advierte sobre los riesgos de seguridad derivados de la automatización masiva con IA. Explica cómo la capacidad de generar código 10 veces más rápido aumenta la superficie de vulnerabilidad y cómo técnicas como el 'hallucination squatting' pueden comprometer la cadena de suministro. Recomienda adoptar un enfoque de seguridad proactivo, tratando a las IAs como desarrolladores que necesitan supervisión, validación mediante múltiples pases y auditorías constantes con herramientas como Snyk y Chainguard para mitigar riesgos en un entorno donde los ataques evolucionan a gran velocidad.

Topics covered

• Efectos de la IA en la velocidad de desarrollo
• Nuevas amenazas como el hallucination squatting

+5 more topics (full content when you follow the channel)

Transcript excerpt

[music] All right. Hey everybody. Uh yeah, yep. Yep. Yep. Okay. I have about 18 minutes. Um I have a slide deck here that that Claude put together for me, but Claude still can't do very good slide decks, so I apologize for that. Just just just focus on me right right here. This is like the most fun thing to do ever. Now, if I if I start like running out of time, can can you like call time for me? All right, perfect. So, I'm Steve Yagi. I am here on behalf of Sneak today. I am not getting paid for this talk or anything like that. They were really nice enough to buy me a ticket to the conference, which is cool. But I'm mostly here because I wanted to hang out with all of you and I don't bite and feel free to come and say hi afterwards. I I wander the halls amazed at all the brand logos. Um I'm up here because look the title of my talk is like aentic security but the real title of my talk i…