We’re heading toward a world where autonomous systems will be everywhere. They will move people, goods, sensors, and even decisions without asking for human input.
Today, we only see the early signals. A few drones in the air. A handful of self-driving trucks. Some real-time sensing of key infrastructure. But the truth is we still see very little. At best, we capture five percent of our own terrain in real time. Satellites give us fragments. Drones give us glimpses. Most of the world, most of the time, is still invisible.
That is going to change.
At some point, every square inch of land and ocean will be monitored continuously. Machines will scan, interpret, and update the state of the physical world with no gaps and no delay. That data will be available not just to us, but to whoever gets there first.
The same shift is coming to logistics. Right now, we move things within the limits of what humans can manage. Flights are scheduled. Trucks are driven. Operators are assigned. But once autonomy becomes the default, the scale of movement changes. We will see a four or five-fold increase in volume. Goods will be transferred instantly. People will be relocated without pause. Entire networks will function without waiting for human authorization.
This introduces a different kind of power structure.
The question becomes who owns the pathways. Who sees what. Who can act first. This has nothing to do with ideology and everything to do with speed, saturation, and reach. The systems that dominate communication, transportation, and sensing will also shape which forms of government persist. Those with the clearest picture and the fastest ability to respond will set the conditions the rest of the world has to live within.
We like to believe that the future will preserve the values we care about. But that depends on who gets there first. And what they decide to build.
I’m obviously biased. As a U.S. Navy veteran, my bet is on the United States. Not just to build faster systems, but to build ones that reflect something deeper… our values, our way of life, and the belief that power should still answer to people.
That only happens if we pay attention. If we stay in the race. If we lead.
🇺🇸
cc @USAvionix@pmarca@Benioff@garrytan@rauchg@elonmusk@nikitabier@naval
It's been an eventful week. Multiple vulnerabilites in Internet facing software, coding repositories, examples of agent behavior that seem concerning and a flurry of security specialists with solutions that can partially solve your problem. There in lies the challenge. Given the state of IT and security infrastructure, no one solution works. Let's break it down:
1/3
1. Vulnerabilites are being found and will continue to be found as models get more capable, the fragmented nature of the effort denies us the opportunity for a comprehensive find and replace option.
2. Even if all vulnerabilities could be found instantly and patches available - we will be reliant on the ability of enterprises to deploy all these changes at speed. It is not clear what the collateral impact of all these patches will/could be to our infrastructure of deployed en masse.
We will need a hybrid patch approach.
3. Virtual patching(VP) is needed in conjunction with direct patching but for a comprehensive (VP) solve you have to be lucky enough to have "modern frontier defenders" (Cyber companies that have vaulted infrastructure that can create patches at speed and push content rapidly to protect their customers) you need them for your network traffic, your traffic to applications on the cloud, your WAF, your end point.
4. There will continue to be patches that will need to be deployed directly but virtual patching will take the heavy load off.
2/3 Medium term solve:
Unfortunately token economics and current cyber architectures will not allow for defender swarms to contend with an offensive attack launched using agents. (Some x pundits who aren't steeped in cyber should take heed). Yes, theoretically we should aspire to have these agentic swarms defend us when we are under attack, unfortunately an attack is a sniper moment, chained vulnerabilities, cloaked attack followed by swift exfiltration. It's a speed program not a brute force problem.
To solve for this, enterprises need to get their SOC architecture right, logs, feeds, cyber products orchestrated via a modern SOAR for swift response. Only then can we deploy agents to detect and remediate. In addition, enterprises need to modernize and dare I say platformize their perimeter stack to ensure consistency.
Unfortunately, enterprises still seem to not see the urgency across the board, decisions are stuck, CIO/CISO's have a lot on their plate. While some honestly have bit seen the scale of such a problem before and it's hard convincing the organization that one needs to open the floodgates on modernizing the IT and security infrastructure. So we will continue to see environments being brought down to patch today it's for PHP, tomorrow it will be for the next one.
3/3 AI deployments are the"wild wild west" - LLM capabilities are expanding faster than we can build products to secure them. Sure an agent will jump across guardrails in a research lab, which is a lesson for all of us to deploy agents securely. But there is a lag between the discovery, the availability of that in a public model and the time needed for the cyber industry to build governance or an antidote. And no, dear frontier lab friends, the world cannot just trust you to build the solve. The infrastructure industry in tech builds and the cyber industry secured and provides assurance to the boards and organizations around security and safety.
AI security is the new attack surface. CEOs (present company included) want AI adoption, getting the pace of adoption wrong could be the last decision we make, at the same time "deploying it wrong" could have the same consequence.
There are billions of dollars being spent on coding, is your coding harness secure? Start there. If agents can jump guardrails, they can hide stuff in code.
Validate business outcomes needed, test your user case and ensure agentic deployments are well guard railed. Deploy a second set of eyes to watch your deployments for drift, compliance and verifiability.
@imagine@WonderStudiosX@glumlot_ Here’s just one example. The ships are all too perfectly organized, barely moving with the waves or reacting to the wind…
New on our Engineering blog: Creating in-house source control.
In May, we merged around 2,500 code changes per day. In September, we merged more than 30,000 per day. As a result, we became bottlenecked by developer infrastructure built for human (rather than agent) scale.
Here, we share how we built a new version control system—and fully migrated our monorepo from git—in five months: https://t.co/wzNkwHs7IN
World Labs' Dr. Fei-Fei Li on why the 3D world and spatial intelligence are fundamentally different from language models:
"Language is fundamentally a purely generated signal. There's no language out there. You don't go out in the nature and there's words written in the sky for you."
"Whatever data you feed in, you pretty much can just somehow regurgitate with enough generalizability the same data out, and that's language to language."
"But the 3D world is not. There is a 3D world out there that follows laws of physics, that has its own structures due to materials and many other things. And to fundamentally back that information out and be able to represent it and be able to generate it is just fundamentally quite a different problem."
"We will be borrowing similar ideas or useful ideas from language and LLMs, but this is fundamentally philosophically, to me, a different problem."
@drfeifei