Meta Muse AI Agent Zero Day One Click Exploit - AI Will Destroy Normies

SPEAKER_1 (0:00)

Lorde, lorde, lorde, lorde, welcome back. Today is story time with Eli the Computer Guy. I'm gonna tell you a bit of a story so you will understand why I am losing my mind at this particular article, and why, frankly, we're probably all screwed. So anyways, I don't know, a number of months ago, maybe a year ago, I was at a meetup for All Things Open. All Things Open, to be clear, is a phenomenal organization. They do meetups in the Research Triangle area, and you all know how I love the Research Triangle folks. They do meetups there. Plus, they have two conferences. They have the All Things Open Conference, I think it's in November, and then they have the All Things AI Conference that's in March or something like that. But basically, this is a very large meetup technology community type group where people come together to give speeches, do education, and all of that kind of stuff. And again, it is in the Research Triangle. This isn't in Asheville, North Carolina, or Pensacola, Florida, or some place like that where people don't really understand a lot about technology. This is in Research Triangle, right? They've got Red Hat, they've got IBM, they've got Cisco. They've got a lot of the big companies there. So anyways, I was there, and I was learning a little bit more about AI and what AI can do for you when you're building out your little coding environments. And again, this was like six months to a year ago. And the person who was giving the speech, giving the presentation that night, was showing all of these amazing new tools where you could tell AI to create coding projects. Again, basically that whole Vibe coding thing. And that these tools would give shell access to your Vibe coding tools, right? So not only could it write your Python code, or your JavaScript, or whatever else, but it can create files, it can create database files, it can modify permissions on your system, and all of that kind of stuff. So anyways, I'm just sitting there in the back, as I do. And at the end, I raise my hand. I'm like, hey, so in this modern world, again, I'm an old timer. I've been in this field for over 30 years. I get, I'm getting a bit long in the tooth. I'm like, you know, back in the days, we had this thing called Active Directory, right? Trying to make sure that our interns and secretaries didn't wipe out production databases, right? If my secretary had been able to wipe out my production database, I don't think I would have had continued to have a job after that point in time. So anyways, like, you know, hey, back then, again, we had Active Directory. And I haven't talked to this guy, right? So this guy is up there in Research Triangle in a prominent tech community event with a hundred technology professionals talking about how this Vibe Coding tool gives shell access to the system, right? To automatically be able to do these things. And I'm like, hey, hey, is there like Active Directory? Like, is there a way? And again, this is an interesting thing to think about. When we talk about privileges, right? Normally, when we think about privileges, we think about privileges based off of the user account. Whatever account you are logged in as, you have a certain privilege level that allows you to do whatever. One of the interesting things when we start looking at the AI world is you may have multiple entities. I guess we could call, again, it's not intelligence. But anyway, you could think of it as an entity. You are an entity, and it is an entity, and you may have multiple other entities that are actively working within the environment under the exact same login credentials, so privilege level. So again, in 2025 or 2026, whenever this was, is there a modern version of something like Active Directory to make sure your VibeCoding tool doesn't wipe out your production database? And remember the guy looked at me.

Oh God, it's so painful. This field can be so painful sometimes. This guy looked at me in front of like 100 people and said, well, you trust your developers, don't you?

At which point, I looked at him and smiled and said, thank you.

Cause if I had said anything else, I would have started screaming, and Todd probably would not like me anymore. And I like Todd. I don't want to piss off Todd.

So I shut my mouth, but I thought that was very interesting. A technology professional at a real technology event in front of a hundred technology professionals talking about this vibe coding tool that has shell access. And when I talked to him, tried to ask questions about, like, what is the appropriate security tools, you know, working in this particular environment, his response is, well, you trust your developers, don't you? Motherfucker, I don't trust anybody. Distrust, verify, stay suspicious. I don't trust my own mother, and she's dead in a box in the ground. I don't fucking trust her. So no, no, I wouldn't trust my dev team. I don't even trust myself, right? And again, that's the one thing. Like, like, again, when Willow, if you actually ever saw the Willow movie, way back when, 1980s, whatever, and like, Willow, Willow, Willow has to learn the most powerful finger in magic. And at the end of it, he learns that it is his finger, that you control the magic. All right, here's what you have to understand in the technology world. What is the most dangerous finger in technology? Motherfucker, yours, yours, you are the number one most like the person to wipe out your production database. You know, we sit here, I sit here and I laugh about the interns, and I laugh about the employees, and I laugh about the AI agents, and I laugh at them so much to deflect anybody from looking at me because it was probably me. I'm probably the one that things up. So no, I don't trust my dev team, I don't fucking trust myself because I've actually been in this field for more than 20 goddamn minutes.