The Entropy Podcast

In this episode of the Entropy Podcast, host Francis Gorman speaks with Alethe Denis, a senior security consultant at Bishop Fox, about her experiences in social engineering and the DEFCON community. Alethe shares her journey into the world of cybersecurity, her participation in the Social Engineering Capture the Flag contest, and the strategies she employed to succeed. The conversation delves into the ethics of social engineering, the impact of AI on security practices, and the importance of understanding human behavior in cybersecurity. Alethe also offers advice for those looking to enter the field of social engineering, emphasizing the value of mentorship and foundational knowledge.

Takeaways

• Alethe Denis emphasizes the welcoming nature of the DEFCON community.
• The Social Engineering Capture the Flag contest is a significant event for learning and showcasing skills.
• Understanding human psychology is crucial for effective social engineering.
• Ethics play a vital role in social engineering practices.
• AI is changing the landscape of social engineering and cybersecurity.
• Organizations need to align their testing with realistic attack scenarios.
• Mentorship is essential for those starting in social engineering.
• Building rapport is a key strategy in social engineering.
• Human behavior is often the weakest link in cybersecurity.
• Continuous learning and adaptation are necessary in the field of cybersecurity.

In this episode of the Entropy Podcast, host Francis Gorman engages with Dov Baron, an expert on emotional intelligence and leadership, to explore the implications of transhumanism and the rapid advancement of AI. They discuss the ethical dilemmas posed by technology, the necessity of purpose and meaning in an increasingly automated world, and the importance of emotional intelligence in leadership. Dov emphasizes the need for guidelines in AI development to safeguard human values and the emotional source code that drives human behavior. The conversation highlights the challenges and opportunities presented by the convergence of humanity and technology, urging listeners to consider the future of work and the human condition in a tech-driven era.

Takeaways

• Dov emphasizes the importance of emotional intelligence in leadership.
• The convergence of technology and humanity raises ethical concerns.
• AI's rapid advancement necessitates guidelines to protect human values.
• Purpose and meaning are essential for human fulfillment in an AI-driven world.
• The emotional source code influences individual and organizational behavior.
• Human beings are driven by identity and comfort, impacting their choices.
• AI can augment human capabilities but may also lead to isolation.
• The need for a moral compass in technological innovation is critical.
• Emotional logic drives human behavior more than rational thought.
• The future of work will be significantly shaped by AI and automation.

Sound Bites

"We need purpose and meaning."
"Normal isn't healthy."
"Human beings need validation."

Here's the report we discussed in the episode:

Is Our Soul’s Future Silicon

In this episode of the Entropy Podcast, host Francis Gorman speaks with cybersecurity expert Ross Young about the complexities of cybersecurity leadership. They discuss the challenges of budgeting, the importance of tool utilization, and the often overlooked impact of reputational damage. Ross shares insights from his book, 'Cybersecurity's Dirty Secret,' and introduces the OWASP Threat and Safeguard Matrix as a framework for understanding cybersecurity threats. The conversation also delves into the evolving role of AI in cybersecurity, the necessity of a comprehensive cyber strategy, and the skills required to become a successful CISO.

Takeaways

• Ross Young emphasizes the importance of budgeting in cybersecurity leadership.
• Understanding tool utilization can prevent wasted resources.
• Reputational damage may not be as impactful as previously thought.
• The OWASP Threat and Safeguard Matrix helps identify material threats.
• AI in cybersecurity requires careful oversight and governance.
• A comprehensive cyber strategy should include people, processes, and tools.
• Vulnerability management will become increasingly challenging with AI advancements.
• Building relationships within the organization is crucial for a CISO.
• Gamification techniques can enhance organizational change.
• Continuous learning and skill development are essential for aspiring CISOs.

Sound Bites

• "Why Most Budgets Go to Waste"
• "We haven't fully deployed our existing tools."
• "We need to have oversight on AI."

You can also check out the following items discussed during the show:

CISO Tradecraft episode on strategy:
https://cisotradecraft.substack.com/p/refreshing-your-cybersecurity-strategy?utm_source=publication-search

Buy Ross's book "Cybersecurity's Dirty Secret"
https://www.amazon.com/Cybersecuritys-Dirty-Secret-Budgets-Tradecraft%C2%AE/dp/B0G26WHVTG/  

In this conversation, David discusses the intricacies of interviews in the cybersecurity field, particularly focusing on the balance between providing necessary information and safeguarding sensitive details. Drawing from his experience recruiting for MI5, he highlights the unique challenges faced in cyber interviews, where the stakes are high due to the potential for information to be exploited by malicious actors. David emphasizes the need for companies to rethink their approach to sharing information during the recruitment process to protect their systems and personnel.

Takeaways

• Even when you're in an interview, you have to consider what you're actually going to say.
• Recruiting for MI5 was always quite exciting.
• They could never send you a job spec, which is a unique challenge.
• A huge amount of companies should think about information security in interviews.
• In a cyber interview, you're giving out a lot of information.
• It's important to consider what questions are asked in the interview.
• Personal interests can be interesting information for bad actors.
• Companies need to be cautious about the information they share.
• Cyber interviews require careful consideration of information shared.
• The dynamics of cyber interviews are complex and require strategic thinking.

Sound Bites

• "They could never send you a job spec."
• "Companies should think about that now."
• "Information for someone nefarious or a bad actor."

In this deep dive conversation, Francis Gorman sits down with Kyrtin Atreides, COO of AGI Laboratory, to explore what may be the most advanced and misunderstood frontier in artificial intelligence. Kyrtin shares how his team’s Independent Core Observer Model (ICOM) differs radically from the mainstream LLM driven AI ecosystem, focusing instead on hyper complexity, real-time cognition, cybersecurity resilience, scalable intelligence, and ethical self-improvement.

They discuss why most of what we call “AI” today is fragile, hype-driven, and misaligned with human needs and why true AGI requires a fundamentally different architecture. Kyrtin explains how their eighth-generation systems will use collective intelligence, culturally diverse seed data, and recursive self-improvement to achieve both local human alignment and global meta-alignment across societies.

The conversation touches on everything from circular economies to psychology, bullshit jobs, future labor markets, and the false premise that GPUs will power the future of AGI. Kyrtin offers a grounded, insider perspective on AGI that rejects fear driven narratives while acknowledging the risks of poorly built systems. For him, the real danger isn’t Terminator scenarios it’s low-quality AI plugged into high-stakes infrastructure.

This episode offers a rare, unfiltered look behind the curtain of a different kind of AGI: one built to understand, collaborate, and elevate human potential rather than replace it.

Takeaways

Real AGI won’t be LLM-based it's an entirely different architecture.

Collective intelligence is the key to ethical AGI.

Scalable intelligence requires real-time cognition and recursive self-improvement.

GPUs won’t power the future of AGI.

AI doesn’t mean mass unemployment.

The real risk: low-quality systems deployed in high-risk areas.

Hypercomplex global problems become solvable.

AGI as an organizational brain.

Sound Bytes 

“Humans hit cognitive limits—AGI doesn’t. Hypercomplexity is where real intelligence actually begins.”

“LLMs are not intelligence. They’re probability engines dressed up as thinking.”

“Everyone talks about GPU-powered AI. But actual intelligence isn’t brute force.”

“We discovered by accident that you can seed an AI with a person’s writing and get a weak digital proxy of them.”

“You’re not in competition with AGI. You’re not even in the same category of cognition.”

“The Terminator fear misses the real danger: low-quality AI plugged into high-stakes systems.”

“People need meaningful work. AGI should elevate that not erase it.”

In this episode, Itan Barmes cuts through the hype surrounding quantum computing and breaks down what actually matters for security leaders. He explains why qubit counts alone are a poor indicator of progress, and how his layered framework helps separate genuine scientific breakthroughs from noise. The discussion dives into the real quantum risks facing Bitcoin and Ethereum, highlighting why some assets are far more exposed than others and why dynamic attacks remain a universal challenge.

Itan shares the story of how his work in cryptographic inventory led to founding Qiz Security, and why most organizations misunderstand what a C-BOM should be. He outlines the practical steps CISOs need to take now, stressing inventory, governance, and realistic prioritization over fear-driven messages. The episode wraps with a grounded look at timelines, the coming inflection point in scalable quantum demonstrations, and why starting early is far better than arriving a day late.

Framework discussed on how to qualify news you read around quantum breakthroughs: https://www.deloitte.com/content/dam/assets-shared/docs/services/risk-advisory/2025/why-quantum-computers-are-not-cracking-rsa-yet.pdf

Takeaways

• Quantum computing hype often oversimplifies complex realities.
• Understanding quantum risks is crucial for organizations today.
• Bitcoin has vulnerabilities to quantum attacks, but not all are at risk.
• Dynamic attacks on cryptocurrencies pose significant threats.
• Cryptographic inventory is essential for risk mitigation.
• Organizations must prioritize actionable steps over exhaustive inventories.
• Procrastination in addressing quantum risks is common among executives.
• The future of quantum computing is uncertain but potentially transformative.
• Community collaboration is vital for addressing quantum challenges.
• Pragmatic approaches are necessary for effective quantum readiness.

Sound Bites

• "The devil is in the details."
• "Everything is going to break."
• "You need to start taking action."

In this episode, former MI6 officer, author, and corporate strategist Matthew Dunn sits down with Francis Gorman to pull back the curtain on life inside British intelligence and how the lessons of espionage translate to leadership, business, and personal mindset.

Matthew recounts how he was secretly recruited into MI6 through university talent spotters, underwent one of the most rigorous selection and vetting processes in government, and operated under 14 different alias identities during his field career. He explains how emotional intelligence, adaptability, and courage are the real tools of a spy far more vital than gadgets or brute intellect.

Takeaways

• Sometimes what we perceive to be impossible is actually very possible.
• An individual can achieve much by believing in themselves.
• Drawing from experiences can provide insights into overcoming obstacles.
• A positive mindset is key to achieving success.
• Obstacles are often a matter of perception.
• Achieving goals requires a strong belief in one's capabilities.

In this episode of the Entropy Podcast, host Francis Gorman speaks with Paul Boudrye, founder and CEO of Success Genome Incorporated. They explore Paul's unique entrepreneurial journey, the concept of the 'success genome', and the importance of human relationships in achieving success. The conversation delves into the evolving role of AI, the significance of friendship, and the challenges of loneliness in a hyper-connected world. Paul emphasizes the need for a shift in how we build networks and teams, advocating for a more human-centric approach to collaboration and success.

Takeaways:

• Paul emphasizes the importance of human relationships in achieving success.
• The concept of a 'success genome' is about showcasing individual talents beyond traditional resumes.
• Loneliness is a growing issue in a hyper-connected world, often exacerbated by technology.
• Friendship plays a crucial role in personal and professional success.
• The current job application process is inefficient and lacks human interaction.
• AI should be seen as a tool for co-evolution, reflecting our own humanity.
• Investing in human capital and relationships can solve many societal issues.
• The meaning of life can be distilled to the quality of friendships we maintain.
• We need to teach young people the value of true friendship and connection.
• Laughter and human interaction are essential for a fulfilling life.

Sound Bites:

• "Everything comes from friendship."
• "Loneliness is a state of mind."
• "We don't laugh enough in life."

In this episode of the Entropy Podcast, host Francis Gorman speaks with Thomas Squeo, CTO of ThoughtWorks, about the intersection of customer demand, technology strategy, and delivery in the context of AI adoption. They discuss the risks associated with rushing into AI without a strategic plan, the importance of governance and observability in AI systems, and the evolving role of knowledge workers in an AI-driven landscape. Thomas emphasizes the need for organizations to balance innovation with responsible deployment and regulatory compliance.

Takeaways

• AI is central to enterprise strategy and delivery.
• Organizations often rush into AI without a clear strategy.
• Effective AI adoption requires controls, evaluations, and budgets.
• The hype around AI often exceeds the reality of its implementation.
• Governance and observability are crucial for AI systems.
• Knowledge workers will evolve rather than be replaced by AI.
• AI can enhance productivity in knowledge work environments.
• Regulation can support responsible AI innovation.
• Organizations need to adapt to regulatory environments in AI deployment.
• Successful AI initiatives often come from a combination of top-down and bottom-up approaches.

Sound Bites

• "Deploy controls, evals and budgets."
• "POC purgatory participants."
• "Regulation is a mechanism for trust."

Dr. David Archer, CTO at Niobium and a veteran in privacy-enhancing technologies, joins Francis Gorman to discuss the future of computer architecture, encryption, and data integrity. David emphasizes moving beyond perimeter defenses toward cryptographically assured systems where data remains protected throughout its lifecycle. He covers the challenges of implementing fully homomorphic encryption (FHE), the role of zero-trust architectures, the interplay between AI and quantum computing, and the need for crypto-agility. Looking ahead, David envisions a world where data authenticity is provable end-to-end—ensuring trust in an era of AI-generated content and disinformation.

Key Takeaways

1. From Perimeter to Intrinsic Security
   • Current systems rely too heavily on firewalls and perimeter defenses. The future lies in embedding encryption directly into processing and architecture.
2. Homomorphic Encryption as a Game Changer
   • FHE allows computations on encrypted data, but performance and complexity challenges remain. It could require new paradigms for databases and programming models.
3. Zero Trust Needs to Be Cryptographically Proven
   • Today’s zero trust is heuristic; the next step is mathematically provable, cryptographically assured trust.
4. Major Hurdles Ahead
   • Challenges span mathematics, hardware, software design, and programmer education. Hardware accelerators will likely play a big role early on.
5. Quantum Skepticism with Urgency
   • Archer doubts practical quantum computers in the next 5–10 years but warns of “harvest now, decrypt later” risks—making crypto-agility essential.
6. AI: Double-Edged Sword
   • AI boosts productivity for experts but risks stunting critical thinking for students. It also raises concerns about privacy, disinformation, and unverifiable outputs.
7. Data Lifecycle Integrity
   • Archer’s most exciting vision: cryptographic assurance of data provenance. Imagine video footage with an auditable cryptographic chain proving authenticity from capture to broadcast.

Sound Bytes

• “We can’t just rely on a hard shell with a soft middle—data must stay secure through its entire lifecycle.”
• “Zero trust today is heuristic. The future is provable, cryptographically assured security.”
• “Crypto-agility must be built into every software stack. Otherwise, we’ll always be behind.”
• “Quantum computing may not be as close as it looks in research papers—objects in the mirror are closer than they appear.”
• “AI can empower experts but risks leaving students without the critical thinking skills to spot flaws.”
• “The integrity of data will define the future. We need systems that prove where data came from and how it was changed.”