Privacy Please
Tune into "Privacy Please," where hosts Cam and Gabe engage with privacy and security professionals around the planet. They bring expert insights to the table and break down complicated tech stuff everyone can understand.
Privacy Please
S5, E229 - Final Show of 2024: Finding Balance with AI, Privacy, Cybersecurity and much more!
The episode reflects on the intertwined impacts of AI, privacy, and cybersecurity throughout 2024. We explore trends around ransomware, consumer trust in data privacy, and what to expect in 2025 as technologies evolve and regulations advance.
• Discussion of AI's ambiguous role in cybersecurity
• Rise of ransomware incidents and implications for critical sectors
• Notable trends in consumer preferences regarding data privacy
• Legislative developments in data protection regulations
• Predictions for 2025 focused on quantum computing and cybersecurity strategies
All righty, then. Ladies and gentlemen, welcome back to another episode of Privacy, please. I'm Cameron Ivey, alongside my friend and co-host and host, mr Cool. Mr Gabe Gumbs, I got upgraded. I got upgraded. I got upgraded.
Speaker 2:And the crowd does not actually go wild, it's dead silent over here it's dead freaking silent over there. There's no crowd. If there were, they'd be throwing tomatoes. They'd be like boo boo Boo this guy, you suck. We want the frog. Points to anyone who gets that reference. It's a Muppets reference.
Speaker 1:Speaking of the muppets, the, did you see the? Uh, the long-awaited very, almost kind of sad that the, the, that contract ended with the muppets, so they're kind of up in the air, I think. Um, it was either with nbc or whoever they were with for the longest time. And yeah, but good news for Muppets fans they are removing Aerosmith Rocket Roller Coaster and putting Muppets in its place, because Aerosmith isn't relevant. But apparently their contract at Disney is still with Muppets. Fascinating, fascinating.
Speaker 2:Bonus news for Muppets fans the election is over, so all of your. For Muppets fans, the election is over, so all of your favorite Muppets have either won or lost. But either way, that's mine. It's just, I think the.
Speaker 1:the only winners are the, the two old guys, Um, I forget their names.
Speaker 2:Muppet one and Muppet two.
Speaker 1:No, don't. They. Don't they have names, or no, don't know. The two, the two that are always in the balcony that are talking crap, oh yeah yeah, yeah, those are.
Speaker 2:Those are the points. Points to cam. Those are the ones. That's that scream you suck, we want the frog. I forget their names. I forget their names, but yes, the two old dudes in the balcony.
Speaker 1:You suck, we want. I wish that that's having them follow along your life would be pretty fun for them, I would I'd be okay with that I'd be okay down with that, yeah for sure, those two grumpy muppets following me.
Speaker 2:It almost feels like like your life is like that when you work in cyber security and privacy anyway, like those two muppets are just following you around all year round yep just telling you how much you suck and how much they want the frog instead.
Speaker 1:Gabe, that's your internal voice Telling you that you're not good enough yet.
Speaker 2:So you keep going Saying the quiet part out loud, yeah.
Speaker 1:Speaking of. I mean this is kind of off topic, but I don't know. I think, um, there's been such a weird thing about bashing men this year, if I'm not mistaken.
Speaker 2:And you know what that needs to come to an end it felt like that, yeah, they were being attacked. Yeah, it definitely felt like that. I tell you, though, sometimes I'm, I'm, I'm, I'm skeptical and like who's driving these narratives right? Like true, because although I, I agree with it, it's like I, I read it and I'm like but who told you where you get this? Because none of us told you that. I mean, we were all faking it, but we didn't say this is true. I know the men. We didn't say we didn't say.
Speaker 1:But the weird thing is is like I saw a lot of music too, a lot of a lot, a lot of artists that are independent artists making songs about men's health and mental health. Yeah, that's been a decent trend.
Speaker 2:I've seen similar. I think that's a good trend. It is yeah, technically on topic. I mean, it's our yearly wrap-up show and we were going to talk trends of 24. So all of these are very on top.
Speaker 1:That's true, it's very true. Well, men's health is important, mental health as well as women and all human beings, and health, indeed, just all around.
Speaker 2:Yeah, finding that balance is key for sure, your data health, your data health is important. The health of your data is very important.
Speaker 1:Don't trust every doctor, you know what I mean no, no, some of those doctors aren't even healthy themselves, if you know what I'm saying.
Speaker 2:Isn't that the worst? You see a doctor smoking on a cigarette and you're like ugh.
Speaker 1:It's like a trainer that tries to tell you you know how to eat and how to train, when they're not even fit themselves, which is silly which is silly.
Speaker 2:No, never, um, never trust a skinny chef is what is what daddy used to say. Papa always said never trust a skinny chef.
Speaker 1:Wise words yeah, man was filled with wisdom well, yeah, I mean in reflection of 2024 as a whole. Man, it's been a year. There's been a lot going on.
Speaker 2:You know what the number one thing was, and I think you'll agree with this. It feels like it's died down a little bit, but maybe not. But flipping AI. Ai dominated 24 in every way possible. Gpt was everywhere, like COVID. Gpt was just like the infection that spread. It was the COVID of 2024.
Speaker 1:It was the COVID of 2024.
Speaker 2:GPT was the COVID of 2024. That's the title of this episode. Gpt was the COVID of 2024. And in a lot of ways, it did a lot of harm. It did a lot of harm the way COVID did harm. We saw an increase in cyber security attacks that were very driven um by ai, which is to say, the bad guys learned how to use ai to to to make themselves better. Everything from generative ai to write better phishing emails to leveraging ai to write better malware code. We see it everywhere in the bad guy landscape, like oh, yeah, yeah, in uh ai.
Speaker 1:I knew this was obviously going to be a topic that we're going to talk about, but let me just say one thing about chat.
Speaker 2:You just gave away to the listeners that we don't prep together ahead of time. Who preps? Who preps? Just you guys.
Speaker 1:Boring, yeah what do you want us to read off some sheets or something exactly? That's not real. That's not what we're here for. What's real is this chad gpt. I do not like what they have changed with it recently, where it's trying to do too much. Oh yeah, I don't. Have you realized? Have you noticed that, where you try to tell a simple task to help with organizing something and it just does way too much and you're like, no, what is this? This is this isn't even what I asked for I have gotten.
Speaker 2:Whenever I do use generative ai, I've gotten very strict about like like my prompts have all kinds of details like and do not do it while standing on one foot facing east.
Speaker 2:Wait, that's not how you work on a day on a standing desk right, like when you ask it a task, you're right, though like it's you've got to be like so much more specific, and I think that's because it's actually gotten better. Like when it was dumber, it couldn't do more right like, so it was like, ah, I've done all I can and I've stopped, but now it's getting better and better. Has this inverse property of like maybe doing more than you really need, or required or asked.
Speaker 1:Well, that's the only reason why I was saying that I agree with you. I think it's gotten better, but I think it's also gotten like it's almost. You tell it something and then you have to reiterate the next round. After that comes the results. You have to say no, I want something a little more simplistic. Like this is too much, so I'm having to go in and tell it like no, make this dumber for me please. This sounds so robotic. I need a little bit more human, even though you're not a human.
Speaker 2:It's also gotten ridiculously good at coding. I've used it to put us around with some very small projects of my own. How do you trust it? How do you check it? How do you? So? That's a great question. The short answer is, at least for myself, is in small parts that I can actually validate like, as opposed to try to do big monolithic things, can actually validate like, as opposed to try to do big monolithic things. Um, but I have a friend who's I I swear to you he's he's generating probably 70 of his code right now with just genervi. To be fair, he's doing a lot of prototyping work, which is probably what tools like genervi are best at right. Like I don't think you want to use it to build real production software, but yeah, you know he's prototyping so much faster and cranking out tons of code with generative ai. It's impressive to watch it really is.
Speaker 1:So is that gonna? I mean, is that a threat to be taking jobs from coders?
Speaker 2:no, because actual coders still have to take prototypes and make it into things that work and scale. So no, if anything, I'm of the opinion that it might increase the number of coders. If we gain the ability to rapidly prototype more solutions, we may find ourselves needing more people to build those solutions, so it actually, I don't think, will take jobs away.
Speaker 2:From that perspective, and because it's gotten so good at, for example, the things I just described. We're going to also see the bad guys get a lot better at generating malware and all that's going to do is create more demand. On the defender side of the fence, ai is definitely creating an arms race, and the people in the middle sitting back selling CPUs to power this well, they had a really good year. If you look at 2024 stocks, if you think the AI companies did well, look at the chip manufacturers oh yeah. If you think the AI companies did well, look at the chip manufacturers oh yeah. Every chat GPT article was. They were just like that meme with the black guy standing behind a tree rubbing his hands like this. That was all the chip guys just like yeah, oh man well, you know what the old, the old adage goes.
Speaker 1:I don't know what it is, but good versus evil, there's always got to be an evil if there's a good right.
Speaker 2:A bit of a nihilist view, but I get it. Yeah, I don't disagree. I don't disagree. I don't disagree at all. Existence is, it's good, yeah.
Speaker 1:We have to have that.
Speaker 2:Yeah, that balance has to exist somewhere somehow.
Speaker 1:Yeah, because how else are we going to get challenged or grow, or improve things.
Speaker 2:I'd be okay if ransomware never existed any longer, I mean, if it disappeared tomorrow although I'm heavily invested in solving the problem and I think one of the things as we get to talking about trends of 25, I think we will see the problem grow, but I think we're going to see more solution providers actually step up to the table and try and tackle ransomware in a way that isn't just a cash grab for them. I'm not saying I think the numbers are going to go down in 25. I actually think the numbers may start going down by 2030. But I think the next several years it'll grow. But I also think we'll see a lot of people really fighting the good fight in a way that isn't, like I said, just a cash grab. Yeah.
Speaker 1:We'll stay on this topic. So, when it comes to ransomware in 2024 game and the whole thing with AI, how has that changed the game in terms of like, did that make ransomware rise this past year? And I mean, let's talk about it from a vulnerability aspect and also from the tool side of things, if, if you have that, that's a good.
Speaker 2:That's a good place to press on. So we saw the numbers rise for sure. I don't know if we can just attribute the numbers just to AI. I think we could probably attribute the numbers to protect themselves against it, and it continues to also be difficult for organizations to recover after they've been hit by it, and so that has driven definitely a larger rise in the tactics being used.
Speaker 2:Ransomware attackers realize they don't just have to steal your data, they just have to keep you from your data. To steal your data, they just have to keep you from your data, and if they can successfully do that, there's a lot more ways for them to do that namely keep you from your data than it is for them to just get your data. And so that gave rise to it. What AI did do for ransom attacks in particular, it enhanced a lot of the tools that they were using. It really made it a lot easier for them to again do things like generate phishing campaigns that were grammatically accurate and were able to bypass security email gateways and things of that nature ways and things of that nature.
Speaker 2:We saw entire new malware kits show up on the black market that were all AI powered right Like we saw a lot of that. So what we saw was AI contributing to the productivity of attackers. We definitely saw that, which is unfortunately. I don't think we saw as much productivity gains on the defender side of the fence. Although a number of cybersecurity solutions were introduced to the market that all touted AI capabilities, I don't think I saw any that tipped the scales and it's like oh wow, okay, thanks to AI in this security product, we've now gotten much better at blank problem. I don't know anyone that can fill in that blank we've now gotten much better at blank problem.
Speaker 1:I don't know anyone that can fill in that blank. So, in your mind and your thoughts going into 2025, I'm going to just do this now for this last episode of the year. If it is we're going to hone it on balance. How do you balance the new use of AI and inside cybersecurity.
Speaker 2:How do we find that balance going into 2025, in your opinion? I think we point those new tools at the problem, as opposed to trying to simply shove and embed them into the solutions. That's not meant to be an overly general statement, so let me bring it down a little bit more. I think we have to start using AI smarter and better. We have to start using it to help solve the actual problems we're trying to solve, for example, differentiating someone posing as someone else versus that real person, right, as opposed to simply shoving AI into the box so that we can sell more of the thing in the box and go hey guys, look version five now with new AI, and the price has gone up. There's been a lot of cash grab. There just has been A lot of quiche, quiche, a lot of quiche, a lot of people grabbing at the quiche. I like the qu cache. Yeah, okay, I like my cache and cache.
Speaker 2:That's how I take it.
Speaker 1:So here's just facts, just to kind of look over that I pulled up Ransomware attacks increased by 150% this year. That's a wild number. 150%, that's a wild number, mostly for critical infrastructure and healthcare, yeah, which makes sense.
Speaker 2:That makes a lot of sense. I think we'll see more of that. We saw a lot of healthcare attacks. I think we'll see a whole lot more of that.
Speaker 1:I don't know how true this is, but maybe you can fact check it. It says that AI driven cybersecurity solutions can reduce the threat detection time by up to 90%. I can see the efficiency of using AI for that, but I don't know how true that is. That number seems a little high.
Speaker 2:I think that number should be qualified. It can definitely increase the threat detection for a lot of tactics. There are specific tactics that become easier to find.
Speaker 1:Can you give an example? Can you give an example of what that actually means?
Speaker 2:Yeah, it's easier to detect leveraging AI. Some network attacks Okay, especially some of the reconnaissance level attacks, attacks, right, like the ones that are simply prodding and poking and looking for things, because those, those have they're, they're pretty, the the probabilistic nature of them is relatively defined, that you can, like. Ai is good for that. Ai getting better at, say, detecting phishing attacks I, I still don't think we've seen that yet and there's a little bit of I don't know how that's going to work either. Right, yeah, you feed it more phishing emails to train it on it. But those same detection engines are being used by the bad guys as they generate new phishing emails to see if they can bypass them. Right, that? I think there's some places where trying to leverage AI, in my opinion, is just not going to yield the results we actually want. Using AI in the privacy space and or in the security space to identify sensitive information, for example yeah, I think we may continue to see those kinds of things getting much better. Yeah.
Speaker 1:Anything else on the security side to reflect on, maybe things around zero trust.
Speaker 2:Zero trust saw a healthy amount of adoption in 2024. I don't know if 2024 was the year it went from just marketing buzzwords to real technologies that implemented zero trust I'll use the phrasing by the letter of the law, so to speak. You know, nist literally does have a series of bullet points that highlight, you know, what zero trust systems should look like and entail and how they should behave. And, yeah, I feel like we've gotten better across the board at adopting zero trust, even if it's just the very first steps of okay, as an organization, we're looking to move towards that direction. Definitely a great year for it. Versus the years prior, it was still just a lot of talking and a lot of education. I feel like we're tipping past that. I'll agree with that.
Speaker 1:Nice. Let's move into privacy developments this last year, talk a little bit about, let's see, the role of privacy enhancing technologies, so other otherwise known as P E, t's um around modern data analysis. Yeah, um, I don't know like differential privacy and homographic encryption were really big topics at least that I remember from this year. Yeah, um, a lot of tech graphic encryption were really big topics at least that I remember from this year. Yeah, yeah, um, a lot of tech, a lot of major tech companies were adopting.
Speaker 2:um, I don't know what are your thoughts on that. I think I saw three trends that really stood out in 2024, and one of them I think is a very important one which may have helped the others a significant expansion in the number of chief privacy officer roles. Those were either people that were taking on dual roles and or that role itself was created as an individual role, but ultimately we saw someone in a leadership position become responsible for data privacy, and that, I think, was huge. We saw that across the board in a lot of areas. We saw a hell of a lot of scrutiny of AI's impact on privacy.
Speaker 2:Speaking of AI, there was a lot, a lot, a lot, a lot of concerns around the impact that AI does have on privacy across the board. It had been so rapidly adopted, without necessarily balancing the needs that come along with privacy, that we probably don't even know the full extent to which some of those concerns are valid and others are less worrying. We saw that. And then was it last week's episode, I think you covered it, maybe it was the week prior to that we saw a significant rise in legislative developments.
Speaker 1:Yes.
Speaker 2:Just tons and tons of new legislation, not just in the US but across the entire country, but hell in the US specifically, since we don't have a national law that governs privacy, data privacy that is. We saw so many on the state level.
Speaker 1:State level. Yeah, we got eight coming in 2025 that are already going into effect, most of them in January, some in July, a little bit later. Gdpr this is a fact. Gdpr inspired over 100 countries to implement or enhance their data protection laws, which is crazy powerful.
Speaker 2:That's ridiculous, yeah.
Speaker 1:A survey found that 70% of consumers are more likely to trust companies that prioritize data privacy. I know that was huge this year in consumer trust. That was a big thing, I know, which will continue. Like how do companies and tech companies continue to innovate with consumer privacy as a priority? Yeah, keeping it in mind, I think going into 2025, that's still going to be one of the number one things that companies are going to be thinking about when innovating and, you know, trying to uh, it's, it's, it's cool to see, because you can see that's the growth with consumers in general. Oh, this company actually respects my privacy. They're not just, um, now, I'm not. I'm not saying that apple doesn't they you, but they do a good job with this. Using an example, when they do their privacy commercials, that's an easy way for a company to say for someone to see it and go oh okay, these guys, they're respecting our privacy. I like that.
Speaker 1:I don't know if that's just a ploy or if it's whatever, but it's smart for companies to obviously find innovative ways to show that they care about their, their customers and their, their actual privacy and their rights yeah but it's also going that way like let's move on to regulation, like you were just talking about a lot of regulatory stuff happening when it comes to let's see AI ethics board influence the development and deployment of AI technologies. I mean just going back. I remember I forget the name, but there was one guy that was in office that used AI to write one of their new bills. That got passed.
Speaker 2:Do you remember that?
Speaker 1:I forget the guy's name. It was kind of a story. I do remember it. I do not remember the name either, but it was funny to me because it's like he was like work smarter, not harder. But it's also kind of like so you ai write an actual bill and that it already passed, and but I think it was probably taken out of context, like I'm sure, I'm sure that they. I think it was more so that it was structured, um, but anyways, it's just things like that. There was over 50 countries established ai ethics to guide technology use. That's interesting. Yeah, data localization laws are in place in over 30 countries, which is pretty huge in terms of affecting global data flow, and this is interesting. The fragmented internet could cost the global economy up to $1 trillion annually.
Speaker 2:I don't know what that one means. Yeah, I don't either.
Speaker 1:I'm going to be honest yeah, I'm not sure what that means. If any of our listeners know what that means, these are just some facts that I've pulled.
Speaker 2:I'm looking forward to a more fragmented internet and less centralized. I'm hoping to see things like Mastodon, take off more and less. Consolidation of social platforms there's a small number of social platforms owned by a small number of entities. It's interesting too right like most people don't think about the nature, the decentralized nature of email and the fact that I can email you and we don't have to be on that.
Speaker 2:Use the same provider right like we don't all have right, right, but if you and I want to communicate, say via, I'll just pick one twitter, then we, we all have to be on Twitter together. Right, like it's not decentralized, I am hoping to see a rise in decentralized platforms. We've definitely saw some, with some of the fallout we saw with like Reddit this year. There were some decentralized platforms that stood up that well, they didn't stand up, they were already there, but they started taking on more popularity. That was another significant trend in 2024 a lot, of, a lot of decentralized technology platforms um that's a good point.
Speaker 1:Yeah, that is. That was one of the. I can't believe we didn't think about that. That's well, you obviously just did, but that should be interesting. Going into 25, because, yeah, you, I mean talking about proprietary, centralized platforms like threads, twitter. Yep, talk about an annoying thing when you, if you use instagram and threads pops up all the time. It's just. I don't know if you've ever seen what's on threads.
Speaker 2:I have not, I do. I think it's worse than twitter. Yeah, I need, I am none of those I don't like it.
Speaker 1:I don't like the way that all that's going with how people are using social media, things like threads, people are just posting things, just absurdity, yeah, to get to get engagement and reactions, and it's it's so troubling and distracting that I don't know. I mean I'm glad that Florida just passed a bill for I think it's either 14 or 16 years old aren't allowed to have social media accounts or something like that without a parent, which is great.
Speaker 2:I think it should be a little. I think it should be 18.
Speaker 1:I was going to say.
Speaker 2:I don't know how one enforces that, but Well, I think I don't know how one enforces that, but well, I think I don't know. I mean, look, if 16 year olds can get their hands on cigarettes, booze and pornography, I think they'll get their hands on the internet. All right, it's, it's just it's good. It's good legislation for legislation seeing.
Speaker 1:I'm just not really sure where that goes I know I'm hoping'm hoping for you're right though, but cigarettes has always been a problem. Now it's vape pens, yeah there it is.
Speaker 2:That's what the kids are on Now. Yeah, so see, they'll get their hands on those.
Speaker 1:Those things are even more addicting, I think. Yeah, probably they're more dangerous because you can do them anywhere and you're just continuously doing them All the time.
Speaker 2:That's true.
Speaker 1:The effect of what they're going to be when you get older. No, I mean, I don't want to get into that yet, thinking about my son when he gets a little older. No, forget about it. Slap that thing right out of his hands. There it is.
Speaker 2:There it is Blue Sky. We're going to talk specifics too, right? We saw a lot of adoption of Blue Sky. A lot of people fled Twitter and head over to Blue Sky, which is a decentralized alternative to Twitter. Did you ever look into it yourself? I mean no of it. I've used it. I am not on social like that. So, beyond my technology curiosity, short answer is no.
Speaker 1:It looks just like Twitter.
Speaker 2:Yeah.
Speaker 1:I've never used it. I've never even heard of this. Where am I? Am I living under a rock, Gabe?
Speaker 2:You know that's the thing is. I think a lot of people haven't. Really, the decentralized technology platforms are still mostly the domain of a lot of tech techies. I think blue sky might be the first one to kind of make its way from the purely tech user adoption to regular user adoption. You know, but while we're, while we're throwing some out there, there's also mastodon, right. So mastodon, yeah, we see we see a lot more adoption of that and you know, I would highly suggest folks go check out these decentralized platforms. There's versions of of of YouTube, even right like those are worth checking out. There's.
Speaker 1:Yeah, actually you're. You're spot on here, Gabe. It says that decentralized identity solutions are expected to grow by 40%.
Speaker 2:Hey, there you go, and 2025 look, the suit say is not supposed to be proven right until about 12 months from now, but I think that I I mean anyone who's tuned into the salty suit say before knows that he, he likes to, he likes to to to predict things that almost feel like duh moments and that one feels like a duh right, like. We'll definitely see more of that. We'll definitely see more folks.
Speaker 1:Privacy. Yeah, and I agree. Privacy by design is apparently becoming a legal requirement in several jurisdictions. Nice 85% of consumers are willing to pay for more products or pay more for products that guarantee data privacy. We talked about that a little bit.
Speaker 2:I think those people should not do that. I understand why they want to do that and why they're willing to do it. I think that they should vote with their wallets in the opposite way and simply refuse to spend money on products that don't preserve their privacy, not spend more on products that will Wait, wait. Say that again. Simply do not purchase products that don't respect their privacy versus spending more for products that do respect their privacy. Yeah, like just don't spend money on the ones that don't Right. That's the way to drive the economic.
Speaker 1:That's a good yeah, that was almost a little confusing for me.
Speaker 2:I was like wait, so you don't want people going for that. Well, that's a good, yeah, yeah, yeah, that's almost. That was almost a little confusing for me. I was like wait, so you don't want people going for that. Well, that's the thing. Like I don't, I don't, I don't want to incentivize, like you can only get privacy if you can, if you can afford it yeah, which isn't fair that shouldn't be the way. That should not be the way which by the way, malls.
Speaker 1:This is, this is way out of left field malls and things like that need to be turned into homeless shelters and um places for like schools or things for kids that don't have. They should turn those places like because who malls suck? Let's be honest, they seem like they don't. We don't need them anymore.
Speaker 2:They seem like they've been dying so I've seen a couple do that I. I have two. Yeah, I've seen a few that I just wish more would do it.
Speaker 1:Yeah, use that so we don't have. You know, people that need help on the streets. You know, like, put them somewhere and try to like help. I know that there's people out there trying to do that, but that's not. That's not. The government wants this, let's be honest, and if you're listening calling you out there, it is. They want you to be addicted to prescription medication or drugs because they want to control. Anyways, we're getting too political.
Speaker 2:That's it. Just don't, don't add. Don't add us don't add us, we're just talking yeah, it's okay, don't get paid yeah, you don't have to listen.
Speaker 1:I'm sorry, I'm not sorry anyways, um, all right. So security, security, well, actually, yeah, no, we touched on that. So security, let's talk a little bit about 2025 predictions, what you got.
Speaker 2:So the soothsayer does again known for more of those uh duh moments, but a big duh like look, we're gonna see a lot more ai in 25. If, yeah, if, if you're sick of ai, now's a good time to just turn off your computers. And just because you're gonna see we're gonna see a lot more of it in 25 speaking of?
Speaker 1:have you seen the video where? Where is the robot? Where they're teaching it how to run downhill?
Speaker 2:oh god, are these the boston dynamics robots? I'm too afraid to watch those videos they gave. I'm telling you pure nightmare fuel it's pure.
Speaker 1:Can you imagine? Can you imagine you're? I don't know you're, just you go to shoot a piece of trash. You missed a trash. Can you get shot by one of these things for littering? Yeah?
Speaker 2:I'm probably going to struggle with using the three seashells. I'm not ready. I'm not ready.
Speaker 1:Alright, so AI definitely going to be, we're going to see a lot more AI.
Speaker 2:We're going to see a lot more AI in cybersecurity. On both sides of the fence, we're going to see the bad guys tool up really tool the hell up in 2025. Like we're going to see a lot more tooling up in 25. And we will, I think, see a lot more useful AI in cybersecurity products in 25. Also, I think a lot of the missed expectations of just the AI hype-driven products will level down and we'll see actual innovation that drives change.
Speaker 1:Yeah, I think to your point. They're saying that 60% of organizations plan to increase their cybersecurity training budgets in 2025. Yeah, which is interesting? Yeah, 60%.
Speaker 2:I'll give a big, bold prediction, because there was another trend this year that will continue next year. But I have a bolder prediction. So we saw a lot of investments in quantum computing and we saw some decent results. We saw some decent movement in it and we're probably according to many, we're probably still I don't know five, 10 years out easy from having stable quantum computing. But my bold prediction is I think we're actually closer. I think in 25, we're actually gonna, we're gonna get a think in 25. We're actually gonna. We're gonna get a lot closer to that goal.
Speaker 1:I think we'll shorten the timeline to stable quantum from 10 years to like five years and we'll see that starting next year I think we'll see real what's the expected timeline roughly five to ten years, yeah, yeah, I mean I think it was 2030, right yeah? Yeah, give or take yeah, quantum computing is expected to break current encryption methods by 2030.
Speaker 2:I'm inclined to agree with that, but I think that we'll actually see. But that's a little deeper right? Yeah, I'm actually saying that. I think that that 2030 number I think we're going to see so many advancements in 25 in quantum computing that we're going to be by the end of 25, we're going to revise that statement from actually. I think we may see this happen by 27 or 28, but not 2030. I think 25 is going to be a breakthrough year for a lot of quantum computing problems that we will have learned how to solve.
Speaker 1:Okay, that's exciting, right. What does that actually mean at a high level?
Speaker 2:Well shit. What it means is what one of the things that we we should be doing in 25, that we should do collectively, is we should prepare ourselves, like there should be a lot more quantum preparation or post-quantum preparation for encryption being broken, and so I don't know that that's, unfortunately a trend we'll see in 25. My intuition is in betting on it, but it certainly should be a trend in 25. More folks should be paying attention to the quantum horizon and making plans for it. You know a?
Speaker 1:typical CISO usually draws out a three to five year strategic roadmap for their business. Going back to your point about AI, maybe you know more about this, but explainable. Ai helps reduce false positives and threat detection by 50% is a prediction for 2025. I'm not sure I understand that one, I'm not 100% familiar with the phrasing explainable AI.
Speaker 2:I take that to mean AI that is capable of distilling information, like maybe looking at large amounts of log data and actually giving you a human answer to what an individual did.
Speaker 1:Yeah, apparently it's a thing, so it's abbreviated XAI is a subfield of machine learning that helps people understand how AI models arrive at their decisions.
Speaker 2:Well, I think that's going to be a very useful thing. Ai, being the black box that it is for many, isn't good right Like not knowing how your new cybersecurity AI tool detected a threat and maybe missed one is very important.
Speaker 1:Yeah, I want to know, like if it's X, b, y, z, right Up down, left, right, what's this finishing move, right?
Speaker 2:right.
Speaker 1:Yeah, that's Cameron's analogy right there.
Speaker 2:There it is Up, up down down left, right, left, right, Get over here. There it is.
Speaker 1:Are we too old now? Finish it. That's still relevant. Right To somebody To somebody, yeah yeah. I can imagine kids aren't listening to this, so I mean, maybe they are. I don't know If you're out there. Hello to you too.
Speaker 2:Are you over 16? Do not go on social media.
Speaker 1:Avoid it Well, any other predictions. We haven't gone over from the soothsayer. So what do we?
Speaker 2:predict. We predict that ransomware. It's too easy of a prediction. Yes, it will continue to rise, but I think the real thing that we'll see is the impact AI has on both the problem and the solution. I think that's what we'll see is a lot more of that. I actually think we may start getting better at it by the time we get through 25, such that it'll be time to pay attention to new problems, such as getting ready for a post-quantum world. I think the time is now. I think that that event horizon is upon us.
Speaker 2:I think, generally speaking, I think what we'll see a lot of, too, is in the business side of things. I think we're going to see a lot of cybersecurity transactional activity, definitely going to see a lot of privacy tech transactional activity. There are a lot of organizations solving similar problems or related problems, and we're overdue for a bit of consolidation in those markets. So I think we'll see a lot of that in 25 as well. Hopefully that spurs on more innovation. But I think generally, my outlook for 25 is actually somewhat steady. I don't think we're going to see anything drastically different. I think 25 is going to be a year of significant incremental progress versus big bust out things.
Speaker 1:Yeah, yeah, I don't think think we're gonna see any kind of surprises. Maybe maybe on the regulatory side, yeah, but maybe not. Yeah, maybe that's just a can that'll continue to get kicked down the road, like it always kind of is when it comes to a global or the um state.
Speaker 2:The afro federal yeah yeah, like a federal type of well, look, the. The new administration is likely to take control of all branches of government, so the opportunity is there to do it. Whether or not the will is there we'll see, but the I think the opportunity to do it will definitely be on the table.
Speaker 1:So they say that 90, let's see companies that prioritize privacy and security see a 25% increase in customer loyalty. It seems realistic.
Speaker 2:They would get me to be loyal. I could do that.
Speaker 1:Businesses that adapt quickly to regulatory changes are 50% more likely to succeed in the long term. That's kind of vague, but it's going to be interesting in the world of tech privacy security regulatory. I'm excited to see what happens.
Speaker 2:Ready to ring it in. Ready to ring it in.
Speaker 1:This has been a fun episode, If it's our last one of the year. Thank you everyone for listening to our nonsense and some of our good stuff here. I think this was a great conversation, Gabe. It's always a good conversation with you, Cam. I can't believe we're going into season six, man Season six.
Speaker 2:We promised some new stuff this year, which we did unveil. We did more live shows this year. That was new. We unveiled a couple things, and so 26 for us, 25 for us also has some more new things coming, so we're going to have a whole bunch of new guests. We're probably looking at expanding the Privacy Please team a little bit, which is exciting. We've been growing our listener base. Thank you all for tuning in, and so it's starting to require a little bit more work than Cam and I can do alone. So thank you all for your support.
Speaker 1:Thank you all very much for tuning in yeah, continue that and tell your friends if you have friends if you don't we'll be them, we'll be, yeah, we'll be your friends. We'll be your friends, um, but yeah, uh, reach out if you guys want to see something more, something different, different, or stay silent if we're doing the right thing, I guess. Thank you for the support, gabe. Appreciate you, man.
Speaker 2:Appreciate you Absolutely. Another year into books for privacy, please.
Speaker 1:Another year and can't wait to see what happens next year. All right, y'all, take it easy, stay sleazy.
