POPULARITY
Categories
In this episode of the Crazy Wisdom Podcast, host Stewart Alsop sits down with Ryan Marsh of thestack.io to explore what it really takes to build production AI systems. They discuss how production AI has evolved from simple prompt-to-API demos into complex systems requiring evaluation suites, human-in-the-loop feedback mechanisms, and sophisticated approaches to handling context and data retrieval. The conversation covers the challenges of domain mapping, the fundamental difficulty of translating messy human business processes into structured systems, and the role of ontologies in AI development. Ryan and Stewart also examine the limitations of LLMs, the debate between specialization versus generalization in AI models, consciousness and cognition in system design, and the regulatory landscape facing AI companies. They touch on infrastructure constraints, the democratization of AI through open source models, and whether we'll eventually hit a ceiling where human intelligence can no longer distinguish between increasingly capable AI models. Key Insights1. Production AI systems today fundamentally differ from demos through their reliance on comprehensive evaluation suites that function like unit tests to measure and maintain quality, though they cannot be as deterministic. The key distinction is that production systems require clearly defined metrics for what good looks like, along with feedback mechanisms that allow the system to evolve over time. Without this foundational understanding of success metrics and continuous improvement processes, a system is not truly production-ready regardless of how many users it serves.2. The fundamental challenge in building production AI systems is not the technology itself but rather mapping business domains into structured formats that models can work with effectively. This problem of translating messy, subjective human processes and language into precise specifications has plagued software engineering for decades. Different people within organizations use the same words to mean completely different things, and humans naturally operate with assumed context and imprecision that must be explicitly defined for AI systems to function reliably.3. Large language models excel at generalization but struggle with specialization, which creates friction in production environments where specific outputs or styles are required. While they can code in any programming language, getting them to write code exactly the way a particular engineer wants remains extremely difficult. This explains why professional documentation and specialized coding tasks often require extensive prompting and fighting with the models, as they naturally gravitate toward their trained patterns rather than highly specific user preferences.4. Modern production AI systems primarily solve classification problems wrapped in natural language interfaces rather than requiring true open-ended cognition. The models work best when they can leverage reasoning over provided information to make verifiable decisions, but they still lack common sense despite their vast knowledge. Success comes from teaching models everything about your specific domain and what good and bad outcomes look like, rather than relying solely on their general intelligence.5. Context retrieval in production AI systems is fundamentally a data storage, search, and retrieval problem that has been solved many different ways throughout computing history. The appropriate solution depends entirely on the type of data being accessed, whether through vector databases, graph databases, relational databases, or even simple text search. The harnesses and frameworks for orchestrating AI agents have matured significantly, making the real challenge the quality and structure of the data being fed to these systems.6. Human-in-the-loop feedback mechanisms are essential for production AI because models will inevitably encounter situations they have not been trained to handle. When confidence is low or novel scenarios appear, systems should flag these for human review rather than proceeding blindly. The feedback provided during these interventions must be captured and scored so it can be incorporated into the permanent behavior of the system, creating a continuous improvement cycle similar to how model vendors perform reinforcement learning on their base models.7. The rush to regulation in the AI industry is driven primarily by the fact that these companies are currently completely exposed to existing consumer protection and liability laws with no legal precedents to protect them. If AI agents cause harm, companies could be sued into oblivion under current law. By establishing compliance frameworks through regulation, these companies can create carve-outs and exemptions that limit their liability when they follow prescribed rules, similar to how heavily regulated industries like airlines and banking have become nearly impossible to enter due to compliance requirements. Timestamps00:00 Welcome and introduction to Ryan Marsh discussing production AI systems and what companies need to understand about building them at scale05:00 The cognitive load challenge of working with invariants and probabilistic systems, discussing how LLMs function like PhD students without common sense10:00 Building eval suites to measure AI performance, handling the long tail of edge cases in complex contracts using human-in-the-loop feedback systems15:00 Context as a data retrieval problem and the fundamental challenge of mapping business domains when humans struggle with imprecision and ambiguous language20:00 How different departments use the same words with different meanings and why LLMs generalize well but don't specialize effectively for specific coding styles25:00 The ontology debate and intractable problem of mapping subjective human systems to rigid structured formats with diminishing returns on perfect mapping30:00 Why humans struggle distinguishing what is from what ought to be and the challenge of creating SOPs when companies lack updated documentation35:00 The liability exposure AI companies face and why they're begging for regulation to protect themselves from existing consumer protection laws40:00 Open source knowledge transfer between Chinese and American labs, chips and power as the real constraint not algorithms for frontier models45:00 Reaching intelligence ceiling where specialists can't distinguish state-of-art models and fundamental physical laws limiting LLM scaling through layered optimization strategies LinksWebsiteX
What should you do if your bank account gets hacked—and why are rising interest rates causing so much confusion in the bond market? In this episode of Dollars & Sense, Joel Garris and Chet Cowart walk through practical steps to take if you discover suspicious activity in your bank account, including how to contact your bank safely, document fraudulent transactions, secure connected accounts, update passwords, and protect yourself from identity theft. Then, they shift to the bond market and explain the relationship between interest rates and bond prices, why rising rates can hurt bond values in the short term, and how higher yields may create better long-term opportunities for investors. They also compare individual bonds and bond mutual funds, helping listeners understand how each may fit into a diversified financial plan. Topics covered include bank fraud, account takeover scams, cybersecurity, multifactor authentication, identity theft protection, bond prices, Treasury yields, interest rates, bond funds, diversification, and long-term investing.
In episode 306 of our SAP on Azure video podcast we talk about workload identity based authentication. A lot of companies have SAP SuccessFactors for their HR related processes. At the same time they are using Microsoft Entra ID for their Windows, Microsoft 365 and a lot of other authentications. For quite some time we have worked with SAP to use Microsoft Entra to orchestrate the identities for your employees and their access accross your SAP applications. SAP plans to deprecated basic authentication for SAP SuccessFactors APIs, so we have been working to offer workload identity-based authentication for the Microsoft Entra SAP SuccessFactors provisioning integrations. To tell us more about this new functionality, I am happy to have Chetan Desai back with us. Find all the links mentioned here: https://www.saponazurepodcast.de/episode306Reach out to us for any feedback / questions:* Goran Condric: https://www.linkedin.com/in/gorancondric/* Holger Bruchelt: https://www.linkedin.com/in/holger-bruchelt/ #Microsoft #SAP #Azure #SAPonAzure #SAPSuccessFactors #OIDC #SAPIAS
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.7:49 PMYoutube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.Youtube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.7:49 PMYoutube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.Youtube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.7:49 PMYoutube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.7:49 PMYoutube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
Hi, I'm Connor with Honor - message me here!Artificial intelligence is becoming the operating layer connecting how a business answers the phone, sends email, follows up by text, protects its reputation, manages customer relationships, and decides which actions require a human.Email automation works only when messages reach the inbox, respect the recipient, and support a real relationship. Authentication, list quality, consent, relevance, and sender reputation matter more than the number of messages a system can send.The same applies to SMS. Mass texting without documented consent, clear identification, reasonable timing, and dependable opt-out handling can damage trust and create compliance exposure. Automation should make communication useful, not turn every telephone number into a target.A CRM provides the memory behind those conversations. It should record permission, source, status, preferences, prior messages, unanswered questions, and the next appropriate action. When email, SMS, voice, reputation, and customer history operate as disconnected tools, people receive duplicate messages and businesses lose context. One governed system makes follow-up faster without making it careless.That brings us to the larger AI debate. One side promises unlimited productivity. Another predicts catastrophe. Both stories can attract money, influence regulation, or protect market position. Some risks are documented. Others remain theoretical. Businesses should not dismiss warnings or turn speculation into fact.The practical answer is bounded authority. Let AI draft, organize, classify, summarize, route, and recommend. Require human approval before money moves, sensitive information is exposed, mass messages are released, records are deleted, or public claims are published. Maintain logs, permissions, monitoring, a kill switch, and a recovery plan.The goal is useful automation that preserves trust, keeps humans accountable, and produces measurable business value.AI news and practical guidance:https://SantaClaritaArtificialIntelligence.comCRM, email, SMS, and follow-up:https://HonorElevate.comAI voice systems:https://HireAIVoice.comWatch AI With Honor:https://www.youtube.com/@AIwithHonorI'm Connor with Honor. Be safe out there. I'll see you tomorrow.7:49 PMYoutube Channels:Conner with Honor - real estateHome Muscle - fat torchingFrom first responder to real estate expert, Connor with Honor brings honesty and integrity to your Santa Clarita home buying or selling journey. Subscribe to my YouTube channel for valuable tips, local market trends, and a glimpse into the Santa Clarita lifestyle.Dive into Real Estate with Connor with Honor:Santa Clarita's Trusted Realtor & Fitness EnthusiastReal Estate:Buying or selling in Santa Clarita? Connor with Honor, your local expert with over 2 decades of experience, guides you seamlessly through the process. Subscribe to his YouTube channel for insider market updates, expert advice, and a peek into the vibrant Santa Clarita lifestyle.Fitness:Ready to unlock your fitness potential? Join Connor's YouTube journey for inspiring workouts, healthy recipes, and motivational tips. Remember, a strong body fuels a strong mind and a successful life!Podcast:Dig deeper with Connor's podcast! Hear insightful interviews with industry experts, inspiring success stories, and targeted real estate advice specific to Santa Clarita.
In this episode of Engineering Enablement, Robert Lucero, Chief Architect at Okta, joins host Brian Houck to discuss how agentic AI is changing identity and access management. They explore how organizations should define agent identities, why authentication and authorization remain foundational, and how sandboxing, fine-grained permissions, and just-in-time access can enable agents to operate autonomously without creating unacceptable risk.Robert shares what Okta has learned from driving AI adoption among security-minded engineers, what makes a repository ready for AI agents, and why strong testing, CI, and review processes matter even more as AI generates more code. They also discuss AI's role in software validation, the need for human judgment, and whether AI will ultimately give the advantage to security teams or attackers.Where to find Robert Lucero:• LinkedIn: https://www.linkedin.com/in/rlucero Where to find Brian Houck: • LinkedIn: https://www.linkedin.com/in/brianhouckIn this episode, we cover:(00:00) Intro(02:16) Meet Robert Lucero(02:56) Why identity becomes critical as AI agents access more systems(06:07) Governing automated access for non-deterministic agents(08:01) Defining and managing agent identities(10:32) Authentication and authorization for AI agents(13:33) Determining how much autonomy to give AI agents(19:44) Identity systems as the control plane for AI agents(22:40) Driving AI adoption among security-minded engineers(25:48) Why AI's impact on engineering extends beyond coding(28:44) The three components of AI readiness for repositories(30:55) AI's role in software testing and validation(34:26) Whether AI gives defenders or attackers the advantage(36:01) Where to find the best food in the countryReferenced:• State of AI Impact in Engineering Q2 Report 2026• Okta• The Hugging Face incident and the road ahead | OpenAI• GitHub Copilot · Your AI pair programmer• Claude Code by Anthropic | AI Coding Agent, Terminal, IDE• Eight Myths on Software Engineering and GenAI | Queue• Adriana Corona
Steve Grad is back and we cover some hobby ground on this episode. Talking Points may include: *Where it all started. *Whats in his PC, Favorites and selling. *Secretary and Clubbie autos-What you need to know. *Percentage of autos that are fake in the wild. *Scenario-You see a slabbed auto but you know it's not legit. *Most Forged? *Going completely under his own brand. Follow us on Social Media: Website:https://www.sportscardnationpo....com https://linktr.ee/Sportscardna... Merch shop:https://sports-card-nation.pri... To eliminate pre & post-roll adshttps://www.spreaker.com/podca...
https://itayverchik.co.il/ai-wordpress-integration/הבינה המלאכותית מאפשרת לנו היום לפתח מערכות מורכבות, אפליקציות רשת וכלים ייעודיים (כמו מחוללי תוכן, מחשבונים חכמים או פורטלי ניהול) במהירות שיא. אבל המערכת שבניתם לא יכולה להישאר מנותקת - העוצמה האמיתית נוצרת כשהיא מתחברת באופן רציף לאתר הוורדפרס המרכזי שלכם, כדי לסנכרן משתמשים, להעביר לידים או לעדכן תוכן באופן אוטומטי.בסרטון הזה אני מראה לכם איך לגשר על הפער הטכנולוגי וליצור אינטגרציה חלקה ובטוחה בין אתר הוורדפרס שלכם לבין מערכת חיצונית שפיתחתם בעזרת כלי AI, תוך שימוש בפרוטוקולי תקשורת מתקדמים.מה נראה במדריך?הבנת ה-REST API של וורדפרס: מהי התשתית המובנית של וורדפרס שמאפשרת לה "לדבר" עם מערכות חיצוניות ואיך לגשת אליה.יצירת נקודות קצה (Endpoints) מותאמות אישית: איך לבקש מה-AI לכתוב עבורכם פונקציה שמייצרת נתיב API ייעודי לקבלת או שליחת נתונים ספציפיים (כמו נתוני לקוחות או מוצרים).חיבור באמצעות Webhooks: הדרך המהירה לשדר נתונים בזמן אמת (למשל, בעת מילוי טופס או ביצוע רכישה) מהאתר אל המערכת החיצונית שלכם או למערכות אוטומציה כמו Make ו-Zapier.הגדרת הרשאות ואבטחה (Authentication): איך להנפיק "סיסמאות יישום" (Application Passwords) בוורדפרס כדי לאפשר למערכת החיצונית להתחבר לאתר בצורה מאובטחת, מבלי לחשוף את סיסמת הניהול שלכם.דיבאגינג ובדיקות: איך להשתמש בכלים כמו Postman או לעבוד מול ה-AI כדי לבדוק שהנתונים עוברים בצורה תקינה ולפתור שגיאות תקשורת.חיבור המערכות שלכם לתשתית אחת מסונכרנת יהפוך את העסק שלכם לאוטומטי, טכנולוגי ותפעולי הרבה יותר.המדריך עזר לכם לחבר בין המערכות שלכם?אל תשכחו לעשות לייק לסרטון, להירשם לערוץ וללחוץ על הפעמון כדי לקבל עדכונים על עוד מדריכי פיתוח מערכות, אוטומציה, וורדפרס, AI ושיווק דיגיטלי.
For the first time ever Steve Grad is our guest and we cover sone ground. Talking Points may include: *Where it all started. *Whats in his PC, Favorites and selling. *Secretary and Clubbie autos-What you need to know. *Percentage of autos that are fake in the wild. *Scenario-You see a slabbed auto but you know it's not legit. *Most Forged? *Going completely under his own brand. Follow us on Social Media: Website:https://www.sportscardnationpo....com https://linktr.ee/Sportscardna... Merch shop:https://sports-card-nation.pri... To eliminate pre & post-roll adshttps://www.spreaker.com/podca...
Send us Fan MailOne of the biggest concerns collectors have when getting a card signed is whether an authentication sticker on the back could hurt the card's grade.In this episode of The Powers Sports Memorabilia Show, we break down what we've actually experienced when submitting autographed cards to PSA, including cards that have received PSA 10 card grades and 10 autograph grades with authentication stickers attached.We also discuss why you might want witnessed, first-person authentication on certain autographs, when you might skip the sticker for aesthetic reasons, and why you should never attempt to remove an authentication sticker once it has been applied.If you collect signed sports cards or plan on submitting autographed cards to PSA, this is an important topic to understand before your next signing.https://powerssportsmemorabilia.com/
Big thanks to Proton VPN for sponsoring this video. To sign up for Proton VPN please use the following link https://protonvpn.com/davidbombal and get 70% off. Learn how fake cell towers and Stingray-style devices can be used to track phones, capture metadata, and monitor cellular activity. OTW joins David Bombal to demonstrate how SDR tools such as HackRF, RTL-SDR, DragonOS, and Falcon can be used to scan nearby cell towers and investigate suspicious signals. They look at how 4G and 5G networks work, why mobile networks still expose valuable metadata, how IMSI catchers operate, and what suspicious or rogue cell towers may look like. They also discuss SS7 vulnerabilities, mobile network attacks, Signal, GrapheneOS, and practical steps you can take to better protect your communications. Topics covered: How to scan for nearby cell towers How fake cell towers and Stingrays work Detecting suspicious cell towers with SDR HackRF and RTL-SDR DragonOS and Falcon IMSI catchers and phone tracking 4G and 5G security SS7 vulnerabilities Mobile phone metadata Signal and GrapheneOS Mobile network security // Occupy The Web SOCIAL // X: / three_cube Website: https://hackers-arise.net/ // Occupy The Web Books // Linux Basics for Hackers 2nd Ed US: https://amzn.to/3TscpxY UK: https://amzn.to/45XaF7j Linux Basics for Hackers: US: https://amzn.to/3wqukgC UK: https://amzn.to/43PHFev Getting Started Becoming a Master Hacker US: https://amzn.to/4bmGqX2 UK: https://amzn.to/43JG2iA Network Basics for hackers: US: https://amzn.to/3yeYVyb UK: https://amzn.to/4aInbGK // OTW Discount // Use the code BOMBAL to get a 20% discount off anything from OTW's website: https://hackers-arise.net/ // David's SOCIAL // Discord: discord.com/invite/usKSyzb Twitter: www.twitter.com/davidbombal Instagram: www.instagram.com/davidbombal LinkedIn: www.linkedin.com/in/davidbombal Facebook: www.facebook.com/davidbombal.co TikTok: tiktok.com/@davidbombal YouTube: / @davidbombal Spotify: open.spotify.com/show/3f6k6gE... SoundCloud: / davidbombal Apple Podcast: podcasts.apple.com/us/podcast... // MY STUFF // https://www.amazon.com/shop/davidbombal // SPONSORS // Interested in sponsoring my videos? Reach out to my team here: sponsors@davidbombal.com // MENU // 0:00 - Coming up 0:37 - Mobile system vulnerability explained 12:29 - Proton VPN sponsor segment 15:07 - How to search cell towers in your area // CellSearch demo 19:45 - Cell tower frequencies explained 22:19 - CellSearch demo continued 32:41 - Discovering the identifiers 37:42 - Scanning for Stingrays/rogue cell towers // CellSearch demo continued 44:00 - Ordinary people being victims of WiFi hacking 47:28 - Authentication bypass on IoT devices 49:01 - Scanning higher frequencies with CellSearch 52:06 - Falcon demo // Discovering cellphones connecting to a cell tower 57:46 - Recommended protection from traffic interception 01:01:38 - Conclusion Please note that links listed may be affiliate links and provide me with a small percentage/kickback should you use them to purchase any of the items listed or recommended. Thank you for supporting me and this channel! Disclaimer: This video is for educational purposes only. #stingray #celltower #sdrhacking
How do you REALLY know an autograph is authentic? In the sixth and final part of our marathon Sports Cards Live conversation, we tackle one of the most uncomfortable questions in collecting: How much faith should we place in autograph authentication? The discussion centers around the 1952 Bowman Mickey Mantle owned by "Uncle Barry," a card he has owned for roughly 70 years and believes was personally signed by Mantle. PSA authenticated the autograph and has stood behind that opinion, but longtime autograph expert and former PSA authenticator Steve Grad recently presented a detailed case questioning whether the signature is actually Mantle's. So who's right? We discuss why autograph authentication may ultimately always be an opinion, how much confidence collectors should place in third-party authentication, and whether a signature can ever truly be considered 100% authentic unless somebody actually witnessed it being signed. David Chase then proposes a fascinating alternative: What if AI could analyze enormous databases of known exemplars and assign an autograph a confidence rating instead of simply declaring it authentic or not authentic? Would you rather know that an autograph has an 87% probability of being authentic than receive a binary opinion from a human authenticator? We also discuss witnessed autographs, the possibility of sophisticated forgeries already existing in slabs, altered and counterfeit cards, and a larger reality collectors may need to accept: no system involving human judgment is going to have a zero percent error rate. Earlier, we continue our spirited discussion about market manipulation, personal responsibility and buyer beware. If an influencer talks about a card and you rush out to buy it, how much responsibility belongs to the influencer and how much belongs to you? We also revisit manufactured rarity, the difference between total population and the actual "float" available to collectors, whether the word "grail" has lost its original meaning, and why greater affordability might actually be healthier for the hobby over the long term. Finally, we close our post-National marathon by looking ahead to what Jeff Hart calls the beginning of a new hobby year and reflecting on why, regardless of prices, markets, grading companies or slabs, we're still collectors first. As one viewer perfectly put it: "Collect because you love the cards. Let the value be the consequence, not the purpose." Featuring Jeremy Lee, Joe Poirot, David Chase, Jeff Hart, Chris McGill and Joshua Adams.
Pasqual-Andres v. U.S. Att'y Gen., No. 22-12848 (11th Cir. Aug. 4, 2026) motion to reopen; ineffective assistance of counsel; Matter of Lozada; substantial compliance; appropriate disciplinary authority Matter of I-S-M-, 29 I&N Dec. 811 (BIA 2026) asylum; adverse credibility; identity and nationality; inconsistent statements; fraudulent identity documents; REAL ID Act; burden of proof Matter of H-I-A-H-, 29 I&N Dec. 823 (BIA 2026) asylum; credibility determinations; inconsistencies and omissions; totality of the circumstances; past persecution; presumption of future persecution; internal relocation Matter of I-U-V-, 29 I&N Dec. 816 (BIA 2026) withholding of removal; childhood persecution; harm suffered as a minor; cumulative harm; severity of persecution; pattern or practice of persecution; clear probability standard Matter of Momplaisir, 29 I&N Dec. 820 (BIA 2026) authentication of records; Form I-213; Form I-94; Form G-24; 8 C.F.R. § 287.6(a) Eqbal v. Blanche, No. 25-60504 (5th Cir. Aug. 6, 2026) asylum; adverse credibility; translation errors; credible fear interview; corroborating evidence; BIA statement that it considered all evidence insufficientAil Saidi v. Blanche, No. 21-6589 (2d Cir. Aug. 3, 2026) CAT; corroborating evidence; adverse credibility; issue forfeiture before the BIA; reasonably available evidence; likelihood of torture; chain of events Keita v. Blanche, No. 24-1226 (4th Cir. Aug. 4, 2026) cancellation of removal; withholding of removal; third-country removal; exceptional and extremely unusual hardship; full and fair hearing; opportunity to present evidence; U.S. citizen children Spindola v. Blanche, No. 25-3600 (6th Cir. Aug. 7, 2026) asylum; withholding; CAT; serious nonpolitical crime bar; serious reasons for believing; acquiescence Lacsina v. Blanche, No. 24-3373 (8th Cir. Aug. 6, 2026) motion to reopen; departure bar; post-departure motions to reopen; vacated criminal convictions; CIMT; controlled-substance inadmissibility; sua sponte reopening Saravia Martinez v. Blanche, No. 25-60400 (5th Cir. Aug. 3, 2026) 30-day filing deadline; equitable tolling; reinstatement of removal; final order of removal; Riley v. Bondi; claims-processing rule Guzman v. Blanche, No. 25-1351 (1st Cir. Aug. 7, 2026) asylum; nexus; one central reason; mixed motives; protected ground; gender; family relationship; political opinion Kurzban Kurzban Tetzeli and Pratt P.A.Immigration, serious injury, and business lawyers serving clients in Florida, California, and all over the world for over 40 years.eimmigration"Immigration law software you'll love to use."get.eimmigration.com/IRP Gonzales & Gonzales Immigration BondsP: (833) 409-9200immigrationbond.com Stafi"Remote staffing solutions for businesses of all sizes"Click me!Want to become a patron?Show the Podcast some loooovvveeeCONTACT INFORMATION:Email: kgregg@kktplaw.comFacebook: @immigrationreviewInstagram: @immigrationreviewTwitter: @immreviewAbout your hostCase notesRecent criminal-immigration article (p.18)Featured in San Diego VoyagerSupport the show
Internet scams are evolving faster than ever, with artificial intelligence making phishing emails, fake phone calls, and fraudulent videos more convincing than traditional scams. Jon Penn and Venable Cybersecurity Services Managing Director, Avi Schwartz explain the most common online scams targeting consumers, investors, retirees, and businesses, along with practical steps you can take to protect yourself and your finances. We discuss AI-enhanced phishing attacks, deepfake voice and video scams, business email compromise, texting scams (smishing), elder fraud, and payment fraud involving gift cards and cryptocurrency. We also cover what to do if you've been scammed, how quickly you need to act to improve your chances of recovering stolen funds, and why authentication, passkeys, and independent verification are among your best defenses. Whether you're protecting your retirement savings, your business, or helping aging parents avoid fraud, this episode provides practical cybersecurity and financial safety strategies that can reduce your risk of becoming the next victim. 0:00 INTRO 0:20 - Internet Scams to be Aware of 3:53 - AI enhanced Phishing 7:00 - Deep Fake Voice & Video Scams 13:39 - Catch Them If You Can - How to get your money back 15:37 - Texting scams & smishing 18:21 - How Much Can You Lose? 19:29 - Who are the Targets? 22:34 - How Long Can it Take? 24:40 - Dealing with Elder Fraud 26:11 - How to Prevent or Reduce Chances of Falling Victim to Scams 30:09 - Strengthen Authentication - passkeys 34:10 - Verify Before You Act (avoid urgency) 36:26 - Avoid Engaging with Unknown Contacts - Ignore it 36:55 - Double check all Financial Transactions 38:47 - Watching for Payment Red Flags (Gift Cards & Cyber Currency) 41:58 - Authentication & Verification are Key Hosted by RIA Advisors Senior Investment Advisor, Jon Penn, CFP, w special guest, Venable Cybersecurity Services Managing Director, Ari Schwartz Produced by Brent Clanton, Executive Producer ------- Do you enjoy our content? Rate us on Google: https://bit.ly/4b9JtEo ------- Watch Today's Full Video on our YouTube Channel: https://youtube.com/live/Azt1_vs16bA ------- Articles mentioned in this report: "AI-Driven Fraud Scams Are Evolving Fast: What People Should Watch For and Can Do To Protect Themselves, Their Friends, and Family" https://www.centerforcybersecuritypolicy.org/insights-and-research/ai-driven-fraud-scams-are-evolving-fast-what-people-should-watch-for-and-can-do-to-protect-themselves-their-friends-and-family -------- Watch today's "Before the Bell" premarket commentary, "Markets Consolidate as Sector Rotation Strengthens," https://youtu.be/pG8vxTC6oco ------- Watch our previous show, "Do You Really Know Your Risk Tolerance?" https://youtube.com/live/m3KZ1fbws2k ------- Get more info & commentary: https://realinvestmentadvice.com/insights/real-investment-daily/ ------- * REGISTER for our next Dynamic Learning Series, "Savvy Social Security Planning: More Income, Less Worry," Thursday, August 6, 2026: https://streamyard.com/watch/tQ3PS8hd64mt --- Visit our Site: https://www.realinvestmentadvice.com Contact Us: 1-855-RIA-PLAN --- Subscribe to SimpleVisor : https://www.simplevisor.com/register-new --- Connect with us on social: https://twitter.com/RealInvAdvice https://twitter.com/LanceRoberts https://www.facebook.com/RealInvestmentAdvice/ https://www.linkedin.com/in/realinvestmentadvice/ #CyberSecurity #InternetScams #IdentityTheft #FinancialPlanning #PersonalFinance
On this episode of CheckMates Go, PhoneBoy talks about Check Point-specific CVEs, AI News, and Rulebase Evaluation, Maestro Troubleshooting, and Rate Limiting.CVE-2026-16232 - Authentication bypass with SmartConsole login process using application tokenCVE-2026-62144 - Management Authentication Bypass and Privilege EscalationCVE-2026-62145 - Local privilege escalation in Gaia PortalCVE-2026-18574 - Management Authentication BypassCheck Point Gateway and Management Hardening GuideWhen The Sandbox Stops Being a BoundaryAI Assist for Security ProfessionalsUnified Policy: Column-Based Rule MatchingMaestro Troubleshooting in PracticeExperience with SecureXL DoS FeaturesHow to configure Rate Limiting rules for DoS Mitigation in R82 and higherHow to configure Rate Limiting rules for DoS Mitigation in R80.20 - R81.20
Full Hour 2 in The Sports Bar! -Tim Schneider shares his take of the day. Plus Gene offers up some sports nuggets & plays a match game with Tim. Is Von Miller returning to Buffalo? What did Gene take away from Bills Camp? Tom Brady only wants the perks & G-League basketbal tryouts.
Full Show Broadcast. Last (ROC) day of Bills training camp. Gene reacts & reflects as camp moves to Buffalo. News 8 Sports Director Thad Brown joins the show to share his overall thoughts on Bills training camp. Tim Schneider shares his take of the day. Gene plays a match game & looks at camp storylines. Are you attending the Blue & Red scrimmage? Tom Brady & the Motor City Cruise make appearances in last call
In this episode, Amy and analyst Lexi DiScola unpack the trends Talos IR saw on the frontlines in Q2 2026. From creative phishing lures that slip past email gateways to the weaponization of legitimate remote management tools, we explore why traditional defenses are falling short and the practical things you can do to reclaim the advantage.What configuration changes and visibility gaps could be the difference between a minor incident and a full-scale breach? How can you harden your environment with limited resources? Tune into this episode to stay one step ahead of an evolving threat landscape.Talos IR Quarterly Trends Report: https://blog.talosintelligence.com/ir-trends-q2-2026Find Talos at Black Hat: https://blog.talosintelligence.com/preview-cisco-talos-at-black-hat-usa-2026/
Microsoft is retiring natively provided SMS and voice authentication in Entra ID, and the clock is ticking: passkeys become the default experience on September 1, 2026, and Microsoft-provided telecom delivery is fully retired on February 1, 2027. We walk through the timeline, what admins should do now to find and migrate affected users, and when the new Security Store telecom providers make sense. We also cover the everyday struggle: moving Microsoft Authenticator to a new phone without locking yourself out.(00:00) - Intro and catching up.(05:00) - Show content starts.Show links- Passkeys by default | MS Learn- Transfer Authenticator to a new phone - SMS/voice usage analyzer script - Plan a passkey deployment - End-user communication templates- Give us feedback!
▶ Click Here to Master Evidence Foundations ▬▬▬▬▬▬▬▬▬▬ EPISODE SUMMARY Evidence exam success depends on sequence. Begin by identifying the evidence, the proponent, and the purpose. Then analyze relevance, Rule 403, special exclusionary rules, witness foundation, hearsay, confrontation, privilege, authentication, and the original-writing rule.Evidence issues arise throughout trial. Motions in limine address problems before trial. Direct examination requires foundation. Cross-examination tests credibility. Redirect rehabilitates. Expert testimony requires reliability screening. Documents and digital exhibits require authentication. Closing argument must stay within the record. Appeal requires preservation, standard of review, and harmful error.Strong answers apply rules rather than merely naming them. Hearsay requires an out-of-court assertion offered for truth. Character evidence requires a propensity purpose unless an exception or nonpropensity theory applies. Rule 403 requires probative value to be substantially outweighed by a specific danger. Authentication requires enough evidence for a reasonable jury to find the item genuine. The original-writing rule applies only when proving contents.Mixed problems are the norm. A single exhibit may raise multiple issues. A complete answer moves through each layer and states whether the evidence should be admitted, excluded, limited, redacted, conditioned, or accompanied by an instruction.The central lesson is practical: Evidence is controlled proof. The winning student asks the right questions in the right order and explains the ruling with precision.
▶ Click Here to Master Evidence Foundations ▬▬▬▬▬▬▬▬▬▬ EPISODE SUMMARY Privileges exclude relevant evidence to protect important relationships and constitutional values. Attorney-client privilege protects confidential communications for legal advice, but not underlying facts, and may be lost through waiver or the crime-fraud exception. Work product protects materials prepared in anticipation of litigation, especially opinion work product. Marital privileges, psychotherapist-patient privilege, clergy privilege, government privileges, informant privilege, and self-incrimination protections may also apply.Authentication requires evidence sufficient to support a finding that the item is what the proponent claims. Methods include witness testimony, distinctive characteristics, handwriting, voice identification, chain of custody, public records, system evidence, and digital metadata. Self-authenticating documents require no extrinsic authenticity proof but may still raise other objections.The original-writing rule applies when a party seeks to prove the content of a writing, recording, or photograph. Originals are generally required, duplicates are usually acceptable, and secondary evidence may be allowed when originals are unavailable without bad faith or for other recognized reasons.Real evidence is the actual physical item involved in the case. Demonstrative evidence illustrates testimony or admitted proof. Illustrative aids help the factfinder understand evidence or argument but must be controlled to avoid confusion or unfair prejudice.Scientific and technical proof often requires expert foundation and reliability screening. Digital evidence requires special attention to authorship, integrity, metadata, screenshots, system reliability, hearsay, and best-evidence concerns. AI-generated evidence and deepfakes make authentication and reliability especially important.The central lesson is foundation. Evidence does not become admissible merely because it is useful or dramatic. The proponent must show that the item is genuine, legally usable, properly supported, and not barred by privilege, policy, or reliability rules.
Jim McDonald sits down with Dan Moore, Senior Director of CIAM Strategy and Identity Standards at FusionAuth, for an in-depth conversation on customer identity and access management. Dan explains how FusionAuth views authentication as the front door to any application and why control, deployment flexibility, and developer ownership are central to their approach. The discussion covers progressive registration, friction vs. usability, customization options, identity standards, the build vs. buy debate, risk-based MFA, and how AI agents will shape the future of customer identity. This episode and others is made possible with support from FusionAuth. Learn more at fusionauth.io/idac.Connect with Dan: https://www.linkedin.com/in/mooreds/Learn more about FusionAuth: https://fusionauth.io/idacBlog article mentioned: https://bobdahacker.com/blog/fifa-hackConnect with us on LinkedIn:Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Visit the show on the web at http://idacpodcast.com00:00:00 Introduction00:01:18 What is FusionAuth?00:03:15 Dan's identity origin story00:04:19 Developer focus and ethos00:06:54 Authentication as the front door00:10:00 Balancing friction and usability00:15:24 Customization in CIAM00:18:10 What sets FusionAuth apart00:20:33 FusionAuth's customer sweet spot00:25:48 Deployment flexibility and the control spectrum00:30:19 Common challenges in CIAM00:33:06 Build vs. buy for authentication00:36:00 Omni-channel authentication00:40:27 Why identity standards matter00:42:07 Risk-based MFA and intelligent challenges00:45:00 AI agents and the future of CIAM00:49:23 Closing thoughts00:51:35 Vacation roundupKeywords: IDAC, Identity at the Center, Jeff Steadman, Jim McDonald, Dan Moore, FusionAuth, CIAM, customer identity, authentication, access management, IAM, identity standards, MFA, risk-based authentication, progressive registration, OAuth, OIDC, SAML, AI agents, deployment flexibility, build vs buy, Sponsor Spotlight
This episode features Tim Wolf, Senior Solutions Architect at Semperis, and Tim Springston, Principal Product Manager for Recovery Solutions at Semperis.Tim Wolf spent years as a Microsoft Premier Field Engineer helping enterprise customers architect identity solutions at scale. Tim Springston brings 25 years in identity and security and served as Microsoft's product manager for Azure AD recoverability, including direct involvement in building the Entra ID shared responsibility model documentation.In this episode, they walk through what the shared responsibility model actually means for Entra tenant data, how token-based attacks sidestep phishing-resistant authentication, and what happens when a threat actor hard-deletes objects and locks you out.They examine where Microsoft's new Entra ID Identity Resilience Recovery feature stops short, and why planning your recovery before anything goes wrong is the only call to action that matters.Guest BiosTim Wolf Tim Wolf is a Senior Solution Architect at Semperis. Tim's mission is protecting identities. Currently at Semperis, Tim ensures the resilience of Active Directory and Entra ID. Their background includes years as a Microsoft PFE, implementing Zero Trust and modern Authentication like Fido at an enterprise scale. Tim is an active speaker at multiple conferences, advocating for secure and automated identity architectures.Tim Springston Tim Springston is Principal Product Manager for recovery solutions at Semperis. He has over 25 years' identity and security experience with education, government, and Fortune 500 organizations from around the world. In his 25 years at Microsoft, he led services and support for Active Directory and later for Microsoft's cloud identity platform as it evolved from Windows Azure AD to Azure AD. At Microsoft, he was a recurring speaker at internal TechReady conferences and external events. Prior to Semperis, Tim was Microsoft's product manager for Azure AD (now Entra ID) recoverability and Sophos' IAM product manager for the Sophos Central cybersecurity platform.Guest Quotes “The first step in resiliency is not just having a backup plan or a backup tool or capabilities to put things back. You need to know what's important to your organization. If you know what's important, you know what to put back, you know when it's broken.” - Tim Springston “If Entra ID is going down... This is business critical today. You're not available to sign in to Teams, to SharePoint, to Salesforce, to your business critical application. So to really understand Entra ID is business critical.” - Tim WolfTime stamps 0:40 Meet Tim Wolf and Tim Springston 2:32 The Microsoft Shared Responsibility Model for Entra ID 6:22 How Entra ID Tenants Are Being Attacked 8:45 Token-Based Attacks Explained 12:26 What Happens When a Threat Actor Takes Over Your Tenant 19:05 Microsoft's New Entra ID Recovery Solution 25:24 The Difference Between Accidents and Adversaries 28:54 Semperis' Disaster Recovery for Entra Tenant 39:27 Hard Delete and Tenant Cloning Limits 45:30 Resiliency Playbooks and Testing 49:58 Conclusion and Final ThoughtsSponsor The HIP Podcast is brought to you by Semperis, the leader in identity-driven cyber resilience for the hybrid enterprise. Trusted by the world's leading businesses, Semperis protects critical Active Directory and Entra ID environments from cyberattacks, ensuring rapid recovery and business continuity when every second counts. Visit semperis.com to learn more.Links Connect with Tim Wolf on LinkedInConnect with Tim Springston on LinkedInConnect with Sean on LinkedInDon't miss future episodesLearn more about Semperis
Podcast: PrOTect It All (LS 27 · TOP 10% what is this?)Episode: Quantum Readiness: The Cybersecurity Threat Most Organizations Aren't Prepared ForPub date: 2026-06-22Get Podcast Transcript →powered by Listen411 - fast audio-to-text and summarizationQuantum computing isn't a future problem - it's a cybersecurity challenge organizations need to start preparing for today. In this episode of Protect It All, host Aaron Crow welcomes Jim Sortino for a timely discussion on quantum readiness, cryptographic risk, and the future of cybersecurity. As organizations continue accumulating technical debt and relying on aging cryptographic systems, the arrival of quantum computing threatens to disrupt the very foundations of digital trust. Jim explains why leaders need to think beyond today's threats and begin preparing for a future where current encryption standards may no longer provide adequate protection. Together, Aaron and Jim explore the practical realities of quantum risk, how organizations can identify vulnerable systems, and why crypto agility is becoming one of the most important cybersecurity priorities of the next decade. You'll learn: What quantum computing means for modern cybersecurity Why cryptographic technical debt creates long-term business risk How to assess your organization's quantum readiness The importance of crypto agility and encryption modernization Practical steps security leaders can take today Why IT and OT environments must prepare for the same emerging threats Whether you're a cybersecurity professional, technology leader, board member, or simply curious about the future of digital security, this episode provides actionable insights to help you prepare before quantum disruption arrives. Tune in to learn why the organizations that start preparing today will be the ones best positioned to protect tomorrow. Key Moments: 06:02 Challenges with product maintenance and AI integration 08:42 Importance of Software in Everything 12:30 Addressing cybersecurity risks 16:00 Authentication and trust challenges 18:13 Preparing for technological changes 20:56 Planning and Implementing Projects 25:38 Budget planning for cybersecurity risks 28:54 Challenges for Small Financial Institutions 31:27 Importance of regulations in business 33:37 Legacy security systems and protocols 36:38 Quantum readiness and future risks About the guest : Jim Sortino is the Chief Revenue Officer and a Board Member at Isera Corporation, where he helps organizations address emerging cybersecurity challenges through innovative identity and cryptographic security solutions. With decades of experience working with global enterprises, Jim specializes in helping leaders navigate complex technology risks, from technical debt and encryption modernization to quantum readiness. He is a passionate advocate for proactive cybersecurity strategies that prepare organizations for the next generation of digital threats. How to connect Jim Sortino : https://www.linkedin.com/in/jamessortino/ Learn more about PrOTect IT All: Email: info@protectitall.co Website: https://protectitallpod.com/ep111 X: https://twitter.com/protectitall YouTube: https://www.youtube.com/@PrOTectITAll FaceBook: https://facebook.com/protectitallpodcast To be a guest or suggest a guest/episode, please email us at info@protectitall.co Please leave us a review on Apple/Spotify Podcasts: Apple - https://podcasts.apple.com/us/podcast/protect-it-all/id1727211124 Spotify - https://open.spotify.com/show/1Vvi0euj3rE8xObK0yvYi4 The podcast and artwork embedded on this page are from Aaron Crow | Operational Technology & Cybersecurity Host, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
Scott McKinley, Founder & CEO of Truthset, discusses the state of data quality, identity, and measurement in digital advertising. Scott shares why the industry continues to prioritize scale over accuracy, how data quality deteriorates throughout the supply chain, and why advertisers need to rethink legacy metrics like reach and CPMs. The conversation also explores identity, walled gardens, authentication, and the future of the open internet. Takeaways Data accuracy often declines significantly as data moves through the ad tech supply chain. Scale is frequently prioritized over quality, leading to inefficient advertising spend. Advertisers should focus on precision and outcomes rather than reach alone. Authentication is critical to improving identity and publisher monetization. Independent measurement remains essential for trust and accountability in advertising. Walled gardens continue to outperform because of durable identity systems. IP addresses are an unreliable long-term replacement for cookies. The open internet must improve identity infrastructure to remain competitive. Chapters 00:00 Introduction to Scott McKinley and Truthset 01:05 From Olympic cyclist to ad tech entrepreneur 03:01 The trust crisis in advertising and lessons from sports 05:25 Why advertising lacks accountability and regulation 07:00 Nielsen's role in independent measurement 09:00 Why Scott founded Truthset 11:17 Common misconceptions about data accuracy 14:20 The industry's obsession with scale over quality 17:53 Why reach is becoming an outdated metric 19:13 Signal loss, walled gardens, and measurement challenges 23:16 The future of identity in advertising 25:34 Why authentication is the path forward 25:51 The biggest misconception about IP addresses 26:43 What the open internet must do next 28:05 Closing thoughts Guests: AdTechGod Learn more about your ad choices. Visit megaphone.fm/adchoices
How do all your devices connect and stay safe in the cloud? In this episode, Lois Houston and Nikita Abraham talk with OCI instructors about the basics of how networks work and the simple steps that help protect them. You'll learn how information gets from one place to another, why tools like switches, routers, and firewalls are important, and what goes into keeping access secure. The discussion also covers how organizations decide who can enter their systems and how they keep track of activity. Cloud Tech Jumpstart: https://mylearn.oracle.com/ou/course/cloud-tech-jumpstart/152992 Oracle University Learning Community: https://education.oracle.com/ou-community LinkedIn: https://www.linkedin.com/showcase/oracle-university/ X: https://x.com/Oracle_Edu Special thanks to Arijit Ghosh, Anna Hulkower, Radhika Banka, and the OU Studio Team for helping us create this episode. --------------------------------------------------------- Episode Transcript: 00:00 Hi there! We're hitting rewind for the next few weeks and bringing back some of our most popular episodes. So, sit back and enjoy these highlights from our archive. 00:12 Welcome to the Oracle University Podcast, the first stop on your cloud journey. During this series of informative podcasts, we'll bring you foundational training on the most popular Oracle technologies. Let's get started! 00:38 Lois: Hello and welcome to the Oracle University Podcast! I'm Lois Houston, Director of Innovation Programs with Oracle University, and with me is Nikita Abraham, Team Lead: Editorial Services. Nikita: Hi everyone! In the last episode, we spoke about local area networks and domain name systems. Today, we'll continue our conversation on the fundamentals of networking, covering a variety of important topics. 01:03 Lois: That's right, Niki. And before we close, we'll also touch on the basics of security. Joining us today are two OCI instructors from Oracle University: Sergio Castro and Orlando Gentil. So glad to have you both with us guys. Sergio, with so many users and devices connecting to the internet, how do we make sure everyone can get online? Can you break down what Network Address Translation, or NAT, does to help with this? Sergio: The world population is bigger than 4.3 billion people. That means that if we were to interconnect every single human into the internet, we will not have enough addresses. And not all of us are connected to the internet, but those of us who are, you know that we have more than one device at our disposal. We might have a computer, a laptop, mobile phones, you name it. And all of them need IP addresses. So that's why Network Address Translation exists because it translates your communication from a private IP to a public IP address. That's the main purpose: translate. 02:18 Nikita: Okay, so with NAT handling the IP translation, how do we ensure that the right data reaches the right device within a network? Or to put it differently, what directs external traffic to specific devices inside a network? Sergio: Port forwarding works in a reverse way to Network Address Translation. So, let's assume that this PC here, you want to turn it into a web server. So, people from the outside, customers from the outside of your local area network, will access your PC web server. Let's say that it's an online store. Now all of these devices are using the same public IP address. So how would the traffic be routed specifically to this PC and not to the camera or to the laptop, which is not a web server, or to your IP TV? So, this is where port forwarding comes into play. Basically, whenever it detects a request coming to port, it will route it and forward that request to your PC. It will allow anybody, any external device that wants to access this particular one, this particular web server, for the session to be established. So, it's a permission that you're allowing to this PC and only to this PC. The other devices will still be isolated from that list. That's what port forwarding is. 03:48 Lois: Sergio, let's talk about networking devices. What are some of the key ones, and what role do they play in connecting everything together? Sergio: There's plenty of devices for interconnectivity. These are devices that are different from the actual compute instances, virtual machines, cameras, and IPTV. These are for interconnecting networks. And they have several functionalities. 04:11 Nikita: Yeah, I often hear about a default gateway. Could you explain what that is and why it's essential for a network to function smoothly? Sergio: A gateway is basically where a web browser goes and asks a service from a web server. We have a gateway in the middle that will take us to that web server. So that's basically is the router. A gateway doesn't necessarily have to be a router. It depends on what device you're addressing at a particular configuration. So, a gateway is a connectivity device that connects two different networks. That's basically the functionality. 04:47 Lois: Ok. And when does one use a default gateway? Sergio: When you do not have a specific route that is targeting a specific router. You might have more than one router in your network, connecting to different other local area networks. You might have a route that will take you to local area network B. And then you might have another router that is connecting you to the internet. So, if you don't have a specific route that will take you to local area network B, then it's going to be utilizing the default gateway. It directs data packets to other networks when no specific route is known. In general terms, the default gateway, again, it doesn't have to be a router. It can be any devices. 05:34 Nikita: Could you give us a real-world example, maybe comparing a few of these devices in action, so we can see how they work together in a typical network? Sergio: For example, we have the hub. And the hub operates at the physical layer or layer 1. And then we have the switch. And the switch operates at layer 2. And we also have the router. And the router operates at layer 3. So, what's the big difference between these devices and the layers that they operate in? So, hubs work in the physical layer of the OSI model. And basically, it is for connecting multiple devices and making them act as a single network segment. Now, the switch operates at the data link layer and is basically a repeater, and is used for filtering content by reading the addresses of the source and destination. And these are the MAC addresses that I'm talking about. So, it reads where the packet is coming from and where is it going to at the local area network level. It connects multiple network segments. And each port is connected to a different segment. And the router is used for routing outside of your local area network, performs traffic directing functions on the internet. A data packet is typically forwarded from one router to another through different networks until it reaches its destination node. The switch connects multiple network segments. And each port of the switch is connected to a different segment. And the router performs traffic directing functions on the internet. It takes data from one router to another, and it works at the TCP/IP network layer or internet layer. 07:34 Lois: Sergio, what kind of devices help secure a network from external threats? Sergio: The network firewall is used as a security device that acts as a barrier between a trusted internal network and an untrusted external network, such as the internet. The network firewall is the first line of defense for traffic that passes in and out of your network. The firewall examines traffic to ensure that it meets the security requirements set by your organization, or allowing, or blocking traffic based on set criteria. And the main benefit is that it improves security for access management and network visibility. 08:23 Are you keen to stay ahead in today's fast-paced world? We've got your back! Each quarter, Oracle rolls out game-changing updates to its Fusion Cloud Applications. And to make sure you're always in the know, we offer New Features courses that give you an insider's look at all of the latest advancements. Don't miss out! Head over to mylearn.oracle.com to get started. 08:48 Nikita: Welcome back! Sergio, how do networks manage who can and can't enter based on certain permissions and criteria? Sergio: The access control list is like the gatekeeper into your local area network. Think about the access control list as the visa on your passport, assuming that the country is your local area network. Now, when you have a passport, you might get a visa that allows you to go into a certain country. So the access control list is a list of rules that defines which users, groups, or systems have permissions to access specific resources on your networks. It is a gatekeeper, that is going to specify who's allowed and who's denied. If you don't have a visa to go into a specific country, then you are denied. Similar here, if you are not part of the rule, if the service that you're trying to access is not part of the rules, then you cannot get in. 09:49 Lois: That's a great analogy, Sergio. Now, let's turn our attention to one of the core elements of network security: authentication and authorization. Orlando, can you explain why authentication and authorization are such crucial aspects of a secure cloud network? Orlando: Security is one of the most critical pillars in modern IT systems. Whether you are running a small web app or managing global infrastructure, every secure system starts by answering two key questions. Who are you, and what are you allowed to do? This is the essence of authentication and authorization. Authentication is the first step in access control. It's how a system verifies that you are who you claim to be. Think of it like showing your driver's license at a security checkpoint. The guard checks your photo and personal details to confirm your identity. In IT systems, the same process happens using one or more of these factors. It will ask you for something you know, like a password. It will ask you for something that you have, like a security token, or it will ask you for something that you are, like a fingerprint. An identity does not refer to just a person. It's any actor, human or not, that interacts with your systems. Users are straightforward, think employees logging into a dashboard. But services and machines are equally important. A backend API may need to read data from a database, or a virtual machine may need to download updates. Treating these non-human identities with the same rigor as human ones helps prevent unauthorized access and improves visibility and security. After confirming your identity, can the system move on to deciding what you're allowed to access? That's where authorization comes in. Once authentication confirms who you are, authorization determines what you are allowed to do. Sticking with the driver's license analogy, you've shown your license and proven your identity, but that doesn't mean that you can drive anything anywhere. Your license class might let you drive a car, not a motorcycle or a truck. It might be valid in your country, but not in others. Similarly, in IT systems, authorization defines what actions you can take and on which resources. This is usually controlled by policies and roles assigned to your identity. It ensures that users or services only get access to the things they are explicitly allowed to interact with. 12:47 Nikita: How can organizations ensure secure access across their systems, especially when managing multiple users and resources? Orlando: Identity and Access Management governs who can do what in our systems. Individually, authentication verifies identity and authorization grants access. However, managing these processes at scale across countless users and resources becomes a complex challenge. That's where Identity and Access Management, or IAM, comes in. IAM is an overarching framework that centralizes and orchestrates both authentication and authorization, along with other critical functions, to ensure secure and efficient access to resources. 13:35 Lois: And what are the key components and methods that make up a robust IAM system? Orlando: User management, a core component of IAM, provides a centralized Identity Management system for all user accounts and their attributes, ensuring consistency across applications. Key functions include user provisioning and deprovisioning, automating account creation for new users, and timely removal upon departure or role changes. It also covers the full user account lifecycle management, including password policies and account recovery. Lastly, user management often involves directory services integration to unify user information. Access management is about defining access permissions, specifically what actions users can perform and which resources they can access. A common approach is role-based access control, or RBAC, where permissions are assigned to roles and users inherit those permissions by being assigned to roles. For more granular control, policy-based access control allows for rules based on specific attributes. Crucially, access management enforces the principle of least privilege, granting only the minimum necessary access, and supports segregation of duties to prevent conflicts of interest. For authentication, IAM systems support various methods. Single-factor authentication, relying on just one piece of evidence like a password, offers basic security. However, multi-factor authentication significantly boosts security by requiring two or more distinct verification types, such as a password, plus a one-time code. We also have biometric authentication, using unique physical traits and token-based authentication, common for API and web services. 15:46 Lois: Orlando, when it comes to security, it's not just about who can access what, but also about keeping track of it all. How does auditing and reporting maintain compliance? Orlando: Auditing and reporting are essential for security and compliance. This involves tracking user activities, logging all access attempts and permission changes. It's vital for meeting compliance and regulatory requirements, allowing you to generate reports for audits. Auditing also aids in security incident detection by identifying unusual activities and providing data for forensic analysis after an incident. Lastly, it offers performance and usage analytics to help optimize your IAM system. 16:35 Nikita: That was an incredibly informative conversation. Thank you, Sergio and Orlando, for sharing your expertise with us. If you'd like to dive deeper into these concepts, head over to mylearn.oracle.com and search for the Cloud Tech Jumpstart course. Lois: I agree! This was such a great conversation! Until next time, this is Lois Houston… Nikita: And Nikita Abraham, signing off! 16:58 That's all for this episode of the Oracle University Podcast. If you enjoyed listening, please click Subscribe to get all the latest episodes. We'd also love it if you would take a moment to rate and review us on your podcast app. See you again on the next episode of the Oracle University Podcast.
SummaryIn this episode I'm joined by Chris Butler. He's a longtime product leader and operator whose career spans companies such as Microsoft, Google, Facebook, and now GitHub, where he works on agentic workflows across the organization.We explore how AI is reshaping the way modern product teams think, collaborate, ship and its ripple effects on how we manage process and decision making. Chris and I chat about the messy realities behind agentic systems such as why removing too much friction can actually hurt decision quality and why qualitative research matters more now than ever before. Chris gives a candid behind the scenes look into what's working, what's failing, and why experimentation itself may become one of the most important capabilities in the AI era.If you've been wondering what testing AI Agents actually looks like inside a cutting edge company, this episode is for you.TakeawaysAI is collapsing traditional product development workflows, but not necessarily eliminating the need for product managers, engineers, or designers. Instead, roles are decomposing into smaller tasks where humans and machines each handle different types of work.Removing all friction from product development can actually reduce decision quality. Chris argues that tension between desirability, viability, and feasibility perspectives is still critical because reasoning often happens through human discussion, not just inside individual minds or AI systems.AI-generated “rude feedback” tools can help teams improve ideas faster because people are often more receptive to harsh critique from a machine than from another human. GitHub experimented with sarcastic AI Q&A systems that surfaced weak assumptions and missing details without the reputational risk of peer criticism.The future of AI inside organizations may be less about autonomous agents replacing humans and more about “process as code.” GitHub is experimenting with natural-language policy documents that both humans and agents can read to automate operational workflows, release management, and risk detection.Product teams are at risk of building faster without learning faster. Chris warns that vibe coding and rapid prototyping can unintentionally reduce time spent talking to customers and conducting qualitative research, which still remains essential for understanding mental models and uncovering hidden assumptions.Agentic workflows become most valuable when they reduce operational toil instead of replacing human judgment. GitHub is using AI to automate repetitive coordination tasks like release tracking, documentation generation, and status updates so teams can spend more time on strategic thinking and collaboration.Internal experimentation matters just as much as customer-facing innovation. Chris emphasizes that many AI workflow experiments inside GitHub are intentionally small, lightweight tests designed to explore possibilities quickly before deciding whether to scale, modify, or abandon them.The biggest long-term challenge for enterprise AI adoption may not be model capability, but integration, governance, and organizational coordination. Authentication, permissions, fragmented tooling, disconnected workflows, and siloed information remain major barriers to making agentic systems truly useful at scale.Guest LinksLinkedIn: https://www.linkedin.com/in/chrisbu/GitHub Next: https://githubnext.com/ If your leadership team is about to make a big strategic bet, the real risk usually isn't the idea, it's the assumptions behind it that haven't been surfaced yet. A Decision Sprint is a focused 6–12 week engagement where we extract, map, and test those risks so leaders can make a clear Commit, Correct, or Cut decision before major capital moves. Learn more or apply at precoil.com.
GitHub confirms a major supply chain breach after a malicious Visual Studio Code extension reportedly gave attackers linked to TeamPCP access to roughly 3,800 internal repositories. The bigger issue: developer workstations now hold some of the most sensitive secrets in modern software organizations. Also today: Microsoft begins phasing out SMS-based authentication for personal accounts, calling text-message authentication a growing fraud risk as it shifts toward phishing-resistant passkeys. Researchers also disclose a nine-year-old Linux privilege escalation flaw, CVE-2026-46333, nicknamed SSH-Keysign-Pwn, which can allow root-level access with local machine access. And Proton publicly threatens to leave Canada rather than comply with proposed surveillance legislation it says would undermine its no-logs privacy promise. Cybersecurity Today would like to thank Material Security for sponsoring this podcast. Material Security provides faster, more complete detection and response for email, identity, and data threats inside Google Workspace and Microsoft 365. You can contact them at material[dot]security. If cybersecurity, privacy, and digital infrastructure matter to your business, this is the daily briefing you need. Timestamps: 00:00 Top Stories Rundown 00:24 GitHub Supply Chain Breach 01:09 Developer Workstations at Risk 02:31 Microsoft Ditches SMS MFA 04:15 Linux Root Escalation Flaw 06:11 Proton vs Canada Surveillance Bill 08:03 Wrap Up and Sign Off #cybersecurity #github #microsoft #linux #protonvpn #privacy #databreach #supplychainattack #infosec #cybernews
Join us as we break down two of the most iconic case hits in the sports card hobby: Kaboom and Downtown. Whether you're a seasoned collector or just getting into high‑end inserts, this guide uncovers the key differences, market trends, and long‑term potential of these hobby favorites. Learn what sets each case hit apart, how rarity and design impact value, and which one might be the better chase for your collection or investment strategy. This is the ultimate breakdown every sports card collector needs.
Join us as Sports Card Investor's Tyler Nethercott sheds light on the controversial topic of aftermarket autographs in the sports card industry. Discover the facts, myths, and risks associated with aftermarket autographs and learn how to navigate this complex market with confidence. Don't miss this eye-opening discussion that every sports card collector and investor needs to hear!1:07 – Aftermarket autographs5:06 – Discussion about card grading9:15 – Card grading details11:23 – What it takes to match PSA19:30 – Topps card design discussion24:24 – Starting a sports card collection28:23 – Autograph story32:13 – What is Market Movers?34:04 – Wrapping up
Episode 422 is the debut of Decoded by Identity at the Center, a new sub-series hosted by Jeff Steadman and Sean O'Dell dedicated to unpacking the specifications and standards powering IAM. Joining them is Pieter Kasselman, VP of Open Standards at Defakto and chair of the WIMSE working group. The conversation covers why traditional non-human identity approaches break at agentic scale, how SPIFFE and SPIRE enable short-lived automated credential provisioning without long-lived secrets, and why treating agents as workloads unlocks a decade of existing standards. Pieter walks through critical OAuth specs including JWT authorization grant, token exchange, client ID metadata, and the emerging transaction tokens draft. Sean connects these to practical gateway architecture, continuous access evaluation, and policy-based authorization. The episode closes with real-world deployment examples and a clear takeaway: the tools to secure agentic identity are available today.Episode Links:Pieter Kasselman: https://www.linkedin.com/in/pieter-kasselman-0259862/AI Agent Authentication and Authorization: https://datatracker.ietf.org/doc/draft-klrc-aiagent-auth/Workload Identity in Multi-system environments (WIMSE): https://ietf-wg-wimse.github.io/OAuth SPIFFE Client Authentication: https://datatracker.ietf.org/doc/draft-ietf-oauth-spiffe-client-auth/Transaction Tokens: https://datatracker.ietf.org/doc/draft-ietf-oauth-transaction-tokens/08/Agentic Identity Control Framework. You Already Have the Pieces. Now Build It. by Sean O'Dell: https://www.linkedin.com/pulse/agentic-identity-control-framework-you-already-have-pieces-o-dell-61b5e/Timestamps:00:00 Introduction to Decoded by Identity at the Center00:13 The mission of the Decoded sub-series03:02 Guest intro: Pieter Kasselman, VP of Open Standards at Defakto06:21 Why agentic identity is urgent: scale, multi-platform, and shifting threat landscape10:42 The real cost of API keys and credential sprawl in agentic systems13:23 Agentic identity identifiers and how SPIFFE assigns unique workload IDs21:00 Credential types: X.509, JWTs, and workload identity tokens31:00 Connecting SPIFFE to OAuth and dynamic registration with client ID metadata38:18 SPIFFE SVIDs, multiple credentials per agent, and governance traceability41:44 Authentication versus authorization: delegation versus impersonation47:00 Transaction tokens: binding access to specific transactions to stop token theft51:21 Identity chaining and cross-domain authorization55:00 Shared Signals Framework and dynamic authorization57:00 Gateways, CAEP, and mid-flight token revocation for rogue agents59:31 What you can deploy today with SPIFFE, OAuth, and existing IDPs01:02:58 Policy-based access control and why instance-level governance cannot scale01:04:58 Workload identity federation: Anthropic and Google Agent ID updates01:07:13 Cross-platform federation and the law of agentic utility01:11:55 Elevator pitch: agents are workloads and 95% of the problem is solved now01:17:03 What is coming next: a transaction tokens deep diveKeywords:agentic identity, SPIFFE, SPIRE, OAuth, transaction tokens, Shared Signals Framework, WIMSE, workload identity, non-human identity, authorization delegation, JWT, CAEP, API gateway, IAM standards, AIMS, Jeff Steadman, Sean O'Dell, Pieter Kasselman, IDAC, Identity at the Center, Jim McDonald, Decoded by Identity at the CenterDecoded by Identity at the Center:Jeff Steadman: https://www.linkedin.com/in/jeffsteadman/Sean O'Dell: https://www.linkedin.com/in/seanodentity/Jim McDonald: https://www.linkedin.com/in/jimmcdonaldpmp/Visit the show on the web at https://idacdecoded.com/
In our World Password Day Special, we're digging into credentials, identity, and authentication — and where security is heading next.
This episode is a follow-up to our 2024 discussion with Stripe and Entersekt on the use of 3-D Secure (3DS) in markets where strong customer authentication is not mandated, particularly the United States. That earlier conversation was grounded in Stripe's analysis of US 3DS transactions and explored a counterintuitive but important finding: when 3DS is deployed selectively in unregulated markets, its presence can become correlated with higher-risk transactions, limiting its effectiveness and in some cases negatively impacting authorization outcomes. Since that episode, several developments have occurred, including new analysis by Stripe examining 3DS usage and performance in markets where authentication is required by regulation, a substantial increase in the use of EMVCo "network" tokenization, and research and messaging developed by Entersekt regarding the continued use of authentication in conjunction with tokenization. Chris Uriarte is delighted to welcome back Amandeep Batra from Stripe and Dewald Nolte from Entersekt to address these developments and to explore how authentication and tokenization interact in practice across different regulatory environments.
Upper Deck President Jason Masherah joins the show to break down one of the biggest moments in hobby history, the $4.25M Michael Jordan card sale. We dive into what makes this card so iconic, why it continues to set records decades later, and what it says about the current market. Jason also pulls back the curtain on sports memorabilia authentication, including how to spot real from fake, why authentication matters more than ever, and the risks collectors are taking without even realizing it. Plus, we get into: The most undervalued areas of the hobby right now How Upper Deck approaches scarcity, pricing, and collectors Why some memorabilia may actually be a better value than cards today And what the future of the hobby could look like If you collect cards or memorabilia, this is a must-listen. Learn more about your ad choices. Visit megaphone.fm/adchoices
Carlos da Silva, Chief Product Officer of Unibeam, discusses SIM-based authentication technology with Don Witt from Channel Daily News a TR Publication. Carlos explained Unibeam’s SIM-based authentication technology, which uses information stored in SIM cards to provide enhanced security against account takeover and fraud, particularly addressing the limitations of traditional SMS OTP authentication methods. He discussed how their solution works through cellular networks rather than the internet, making it more secure while maintaining ease of use for users. Carlos DaSilva Mr. Carlos da Silva also shared some insight on the following topics: The top cybersecurity threats facing customers of mobile operators today Why passwords, traditional MFA, and other authentication methods are no longer effective in this threat landscape. SIM-based authentication, and how is it making a difference. Additional insight about Unibeam. SIM-based authentication is being adopted in a few markets For more information, go to: https://unibeam.com/
Most enterprise authentication today is still built on passwords or one-time codes -- and neither is phishing-resistant. Alexander Summerer explains that fraud remains the core challenge: attackers intercept credentials in the online channel, and users are burdened with complex password policies that slow them down without making them safer. Swissbit's answer is the iShield Key, a FIDO2-based hardware security key that is plug and play. No passwords to remember, no codes to intercept, and no chance for a phishing attack to succeed. What sets Swissbit apart at RSAC Conference 2026 is convergence. The same iShield Key that authenticates a user at their workstation can also open a door. Tap it on an HID reader in a healthcare facility, a university, or a manufacturing plant, and access is granted -- physical and digital, in one device. Swissbit is the only vendor on the market today offering this combination, with HID Seos support now available and a global partner network ready to deploy at scale. The forward story is post-quantum cryptography. Alexander Summerer notes that quantum computing poses a real and coming threat to standard authentication algorithms. Swissbit is already previewing a PQC evaluation platform at booth 6565 -- a device that runs a post-quantum chip alongside the traditional chip. Organizations can upgrade to PQC-protected authentication with the same hardware, keeping legacy use cases running without disruption. This is a Brand Highlight. A Brand Highlight is a ~5 minute introductory conversation designed to put a spotlight on the guest and their company. Learn more: https://www.studioc60.com/creation#highlight GUEST Alexander Summerer, Head of Authentication, Swissbit LinkedIn: https://www.linkedin.com/in/alexander-summerer RESOURCES Swissbit: https://www.swissbit.com iShield Key product page: https://www.swissbit.com/en/products/security-products/ishield-key/ Are you interested in telling your story? ▶︎ Full Length Brand Story: https://www.studioc60.com/content-creation#full ▶︎ Brand Spotlight Story: https://www.studioc60.com/content-creation#spotlight ▶︎ Brand Highlight Story: https://www.studioc60.com/content-creation#highlight KEYWORDS Alexander Summerer, Swissbit, Sean Martin, RSAC Conference 2026, hardware security key, FIDO2, phishing-resistant authentication, passwordless authentication, physical access control, post-quantum cryptography, PQC, iShield Key, HID Seos, enterprise authentication, zero trust, brand story, brand marketing, marketing podcast, brand highlight Hosted by Simplecast, an AdsWizz company. See pcm.adswizz.com for information about our collection and use of personal data for advertising.
I bought a card...and then it fell apart. Or did it?Perhaps telling this story can improve the process?
In this repeat episode, Jack Herrington sits down with Tanner Linsley to talk about the evolution of TanStack and where it's headed next. They explore how early projects like React Query and React Table influenced the headless philosophy behind TanStack Router, why virtualized lists matter at scale, and what makes forms in React so challenging. Tanner breaks down TanStack Start and its client-first approach to SSR, routing, and data loading, and shares his perspective on React Server Components, modern authentication tradeoffs, and composable tooling. The episode wraps with a look at TanStack's roadmap and what it takes to sustainably maintain open source at scale. We want to hear from you! How did you find us? Did you see us on Twitter? In a newsletter? Or maybe we were recommended by a friend? Fill out our listener survey! https://t.co/oKVAEXipxu Let us know by sending an email to our producer, Elizabeth, at elizabeth.becz@logrocket.com, or tweet at us at PodRocketPod. Check out our newsletter! https://blog.logrocket.com/the-replay-newsletter/ Follow us. Get free stickers. Follow us on Apple Podcasts, fill out this form, and we'll send you free PodRocket stickers! What does LogRocket do? LogRocket provides AI-first session replay and analytics that surfaces the UX and technical issues impacting user experiences. Start understanding where your users are struggling by trying it for free at LogRocket.com. Try LogRocket for free today. Chapters 01:00 – What is TanStack? Contributors, projects, and mission 02:05 – React Query vs React Table: TanStack's origins 03:10 – TanStack principles: headless, cross-platform, type safety 03:45 – TanStack Virtual and large list performance 05:00 – Forms, abandoned libraries, and lessons learned 06:00 – Why TanStack avoids building auth 07:30 – Auth complexity, SSO, and enterprise realities 08:45 – Partnerships with WorkOS, Clerk, Netlify, and Cloudflare 09:30 – Introducing TanStack Start 10:20 – Client-first architecture and React Router DNA 11:00 – Pages Router nostalgia and migration paths 12:00 – Loaders, data-only routes, and seamless navigation 13:20 – Why data-only mode is a hidden superpower 14:00 – Built-in SWR-style caching and perceived speed 15:20 – Loader footguns and server function boundaries 16:40 – Isomorphic execution model explained 18:00 – Gradual adoption: router → file routing → Start 19:10 – Learning from Remix, Next.js, and past frameworks 20:30 – Full-stack React before modern meta-frameworks 22:00 – Server functions, HTTP methods, and caching 23:30 – Simpler mental models vs server components 25:00 – Donut holes, cognitive load, and developer experience 26:30 – Staying pragmatic and close to real users 28:00 – When not to use TanStack (Shopify, WordPress, etc.) 29:30 – Marketing sites, CMS pain, and team evolution 31:30 – Scaling realities and backend tradeoffs 33:00 – Static vs dynamic apps and framework fit 35:00 – Astro + TanStack Start hybrid architectures 36:20 – Composability with Hono, tRPC, and Nitro 37:20 – Why TanStack Start is a request handler, not a platform 38:50 – TanStack AI announcement and roadmap 40:00 – TanStack DB explained 41:30 – Start 1.0 status and real-world adoption 42:40 – Devtools, Pacer, and upcoming libraries 43:50 – Sustainability, sponsorships, and supporting maintainers 45:30 – How companies and individuals can support TanStackSpecial Guests: Jack Herrington and Tanner Linsley.
SUMMARY: Morgan Foster talks about the Kagenti project, which enables an AI Agent agnostic framework for security, authentication, identity and zero-trust.SHOW: 1011SHOW TRANSCRIPT: The Reasoning Show #1011 TranscriptSHOW VIDEO: https://youtu.be/djFZruLEDiwSHOW NOTES:Kagenti (homepage)Kagenti (use-cases)“Old Things that look like Agents”“What makes Agents different?”CNV - What Makes Agents Different?“Handing your phone to a stranger, why Agents need their own identity”Topic 1 - Welcome to the show. Tell us a little bit about your background and areas you focus on today. Topic 2 - Tell us a bit about the Kagenti project and the types of challenges it's trying to solve for Agentic AI deployments. Topic 3 - How much commonality exists between different Agentic frameworks that a common, agnostic agentic orchestration approach can work? And how much difference still exists and would drive companies to silo'd deployments? Topic 4 - How far should an Agentic Orchestration framework go, and what types of things do you expect will still be Agentic framework dependent? Is Kagenti more of a control-plane element, or more of a data-plane element? Topic 5 - As Kagenti evolves, what are some of the adjacent things that people should be keeping an eye on that might be a dependency, or could shift the direction of the project?FEEDBACK?Email: show @ reasoning dot showBluesky: @reasoningshow.bsky.socialTwitter/X: @ReasoningShowInstagram: @reasoningshowTikTok: @reasoningshow
Generative AI is making identity fraud and social engineering easier, cheaper and more scalable — especially through deepfakes, synthetic identities and other emerging AI-agent risks — so traditional ID verification is increasingly unreliable. Discussing these challenges for banks on this episode of the ABA Fraudcast with Paul Benda of the American Bankers Association are Jeremy Grant of the Better Identity Coalition and John Carlson, senior vice president for cybersecurity regulation and resilience at the American Bankers Association. Two recent papers are referenced in this episode: Mitigating AI-Powered Attacks Against Identity and Authentication, intended for financial institutions, cybersecurity and fraud professionals, AI service providers, telecommunications companies and policymakers at regulatory agencies and in legislative bodies who are responsible for safeguarding identity systems and mitigating the risks posed by Gen AI; and Recommendations for Policymakers: Mitigating AI-Powered Attacks Against Identity and Authentication, both authored by Financial Services Sector Coordinating Council's Artificial Intelligence and Identity and Authentication Workstream (AI-IA), which was co-chaired by the American Bankers Association and Better Identity Coalition. For ABA's fraud prevention resources go to aba.com/protectyourmoney. ABA's scam prevention campaigns #BanksNeverAskThat and #PracticeSafeChecks are newly updated as well. The ABA Foundation's Protecting Older Americans page includes useful resources to assist the fight against elder financial exploitation and additional increasing threats. ABA Fraudcast host is Paul Benda, EVP, risk, fraud and cybersecurity at American Bankers Association.
Send a textHow do we protect ourselves in a digital world where attackers face almost no real consequences?In this episode of Joey Pinz Discipline Conversations, Joey Pinz sits down with cybersecurity founder and inventor Mike Siers for a thought-provoking conversation that challenges everything we assume about online security, identity, and trust.Mike's journey begins in the Florida National Guard and a deployment to Afghanistan, where life-altering experiences shaped how he sees service, responsibility, and problem-solving. That same mindset later led him into healthcare innovation—and eventually into cybersecurity—after realizing that the internet lacks one critical element found in the physical world: real risk for bad actors.Inspired by military strategy and an MIT thesis on cyber power projection, Mike explains a radical idea: what if unauthorized access attempts cost money? Instead of defenders absorbing endless attacks, attackers would inherit the risk before they even try.This conversation explores how empathy fuels innovation, why most cybersecurity models are reactive by design, and how shifting incentives could dramatically change online behavior. It's a powerful look at leadership, responsibility, and building solutions not just for today—but for the next generation. ⭐ Top 3 Highlights
Forget the built-in Windows tools—Paul shares why third-party password managers are the secret to making passkeys smarter, more powerful, and truly universal across all your devices. Host: Paul Thurrott Download or subscribe to Hands-On Windows at https://twit.tv/shows/hands-on-windows Join Club TWiT for Ad-Free Podcasts! Support what you love and get ad-free audio and video feeds, a members-only Discord, and exclusive content. Join today: https://twit.tv/clubtwit Club TWiT members can discuss this episode and leave feedback in the Club TWiT Discord. Sponsor: canary.tools/twit - use code: TWIT
Talk Python To Me - Python conversations for passionate developers
Building on the web is like working with the perfect clay. It's malleable and can become almost anything. But too often, frameworks try to hide the web's best parts away from us. Today, we're looking at PyView, a project that brings the real-time power of Phoenix LiveView directly into the Python world. I'm joined by Larry Ogrodnek to dive into PyView. Episode sponsors Talk Python Courses Python in Production Links from the show Guest Larry Ogrodnek: hachyderm.io pyview.rocks: pyview.rocks Phoenix LiveView: github.com this section: pyview.rocks Core Concepts: pyview.rocks Socket and Context: pyview.rocks Event Handling: pyview.rocks LiveComponents: pyview.rocks Routing: pyview.rocks Templating: pyview.rocks HTML Templates: pyview.rocks T-String Templates: pyview.rocks File Uploads: pyview.rocks Streams: pyview.rocks Sessions & Authentication: pyview.rocks Single-File Apps: pyview.rocks starlette: starlette.dev wsproto: github.com apscheduler: github.com t-dom project: github.com Watch this episode on YouTube: youtube.com Episode #535 deep-dive: talkpython.fm/535 Episode transcripts: talkpython.fm Theme Song: Developer Rap