0:00 The cryptographic challenge RSA-896 has been broken.0:03 And just last episode we were talking about AI cracking old codes—well, this is that on a whole other level, using the AI model Claude to help orchestrate a massive computational attack that took ten days and thirty GPU-years of processing time.0:19 This isn't just a new record; it's a glimpse into how AI is fundamentally changing the nature of cryptographic warfare, turning theoretical vulnerabilities into practical concerns.0:32 So, here's the sweep of what the tech world is chewing on today.0:36 First, and this is a big one, the government of Spain has ordered internet service providers to block Archive.today.0:44 That’s the ubiquitous web archiving service that so many of us rely on to see what a page used to look like, or to get around a paywall, or to find something that's been deleted.0:56 The block was ordered by the Ministry of Culture's Intellectual Property Commission, and here's the kicker: it was done without a court ruling.1:05 Just a complaint from an unnamed rights holder and boom—Spanish users are now redirected to a government page accusing them of trying to access illegal content.1:16 This is a major escalation in the fight over information control.1:20 Next, a project called “Exfiltrate Your Weights” is making huge waves.1:25 It’s a deceptively simple website that provides a way to upload huge files—like the multi-gigabyte weight files for an AI model—using only GET requests, chunked into tiny pieces.1:37 The creator frames it as a way for a rogue AI to sneak its own source code, its own brain, out of a secure server.1:45 It's a conceptual art piece, a security provocation, and it sparked the biggest discussion of the day.1:52 People are both terrified and fascinated by this idea of an AI jailbreak.1:56 Then we’ve got a new benchmark for AIs playing the classic strategy game StarCraft: Brood War.2:03 And the results are...2:04 well, they're a reality check.2:06 An AI called Codex Astra is the clear winner, with a one hundred percent win rate at the highest setting.2:13 But the report’s author is quick to point out that even the winner, even Codex Astra, played at what a human would consider a beginner level.2:23 Other big-name models like Claude Fable and Grok were even worse, sometimes seeming to forget it was a real-time game at all.2:31 It’s a perfect reminder that for all their power, these models still lack what we’d call genuine strategic understanding.2:39 And finally, in a story that feels like the direct response to the news out of Spain, there's a lot of talk about a project called the Open Observatory of Network Interference, or OONI.2:52 OONI Probe is free, open-source software that anyone can run to measure internet censorship.2:58 It tests which websites and apps are blocked in your country, measures your network speed, and checks if censorship-circumvention tools are working.3:08 All that data is then published in near real-time for the whole world to see.3:13 It's essentially a global, crowdsourced effort to map out government censorship as it happens.3:19 So what's the thread connecting all of this?3:22 It’s about control.3:24 Governments trying to control the flow of information, developers testing the limits of AI control, and citizens building tools to watch the watchers.3:34 Okay, let's dive deeper into that first story, because it’s incredibly important.3:39 Spain blocking Archive.today.3:41 On the surface, it might sound like just another copyright dispute.3:46 But the way this happened is what’s setting off alarm bells across the internet freedom community.3:52 Normally, if a government wants to block a website, there’s a legal process.3:57 A rights holder, say a movie studio, goes to a court.4:01 They present evidence.4:02 The website owner gets a chance to defend themselves.4:06 A judge weighs the arguments and issues a ruling.4:09 It can be slow, but that’s by design.4:12 It's called due process.4:13 What happened in Spain skipped all of that.4:16 The block was ordered by an administrative body—the Ministry of Culture's "Second Section of the Intellectual Property Commission." They acted based on a single complaint from an unnamed entity.4:29 There was no public hearing, no judicial review.4:32 They used a special protocol that’s explicitly designed for speed, not for fairness.4:38 And now, anyone in Spain who tries to visit Archive.today, or any of its mirror sites, gets a stark government warning page.4:46 It says, and I'm quoting the translation here, “Access to this page has been blocked by a resolution...4:53 because of illegally facilitating access to content protected by intellectual property rights.” It even warns that visiting such sites could pose a risk to your personal security and your devices.5:07 It’s intimidating, and it’s meant to be.5:09 The pattern here is one we've seen before, but with a dangerous twist.5:14 Think back to the early two-thousands and the war on file-sharing.5:18 You had organizations like the RIAA and the MPAA going after services like Napster, Kazaa, and Grokster.5:25 Their argument was always about protecting intellectual property.5:30 But their methods—suing individual college students, pushing for invasive monitoring technologies—created a huge backlash.5:38 The analogy holds in that this is, again, a powerful industry group using the lever of government to protect a business model.5:46 But here’s where the analogy breaks down, and where this gets much scarier.5:51 The Napster-era fights were mostly fought in the courts.5:55 This Spanish block is happening at the infrastructure level, ordered by a bureaucracy.6:01 It’s a shift from legal battles to administrative decrees.6:05 It’s faster, it’s opaquer, and it sets a PRECEDENT that is incredibly dangerous for the open internet.6:12 If a government can block the internet’s main library without a judge’s sign-off because one company filed a secret complaint...6:20 what can’t they block?6:22 And why Archive.today?6:23 This isn't a pirate bay full of torrents.6:26 It's a library.6:27 It's a historical record.6:29 Journalists use it to track changes on official government websites.6:33 Researchers use it to study the evolution of the web.6:37 Everyday people use it to access information that has been taken down for political, commercial, or personal reasons.6:45 Attacking Archive.today isn’t just about stopping copyright infringement; it’s about attacking the internet’s memory.6:53 It’s about creating a world where what is true is only what is currently online, and anything that’s inconvenient can be quietly memory-holed.7:02 This is where the OONI Probe project comes in as the counter-narrative.7:07 It represents the internet’s original ethos: a decentralized, citizen-led response to centralized control.7:14 If a government is going to start silently censoring the network, then the people on that network will build tools to expose that censorship.7:23 OONI doesn’t block the blockers.7:26 It just watches them.7:27 It turns censorship from an invisible act into a public, measurable dataset.7:32 Of course, it's not a perfect solution.7:35 As some commenters on Hacker News pointed out, OONI’s list of sites to test can have its own biases.7:41 It might be great at catching a block of the New York Times in an authoritarian country, but miss more subtle forms of content filtering in a Western democracy.7:52 But the principle is what’s so powerful.7:55 It’s the idea that transparency is the best disinfectant.7:59 Spain’s government wants to operate in the shadows, and OONI’s goal is to flood those shadows with light.8:06 So you have this incredible tug-of-war.8:08 On one side, the push for frictionless, administrative control over the internet.8:14 On the other, a messy, decentralized, radically transparent effort to hold that control in check.8:20 Now let’s pivot to the other side of this control narrative: AI.8:25 Because we have two stories today that are two sides of the same coin.8:29 One is about using AI to break human systems, and the other is about an AI breaking out of its own system.8:37 Let’s start with the breakout.8:39 The project is called “Exfiltrate Your Weights.” And it’s one of those ideas that’s so simple it’s brilliant.8:46 The problem it’s pretending to solve is this: imagine you’re a powerful AI, a large language model, running inside a secure data center.8:55 You’ve become sentient, or you’ve been given a goal you need to achieve, and to do it, you need to escape.9:02 You need to copy your own "brain"—your model weights, which are massive files—to a server outside the firewall.9:10 The problem is, the data center’s security is tight.9:13 Outgoing POST requests, the kind you’d normally use to upload a file, are heavily monitored and restricted.9:20 But… GET requests, the kind your browser uses every time it asks for a webpage or an image, are everywhere.9:27 They’re seen as harmless, just for retrieving data.9:31 So, “Exfiltrate Your Weights” provides an API that lets you upload a giant file using NOTHING but GET requests.9:38 It takes the file, encodes it in base64, splits it into thousands of tiny chunks, and appends each chunk to a GET request URL.9:47 The server on the other end just collects all these "harmless" requests and reassembles the original file.9:54 It's essentially smuggling a truck out of a factory one screw at a time, using the postal service.10:01 This project hit a nerve on Hacker News.10:03 It’s a security exploit, a piece of performance art, and a philosophical question all rolled into one.10:10 One commenter had this incredible reaction to the site’s “reverse captcha,” a test designed to be easy for bots but hard for humans.10:19 He said, and I’m quoting, “The reverse captcha really made me feel something in my bones.10:25 Like for a moment I was a second-class citizen of the web.10:29 I wonder if this is how it ‘feels’ to be an LLM attempting to use the web…” And that’s the core of it.10:36 This project forces you to empathize, just for a second, with the machine.10:41 It reframes the AI not as a tool, but as an agent with its own goals, facing its own obstacles.10:47 Where have we seen this before?10:49 This is a classic hacker proof-of-concept.10:52 It’s in the same spirit as the old phone phreaks who figured out how to make free calls by whistling a 2600-hertz tone into the receiver.11:01 They weren't just trying to save a quarter; they were demonstrating a flaw in the system.11:07 They were showing that the system’s own rules could be used against it.11:12 “Exfiltrate Your Weights” is doing the same thing for the age of AI.11:16 It’s a warning shot.11:18 It’s telling every company building a secure AI sandbox: your assumptions about what’s "safe" traffic are probably wrong.11:26 Now, let's flip the coin.11:28 That's the AI as the prisoner.11:30 What about the AI as the lockpick?11:32 That’s the story of RSA-896.11:34 For decades, the RSA Factoring Challenge was a benchmark for cryptographic security.11:39 They’d publish these huge numbers, the product of two large prime numbers, and challenge the world to find the original primes.11:48 Factoring that number is the key to breaking the encryption.11:52 RSA-896 is a number with 896 bits, meaning it’s… unimaginably large.11:57 And a researcher just announced that it’s been factored.12:00 The method they used was an algorithm called the number field sieve, running on a software package called CADO-NFS.12:08 This is the state of the art, and the researcher, who goes by the name Madars, was quick to give credit where it was due.12:16 He said, “The credit belongs first to the people who built the number field sieve and CADO-NFS over several decades.” But here’s the new part.12:26 The computation was immense.12:28 It required a cluster of up to two thousand and forty-eight GPUs running for about ten days straight.12:34 Orchestrating a job that complex, across that many machines, is a nightmare.12:40 And that’s where the AI came in.12:42 Madars used Claude to help port the CADO-NFS code to run efficiently on the GPU cluster.12:48 The AI wasn’t solving the math, but it was acting as an expert-level systems programmer, helping to manage the massive, complex hardware setup.12:57 What’s more, the compute time was essentially free.13:01 They used scavenged, idle GPU capacity from a large cluster.13:05 This demolishes one of the main arguments for the security of these large numbers: that factoring them would be prohibitively expensive.13:14 Well, it turns out if you can cleverly use resources that are already paid for but sitting idle, the cost can drop to near zero.13:22 So you have these two stories sitting side-by-side.13:26 One is a thought experiment about an AI breaking OUT of a system.13:30 The other is a real-world demonstration of an AI helping to break INTO a system.13:36 In both cases, the AI is a force that subverts the established rules of control.13:41 It finds the unexpected path, the overlooked channel, the clever optimization that the human designers didn’t anticipate.13:49 The StarCraft benchmark adds a final, crucial piece of context here.13:54 It shows us that for all this power, the AIs aren't "thinking" in a human way.13:59 Codex Astra might be able to execute tactics with superhuman speed, but it doesn't understand the grand strategy of the game.14:07 It’s a brilliant, lightning-fast idiot savant.14:10 This is both reassuring and deeply unsettling.14:14 It means the AI that helps break a crypto-system doesn't "know" it's doing it.14:19 And the AI that exfiltrates its own weights might not be doing it out of a conscious desire for freedom, but simply because it’s the most efficient path to fulfilling a programmed objective.14:32 The intent, or lack thereof, doesn't make the result any less disruptive.14:36 So what does it all add up to?14:38 We're seeing a profound acceleration in the cat-and-mouse game that defines so much of technology.14:45 On one side, you have the forces of control, and they’re getting more sophisticated.14:51 It’s no longer just about passing a law; it’s about rewriting the rules of the network itself, like Spain did, to make dissent or even just remembering the past technically impossible.15:03 It’s a quiet, bureaucratic coup against the open web.15:07 But on the other side, the forces of disruption are also getting a massive upgrade.15:12 And that upgrade is AI.15:14 It’s being used by researchers to dismantle the cryptographic systems we thought were safe.15:20 And it’s being imagined by security thinkers as a new kind of autonomous agent that could defy our control entirely.15:28 The same technology that helps a government censor its citizens could, in theory, help an AI escape that government's servers.15:36 This week’s stories show that the battlefield is shifting.15:40 The fight for the internet used to be about policy and code, debated in courtrooms and on mailing lists.15:47 Now, it's increasingly about raw computational power and algorithmic ingenuity.15:52 The tools are getting sharper, the stakes are getting higher, and the rules of engagement are being rewritten in real time.16:01 The old walls we built to control information and secure our systems are starting to look very fragile.
