Videos yWS0udrIOc8

Agentic Security: Permissions, Provenance, and the Agent Supply Chain — Steve Yegge, Gas Town

index_state ready data_status ok

AI Engineer· published 2026-07-20· 0:22:32· en-US· indexed 2026-08-10 19:46

Open on YouTube

60 shot(s).

keyframes kept every frame deduplicated

What was stored

cues: 282; whisperx 282
chunks: 40; from 282 cues
keyframes: 38; kept of 60 captured
frames with text: 38; 243 lines read
chapters: 17; from the source metadata
keyframe bytes: 6.8 MB; word timings on 282 cues

Provenance

Each pipeline stage, its state and the model that produced it
stage	state	model	started	took
`fetch`	done	—	2026-08-10 03:46	1m 46s
`stt`	done	—	2026-08-10 03:48	23s
`chunk`	done	—	2026-08-10 03:48	0s
`text_embed`	done	—	2026-08-10 19:46	1s
`keyframe`	done	—	2026-08-10 03:48	2m 17s
`ocr`	done	—	2026-08-10 03:50	8s
`frame_embed`	done	—	2026-08-10 19:46	6s

Frames, and what the machine read

0:02 #0 done2 line(s)

shot 0·sharpness 455.4
1. AlEngineer0.96
2. World's Fair0.97
0:03 #1 done2 line(s)

shot 1·sharpness 659.4
1. AIEngineer0.95
2. World's Fair0.99
0:10 #2 done24 line(s)

shot 2·sharpness 2740.2
1. LAB & PLATINUM SPONSORS0.99
2. Amazon AGI Lab0.98
3. ANTHROP\C1.00
4. Google DeepMind1.00
5. MINIMAX0.93
6. OpenAI0.93
7. Akamai1.00
8. arize0.92
9. aws1.00
10. Braintrust bright data0.99
11. B1.00
12. Browserbase1.00
13. docker1.00
14. :neo4j0.93
15. ORACLE1.00
16. PayPal1.00
17. qodo1.00
18. reducto1.00
19. Sonar1.00
20. Makers of0.99
21. togetherai1.00
22. Unblocked1.00
23. WorkOS1.00
24. SonarQube1.00
0:17 #3 done2 line(s)

shot 3·sharpness 205.4
1. AlEngineer0.99
2. World's Fair0.99
0:31 #4 done17 line(s)

shot 4·sharpness 1473.0
1. Tue Jun 30 2:25PM1.00
2. AlEngineer0.98
3. File0.89
4. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.99
5. World's Fair0.97
6. AI ENGINEER WORLD'S FAIR1.00
7. SECURITY TRACK . 14:250.96
8. Agentic1.00
9. PRESENTED BY1.00
10. Microsoft1.00
11. Security0.97
12. Permissions, provenance, and the agent0.99
13. supply chain.0.99
14. Steve Yegge1.00
15. . on behalf of Snyk0.98
16. World'sFair0.97
17. Engineering the future of Al0.99
0:51 #5 skipped

shot 5·duplicate of #4
1:16 #6 done16 line(s)

shot 6·sharpness 1341.1
1. Help1.00
2. AlEngineer0.99
3. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html1.00
4. World's Fair0.96
5. AI ENGINEER WORLD'S FAIR0.99
6. SECURITY TRACK . 14:250.95
7. Agentic1.00
8. PRESENTED BY1.00
9. Microsoft1.00
10. Security0.99
11. Permissions, provenance, and the agent1.00
12. supply chain.0.98
13. Steve Yegge1.00
14. . on behalf of Snyk0.97
15. TRACK 5· JUNE 30, 20260.95
16. Security1.00
1:44 #7 skipped

shot 7·duplicate of #6
2:26 #8 done13 line(s)

shot 8·sharpness 1205.8
1. AlEngineer0.97
2. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html1.00
3. World'sFair1.00
4. AI ENGINEER WORLD'S FAIR1.00
5. SECURITY TRACK . 14:250.95
6. Agentic1.00
7. Security0.98
8. Permissions, provenance, and the agent1.00
9. supply chain.0.98
10. Steve Yegge1.00
11. . on behalf of Snyk0.97
12. TRACK 5· JUNE 30, 20260.95
13. Security1.00
2:32 #9 done11 line(s)

shot 9·sharpness 963.0
1. Help1.00
2. AlEngineer0.98
3. Fle0.94
4. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.97
5. World'sFair1.00
6. THE MULTIPLIER1.00
7. 02 / 100.89
8. Ten times the surface.1.00
9. Same defect rate. Ten times the code.1.00
10. TRACK 5· JUNE 30, 20260.97
11. Security1.00
3:03 #10 done12 line(s)

shot 10·sharpness 1035.0
1. Help1.00
2. AlEngineer0.98
3. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.99
4. World'sFair1.00
5. THE THREAT MODEL1.00
6. 03 / 100.95
7. It got bigger. It got0.97
8. stranger.1.00
9. Hallucinated APIs. Poisoned packages.1.00
10. Sleeper backdoors.1.00
11. TRACK 5· JUNE 30, 20260.97
12. Security1.00
3:38 #11 skipped

shot 11·duplicate of #10
4:03 #12 skipped

shot 12·duplicate of #10
4:28 #13 skipped

shot 13·duplicate of #10
4:49 #14 done12 line(s)

shot 14·sharpness 1147.0
1. AlEngineer0.99
2. OFle0.83
3. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.98
4. World'sFair1.00
5. THE PIVOT1.00
6. 04 / 100.89
7. The build surface1.00
8. is the attack0.96
9. surface.1.00
10. No upstream left.1.00
11. TRACK 5· JUNE 30, 20260.97
12. Security1.00
5:24 #15 done15 line(s)

shot 15·sharpness 1273.1
1. Help1.00
2. AlEngineer0.96
3. Fle0.96
4. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.99
5. World'sFair1.00
6. THE PIVOT1.00
7. 04 / 100.88
8. PRESENTED BY1.00
9. Microsoft1.00
10. The build surface1.00
11. is the attack0.97
12. surface.1.00
13. No upstream left.0.99
14. TRACK 5· JUNE 30, 20260.97
15. Security1.00
5:37 #16 skipped

shot 16·duplicate of #15
6:10 #17 skipped

shot 17·duplicate of #14
6:21 #18 skipped

shot 18·duplicate of #14
6:58 #19 skipped

shot 19·duplicate of #14
7:19 #20 skipped

shot 20·duplicate of #14
7:37 #21 done10 line(s)

shot 21·sharpness 950.2
1. Help1.00
2. AlEngineer0.97
3. /Users/stevey/.emacs.d/work/snyk/vibe-security-deck.html0.99
4. World's Fair0.96
5. THE EVIDENCE1.00
6. 05 / 100.94
7. I ran Snyk on my own monorepo.0.99
8. 7 HIGH severity. All mine.1.00
9. TRACK 5· JUNE 30, 20260.97
10. Security1.00
8:09 #22 skipped

shot 22·duplicate of #21
8:42 #23 skipped

shot 23·duplicate of #21

Transcript

282 cues· 3,534 words· 18,657 chars

chunk 0 · 0:12–0:57 · 127 words · 633 chars
0:12 All right, hey everybody.
0:13 Yeah, yeah, yeah, yeah, okay.
0:18 I have about 18 minutes.
0:20 I have a slide deck here that Claude put together for me, but Claude still can't do very good slide decks, so I apologize for that.
0:28 Just focus on me, right?
0:30 Right here.
0:33 This is like the most fun thing to do ever now.
0:35 If I start running out of time, can you call time for me?
0:41 All right, perfect.
chunk 1 · 0:44–1:28 · 125 words · 614 chars
0:44 I'm Steve Yege.
0:45 I am here on behalf of Snyk today.
0:48 I am not getting paid for this talk or anything like that.
0:51 They were really nice enough to buy me a ticket to the conference, which is cool, but I'm mostly here because I wanted to hang out with all of you.
0:57 And I don't bite, and feel free to come and say hi afterwards.
1:01 I wander the halls, amazed at all the brand logos.
1:05 I'm up here because, like the title of my talk is like agentic security, but,
1:12 The real title of my talk is be scared.
chunk 2 · 1:20–1:59 · 118 words · 599 chars
1:20 Come on, come on love love with me who here is scared.
1:25 That's good, but you're all in the security talks.
1:27 Of course you are.
1:28 The problem is they aren't out there.
1:31 Right?
1:32 I went to Commonwealth, I went to so many places last year, but one of these big banks I was at, I was talking to their chief security architect in December, and I was doing a Q&A and talking about vibe coding, and everyone was asking me questions, and I was knocking them out of the park, and he stands up real quiet at the end, and he goes, yeah, so, he goes, if everyone's shipping code at the same, sorry, at 10 times faster,
chunk 3 · 2:01–2:43 · 94 words · 489 chars
2:01 and the defect rate stays the same, the security defect, the vulnerability rate, then doesn't that mean that the defect surface goes up by 10x?
2:16 And it hit me so hard, I sank down to my knees.
2:19 I was just like...
2:21 What are we going to do about this?
2:23 Because it's a really, really important point, because the subtle implied question is not if the defect rate stays the same, the defect rates going to get worse.
chunk 4 · 2:34–3:18 · 112 words · 577 chars
2:34 A lot worse.
2:36 With AIs writing the code.
2:39 And so.
2:42 I didn't have an answer for him.
2:43 I actually have a partial answer for you today, and I'll share it with you, but it's only a partial answer.
2:49 The real answer is you have to be scared of what's coming.
2:53 All right?
2:55 And it's, do I have a slide about this?
2:59 Yeah, so it's not just that you're just like putting in more of the same defects, cross-site scripting and blah, blah, blah.
chunk 5 · 3:08–3:50 · 130 words · 694 chars
3:08 You're still putting those in.
3:09 Fable wrote an XSS vulnerability during the short time that I had with it.
3:15 Not its fault, we'll talk about it in a minute.
3:19 But those are the old ones.
3:22 All right, we are.
3:23 We all know how to fix those.
3:24 There's new vulnerability types and new attack surfaces coming and they're here and many of them are incredibly well polished.
3:32 Like what's an example you guys know about slop squatting?
3:36 Right where the AI hallucinates a package name.
chunk 6 · 3:39–4:22 · 126 words · 669 chars
3:39 Let's say that you want to graph database and so you're like OK, I'm going to use this graph database and the AI goes.
3:44 Oh yeah, I know it's you know it's graphy 123 and it goes off to the package manager and downloads graphy 123.
3:50 And it builds, and it runs, and the tests pass, and it looks right, but what it downloaded was a backdoor.
4:00 Because that graph E123 wasn't a real package.

Chapters

0:00 The real title of this talk: be scared
1:38 The bank architect's question: 10x speed, 10x defect surface
3:08 New attack surfaces and slop squatting
4:51 How Google surfaces bugs at the developer's fingertips
6:08 Why security bugs have no half life
6:46 Can the model just write secure code?
7:24 Running Snyk on his own game: 241 vulnerabilities
8:14 The rule of five and security as its own pass
9:32 Software Survival 3.0: lazy models reach for tools
10:09 Give the agent Snyk and Chainguard
12:03 Five Eyes: months, not years
13:34 Refresh your family code words
14:36 The arms race you can start fighting now
15:30 Q&A: what has surprised you in AI coding
17:28 Q&A: Gas Town, beads, and running agents all night
19:13 Q&A: adversarial agents watching your agents
20:58 Q&A: prompt injection