Connect your Claude, Codex or OpenClaw for full transcripts on millions of podcasts. Two week free trial, cancel anytime.
Start free trial →Super Data Science: ML & AI Podcast with Jon Krohn · AI Builders · October 2026
Jon Krohn asks whether zero standing privileges and just-in-time access add friction for developers and other users. Amy Blackshaw says access should be granted and revoked automatically by policy and risk level, so users do not have to keep asking for it. This line is her reason why friction matters for security.
…granted. And when that session is closed, it disappears. So you're doing sort of both. You're enabling the user to be able to move as fast as they want. And then you're stopping the attacker because you are stripping that standing privilege that for far too long organizations have been using.
…developer, as a data scientist, as anyone creating a system to just have a key that unlocks all the doors and works forever. That's super convenient. So everything that you're describing, just-in-time access, zero-standing privileges, that must add friction, right? How do we minimize that friction?
…it's annoying. The idea is to be able to open that door or request that access just based on who you are and what you're trying to do, which is set by policy. So there are certain things that certain identities are going to do that are legitimate time and time again that can be set to be automatically granted and automatically revoked. So that way you aren't introducing that friction. Because I always say the best cybersecurity can be the worst cybersecurity. Because if nobody uses it, it doesn't matter how secure it is. So it has to be granted by policy and by risk level. And it has to be done in a way that is natively in line with the user's tools and how they would approach their day-to-day. So you don't have that friction.
Makes perfect sense. Looking ahead a little bit, LLM's frontier models are only getting more and more capable. So you have said previously that defenders have three to five months from them hearing this episode before autonomous exploitation becomes standard. So if my listener, their organization…
Yeah, I think like, you know, the countdown, what we know is that attackers are getting faster and that the window to exposure is just, you know, becoming smaller and smaller and that it becomes a harder problem to solve for defenders who have to get it right every single time, where the attacker…
Fantastic, Amy. We're going to have to watch closely as this autonomous exploitation becomes more and more standard in the coming months. And yeah, we'll have to have you on again to explain the latest exploits that our LLMs are getting up to out there in the world and how we can be combating them…