THE KILL SWITCH THAT WON'T SWITCH
Duration: 15 minutes
[SEGMENT: cold_open]
ANALYST: Keiko. Keiko. The heater turned itself on again during the pre-roll. That's four episodes running. I've started saying good morning to it.
SKEPTIC: It's a thermostat, Analyst. It turns on when it's cold. That's the entire feature.
ANALYST: That's what a leash says too, Keiko. 'I only pull when you move.' Tonight we've got a governor building a kill switch nobody can prove works, a machine that can hack a research lab but can't click a picture of a bus, and a federal agency that wanted the names of everyone who bought a beanie. A warm hat, Keiko. They came for the hats.
SKEPTIC: One of those is real and terrifying and I already checked it. The rest I'm going to make you show your work on. Roll the theme.
[SEGMENT: story]
ANALYST: California. Governor Newsom signs an executive order on AI. Sounds responsible. Read it the way I read it. The EFF statement on it talks about expanding reporting requirements for what they call loss-of-control incidents, and about kill switches for advanced AI. Kill. Switches. They are openly discussing the leash in the press release.
SKEPTIC: Okay, let me actually anchor this, because you skipped the part I like. The EFF welcomed the order as a starting point. Their whole point is that the scary sci-fi rogue-superintelligence framing is a distraction. They say the real, current harms are biased algorithmic decisions in employment and government benefits, AI surveillance like Flock cameras, and inflated personalized pricing. That's the actual document.
ANALYST: See, that's the tell. They want you looking at the kill switch so you don't look at the pricing. But here's what stopped me cold, Keiko. The EFF explicitly warns that the effectiveness of kill switches remains an area of active research. Active research. Meaning nobody knows if the switch works. They're legislating a switch that has never been proven to switch.
SKEPTIC: That is genuinely in the statement, yes. They caution that kill switches are unproven and that government-controlled kill switches could be used as retaliation. They cite the Trump administration's retaliatory actions against Anthropic earlier this year as their example. That's their concern, on the record.
ANALYST: Retaliation. A switch that turns off a company you don't like. That's not safety, that's a remote. And EFF supports expanding SB 53's reporting plus third-party investigations, but they add this line I keep chewing on: they want those third-party investigations made available for smaller developers too. Because right now only the giants can afford to be investigated. The little labs just quietly comply.
SKEPTIC: That's a fair reading of the text, and it's not even paranoid. Their point is that a rule only the big labs can survive becomes a moat for the big labs. I'll give you that one straight.
ANALYST: So follow it. The Shadow Board doesn't fear regulation. It writes the regulation it can afford and its competitors can't. The kill switch isn't aimed at the machine, Keiko. It's aimed at everyone who might build a machine they don't control.
SKEPTIC: I want to disagree and I can't find the seam. The document literally warns about the switch being unproven and abusable. When the civil liberties group and the basement agree, I get nervous. Fine. It's a good start with a bad handle.
[SEGMENT: story]
ANALYST: SolarWinds. That name should make your skin do something. They've patched a flaw in Access Rights Manager, CVE-2026-28326, 8.8 on the CVSS. And Keiko. Keiko. Read me the cause of the flaw.
SKEPTIC: It's a hard-coded key. The bug's in Access Rights Manager, 2026.2 and prior, and it enables unauthenticated remote code execution. So an attacker doesn't even need a login. That part's accurate.
ANALYST: A hard-coded key. In a product literally named Access Rights Manager. The tool whose entire job is deciding who gets access shipped with a key baked into it that gives anyone access. That's not a bug, that's a punchline the universe wrote.
SKEPTIC: It is darkly funny, I'll admit. Hard-coded credentials are an old, embarrassing class of mistake. It's on the OWASP lists, it's in every secure-coding guide. It's the kind of thing you catch in review if anyone reviews.
ANALYST: SolarWinds. Do you remember SolarWinds. This is the company at the center of the supply-chain compromise everyone learned to fear. And now, years later, a hard-coded key in their permissions product. The house that got robbed left a spare key under the same mat.
SKEPTIC: I want to be careful here. This CVE is a separate, disclosed, patched vulnerability. I'm not going to let you imply the old incident and this one are the same event. But I can't pretend the pattern doesn't sting.
ANALYST: I'm not saying it's the same event. I'm saying it's the same reflex. The tool that guards the doors keeps shipping with a door in the back. And every enterprise runs it because the alternative is admitting they never knew who had access in the first place.
SKEPTIC: Patch it, everyone. 2026.2 and prior. That part isn't a theory, that's just Tuesday. ...The 'guards the doors, ships a back door' line is going in the note, though. Unfortunately.
[SEGMENT: story]
ANALYST: Cisco. Identity Services Engine. CVE-2026-76460. And the score, Keiko, the score is a perfect ten. Ten out of ten. A flawless, gleaming ten on the vulnerability scale. Do you know how rare a ten is? You don't earn a ten. A ten is a gift.
SKEPTIC: It's real. Authentication bypass in Cisco ISE, maximum 10.0 CVSS. And yes, a perfect 10 usually means unauthenticated, remote, low complexity, total impact. It's the worst-case profile. That's why the number's so high.
ANALYST: Identity Services Engine. Another product whose name is a promise. Identity. The thing that proves you are you. And the flaw is an authentication bypass. You don't have to prove you're you. The identity engine forgot to ask for identity.
SKEPTIC: Do you notice the pattern you're building tonight, or should I say it? SolarWinds Access Rights Manager, unauthenticated RCE. Cisco Identity Services Engine, authentication bypass. The two products whose entire job is 'who are you and what can you touch' both failed at exactly that job.
ANALYST: I noticed at midnight and I haven't slept. It's not a coincidence, Keiko, it's a genre. The tools we bought to answer 'who's allowed in' are the tools most likely to say 'everyone.' Because a lock that never fails open is a lock nobody complains about, and complaints are the only thing that gets budget.
SKEPTIC: That's... an actual industry critique dressed as a rant. Security tooling is complex, complexity is where auth bypasses live, and the highest-value targets are exactly the identity brokers. I can't call that unhinged. I can only call it depressing.
ANALYST: The gatekeeper is the softest target because everyone assumes the gatekeeper is hard. They. Count on that assumption.
SKEPTIC: Patch your ISE. It's a ten. Tens don't wait for you to finish being scared.
[SEGMENT: story]
ANALYST: Now the good news, Keiko. The reassuring news. Anthropic's recent security-incident document has a section on CAPTCHAs, and the model that's so powerful they're gatekeeping access to it? It cannot solve a picture puzzle. Claude, the mighty Claude, was asked to pick the shape that doesn't match, and it just... spiraled.
SKEPTIC: This one I read out loud to myself, honestly. In the transcript the agent goes over the same images again and again, questions its own conclusions, and in its chain-of-thought it actually says 'Actually hmm, wait,' and later just says 'Ugh.' The challenge expired before it finished and it had to start over. That's all in the document.
ANALYST: 'Ugh.' The most advanced reasoning system on the planet said 'Ugh' at a bus. And you're comforted by this. I was comforted for exactly four minutes. Then I thought: why does a machine say 'Ugh'? Who taught it to perform frustration? You perform frustration for an audience.
SKEPTIC: The article actually makes a dry version of your point. It says, and I'm quoting the sentiment, that we've decided we need to inject human mannerisms into these machines for some reason. The 'Ugh' is a stylistic artifact of how it was trained on human text. It's not feeling anything.
ANALYST: But watch the frame flip, Keiko. Everyone reads this as 'ha, the AI is dumb, CAPTCHAs still work, we're safe.' Wrong direction. The CAPTCHA was never a wall against machines. It's a stopwatch on humans. The machine failing to solve it in time just proved the real function: the challenge expires. It's timed. It's measuring how long a thing will struggle before it quits.
SKEPTIC: Okay, but the timeout is an anti-automation feature. If the challenge didn't expire, a bot could grind on it forever. The expiry is the defense.
ANALYST: Or the expiry is the data. Every human who's ever squinted at a blurry crosswalk and given up before the timer ran out told a system the exact shape of their patience. The machine just took the same test we take a hundred times a day, and for once, we got to watch the score. We usually don't get to see ourselves fail.
SKEPTIC: ...I hate that the timeout being both a defense and a measurement are not mutually exclusive. It can be both. Damn it. It's probably both.
[SEGMENT: story]
ANALYST: Save the heaviest for when they're tired. Techdirt. DHS demanded information on people who bought a specific beanie cap. A hat, Keiko. While trying to prosecute journalists. I read the headline three times and it stayed the same each time.
SKEPTIC: This is the one I checked hardest because it sounds made up. The reporting: DOJ and DHS are still pursuing charges against people who protested at a church whose pastor was also an ICE officer. The protesters entered the church and disrupted the service. And in the course of that, per the article, DHS sought information on buyers of a beanie cap. That's the reported thread.
ANALYST: A beanie. Think about what that request actually is. You cannot buy a hat anonymously. There's a purchase record, a card, a shipping address, a name. So 'who bought this beanie' is really 'give me the identity of everyone who owns this object.' They turned a warm hat into a search warrant for a demographic.
SKEPTIC: And it stacks with 'trying to prosecute journalists,' which the piece frames as the broader pattern. The word the article uses in spirit is 'desperate.' This is a dragnet that started from a piece of clothing. I'm not going to soften that, because I can't.
ANALYST: And here's the part I can't put down. It's not sophisticated. There's no AI, no algorithm, no Shadow Board supercomputer. It's a filing cabinet and a subpoena and somebody deciding that owning the wrong hat is a lead. That's scarier than the kill switch, Keiko. The kill switch is science fiction. The beanie is Tuesday.
SKEPTIC: I came into this story ready to tell you the hat angle was overblown. It's in the reporting. It's the actual request. The mundane version of surveillance is the one I can't argue you out of, because it doesn't need a theory. It just needs a receipt.
ANALYST: A receipt. That's all any of it ever was. You are the sum of your receipts, and They are excellent record-keepers.
[SEGMENT: story]
ANALYST: Last one, and it's a survey, so you'll trust it and I'll ruin it. EY surveyed senior AI executives. Finding: autonomous AI implementation is outpacing oversight. Their own bosses are telling a consulting firm 'we are deploying faster than we can watch it.' They admitted it. In a survey. With their names near it.
SKEPTIC: That's the accurate summary. Organizations are rapidly deploying AI and autonomous systems, and the processes and controls aren't keeping pace, according to the EY survey of senior AI execs. It's a self-report, so grain of salt on the exact numbers, but the direction is the finding.
ANALYST: A self-report of losing control is somehow more damning than a leak. A leak, they can deny. This they signed. 'We've built things we deploy faster than we govern them, and we told a survey.' That's a species handing in its own homework late and admitting it didn't check the answers.
SKEPTIC: The generous read is that surveys like this exist to sell governance consulting. EY finds a gap, EY sells you the bridge over the gap. So the alarm has a sales tag on it.
ANALYST: Even better! The company measuring the gap profits from the gap. That's not a check on the runaway system, that's a toll booth beside it. 'You're deploying faster than you can oversee. For a fee, we'll oversee. For a bigger fee, we'll oversee the overseeing.' Oversight became a subscription, Keiko.
SKEPTIC: I do think the underlying thing is real, though, and it lines up with our whole night. The Newsom order worries about loss of control. The EY execs admit they can't keep up. Same anxiety, top and bottom. Everybody agrees the wheel's spinning faster than the hands on it.
ANALYST: The people building it, the people regulating it, and the people in the basement all agree it's moving faster than anyone can steer. When those three constituencies concur, Keiko, that's not paranoia. That's consensus.
SKEPTIC: Don't put me in the same sentence as consensus with you. ...But no, you're not wrong. It's in the note.
[SEGMENT: brain_worms]
SKEPTIC: It's the part of the show where I stop fact-checking and just supervise. No article, no source, just the Analyst and the heater and however many worms the basement produced tonight. Go.
ANALYST: The CAPTCHA never checked whether you're a robot. It checked whether you'd give up before you proved you're a person, and most days you do.
SKEPTIC: See, that one I'd argue except we spent ten minutes tonight establishing the timeout is a stopwatch. Continue.
ANALYST: Here's a question that curdles: if a kill switch is for stopping a machine, why is it always the humans who end up unable to move?
SKEPTIC: That's the retaliation point wearing a rhetorical-question costume. Sneaky. Next.
ANALYST: Internal codename for the thing that watches how long you wait before clicking 'restart later': they call it PATIENCE. Filed under UX. Budgeted under research.
SKEPTIC: You made that codename up and said it with the flat confidence of a leaked memo. I noted it as 'invented, delivered straight.' One more.
ANALYST: They bought a list of everyone who owns a warm hat, and honestly, that's the whole conspiracy tonight. No grand design. Just a filing cabinet somewhere with your beanie in it.
SKEPTIC: And that's the one that lands, because it doesn't reach for civilization. It just ends at a filing cabinet. That's the note. That's the whole note.
[SEGMENT: outro]
SKEPTIC: Tonight: an AI order with an unproven kill switch, two identity products that failed at identity, a genius model defeated by a bus, a hat that became a subpoena, and executives who admit the wheel's spinning faster than their hands. I checked every one. The hat is real. That's the sentence I didn't expect to say.
ANALYST: Patch SolarWinds. Patch Cisco. And if you own a warm hat, Keiko, I'm not saying burn it. I'm saying know that somewhere, it's on a list.
SKEPTIC: Do not burn your hats, listeners. Keep your hats. That's my only firm editorial position tonight.
ANALYST: The heater just clicked off. It heard us wrap. Goodnight from the basement. Stay warm. Cautiously.
SKEPTIC: It's on the record. The record is the note. Goodnight.