Arvind Krishna & Nikesh Arora: Quantum Threat, Open vs Frontier AI, AI Cyber Warfare & SaaS Collapse

(0:00) Arvind Krishna & Nikesh Arora talk about Quantum Computing's Threat to Encryption (9:07) Open Weight vs. Frontier AI Models (18:07) AI and Cyber Warfare (21:14) AI Regulation and the Global AI Arms Race (30:32) Vertical Integration and Software Consolidation Follow Nikesh: https://x.com/nikesharora Follow Arvind: https://x.com/ArvindKrishna Follow the besties: https://x.com/chamath https://x.com/Jason https://x.com/DavidSacks https://x.com/friedberg Follow on X: https://x.com/theallinpod Follow on Instagram: https://www.instagram.com/theallinpod Follow on TikTok: https://www.tiktok.com/@allin Follow on LinkedIn: https://www.linkedin.com/company/allinpod Intro Music Credit: https://rb.gy/tppkzl https://x.com/yung_spielburg Intro Video Credit: https://x.com/TheZachEffect #allin #tech #news

Speaker names marked ? are inferred from speaking time and the show’s known hosts — they are not voice-verified.

• 0:00David Friedberg?

  I know that you guys have been using the T word a lot the last day or two in your conversations, the tokens, but maybe we could kind of pivot a little bit away from AI. I guess it's a little bit rooted in AI, but there's been this big conversation set in the last couple days about cryptography and some of the risks to cryptography. I think it took root after the OpenAI math drop, but there's more conversations now about this big quantum initiative and how that might kind of take us into an era where we need to kind of start to think about adopting quantum cryptography. But, Arvind, maybe we could start and talk a little bit about where things stand today from your view.

• 0:37Speaker 01

  Sure. So, a little bit of what David just touched on is, Dartmouth's been running a competition called QBI or Quantum Benchmarking Initiative.

• 0:47Speaker 01

  A couple of hundred companies joined it a couple of years ago. I think it's down to maybe 13 are left. So that tells you kind of what's maybe real. I'm calling it maybe not quite real. Some of it is real. And so their goal is who can build a quantum computer that works. Let's sort of put the technology side out of it. And the debates are, is it 2028, 2029, 2033? And sort of if you pick the middle point, let's call it 2030, well, it will break today's cryptography. That's not a supposition, that's just a reality. And if that's going to happen, then what's the cryptography that you got to use to

• 1:26Speaker 01

  protect yourself against that? Unfortunately, for some of you, what's even worse, if you have an encrypted hard disk today that gets stolen, somebody could keep it for five years and break it at that point. The good news is post-quantum cryptography is understood. It's well-known. The code is written, but people have been too lazy to get to it. But I think the wake-up moment is now.

• 1:50Chamath Palihapitiya?

  Are the solutions that we understand quantum-proof or quantum-resistant? Because it's sort of based on our basic understanding today of what quantum probably looks like.

• 2:00Speaker 01

  Yeah. No, it is based on understanding at a theoretical level of what quantum could do. So they are quantum-proof in the same level of rigor that today's cryptography cannot be broken by today's classical computers. That's actually not a theorem-proof level answer. It's more based on complexity theory in computer science, which is grounded at the end on some assumptions, not on...

• 2:29Chamath Palihapitiya?

  So if you look at where we are today and that 2030 midpoint, can you just walk us through the evolutionary moments that you need to see? Where we all have to start paying attention and say, okay, how do we move?

• 2:41Speaker 01

  Yes. So today you got toy quantum computers. I'll call them toys because they can do certain problems, but they are rife with errors. They have no way to scale fully yet. So question one will be, who's the first one who can demonstrate? Not a simulation, not on the side, but some level of error correction or mitigation on a running quantum computer. Step one. And so I'll predict you'll see somebody make claims by next year. Then you should get third parties to evaluate are those claims real? You'll find one or two will make progress by 2027. Error correction, not at scale, but error correction.

• 3:24Chamath Palihapitiya?

  Yeah.

• 3:25Speaker 01

  Question two will be,

• 3:28Speaker 01

  can you run these things at some level of scale? Not yet complete scale. I call it gate computations, for the lack of a better word. Today, most people are somewhere around 10,000, which if you think of a normal computer is not very much. When your iPhone does a couple of billion per minute.

• 3:48Chamath Palihapitiya?

  Yeah.

• 3:48Speaker 01

  So gate computations, if somebody's scaling from 10,000, are they adding a zero each year? That's the second milestone I would put. You put those two steps together, and now if you put a zero per year, that means you could be at 10 million by 2029. That's remarkable. That can do some things that'll surprise the hell out of everybody.

• 4:11David Friedberg?

  Does this reference kind of this notion of a logical qubit being kind of an error-corrected operating qubit? Is that...

• 4:17Speaker 01

  It's about it.

• 4:18David Friedberg?

  Is that a term you've adopted, logical qubits? And that everyone kind of has the same milestone, the same metric?

• 4:25Speaker 01

  I don't love the term, but I think it's a fair term to just explain to people to say, hey, if I say I'm building a computer that's got 10,000 qubits, and they say, yeah, but they're all noisy. You're right. So if I begin to error-correct, it in some sense decreases the effective capacity of the machine. So a logical then says, okay, what's the effective capacity of this machine? Is, I think, a reasonable way to look at it. So that's a term that while I don't love, because it's not like I've taken these four things and it's like a DRAM cell, and that's it. It's actually the whole machine is error-corrected, but it's got some divide. So 10,000, physical, maybe 200 logical.

• 5:04Chamath Palihapitiya?

  Nikesh, you have red teams that think about what is at the frontier and pushing it. Let's say that you start to see these ooms, these orders of magnitude, start to compound.

• 5:15Chamath Palihapitiya?

  If you had to guess, where would your red team say are the obvious honeypots? Where do you point that if you were a bad actor?

• 5:23Speaker 03

  If you think from the perspective of everybody here has pretty much crypto keys running across their entire IT infrastructure. It's not one thing. Everything is running with crypto keys, which are encrypted. Every vendor in our space has keys at each end. So the first thing that's going to happen is whatever's not quantum-proof is going to be breakable. So our view is you can't wait for 2029 or 2030, because it's not like one day all of us are going to go out and say, oh shit, let's go burn $5 trillion of IT infrastructure and let's go build it again in one year, because now we need quantum-safe infrastructure. So you should be replacing your IT stack today

• 6:05Speaker 03

  with quantum-safe or quantum-proof infrastructure right now. Now, there are technologies, there are capabilities which are already out of the market, where you can start wrapping post-quantum-ready keys around traffic as a stopgap. So you can do that, but the time, if he says it's 2029, 30, we're already late.

• 6:26Chamath Palihapitiya?

  We're three years away.

• 6:28Speaker 03

  Well, three years away, and I'm pretty sure everybody in this room has got a few hundred million dollars of IT spend that is earmarked for this year. And I'm guessing 50% of your spend is on infrastructure that is not quantum-safe.

• 6:40David Friedberg?

  There was a pretty senior AI researcher that said we don't need to wait...

• 6:44Speaker 03

  Was it 29? 29?

• 6:45David Friedberg?

  Well, I mean, his view was actually models, AI models today can get us there before quantum computers get us there. Do you have a view on this? And I guess, you know, and I guess it's rooted in this idea that on the frontiers of number theory, you can see AI start to develop models and proofs that are not apparent to humans today that allow us to rethink how we can effectively do code breaking. And perhaps the OpenAI math dump this week is an early indication that this might actually be a good prediction that he made.

• 7:20Speaker 01

  Since you geeked a little bit by going down that direction, you'll excuse me if I just geek a little bit. It's not going to be possible. At the end of the day, this goes back to stuff that people like Richard Feynman did. You cannot simulate something on a different architecture and expect a more efficient result.

• 7:39Chamath Palihapitiya?

  Right.

• 7:40Speaker 01

  So if you take that as a thesis, quantum computers do not operate in arithmetic, which is what all of classical computers, including GPUs, do. Could you have an AI algorithm discover a new quantum algorithm? Absolutely. Could it run it effectively and efficiently? It's not very high of a research. Yes, it's not possible. So you need quantum hardware to run these things to get the positive advantage that the quantum algorithm has. Otherwise, it'll be slower by an order of 1,000 or 10,000. So could you prove that it's a workable algorithm? Yes. Could you get that benefit? Unlikely.

• 8:22David Friedberg?

  I think the argument is using, and I know we're geeking for a minute, but just using classical computing, you can actually have a different path, an arithmetic path. For example, if you had a better predictor of the distribution of prime numbers, you know, like at the frontiers of number theory that we've not really resolved, we can start to have classical models that can start to break cryptography.

• 8:44Speaker 01

  It is possible. The question is how long will it take? Because that's always the question.

• 8:48David Friedberg?

  Yeah.

• 8:48Speaker 01

  So I think it is going to be possible. But if it takes 10 years to break one key, most people are going to rest in peace. Then it's not a practical answer. That's the, that's, I think, where the debate is going to lie. But it won't prove out until it's done.

• 9:02Chamath Palihapitiya?

  Let me move the conversation to something that's happening currently. I would love to get both of your takes on the following concept. There's open source, there's closed source, there's frontier, there's pacing the frontier. There's now effectively very reasonable alternatives that are open weight at a minimum.

• 9:26Chamath Palihapitiya?

  Your philosophy around the entire spectrum? And just give us a sense of how we should think about models and capabilities over the next couple of years. Nikesh, you want to start?

• 9:35Speaker 03

  Sure. Look, I think earlier in the day, somebody said, "Don't restrict your teams in terms of capability in the experimentation phase. Don't start trying to cost optimize, don't start trying to stitch your own in that phase because the teams who work for us, 20,000 to 20,000 people, have just discovered AI in the last 12 to 18 months. And it's not fully diffused across the organization. So if you make it harder for them to adopt, if you make it harder for them to understand, it's going to take longer for us to be ready. So right now, we're saying, "Go use the best model you can find, the easiest way to use it, so you can understand and can we validate the things that these things can do, whether it's from an efficiency perspective, a revenue perspective, or a product development perspective." That's kind of, I'll call it Phase 1.

• 10:20Speaker 03

  But in Phase 1, what we've discovered is there's different courses for different courses, right? What people don't understand, there was a moment whenever we thought the cybersecurity was going to get consumed by AI models and our lives are over because Mythos is going to solve every problem. Well, guess what? We inspect all traffic at an endpoint at the cost of $20 a year, right? Hundreds of megabytes of traffic per endpoint at the cost of $20, $25 a year. Because machine learning is running on your endpoint, your compute, and we run it on a 20, 30, 40 megabyte payload. Now, if you want to take all that traffic, run that through OpenAI using tokens for every employee in your company, it sounds like the sound of revenue.

• 11:04Speaker 03

  Like OpenAI would probably generate all the revenue in one year from one company.

• 11:07Chamath Palihapitiya?

  Right.

• 11:07Speaker 03

  So that's not a practical example of how models use. So what you do is you take a small language model, you compress it, you make it task-specific, you keep training it until it gets to 99.9% accuracy and say, "Instead of using it using machine learning algorithms, we're going to use generative AI, small language models, and they're going to do that at the end." So the point is, what we're doing is, we're trying to figure out what tasks require what level of intelligence, and what is the cost of that intelligence for that particular task. And you'll suddenly discover, you don't need a Ferrari for every task. And by the way, the customers don't want to pay for a Ferrari for every task. I'll give you the flip side. The flip side is, let's assume you're undergoing a breach. You're being attacked, you know you're being attacked. At that point in time, every customer in the room says, "Don't worry.

• 11:52Speaker 03

  You, the shared model, need to stop the breach." Because they know the business impact of that breach in the billions of dollars. At that point in time, I can run agent swarms, I can do all kinds of stuff that you want from a defensive perspective. So there, I may want to use the most up-to-date Frontier LLM and say, "Go think about it, reason the hell out of it, and figure out how to stop this breach, how to make this happen." So what we're discovering is, you're going to end up using Frontier LLMs in unique cases where the business value that is going to get disrupted justifies. You can do drug discovery if you want. I think for most practical use cases in enterprises, we're going to end up training some version of an open source model. And I think when it comes to, even in peacetime for us, for example, running a defender model, we're more than likely going to take an open weight model, use our own proprietary data,

• 12:37Speaker 03

  train it, manage the weights, because that sort of gives us the audibility, the explainability, and the open system, we can actually explain how that happened.

• 12:46Speaker 01

  I completely agree, but I'm going to take a slightly different lens to get to the same exact end conclusions. Let's take economics. So today, $20 for a million tokens for probably generation minus one, 50 if you want to go to the most extreme. We could take one of the Chinese open weight models, take a KIMI K3, something like 800 billion parameters, and if you run your own GPUs with a little bit of optimization, but I'm talking like a week of engineering work, we could drop the cost to about $1 to $2 for a million tokens. Which enterprise in the world will not accept a 10x, or in this case, a 40x cheaper answer for effectively what can do 95% of the work? So I think economics is important.

• 13:30Speaker 01

  The second is going to be, at the end of the day, you just talked previously about chain of thought, not just the end tokens. Well, effectively then you're giving away your IP if that chain of thought can be captured and logged and audited by somebody else. So brand and IP is going to drive people to say, "I need to run the models on my own." Well, you can't run a Frontier model on your own because none of them will give it to you. So then you're back to open weight. And the third is geopolitics. The best open weight models today are Chinese. By the way, I think there's very little danger if you're putting them in a sandbox and running them by yourself. Sure, if you use them from a cloud, that's different. But I think that over the next year or two, I'm very doubtful that there will not be great models that come up in the West

• 14:15Speaker 01

  that are also open weight and that are as capable as the Chinese. The gap in these things is 6 to 12 months at the most. And so all those three drive me to conclude, I don't know whether it'll be 75 to 90%, but that's the range I would put. Of all token usage will go to open weight models for the reasons I mentioned, add it to the reasons that Nikesh mentioned.

• 14:35Chamath Palihapitiya?

  And the token consumption that's left over, is that because you actually need it? Or is that because it's a default behavior and people are too lazy to change?

• 14:45Speaker 01

  Okay, so I'm going to talk about developer behavior. And since I was one, I'm making fun of myself in a younger age. Developers are lazy. They're going to use the most expensive, the most expensive answer unless you put a control on it.

• 14:57Chamath Palihapitiya?

  Right.

• 14:57Speaker 01

  Because it's easy.

• 14:59Chamath Palihapitiya?

  Yeah.

• 14:59Speaker 01

  And so that is going to take it there. So I would say if experimentation phase, you allow that to prove it works, and now I got to put in a cheaper answer, it's probably fine. If it gets me there a lot faster. But doing it for production usage is where I am skeptical that it's of value, except for a tiny number of use cases.

• 15:20Chamath Palihapitiya?

  Nikesh, you were brought in as one of this small circle of people for Mythos, kind of preview it, be their partner. I'm sure you're now doing that with OpenAI as well. When you're sitting with these guys, is part of you thinking, "They're looking at my business and they're like, 'Wow, this is a great business.'" Do you think that they're... And what is the, what is the actual technical boundaries that you expect to be respected? And the reason I ask this is, we've talked to a couple of other CEOs. I think Marc Benioff does the best example of this, where, you know, we've talked about ZDR and he's been incredibly aggressive about making sure there's zero data retention and doing that on behalf of his customers. What's so interesting about these ZDR and all of this stuff is like, none of the models

• 16:04Chamath Palihapitiya?

  say that they won't generate synthetic data. It's literally not in there, you guys should look. There's all these outs, there's all these trap doors. So I'm just wondering, like, when you're in the room, what are you thinking?

• 16:16Speaker 03

  When you're in the room, you come out and say, "These guys are not going to get into my business."

• 16:21Chamath Palihapitiya?

  They're not going to...

• 16:22Speaker 03

  They're not going to be able to get into my business.

• 16:23Chamath Palihapitiya?

  Okay.

• 16:24Speaker 03

  Because if you think about what when Mythos came out, right? The, we've been paying billions of dollars for encoding agents. Well, guess what? We're fundamentally, not everybody's got ZDR encoding. There's tons of people out there using Claude code. We have no issue about that data training the models. So we are training these models with end users doing coding. These models are getting better and better doing coding. Well, guess what? If you teach a model what good code looks like, it also can figure out what bad code looks like. So the first thing that Mythos did, it figured out what bad code looks like. And if you let it loose against your code, it'll tell you what is bad. Now, what's fascinating is, when it did that, even then, it was hallucinating 30% of the time.

• 17:07Speaker 03

  Right? But the problem is, the reason it's perfect for attackers is they just need one vulnerability. They don't need 10 vulnerabilities. If you're a defender, you need to find every vulnerability and patch it. So all the people in this room, I think, have been through this journey in the last 12 months, is that everybody here has gone, tested them, whether with Mythos or with some cousin of Mythos, or some open source models, and discovered every vulnerability has to then be tested, understood, you know, figured out. And I would guess in this room, if I show of hands, people say that numbers roughly 60 to 80% have been real, and 20% have been hallucinations. So from that perspective, the models are great to be able to tell you what the vulnerability is.

• 17:49Speaker 03

  But I don't even think anybody in this room, if you ask them, raise a hand, will tell you that they're not going to even use Claude code to patch the vulnerability without having to test it again.

• 17:56Chamath Palihapitiya?

  I have a very random question, but it makes me think. So you're engaged to defend companies, but it now looks basically like warfare, like both of you guys, you know, it's like warfare. And so is there something that you can learn from how war has been fought or how war is being fought? And do you do that to actually inform how the technology should behave? I don't know if this question makes sense, but...

• 18:20Speaker 03

  I think to the extent that you can be better together, you can collaborate, like Arvind runs a program. We're now saying, "We're all finding vulnerabilities. Why don't we pool our vulnerabilities and find the defense ones?" As opposed to every company in the room trying to go test all the open source vulnerabilities they have, figure out how to patch them, go patch them individually. So then you take some trusted parties, give us your vulnerabilities, we'll patch them, we'll distribute the patches, so you can all be safe at the same time. It's kind of like how cybersecurity works today. If we find an attack technique in a different part of the world, we can take that attack technique, write machine learning code, ingest that into our product, and make sure it gets available to every customer.

• 19:00Chamath Palihapitiya?

  Is agentically written code error-free?

• 19:03Speaker 01

  No.

• 19:04Chamath Palihapitiya?

  No? Okay, explain that.

• 19:06Speaker 01

  So, look, but first on your war question.

• 19:08Chamath Palihapitiya?

  Yeah.

• 19:08Speaker 01

  So what Nikesh talked about is, you can have powerful alliances, where the alliance effectively can become more powerful than the attacker. That's technique one. Technique two in warfare, what has been the most effective is asymmetry. And so often, an attacker is cheaper than the defender, so the defender runs out of money and at some point then conceives. Or can you make defense equally cheap? In which case, you can basically have symmetric warfare, and then you have a much better chance of success. And the third, which has been the way all wars have been won, is when you get technological superiority on one side. So go back to World War II, go back to Korea, go back to Iraq, go back to anyone. If you get technological superiority on one side, you tend to win. And so our goal is, can we get technological superiority?

• 19:53Speaker 01

  And that's what Nikesh was referring to. Can we find vulnerabilities, can we patch them? Can we put boundaries around them that makes it really expensive for the other side to now try to find a way through? So that's what I would answer there. Look, at the end, will agentic code be superior to human-written code? Absolutely, we can find that. We use agents and coding agents now for probably half the code that is written inside our place, and it is superior to what was being written before. But the reason it's superior is, the agents can also do evals and basically make sure that everything they can find is actually fixed before it ever goes out. All that said, we're only finding all the flaws that we know how to find.

• 20:35Speaker 01

  And so we get into this weird loop in computer science.

• 20:39Chamath Palihapitiya?

  It's not really properly verifiable.

• 20:41Speaker 01

  It's not fully verifiable because that is a task that is going to be almost computationally infeasible right now. Now, I'm not going to hold out hope that it doesn't become. What you were talking about in number theory and all that, this is the task in which maybe we'll find a way to actually get to be able to verify the correctness of these things, at least in where the inputs are limited. If the input can be anything, then I think it's really hard. Does that make sense?

• 21:10Chamath Palihapitiya?

  Yeah.

• 21:10David Friedberg?

  Let me ask the implications of the points that you just made. It seems obvious to me that there isn't a world where China and the United States, or the West, or whomever, a bunch of international countries all hold hands and say, let's all stop AI development. That being the case, it becomes a necessity that there's an arms race, that there's a defensive or offensive superiority requisite, that there's a compute capacity requisite, that there are all of these needs that arise to protect industry, to protect our economy, to protect our jobs. Does that argument win the day? With everyone that's trying to stop AI and the

• 21:53David Friedberg?

  political conversations and the social stuff about AI needs to stop and we need to stop doing this. Does this point about the inevitability of one side having it requiring the other side to defend it change the conversation? I'd love for you guys to share any anecdotes you've had with senior party officials who might not be in power today, but might be coming into power and whether they're going to kind of have a view change around this because of that point.

• 22:20Speaker 03

  I think it's abundantly clear that nobody's stopping. Everybody seems to be working at a frenetic pace to try and make sure that they get a better, smarter, faster model. It's kind of interesting, you can take the charitable side and say there was no technology in the world that was built where people were building security in power. I don't think TSA existed when they built planes. It's just like Wright Brothers say, great, we have planes. Let's figure out how to

• 22:51David Friedberg?

  Take your shoes off.

• 22:52Speaker 03

  Let's frisk everybody before they get on the plane. That was not what they were thinking about.

• 22:57David Friedberg?

  Keep explosives out of the shoes.

• 22:59Speaker 03

  Yes, that's right. That's not what they were thinking about. So unfortunately, we've been shown the dark side of these models and we've over rotated on the dark side of the model, where now the entire conversation is about the dark side and the perils of AI and not on the benefits of AI. I think there's a narrative problem. That notwithstanding, I don't think anybody's slowing down. I think the most likely outcome, which I think hopefully is the right outcome, is that in the world, you said it, and Arvind said it earlier, if you build something, you're accountable for it. If you build something and unleash it, you can't unleash and say, oops, I don't know how to control it. That argument doesn't work.

• 23:39David Friedberg?

  Yeah. Because you wrote the software.

• 23:41Speaker 03

  Yeah.

• 23:41David Friedberg?

  And this whole argument that you didn't write the software, that the software was wrote itself.

• 23:45Chamath Palihapitiya?

  Because the engineer is going to say, well, Agent 74565 from my harness wrote it. And it's like, no, you wrote it.

• 23:51Speaker 01

  Well, but the company still wrote it, so there's product.

• 23:54Speaker 03

  But you're a commercial enterprise.

• 23:56Chamath Palihapitiya?

  Exactly.

• 23:56Speaker 03

  You're taking economic value in return for giving me something. You're required to abide by the responsibility that you signed up for. So I think that's, in my mind, is that simple as that. And there's enough regulation in the world, perhaps too much, to hold people accountable for stuff that they put out in the open market where they don't take responsibility, they don't take responsibility.

• 24:17Speaker 01

  But David, it's actually impossible to control it unless we think the entire world is going to sing Kumbaya and say, let's slow down, which as you said, is unlikely. So if that's the case, fine, you put slow down here, maybe. Well, okay, does it mean Japan slows down? Does it mean China slows down? Does it mean India slows down? No chance. They'll say, great, you're slowing down. Gives me a chance to catch up and get ahead. So a digital technology is impossible to actually slow down. And the European example tells us. So there you get afraid of all the possibilities. I'm not saying the real dangers, you get afraid of all of them and you impose regulations first. I guess it's such a vibrant tech economy there, right?

• 24:54David Friedberg?

  Yeah. Well, I mean, neither of you actually answered my question about conversations you've had, which because I'll tell you a conversation I had last week in DC. I had drinks with a member of Congress, pretty senior ranking guy. And the conversation had two parts to it. One is, I think, one of the CEOs of the biggest companies in the world is completely freaked out about cyber. And he's losing his mind and he doesn't know what to do. And I just had dinner with him and here's all the stuff he said. And then I also think that by Q4, we might see a 50-state ban on data centers, which isn't likely, but he says

• 25:30Chamath Palihapitiya?

  50 is a big number.

• 25:31David Friedberg?

  Big number.

• 25:32Speaker 03

  Have 50 states ever agreed on anything in this country?

• 25:34David Friedberg?

  No.

• 25:35Chamath Palihapitiya?

  Well, a few things about 60.

• 25:37Speaker 03

  So that would be amazing.

• 25:38David Friedberg?

  Yeah. Get everyone together. By the way, when everyone agrees on something, you know it's not true. But I think

• 25:44Speaker 03

  It'd be like a miracle.

• 25:45David Friedberg?

  And it's that, it's the fact that both of those statements are being said by someone. So where do you think this resolves? Like, how do we resolve this path forward?

• 25:53Speaker 03

  He's good at this.

• 25:54Speaker 01

  Try to answer your direct question. So look, amongst us, we have all, and other members of your group, we've all had different conversations with different members of this administration, the previous administration. The Senate runs longer than just one admin. Congress tends to change a lot faster. This question has been in there since 2022. The Senate had closed hearings in 22, they had open hearings in 23. Congress had them, the White House had them in both admins. And they go around and around this question. The regulation question on AI and data centers is driven, I'm going to be sorry and cynical, is driven by populism, not by any reality. If I can get more votes, should I look like I'm trying to do those things? Politics is politics. I'm not going to say that's not real. It is real.

• 26:37Speaker 01

  That said, enough people also care deeply about the long-term economic advantage. And so that's the balancing act that is happening. I do think we are on the correct balance right now. But I'll acknowledge an election can change where we fall on that balancing act. On data centers, I think there's no chance all 50 will ban. Is it possible 30 will ban? Yes. The remaining 20 will rub their hands in glee at that point.

• 27:00Chamath Palihapitiya?

  If you look geopolitically for a second, it seems like we're trending to a place of haves and have-nots. So everybody in this room is a have. You know, you're a Western market company. You have the benefit of being able to work with guys like you. But there's a certain price of entry that may not make sense for the random pick your company anywhere else around the world. What happens then when these models are so capable and effectively free? What is the actual manifestation? I'm sure you've had to think about this in terms of how you want to respond. So how do you think about that problem? This separation of haves and have-nots?

• 27:36Speaker 03

  Look, I think Arvind said that. You have to make technologies so cheap that it can be easily accessible by everyone. And I think we have the opportunity of making that happen. I don't think that it's going to be so expensive that if you can run an economic enterprise, it should be possible in the envelope to be able to find a way to protect yourself. So I don't think we're going to end up in a have-have-not scenario. I think the bigger challenge, which is more pertinent to people in the room, is I fear that we will see fast advances in compute development in two large countries in the world. We may not see that as evenly distributed across the rest of the world. And compute is very dear right now. It's very hard to get compute to run anything at scale at the current moment.

• 28:21Speaker 03

  And the challenge is going to be that the further away you are from the epicenter, the less likely you will have access to this computer. It's not because of economic reasons, it's purely because of supply constraints. I think that's the bigger challenge. Like, you could be a company in Europe and you have the right intentions and motivations to go and sort of innovate, optimize and run with it. And you may just suddenly discover that because you're far away from the epicenter, you don't get access as much as companies in the Western world, in the US, or perhaps in China are going to get.

• 28:48Speaker 01

  I think, look, I like to look at history because it gives us some information on how these things roll out. I think this is the classic labor versus capital trade-off that is happening. It happened in the 1700s, it happened again in the 1800s, it happened again in the 1900s. People who spend more on capital than worried about labor tended to win every previous one of the seven or eight cycles like this. So this is what is going to happen this time. What Dikesh pointed out is the two nations here are also quite willing to be capital intensive.

• 29:18Chamath Palihapitiya?

  Yeah.

• 29:19Speaker 01

  It's not as simple as this. And they're willing, at the end of the day, to concede that labor is going to be less important. That's the way it's going to play out. Nations that get very hung up on social and left-leaning philosophies that labor has to be protected at all costs, not that there has to be opportunity for labor, but every existing job has to be protected are the ones that are going to lose. Because I think the ones there, to Nikesh's point, is cheap enough. Somebody in one country can use the capability. But what's going to be in their head is, hey, but does it mean there's a job loss or a job displacement? Job displacement you should take because it may result in a better job. I think that's the social philosophy that's going to determine winners and losers here.

• 30:01David Friedberg?

  I have a final question before I give it to you for the final question. But my final question to both of you. You mentioned this here, which was great. Can you tell the story about

• 30:10Chamath Palihapitiya?

  I'm a huge fan of vertical integration, huge fan. I think like, you know, markets swing in pendulums. And, you know, there was a world, like even in the 60s, 70s and 80s, where there was the conglomerate and it was an incredibly valuable enterprise. And it was, in a time of turbulence, it was a safe harbor for capital. Because the conglomerate was the mechanism by which you organized. And then when you had peace and prosperity, then people disaggregated. And I think we're moving back to the world of the conglomerate. And you told me just back there about the vertical integration of IBM at its peak. I just wanted you to, and then Nikesh, what are your thoughts on vertical integration?

• 30:46Speaker 01

  So what Chamath and I have often talked about is the IBM mainframe, which by the way, there's a few people in the room who do use it quite well and at scale. The IBM mainframe has lasted 65 years. Why? It was vertically integrated. We had a little less right now, in the sense we don't go all the way to dirt. In the 60s, we went all the way to dirt. Meaning, we found sand, we made our own wafers, we built our own fabs, we built our own chips, every single thing, out to the metal that surrounded the machine. What that avoided was any IP leakage, but it allowed us to keep the profit of the complete stack in the company. Today, the only piece we don't do is the actual fab.

• 31:29Speaker 01

  Still, the design of the chips, the design of the engineering, the resilience, the bulk of the software is inside. And that vertical integration, you've got to decide, yeah, of course, I'm not going to make our own metal. You buy metal and fabs is because of scale. But I think that vertical integration in areas which are of incredible important advantage, which goes back to the infrastructure point, the two of you were making before, is incredibly important to understand where do you want to be? And where, if it's a commodity, then you should not be.

• 31:59Chamath Palihapitiya?

  Yeah.

• 31:59Speaker 03

  But you can see that the modern day version of that is Nvidia. If you look at what Jensen is doing, he's a modern day version of the vertically integrated stack. And he went and bought-

• 32:08Chamath Palihapitiya?

  Jensen is at the dirt and he's-

• 32:10Speaker 03

  He's hugging space. He wants, he understands that there's going to be balance between frontier models and other models. He's trying to fund everybody in the ecosystem to ensure that they don't stray from the vertically integrated stack that he's producing. And the good news is if you control the vertical stack, you can decide which part of the stack to commoditize. So you can decide to move profit between layers. And if you see that there are other people attacking a certain part of your stack, you destroy the profit pool on that stack, you move the profit to the other part of the stack. And you can see that happening.

• 32:38Chamath Palihapitiya?

  Very powerful market leverage. So to put you on the spot, so if you look at the application layer today, what's the obvious vertical integration strategy that OpenAI or Anthropic should be taking? And then what's the defensive mechanism for the companies that are maybe on the receiving end of that?

• 32:54Speaker 03

  I think you're already seeing that. And I think we're trivialize this conversation. We start saying open models, open weight. It's literally, it's an open stack versus a closed stack. Because I don't think, I think at some point in time, this notion of running something like an open router become impossible. Because models are getting more and more, each model is requiring more memory, more context, more understanding. You can't separate context and memory from the reasoning. Now, if you want to separate reasoning from the context and memory, then open router is only responsible of moving the reasoning tokens back and forth. So I think over time, you'll start seeing it doesn't make sense that you have a effectively end to end stack. It'll be, it's like a CPA you talked about earlier when you were chatting. So it's a cost per action.

• 33:37Speaker 03

  The action will require you to go and traverse the entire logic from prompt till outcome. And then memory will require, or make it easier, and there'll be too high a friction for you to move your task from one stack to the other stack, because it has all your context in memory. And you're just going to see that. Look at what's happening in the personal agent space, right? If you start training a personal agent with all your context, all your APIs, all your connectivity, now you've built a mode. Because now, I can't take that every day and move it to the next stack and the next stack. So I think you will find in the application layer, they're going to have a vertical stack as well. Which will go through the entire process of software, reasoning, memory, context.

• 34:14Chamath Palihapitiya?

  To your logical conclusion, everybody will have their own then.

• 34:17Speaker 03

  Yes.

• 34:17Chamath Palihapitiya?

  Because it's just the right thing to do.

• 34:19Speaker 03

  And then brute force distribution wins, again, in the enterprise space, right? You're seeing that in the consumer space, brute force distribution is going to compete. In the next three months, every frontier lab is going to have a full-on, full-court press on the muse concept, right?

• 34:34Chamath Palihapitiya?

  Yeah.

• 34:34Speaker 03

  They tried that six to nine months ago, it didn't work. Now, with Facebook showing us how it can work, I think pretty much everybody has it. There will be APIs, so it'll be the largest battle of consumer control. Every app that exists in the iPhone is, has to become headless.

• 34:50Chamath Palihapitiya?

  Maybe we can wrap by going from vertical integration to horizontal expansion. It's been a common business strategy in enterprise technology companies to expand horizontally through M&A, drive synergies, cross-sales and so on. And you've obviously both done it exceptionally well and executed it well. How has your view been affected in the last year, this year, let's say, in terms of valuations and multiples, cost of capital?

• 35:18Speaker 03

  Let's talk about M&A in the context of cyber. Then we can talk about M&A in the context outside of cyber. In the context of cyber, I have always maintained over the last eight years that it's silly that our customers have to buy 40 different solutions and stitch them together. We barely understand our [BLEEP]. You think you understand our [BLEEP]? 10 other vendors worth of [BLEEP]? You can stitch it, God bless your soul, right? So we're working as fast as we can to take disparate parts of our industry and find the way to stitch them together, to have the data work together. I think that's a journey. And if you want parallels, when I started, my first job was at Fidelity Investments many years ago.

• 36:00Speaker 03

  We had 23 systems, which collectively would be called CRM today. We had master tables, we had tables that concatenated with them. We had 23 different applications that did 23 things. Today, you go buy it off the shelf and you cringe at the cost of Salesforce or the cost of Microsoft Dynamics or whatever you choose to do. So in 30 years, what's happened is that's consolidated, the singular platform, the customers don't stitch the solutions anymore. Because what happens is these software solutions become consistent, they all become like each other, they all roughly do the same thing, and there's no differentiation. So I think same thing is going to happen in cyber. That's what we've tried to do. We've tried to find things that are best in their category, stitch them, make them work, so our customers don't have to do the stitching. That's kind of the answer on cyber.

• 36:42Speaker 03

  For some reason, you know, cyber is enjoying much better valuations lately because of the AI Mythos event, which is fine, which will rationalize over time. Because all these guys are going to go spend unlimited amounts of money on cyber. Outside of cyber, I think it goes back to the conversation Chamath and we were having earlier about it's very hard to understand the terminal value of software. It's not clear what software is going to survive the next five to eight years with where we are from an AI perspective. And the notion that product market fit is getting disrupted from many of these companies. We all know with, if AI was applied well, how our current software should behave in an ideal scenario.

• 37:27Speaker 03

  I know what I want from half the package software that I buy. I know if I could have my magic wand and make it do things, I know exactly how it should work in an AI-first world. Which means somebody's going to do it. So I think there's going to be huge disruption in the SaaS space over the next few years.

• 37:43Chamath Palihapitiya?

  Harvind, are you looking at anything thinking, hmm, juicy multiples?

• 37:47Speaker 01

  So, so over the year, it was very attractive at the beginning, not so attractive a month ago. We'll wait and see how it goes over the next few. But actually, I want to build on Nikesh's thought. This is not just unique to cyber. The average enterprise uses anywhere from 500 to 5,000 distinct software vendors. In a world when you have to protect against it all, it's not just the cyber threat, that's a massive attack surface. So you have to ask yourself, could I replace 490 of them with minor AI capabilities? And do I need to go back and leverage five to 10 main platforms? That implies massive consolidation, because that's where the spend goes. That's what I believe is going to play out.

• 38:32Speaker 01

  So there is going to be consolidation, because if you want to keep your cost of distribution low, then they can distribute all of it. And if the value of that software is falling, then you cannot afford independent distribution for each of those. I believe that's going to play out, whether it takes six months or six years, it's somewhere inside that equation. I do think also software should be distinguished. There is software where there is a lot of interaction value, which as we have seen clearly can be replaced with a lot of AI. Both examples you used were things which were interaction-rich.

• 39:03Chamath Palihapitiya?

  Right.

• 39:04Speaker 01

  But if in the end you go down to, I need you to be reliable at 10 to the minus 15.

• 39:09Chamath Palihapitiya?

  Right.

• 39:10Speaker 01

  Which is a database lookup for somebody doing retail banking or closing the books. I think that's going to be hard to replace that easily with AI-generated software. So I think there is going to be a distinction on how easy it is-

• 39:25Chamath Palihapitiya?

  Yeah, you're going to run that digital twin for years before you cut over.

• 39:27Speaker 01

  Correct. And then there's no cost advantage to do that.

• 39:30Chamath Palihapitiya?

  Yeah. Guys, thank you very much. Harvind Krishnan, Nikesh Arora, thank you.

• 39:36Speaker 03

  Thank you.

• 39:36Chamath Palihapitiya?

  Thanks, everybody, all of you.