cover of episode Kamala Harris’s Bratty Coconut Memescape + What Does $1,000 a Month Do? + The Empire CrowdStrikes Back

Kamala Harris’s Bratty Coconut Memescape + What Does $1,000 a Month Do? + The Empire CrowdStrikes Back

2024/7/26
logo of podcast Hard Fork

Hard Fork

AI Deep Dive AI Chapters Transcript
People
E
Elizabeth Rhodes
K
Kate Conger
主持人
专注于电动车和能源领域的播客主持人和内容创作者。
Topics
主持人:对卡玛拉·哈里斯竞选活动的网络反应,以及她对科技行业的潜在影响进行了讨论。分析了几个与卡玛拉·哈里斯相关的网络流行梗,例如“椰子树”、“坏女孩”和“能被过去解脱的东西”,并探讨了这些梗图如何影响公众对她的看法以及民主党人的热情。还讨论了卡玛拉·哈里斯对科技行业的观点,以及她当选总统对科技行业的影响,包括加密货币、反垄断等问题。 Elizabeth Rhodes:介绍了OpenResearch进行的一项关于无条件现金补贴(UBI)的综合研究。详细介绍了研究方法、参与者群体、资金发放方式以及数据收集过程。讨论了研究结果,包括对参与者精神健康、工作时间、创业意愿等方面的影响。分析了研究结果的局限性,并探讨了UBI的未来发展方向。 Kate Conger:介绍了2023年7月19日发生的CrowdStrike软件更新导致的全球科技故障事件。解释了CrowdStrike公司及其在网络安全领域的声誉,以及Falcon软件的工作原理。分析了该事件的原因、影响以及微软的回应。探讨了预防此类事件再次发生的措施,包括改进软件测试流程和重新评估软件供应商对电脑的访问权限。

Deep Dive

Chapters

Shownotes Transcript

Translations:
中文

Support for this podcast comes from Box, the intelligent content cloud. Today, 90% of data is unstructured, which means it's hard to find and manage. We're talking about product designs, customer contracts, financial reports, critical data filled with untapped insights that's disconnected from important business processes. We help make that data useful.

Box is the AI-powered content platform that lets you structure your unstructured data so you can harness the full value of your content, automate everyday processes, and keep your business secure. Visit box.com slash smarter content to learn more.

Coconut trees actually make me quite nervous. Why? Because you think you're going to get bonked on the head? It's the only tree where something can fall out of it that kills you. Kevin, I got news for you. There's all kinds of things with trees that can fall out and kill you. Like what? Snakes, bears. Snakes, bears. Pterodactyls. Branches. Well, another thing that confuses me about the coconut tree meme is that falling out of a coconut tree implies that you can climb

climb up a coconut tree and coconut trees I would say are among the hardest trees to climb because there are no intermediate branches how are you you just shimmy up the tree yes you have to shimmy have you ever watched Survivor people are always shimmying up those trees yeah shimmying is a major part of the show you gotta shimmy to win could I shimmy up a coconut tree could you I would love to see you try if there's ever an event where you shimmy up a coconut tree I'm buying a front row ticket

You might say CrowdStruck. Yeah.

Well, Casey, it's time to get brat pilled and fall out of a coconut tree. Heck yes, it is. Because today on the show, we are talking about Kamala Harris and what her candidacy means for tech and specifically for the memes on the Internet where people are having a lot of fun with her.

Yeah, this feels like a moment where the internet was truly just reset and we are like starting from scratch and everything that was old feels new again. Yes, and we should also note for our listeners who are not watching us on YouTube that your t-shirt says, you think you just fell out of a coconut tree?

And then on the bottom, it says you exist in the context of all in which you live and what came before you. Where did you get that? And how are the merch makers so fast at turnaround these days? Would you believe it when I said that I've had this shirt since February? Really? Yes, because the thing about gay people is that we're very fast to these memes, Kevin. So in May of 2023, Kamala Harris gives this speech where she gives her now iconic line. You think you just fell out of a coconut tree? And it's so good. I want to play it for you.

My mother used to, she would give us a hard time sometimes and she would say to us, I don't know what's wrong with you young people. You think you just fell out of a coconut tree? You exist in the context of all in which you live and what came before you.

And Republican opposition researchers see this and they think, aha, we have a way of damaging the vice president. And so they put this on social media. And the most beautiful thing happens, which is that the gays see it. We just fall in love. We think we don't know what's happening, but it sort of reminds us of when you're hanging out with your aunt and she's had a little too much wine and she starts giggling and saying silly phrases. Yes, it had goofy aunt.

energy. Yeah, goofy ant energy. And so in February, my friend Alex has become obsessed with this quote and will not stop saying it. And he took me and some friends out to dinner and he presented all of us with our own coconut tree shirts. So since February, me and my friends have been walking around on our coconut tree shirts. Wow, so this is not official campaign merch. This is like...

Somebody had this printed. No, this was just, at the time, it was like a sort of like a joke about Kamala Harris. You know, like this was not really seen as like a political shirt. It was a joke meme t-shirt that my friend got me that was crazily relevant to this week's news. So that's why I'm wearing it here today. Well, it looks great on you. Thank you. So I've been dying to talk to you about this all week because there's been like a real...

meme renaissance on the left after the announcement last weekend that Joe Biden was not going to be the nominee, that he was going to instead endorse Kamala Harris for president. And there's so much to chew on and grapple with here. But I want to just start by maybe doing a little bit of like a meme glossary for people who are not

as terminally online as you and I are. - Yeah. - And I wanted to ask you to just quickly try to explain some of the leading Kamala Harris memes. - I'd be happy to. - The first one that you just mentioned is the coconut tree meme, we won't go back over that. The second one is brat. Kamala is brat.

Yeah. What does that mean? So there is a popular music artist named Charlie XCX who has been honestly fairly underground up until recently, but she put out an album a couple of months ago called Brat, and

And it has been sort of the talk of Gen Z and the gays, I would say, all summer. It has already produced a number of other viral moments. For example, Charlie was sort of feuding with the artist Lorde at one time, and then Lorde did a remix with her, and they sort of squashed the beef on a remix, which no one could remember that happening. So there had already been all these moments that were leading people to say, we're having brat summer. And...

in this sort of stew of Gen Z, gays, TikTok, coconut trees, along comes Brat, and it just kind of all came together, Kevin. Like, what does it mean to describe someone as Brat, and would you describe me as Brat? I would not describe you as Brat. I would say if you're...

a suburban dad, you're kind of outside the contours of what is typically considered brat. What CharlieXCX has said about brat is like, you're a fun girl, you like to party, right? You like to have a good time. And so when Charlie tweeted Kamala is brat,

She was saying that, but she was also basically saying Kamala is one of ours. And essentially, that was like the Charlie endorsement. I see. I see. Okay. And I also saw that the Kamala Harris sort of campaign, or at least the online part of the campaign, has sort of been playing off this. They changed their social media accounts.

sort of header picture to be in the same kind of like font and color as the brat album. So they're having some fun with this. Yeah. Let's just say like, this is such a surreal moment for Charlie XCS. Cause the thing is, you know, Charlie has about 22 million listeners a month on Spotify. That's,

like a good number, but someone like an Ariana Grande has like more than three times that, right? So like Charlie is still a sort of up and comer, even though she's been around for more than a decade. And for her aesthetic and like her album artwork to be like co-opted by the presumptive Democratic nominee for president is just like an extraordinary pop culture moment. Yeah. Yeah. Okay. So we have Coconut Tree. We have Brat. We also have this meme of

the phrase, what can be unburdened by what has been. Do you understand this one? Yeah. So this is essentially one of Kamala's catchphrases, you know, and it's just a way of saying like the future can be better than the past. And like, we know a lot of horrible things happen in this country, but the future doesn't have to be burdened by that. But it's also just such a fun phrase and you can kind of sneak it at anything. It sort of sounds like something you would see like at a

like a spiritual bookstore, like on some sort of a tapestry. Yeah. If you're at a yoga retreat in Sedona, someone is saying that to you. Exactly. It's very like crystals coded. Okay. One more Kamala meme that I want to get your take on is something that

I honestly do not understand, which is the connection between Venn diagrams, Kamala Harris and the gay community. I want to read you a line from an article that ran in TechCrunch where they were sort of interviewing these like viral content creators about Kamala Harris and

And I'll just read the quote. Because of her Venn diagrams, quote, Kamala goes viral on gay Twitter every couple of months. She has turned into this like pseudo gay icon. So help me understand why are Venn diagrams and Kamala Harris and the gay community related? So Kamala Harris gave this interview once where she just seemingly out of nowhere just said that she loves Venn diagrams. You know, there is a sort of clarifying power of a good Venn diagram.

And, you know, as with everything else that she's done, the gays are noticing this. And it is just, it's a little weird. You know, the gay community in John, we just, we love powerful women. We love messy women. I'm not saying she's messy, but like, there's just a lot of like female archetypes. Do you love Venn diagrams? Is the gay community supportive of Venn diagrams? I feel fine about Venn diagrams. Do you know that Venn diagrams were banned in a country once? Really? Yeah, I got to look this up. Wow. Wow.

During Argentina's extremely repressive military dictatorship of 1976 to 1983, Venn diagrams were banned from being taught in primary schools, Kevin. Wow. Because the practice of comparing and contrasting could prompt citizens to find commonalities among themselves and encourage collective organization. So I

I mean, first of all, that's crazy that Argentina did that. That would not be high on my list of things to do if I had a military junta that came to power. Well, and let's just say that that junta did not survive. Okay? This was not one of the better organized juntas we've ever seen. But so a Venn diagram can be a powerful thing is the main message that I want to give you. And Kamala loved them. But look, why do the gays love this? I would just sort of put this in the basket of...

kind of kooky things that Kamala Harris has said that can always be trotted out and made fresh again. And we always have a reason to make a fresh Venn diagram in this country. Totally. Yeah. Okay. So that is the sort of abridged meme glossary of the Kamala Harris universe. What did you make of sort of the way that the internet reacted to the announcement over the weekend? You know, it was a really interesting moment because I think until it happened, I did not realize how much

pent up enthusiasm that Democrats had that they were just sort of looking for the right candidate to give to, right? I think a lot of Democrats were thinking, look, I will vote for Joe Biden if it comes to that, but it's very hard for me to get excited about him because people had a sense that he was not electable. And so there was a sense that they were just sort of marching toward defeat.

Kamala came along, and thanks to the Gen Zs and the gays and the gals, there were all of these meme templates that could just immediately be filled. It was like this was the dry powder of the Harris campaign, and the moment that she became the candidate, the entire internet understood the assignment and they knew what they had to do. What do you think makes a candidate different?

for political office a good meme target? Like, what is it about Kamala Harris that was better for memes than Joe Biden was?

Every candidate gets memed in one way or another. There are Biden memes. There was a sort of dark Brandon moment. There are obviously a lot of Trump memes out there. But this has been a really difficult moment in American politics. And I think what Harris offered was folks a chance to make memes that were a little lighthearted.

They were a little silly, right? They could sort of help people get excited about politics again because they really just took a lot of air out of the fears around the future of democracy and all these other questions that people have about the election. All of a sudden, we could just laugh at the coconut tree. And so to me, it's like what you've seen on the internet over the past week has just been this like collective exhaling, like this sense of relief and peace.

maybe we can have a little fun over the next few months, right? There's no rule that says a political campaign can't be a little fun. Right. And most successful political campaigns are a little fun. Yeah. Remember when, I mean, look at Bill Clinton playing the saxophone on the Arsenio Hall show. That's what politics used to be. I mean, I was going to, I was going to,

mention Barack Obama, whose initial sort of run for office, like I remember this was sort of during the growth phase of social media and YouTube. And like there were people making websites called Barack Obama is your boyfriend or something. You know, it was just like a very fertile ground for what we would later call meme culture. But so I've been interested in the memes. I've been following them. But I'm also I've also been working on a

column about how the online left and especially the kind of professional

you know, sort of content creators on the left are reacting to the sort of the ascension of Kamala Harris. And the first thing to say is that like their engagement has never been better. They are seeing massive increases in engagement on their social media accounts, lots and lots of attention being driven. And I think we should say like it's been a rough few years for a lot of political content creators on the internet. I would say especially on

on the left, you know, you have X, which got taken over by Elon Musk and basically turned into like a sort of right wing megaphone where it was much harder for those voices on the left to break through. We also had Meta basically deciding that it didn't want anything to do with political news or political content. And so trying to sort of get that stuff out of people's feeds is

So a lot of these big meme pages, these big content creation machines have just really been struggling to break through over the past few years. And so for them, this is sort of like they feel like this is their opening. They can actually get some attention again. Yeah, there's a new player on the national stage. And that feels weird because she's been vice president now, you know, since 2021. But there's definitely a lot of fresh blood now. Yeah. Yeah.

And I want to make a few caveats because obviously there is a lot of energy and excitement right now among Democrats over the Kamala Harris campaign. I think we should still say like she is, you know, in some polls tied with or close to Donald Trump, but he is still favored to win the election at this point. And I don't think that memes alone can reverse a political candidate's fortune. We know from 2020 that Joe Biden was not the most popular candidate

and yet he won the election in part because of all this offline organizing that was happening. So I think it's really important for the sort of political...

machine surrounding the Kamala Harris campaign to figure out how to translate this online energy into the thing that actually matters, which is people showing up at the polls in November. Sure. I mean, you know, we should say that over the first few days of her campaign, she did raise an extraordinary amount of money. And I do think that was effectively her campaign translating that online energy into something that they can use.

But at the same time, we should also say that this whole meme thing, it can have a very short shelf life, right? Like this stuff can turn cringe in a hurry. I've read some pretty good analysis this week saying that the Harris campaign might have already leaned a little too far into this.

stuff. There's this now famous moment when Hillary Clinton during the 2016 campaign in one of her own bids for relevance told us to all Pokemon go to the polls when Pokemon go was sort of having its moment. And we all look back on that as a moment where Hillary Clinton seemed a little out of touch. I actually,

I actually think that so far the Harris campaign has played this really, really well. But I will also say that if they're still doing brat memes in October, that will be a negative indicator. So they're going to have to stay current and they're going to have to have some new memes. Yeah. My theory on this is that she is allowed to mention it once. Like she can, you know,

come out at the DNC onto stage, like over, you know, while, while brat is playing over the loudspeakers or she could make one reference to the coconut tree in her speech, but like any more than that. And it's going to turn cringe. Let me paint a picture for you. She comes out to accept the democratic nomination. Like, you know, they announced her and there is a giant coconut tree sort of on the stage and

And she sort of rappels down from the coconut tree into the context in all of which she exists. Do you think that that is the moment that she wins the presidency? I think you should pitch that to her team. Yeah, I think this could be a real moment. If anyone on the Pod Save America team is listening, could you please tell that to them? Because I don't even know who to tell that to. Anyways. Do you have a theory about what makes a good meme or a good political meme? Let's see. I think it is...

often a mismatch between the gravity of the office and the silliness of what is being said, right? That has kind of been the key of these Kamala memes, is you have somebody who is in a huge position of power who is saying silly things about...

Venn diagrams and coconut trees. So these sort of little unexpected moments that puncture the, like, gravitas of the office, I think often rocket to people's attention. As a sub, like, comment on that, Kevin, it's very funny to me that, like,

Many of the biggest Kamala memes have been essentially identified and promoted by Republican operatives who are publishing this opposition research. The coconut tree clip. Right, that was supposed to damage her. Yes, this was like a weapon that they deployed against Kamala Harris that made her more powerful than she's ever been. So what makes a good political meme? Well, it's like if the RNC uses it to attack you, you might have something good on your hands. Yeah. We should also just talk about

Kamala Harris's views on tech and what we think a Harris presidency would mean for the tech industry and some of the issues we've been talking about. So you wrote a little bit about this this week, but what do we know about how Kamala Harris feels about the tech industry?

Well, she has been pretty close to it. In fact, she's sometimes been criticized for being too close to it. She is a native of Oakland, so she grew up in the Bay Area. And basically, immediately after she announced that she was running for president, some of the big Democrats in tech

stood up to support her. So Reed Hastings, the former CEO of Netflix, said he was donating $7 million. Reed Hoffman, co-founder of LinkedIn, endorsed her. Sheryl Sandberg, formerly of Meta, endorsed her. So Democrats are showing a lot of enthusiasm for her.

I would say that when it comes to her policies, she looks a lot like President Biden. There is not a ton of daylight between them. There are some big topics on which she frankly has not said a lot. One of those things is crypto. Another one of those things is antitrust, right? The Biden administration has really cracked down on tech giants buying smaller companies. Would Kamala Harris allow more of that? We sort of don't know.

In terms of what we do know, she was the Biden administration's AI czar. So this has been part of her portfolio. So she was part of the team that put together the executive order that the administration released last year, which calls for some very gentle safety guidelines around the industry.

She's also made vague promises to hold social networks, quote, accountable. This was when she was running in the most recent presidential primary. We don't really know what that means. So that's kind of a basket of her opinions. I think that in general, Democrats in tech look at her and they think we can work with this person.

Yeah, that's what I've been hearing, too. I talked to one Democratic donor over the weekend who was basically saying the same thing, that, you know, it's not like there's some huge track record of Kamala Harris being sort of gentler on the tech industry than Joe Biden was. It's not like they think they're going to get everything they want from her, but they feel like they can work with her. They feel like she will return their calls, like there's a sort of open line of communication there that maybe they didn't have with the Biden White House.

And so, yeah, a lot of the people who are Democrats and even independents are enthusiastic. I'm very curious if you think this will stem the tide of the sort of Trump support among especially venture capitalists and some of the more outspoken people that we talked about just last week on the pod. What I do think is going to happen is that the Democrats who've been sitting on the sidelines, who have been

telling the Democratic Party, like, we support you, but we cannot support Biden because we think he's going to lose. Those are the people who you're starting to see come out of the woodwork now, right? So there was this imbalance where the only vocal tech voices in the 2024 campaign were the ones who were supporting Trump. Now you're starting to see more Democrats come out and be vocal voices for Harris. And I do think that that is going to matter. Yeah. I also just think it's a sort of

comfort thing with some of the Democrats in Silicon Valley. I mean, Kamala Harris, she spent a long time as the attorney general out here. You know, she was not always gentle with the tech platform. She went after some of them, especially she was very concerned about exploitation online and, you know, revenge porn and things like that. But I think they generally feel like she speaks their language. She understands where they're coming from. And they're excited about the possibility of working with her. Yeah.

So you don't know how to do the apple dance. What is the apple dance? The apple dance is brat coven. Oh my gosh. Looks like we're going to have to start at the beginning. When we come back, it's UBI, a universal basic interview.

Support for this podcast comes from Box, the intelligent content cloud. Today, 90% of data is unstructured, which means it's hard to find and manage. We're talking about product designs, customer contracts, financial reports, critical data filled with untapped insights that's disconnected from important business processes. We help make that data useful.

Box is the AI-powered content platform that lets you structure your unstructured data so you can harness the full value of your content, automate everyday processes, and keep your business secure. Visit box.com slash smarter content to learn more. I'm Julian Barnes. I'm an intelligence reporter at The New York Times. I try to find out what the U.S. government is keeping secret.

Governments keep secrets for all kinds of reasons. They might be embarrassed by the information. They might think the public can't understand it. But we at The New York Times think that democracy works best when the public is informed.

It takes a lot of time to find people willing to talk about those secrets. Many people with information have a certain agenda or have a certain angle, and that's why it requires talking to a lot of people to make sure that we're not misled and that we give a complete story to our readers. If The New York Times was not reporting these stories, some of them might never come to light. If you want to support this kind of work, you can do that by subscribing to The New York Times.

Well, Casey, I like money. What about you? I love money so much. In fact, the best kind of money I can imagine, Kevin, is if somebody just hit me like a bolt out of the blue and said, hey, I'm just going to give you a thousand bucks a month for no reason. Okay, well, I'm not going to do that for you. You're not going to, but you know who might are the folks over at Open Research. This is an organization that just completed, Kevin, the most comprehensive organization

randomized control study of unconditional cash to date. Now, what does that mean? Well, in Silicon Valley, for about a decade now, we've been having a debate about universal basic income. Yes, UBI. This is an idea that people like Sam Altman, the CEO of OpenAI, Elon Musk, Jack Dorsey, Chris Hughes, one of the co-founders of Facebook, and Mark Benioff, they've all sort of expressed some degree of interest in studies of UBI and

Because, and I think we should just connect the dots a little bit here. So a lot of these people believe that at some point in the not so distant future, there will be an AI revolution that will put lots of people out of work. That AI will be able to do many people's jobs better than they can. And so as a result, we will have this sort of

mass unemployment crisis that we will need to figure out some policy response to. And one of the leading contenders for how to help people during that kind of transition and disruption is through just giving them money through something like UBI.

Yeah, and so the folks at Open Research came along, and for a period of three years, they gave $1,000 a month to 1,000 low-income folks, and they just studied what was the effect of having that money. How did it affect their health, their mental health, their employment? Did it make them want to start a business? Yeah, and we should say this specific study that came out this week from Open Research was conceived of by Sam Altman. Sam has been interested in the idea of universal basic income for many years back in 2016.

When he was running Y Combinator, he spearheaded the earliest version of this project at what was then called Y Combinator Research. And since then, he, along with OpenAI, their nonprofit organization, have collectively invested something like $24 million into this project. So it's been a big long-term study that was mostly conceived of and supported by Sam Altman.

Yeah. And of course, since this is a study that OpenAI helped to fund, we should acknowledge that The New York Times has sued OpenAI for copyright infringement. But when it comes to unconditional cash, we are finally starting to see the fruits of this one, Kevin, because eight years after this idea was conceived, this week, Open Research published their findings, and they were really interesting. So to talk about what this study revealed, we've invited Elizabeth Rhodes to the studio. Elizabeth,

is the research director of Open Research, which is the nonprofit that conducted this study. Let's bring her in. - Let's bring her in. Let's ask her for some money. - Let's ask her for as much money as she's got. Elizabeth Rhodes, welcome to "Hard Fork." - Thanks so much for having me. - So before we get into the findings from this study, I wanna start by talking about what your goals were with this project. So what was the research team hoping to find?

When we started this back in 2016, it's been a while, there wasn't much going on in the space in the U.S. There were not a lot of other pilots. The most recent studies have been back in the negative income tax studies of the 60s and 70s. So we really wanted to approach this as an exploratory foundational study to ask the broad, open-ended question, you know, what happens when you give people unconditional cash and

and understanding the role of the cash in participants' lives. And universal basic income, as I understand it, is not a new idea. It's actually been around for quite a long time. Various politicians have advocated for it over the years. But this is sort of, from my understanding, like the most rigorous study of what actually happens when you try to put something like UBI into practice.

So technically, this is not a UBI because if it were, there would be no income requirement, no age requirement. Every single person within a community would get it. And obviously, that's really difficult to test. We considered trying to find a town with a thousand people, but it's not representative of...

the country as a whole and also, you know, what happens if you found shale under that town or during the course of the study. Sure. So we aren't actually able to test a basic income. We're testing more of unconditional cash. Yeah. So I just want to talk about methodology for a second because I read the studies and it's just incredibly complex undertaking to study this many people in a kind of range.

randomized control way. So walk us through sort of like how many people were involved in the study, how you found them, how much money they got, the study design. Walk us through that a little bit.

That was one of the most exciting parts for me. We have 3,000 participants. They were recruited from Illinois and Texas. We wanted to have a group of people that came from different geographies. So that's one thing that a lot of other studies that are place-based don't have. And so we have rural counties, urban, suburban, medium urban, large urban communities.

And we sent mailers to randomly selected addresses. We had targeted Facebook ads. There's an app that a lot of Snap recipients use to manage their benefits.

We put ads there. So we didn't want to have a massive call for applications. We really wanted a randomly selected group. Was it hard to come up with that ad? Because just imagine, you know, you're browsing Facebook and it said, hey, you want $1,000 a month for no strings attached? If I saw that, I might think somebody's trying to pull something on me. Totally. Actually, so our control group gets $50 a month. So everyone was participating in the program. And so we talked about it being $50 or more a month, right?

So there was no ad saying $1,000 a month. - So of the 3,000 people in the study, 1,000 actually got the highest payment, the $1,000 a month payments for the length of the study. And then there was a group of another 2,000 people who just got $50 monthly payments.

Why did you design it that way? We were asking a lot of participants. We collected an enormous amount of data, which is really exciting to work with. But also, you know, we sent monthly surveys. We had an app. And so having a control group that didn't receive anything wasn't something that we were willing to go with. And how did they actually get the money? Is this like a debit card or how'd you give it to them?

We actually custom built a payments processing system where they, now there's a lot more technology out here for this, but at the time we weren't finding a lot of off-the-shelf options. So we linked existing bank accounts and that's how the partners distributed the cash transfers.

There were a number of people that were unbanked, so we helped them open up an online bank account. Or if they weren't able to do that, we had a prepaid debit card. Yeah. What was the, like, I don't know if you'd interface with these people directly, but I'm so curious what the reactions were from these participants when, like, you get the, I don't know if it was an email or a phone call saying, hey, you're about to get another $1,000 a month. Oh, I got to make a couple hundred of those phone calls. And it was...

It was really illuminating. I think I should have walked away from those calls having a better sense of what we were going to see because every person I talked to had like a very unique need in that moment. Someone...

had finished beauty school but couldn't afford the cosmetology license, so couldn't get a job. Someone had a $300 speeding ticket. Someone was just diagnosed with cancer. There were hundreds of different specific needs that people had. In that moment, cash was the only thing that could be used. It couldn't take care of all of them by any means, but could be used towards addressing those. Then immediately you see that

that it's going to go in so many different directions. Yeah. And am I right that the median amount of money that people made who were getting these $1,000 a month payments was about $30,000 a year? Yes. The average was about $30,000. Okay. And

You mentioned data collection and sort of what happened to participants in this study after they got the money. I read the sort of methodology parts of these studies and was just amazed. You not only had an app that they had to sort of download that would track their time and allow them to sort of like say, what am I doing? How am I spending my time on every day? But you actually took their blood. Is that correct? Yeah.

You know, there's this really strong correlation between income and health across time, across countries. And so we did collect blood samples to look at markers of health like A1C, cholesterol, C-reactive protein. To figure out if the sort of guaranteed payments had had an effect on their overall health. Yes. Got it. Wow.

All right. Well, so why don't we get into the findings from the work that you did? There is a lot in there and people can go on your website and read more. But I want to start by talking about mental health. One of the interesting findings in here is that participants experienced reductions in their stress and mental distress in the first year as they start to receive these payments, but that these benefits basically go away in subsequent years. So why do you think that is? And was that a surprise?

I think perhaps a bit of a surprise. I think one thing to acknowledge sort of upfront before we go into overall is that these are sort of the average effects across all participants. Our next phase is to dig in and try to see like four different groups of participants. Did they experience differently?

I have a couple of theories. I don't know if any of them actually hold, but the first transfers were distributed during 2020, which was a very unique year, both in terms of all the things that were going on, but also existing benefits. So there were a lot of pandemic era aides that expired by the end of 2021. And so...

It could potentially be some of that. They were losing some benefits. It could be an adjustment to a new normal. I'm not entirely sure. I was surprised. And just to get the timing right, during what years did people get this $1,000 a month? November 2020 to October 2023. Got it, got it. A lot of people who are skeptical of universal basic income or of these sort of guaranteed cash transfers wonder,

will often say that this is a bad idea because people are not going to use this extra money productively. They're going to spend it on drugs or lottery tickets, stuff that is not going to make them happier and wealthier in the long run. What did your study find about how people were spending this money?

Largely, they were spending it on basic needs. The three biggest categories were food, transportation, and housing. Another larger expense was on support, financial support to others. But I think it also varied a lot based on starting income. I think that's another sort of high-level takeaway is the cash means something very different at different income levels. And what effect did it have on the amount that people worked? Because that's another big sticking point among

skeptics of universal basic income is, you know, you give people money, they're just gonna sort of like, they're gonna work less, they're gonna spend their free time, you know, playing video games or whatever. It's not actually gonna make anyone's life better. What did you find when it came to how much people worked after they got this money?

Overall, we saw some modest decreases. At any point in time, recipients of $1,000 were about two percentage points less likely to be employed. They worked about 1.3 hours less a week, which adds up to about eight days a year. But there was quite a bit of variation across the sample. For example, single parents decreased their labor by more.

than non-single parents. And those under 30 also worked a little bit less. We didn't see any effects on those over 30. We do see suggestive effects of under 30 pursuing more education. So, you know, it's a complex story.

There was also some curiosity about whether receiving these cash transfers would make people more likely to start a business. I was personally curious about this because I never would have started my business unless I had a lot of savings in the bank. What did you all find when it came to entrepreneurship?

We found a significant increase in interest in entrepreneurship and ideas for businesses. We saw very strong effects across everyone on those levels. That didn't necessarily translate into everyone. We didn't see a significant effect overall on starting businesses, though by the third year among underrepresented groups, especially women and Black participants, we did see increases in starting business by the third year. So you see how that adds up.

But I think one of the things that from talking with participants came clear to me is, I think tied to that entrepreneurship interest is the need for more flexible work options, especially for people who are single parents and they don't have, you know, daycare is really expensive. It's also nine to five. People don't work nine to five often. A lot of jobs are available that are overnight shifts. And so that flexibility is, I think,

having the time to kind of think about a business, there was definitely a big increase in interest and ideas. Yeah. What were some of the things that you expected to see out of this, maybe at the outset of the project, that you didn't find in the results? That's a good question. And it's one that I have a hard time answering, I think, because I've been living and breathing this for the past eight years. I knew always that it was going to be a complex and nuanced story. But

Probably some of the stress reductions I didn't expect to fade out quite as quickly as they did. I think there's unreasonable expectations from a lot of us about what an extra $1,000 a month can do at different income levels. And so, you know, it allows people to pay their bills and

rent, but it's not going to necessarily transform your life. I mean, I remember I reported on the Andrew Yang campaign and spent time with him talking about his idea of a freedom dividend. That was his sort of rebranding of universal basic income. And his big central idea of his campaign was that if you give people $1,000 a month with no strings attached, it's

it will kind of heal all of society's problems, right? We will no longer have poverty. We will, you know, we will all be able to afford basic necessities, but also it'll sort of bring us all together because we'll all be getting these checks and it'll sort of bond us. And I'm, you know, making his argument seem a little more rosy than it was, but basically there was this idea, especially among some people who supported the Yang candidacy, that this would sort of heal all ills. And it's,

It seems like what your study found is that it doesn't. Absolutely. I think there's a couple of responses to that. You do see a bit of a disparity when you look at the sort of the high-level overall statistics and then you talk to participants. There was this...

sort of intangible sense of agency that by having this cash and being able to prioritize their specific needs that people talked about and it came up a lot in the conversation that that ability created possibilities for people. Not everyone, obviously, because poverty limits choice. It limits agency. And people were like, well,

well, I paid my rent that I was five months behind on. Like, I didn't have a lot of choices. And so we do see that it has different effects based on individuals' circumstances. Yeah. A lot of the folks that I follow online and have talked to about UBI and sort of related ideas over the years...

We're really disappointed by the results of this study. The effects that the proponents of universal basic income were hoping to see, you know, people's job quality going way up, their health becoming way better after getting these payments, just didn't materialize or didn't materialize to the degree that they had hoped. But I'm just curious what you make of the kind of UBI community's reaction to this study, that they're excited that it was done, they appreciate how rigorous it was, but the findings kind of bummed them out.

To me, one of the important goals of the study from the beginning is not only to look at the potential and the benefits of cash, but also the limitations. Because this doesn't, we didn't find negative, you know, it wasn't like people went out and, you know, ruined their lives to get these cash transfers. But it also doesn't seem to have helped many of them in the ways that some economists were hoping it would.

Yes. And I do think, you know, we do see in our qualitative sample people for whom this

did achieve some of those things. We had a participant who was able to take a job that paid, she was making $18 an hour, and she had this other opportunity that was $14 an hour, but it seemingly had opportunities for growth. She couldn't have afforded to take it without the money. Then by the end of the study, she had received two promotions, had a full-time job with benefits. Someone else was able to participate in a year-long job training program. So there are examples. And so I think our

question is how to dig in to see like what are those conditions that create those possibilities and where are the limitations like we know that we had a sample that was struggling with a lot of chronic health problems and a thousand dollars a month can't buy good health

So that's kind of what I wanted to dig into. I mean, this was like 20 years ago, but my first job in journalism paid $28,500 a year. And over the next five or 10 years, I eventually got paid another $12,000, right? So I basically got the amount of money that you gave those people.

And there was absolutely a change in my quality of life. But I think of it mostly as like a little bit of peace of mind of like, you know, my car breaks down or I have a medical emergency, like I'm not going to be out on my back in the first month. And that was like, great. But if you'd asked me, like, how different is your life than it was three years ago when you were making $28,000 a year, I would have said, well, it's like basically the same. So I

I'm so curious what we think would have happened if you'd like doubled the payments or tripled them. And do you expect that you wouldn't actually see incremental changes here, but maybe you would just see wildly different results? Yeah, that's a great question. I'm not sure.

know exactly what would happen if you doubled or tripled. I think providing some of the systems, the support systems that whether it's robust healthcare or other things would help people meet those needs and then have more opportunities to use the cash would

One of the things that we do see is people actually experience more unexpected expenses, partially because they are buying cars that they break down or there's an increase. People are more likely to be paying for housing as opposed to like staying with other people. And so, you know, they are taking on more expenses, but.

Some people have said, mo' money, mo' problems. Yeah. I was going to say that, but I didn't. That was Milton Friedman, right? I believe that was. I mean, one thing that I've heard from people in the tech industry who are sort of

Looking at universal basic income or something like direct cash payments as a way to sort of cope with what they believe will be widespread job loss after AGI arrives, say, is that there's sort of this idea that people will still need meaning in their lives. People, you know, who get, you know, who get laid off because their job was replaced by A.I.,

they're not just going to be sort of satisfied with, you know, getting a little bit of extra money to pay the bills, but that there's actually something sort of important about work on a sort of spiritual and existential level that we are sort of not creatures who are designed to sit around all day playing video games and making art and talking about philosophy. What did you find in this study about how people's sort of attitudes toward work did or didn't shift after they got these payments?

I think it depends a lot on what type of job you're working in, in terms of how much meaning it provides. There are people that we talked to who were working incredibly difficult jobs, working 60 hours a week that were physically hard on them. And the chance to work one less job or cut back those hours meant a lot and actually gave them more meaning because they were able to spend time with their kids.

One of the things that I found interesting was the growing interest in entrepreneurship and having ideas for businesses. People were, we saw a lot of increase in planning for the future. And in a lot of ways, I feel like it gave people some space to sit back and think about what would they do if they had more opportunities? Because there are a lot of people, I think, now that are just surviving and maybe work is not

is not providing that sense of meaning, and they don't have those choices. Yeah, I mean, can I just say, Kevin, like, that question, which a lot of people really are asking, just feels like the most American Puritan question I can possibly imagine. You know, it's like, if you're not working, like, eight to ten hours a day, your life could not possibly have any meaning. And if we were to give people...

a thousand dollars a month, then all of a sudden, like we will lose our being. Anyway, it's just like, it's the most American idea that you can have. And I would posit that, you know, maybe people could work one hour fewer a day and, you know, the country would be okay. Wow.

Spoken like a European. I'm going on strike after this episode, by the way. So one of the backers of this project is Sam Altman, the CEO of OpenAI. He's been talking about universal basic income for years as a sort of antidote to widespread AI-related job loss.

It seems like recently he might be cooling on the idea of UBI. He recently said in an interview that he now wonders if a better approach would be something like what he called universal basic compute, basically giving everyone sort of a slice of the computing power to run their own versions of GPT-7 or whatever. What do you make of that? And do you think attitudes in the tech industry toward UBI are shifting at all beyond him?

I mean, I can't speak for Sam. I have heard him talk about basic income being one piece of a larger policy framework, which I think is very true. And what we see from this study is that people need more than just money sometimes or what amount of money people need. There's a lot of people that aren't able to participate in the economy now or share in the benefits of the economy, and they don't feel like they have a voice now. And so I think for me, it's

It is a question that we should be asking ourselves now about all the challenges that individuals and families are facing and the inequalities. They're only going to get worse. They've gotten worse over time. And so thinking about how do we create a more inclusive economy now? And I think...

It probably involves more than just money. I think Sam is thinking about those things, although I can't speak for him. Yeah. Have the findings shifted your own thinking about UBI? Do you still think it's kind of a promising idea? How did the research change the way you thought about it?

People have asked a lot of questions. It's like, does this work or does cash work? And my sort of immediate response is, does food work, right? Like, everyone does need cash. I think a question that I have is, what does it look like for it to work? And what are the goals that it should achieve? And one of the things that we learn the most is that cash is an imprecise tool. If you're trying to move health, for instance, for everyone, there's probably a better way to do that.

some of the average treatment effects being null can be masking like very strong improvements or improvements, small improvements across a number of different dimensions for different people. And so,

Measuring that and sort of what are those metrics? What is the goal of this policy? I think is a critical question. Like this was not supposed to be a referendum on UBI or a specific policy. It was what happens when you give people cash and understanding, like we have very granular data on the lives of participants over three years. Also, I'm going to guess that none of the participants like wrote a note to you at the end saying, you know, I really regret taking this money over the past few years. And if anything, I wish it had been less. Yeah.

Well, as someone who thinks that AI will change the labor market in many ways over the next decade or so, and will change a lot of people's jobs and will eliminate some people's jobs, I'm really glad that these kinds of studies are happening. I'm really

grateful for the research that you and your team have done, even if it didn't make the proponents of universal basic income universally happy. I just think we need a lot more people looking into what does a society look like when AI can do 20, 30, 40 percent of all jobs, and how do we help the people who may fall through the cracks? I just think this is incredibly valuable and important work. I think it's really important to be proactive. We learn a lot from

these studies about what works, what doesn't, under what conditions. And I think that is really important work that needs to continue. You know, it's just occurring to me that you're a researcher whose last name is Rhodes. You must get so many Rhodes Scholar jokes. No, not usually. Oh, wow. Okay. Well, I'm excited to tell people we have a Rhodes Scholar on the show this week. I'm honored. Yeah. Yeah. Well, thanks for coming by. It's really good to talk to you. Thanks so much. Thanks.

When we come back, CrowdStrike pushes an update to its Falcon software. And then everything goes Falcon haywire.

Support for this podcast comes from Box, the intelligent content cloud. Today, 90% of data is unstructured, which means it's hard to find and manage. We're talking about product designs, customer contracts, financial reports, critical data filled with untapped insights that's disconnected from important business processes. We help make that data useful.

Box is the AI-powered content platform that lets you structure your unstructured data so you can harness the full value of your content, automate everyday processes, and keep your business secure. Visit box.com slash smarter content to learn more. Well, Kevin, this past week saw us all getting a harsh lesson in the dangers of using a Windows computer.

I assume you're talking about the global tech meltdown that happened last Friday. I am. On Friday, July 19th, a faulty update to cybersecurity software from a company named CrowdStrike took down millions of computers, causing a global calamity. This bug knocked Sky News offline in the United Kingdom. It took out 911 call centers for a while, and it grounded commercial airline flights.

And on that last point, our team, which had been visiting us last week here in San Francisco, their flights were delayed and canceled due to this bug. And that makes this personal, Kevin. Well, it's personal for me because I was also supposed to fly out on Friday. I don't care about that as much. I feel bad for our team. But what happened to you?

Well, I was, I was scheduled to fly to Cleveland to see my family. And, um, the morning of the flight, I got a notification that my flight was three hours delayed and it actually did end up taking off. Um, but it was, it was very bizarre. I went to the airport in San Francisco and all of the screens were down, like that show you the arriving and departing flights. And at

the gate, like the screens that show you, you know, boarding group one is now ready to board, were just completely either black or they had sort of gotten the blue screen of death. - And this really was, you know, so of course if a Windows computer can't boot, it will show you what is known colloquially as the blue screen of death.

And this is the moment when we found out how many computers around the world were running on Windows because all across social media, we saw these, frankly, beautiful photos of these, like, everyday environments where there were these giant screens that were just showing the blue screen of death out of nowhere. And it truly seemed like an experimental art project that, like, Grimes would have done. Totally. It was pandemonium at the airport because not only were a lot of flights delayed and canceled, but the actual, like...

the computers in the restaurants and like the Hudson News kiosks, many of them were down. So like I tried to get some snacks for my flight and literally all of the self-checkout things were down. There was one register open and like they were doing the tabulations by hand on paper. Oh no!

It was cash only, like we had reverted to the 19th century. Well, look, I mean, this seems like a very dangerous situation if we're going to have to be doing calculations by hand in this weird future that we're living in. So we need to get to the bottom of this, Kevin. Yes. So, you know, by now, some of you may have heard some details about how this happened. But today we want to offer you the clearest explanation we can give you of how just one 40 kilobyte file can crash the global IT infrastructure and to discuss why.

what we can do to prevent it from happening again. Because we're very solutions-oriented on this podcast. It's true. So to talk about this, we're bringing on friend of the show, Kate Conger. Kate is a tech reporter at the New York Times and has been covering this CrowdStrike debacle for the past week. So let's bring her in. Let's bring her in. Kate Conger, welcome back to Hard Fork. Thank you so much for having me. So what were you doing when you learned about the CrowdStrike situation?

I was waking up. Because it actually started sort of very early in the day, Pacific time, right? Right. Yeah. Well, I was in New York last week, but yeah, it happened overnight, basically. So we're still waking up to it. And did it seem like a really big deal at first, or did that sort of dawn on all of us more gradually?

I think it seems like a really big deal right away, but I'm waking up when it's already been happening for several hours. So I think I had enough context to be like, oh, this is quite bad, actually. I had this experience of seeing all the photos on social media of the blue screens of death, including in a lot of places where they shouldn't have been there. It should have been showing you an advertisement or airport departures or whatever. Instead, it was these blue screens everywhere. Did those also strike you as very beautiful? Yeah.

I do really like them. Yes. Well, and the little frowny face that some of them had, the frown emoji, I was delighted by. But we should say, lest we be accused of making jokes about a global tech outage that did actually have... No, you're joking, but it did. I would never. Hospitals, schools, airlines all experienced outages as a result of this. So, Kate, from your reporting on this, who sort of felt the brunt of this outage and how?

I mean, I think you just kind of ran through the list. I mean, 911 centers...

airports, hospitals, and then of course, everyone that's relying on those services, right? You know, I think we saw a lot of people talking about having surgeries or procedures they were supposed to get canceled. Obviously, tons and tons of flights got canceled. So, you know, very quickly went to critical businesses and then to all the customers that are relying on them. So let's go a little bit deeper here. And Kate, I have to ask you a question that I hope to never ask on this podcast. And it goes like this. What is CrowdStrike?

Okay. So CrowdStrike is a huge cybersecurity company. And I think everyone outside of the security industry woke up on Friday and was like, what is this company? And I think everyone within the industry knows them to have this almost mythic status of being the guys that are called in to fix it when you have no idea how to fix it. Really? Yes. So they have a

reputation in the cybersecurity industry. They were called in for the 2014 hack on Sony Pictures when they're trying to figure out how North Korea had gotten all their files and dumped them. Again, the Democratic National Committee calls them in in 2016 to investigate the email hack and leak where we saw Hillary Clinton's emails exposed. And so they are

are kind of known in the industry as the people that can come in, track very sophisticated nation state actors, and remediate those kinds of really intense hacks. So in a lot of ways that up until this happened, these were the last people who you would expect to be behind a global IT outage. Yes. They were the people you would call to fix it. Exactly. I did not actually...

realize until this happened that they also make their own software that goes on millions of computers around the world and that that's part of the reason that this happened. Because you only knew them from those things you just mentioned. I only knew that they were sort of the fix-it guys that you would call when something calamitous happened to your computer network.

All right. So all of this happened when CrowdStrike was updating its Falcon software. What do you know about Falcon and what were they trying to update here? OK, so Falcon is a piece of security software that I think we have on our computers at work probably. And, you know, it's on I think 300 of the Fortune 500 companies use their software. That's a lot of Falcon companies. Yeah. So what does it do besides leave kids stranded at the airport?

Okay, so the way the CrowdStrike software, the Falcon software works, it sits sort of at the kernel level of the operating system. And I'm already watching you glaze over. No! You have to know about the kernel. It's like a Kentucky Fried Chicken. You have to know about the kernel. One must always think of the kernel. One must always. So what is it? So this is sort of the heart of the operating system that gets the computer going, boots everything up, and then you have all the software and the apps that you use running on top of it.

that. This is like the first thing that happens when you turn on a computer is that the kernel gets involved. So before even the operating system is loaded, right? Yeah. And so CrowdStrike has access to the kernel, which is like, that's already somewhat, say, a risky thing to give a company access to, right? Because of all the havoc it can wreak. Right. But if you're thinking about, I mean, take a second and think if you've gone into hacking instead of podcasting. I've thought about that in the past. I'll admit it. Sure. Who among us? But

But, you know, if you're thinking about how you want to get access to a system that you're trying to spy on or infiltrate, you know,

So would you rather be at the software level or get into someone's email account or do you want to be sitting at the very base of the system so you have that broad, broad access? Yeah, so you want the kernel. Right. You want to go wherever you want to go in the system. And so that's part of the reason why CrowdStrike software sits there. It wants to monitor activity that's going on and see, you know, what kind of malicious things might be happening kind of beneath the surface. Right. So CrowdStrike has access to the kernel. What goes wrong?

Okay, so they send an update out to Falcon, and the update is meant to look for a new kind of attack that they've started to see and detect. So file goes out, and there is a problem with the file. And so when it's installed on the system, the computer tries to boot, and then it fails.

And then it will try to boot again and fail and boot again and fail and boot again and fail. And so then you get to the blue screen of death. I mean, presumably before they push out updates to millions of computers that use the Falcon software, CrowdStrike is doing some kind of internal testing on a smaller set of computers to just say, hey, does this break the operating system when we push out this update? So, yeah.

What do we know about how their internal quality control process might have failed here? Yeah, so they do a lot of testing and they just put out a blog post about how they run through that and what went wrong. And they do a mix of automated testing and, you know, hands-on personal testing. And they said that there was a problem with the testing software that they used that allowed the flaw to slip through in this update. And then...

They shipped it. Yeah. Now that said, the fact that they didn't test it more before sending it out, would you say that was a huge Falcon mistake?

I mean, it does seem like there should have been more testing here. Obviously, like this is something that should have been caught. It wasn't. There's also a question of, you know, wanting to roll out an update to every single computer that's using your software at once. And it's one of those kind of classic tug of wars that you see a lot in security where, like,

You want to get the fix to people as quickly as possible. So if they are presently under attack, you can detect it and stop it. Yep. So ship the update everywhere, right? But, you know, should you happen to make a mistake in your update...

ship it in like a staged fashion. So it's going to a couple people and then a couple more people and you're making sure that you don't cause a global internet. I mean, that's what we do on hard fork. Every episode, we ship it out to a small number of test users to see if it crashes their phones. And if it doesn't, then we send it out to the rest of them. That's not true. I have possibly a dumb question. Okay.

So CrowdStrike pushes out this update to Falcon that breaks all of these computers and prevents them from loading. But they know there's a problem right away, and they know that there's a fix to this. Why couldn't they push out a second update to fix the problems in the first update? So that's what they did. A little bit less than an hour and a half after the first update. So they send the bad update. They go, oh, no. Oh, no.

Something has gone wrong. And an hour and a half later, they send a second update that will, in theory, fix the problem.

But I've also seen reports that it could take weeks before all of the computers that are affected by this are fixed or, you know, back online. So what's the disparity there? Why did this problem continue late into Friday? Okay. So all of the computers that got the bad update, 8.5 million or so, were online, obviously, at the time that the update was shipped out.

Like we talked about before, they are now in this cycle of crash and reboot and crash and reboot and crash and reboot. Because the Falcon software is sitting at the kernel level of this operating system,

a lot of these computers are not booting up far enough for the new update to come through and fix what's happening. That is something that started to happen. And I think Microsoft was even suggesting to their customers, try rebooting the computer 15, 20 times, and that update might come through and come onto the system. And then... That sounds like trolling. You know, if someone was like, oh, did you try rebooting it 20 times? Yeah. Come on. But I guess it works. One of the blue screen of death...

images that I saw the text on it was like you know if you are comfortable doing the reboot try it if not call someone you trust it's just like

So my mom? Yeah. A coach, a parent, a trusted friend. Yeah. I also saw people suggesting that this could be manually fixed by like going into the recovery mode of the computer and like deleting a certain file from a certain folder. But if you're an airline like that has, you know, 100,000 passengers.

computers all running Windows with this same thing, you're not going to be able to go individually to each of those computers very quickly. Right. So, yes, you could do... I think Windows calls it safe mode, but you could put the computer into safe mode, go in, delete this bad file from the CrowdStrike software, and then...

reboot as normal. There's a couple of problems with that. One, a lot of the computers that are crashed by this are not necessarily computers like a laptop where you have a keyboard right there that you can kind of log onto the computer, go in and delete the file.

There's servers in a data center. Right. Yeah. Or like I saw, you know, I was at the gym the other day and a bunch of their screens were still blue. And it's like, you know, the big TV screens that are in the gym, there's no keyboard there. And who knows where that screen is actually running from to go track it down and remove the file.

Two is that a lot of these computers exist in big enterprises, right? Like big companies. And a lot of these companies have very smartly locked down some of the machines that they use so not any person in the building can go in, put the computer into safe mode and start tinkering with it. So I think that that's an issue as well, is that some of these devices are locked down so that only certain users have the permission to do those things. And so when you're in this panic moment,

all your screens are blue and you have to wait for the one guy that has permission to go around and fix the computers. It's going to take a while. So this bug only affected Windows computers. Is that because only Windows and Microsoft work with CrowdStrike in this way? Do Mac computers not have this specific piece of software? Why was it only a problem for Windows users? This is super interesting. I love this question. Okay, so, and this gets into Microsoft lore. So,

In, I would say, I think this is like the mid-2000s or so, so like 2005 to 2010-ish, Microsoft was working with a variety of different security vendors. And then Microsoft was like, hey, what if we acquired some of these security vendors and started bringing them in-house and owning security companies? And then...

The EU was like, hey, wait a minute, besties, that bothers us for competition reasons. So you need to figure out how to make your operating system competitive for other security companies that want to compete in that space. And you're not privileging the ones that you've acquired and brought in-house.

That gets to a point where Microsoft basically decides we're going to have a more open kernel and we're going to let multiple security vendors play in this space, make software that runs in this space.

Because, just to be clear, a thing that Microsoft could do would be to prevent companies like CrowdStrike from getting access to the kernel, but they get regulatory pressure, you're saying, to not do that. Right. So Microsoft is under regulatory pressure to allow a multitude of cybersecurity companies to have that kind of access. Apple does not have that issue. They have a completely closed kernel, no software, including CrowdStrike, which runs on Mac, has that same level of access. Right.

And I believe Apple, I want to say in 2019 was when they cut off kernel access and they created this whole other system that allows CrowdStrike software to work on macOS without getting that same kind of deep, deep access to the operating system. I see.

I noticed that Microsoft in the wake of this outage was very quick to say, "This was not us. We did not cause this. We are not responsible for it. This is CrowdStrike's fault, even though it happened on Windows machines." What response has Microsoft had in maybe tightening up their security ecosystem after this outage?

So I think Microsoft is in a little bit of a tough spot with this because, you know, it isn't a flaw on their end. And, you know, I think we talked about this earlier, but there's this catch-22 of security, right, where you want to have the best protection you can have as quickly as possible. But, you know, if those updates aren't sufficiently tested, then you have a crash coming.

So yeah, I think it's a really tough position for them to kind of strike. Yeah, I mean, with security software in particular, in order to keep you safe, it just needs access to everything on your computer. So it's like, in a way, the security software itself is going to be the least secure thing on your computer.

because it is essentially a single point of failure. And if something goes wrong with that, well, then now all of a sudden you're in a tough spot. And as Kate just explained to us, Microsoft said, well, hey, we could fix that. And then regulators said, no, you can't. So I agree with you. This is a catch-22 for them. Well, and it's kind of interesting too because now you have the antitrust scrutiny shifting over to CrowdStrike and people are saying, hey, wait a minute, like,

Should a security company have this kind of marketplace dominance where they ship a flaw and it takes out industries around the world? You know, and again, you have that same catch 22. It's like, sure, should we all be using the exact same company for these needs? Maybe, maybe not. But.

If you're sitting there trying to pick out your cybersecurity software, aren't you going to go with the guys that were called in for the Sony hack? Right. Well, I think that takes us into the real question that I want to get at today, which is, can something like this be prevented? So what thoughts are out there right now about what we might be able to do to prevent something like this from happening again? So.

So, I mean, I think the big thing that I keep hearing from people in the industry is to think about testing in a different way. I think a lot of software testing has shifted to a fully automated system where there's kind of like running the software real quick through these automated systems, checking a box, it's good to go and, you know, not lagging.

really heavily scrutinizing and having a person sit down and look and say like, okay, is this working? Have we tried testing it on this old outdated operating system that we know some of our users are still on? Have we tried it in this environment? Have we tried it in that environment? And it just seems like

you know, getting a more robust testing system would help with some of this stuff. I think there's also maybe going to be some renewed debate in the industry about, you know, the depth of access that software vendors are allowed to have on your machine. Obviously, you know, Apple comes out of this looking very prescient for making that change and kicking everybody out of their kernel when they did.

I have been thinking a lot this year about a word that I keep hearing, which is dependencies. And we talked about a few months ago on the show, this one random database engineer at Microsoft who may have inadvertently sort of stopped a massive cyber attack because he spotted this malware in this piece of Linux software.

You're talking about Andres Freund. Andres Freund. Yeah. And in the wake of that story, there were all these sort of people in the cybersecurity industry saying, our infrastructure is way too dependent. We have too many dependencies on these kind of obscure open source projects, these obscure vendors, these obscure things that, you know, they're installed on millions of computers, but that maybe aren't overseen with the level of rigor that they should be given how important they are to our sort of global tech infrastructure infrastructure.

And that's what I'm thinking a lot in the wake of this CrowdStrike incident is just how dependent we are as a society on these things that most of us probably don't even know exist, that even people who write code for a living may not realize.

routinely interact with, but that are so important and that have, that we have very little insight or access into. So do we need some kind of like a national online infrastructure movement? Like the way that we have infrastructure bills to like invest in our roads and bridges, like do we need some kind of a national effort to just firm up the infrastructure that our global technology landscape depends on?

I mean, I love that idea. I think that sounds so fun. But yeah, I mean, I think the, to go to your broader question about the architecture of the internet, I think that,

The internet is a very fragile and beautifully built thing. And I think there's so many fun quirks and weird things about the way the internet works. Like you mentioned all these open source projects, all these, you know, protocols that are sort of written by committee and voted on by people who are just volunteering to like make sure the internet works good. You know, it's really cool and beautiful and also quite fragile. Yeah.

And I don't know. I mean, I think there's an instinct to say, yes, we should consolidate this. We should have more oversight over it. We should try to run it in a coherent and structured way. But I also think that that's something that's really beautiful and special about the Internet is that anyone can have access and can get involved in sort of the plumbing of it and work on it if they want to.

And, you know, maybe the thing that solidifies and kind of reinforces that infrastructure is the fact that people are becoming more technically savvy and more people are getting involved in those projects. You know, I think that's sort of the dream. I'm still kind of like in the web should be free mindset, I think. And I kind of, you know, I don't love the idea of saying, okay, like, you know, we're going to,

have a, I don't know, a national internet infrastructure board that's going to run the internet. Totally. I mean, obviously, this particular outage has largely been resolved. But are there other things that you're still waiting for? Are there other shoes to drop here? What do you think comes next in the CrowdStrike story?

So I think a couple of things. One, I mean, things are mostly back to normal, but, you know, I'm still seeing blue screens here and there at the gym and the airport, et cetera. And so, you know, I think there's still remediation to be done there. And then, you know, I think there's still a need for a public accounting of what exactly went wrong and how we got to this point. And, you know, I know CrowdStrike CEO has been asked to come and testify in Congress. So I think, yeah,

It'll be interesting to see what he says about the process and how they got to this point. But in the meantime, Kevin and Kate, I am pleased to tell you that some level of justice has already been delivered. This just broke on TechCrunch. CrowdStrike has offered a $10 apology gift card to say sorry for the outage. This sounds like a joke. It is not. They have been emailing customers to offer them a $10 Uber Eats gift card as an apology.

And the accompanying email says, we send our heartfelt thanks and apologies for the inconvenience. To express our gratitude, your next cup of coffee or late night snack is on us. Is that real? This is real. I guess I will share this in the chat. A $10 Uber Eats gift card. Sorry we screwed up your entire infrastructure and made...

Hundreds of thousands of people missed their flights. Here's $10. I think that's lovely. Yeah. So thank you to CrowdStrike for resolving this issue with a gift card. And we won't be discussing it any further. Kate, thanks for coming in. And may the forces of the internet protect your computer from CrowdStrike. Casey, thank you so much. This is so fun. Thanks for coming by.

Support for this podcast comes from Box, the intelligent content cloud. Today, 90% of data is unstructured, which means it's hard to find and manage. We're talking about product designs, customer contracts, financial reports, critical data filled with untapped insights that's disconnected from important business processes. We help make that data useful.

Box is the AI-powered content platform that lets you structure your unstructured data so you can harness the full value of your content, automate everyday processes, and keep your business secure. Visit box.com slash smarter content to learn more. Hard Fork is produced by Rachel Cohn and Whitney Jones. We're edited by Jen Poyant. We're fact-checked by Caitlin Love. Today's show was engineered by Alyssa Moxley. Original music by Alicia Baitube, Marion Lozano, Diane Wong, and Dan Powell.

Our audience editor is Nell Gologly. Video production by Ryan Manning and Chris Schott. You can watch this full episode on YouTube at youtube.com slash hardfork. Special thanks to Paula Schumann, Pooing Tam, Kate Lepresti, and Jeffrey Miranda. You can email us, as always, at hardfork at nytimes.com. Keep those direct cash transfers coming. What's your Venmo again?

Squeezing everything you want to do into one vacation can make even the most experienced travelers question their abilities. But when you travel with Amex Platinum and get room upgrades when available at fine hotels and resorts booked through Amex Travel, plus Resi Priority Notify for those hard-to-get tables, and Amex Card members can even access on-site experiences at select events, you realize that you've already done everything you planned to do. That's the powerful backing of American Express.

Terms apply. Learn how to get more out of your experiences at AmericanExpress.com slash with Amex.