The Anti-Data-Center Argument Everyone's Making Turns Out to Be China's
Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Release Date: 09/01/2026
Craig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
A listener asked Matt to ask Craig about the theft of FBI data, and Craig started with who holds it. Much of what the federal government keeps — background-check records, applications to the FBI, even the designs of weapons made by defense contractors — sits with third parties. The group behind this one is called ShinyHunters; its reported leader was arrested by Dutch police the day before the show. Craig’s point was the gap between the government and its vendors: last week every federal agency was required to patch ScreenConnect, a remote-support tool with a serious vulnerability....
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
On October 13, Microsoft ends support for Office 2021 — Word, Excel, Outlook, and PowerPoint stop receiving security patches that day — along with the extended security updates for Windows Server 2012. Danny, sitting in for Jim Polito, asked the obvious follow-up: how does anyone find out what they are running? Craig’s answer started with what people assume covers them. “Most people think, oh, I’ve got antivirus software. I’ve got Windows Update turned on. So, I’m all set. It is not true.” Windows Update does not update all the software on a Windows machine, and antivirus only...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Sen. Mark Warner went to the Senate floor to call for a government body to oversee AI. Craig read the legislation and the senator’s website before the show, and his objection was that the problem it describes is already illegal. Laws against hacking a computer system have been on the books for almost 30 years; people have gone to jail under them, foreign nationals included. “I think what they’re trying to do is get legislation that protects them from the laws that exist.” Jeff played the other side: if the AI gets loose because of “grossly incompetent nitwits that I chose to...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
OpenAI launched ChatGPT 6, Sol, and Luna this month, claiming Sol makes about half as many mistakes as the models before it. Matt asked whether that is real progress. Craig’s answer was yes, with a catch: the models are not getting smarter. The companies, Anthropic included, have rewritten the code around them so the AI runs the same prompt again and again from different angles and then votes on the most likely answer. The new models use about twice the tokens of the old ones. “And they get a 50% better answer.” Matt: “There seems to be a correlation here.” The second half was about...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Jim came into the segment from a morning on Flock license-plate cameras, and Craig took it one step wider. The technology is old and the courts have ruled on it for years; his discomfort is with how much of our information is collected at all. Websites that must verify your age now ask for a photo of your driver’s license or passport, so Facebook “or whomever” holds government ID for millions of people. Craig said 150 million of those records have been stolen. “So now what are they going to do? How am I going to prove who I am when other people have a copy of all of my information?”...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
OpenAI’s model got into Hugging Face. Anthropic said its model had broken into someone first. Then Google said its model had done it before either of them. Jeff wanted to know how these AIs keep “breaking out,” and whether he should picture Robby the Robot fiddling with a lock. Craig spent the previous two weeks reading the published investigations, which go back to May, and said nothing broke out of anything: “These AIs were let loose on networks that had access to the Internet. They were given specific instructions that had 100% to do with hacking and breaking into systems.” The...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Jeff and Heidi hold happy hour at the bar in their house at 6:03, and Heidi has decided what it is missing: a robot bartender. Jeff’s terms were that he picks how it looks and she picks what it says. Craig’s answer was that the hardware already exists. Bars now have table-top machines that check your ID card and make any drink you order; those start around $30,000, and home versions run about $400. The conversation half is ChatGPT or Claude, spoken rather than typed. It started with a more serious question. Elon Musk and Sam Altman both say AI development should slow down, so why not...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Craig’s wife sent him an article the morning of the show: Chinese ships moving through the straits of northern Canada are not just passing through. International agreements allow transit through territorial waters at a reasonable pace, but these ships are stopping, and it looks like they are measuring the sea floor. Russia is doing it too. The route used to be frozen; now it can be navigated in summer. Craig used it to explain why the U.S. wants a foothold in the North. It was the last stop in a long Canada conversation. Jim opened on British Columbia’s three-year experiment...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
This was the biggest Patch Tuesday on record: Microsoft pushed close to 700 patches in a single month, roughly six times the usual volume. Craig's follow-up question is the one that actually decides whether a machine is exposed. Microsoft is patching Microsoft. Who is patching everything else? Windows Update never touches third-party software — it barely updates Windows itself, Craig said, and it does nothing for the average of 62 other programs sitting on a typical computer, many of which are being actively exploited right now. He named Adobe Reader and WinZip specifically: the current...
info_outlineCraig Peterson - Secure Your Business, Your Privacy, and Save Your Sanity
Craig grew up in Canada and left in the 1970s, and this week he put numbers on why. A driver's license in Quebec cost $300 a year. Registration on the family station wagon cost $3,000 a year. Both figures in 1970s dollars. Auto insurance, by contrast, was free — which Craig turned into the sharpest point of the segment: his father remarried, his stepmother got her license at 26, and she totaled three cars. Craig's question was not about her driving. It was about what happens to the premium. "How much does insurance go up? How much is the risk? Zero, of course, because there is no insurance....
info_outlineCentral Virginia has neighbors close to blows in the street over new data centers. Craig's number for the other side of the ledger: one community found that without the tax revenue a data center brings in, property taxes on every home would rise $5,800 a year. Add $250,000-a-year electrician jobs, emissions cut more than 90% once a site is required to generate its own power, and a mandated 20% energy surplus handed back to the grid, and the case against building locally gets a lot thinner than the protest signs suggest.
Then the turn: Jeff points out that a lot of the people fighting these projects are, point for point, reciting Chinese Communist Party talking points without knowing it — sourced, Craig says, from a Wall Street Journal opinion piece, "The Data Center Panic and the U.S. Decline." The mechanism behind it: China is pricing equivalent AI processing at roughly half of what U.S. companies charge, betting that price-sensitive American users and companies will send their data there anyway. Fewer U.S. data centers means more of that traffic — and the underlying economic edge — goes to China by default.
Craig also walks a live attack from the day before: a client's phone lit up twice with an MFA prompt asking if he was logging into the company VPN. He said no both times. Tracing the request's network block back past a New York data center landed in Hong Kong. By the time an attacker reaches the multi-factor step, Craig notes, they already have the VPN address, the login email, and the password — the app-based prompt is the last line standing. He ran the client's email through haveibeenpwned.com (free, no account needed) and found the credentials already circulating on the dark web.
Also in this segment:
- An American Medical Association article claiming AI now outperforms doctors with a doctor's involvement even more than AI alone — which Jeff meets with an immediate, cheerful refusal to give up his own physician, "Dr. Bob," over "Dr. Robbie D. Robot"
- Two live Massachusetts breaches: UMass Amherst hit with fraudulent dead-credit-card charges, and a Marlboro-area robotics manufacturer — supplying military and medical clients — unable to ship product for two weeks after being hacked
- A reminder that elementary schools are targeted for students' Social Security numbers specifically because a stolen child's number can go unnoticed and unused for years
Free newsletter: CraigPeterson.com