Aug 25, 2026 · 1h 12m
Trump’s endorsement meets cyber privateers and AI escalation
Is Darlene Graham Already Done in South Carolina? US Hackers vs. Foreign Gangs (with Eric Geller)
The episode connects a fragile South Carolina campaign to a consequential experiment in outsourcing offensive cyber operations under government oversight.
- 1Darlene Graham’s weak campaign and reliance on Donald Trump expose questions about Republican strength beyond South Carolina.
- 2Eric Geller describes cyber privateers as a controlled way to pursue foreign criminal networks that government agencies cannot fully cover.
- 3AI may accelerate both cyberattacks and vulnerability discovery, but skilled human operators remain essential to judging threats and consequences.
Don't miss
Eric Geller explains how vetted private cybersecurity firms could pursue foreign criminal organizations while remaining subject to government approval and oversight.
The brief
Justin questions Darlene Graham’s South Carolina runoff prospects, arguing that weak positioning, unfavorable fundamentals, and dependence on Donald Trump’s endorsement may signal wider Republican problems.
The episode then turns to Eric Geller, who explains an executive-order framework for vetted cybersecurity firms to pursue foreign criminal organizations under case-by-case government approval.
The central tension is control: private companies could reach lower-priority criminal threats, but oversight must prevent reckless operations, intelligence conflicts, and retaliation against the United States.
Geller says the program may expand beyond criminal gangs, while AI could widen both offensive reach and defensive capacity without removing the need for skilled human judgment.
The discussion closes on exposed critical infrastructure, AI vulnerability discovery, and the human configuration errors that can defeat otherwise sophisticated safeguards.
What was said on this episode
29 statements · 7 positive · 12 negative · 1 mixed · 9 neutral
Justin predicts Darlene Graham will lose the South Carolina runoff.
“Is Darlene Graham going down? I think so.”
Listen at 0:05
Justin doubts Darlene Graham’s prospects in the South Carolina runoff.
“I got a bad feeling about it for Darlene Graham.”
Listen at 1:23
A bipartisan federal bill will establish a national framework governing college sports.
“there is going to be new federal legislation that will govern college sports.”
Listen at 6:41
The proposed college-sports legislation would bar paid preseason or training-camp players from collegiate competition.
“if you make the preseason roster, if you make the training camp roster, you are getting a paycheck. And at that point, you would be ineligible for collegiate competition.”
Listen at 7:35
Justin evaluates Darlene Graham’s campaign as objectively poor.
“I believe she has run a fairly objectively bad campaign.”
Listen at 9:45
Justin recommends Darlene Graham campaign as a one-term caretaker of Lindsey Graham’s agenda.
“Darlene should lead with saying that I believe I'm only going to serve one term.”
Listen at 13:06
The cybercriminal ecosystem is too large for government personnel to address alone.
“the criminal ecosystem is huge and out of control and the government does not have enough people to go after it themselves.”
Listen at 43:50
The executive order substantially expands eligible private firms and cyber targets.
“it is a huge step in terms of broadening the range of companies that do that and also broadening the range of targets that they're allowed to go after.”
Listen at 44:26
The program targets criminal organizations without direct foreign-government connections.
“this is explicitly focused on any organization that's engaged in crime that does not have a direct connection to a foreign government”
Listen at 44:49
Participating cybersecurity companies will undergo strict vetting.
“there's going to be a strict vetting process.”
Listen at 46:23
The government will approve or reject each private cyber operation.
“the government is going to say yes or no to every operation.”
Listen at 46:40
The government should reject operations against criminal fronts secretly controlled by foreign governments.
“if a company comes to them and says, I want to hack this gang and they know that it's secretly a front for the Russian government, they're going to say no to that or hopefully they're going to say no to that.”
Listen at 47:20
The program will likely target cybercrime gangs rather than Middle Eastern proxy forces.
“I would guess it's going to be less. the kind of Middle Eastern proxy forces.”
Listen at 49:08
Expanding private cyber operations risks harmful collateral damage.
“you don't want to expand the range of people who do this too much because. It's so risky that you could have collateral damage that that actually hurts you”
Listen at 52:13
The program offers a middle ground by directing private-sector cyber enforcement.
“The thing I would say is this seems like a middle ground to try to get there and try to unleash the private sector to do this.”
Listen at 53:26
Targeting pig-butchering compounds would demonstrate the program’s value.
“I'll be interested to see if we see the companies going after these compounds as part of this new program. I think it would be a great way to demonstrate value”
Listen at 56:04
The executive order is an opening move whose results will guide future expansion.
“I think this is. definitely their opening move and they're going to see how this goes.”
Listen at 56:28
Some government officials are willing to expand the program if it succeeds.
“there are people in the government who are very willing to expand this if it works out.”
Listen at 56:33
Private cyber operations may damage servers in friendly European countries.
“there is a very real possibility that as part of this program, private companies are going to end up doing some collateral damage to servers in European countries”
Listen at 57:38
Collateral damage from the program is inevitable.
“it's inevitable that we're going to see some of that collateral damage.”
Listen at 58:08
More powerful open-source AI models will significantly change cybersecurity threats.
“especially as the open source models get more powerful.”
Listen at 59:25
AI will substantially improve moderately sophisticated cyberattacks.
“It's the attacks in the middle that are going to get a lot better.”
Listen at 59:52
Some hacked water systems exposed industrial-control equipment publicly online.
“they had their industrial control equipment publicly accessible on the Internet, which is like the number one thing you're not supposed to do.”
Listen at 1:01:21
Water-system operators should remove PLCs from the public Internet.
“If you are running a water system, take PLCs off the Internet.”
Listen at 1:01:32
AI systems are becoming effective at finding and explaining software vulnerabilities.
“they're getting really good at finding vulnerabilities and telling people how to actually use them.”
Listen at 1:02:25
The Anthropic incident resulted from humans misconfiguring the testing environment.
“the anthropic one was interesting, too, because that was really human error. The humans misconfigured the testing environment”
Listen at 1:05:39
AI systems’ behavior is constrained by what humans permit them to do.
“these things only do what we allow them to do.”
Listen at 1:07:24
AI coding advances increase the need for more cyber operators.
“I think it's a reason to put more people out there because part of this is just gathering information.”
Listen at 1:08:04
AI can gather cyber intelligence but cannot decide whether action is worthwhile.
“AI can do some of that, but it can't make the judgment calls about whether it's worth doing something.”
Listen at 1:08:13
Statements are attributed to the speaker as said on the episode and reflect their view at the time, not PodLume's. They are not advice.
Books & mentions
Hoth Takes
Eric Geller’s Star Wars podcast extends the brief detour into Rogue One, Darth Vader, and the franchise’s direction.