
Show Notes
Red Team X is a security team at Meta that is responsible for finding and exploiting vulnerabilities in third-party products that could impact Meta's own security. The team acts as a hybrid between a traditional red team, which focuses on probing their own organisation's systems and products for vulnerabilities, and an elite bug-hunting group. The team was founded by Vlad I. in 2020 when the pandemic and the sudden shift to Work From Home challenged various previously-held assumptions about security. In his discussion with Pascal, Vlad explains the roles of different security teams within Meta, how they go about prioritising the highest-impact targets to exploit and how they work with vendors to ensure not just Meta but the entire world benefits from the fixes produced. Got feedback? Send it to us on Twitter (https://twitter.com/metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host @passy (https://twitter.com/passy and https://mastodon.social/@passy). Fancy working with us? Check out https://www.metacareers.com/.
Links: The Diff episode about Velox: https://thediffpodcast.com/docs/episode-17
Risky Business Podcast: https://risky.biz/
RTX Blog: https://rtx.meta.security
RTX Disclosures: https://rtx.meta.security/bugs
RTX in WIRED: https://www.wired.com/story/facebook-red-team-x-vulnerabilities/
Timestamps: Intro 0:06
Vlad Intro 1:55
Red Teaming 2:43
Staying up-to-date 6:34
Different team colours 10:02
Defence-in-depth 12:44
Red Team X 15:57
Hardware v Software 19:43
Focus areas 21:29
Prioritising requests 22:44
Notable RTX Disclosures 26:05
Vulnerability disclosure policy 28:52
Getting into offensive security 38:48
Outro 40:51
More from Meta Tech Podcast
How do you add end-to-end encryption to a messenger that people have already been using for years, without taking away the message history they expect to be there? Emma Connor works on the team behind Labyrinth, Messenger's encrypted storage protocol. We get into where the encryption keys actually live, which turns out to be nowhere near Meta, and why a six-digit PIN is far harder to attack than six digits ought to be. Emma also explains the hardware security modules that Meta deliberately locked itself out of, what happens when you lose a device and want it cut out of your account, how key transparency lets you verify who you are talking to without having to trust us, and why Labyrinth 1.1 moved to post-quantum cryptography. All of this and more is discussed in this episode. Got feedback? Send it to us on Threads (https://threads.net/@metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host Pascal (https://mastodon.social/@passy, https://threads.net/@passy_). Fancy working with us? Check out https://www.metacareers.com/. Links Opaque Rust Crate - https://crates.io/crates/opaque-ke
Pascal is going on Recharge for August so there will be no regular interview episode. However, we want to hear your questions for our mailbag episode. Send them to us on Instagram (https://www.instagram.com/metatechpod) or Threads (https://www.threads.com/@metatechpod) or via good old email to [email protected].
What changes for you as a developer when the device moves from your pocket to your face? The battery shrinks by an order of magnitude, the thermal budget is whatever won't make your nose uncomfortable, and your mental model of "one process, one device" goes out the window. Rey and Dmitrii talk us through their custom power monitors, how they've extended Perfetto to give a coherent trace across a multi-device system, why robotic arms make surprisingly good QA engineers, and what it takes to catch the kind of regression that quietly costs you thirty minutes of call time. All of this and more is discussed in this episode. Got feedback? Send it to us on Threads (https://threads.net/@metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host Pascal (https://mastodon.social/@passy, https://threads.net/@passy_). Fancy working with us? Check out https://www.metacareers.com/. Links Migrating Data Ingestion Systems at Meta Scale: https://engineering.fb.com/2026/05/12/data-infrastructure/migrating-data-ingestion-systems-at-meta-scale/
Your smart glasses run all day on a battery narrower than your pinky finger and building it required reinventing how batteries are made. In this episode, Pascal talks to Karthik and Myuran, the engineers behind Meta's steel can battery technology, to explore why traditional pouch cells couldn't cut it for the ultra-slim temple arms of AI glasses like Meta Ray-Bans and the Oakley Vanguards. Tune in to learn how Meta designed, built, and scaled the batteries powering your glasses, wristbands, and cases from first prototype to mass production. Got feedback? Send it to us on Threads (https://threads.net/@metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host Pascal (https://mastodon.social/@passy, https://threads.net/@passy_). Fancy working with us? Check out https://www.metacareers.com/. Links SilverTorch: Index as Model — A New Retrieval Paradigm for Recommendation Systems - https://engineering.fb.com/2026/05/26/ml-applications/silvertorch-index-as-model-new-retrieval-paradigm-recommendation-systems/ Timestamps Intro and News 0:06
You've probably spotted those little circles of your friends' faces popping up on Facebook Reels. They look simple enough, but building them was a proper engineering challenge. In this episode, Pascal chats to Joseph and Subasree about Friend Bubbles, a feature that surfaces which of your close friends have been watching and reacting to the same Reels as you. We get into the details of how prefetching keeps things snappy without wrecking scroll performance, why the team's ML model had to move from survey-based friend rankings to real-time interaction signals, and the surprising discovery that showing fewer bubbles actually made the whole feature click. If you've ever underestimated a "simple" feature, this one's for you. Got feedback? Send it to us on Threads (https://threads.net/@metatechpod), Instagram (https://instagram.com/metatechpod) and don't forget to follow our host Pascal (https://mastodon.social/@passy, https://threads.net/@passy_). Fancy working with us? Check out https://www.metacareers.com/. Links https://engineering.fb.com/2026/03/18/ml-applications/friend-bubbles-enhancing-social-discovery-on-facebook-reels/