Latest / Nonsense with cj little and Jeff Parker / HEADLINES: Lawsuits for Likes, Haunted Python, & the Great Router Ban of ‘26
Transcript
- 0:00I was thinking of you because while you have given me the gift
- 0:02of Arch Linux, yes, which I love because I, you know, it's free
- 0:06like beer, right? I get it.
- 0:07It's I can just use it. It's also free like speech to to
- 0:10quote RMS. Now I don't use the free like
- 0:12speech part 'cause I'm not actually changing the software,
- 0:14I'm just consuming it free like beer.
- 0:16But you could. Yeah, but you've neglected to
- 0:18also point out that it's really free, like a puppy.
- 0:20Is that right? Because it just keeps needing
- 0:22more and more work. I just it's just like it's it's
- 0:25really great. I've got our but like it's
- 0:28peeing on the floor and I gotta go mop it up and I gotta buy it
- 0:30food and like. Like in what way?
- 0:32Like like software updates? Yeah, you do that way no matter
- 0:35what system you're. On ring is upside, of course.
- 0:38Yes, of course. Every system you should have
- 0:40these same turtles as I'm. Complaining if you very happy.
- 0:44If you don't have these problems on any other system, your other
- 0:47systems are insecure. You should have this on every
- 0:49system. I understand.
- 0:51I'm just saying that the great RMS Richard Stallman said.
- 0:55Free like beer, Free like speech neglected the free like a puppy.
- 0:58Part He left the dimension free like a puppy.
- 0:59Neglected that part, which I think is important to realize
- 1:02quietly that really software, open source software especially,
- 1:06is very puppy ass. That's all.
- 1:08It's just more of a PSA for folks, That's all.
- 1:10I'm I'm trying to get at 2:00. The Apple Company presents a
- 1:21truly terrible podcast. Welcome to Nonsense Season 4,
- 1:24episode 20. I'm Jeff.
- 1:25Parker, I'm CJ Little. This is our take on the week's
- 1:27business, tech and entertainment headlines.
- 1:29This time, algorithm on trial. The verdict that turns social
- 1:32media features into legal liabilities.
- 1:34Oh. Not so sad now, are you,
- 1:36Winklevoss twins? The House of Cards How hackers
- 1:40turned AI tools into digital spies.
- 1:42All your bases are belong to us. FCC pulls the plug.
- 1:45New foreign made routers banned in the USA.
- 1:48That's a lot of words to just say all routers orders have been
- 1:51banned in the US there. Are no consumer routers now that
- 1:53are made in the US? Are there?
- 1:54No, there's no. Farm to Network program where
- 1:57somebody whittles them away in their backyard, then brings them
- 2:00to a local farmers market. There's no Etsy place you can go
- 2:03where you can get homemade routers.
- 2:05I'm sorry, are the routers in between the strawberries and the
- 2:07Peaches? Where do I go to find the
- 2:08homemade routers? No, that doesn't.
- 2:10It's not a thing, people. It's not a thing.
- 2:12Also a big story later this week is about aliens.
- 2:14It's always aliens. Amaze amaze, amaze, amaze.
- 2:17Together we saved 2 worlds. Are we just like the alien show
- 2:19now? Is that is that our new thing?
- 2:21It's the third. Time that we've talked about
- 2:22aliens in three weeks. So maybe we are.
- 2:25Yes, it's National Farm Workers Day.
- 2:26Sun scorched skin and calloused hands feed a nation that often
- 2:29forgets to say thank you. Today we honor the quiet
- 2:31resilience of farm workers, the backbone of our food system.
- 2:34Their labor is the bridge between soil and soul.
- 2:37Dignity, fair pay, and gratitude of the very least they've
- 2:40earned. I love the idea of farming, but
- 2:42I don't want to. Farm.
- 2:43No, it's a lot of work. It's a lot of work, yeah.
- 2:46I don't feel like I pay enough for what I buy.
- 2:48And a lot of machinery too, which I'm also a big fan of.
- 2:51Have you seen the carrot video? There's just a carrot video last
- 2:53week. Oh, yeah.
- 2:54Yeah. Of how they make baby carrots.
- 2:55Oh. Oh no.
- 2:56This was the greatest thing on the Internet.
- 2:58Was that on onlycarrots.com? Where'd you see that?
- 3:00Pretty much. It's so cool.
- 3:02Wait, it's how they make baby carrots?
- 3:04Yes, baby. Carrots are not actually small
- 3:06carrots grown on the ground. They're regular carrots.
- 3:07They just get reshaped and reformed and all that.
- 3:09But the actual? I see.
- 3:11I'm gonna put a. Link in the show notes.
- 3:12This is so good. Wait, they whittle down regular
- 3:15carrots and debate to put baby carrots?
- 3:17You have to see this. Video It's not like a baby, it's
- 3:19more like a it's just. A creation full size carrot
- 3:22humans who made this thing very easy to eat and it's all clean
- 3:26and the sides are all but. It's an adult carrot
- 3:28masquerading as a child. It's.
- 3:30It's an adult carrot masquerading as a child.
- 3:32That just seems weird to me, doesn't it?
- 3:34It's delicious. OK, I have no problem with.
- 3:35Oh, hey. Give me some of those veal
- 3:36carrots. I heard those are really good.
- 3:38They should rename it to that Sales plummet you.
- 3:41Will like this video. I'll say I'm just put a link in
- 3:43the in the show notes. Sweetie, anything from the
- 3:44store? Yeah, some of that veal spinach
- 3:46would be great. The one that they kill early
- 3:49before it becomes mature. I like when it's really soft and
- 3:51tender. I don't mean.
- 3:52To interrupt this discussion on food, how's your week going?
- 3:55You were. Part of the discussion.
- 3:57My week was going fine but now I feel like I need to go sit in
- 3:59the middle of a farm and do a lot of soul searching.
- 4:01Some reading anyway the. Second week of our spring break,
- 4:05my children's spring break, which means that I am preparing
- 4:09for a week of camping up in the Sequoia.
- 4:11So I'm very excited about that. That's fun.
- 4:13I have. Cleaned all of the things I have
- 4:15done, some of the packing. What have you been?
- 4:16Doing when you were gone last week last.
- 4:19Week we didn't camp, we instead did a trip to the least happy
- 4:23place on earth, also known as Legoland, California.
- 4:25I love Legoland. And then we went and saw the
- 4:27Savannah bananas. Oh yeah.
- 4:28Which was also fun. Absolutely.
- 4:30But the I love the Savannah bananas.
- 4:31I love the concept they have the audio.
- 4:34They're set to 12. Oh yeah.
- 4:35It is so damn loud. I had earplugs in the whole time
- 4:38and it was still too loud for me and I'm like, am I just old or
- 4:41is it really loud? I think the answer really is
- 4:42both. Yeah.
- 4:43But man, was it like disregulatingly loud and we were
- 4:46in the outfield. I mean, it wasn't like we were
- 4:48close, but yeah, very cool to see.
- 4:50So he's spend time with the kids and and have some fun.
- 4:52We're going camping, which is going to be a blast.
- 4:55And then I over the weekend enjoyed a day of, of my, our
- 4:57first beach day of the year, which is just a day of, of
- 5:00nothingness. Just go to the beach, love it,
- 5:01sit in the sand, the kids play in the water.
- 5:03We saw some dolphins, as we do in California all the time and
- 5:06it was lovely. It was great.
- 5:08I and I'm sitting there thinking, man, I don't pay
- 5:10enough taxes for all of this. Like this is all.
- 5:12So great. Oh, it's spectacular.
- 5:14California just says the most lovely beach.
- 5:16I wish. Gas was a little more expensive.
- 5:18I'm only paying 750 for diesel today and I go fill up my truck
- 5:21to go camping. I really wish it was more like
- 5:23$12.00. I feel like that would be the
- 5:24right thing to pay for all of. This, well, it will be soon.
- 5:27Exactly, just I still have the return trip to come back.
- 5:30So. The last time I took it up and
- 5:32it was gas was over 7 bucks a gallon and I had to get diesel
- 5:35and the poor kid at the counter in Porterville, CA, I told him I
- 5:38needed $400.00 on pump 4. He looked at me like I had three
- 5:41heads. Of course, dude, it's a 44
- 5:43gallon tank. Like what do you want from me?
- 5:44It's going to be over 300 bucks. That's what happens.
- 5:47Yeah. I'm excited to to go have some
- 5:49fun with my kids. That's awesome.
- 5:50That's plan. How about you?
- 5:51MLB's opening weekend brought the arrival of the Automated
- 5:54Ball Strike Challenge system. Oh, exciting.
- 5:56It is exciting. UMP CB Buckner had 6 calls
- 5:59overturned in a single game. What?
- 6:01One pitch he called as a strike missed the zone by 2.7 inches
- 6:04UMPS be human. Turns out sure.
- 6:06In Kansas City Royal game, catcher Salvador Perez
- 6:08successfully challenged multiple calls from UMP Doug Eddings at
- 6:11the bottom of the strike zone, leading to visible frustration
- 6:14from the veteran umpire. Yeah, I'm gonna put a link in
- 6:16the show notes of this. It is great fun.
- 6:18K he schools the UMP as to where the bottom of the the strike
- 6:21zone. Is wait, hold on, For those of
- 6:22us that aren't glued to a opening day of MLB, how does
- 6:25this work? So anybody can call a challenge,
- 6:27no? The pitcher, the catcher and the
- 6:29batter can call it. You can be wrong twice.
- 6:31And then what happens after you're wrong twice You.
- 6:32Don't get any more challenges. You're done.
- 6:34As long as you're not wrong, you can go as long as you want the
- 6:36whole game. Well, no, until extra innings.
- 6:37And extra innings you get another challenge.
- 6:39Per one per inning. One per extra inning.
- 6:41Yeah, so you get, you get better odds than in the extra innings,
- 6:43much better. Yeah, one per inning, 2 wrong
- 6:45for the whole. Game 2 wrong for the whole game.
- 6:46If you don't get them wrong, you go a long time.
- 6:48And some of these things went on quite a bit.
- 6:49Interesting. Mitch Trezak was behind the
- 6:51plate for a historic moment in a Red Sox Pirates game where the
- 6:54ABS system overturned 5 consecutive calls.
- 6:56That's insane. Yeah.
- 6:57So did the like, was the UMPS did his glasses fall off?
- 7:01What happened? Why was he?
- 7:02I don't know. Have all these fans been right
- 7:03for so many? You get some.
- 7:04Glasses, Right, Right. How bad are you at your job?
- 7:07Finally, on the 6th challenge, which he got right, yeah, the
- 7:09crowd gave him a Bronx cheer. In unrelated news, UMP Mitrizek
- 7:15has retired. Yeah.
- 7:16Some of these guys might might want to retire.
- 7:18I think it's really hard for a young person to call those
- 7:20things accurately with great vision.
- 7:22Imagine as you get older, sure, I mean, theoretically more
- 7:25experience should kick in, but I think vision really, really
- 7:28matters. It's completely remarkable how
- 7:29the ABS system does not slow down the game.
- 7:32The average challenge time is 12 to 14 seconds and over half of
- 7:35the challenges have been successful.
- 7:37That's impressive. I mean this might be the best
- 7:39use for these crappy Tesla humanoid robots.
- 7:42You just put them in the UMP position and all they do is
- 7:44regurgitate whatever the ABS system figured out in the minor.
- 7:46League, they had a time when they did that.
- 7:48By the way, I prefer those humans overseeing the computer.
- 7:51Sure, so that the UMPS are getting the calls 1st and then
- 7:53if the UMPS want to override, the UMPS can override.
- 7:56Yeah, I'm fine with that. Not the way it is now, which is
- 7:58the computer is correcting the UMP.
- 8:00I think that's a little strange. And in the minor leagues when
- 8:02they tried it that way, where they actually got a little
- 8:04earpiece, the computer would tell them it's a ball, it's a
- 8:06strike, whatever it tell them. And then the UMP would actually
- 8:08make the call of their choice. In every case they stayed with
- 8:10the computer. The calls not only were 100%
- 8:13accurate, there were no delays at all during the game.
- 8:15Yeah, not even a 12 second or 14 second delay.
- 8:17Wow, that's a better system. I'm not a fan that they're
- 8:19calling it ABS, such a popular acronym.
- 8:22Could we call it something different?
- 8:23Plastic plasticky or the brake system on cars, Antilock braking
- 8:27system? Yeah.
- 8:27I feel like we should just call it the BS system.
- 8:29I feel like that would be better, that would be more
- 8:31aligned with what it is. Just call it the correct system
- 8:33because oh, the call's enough. I got one more thing before I
- 8:36get off my week. There's been a thing that has
- 8:37been going around for the past. It's more than the past week,
- 8:40but I'm finally at the point where I want to talk about it,
- 8:42which is plug in solar. Have you seen anything called
- 8:44plug in solar? Are you familiar with this
- 8:46phrase? Plug in solar this is.
- 8:47These are. I'm guessing they're like solar
- 8:49cells that you plug. In there's solar panels and you
- 8:51don't have to have a permit or anything else, you just
- 8:53literally plug them into your wall and it starts supplying
- 8:56electricity to your house. Land of the free.
- 8:58I don't need to. I don't need a permit from my
- 9:00solar. Come on.
- 9:01It's not even legal in California yet, although there
- 9:03is a California SB 868 which will classify systems under 1200
- 9:08watts as appliances rather than power plants.
- 9:10So you don't need any interconnection agreements.
- 9:11You don't know it's going to get utility fees.
- 9:13You get good protections for renters who want to use this
- 9:15stuff, sure. Pretty cool it doesn't back feed
- 9:17the system in case there's an outage.
- 9:19The plugs prongs go dead the instant you pull them out of the
- 9:21wall, but it contributes to the amount of electricity that you
- 9:24that's cool out of the air off the sun there.
- 9:26Is a reason that we have the plug and receptacle system
- 9:29because the thing that provides power is not supposed to be
- 9:32exposed, which is the receptacle side yeah so when you start
- 9:34providing power on a plug, I do get a little nervous you.
- 9:37Unplug it and it drops dead. Yeah.
- 9:38It's really, I mean, that's. Nicely engineered, yeah.
- 9:40Anyway, I'm sure these work. Great, don't touch the prongs.
- 9:42Like a 9 Volt battery. Don't lick it to see if it's.
- 9:44On exactly. Anyway, pretty cool.
- 9:46That's gonna be a fun thing to watch.
- 9:47You can't wait to see if California's SB-868 passes and
- 9:51we can actually use these things in California.
- 9:53More solar. I'm I'm a fan, so I'll be using
- 9:55this next week is a lot of a lot of solar to keep our stuff
- 9:57charged. Yeah.
- 9:58Lovely. Let's get to our headlines,
- 10:00shall we? Let's do it.
- 10:01Yeah, yeah, for sure. Dopamine defeat.
- 10:02How a California jury pierced Section 230 immunity.
- 10:05The invincible armor of Big Tech just cracked.
- 10:08In a landmark decision this month, the Los Angeles jury
- 10:10found Meta and YouTube liable for the negligent design of
- 10:13their platform forms, awarding $3,000,000 to a young woman who
- 10:15claimed their features fueled A destructive childhood addiction.
- 10:18This wasn't about bad content, it was about the mechanics of
- 10:21the hook. The plaintiff targeted specific
- 10:23features, infinite scroll, autoplay, and push
- 10:25notifications, ruling the company's knowingly engineered
- 10:27dopamine loops that prioritize engagement over minor safety.
- 10:31With Meta assigned 70% of the blame, the verdict bypasses the
- 10:34traditional Section 230 protections by focusing on
- 10:36product liability rather than speech.
- 10:38As the first of over 1600 bellwether cases, this loss
- 10:42signals a massive legal shift. The algorithm is now a target.
- 10:46I mean, if we're going to to focus on awarding money to
- 10:49people who had destructive childhood addictions, yes.
- 10:51Holy crap. Like whoever owns that Barney IP
- 10:54better sell it as soon as they can.
- 10:57I don't know what's coming for them.
- 10:59This is this is super interesting to me.
- 11:03This was. It's also odd to me that this
- 11:05case was Meta and YouTube 2 completely separate companies.
- 11:09Why? Why?
- 11:09It just seemed odd to me. YouTube argued we are not social
- 11:12media and and the the jury said no, you've got infinite scroll,
- 11:16you've got these same things too.
- 11:17They were not targeting the content, yeah, which 2:30 would
- 11:20protect. They were targeting the actual
- 11:22design of the system and you understand the same design
- 11:24things. And well, and I, I would say
- 11:26that YouTube is, is certainly social media in one hand and not
- 11:30in the other. It's just different.
- 11:32I don't think infinite scroll makes it social media.
- 11:34I don't. I don't care about the name.
- 11:36No, but infinite scroll is what causes the dopamine hit.
- 11:39Yeah, that's what they were. Yeah, that's what they were
- 11:40arguing. I would say the push
- 11:41notifications, the the infinite scroll, those are the things
- 11:44that are more problematic. Yes.
- 11:45The the the label of social media.
- 11:47Who cares that doesn't yeah, it's just a label put on a
- 11:50thing. There is a decent amount of
- 11:51social content within YouTube, right?
- 11:53Not just the content itself, but comments and whatnot.
- 11:55So sure, but like, why are we splitting hairs over the name?
- 11:58The point is it created this sort of addictive loop.
- 12:00And I can I can totally buy that.
- 12:01That's a good product, right? A good product is one that keeps
- 12:03you coming well. Maybe not for minors, the.
- 12:04Question is how do you balance the safety of minors?
- 12:07And that is that is tricky. I take a view on this that is
- 12:09different and probably somewhat controversial amongst many
- 12:12folks. I think this is mainly on the
- 12:14parents. Meta tried very hard to put it
- 12:16on the. Yeah, I know.
- 12:17I understand. In the case.
- 12:18Maybe 15 years ago you could say that this wasn't as well known.
- 12:21But now, parents of young kids, now, how can you not know that
- 12:24these things are terrible for your kids?
- 12:26I agree. Do not let your kids on social
- 12:28media. That's a terrible, terrible
- 12:29thing. Yeah.
- 12:30However, there is a certain culpability that is that does I
- 12:33get these? Companies, I mean they have very
- 12:36slowly brought up some modicum of safety controls or for
- 12:41minors, I still think it is ridiculous that they don't put
- 12:44an automatic stamp on on your account when they can determine
- 12:49that you are underage. There is no doubt in my mind
- 12:52that with the profiling they can do, they know with a very high
- 12:54degree of confidence what your age is without you telling.
- 12:57Mark Zuckerberg testified himself, and he said it's very
- 13:00hard for us to know if these are kids under 13.
- 13:03It's very hard for Instagram to know if these kids are, you
- 13:05know, what age they are and all that.
- 13:07And then he also said he talked about the tweens as a valuable
- 13:10untapped audience. They are a valuable untapped
- 13:12audience. I totally appreciate that.
- 13:13I, I, I don't believe him, but you could say both of those
- 13:16things. I don't think there's a on the
- 13:17logic there. When I hear them say that, what
- 13:19I actually hear them say is we can't tell with certainty.
- 13:22And I believe that to be true. I believe you can't tell with
- 13:25100% certainty. Yeah, but such is life.
- 13:27I think you can tell in the 98th percentile.
- 13:30And by the way, the override should be pretty easy.
- 13:32They accidentally flagged my account as being underage.
- 13:34Then you go, well, OK, I'm going to upload a copy of my ID or
- 13:37some picture of the thing and away you go.
- 13:39And if I don't do that, then I just stay in wherever they've
- 13:41banished me. And that's, yeah, probably the
- 13:43best balance. I don't really want to give them
- 13:45my ID, but I think that is a reasonable trade off for keeping
- 13:49kids safe. And if I never get grouped into
- 13:51the 13 year old bucket because their algorithm is good enough I
- 13:53never to show my ID, that seems reasonable to me.
- 13:55Something like that, right? But we haven't done that.
- 13:57Instagram has deliberately engineered a system to impact
- 14:00body image and social comparison.
- 14:02I don't know about this. That was part of this
- 14:03discussion. The things that you were fed
- 14:06were to affect your view of your body and affect your view of
- 14:10your social standing. It was intentionally feeding you
- 14:13things that would would incite a reaction in you.
- 14:15They had internal company documents that showed they were
- 14:18trying to deliberately engineer body image and social comparison
- 14:22videos in the algorithm that was brought up in the.
- 14:24Case like I I wonder what that meant in practice.
- 14:27Is a great line in some internal communications that meta where
- 14:31one of the employees says, Oh my gosh, y'all IG is a drug, to
- 14:34which another responded, we're basically pushers.
- 14:37Yeah, that doesn't look so good when that goes in front of a
- 14:40jury. There are plenty of successful
- 14:41products that have said this that haven't been interpreted as
- 14:43drugs. But when you get it really right
- 14:45and you get it really good, this is what happens.
- 14:48I don't fault them. I think that is the definition
- 14:50of a good product. I think the the gates is
- 14:52Microsoft doing deals with the original equipment manufacturers
- 14:56to provide Windows at a discounted rate was a good deal,
- 14:59right? That was good for everybody.
- 15:00Everybody won there until you get of certain size and you go,
- 15:03well, now maybe it's a little bit of a monopoly, maybe now
- 15:06it's problematic. This might be more than just
- 15:09size, this may be actually things that have can affect the
- 15:12mental health of twins. For sure that's a problem.
- 15:14For sure this is not I'm I'm. Now it's like putting tar in
- 15:17cigarettes. Yes, we know it's addicting.
- 15:19Yes, we know it draws you back to the cigarettes.
- 15:21Sure. But it is causing harm.
- 15:23I, I was merely trying to, I was not trying to equate the two in
- 15:26terms of of damage. More of the rules change for you
- 15:29at some point right when you're the yeah you doing the deal with
- 15:33O ES to make sure your stuff is included that's a that's a good
- 15:37deal right that's a good deal for you and for the consumer
- 15:39they're getting a better price but at some point when you're 85
- 15:41or 95% market share that's no longer a good deal for for the
- 15:45masses that's just a good deal for you yeah, I would think here
- 15:48what I'm trying to say is showing people content that they
- 15:51want to see is good that's probably what you want it makes
- 15:54the product sticky and provide. Impelling content isn't harming.
- 15:57Them Well, that's the thing. How do you know if people
- 15:58respond to harmful content and all you're doing is putting
- 16:02looking at the signal of what they respond to, you're going to
- 16:04show them more of it. So I on a, on a very naive
- 16:06algorithm, sure, that makes sense.
- 16:08But at some point you've done so much of this, much like in the
- 16:11the monopoly case with Microsoft, you go, oh, you have
- 16:13a higher standard now you have to meet and whatever that is,
- 16:16right, filtering out content that is harmful, even if it's
- 16:18what people want to see, especially for kids.
- 16:20And I feel like that's really where it it appears that Meta
- 16:24kept their head in the sand for years, if not like a decade over
- 16:28this. I don't think their head was in
- 16:29the sand. I think they knew what they
- 16:31were. I'm not saying they didn't know
- 16:32what they're doing, I'm saying they they kept having said on on
- 16:34a solution. They didn't provide a solution
- 16:36for this. Right, 'cause it was beneficial
- 16:37to them to not. Provide a solution.
- 16:39Of course, now it it appears they have provided a solution.
- 16:42I've seen a lot of advertisement around their their current kid
- 16:45and teen product, but that's only been of the past year or
- 16:47two. And I think with this case
- 16:49exemplifies is that the damage has already been done.
- 16:52I have no idea what this future is going to look like.
- 16:53Are we really going to litigate this same case 2000 times in
- 16:56court? Yes, we are.
- 16:57I don't know, I I. Stand by.
- 16:59This is a bellwether ruling. This opens the door and the
- 17:02approach of this, because it's not coming after 2:30 content,
- 17:05was really novel. Yeah, of course you.
- 17:07Product liability, the fact that they were coming up, coming
- 17:10after the dopamine loop, yeah, was so different.
- 17:12But but just pure purely from an efficiency perspective, it does
- 17:15not seem sensical to bog down our legal system with 2000 of
- 17:19the same case, right? That's why we have class action
- 17:22lawsuits. I'm not saying that's the way
- 17:24that it should go, but it seems really non efficient and
- 17:26nonsensical to to litigate the same case a couple 1000 times.
- 17:30It's really up to those who bring the suit.
- 17:31Of course, but at some point when you're like.
- 17:33They get their day in court. I understand that, but it just
- 17:35seems not efficient, not good for our legal system.
- 17:38Don't do the crime if you can't do the time I'm.
- 17:40Not saying that I'm not saying there shouldn't be culpability
- 17:42and and liability. That's not my point at all.
- 17:44But they just have like here's case number 643 that has the
- 17:48same arguments. Oh, it's going.
- 17:49To be a lot of, it's just going to be a lot of these.
- 17:50What's the? Solution.
- 17:51What do you what do you do in that case?
- 17:52It just doesn't seem optimal. Those lawyers, you need
- 17:55something to do before they get replaced by the humanoid robots.
- 17:57The Trojan horse in your AI How a nearly ubiquitous Python file
- 18:01might be a secret hacker. The Light LLM supply chain
- 18:03attack is a digital house fire that starts in the basement.
- 18:06Most people don't use Light LLM directly, but the apps they rely
- 18:10on for banking, healthcare, or productivity often do.
- 18:13By poisoning the single piece of code, the team PCP hackers
- 18:16turned a trusted bridge into a silent data site.
- 18:19When developers updated their systems, the compromise library
- 18:22began stealing sensitive API keys and environment variables.
- 18:26This is how secure apps suddenly leak private data or lose
- 18:29control of their AI features. It proves that even if your
- 18:31password is strong, a single corrupted building block in the
- 18:34software supply chain can compromise your digital.
- 18:37Life, you haven't made this scary enough now.
- 18:39This is. Petrifying.
- 18:41Oh, sure, sure, sure. As a lifelong software
- 18:43developer, I read this story and I was like, oh man.
- 18:47My my first reaction was, I'm surprised it's taken this long
- 18:51for there to be something this bad that's happened.
- 18:53We've seen these before. This is not the first time sure
- 18:55effectively to to try to simplify it, there is a a
- 18:59package that is used by many pieces of software that helps
- 19:03integrate your interface to LLMS.
- 19:05So it's it's for developers. No consumer would ever use this
- 19:08package. They do.
- 19:09They're using it. They just don't know that.
- 19:10You would never use it directly. You would never go out.
- 19:12No, again, no consumer would go out and use this package
- 19:15directly. You would use software that uses
- 19:17something, right, that uses this, and that's the way that
- 19:20it's been implemented. So even from a developer
- 19:21perspective, many developers were not using this package
- 19:24directly. They were using some other thing
- 19:27that then had this behind it. And that's the trust chain that
- 19:30got broken. The way it was done was pretty
- 19:32amazing. I mean this, this package, by
- 19:34the way, normally gets about 95,000,000 downloads per month.
- 19:38Yeah, it is one of the more popular packages.
- 19:40It's used by everybody. Yeah.
- 19:42And and again, it's open source, like everything's open.
- 19:44This isn't a closed thing. This is something that we we
- 19:47should have been able to see what happened was mildly
- 19:50fascinating. It appears they got the the
- 19:52hackers got control of one of the developers machines, grabbed
- 19:55their keys and then slowly injected themselves into
- 19:59different parts of the chain. Sure they didn't actually change
- 20:01the source code from what I understand, they just injected a
- 20:04binary that had this bad payload in it into the build stream,
- 20:08which is really insane. And what it searched for and
- 20:11what it stole was exactly what you said all of your your keys,
- 20:14your API keys, your variables, crypto wallets.
- 20:17It would just. I mean, it was actually somewhat
- 20:18trivial when you look at the code.
- 20:19It was just going through your machine trying to pull all these
- 20:21well known files off a a developer's machine is really
- 20:24the intent, right? This is for the developer.
- 20:26And the part that's even more nuts to me is that you did not
- 20:29have to instantiate the code for this to happen.
- 20:31Just the update of the code was enough for it to run this
- 20:33payload. So you just running an update
- 20:35was enough to to trigger this. That is really not good.
- 20:39Not just from the the people who are at risk.
- 20:40The developers are at risk. Like now you have to go.
- 20:42You have to rotate all of those keys.
- 20:44Yeah, if you were exposed to this.
- 20:45Yeah, that's a lot of time, right?
- 20:47It's like a lot of effort that just got sucked out of the
- 20:49system. Fortunately, I suspect they're
- 20:50gonna be more of these. I don't know what the fix for
- 20:53this particular problem is gonna be, because even if you had a
- 20:56trusted signature, that would not have worked here.
- 20:59But you'd have to have shared trusted signature, maybe across
- 21:01multiple machines. But then you just need to
- 21:02compromise multiple machines like it's a cat and mouse game
- 21:04that's gonna. Continue.
- 21:05You're gonna have an AI agent that you send to go look at the
- 21:08code. Yeah, for you.
- 21:09That's the. Yeah, and you're gonna say check
- 21:11and make sure it doesn't do blah blah blah blah blah blah.
- 21:13And that list is gonna get enormously long as more of this
- 21:17cat and mouse game plays out. I'll tell somebody that's
- 21:19somebody just injects into your AI check, you know linter.
- 21:22Yeah, it's possible. Again, cat and mouse game, but
- 21:24how fast? Did they catch it?
- 21:25How long was this out out in the wild before somebody went wait a
- 21:28minute? If I understand correctly, the
- 21:31the way we caught it, we as a community caught it was because
- 21:34someone's machine, the software was taking too long.
- 21:37This is the thing that that was the Microsoft guy who discovered
- 21:40the SSH flaw in in Linux, and it was like his machine took
- 21:44literally a half second. He noticed, yeah, there's, it
- 21:47seemed to take an extra half second to do something that he'd
- 21:50done many, many times. And he went, Something's wrong
- 21:51here. Yeah, in that case, that dude
- 21:53was insanely meticulous. Yeah, and that's why we caught
- 21:57it. Like if if that human didn't
- 21:59exist and in that time at that place, that thing would probably
- 22:02still be deployed. Nah, somebody was.
- 22:03Somebody would have caught it. People notice those things.
- 22:05Sure, but that one was hard. Especially in the developer
- 22:08community, you care about a half second.
- 22:09This one was not nearly that tight, but people saw, I think
- 22:13what they saw CPU usage spike and they're like, well, why is
- 22:15that happening here? This shouldn't be happening.
- 22:17Yeah. And they dug it in like, what is
- 22:18this payload? And they're like, oh, this is
- 22:19bad. Yeah.
- 22:20And the payload was injected again.
- 22:21It wasn't in source code. It was injected as I think it
- 22:24was like 2 base 64 encoded strings and then executed some
- 22:28code. So it was like, you know, kind
- 22:29of hidden, not well, but sort of hidden, sure, in in the payload
- 22:33that was in there. But it just bananas.
- 22:34Like it shows how at risk we still are in this this lovely
- 22:39global community of software that we have.
- 22:40There's still real risk in there.
- 22:42Kind of a bummer there is risk, but.
- 22:43Both the Microsoft guy who discovered the extra half second
- 22:46and the whoever figured this out.
- 22:47Yeah, both of them. I'm impressed, yeah, at how
- 22:49quickly we came across oh, there's problems here.
- 22:52It does. Work so part of the guidance on
- 22:54this that I man I struggle endorsing but I think you sort
- 22:57of have to endorse is to pin all your versions and only upgrade
- 23:00your versions of your libraries on a 1 by 1 basis that's a lot
- 23:04of time to go into each one yeah I think the advantage of pinning
- 23:07and I think you're you're going to see I think you're likely
- 23:09going to see the software adopt this is just don't don't
- 23:12automatically to the latest I think you're gonna want some
- 23:15like but somebody. Has to somebody has what I mean.
- 23:18Out you're gonna have. This works.
- 23:19This doesn't. I think, I think that's the
- 23:21future because right now most package managers, the way they
- 23:23work is you can either pin to a version or use the latest.
- 23:26Yeah, that's basically it. Maybe you can put in a cap and
- 23:28say don't go past this minor version or whatever, but that's
- 23:30it. There's no concept of tears of
- 23:32acceptability. That might be the next thing we
- 23:34have to introduce is where you say, hey, you're going to be on
- 23:37the, it's not the, the release candidate list, but it's like,
- 23:40I'm gonna audition this set of package images and use them.
- 23:43And then once it's done, I'll, I, I as part of the community,
- 23:461000 of us, yeah, will confirm that it's good.
- 23:48And then the masses can take it. Something like that.
- 23:50And as developers who might need to say, OK, I'm going to take on
- 23:52these five, These are just going to be the five that I'm going to
- 23:55confirm. And if enough developers do that
- 23:57on different packages, you could get there.
- 23:58As long as we've got a good Internet connection, everything
- 24:00will be fine. US blacklists all new foreign
- 24:04consumer routers. Aw.
- 24:06Come on man. The US government is pulling the
- 24:09plug on foreign made routers and is sweeping national security
- 24:12move. The FCC has banned the import of
- 24:14new consumer grade routers manufactured abroad, citing
- 24:17unacceptable risks. Officials warn that these
- 24:20devices provide back doors for state sponsored hackers.
- 24:23Foreign made hardware was directly implicated in the Volt
- 24:26Typhoon, in the Salt Typhoon cyberattacks which targeted
- 24:29American power, water and communications, according to the
- 24:32FCC, his official national security determination this
- 24:34month. Consumer grade hardware was
- 24:36directly implicated in the Volt Typhoon, Salt Typhoon and Flax
- 24:40Typhoon cyberattacks. Do we believe anything this FCC
- 24:43says? Well, OK.
- 24:44They don't have a great track record of credibility.
- 24:46The ban is a massive shock to the tech industry as nearly all
- 24:49consumer routers are currently designed or assembled overseas.
- 24:52While your current home router remains legal, future models
- 24:54must be American made or pass rigorous security vetting by the
- 24:58Pentagon. It's a bold high stakes play to
- 25:00re secure the digital supply chain and bring high tech
- 25:02manufacturing back to US soil. This is somewhat fascinating the
- 25:06the typhoons that you mentioned there.
- 25:08Why? Why are we only named these with
- 25:09typhoons is is beyond me, but it kind of makes sense because
- 25:11those were all bot Nets from consumer grade and Soho grade.
- 25:15Gear, but then you just switch your botnet over to a different
- 25:17type of gear. Are you going to ban all
- 25:19foreign, well electronics period?
- 25:21I mean, you're going to be anything that connects to the
- 25:23Internet can become a botnet if you have a sinister
- 25:25manufacturer. First let's talk about the ban
- 25:27that was put in place. They literally banned all
- 25:29foreign made consumer grade routers for consumers only for
- 25:32consumer grade gear, which is literally all of them.
- 25:35They're still allowed to be part of the bot.
- 25:37This is. Only new devices, devices that
- 25:39were previously approved, which basically means anything that
- 25:42got an FCC stamp, they're still allowed to be part of the
- 25:44botnet. Those are OK.
- 25:45But going forward, if you have a new device that you want to sell
- 25:48in the US, you have to get the FCC's clearance on, right.
- 25:50I looked at what the vetting is and it actually, to be honest,
- 25:53it doesn't seem like it's enough.
- 25:55It seems like it's a little bit. You got to show ownership.
- 25:57You got to show who owns the whole like custody chain of the
- 26:00ownership of the corporation, right?
- 26:01That's good. I actually think that's a good
- 26:03start and that's something we should probably have you do.
- 26:05So I like that, but I didn't see anything about code audits or
- 26:08any sort of of code Espro. There's nothing on those ends.
- 26:12And what I would have liked to have seen is a solution, an
- 26:15alternate solution put in place. This could have been a great
- 26:17time for us to just buy or, or or push manufacturers to sell
- 26:20multi Nic, basically dumb computers, simple interfaces and
- 26:24then use open source software, right?
- 26:25PF Sense is open source and is lovely.
- 26:27Let's just move to that. There are so many great open
- 26:29source solutions, this should not be a problem in 2026.
- 26:32You could buy a $50 multi Nic device from Best Buy and have
- 26:36the Geek Squad kids flash it in 15 minutes for 30 bucks and have
- 26:40a great solution that's open source and more secure than
- 26:43anything we're going to get out of this.
- 26:44Like that should be the path. The path should be that
- 26:46consumers just don't care so you're going to have to force it
- 26:48upon them. I don't see consumers caring
- 26:50about this. We'll.
- 26:51Do our part. We'll put the link in the show
- 26:52notes to the PF Sense router. This is a router you want.
- 26:56This is a router that is running open source software.
- 26:59Do the world a favor, get the PF Sense router next time you need
- 27:03a router. And it's, it's turnkey like
- 27:05again, you don't have to like have to do anything be monkeying
- 27:07around with, right? With SSH, you just install this
- 27:09thing out-of-the-box and away you go.
- 27:11OK, enough with the headlines. In fact, enough with the
- 27:13episode. We have to get out of here.
- 27:15Special thanks to our floor director, Jack Little.
- 27:17Thanks, Jack. Jack.
- 27:18We'll be back later this week with our big story.
- 27:20More morks, fewer mindies. Where are all the aliens?
- 27:23Until then, thank you for listening to all this nonsense.
- 27:25I'm Jeff Parker. I'm CJ Little.
- 27:27Nanoo, Nanoo. That's what I was going to say.
- 27:29I was going to say Nanoo, Nanoo. You said Nanoo.
- 27:31Nanoo, what do I say? Hey, shawl Spot.
- 27:46With Sony's Betamax SL 8600 video recorder, you can see any
- 27:50TV show you want, Jeff, anytime you want to see it.
- 27:53I love that the Betamax, which plugs into any TV set and is
- 27:57easy to operate, can videotape a show for up to three hours long
- 28:01using the L750 video cassettes. I know, you're excited, aren't
- 28:04you? Get out by setting the easy to
- 28:06use electronic timer. The Betamax works while you're
- 28:09doing something else, even while you're out of the house.
- 28:12It can also videotape something off of 1 channel while you're
- 28:14watching something on another. This is sorcery.
- 28:17It's. Like we live in the future.
- 28:19And remember, Sony has more experience in video recorders
- 28:22than anyone over 20 years of videotape experience.
- 28:27In fact, Sony sold more video recorders to broadcasters in
- 28:30industry than any other consumer manufacturer.
- 28:33They even make their own tape. They do so for years.
- 28:36You've watched TV shows at the times you've had to.
- 28:39Now you can watch them at the times you.
- 28:41Want. It's about time.
- 28:43It's a total game changer. The Sony Betamax SL80650 two
- 28:48$100 at an electronics retailer near you.
- 28:50Please tell me you. Adjusted that price for the
- 28:53current dollars. That is current price.
- 28:56I'm always going to give you these numbers and current price,
- 28:58$5200 to put ATV show onto videotape.
- 29:02Wow. Now I know you know the Betamax
- 29:05story. I kind of picked this one kind
- 29:07of sort of on purpose. Yes, Sir.
- 29:08And I suspect I know you're going to be in the in the
- 29:11ballpark, sure, But there's a couple of tidbits about this
- 29:13thing that are really interesting.
- 29:14I want you to guess the year first and then I want to tell
- 29:16something interesting tidbit that's.
- 29:17Hard. Let me see, I was probably I
- 29:19wasn't even driving and our friends, my friend Kurt's family
- 29:22got a beta machine. So my guess has to be maybe
- 29:271978. Oh, you're very, very, very
- 29:31close. The let me give you some hints.
- 29:33The top single of the year was my Sharona from the neck.
- 29:38Does that help any K? No, but I've met Sirona.
- 29:40Also in the top, Oh, that's cool.
- 29:42Also in the top ten were two singles from Donna Summer, one
- 29:45from Rod Stewart, Gloria Gaynor and the Village People.
- 29:48Does that help any? No 1979.
- 29:50Oh wow, I was close. I was now.
- 29:51This was the first Betamax with a built in digital clock.
- 29:54Yeah, it had a wired pause control, which I find
- 29:57hysterical. The biggest problem with it
- 29:59though, from a product perspective, was that it handled
- 30:01the new what they called the X2 speed the the faster.
- 30:05Slower. I'm sorry, the slower.
- 30:06Record speed at less resolution right?
- 30:08The Betamax had better quality than the VHS, the competitor at
- 30:11the time, but only 60 HS could. Record longer, yeah.
- 30:14So they did this slower, so they dropped lines of resolution to
- 30:17get a longer tape, which basically negated any sort of
- 30:20technical improvement value that it had over the VHS.
- 30:23Picture quality advantage. But I didn't know this.
- 30:25This 8600 apparently could not play previous beta one tapes.
- 30:29Wasn't backward compatible. Wow.
- 30:31So it just sort of existed in its own little universe.
- 30:33Oh, that's terrible. So that.
- 30:34Kind of blew my mind. But this is the thing that
- 30:36really blew my mind. Despite losing the format war,
- 30:39Sony continued to make Betamax recorders until August of 2002.
- 30:44Oh, wow. I didn't know that.
- 30:45And they sold blank beta cassettes until March of 2016.
- 30:49Yeah. Which was really the end of its
- 30:51sort of commercial lifespan. Yeah.
- 30:52And this thing. I'll put a link in the show
- 30:53notes. I just.
- 30:54I loved when electronics looked like a piece of furniture.
- 30:57And this was still huge. It had, like, wood siding on it
- 31:00or whatever. Yeah.
- 31:00Sticker like, sort of like the, you know, the Atari flashback of
- 31:03the time. Kurt's families had wood siding
- 31:05on. This thing was massive, yeah.
- 31:06Yep, I remember that 11. $150.00 in 1979 dollars, which is about
- 31:12$5200 today. Just to think about that from a
- 31:15television perspective, like you had your TV and then you had
- 31:18this thing so that you could record television, like that was
- 31:20your entertainment destination. The Sony Betamax SL8061979, love
- 31:27it.