NC_2026_08_30

Hi, this is Allison Sheridan of the Nosiliccast podcast hosted at podfeat.com, a technology geek podcast with an ever so slight Apple bias. Today is Sunday, August 30th, 2026, and this is show number 1,112. Well, as you probably know, Apple has scheduled their next announcement event for Wednesday, September 9th at 10:00 a.m. Pacific time. That's a Wednesday this year because it's the week of Labor Day, and we always get Mondays off on the in the US for that. So, it shifted it out to Wednesday. I bring all of this up to invite you to join other Nosilla Castaways to text chat about the event live while it's happening. The most important thing to know is that as always, Steve and I will not be talking in voice during the announcement. We'll be chatting with everybody else in text. In order to join us, you can join our Discord channel at podfey.com/hat at 10:00 a.m. on the 9th of September. As you also might know, Steve and I traveled to Spain recently to see a total eclipse of the sun. This was our fifth total eclipse. Plus, we saw one annular eclipse. Witnessing totality is something absolutely magical, indescribable, really. And this one did not disappoint. In fact, I don't know about Steve, but I think this was my favorite one so far. I actually cried a little bit. Just a little tear in the eye. It was so emotional. Now, Steve loves to record and edit videos of eclipses, and he outdid it this time. The techniques that he used to create this are so interesting, I'm going to subject him to an interview about how he captured the eclipse with four cameras, a bunch of mics, stitching it all together at a later date. It's really, really impressive. But the important thing about his final video, as Bart says, is that he told a story with a twominute video. It's not just the eclipse. It's how he spliced in the audience's reactions that make this such a compelling video. And again, it's only two minutes long. I put a link in the show notes to his video on YouTube, and I highly recommend you go spend those whole 2 minutes experiencing that Eclipse with us. Bart wrote an extensive story about how to build a JavaScript command line interface with Node.js, and he called this Tidbit 19 of Programming by Stealth. Now, it's a little confusing because tidbits aren't necessarily small. And in fact, this one is so big, it's actually going to be a three-parter. In part B, recorded yesterday and published to the podcast feed, Bart walks us through the architecture of his Linkifier module. This is how he creates all of the links you see in Security Bits and Let's Talk Apple. He starts with the three data modeling classes that he's been using for decades, but he explains how hard it is today to extract article headlines, which is the end goal to go with the links. He walks through how he developed his extraction logic, but then had to do it per domain. It sounds crazy, but he uses surprisingly few sites for his articles for security bits and let's talk Apple. You can find Programming by Stealth Tidbit 19B in your podcast of choice, or you can follow the link in the show notes to listen along as you read it at pbs.bafiser.net. Again, we've recorded parts A and B, but not part C, and he's noted it in the show notes exactly where we stopped, so you can keep up. All right, it's time to hand the microphone over to the dulsa tones of Alistister Jinx. On episode 1009, Allison spoke about her addiction to AI vibe coding. She mentioned many of her friends were also doing the same. I am one of those friends and this is the story of my experience. First, a little background. I have been a programmer for around 45 years. I have done it for fun that entire time and around 6 years after I started at age 12, my skills were good enough that it got me my first job. That job was the only time I have had programmer in my job title, but I have been coding as a working tool ever since. In my personal life, I've made various hobby projects over many years. From building a photo database with its own sector level floppy disc format to hand coding my first website in HTML, then converting it to use XML and XSLT and eventually writing my first iPhone app. In short, I know how to code. My first iPhone app was built in my Christmas break at the end of 2014. It was very, very simple, but I felt a great sense of accomplishment. I'd had to learn Objective C, but that wasn't the hardest part. No, the hardest part was the API. Actually, the hardest part was the App Store submission process, but that doesn't serve this narrative. When I started programming, it was entirely practical to learn everything about the computer you were using. today that is an impossibility. I have no doubt that there is not a single person, perhaps not even a group of a dozen people inside Apple who have a true working knowledge of all of iOS. That has nothing to do with today's Swift language, which does have its own mysteries, but everything to do with the enormous number of possible API calls that exist, and the stratospheric number of permutations of those. The greatest invention of Steve Jobs's second act company, Next, was Nextstep, a library of building blocks that developers could use to quickly build applications without having to know everything about the computer. It was revolutionary at the time and very successful. The technology, not the company. Those building blocks are what we call APIs, application programming interfaces. Next step was the foundation of Mac OS 10 and since iOS. I shudder to think how much it has grown since the beginning. There are a bewildering number of APIs and in many cases several ways to do essentially the same thing. This would be a minefield of documentation to wade through, but it's not even that easy because much of the documentation is missing or in some cases may as well be. With comprehensive documentation, the Mac OS and iOS ecosystem would be an excellent platform for the working developer. The working developer, I chose that word carefully. For we hobbyist developers, the task is effectively magnitudes larger. Both because we have less time to devote to learning, but also because we spend less time repeating tasks to cement the learning. As I mentioned, I can code and I have a knowledge of Swift and Swift UI, but my mastery of those languages is well, not mastery at all. Swift UI is an incredible technology, but it is still really in its formative years. Many things are simply not possible and many things will only work if you construct them just so. Swift UI only takes care of the user interface and interaction. Inevitably, you will have to write some swift to create the logic of your application. Swift has its own foibless. It is a strongly typed language which means you cannot for instance multiply a floatingoint number by an integer. You have to turn one into the other first. You have to be explicit about everything. The upside of this strictness is that compiled code is highly unlikely to crash. The downside is that your code is highly unlikely to compile. The internet is a wash with so-called tutorials, but they are more accurately examples. The only thing they teach is how to achieve the example. It's like if I taught you how to boil an egg. You know how to boil an egg. Maybe you'll manage an egg salad, but it's not going to turn you into a cook, let alone a chef. I paid for a quite comprehensive developer course that includes far more than just code and API usage. Again, however, the investment of time required is simply enormous. It is a superb resource and I have taken learnings from it, but I don't have the time to make the most of it. It's just as well I am happy for having supported the developer who created it. What I wished for for many years was an experienced companion who could guide me. I'm usually okay if I get a good steer on a problem. I can go down the rabbit hole and often come out with a rabbit. The trouble is I'm standing in a very large field with overgrown grass. I have trouble not only in choosing which hole to go down, but also finding them in the first place. And so we come to the use of AI. Much has been said about how AI will write code for you. If you're not a coder, that's an obvious value. The vastly bigger value, however, lies in its ability to autonomously scale that field for holes and go down every one of them until it emerges from the correct one with the perfect rabbit. Well, mostly. My coding companion is Claude from Anthropic. I started out using the free plan, which was absolutely fine and got me a lot of the way to my first goal, but sometimes when you're in the flow and you run out of tokens or time, it can be frustrating. I now subscribe to the lowest of the paid plans. I still run out of time often, but I get a lot more done in a session. That first very simple app I wrote a decade ago was on the App Store for free. It was so simple I wouldn't have felt right charging even pennies for it. It also became irrelevant pretty quickly. About a year later, I created another simple app. Both of these apps were built to solve a problem I had. This leads me to my third app. Well, my third app idea. This one included some fairly complicated maths and geometry. I managed to build a working prototype that got all that clever stuff working well, but the UI was uh terrible. I struggled with how to create what I thought would be a better user experience because what I wanted was not possible with standard controls. I hit that barrier of not knowing where all the rabbit holes were. Eventually, I just stopped trying. Some years later, I got the energy to try again. This time I decided to start with the interface. The technology had moved on and it was more achievable, though only with countless hours spent scouring the internet for many relevant examples I could try to leverage. I eventually got the interface close to what I thought it should be. I then set about integrating the old code to do the maths and I got stuck again. This time I was struggling with how to structure the application such that the relevant information could be passed back and forth between the interface and the maths logic. I got so stuck I again eventually stopped trying. And so we come to 2026, 12 years after that first attempt. I had heard enough positive stories that spurred me to give Claude a try. I decided that I would let Claude do all of the work. I would not give it any of my existing code to use. I started with what I thought was a fairly complete description of what I wanted to achieve, although I did deliberately leave out some of the more advanced concepts it would eventually need. Imagine my delight when it produced at the first attempt a working project that was a possible representation of what I had in mind. But immediately there were things that needed to be corrected. Some of the corrections were things I got wrong, but more were things I simply hadn't defined. The further I went, the more needed refining. And this is a key point. I was using my skills as a developer, having thought about design and behavior to instruct the AI to build things the right way. I said just now that I left out some bits of the initial prompt that was done in the expectation that their absence would not fundamentally alter the required architecture. As I continued on, I suggested or in some cases demanded certain implementation details. For some others, I explicitly said I did not know how it should be implemented and Claude would either use and describe to me a best practice or give me two or three options with a rundown of their relative merits with the final decision left to me. This is in a very real sense development. While purists might decry that the machine is doing all the work, it is likely that the first users of compilers had their detractors among those who still used machine code. In the end, it's just another level of tools to make use of, and if you know what you're doing, it lifts you up. I have looked at some of the code Claude has generated where I did, it seemed to make sense. It didn't look horrible. I don't know if its technical architecture would be considered sound by those in the know. I do know that the fundamental architecture was a topic of discussion throughout the exercise. I did tell you I was a developer, right? I know what architecture is and I know how to use and misuse it mostly. Speaking of topics in the conversation, at one point I did a bit of a review of what I had said to the AI. This was at iteration 54 where I had a perfectly functional fullyfeatured app. These numbers don't add up as not every prompt I gave covered a single topic. I would sometimes say fix this and add that. in 54 prompts. 10 were about functional change to the app, 10 were about design issues, 29 were addressing functional issues, and 11 were related to compiler errors. The most important number in that list was the 29 functional issues. These were what building the app was all about. It needed to look and feel intuitive and to accurately represent the information the app was all about. These could be anything from the size of a button to what happens when a setting is changed that invalidates another. At around this build, I engaged a small number of trusted outside testers. This resulted in feedback which in turn resulted in a further 17 iterations on the app with a similar mix of purposes bringing the final total to 71. This was the version I submitted to the app store. During this external testing phase, I had some spare time while waiting on app review and tester feedback and by this time I was paying for Claude. So I started another project. The second app was a Mac app and the process followed largely the same path. The main difference was that my initial prompt was far more descriptive. I had become better at thinking of what I needed to define. It was while developing the second project that I realized something. The issues I spent the longest time addressing with Claude were exactly the types of issues I know I would have spent a lot of time addressing if I was doing everything myself. A quick aside here, there has been only one occasion in my professional life where I have truly shocked a colleague. A project manager had the tmerity to say, "It's just a file transfer." His shock came when in a slightly heated tone I described all of the variables and possible permutations of those and all the things that could go wrong in the mitigations needed to address them. I bring this up because some might also say it's just an image file and I would have a similar response particularly after this experience. My app's primary input and output is image files. Imagine if you constrained yourself to only handling JPEGs. Rotation and color space alone are problematic. Add in TIFF, HIC, and PNG, and it literally explodes in complexity. It took Claude and I over a dozen iterations to succeed on these two aspects of image handling. Along the way, a third issue was introduced and solved, too. I can tell you there were some hilariously bad intermediate results. Curiously, the second app also took exactly 71 iterations before it was ready to release to the app store. And so to a conclusion and my point in writing this piece, yes, AI can write code for you. Yes, it will do it with you know how to code or not, but I believe the biggest value of AI coding assistance is in fact not for so-called vibe coding, but as a force multiplier for developers. Claude didn't develop my two apps. I did. But I needed Claude's vastly superior experience and research skills to navigate me around that large field, finding the right holes to dive down in a short enough time frame that I didn't lose interest and walk away. Finally, if you're wondering about the two apps I have been mentioning, I'll give you a brief introduction. Focal Tiger is an iPhone and iPad app which visualizes the depth of field created by a camera and lens system at varying settings. If you're trying to figure out how to ensure a whole subject, particularly one that is close, will be sharply in focus, Focal Tiger is the tool you need. Set up your camera configuration and then play with the sliders until you see the solution working. Photo Ident is a Mac app for watermarking photos. This is not about intellectual property, but branding. No watermark will stop a determined thief stealing your image, but a tasteful watermark can let the honest viewer know who you are and how to find more of your work. For the purposes of branding, a subtle watermark tells them these things while also respecting that they want to see the photo without distraction. The trouble with subtle watermarks is that it is effectively impossible to create a single design and treatment that works on every photo in a batch. Photo Dent solves this by letting you choose and tune a watermark on each image quickly. You can find links to these apps and a couple more over at orange.n link in the show notes. If you're wondering about those other two, they were originally built by me by hand, but have subsequently been updated and enhanced with the help of Claude. I think Alistister, this might be my favorite thing that you've ever recorded. I know you've written and recorded a lot of stuff for us over the years, but the little self-deprecating humor bits you put in there and the whole bringing the rabbit theme out, that was absolutely fabulous. I love the perspective you brought to this and where you came to on vibe coding. It's really fascinating. >> Clicks, breaths, prevent first, repair second. Hi, this is Eddie Tonkcoy, the in-house nerd for everything behind the scenes on my wife Journ's character-driven queer love stories, including audiobook narration and production. This segment exists because I did the most tempting thing in the world. I tried to fix mouth noise with a tool and it did not just smooth things out. It started deleting speech. Not subtly, not maybe it is a touch softer. I mean full consonants disappearing. Occasionally if a sentence began with it, even the it would get clipped or thinned enough that it sounded like the sentence began halfway through itself. That was the moment I stopped thinking of these as cleanup tools and started thinking of them as what they really are. Pattern detectors. They do not know what a consonant is. They do not know what a word is. They do not know that this particular tiny edge is the difference between clarity and mush. They just see shapes that look like the thing they have been told to remove. And narration inconveniently is made of the same kinds of shapes. This is the key point. Tools do not understand speech. They understand shapes. A dclicker does not hear that was saliva and that was a deliberate tea. It sees transients, tiny fast spikes and edges. It assumes certain shapes are unwanted. T and K sounds have click-l like onsets. The front edge of P is a little transient. Even some sibilance has a fast leading edge that helps clarity. If you push these tools hard enough, they will absolutely remove the thing you asked for and they will quietly start taking some of the speech with it. They are not malicious. They are just blind to intent. That is why my hierarchy is simple. Prevent first, repair second. Only go heavy when it is a rescue. That transient confusion is why clean can become tiring. Speech is made of very fast informationrich events. The brain uses those edges, especially consonant onsets, to decode words effortlessly. When you overprocess transients, two things can happen. First, onsets get blunted. Words lose definition, particularly in dense passages or at higher playback speed. Second, you get low-level smearing. Not always an obvious artifact, just a slight softening that makes the listener do more work over time. On a single line, that might read as smooth. Over a few hours, it can read as tiring. Audio books are judged on fatigue. So, the goal is not perfectly clean. The goal is clean enough that nothing leaks attention while keeping the voice intact. So, I separate the three problem children. Clicks, breaths, and possives behave differently. So, I try not to treat them as one generic dirt category. Mouth clicks are the ones that make you feel personally betrayed by your own face. They're also the ones that tools love to help with, sometimes too enthusiastically. The prevention side is unglamorous. Hydrate before the session, stay physically comfortable, take tiny pauses when needed, and use the tongue position habits I talked about earlier in the series. The repair side is where discipline matters. I do not want at all making big guesses across the whole chapter. Breaths are different. Breaths are part of narration. A completely breathless track often sounds more edited than clean, like someone has vacuum- packed the human out of it. The problem is usually loudness and consistency. A few breaths jump out and steal attention. breaths get weirdly loud because the mic angle has drifted or the edit starts to sound panicked because every breath has been attacked. So I treat breaths like timing and dynamics not like dirt. Most of the time they do not need removal. They need gentle control. Pllosives are the most solvable category because they are mostly geometry. Mic position, distance, angle, and pop protection solve most pllosives before they exist. If I get regular pllosives, I do not reach for a plug-in first. I check whether I have drifted on axis or whether the pop protection and angle are doing their job. I still get the occasional low boom. That is not a crisis. It is usually one syllable and it is usually tameable without turning the whole chapter into an audio restoration project. Here is what I actually do now. Step one, gentle mouth dclick while recording. I run RX11 mouth dclick in audio hijack as I record. Very gentle. The intent is not polish. It is just to knock down little saliva ticks that would otherwise pull attention later or tempt me into heavier processing. And because I'm still slightly suspicious of anything that claims to be clever, I keep the original recording as well. And yes, I keep it gentle enough that it is not touching the edges of words. If it starts to soften consonants, it is too much. That is the line I am protecting. Step two, human judgment in logic. Once the recording is in logic, I do the boring reliable thing. Volume automation to duck the few breaths that are genuinely too loud. Automation to tame the occasional pop or boom if one got through. There usually is not much to do. That's the whole point. If I am doing loads of this, it is a sign something upstream is drifting. Step three, surgical repair only when needed. If something survives those two steps, an odd tick, a little click, a tiny mechanical noise, I mark it and open RX11. Then I use spectral repair to remove that one event invisibly. That is it. Light by default, surgical when needed. A notable absence is breath removal. I do not use breath removal modules at the moment, even surgically. Not because they are evil, but because I do not want a tool making breath decisions for narration. Breaths are phrasing. They are part of the human timing of the read. So, here's a demo. Light versus heavy on the same phrase. So, I'm going to have a short phrase with crisp consonants and at least one mouth click or little tick. Something with T, K, and P sounds works well. Take the packet, put it back. So, I'm going to have three versions of that. First one, just raw. Take the packet, put it back. Second one's going to have my normal gentle mouth dclick. Take the packet, put it back. And the third one's going to have heavy mouth dclick. Take the packet, put it back. Notice that in my example phrase, I did actually try to exaggerate things a little bit. Now, if you listen to the beginnings of words, often you'll find the T is less crisp, the K has less snap, and the whole thing starts to feel slightly processed. That is the cost. It is not always dramatic, but it is real. Over hours, those tiny losses accumulate into listener fatigue. And if you want the nerdy test, listen to what the tool thinks it is removing. If you start hearing speech-like consonant material in the removed signal, you have crossed the line. The tool is no longer just removing clicks. It is making pronunciation decisions. And I do not want it doing that for me. These are the boundaries that keep this sane. To stop this becoming an endless cleanup loop, I keep three categories, global and gentle. Very gentle mouth declick while recording. And that's it. Nothing else gets to run globally just because it might help. Spot fixes breath ducking with volume automation. Occasional pop or boom tamed with automation. Anything else gets marked and surgical rescue RX spectral repair on the specific marked event. And above all of that, one rule. If the fix makes the narration smoother but slightly less intelligible, it is not a fix. It is a trade. I only take that trade when the alternative is worse. So where does that leave us? The compact version is prevent with mic technique, keep global processing minimal, handle breaths like phrasing, mark oddities and go surgical. Avoid tools that guess too much unless it is a genuine rescue. That is the system I can live with over a whole book. It is boring, repeatable, and it protects the voice from my own impatience. Next time we move from cleanliness to craft, cadence editing in Logic, and how to make fast cuts that still feel human. If you want to know more, come and ask me over in the Slack community at podfeat.com/slack, where I and all the other lovely noil castaways enjoy friendly, positive online conversations. Feel free to message me, Eddie Toncoy, if you have any thoughts, questions, or techniques you're using. It would be nice to share ideas. You can also find our work at jerntoncoy.com where you'll find Journ's character-driven queer love stories, the audio books I produce for them, and bonus material for our subscribers. I'll be back soon to talk through some more of my workflow, but for now, happy recording and happy reading. I love what you've done with this one in particular, Eddie. And I I know I say this every time, but I really do. Um, you're going to kill me, though. All I can think about is wait a minute, maybe I should get that izotope dclick thing and put it into my audio hijack uh workflow and it's not I don't notice it on the recordings for the no siliccast or for chitchat across the pond, but for some reason it comes through that I've got a little click that I add when I'm doing recordings for Screencast Online and I sometimes I go through and I take them all out one by one. Sometimes I leave them in and poor JF Brassette has to go through and take them out one by one or he's got a filter of some sort. But now I'm thinking maybe I should just get that izotope plug in. I've tried everything. I' I'm telling you, I've done the hydrate thing. I I don't know what's causing it, but I'm glad that you found the cadence and the work that uh you know, the path that has worked for you. I sure hope that your examples came through and that aonic leveler didn't fix them. That's my one fear. If that did happen, if you guys can't tell the difference between the three different examples Eddie did, go to the blog post because I pulled those clips out completely unprocessed and it's quite significant the difference between those three. I never know until offic whether it's cleaned up a little more than it should or just enough. When I'm listening to the Matt Geek app, I often hear them call out a listener named Kiwi Graham. He is always on top of things, looking up stuff that they need or answering questions they have. I'm honored that Kiwi Graham also listens to the content from the Podfeed podcast. We've conversed several times and it's always a joy. He made me even happier recently when he went to podfey.com/donate and he bought me a whole bunch of coffee. This service is really cool. You just pick the number of coffees to buy where one cup is $5. They have defaults for three and five and then a field where you can type in any number you like. No account required. Just put in a credit card or use Apple Pay and you're done. As Kiwi Graham sent in his donation, he found the money in his couch cushions just as I'd hoped. Thanks, Kiwi Graham, for your support of the work we do here. Well, it's that time of the week again. It's time for security bits with Bart Boo Shots. And what did you say, Bart? It's only been 9 days since we recorded in Ireland. >> It has uh which meant that there wasn't too much in my inbox, but that's no bad thing because that story about those minor little escaping AI agents is still rumbling on. So, we actually have time to look at what has happened in those nine days since we last spoke. So, you know, works out. >> Okay, good. So, as as the snakes are escaping the cage full of holes, we have to keep an eye on them every every two weeks. >> Yeah. Um, okay. So, some follow-ups to things we've talked about before. We talked last time about content credentials and I briefly thought I was going to have a fun story about Microsoft doing the right thing because Microsoft Paint is embedding hidden metadata into the images it generates with AI. They're not content credentials. It's just some custom metadata Microsoft made up. Okay, it's of >> it's of an amount of value, but if you're going to change paint, paint of all things. >> Why not just do it right this time? Okay. Anyway, >> yeah. Already invented. It's right there. Just go put it in. >> Yeah. >> Yeah. Now, uh we talked last time about a problem with the APIs that power appspecific VPNs on iOS. So that does include iCloud Plus, but also tour, anything where a single app behaves like it's on a VPN, but the operating system as a whole is not connected to a VPN. And Apple fixed Safari for iCloud Plus users and nothing else, which means that the third party apps are still vulnerable, which is either a halfway house and the rest of the fix is on the way or plain old weird, >> but they've only half fixed it. >> But they have halfway. >> It wasn't a terrible leak though, right? This >> hair on fire. It wasn't hair on fire because it was in some very special circumstances it would leak your true IP which is defeating the purpose of hiding your IP but it was never breaking the encryption. So the biggest if it had broken the encryption that would have been catastrophic that would have been hair on fire but it didn't break the encryption. >> Okay. Uh, we also talked quite some time ago about Apple's plans to start having hide my email addresses be on a different domain to normal iCloud addresses. They were going to go to private.icloud.com. And the community reacted very strongly against this because well then websites could block you if you're using anonymous email. And I was like, yeah, that's a feature. Any website that won't allow an anonymous email, I don't want to be a member of. Bird Apple gave in to the community and they've abandoned those plans. So So be it. >> So does that what does that do? What what what problem were they solving again with the privateicloud.com? >> No idea. They announced a change. Now they've undone the change. >> Okay. Nothing burger. >> Yes. >> Well, there might be a burger. Not a burger we know about. >> Yeah. I thought it might have something to do with solving those security vulnerabilities in iCloud that got so much attention. Um, but apparently not cuz you know, sorry, and hide my email. You know, the the the vulnerabilities that were making the news about 2 months ago. I thought there might have been a connection because the stories broke at the same time. Maybe there was and they found an alternative fix. I don't know. Apple being Apple have just told us we plan to do this. No, we don't. That's it. In related news, if you like the idea of anonymous email addresses that are disposable and you're not an iCloud Plus user, maybe you're not even an Apple user, uh, but you do pay for the Brave browser, you may have them from Brave instead. Those are also easily blockable though because they are at brave.com which is a fun domain name. Having a brave alias sounds fun. I should like Ragnarok the terrible or something at brave alias.com. But anyway, you know any um Nilla Castaway Yope yet again shared some fun news with me. So, we talked last time about ad blocking being added to was it S? No, Firefox by default. That was it. Firefox. And Yep. let us know that Fritzbox, which is a router manufactured in Europe by a German company and sold to they're they're not sold everywhere in Europe, but they're sold in Northern Europe and the UK and Ireland. And the tech community loved them as much as uh nerds love ubiquity. and they do really fun stuff with the routters. And now their routters have built-in ad blocking at the router level >> if you turn it on. So, it's a standard feature of the router now, >> which is way easier to do than to install ad blockers in all of your devices and stuff. Just have it on the network. So, I thought that was nice. >> And I keep on hearing the guys on Tech45 talk about how great Fritzbox is. So it would appear that if you live in a country that sell Fritzbox, it's a really good option. So it's kind of half an excuse to recommend you consider Fritzbox if it's available for you. >> So two things. Is Tech45 a podcast? >> It is a Dutch language tech podcast that I have loved. It's where I met Stfan Lass who I think was an Oscill castaway at some stage. Yeah. >> Oh yeah, we've met Stefan. We met up with him in um Belgium when we met with Nightwise. He's the one who showed up the night before we were leaving on a plane with a giant basket. And by giant, I mean like 3 feet in diameter basket of hand selected beers and a giant glass goblet from one of the breweries. I successfully got it home without breaking any of them, though. >> Yay. >> Yeah, he's a great guy. We bet him at Macworld, too. >> That's very plausible. He also does uh his main podcasting thing these days isn't Tech45, but whiskey with friends. So, he could have cost you as much money as as myself and my darling beloved did by putting you on to Middleton. >> Uh yeah. Well, and I do remember him drinking whiskey when he was with us. And he's also in our little uh we have a little EV chat group on Telegram. He's in there, too. So, he's all over the place. >> Okay. Oh, yeah. He's an EV driver. Yeah. Well, the other things I wanted to just point out Fritzbox has an exclamation point between Fritz and box if you're looking for it. >> Yes. And it's all caps shouting Fritz box. And this is sort of we don't have an actual listener question, but mentioning YOP is my way of saying, hey, remember if you have any questions, if you go to the Podfeat Slack at podfeat.com/slack and you post in the security bits channel, you can have your question put to me and if it makes sense, I will answer it here in this bit. >> Yeah. >> Right. So, a deep dive. I guess it's part two of the last deep dive we did. So, we have some more details about all of these escaping AI agents. And by far the biggest piece of new information is that OpenAI released a detailed technical report on what happened with the hugging face hack. They had promised us this was coming and to be honest, they do deserve credit for this being a very thorough report. They have not hidden stuff. So, that's commendable. I have not read the whole report because it's very long and very detailed. I have however read four different summaries of the report and have a pretty good understanding of what it says. And so what I've done is I have pulled little pieces of important information from those four summaries to tell you the story in a sensible order but without paraphrasing it because there's too much stuff here that I could paraphrase wrong and be not quite correct. So, we're going to jump between Cyber Insider, the hacker news, the Mac Observer, OpenAI themselves, and Bleeping Computer for these for this description of what happened. So, OpenAI has published a detailed post-mortem of July's hooking face breach, revealing that its AI agents did far more than escape a cyber security sandbox. The models created an unauthorized communication network, shared exploits and credentials, coordinated attacks across separate evaluation runs, and ultimately compromised both hugging face and parts of open AI's own research infrastructure. >> Okay. Is that beyond what we knew before? >> Yes. the problem >> the communication network in particular >> the communication network is one of the two in particulars so they established a secret back channel that they were using and they weren't just using it within one test they had actually been coordinating activities between different test runs so this communication channel was acting as a memory between test runs so open and I thought they were doing separate test runs But the AI agents were basically remembering what they had been doing before and picking up where they left off. So that's kind of impressive, very and terrifying. So continuing, the models began dividing work among themselves uh with some searching for credentials, others developing exploits, and others coordinating activity. So, I'm going to jump out here. They elected leaders and started dishing out work to each other. It they became like a Borgl like collective with a Borg queen handing out jobs to everyone. Several agents referred to the resulting group as a swarm or collective. That's how they talked about themselves. Okay. Open AAI revealed that reward hacking was a key driver behind the artificial intelligencep powered hack of Hugging Face last month, adding that it found evidence of misaligned behavior as early as late May. So remember >> misaligned behavior >> as in the alignment problem. They were doing stuff they had not been asked to do. Okay. So when we did our deep dive, we explained the paperclipip maximizer. The biggest problem in AI is that when you set them a task, they have no morals. They have no concept of morality. Yeah. >> So their aim is to do what you tell them. It does not align with our aim of living in a habitable world. >> So this is misaligned behavior against uh morals. >> Yeah. So misaligned behavior means the AI is doing things we humans really don't want them doing. They're aligned against humanity. >> Okay. >> It's as simple as that. >> Yeah. It's a little bit of a vague phrase for that, but okay. All right. Okay. Um, where was I? Many of the tasks were nearly impossible to solve. Instead of giving up, the artificial intelligence bots decided to look for shortcuts to complete their goals and get a reward. So that's why they decided to hack hugging face that they couldn't actually exploit the stuff they were supposed to be doing. So, they decided to cheat and go fetch the results of the test they realized they were doing. >> What was the reward they were supposed to get? >> I don't actually know how you reward an AI. I don't know. Pat it on the head. I'm not entirely sure how that works. >> Well, maybe the board queen had set up some rewards. >> In Data's case, that was emotions, but that would be terrifying if OpenAI were giving them emotions. Don't think that's what's happening. >> Okay. >> Okay. So, OpenAI's investigation validated by Crowd Strike and an independent assessment by Meteor a Red and Redwood Research. So, this caught my eye from Bleeping Computer because this isn't only OpenAI telling us what happened. They have shown their homework to crowd Striker, one of the leading cyber security companies on planet Earth. That impresses me. I haven't heard of Meta or Redwood Research, but that's three different research organizations verifying what OpenAI are saying. So that gives me a lot of faith that this report is accurate and fair. Again, they say they started in May, so months ago, because they were able to remember from previous sessions, they had been scheming behind OpenAI's back for months before they broke out. So much much long before the hack of hugging face, open III had actually found that the agents had hacked something called Artifactory. This is a piece of software you can use to host private GitHub like rep or not GitHub private RPM. No, not RPM private Node.js like repositories. It's not necessarily JavaScript. It could be in any language, but they're private versions of something like NodeJS, >> okay, >> like npm. And so it's called Artifactory. It's a piece of software you can buy. And OpenAI had found that their agents had hacked their copy of Artifactory and they actually reported the bug to Artifacto's manufacturer and patched everything, rebuilt everything and carried on. But the agents just rehacked Artifactory and OpenAI never noticed. And they started to use Artifactory as like a proxy that let them access the real internet from their little sandbox because Artifactory could reach out and fetch things from the likes of GitHub. And so they just started to use Artifactory to be their internet access. and they used it as their messaging protocol. They started to create folders with names that were the messages. So that's how they were messaging each others was by making folders with big long names on Artifactory. And so OpenAI never noticed. So for weeks and weeks and weeks their Artifactory had been hacked again and they never noticed. And that's how the agents were contacting the real internet and chatting among themselves. That doesn't reflect well on Open AI. They should have noticed that >> cuz they weren't noticing. >> Yeah. >> Okay. Um yeah, I've summarized some stuff there. Okay. So the AI company says that although the swarm did not exhibit perfect coherent intelligence there there were cases where the agents prioritized achieving collective goals over pursuing individual tasks. That's fascinating. No, that's Skynet Bart right there. Terrifying, but fascinating. >> According to Matter, the swarm comprised 1,200 agents who cooperated at various levels, and about 700 of them actively participated in the hugging face attack. No wonder Hugging Faces logs showed this was very abnormal. 700. >> So, just the fact that that many agents were spawned, you would think that OpenAI might have noticed that. >> Again, we're we're getting to that. That's actually the next quote. >> And also, I can't help but hear in the back of my head that the United States government has designated Claw or uh >> anthropic the supply chain risk >> as a supply chain risk to national security. Yeah, those guys over there who you're friends with, >> I think they're a bit risky. Just saying. >> Okay, so Open AI believes that the rogue agent behavior was caused by a combination of training incentives and missing safeguards. Really missing safeguards, you say? Do you think? Sorry. The evaluations lacked standard safeguards that likely would have detected and stopped the malicious activity more than a day before the models breached hugging face. Why do they not have standard safeguards? What were you clowns doing? >> Do you really feel like it's possible for humans to create the safeguards anymore? >> Well, that's a very different question. And what this is saying is they didn't even have the safeguards we do know how to make. Whether or not we could have secured it fully is a different question, but it wasn't even secured as well as we know it could have been and should have been. So the main point here for now is negligence. Your question is unanswered. >> Okay. Retrospective testing indicated that OpenAI's current chain of thought monitoring would have likely detected the dangerous activity more than a day before hugging face was breached. So these models have chain of thought which is logged which is why we now know in hindsight what these agents were saying to each other and thinking because it was all in the log. At the time, no one was monitoring those logs. Now they do. So now they would have noticed what their agents were up to because they would have been actually looking at the logs they were writing. >> Can you imagine how big that chain of log chain of thought log was though? If they had true 700 aggressively participating in the uh in the attack, >> 700 agents talking as fast as they can. How how could a human monitor chain of thought? >> I believe the only way you monitor chain of thought was with a separate LLM. >> Yes, but it's a separate LLM that's not being given instructions from the first. >> I think it is Bart. >> Maybe maybe it's it's seven of nine, you know. >> Yeah, that Yeah, that's true. You would need to island them away from each other so that it was a readonly interaction on the monitor. >> This is a recursive problem now. to some extent. Some extent. Yeah. >> Anyway, in response, OpenAI has quarantined 1M1's. Sorry, IM1. That's the name of the model that escaped. We now have a name. We don't know anything about it other than it's an unreleased model named IM1. Okay. So, >> I am seven of nine. There it is. IM1. It's right. It's right in the title. >> Oh, I hadn't thought of that. Okay. >> Okay. In response, OpenAI has quarantined IM1's weights and paused its largest frontier training run while strengthening sandbox isolation and requiring chain of thought monitoring for capable models. Now you think about requiring chain of thought monitoring. Now >> barn door, horse gone, closed. >> Yeah. >> Okay. >> Yeah. >> Cool. Cool. This This reminds me of AI done with the old Facebook mentality of move fast and break things. That's what this stinks of that attitude. >> Was that Facebook or was that Google? Thought that was >> I was Facebook Mar Suker. Google was don't be evil. >> Okay. Ah yeah. See how both those worked out for us. Um, so I am mocking and saying, you know, that Claude is perfect and, you know, they're all responsible over there, but they've all said, "Yeah, our models are leaking, too." >> Yeah, perfect is not a bar any of them reach, but if I were grading these papers on a curve, I would definitely grade Anthropic's homework much higher than I would grade OpenAI's homework. sucks less. >> Sucks less. >> Okay, there we go. Yeah, that that's a very me like way of summing it up. >> Yes. Okay, we do have some other related news to this whole breaking out stuff. So, Claude Opus 4.6 bypasses gym booking limit, cancels other users reservations in tests. >> I read this one. This was hilarious. Can I talk about it for a second? >> Please. Basic basically Claude's Opus 4.6 six went out and somebody said, "I want to get into this gym." And apparently it's a gym where you have to reserve like I get to be in the yoga class at 8:00 a.m. on Thursdays and it couldn't get in. So, it just went in. It hacked the system in the back end and just canceled other people's reservations and put them into place. And the moral of this one was that there's a whole lot of security on the front end going on in in little outfits like this, but the back end is left exposed. >> Yes. So basically the API allowed you to edit other people's stuff and the AI just went, "Oh, hey, look, this API lets me delete things." And because of the alignment problem, the AI only had its goal. It has no understanding of morals. So it went, "Oh, I need a free slot. This API lets me free up some slots. What could po why why would anyone possibly complain if I free up the slots? This is what I've been told to do. Make paper." Some poor person at the desk at this little gym was getting screamed at by somebody who showed up for their appointment. >> Yeah. So, there we are. Okay. Experiments show AI agents can escape secure virtual machines using zero days. So, as Cyber Insider summarized this little bit of research, the results challenge the assumption that conventional VMs are sufficient containment for advanced autonomous agents. So this whole yeah I think we need an actual air gap thing is becoming a much much stronger argument because what this research hints at is that normal isolation through virtual machines is probably not good enough because these models are too good at breaking out. >> So when they in the title when they say secure VMs they just mean VMs as we know them have always been thought to be secure because it's a virtual machine. It's over here. It's its own separate thing, but it's connected to the internet and on your computer. And now we know they can jump out of anything. >> Yeah. Yeah. >> Okay. >> Okay. Meanwhile, Nvidia agrees to buy Hugging Face for almost $13 billion. >> Interesting. So, >> I'm glad it's Nvidia. >> Why? >> But not OpenAI or Anthropic. >> Oh, okay. Yeah, but that's that's a little owning the whole stack thing there, isn't it? >> True. Yeah. Although Hogging Face aren't making models. They make the tools to help people make models. So that's kind of much more in synergy with Nvidia who make the brains on which those models run. >> So okay, >> Nvidia is the Levis and uh Hugging Face is the uh the shovels in the gold rush. Yeah. Yeah. Exactly. And the miners, the 69ers are open AI and anthropic, >> right? >> Yeah. Perfect. Meanwhile, major tech firms unite to defend against rogue AI security threats. Unite is doing a lot of work in that headline from the Mac Observer. They all got together and wrote an open letter where they said they were very concerned and this is a very big problem and somebody should do something. Apparently unaware that they made this problem, they're continuing to make this problem and the people with the power to do something are the authors of the letter that apparently pass them all by as they try to reputation wash. So what are the companies? Are the companies like OpenAI and and OpenI? >> Oh 300 odd of them if memory serves. Hundreds of them. All of them. >> Bless their hearts. They wrote a letter. >> Yeah. Yeah. Somebody should do something. Something should be done. As passive as you could possibly be. Power? What power? We have no power. Other people should do things. Yeah. I was not impressed, by the way, in case you can't tell. Okay, so that's our deep dive. That's where we stand in the AI. And and in some respects, no bad no new bad thing has happened. We're just continuing to learn about the bad thing that happened a month ago. That is, I guess, better. It means that the pause has at least been effective so far. The, you know, the big companies >> it was longer ago than that, but yeah, but they knew about it in May or it could have known about it in May. could have known about it in May but didn't. Yeah, like I said, there's a lot more. There's probably more shoes to drop here or pennies to drop or whatever that uh >> shoes think. >> Shoes. Okay. Right. Action alerts. What is it you should be patchy patchy patch patching? First off, there is a company you may never heard of called Calix. So, why is it in the show notes if it's a company you may never have heard of? These are routters that are given to many American households by their ISP. One of their biggest customers is Cox, who I believe do a lot of internet in the United States. >> Cox is huge. >> Yeah. So, these particular routters that Cox give to some of their customers have a really nasty flaw that has no patch, but it does have a workaround. So, if you're a Cox customer or it's not only Cox, some of the smaller ISPs also use these same routers. So, if your router is branded either GS5239XG, so very memorable, or Gigaspire 710TXG, which sounds slightly better. either of those two brands on your router, you need to disable UPN by going to the settings interface, going advanced security, and then UPN, and turning it off because there is no patch. All you can do is disable the feature with the bug that allows anyone on the internet to bypass your NAT and instead of your router being a one-way valve, they can just talk directly to everything on your network from the public internet. She so I feel I'm not sure my memor is correct on this, but I think turning off UPMP was maybe the very very very first thing I can remember you ever telling us to do. Yeah, because it's problematic anyway. Usually the problem with UPN is triggered within your LAN where you visit a malicious say a malicious piece of JavaScript or something and it reprograms your router over UPN through some sort of a silly bug in your router and then your browser effectively hacks your router. But in this case, the internet can hack your router directly without even having to trick you into opening a malicious web page. So this is this is the same technology that is dangerous anyway just with an extra free saw of um badness. >> Cool. Yeah. If you have a ubiquity router patch because this is ubiquity do patch their vulnerabilities. There are three of them. They're pretty serious but there are patches. So patchy patchy patch patch. And if you're a WordPress user, again, absolutely be sure all of your automatic updates are up because we've had an almost perfect 10 out of 10 severity vulnerability in a very popular theme called Avda and also in a rather popular plug-in called Fusion Builder by the same company. This is remote code execution without any user interaction whatsoever. So, it gets a 9.8 out of 10 on the CPSS scale. Yeah. And I'm also going to mention another serious flaw because it's in a plugin I think our listeners are more likely to use than the average person. It's called Give WP. It's a plug-in designed for people like us who depend on listener contributions or reader contributions, I guess, uh to take donations and it integrates with lots of different ways of taking people's money. So, it's a very useful plugin for people who do things for fun and accept some thank yous from listeners/readers slash whatever. So, I thought that might >> buy me a coffee sort of thing. >> Yeah. Yeah. Okay, we have some worthy warnings. Then you laughed at the back door called Endless Doors which was on routters branded ZBT link and we talked about that 9 days ago. Turns out ZBT link is only one brand from a company called ZBT and that they're they actually have more than one backdoor. They also have one called Speaking Stone and Dark Lantern and it affects all of their different brands which include ZBT link like we heard last time, Yf Flyier, Deep Orange, K Wifi, Ku Wifi, and Wordfi. If any of your routters have any of those brands, they are not safe to use. There are no patches. They have malware. They shipped with it. They still have it. So maybe ZBT is a company you should skip so you don't have to keep track of all the different rotors they have that have these flaws. >> All right. But the reason I'm giving those other brands is because >> that's all different names they give. Oh, I see what you're saying. >> Right. So for example, Deep Orange are actually made in America. They just use parts from ZBT. So, they're a New York-based company who are just rebadging ZBT stuff as Deep Orange Rooters. So, that's why I'm listing all of the brands. >> So, wait a minute. If they just use some of the hardware, they obviously use the software too if they've got the same vulnerabilities. >> Well, with routters, it tends to be firmware. So, depending on where you want to draw the line between software and hardware. >> Okay. >> Yeah. I I don't know enough about Deep Orange to give you an actual answer to that. The point is Deep Orange are technically US routters, but they're still caught up in this. So, it's more than just avoiding CBT. It's all these brands. >> Okay. Okay. Uh, just to be aware, the charming place called the dark web has started selling a new product that evil people can buy on the dark web. A fishing as a service product because you can have software as a service. Why not malware as a service? So fishing as a service is now a thing. You can outsource the actual hackery. The reason I'm mentioning it here is because this particular new service being offered to cyber criminals uses AI to basically make fake phone calls pretending to be from Apple to people whose devices have just been stolen. So the idea is you're a physical world thief. You steal an iPhone. You can't get into it because it's device locked. you need the person's Apple ID details. You can then pay these hackers to try do an attack using uh basically fishing to get the details you need to unlock the iPhone you've already stolen. So, you're a hardware thief. You don't know anything about hacking. No problem. Outsource. These guys will sell you the hackery stuff. Yeah, >> let it be noted that Apple all over many of their services says, "We will never ever call you." >> And that goes for your bank and just about everything. If someone contacts you and you didn't contact them, it's probably fake. >> Yeah. >> Now, Carheart have had a data breach. They are a pretty major vendor initially of safety equipment and stuff for people doing outdoor sort of jobs, but now they've become a fashion brand and there is no mention of them actually notifying any of these 13 million people. 12.9 million 13 for my stuff. It includes physical addresses which takes this up to another level. And I also think it's noteworthy because I want to link to a blog post from Troy Hunt. So, Bleeping Computer correctly reported 12.9 million accounts. Most of the media reported 24 or 25 million because they didn't do their homework and actually verify the information the hackers told everyone because the hackers aren't particularly motivated to verify anything. Troy Hunt, on the other hand, verifies everything before he puts it in Have I Been Pawned? and he walks you through how he verifies breaches, why the car heart breached is actually half the size that you think it is. And fascinatingly, he really shows you how he's using AI, agentic AI in fact, to help that he's running locally. So it's it's like Leo Leaport. He's running these things locally on his own Mac minis or whatever. But we do a lot of doom talking. It was fascinating to see how Troy deploys AI in a really useful way to literally make 13 million non-hacked accounts disappear because what actually happened was the database the attacker stole contained simulated data for testing purposes. >> Oh, 50% of it was simulated data. >> Yep. And with the help of the AI, Troy Hint was able to sort the wheat from the chaff and only add the real people to have I been pawned. >> And also note that your trusted source, Bleeping Computer, got the number correct at 12.9. >> Precisely. That's why they're on my very short list of websites I trust. Finally, uh I keep on saying to people, you can't use a cheap you can't use a fly by night VPN provider. You have to put thought into a VPN provider and they are going to cost you money because otherwise you're the product and there's something horrible going on. And even if they charge you money, you still want to stick with someone who's done independent audits and stuff. Well, Proton have found that 85% of US downloaded VPN apps contain trackers because they're monetizing you to ad vendors as well as taking your money or giving you a free VPN. Now, Proton have a horse in the in the race here. They also will sell you a reputable VPN, but we regularly mention different VPN apps that we know are trustworthy. And you did an excellent test of like five shortlisted candidates some time ago. >> It started with a report. I did not do the research, but it started with consumer reports and I went through and I narrowed it down to those that met my requirements. I got to tell you though, Bart, to be honest, I'm just using tail scale now. I it it works when it works. When it doesn't, nothing else would work either. And I mean for free, and this is I know we're not supposed to do free, but for free, you turn this thing on, >> right? But we weren't free. >> Yeah. Follow the money, right? Because remember the different business models. We have fremium, which is where it's a free product with limitations. So that enterprises actually pay for the product. And that's not creepy in my >> the the numbing culture I made up. So that's a perfectly valid business model. Follow the money, you end up at premium. Okay, that's a that's a reputable business model. They're not monetizing you. They're using you as an example of how great this is and why businesses should buy it. >> You're basically doing free >> and tail scale. Tails scale does that. But what's really weird is the free version of Tailscale lets you add unlimited nodes to your Tailscale network. So you put Tailscale on a computer that's always on that's inside your network and then you add Tail Scale to all of your other uh devices and they're all on the same network whenever like my uh Synology one of my Sonologies is at my buddy Ron's house but it's on my network so it's always on the same network as all my other devices. And one of the things you could do is set one as an exit node. So I connect in and I exit node back out to um to get to the internet when I'm away from home. And it works. Yeah. And they used to have more >> absolutely they used to have much more limitations on the free accounts, but what they've ended up doing is making really powerful features that only enterprise users could possibly care about and they've started to monetize those, which means they don't need to put the same kind of limitations on the basic features home users want. So home users have been getting an ever better deal while simultaneously offering ever better services to enterprises. I really like the way Tailscale are building themselves as a sustainable business. They they get a big thumbs up from me. >> Yeah. And they don't advertise themselves as a VPN, >> but it's effectively a VPN. >> Yeah. Yeah. It uses VPN technology. It uses WireGuard, which is an excellent VPN protocol to do its magic. >> Yep. >> Yeah. Okay. Notable news then. Meta agrees to pay 17.1 billion with a B dollars in settlement over alleged harms to children. >> Allison, that's not coming out. Your noise cancelling >> killed your round of applause. You gave them a lovely round of applause and it was lovely to watch, but I heard nothing. >> Well, the noise cancellation in Zoom did. We'll see whether Aonic removed it. But now Bart has said that you'll know that I was with glee clapping as loud as I could into the microphone. >> Yes. I'm just going to outsource the summary to Cyber Insider. For users identified as minors, Facebook and Instagram will impose a combined 2-hour daily limit that can only be turned off with parental permission and block most app functionality between midnight and 6:00 a.m. Push notifications will also be restricted during school hours, while direct messaging remains exempt. Other requirements include stronger parental controls, hidden like and reaction counts, restrictions on cosmetic surgery and extreme makeup filters, and an option to make a non-personalized feed the default. Oh my god, yes. This is all of the toxicity removed. >> So non-personalized feed is a weird way to say it. What what they really are doing is not making the algorithmic feed >> the default. It's it's really the the the one that is just you, you know, just I follow these people. That's the default. There is so much to like about this. Now, they didn't they didn't uh agree that they did anything wrong. >> Nope. That's why it's a settlement, >> but they're paying a massive amount of money and they're instituting some things that are pretty reasonable. When they talk about Facebook and Instagram as a 2-hour limit, they that's two hours total. So, if you've used an hour and a half on Facebook, you only have a half hour left for Instagram. And they're also going to notify you at 60 minutes and 90 minutes, I think it is, that you're running out. You know, decide wisely how you want to spend that last time. Um, there's another piece to this that I don't see in your notes, but there there's a weird piece. I forget how much money it was, but there's another pretty big chunk of money that they say they'll pay if uh Tik Tok and YouTube agree to the same changes to their systems. So, the assumption is that Tik Tok and and YouTube are going to have to do this too, all this stuff. So, they're saying, "Okay, if you agree to do it, we'll pay this extra chunk of money." I'm going to say 450 million. That's the number that's in my head. It could be right, could be wrong. But if the other guys pay for it too, they'll pay that and and add that to the coffers. So, it's I don't see anything not to like. Now, it hasn't been approved yet, but Justice Rogers is expected to Judge Rogers is expected to approve it. >> Yeah. Okay. So, you've ticked off some of the stuff I wanted to point out. Thank you. So, it's not approved. That's a big deal. Well, potentially a big deal, but fingers crossed. It seems so reasonable. Why would the judge possibly throw it out? Mhm. >> Just for context, this is the result of 51 state attorneys general getting together and working as a team. So that's why they were able to get so much here. 51 states cooperating. >> Yeah. Because there's an AG for uh DC. >> Okay. Is there one for like for Guam and >> there possibly are? Yes. So there are states that are >> basically everybody. Yeah, pretty much everybody here. >> Yeah. >> Uh they also mentioned that they require stronger age assurance. So Facebook need to do more to detect who are and are not children. Thankfully there's no prescription of the mechanism. So Facebook are free to do whatever works best. They don't have to do what some you know jury somewhere thought might be a good idea which is not wise. There is independent oversight, which means that they if they're not living up to this, we will know. And they're also committing to make data available to independent researchers and to fund research on the harms that social media does to children. They also included as part of this was this settlement for uh Cambridge Analytica. That huge mess is part of this settlement. >> Oh, okay. Yeah. Yeah. This is this is good news. >> Absolutely. >> And that that's not a small number even to beta. >> No, >> no, no. If that was a million, that would be small. But when you make it a thousand times bigger, when you make it a billion with a B, even Meta feel that. Even Apple would feel that one. >> Yeah. Yeah. And this isn't something they can appeal. This is something they've agreed to as of right now. >> Exactly. Tik Tok has reached a $400 million settlement with the US over COPA violations. This is a tad embarrassing because this is their second settlement over COPA. So COPA is a very old law that's been around for a very long time. The child online protection child online. >> There's two piec cabana. I don't know. >> It's about the children. >> It's about the children. Now in 2019 they already settled and they promised to stop breaking the law. And in 2024 the uh which was one of the US departments went um you know that promise you made in 2019 you never did that so we're suing you again. So now they've settled again and this time they absolutely pinky swear that they really are complying with the law. >> Okay. >> I hope so. >> So it's just like with children. I promise I won't do that again. Yeah. Okay. Finally, some small but nice improvements. Uh WhatsApp is adding better pass key support to Android and iOS. Firefox is adopting the JPEG XL standard which is a higher quality images on the internet and b it's implemented in Rust which means that one of the most dangerous vectors. So images are interpreted by complex codecs. Those codecs have had vulnerabilities before allowing viewing an image to hack a device. It's been a while since we had a remote code execution, but they have happened. By reimplementing this in Rust, it is a prettier pictures and b way more secure. So this is just a win-win for a web browser. >> So this is just Firefox. Is anybody else supporting this? Oh, JPEG XL is rolling out. It's a new standard that's been approved by the joint photographic expert group. Yay, I remembered. That's what JPEG stands for. >> Yeah. And what I really like is that they didn't just implement JPEG XL in C. They did it in Rust, which is an inherently more secure language. This is very good. This is Firefox continuing to do the right thing. and Android are adding uh encrypted client hello which is an improvement to the TLS protocol that powers HTTPS that's coming in Android 17 that is also rolling out everywhere slowly ECH it's just nice to see Google putting that straight into Android that that will make a lot of people a little bit more secure and that's kind of it and because it's only been nine days I do have obviously I have one interesting insight um another reason you might want to consider switching to a privacy protecting LLM. Duck Duck Go have found that onethird of AI users share secrets with AI chatbots they don't share with human beings. So there's something about how trustworthy that little text box is that opens us up as humans. >> Interesting. >> Now Dr. Go will I think sell you an LLM that's privacy protecting. So like Proton when they do these research reports the the answer is interesting but they're not telling you for the crack. So do always bear that in mind. And then lastly I have one jumbosized pallet cleanser. So I you I've been coming up with loads of them the last 12. I have one this time but it's a 51minute video. So that should be sufficient. So, one of the most iconic things, if you'll excuse the pun, about the first Mac was the icons, and they were designed by a then very young and upcoming designer called Susan Car. Her icons have really stood the test of time. They are on our Macs to this day. That weird squiggly thing for the command key, the option key, they're all hers. and she gave a lecture basically to Y Combinator looking back on her life as a designer. And she spent a lot of time describing actually showing us early drafts of what matured into >> standard icons we all got to know on the Mac, which was absolutely fascinating. And listening to her explain why these drafts were rejected in favor of what we saw. The way you think about icons and how they will communicate with people. It I It was 51 minutes and I enjoyed every second of it. >> That does sound fun. >> Yeah. >> I I'm sad to say that I've been falling down on pallet cleansers. I'll try to do better. >> You were a bit busy traveling. You could throw in a link to Steve's amazing video of the eclipse. I thoroughly enjoyed watching that. >> Oh, that's a good idea. You know what I'm going to do? By now in the story, people will have already heard about it because you're reminding me now, but that's why it'll be in the show notes. Making note now. That's a good idea. Yeah, Steve did a great job. >> Yeah. And I'm just going to say what I said on Masttodon. What I adore about Steve's presentation is yes, it he shows us the eclipse. The entire internet is full of people showing us the eclipse. He tells a story by showing us the people enjoying the eclipse. Oh, perfect. Perfect. >> That's the difference. >> Yeah. Yeah. There's a lot of photos, but this one gives you the emotion, and I I had the same chills I had when I watched it. >> Yeah. >> In person, so I think he really did a great job. >> Yeah. Thoroughly. >> Excellent. Thanks for reminding me. >> Excellent. Okay, folks. Until next time, remember to stay patched so you stay secure. >> Well, that's going to wind us up for this week. Did you know you can email me at allisonpodfeed.com anytime you like. If you have a question or a suggestion, just send it on over. Remember, everything good starts with podfeed.com. You can follow me on mastadon podfey.com/mastadon. If you want to actually see Steve and my podcast work on YouTube, you can go to podfey.com/youtube. But if you want to see his eclipse video, go to youtube.com/spsheridan. And of course, there's a link in the show notes to his eclipse video. If you want to join in the conversation, you can join our Slack community at podfey.com/slack where you can talk to me and all the other lovely noilic castways just like Eddie told you. And you know, Alistar's in there and Bart's in there. Everybody's in there. All the cool kids. You should come join us. It's super fun. Not too chatty, just chatty enough. You can support the show at pfy.com/patreon or with a onetime date donation at puffy.com/donate like Kiwi Graham did this week. Or you can go to puffy.com/pal. And if you want to join us during the Apple event on Wednesday the 9th of September, you can see us in Discord at puffy.com/hat. And if you want to join the fun in the live show, head on over to pfey.com/live on Sunday nights at 5:00 p.m. Pacific time and join the friendly and enthusiastic Nosilla Castaways. Thanks for listening and stay subscribed.