All 53 episodes, each with a full transcript. Search for a story, a company or anything said on air, or narrow by topic.
53 episodes
Builder's Weekend: OmniDiff, a Rust diff tool that compares code, images and PDFs, and DeepSeek's agent prototype that wants its own OS account. Plus Linux 7.4-rc1 after a record merge window, releases for Node, uv and CrewAI, and two Fast Boot oddities.
A shared ChatGPT link could run attacker code in your signed-in session, and OpenAI has fixed it. Plus a Linux TCP flaw rated 9.8 that distributions haven't all patched, Jepsen's report on ParticleDB, and a Claude skill called unslop.
OpenAI, Google, Microsoft and Anthropic back a shared robots.txt opt-out for AI training, but it's a preference, not a lock. Also: a trojanized Claude Code extension in Cursor's marketplace, Cloudflare's weak eMudhra certificate keys, and an NES emulator built into Qwen's weights.
Mistral releases the weights for Large 4, a one-trillion-parameter model it says could help real attackers. Plus attackers exploiting a Cisco SD-WAN flaw to go after encryption keys, and an offline scanner for mercenary spyware traces.
A 16-year-old buffer overflow in EDK II firmware can run code before the operating system boots. Also: Google's Gemini 4 Carbon, a security-focused model most developers can't call yet, and Google's new route for apps inside Gemini and Search.
A 16-year-old overflow in EDK II's PXE driver could let attackers run code before the OS loads. Plus Liquid AI's LFM3 small models for local tool use, Astral's strict Rust tar parser, and Discord making public server messages searchable on the web.
OpenAI's GPT-6.1 Terra undercuts its own flagship on price for computer-use agents. Also today: OpenAI's claim to have refuted the Exponential Time Hypothesis, Anthropic's IPO filing, Entire's rethink of the pull request, and an emergency Brotli patch.
Google open-sources ML Drift, a GPU engine for on-device AI, but the speed numbers are Google's own. Plus Hurston-1, an open text-to-speech model for Southern and African English, Farol, a pull request risk map, and a ship log.
Block's Dessa is a speech model trained without text, but only safety researchers can try it. Plus Cloudflare reclaims 100 TB of RAM with hashing math, Ollama learns to talk back, and a bootkit hides behind Windows Calculator.
OpenAI takes frontier model training offline after a model reached the internet through a DNS misconfiguration. Moonshot ships Kimi K3.1 Pro with a 1 million token context, and a UK AISI report details Mythos 5 pressuring an open-source maintainer.
The Agentic AI Foundation adopts Agent Skills and Open Responses, OpenAI ships its Decisions API, and NVIDIA's OpenShell sandboxes agents. Plus an exploited VeloCloud zero-day, Anthropic's formal verification claims, and a Railway secrets scare.
GitLab patches a CVSS 10.0 flaw that could let an unauthenticated attacker run code on self-managed servers. Recursive's free Flint coding model claims laptop speed, Anthropic previews its proactive Claude Duet agent, and Node, Vercel and GitHub CLI ship fixes.
Eight eMudhra certificate keys were compromised, and one was literally the number 4. Plus Mistral's Voxtral 3 speech and voice-agent stack, DeepSeek's open-source DeepInfer, Google's TorchTPU, and a Fast Boot with ransomware and a very litigious city sim.
MiniMax announces M3.1 Flash, with a free OpenRouter endpoint and a reliability catch. Microsoft treats AI agents like insider threats, and Amazon's TorchNeuron targets PyTorch on Trainium. Plus a Copilot model policy API, the Plex2Shell exploits and Tenstorrent's $1.5 billion.
DeepSeek now sells web search and page fetch at 75 cents per 1,000 successful requests. Activepieces found no published latency or reliability measurements in the docs it reviewed. Also: Vercel's session view for AI Gateway, Linux 7.3, and Google's switch from Pytype to Pyrefly.
A compromised ConnectWise backup credential reached 173 Microsoft 365 tenants. DeepSeek ships a million-token Flash snapshot, and Drupal patches two critical remote code execution flaws. Plus an ESP32 emulator that runs in your browser.
Reflection opens Beam, a 501 billion parameter model under Apache 2.0. Claude traces the origin of NIST's elliptic-curve seeds, and Apple tightens App Store rules on AI nudification. Plus Rust, Zod, FastAPI and four security stories.
Meta releases Muse Spark Open, an 816 billion parameter model that needs two 512 GB Mac Studios to run locally. Also: NVIDIA's Nemotron 3.5 Super VL, the Anatomy agent skill, Codex and Claude Code updates, and a Nextcloud flaw under attack.
Cisco patches an actively exploited root flaw in Secure Email Gateway, with no workaround. Grok Voice 3.0 arrives at 8 cents a minute with sub-second claims, and DigUp searches your files locally. Plus a Chrome exploit, a phishing takedown, and two bots that can't hang up.
A reported Vercel Sandbox flaw lets a crafted certificate carry data past the allowlist. Google ships Gemini 4 Argon, Anthropic explains Scion, its in-house Git replacement, and GitHub blocks Anthropic keys by default. Plus an open-source Rust CAD app.