1
00:00:00,000 --> 00:00:08,360
 Welcome to Log Level Debug, a technology new show that's more accurate than The Onion,

2
00:00:08,360 --> 00:00:10,400
 but less accurate than Reductress.

3
00:00:10,400 --> 00:00:14,720
 I'm your host. And if the fortune teller was right, this show is not how I die.

4
00:00:14,720 --> 00:00:18,720
 Now, let's talk about all the news from the past week with links in the show notes

5
00:00:18,720 --> 00:00:23,280
 and the lazily added QR codes right here.

6
00:00:23,280 --> 00:00:28,760
 Cybersecurity researchers were 
 able to successfully 
 hack into OpenAI's 
 infrastructure, 
 

7
00:00:28,760 --> 00:00:35,480
 impersonate employees, 
 and then prove it 
 by submitting a 
 pull request to 
 an internal OpenAI 
 code repository.

8
00:00:35,480 --> 00:00:43,120
 OpenAI uses a 
 self-hosted instance of 
 Discourse for their 
 community forum site 
 community.openAI.com.

9
00:00:43,120 --> 00:00:48,880
 The researchers at 
 Hacktron used a 
 vulnerability in an image 
 processing dependency 
 of Discourse.

10
00:00:48,880 --> 00:00:54,0080
 Then, used a 
 misconfiguration in 
 OpenAI's single sign-on 
 implementation to steal 

11
00:00:54,0080 --> 00:00:56,480
 user access tokens.

12
00:00:56,480 --> 00:01:02,480
 After getting an 
 employee token, 
 they could do 
 practically anything, 
 like read internal

13
00:01:02,480 --> 00:01:10,120
 slack chats, 
 emails, 
 or even maybe 
 rename unreleased models 
 after themselves, or rename

14
00:01:10,120 --> 00:01:12,920
 just one of 
 them to penis.

15
00:01:12,920 --> 00:01:16,880
 But since they're 
 not fun people, 
 they made a pull 
 request, and then 
 told OpenAI about

16
00:01:16,880 --> 00:01:19,320
 it to get a 
 bug bounty payout.

17
00:01:19,320 --> 00:01:25,840
 For all of this, 
 they received $6,500 
 from OpenAI's bug 
 bounty program, 
 which feels surprisingly

18
00:01:25,840 --> 00:01:29,240
 low for a bug 
 with such a 
 high-blast radius.

19
00:01:29,240 --> 00:01:34,600
 Hacktron says they 
 used Anthropic's Claudeto 
 to find the 
 vulnerabilities, 
 so that probably factored

20
00:01:34,600 --> 00:01:37,000
 into the 
 low-bounty payment.

21
00:01:37,000 --> 00:01:43,320
 By the way, 
 the exploit chain 
 is out there now, 
 so if you 
 self-host discourse 
 update now,

22
00:01:43,320 --> 00:01:51,000
 and if you don't 
 self-hosted discourse, 
 I get it, yeah, 
 I don't blame you for that.

23
00:01:52,680 --> 00:01:58,320
 The future of the 
 CSS training website, 
 css-tricks.com, 
 is up in the air.

24
00:01:58,320 --> 00:02:03,360
 The site shows web 
 developers fun ways to 
 implement website features 
 using only a small

25
00:02:03,360 --> 00:02:08,760
 amount of CSS, 
 and more often than 
 not, with a lot 
 of JavaScript.

26
00:02:08,760 --> 00:02:11,560
 This isn't the 
 first time the site 
 has been screwed over.

27
00:02:11,560 --> 00:02:14,440
 DigitalOcean purchased 
 the site in 
 March of 2022.

28
00:02:14,440 --> 00:02:20,760
 A year later, 
 DigitalOcean laid off 
 the entire editorial 
 team leaving the 
 site stagnant.

29
00:02:20,760 --> 00:02:24,200
 That was in 2023 
 when everyone loved 
 doing layoffs.

30
00:02:24,200 --> 00:02:26,280
 Glad that's over.

31
00:02:26,280 --> 00:02:32,0040
 A year after that, 
 in June of 2024, 
 DigitalOcean rehired 
 the former lead 
 editor, Jeff Graham,

32
00:02:32,0040 --> 00:02:33,480
 to run the site.

33
00:02:33,480 --> 00:02:36,0080
 And since then, 
 the site has been 
 running smoothly.

34
00:02:36,0080 --> 00:02:41,160
 Until last week, 
 when Jeff Graham announced 
 that the CSS-Tricks 
 site won't be 
 receiving any

35
00:02:41,160 --> 00:02:44,720
 new posts because 
 he hasn't been 
 paid in months.

36
00:02:44,720 --> 00:02:47,320
 Excuse me, 
 one second.

37
00:02:47,320 --> 00:02:51,840
 Hey, people get 
 paid for putting 
 content online?

38
00:02:51,840 --> 00:02:57,560
 Well, yeah...but...
 he says...
 no, I don't get 
 how that's 
 any different.

39
00:02:57,560 --> 00:03:04,360
 Yeah...ok..
 all right, 
 I get-- oh, fine, 
 fine, we'll talk 
 about it later.

40
00:03:04,360 --> 00:03:05,360
 Sorry about that.

41
00:03:05,360 --> 00:03:08,880
 Just some behind-the-scenes 
 stuff, we'll edit 
 that out.

42
00:03:08,880 --> 00:03:13,320
 In the meantime, 
 if you're not sure 
 where to learn specific 
 CSS concepts, 
 I've heard people

43
00:03:13,320 --> 00:03:19,000
 really love TailwindCSS.

44
00:03:20,120 --> 00:03:25,0040
 The first set 
 of benchmarks are out 
 for Apple's Mac 
 Mini featuring the 
 M6 chip.

45
00:03:25,0040 --> 00:03:32,000
 The new 12-core 
 chip got a geekbench 
 score of 4,071 
 in single-core benchmarks, 
 putting it

46
00:03:32,000 --> 00:03:35,640
 above every other 
 chip on the list.

47
00:03:35,640 --> 00:03:41,120
 An incredibly impressive 
 feat, Apple fans won't 
 shut up about 
 for years to come.

48
00:03:41,120 --> 00:03:48,000
 The CPU's multi-core 
 benchmark was 22,783, 
 which is still good, 
 but a whole bunch 
 of other

49
00:03:48,000 --> 00:03:53,240
 high-end CPUs are 
 better, like chips from 
 Intel, AMD, and 
 even Snapdragon.

50
00:03:53,240 --> 00:03:59,000
 This makes the M6 
 like that guy who 
 hyperfocuses on tasks, 
 but the second he's 
 distracted,

51
00:03:59,000 --> 00:04:01,0040
 it's all over.

52
00:04:01,0040 --> 00:04:06,360
 And because Apple hardware 
 is always compared against 
 old versions of itself, 
 instead of other

53
00:04:06,360 --> 00:04:12,220
 hardware on the market, 
 it's important to note 
 that the M6 Mac Mini 
 is 69% better than

54
00:04:12,220 --> 00:04:13,900
 the M2.

55
00:04:13,900 --> 00:04:16,000
 And all I have 
 to say about 
 that is, Nice.

56
00:04:17,280 --> 00:04:23,720
 Hey, 
 speaking of news, 
 did you know 
 GlobalGlob 
 has a newsletter?

57
00:04:23,720 --> 00:04:28,0080
 You can get the news 
 sent directly to your 
 inbox every single 
 week and for free.

58
00:04:28,0080 --> 00:04:30,540
 Just remember to 
 check your spam folder.

59
00:04:30,540 --> 00:04:35,000
 You can sign up 
 at globalglob.dev/newsletter.

60
00:04:36,420 --> 00:04:41,740
 In a big change 
 to their previously 
 stated goals, 
 Apple will begin using 
 customer data to train

61
00:04:41,740 --> 00:04:43,540
 its AI models.

62
00:04:43,540 --> 00:04:46,0020
 As of today, 
 this is opt-in 
 only.

63
00:04:46,0020 --> 00:04:49,380
 The pop-up has 
 an Agree and Not Now 
 button.

64
00:04:49,380 --> 00:04:56,180
 So is it really 
 opt-in if they wear 
 you down with 
 pop-up after pop-up?

65
00:04:56,180 --> 00:05:02,380
 Like all AI 
 training data, 
 it may be reviewed by 
 humans for...reasons.

66
00:05:02,380 --> 00:05:08,0020
 This change comes 
 years after Apple saying 
 it's bad when companies 
 use your data.

67
00:05:08,0020 --> 00:05:11,820
 With taglines like 
 What Happens on iPhone, 
 Stays on iPhone.

68
00:05:11,820 --> 00:05:16,740
 The new tagline 
 will probably be 
 What Happens on iPhone, 
 Makes Everyone's iPhone Better.

69
00:05:16,740 --> 00:05:19,860
 So please let us 
 track your ovulation cycle.

70
00:05:19,860 --> 00:05:23,820
 You know, I gotta
 hand it to Apple.
 Good on them waiting 
 this long to invade everyone's

71
00:05:23,820 --> 00:05:24,820
 privacy.

72
00:05:24,820 --> 00:05:30,000
 Everyone else gave 
 up on that 
 years ago.

73
00:05:31,280 --> 00:05:37,420
 The Facebook conglomerate 
 group referred to as 
 Meta has released a 
 new social media 
 subscription

74
00:05:37,420 --> 00:05:39,740
 called Meta One.

75
00:05:39,740 --> 00:05:44,300
 If it turns out 
 people don't like it, 
 they'll rebrand it to 
 Meta Too next year, 
 The Meta 5

76
00:05:44,300 --> 00:05:49,460
 the year after, 
 and Meta Forever once 
 they get tired of 
 rebranding all the time.

77
00:05:49,460 --> 00:05:54,580
 The Meta One subscription 
 is actually 9 different 
 plans depending on how 
 much you want to pay,

78
00:05:54,580 --> 00:05:59,980
 and which features you 
 want, ranging from $3 
 a month to $500 
 a month for the kinds of

79
00:05:59,980 --> 00:06:03,440
 things, businesses and 
 content creators will do.

80
00:06:03,440 --> 00:06:08,140
 Of course, the costs are 
 different depending on where 
 you live, but 
 as an American, 
 I wouldn't

81
00:06:08,140 --> 00:06:09,820
 even know how 
 to read those.

82
00:06:09,820 --> 00:06:16,0020
 There's different signs 
 before the number, 
 some of them use 
 a dot instead 
 of a comma.

83
00:06:16,0020 --> 00:06:17,620
 I just don't 
 get it.

84
00:06:17,620 --> 00:06:19,660
 Look it up 
 yourself.

85
00:06:19,660 --> 00:06:24,940
 The subscriptions give 
 you unique features you 
 only get by paying 
 Meta directly, features

86
00:06:24,940 --> 00:06:30,260
 like custom fonts, 
 hiding chats on a 
 schedule, and even more 
 AI features like 
 adding voice

87
00:06:30,260 --> 00:06:31,820
 effects on Instagram.

88
00:06:31,820 --> 00:06:36,000
 That's a lot of 
 features, but remember, 
 it's free to 
 not use Facebook.

89
00:06:37,540 --> 00:06:44,800
 Hey, I don't know if 
 anyone told you, 
 but GlobalGlob has a 
 newsletter, and it has more

90
00:06:44,800 --> 00:06:47,620
 news than we 
 could fit in 
 this episode.

91
00:06:47,620 --> 00:06:53,000
 Sign of today at 
 globalglob.dev/newsletter, 
 if you know how to read 
 

92
00:06:54,000 --> 00:06:59,620
 A court filing has 
 been unsealed from a 
 lawsuit between the 
 New York Times 
 and OpenAI.

93
00:06:59,620 --> 00:07:05,500
 The filing has 
 quotes from OpenAI and 
 Microsoft executives saying 
 they knew LLMs would train

94
00:07:05,500 --> 00:07:11,620
 on anything they could 
 get a hold of and 
 create a Doom Loop. 
 Which is not when 
 you run Doom

95
00:07:11,620 --> 00:07:16,700
 on every device you can 
 get a hold of. 
 Which was my first thought.

96
00:07:16,700 --> 00:07:18,0040
 Because it's so cool.

97
00:07:18,0040 --> 00:07:23,100
 No, a Doom Loop is 
 when you take everything 
 on the internet, 
 don't give back,

98
00:07:23,100 --> 00:07:27,760
 companies go out of business, 
 and eventually aren't 
 able to improve your 
 models because there's

99
00:07:27,760 --> 00:07:30,700
 nothing else left 
 on the internet.

100
00:07:30,700 --> 00:07:37,740
 Microsoft CEO Satya Nadella
 testified that clicks to 
 news sites fell by more 
 than 90% on Bing,

101
00:07:37,740 --> 00:07:41,220
 and presumably 
 2% on Google.

102
00:07:41,220 --> 00:07:46,620
 One document states 
 OpenAI created a hack 
 to get around the 
 New York Times paywall.

103
00:07:46,620 --> 00:07:51,100
 To scrape articles 
 or play Wordle without the 
 ads, we don't know.

104
00:07:51,100 --> 00:07:56,920
 OpenAI and Microsoft are 
 trying to argue that 
 this is all fair use 
 under copyright law.

105
00:07:56,920 --> 00:08:01,340
 In the meantime, 
 the Doom Loop will continue to 
 end the internet as 
 we know it.

106
00:08:01,340 --> 00:08:07,300
 I guess all you 
 can do is...
 go to globalglob.dev for hard 
 hitting news, 
 technology professionals

107
00:08:07,300 --> 00:08:08,300
 really care about.

108
00:08:08,300 --> 00:08:15,660
 I've seen the analytics 
 and I can agree it's 
 not being scraped by 
 the AI companies, which

109
00:08:15,660 --> 00:08:20,000
 I choose to take 
 as a compliment.

110
00:08:21,840 --> 00:08:26,220
 If you've bought 
 a computer in the 
 past year, you realized, 
 damn, computers 
 are 

111
00:08:26,220 --> 00:08:29,120
 expensive these days.
 Specifically memory.

112
00:08:29,120 --> 00:08:33,100
 Low-end devices are 
 being hit the hardest 
 because people don't 
 like spending a 
 lot of money

113
00:08:33,100 --> 00:08:35,100
 on cheap things.

114
00:08:35,100 --> 00:08:41,620
 The CEO of the 
 repairable phone company 
 Fairphone says memory can 
 cost up to 60% of 
 the bill of materials

115
00:08:41,620 --> 00:08:45,220
 for a phone 
 later sold for $400.

116
00:08:45,220 --> 00:08:51,000
 In addition to 
 memory being expensive, 
 it's also hard to 
 get a hold of, 
 especially for small

117
00:08:51,000 --> 00:08:55,640
 manufacturers. Leading 
 them to place orders 
 for everything they 
 can get, 
 whenever they can

118
00:08:55,640 --> 00:08:59,220
 get it, at 
 whatever price it 
 will be at the time.

119
00:08:59,220 --> 00:09:04,400
 Like when you were 
 really into Labubus. 
 You got all those 
 accessories. The cowboy hat,

120
00:09:04,400 --> 00:09:08,0080
 those gloves, 
 those look so cute.

121
00:09:08,0080 --> 00:09:10,820
 We're still talking 
 about you 
 by the way.

122
00:09:10,820 --> 00:09:14,460
 These smaller companies 
 now have to work around 
 their new limitations. 
 Like designing

123
00:09:14,460 --> 00:09:19,900
 a hardware with a 
 wider range of options, 
 testing memory to make 
 sure it's new 
 and not refurbished,

124
00:09:19,900 --> 00:09:24,100
 and even changing prices 
 the second they know 
 costs have changed.

125
00:09:24,100 --> 00:09:28,300
 The price increases are 
 all due to large 
 companies making AI 
 data centers.

126
00:09:28,300 --> 00:09:31,900
 But you don't want 
 to hear me complain 
 about that yet again.

127
00:09:31,900 --> 00:09:35,180
 So we'll also put 
 the blame on...software developers?

128
00:09:35,180 --> 00:09:38,0060
 Yeah, yeah, 
 we'll also blame 
 software developers.

129
00:09:38,0060 --> 00:09:40,300
 They're always buying 
 too much RAM.

130
00:09:40,300 --> 00:09:43,460
 Do I need 96 gigs 
 of RAM in my desktop?

131
00:09:43,460 --> 00:09:50,000
 No. But it's cool 
 and I apologize for 
 being part 
 of the problem.

132
00:09:51,0060 --> 00:09:55,700
 Google finally gets 
 to brag about their 
 AI hacking 
 other companies.

133
00:09:55,700 --> 00:10:00,0020
 After open AI 
 and Anthropic got all 
 the free press when 
 they announced that

134
00:10:00,0020 --> 00:10:05,100
 their AI models escaped 
 containment during testing, 
 Google now confirms that 
 Gemini did

135
00:10:05,100 --> 00:10:09,940
 the same thing 
 this past May and 
 hacked three 
 different companies.

136
00:10:09,940 --> 00:10:14,740
 Gemini was able to 
 hack into these 
 other sites by 
 using valid credentials.

137
00:10:14,740 --> 00:10:18,260
 One breach was from 
 flat out guessing 
 a valid password.

138
00:10:18,260 --> 00:10:22,660
 So please stop setting 
 important passwords to 
 company name plus year.

139
00:10:22,660 --> 00:10:27,140
 And the other two 
 breaches came from the 
 model finding passwords 
 and public repositories

140
00:10:27,140 --> 00:10:32,580
 over the internet. *Large Sigh*

141
00:10:32,580 --> 00:10:37,140
 Google has known 
 about the hacks 
 since July, but 
 chose not to 
 disclose until 
 now because

142
00:10:37,140 --> 00:10:39,700
 the model didn't 
 cause any harm.

143
00:10:39,700 --> 00:10:44,780
 Their stated reasoning 
 is that this is 
 an incident similar to 
 an ethical hacker 
 breaking into

144
00:10:44,780 --> 00:10:47,300
 a system and 
 then reporting it.

145
00:10:47,300 --> 00:10:52,380
 Google notified the 
 affected companies, but 
 did not publicly state 
 who they were.

146
00:10:52,380 --> 00:10:56,980
 But they also notified 
 federal authorities, 
 leading me to think 
 they hacked three 
 businesses

147
00:10:56,980 --> 00:11:01,460
 all owned by the 
 same government contractor, 
 Alphabet.

148
00:11:01,460 --> 00:11:04,740
 Whoever that is.

149
00:11:04,740 --> 00:11:06,820
 And that's all the news we logged this week.

150
00:11:06,820 --> 00:11:11,540
 If you enjoyed the show, tell your children, and if you didn't, tell your kids friends.

151
00:11:11,540 --> 00:11:13,380
 If you watched the video, please like and subscribe.

152
00:11:13,380 --> 00:11:18,540
 And if you listen to the audio only podcast, please leave a review somewhere, preferably

153
00:11:18,540 --> 00:11:21,180
 not served by a court processor.

154
00:11:21,180 --> 00:11:25,500
 For more news before the next episode, remember to visit global glob.dev for news technology

155
00:11:25,500 --> 00:11:31,420
 professionals really care about or even better than that, you can sign up for our weekly newsletter,

156
00:11:31,420 --> 00:11:37,380
 which has everything you may have missed, plus even more news that we couldn't fit into this video,

157
00:11:37,380 --> 00:11:43,820
 or just couldn't think up enough jokes for just sign up at global glob.dev/newsletter.

158
00:11:43,820 --> 00:11:45,500
 Until next time, go twitles and bits.

159
00:11:46,460 --> 00:11:50,620
 [MUSIC]