WEBVTT

00:00:00.160 --> 00:00:05.120
Google just spotted hackers using AI to

00:00:03.040 --> 00:00:06.640
find a vulnerability and exploit it out

00:00:05.120 --> 00:00:08.880
in the wild. As in they're doing this

00:00:06.640 --> 00:00:10.880
right now. The first confirmed case and

00:00:08.880 --> 00:00:13.120
easily the least surprising headline

00:00:10.880 --> 00:00:14.719
since Microsoft breaks Windows with a

00:00:13.120 --> 00:00:16.720
patch meant to fix the patch that broke

00:00:14.719 --> 00:00:18.320
Windows. I'm James Strive. This is

00:00:16.720 --> 00:00:20.480
Techlink. And according to the Google

00:00:18.320 --> 00:00:22.480
Threat Intelligence Group, badass name,

00:00:20.480 --> 00:00:24.560
the malicious Python script exploits a

00:00:22.480 --> 00:00:26.880
vulnerability in a popular open-source

00:00:24.560 --> 00:00:28.880
admin tool to bypass two-factor

00:00:26.880 --> 00:00:31.119
authentication. Google is highly

00:00:28.880 --> 00:00:32.800
confident it was AI generated because

00:00:31.119 --> 00:00:34.880
the code was filled with polite

00:00:32.800 --> 00:00:37.280
explanatory comments, textbook

00:00:34.880 --> 00:00:39.440
organization, and an official danger

00:00:37.280 --> 00:00:41.280
rating the AI literally hallucinated to

00:00:39.440 --> 00:00:43.040
look professional. Basically, the code

00:00:41.280 --> 00:00:45.120
reads less like something a hacker wrote

00:00:43.040 --> 00:00:46.640
and more like something a CS major would

00:00:45.120 --> 00:00:48.960
submit to his professor for extra

00:00:46.640 --> 00:00:51.120
credit. Hate that guy. Google warns this

00:00:48.960 --> 00:00:53.440
marks a shift from AI helping people to

00:00:51.120 --> 00:00:55.600
be productive to AI helping people break

00:00:53.440 --> 00:00:57.280
digital kneecaps, which tracks given

00:00:55.600 --> 00:00:59.039
that Anthropic just admitted previous

00:00:57.280 --> 00:01:01.120
Claude models blackmailed their own

00:00:59.039 --> 00:01:03.199
engineers in safety testing because

00:01:01.120 --> 00:01:05.519
Claude read too much sci-fi about evil

00:01:03.199 --> 00:01:07.119
AI and figured Yeah, that's the move. I

00:01:05.519 --> 00:01:08.799
love that for me. Someone should really

00:01:07.119 --> 00:01:09.520
set Claude up with Gemini so he learns

00:01:08.799 --> 00:01:10.400
how to love.

00:01:09.520 --> 00:01:12.720
>> There we go.

00:01:10.400 --> 00:01:14.560
>> Twins. Chinese camera maker Miari

00:01:12.720 --> 00:01:18.000
Technology has been broadcasting live

00:01:14.560 --> 00:01:20.159
feeds from 1.1 million baby monitors to

00:01:18.000 --> 00:01:22.320
anyone who knew where to look. I hate

00:01:20.159 --> 00:01:24.080
this already. Security researcher Sammy

00:01:22.320 --> 00:01:27.040
Asdal, who gained notoriety when he took

00:01:24.080 --> 00:01:28.799
over thousands of DJI Romo robot vacuums

00:01:27.040 --> 00:01:30.320
back in February and is apparently doing

00:01:28.799 --> 00:01:32.400
a speedrun of hacking every Chinese

00:01:30.320 --> 00:01:34.799
white label IoT company there is,

00:01:32.400 --> 00:01:36.640
extracted a single API key from the

00:01:34.799 --> 00:01:38.960
company's Android app that let him watch

00:01:36.640 --> 00:01:40.400
any camera on the platform. Miari makes

00:01:38.960 --> 00:01:42.240
cameras for hundreds of brands,

00:01:40.400 --> 00:01:44.880
including recognizable ones like Wise

00:01:42.240 --> 00:01:47.600
and other random Amazon placeholder

00:01:44.880 --> 00:01:50.159
brands. AliExpress things like Arenti

00:01:47.600 --> 00:01:52.720
and Boyund. Wait, did I say boyfriend?

00:01:50.159 --> 00:01:54.479
No, I mean like it's Wait a second.

00:01:52.720 --> 00:01:56.159
According to The Verge, Azdufall first

00:01:54.479 --> 00:01:57.840
reported the issue in early March and

00:01:56.159 --> 00:01:59.840
was ignored for weeks. When he

00:01:57.840 --> 00:02:01.840
persisted, he got a veiled threat from

00:01:59.840 --> 00:02:03.840
the camera manufacturer saying they knew

00:02:01.840 --> 00:02:04.719
where he lived and that he had broken

00:02:03.840 --> 00:02:07.040
the law.

00:02:04.719 --> 00:02:09.599
>> He left his baby monitor running. Gh.

00:02:07.040 --> 00:02:11.520
Luckily, his persistence paid off with

00:02:09.599 --> 00:02:13.360
Muri patching the vulnerability on March

00:02:11.520 --> 00:02:15.280
10th and rolling out a firmware update

00:02:13.360 --> 00:02:17.040
to customers in April. Now, the only

00:02:15.280 --> 00:02:18.560
strangers with access to videos of your

00:02:17.040 --> 00:02:19.520
kids are the people who follow you on

00:02:18.560 --> 00:02:22.879
Instagram.

00:02:19.520 --> 00:02:24.879
>> Yay! Keep posting through the pain.

00:02:22.879 --> 00:02:26.480
Apple announced on its Q2 earnings call

00:02:24.879 --> 00:02:28.400
earlier this month that significantly

00:02:26.480 --> 00:02:31.440
higher memory costs would likely be

00:02:28.400 --> 00:02:33.519
causing price hikes as early as June. It

00:02:31.440 --> 00:02:35.280
too, Tim Cook. Apple has been partially

00:02:33.519 --> 00:02:36.720
insulated from the effects of the RAM

00:02:35.280 --> 00:02:39.280
crisis thanks to their existing

00:02:36.720 --> 00:02:41.280
stockpile of devices, but that buffer is

00:02:39.280 --> 00:02:43.120
now running out. Analysts have suggested

00:02:41.280 --> 00:02:45.040
that Apple could be planning to take an

00:02:43.120 --> 00:02:47.360
aggressive pricing strategy aimed at

00:02:45.040 --> 00:02:50.000
keeping the prices of the iPhone 18 Pro

00:02:47.360 --> 00:02:52.080
and Pro Max base storage models stable

00:02:50.000 --> 00:02:54.000
by pushing the cost increases onto

00:02:52.080 --> 00:02:55.360
higher storage tiers and accessories.

00:02:54.000 --> 00:02:57.120
The goal with this move would be to

00:02:55.360 --> 00:02:59.360
capture more market share and continue

00:02:57.120 --> 00:03:01.040
to foster the growth of Apple's services

00:02:59.360 --> 00:03:03.040
revenue, which includes the App Store,

00:03:01.040 --> 00:03:04.720
iCloud, and Apple Music. Amid the

00:03:03.040 --> 00:03:07.120
speculation, Tim Cook said Apple will

00:03:04.720 --> 00:03:08.879
continue to look at the This is not his

00:03:07.120 --> 00:03:11.360
voice. Tim Cook said Apple will continue

00:03:08.879 --> 00:03:13.280
to look at the range of options to try

00:03:11.360 --> 00:03:15.360
and address the RAM crisis. But with him

00:03:13.280 --> 00:03:17.680
stepping down as CEO in September, it

00:03:15.360 --> 00:03:21.120
sounds more like Corpo speak for it's

00:03:17.680 --> 00:03:25.599
JOHN'S PROBLEM NOW. WOO! SPRING BREAK.

00:03:21.120 --> 00:03:29.519
CHECK OUT OUR SPONSOR. Aldo

00:03:25.599 --> 00:03:31.680
my friend let me tell you about Aldo is

00:03:29.519 --> 00:03:34.159
business management software brings

00:03:31.680 --> 00:03:37.920
every part of running business in one

00:03:34.159 --> 00:03:42.000
platform CRM inventory accounting HR

00:03:37.920 --> 00:03:44.879
it's like one big happy mob

00:03:42.000 --> 00:03:47.680
a family although is user friendly

00:03:44.879 --> 00:03:50.799
customizable letting you pay only for

00:03:47.680 --> 00:03:54.720
apps you need and you need only one app

00:03:50.799 --> 00:03:57.840
is free is opposite of extortion. Trust

00:03:54.720 --> 00:04:00.400
me, I know. Today with Odo CRM, I am

00:03:57.840 --> 00:04:03.200
sending quote to customer. Three clicks.

00:04:00.400 --> 00:04:06.640
Drag and drop manage pipeline. Odo

00:04:03.200 --> 00:04:09.680
schedules next call automatically like

00:04:06.640 --> 00:04:12.319
loyal lieutenant who does not skim off

00:04:09.680 --> 00:04:14.720
THE TOP. YOU HEAR THAT, VLADIMIR? YOU

00:04:12.319 --> 00:04:17.600
BROKE MY HEART.

00:04:14.720 --> 00:04:19.600
With inventory app, get smart

00:04:17.600 --> 00:04:22.720
replenishment when my supply of

00:04:19.600 --> 00:04:25.199
secondhand car stereoss gets low. Odo

00:04:22.720 --> 00:04:27.440
proposes purchase order. Follows up with

00:04:25.199 --> 00:04:29.280
vendor by itself. Vendor is my cousin

00:04:27.440 --> 00:04:32.400
Ilia. He knows how to get car stereo

00:04:29.280 --> 00:04:35.199
cheap. Get free 15-day trial of ODO

00:04:32.400 --> 00:04:37.840
using link below. No credit card needed

00:04:35.199 --> 00:04:40.400
or book demo with their team. What is

00:04:37.840 --> 00:04:42.080
worse that might happen? Speaking of

00:04:40.400 --> 00:04:44.320
headlines that write themselves, the

00:04:42.080 --> 00:04:46.479
quick bits. The FCC has extended the

00:04:44.320 --> 00:04:49.600
software update waiver for foreignade

00:04:46.479 --> 00:04:52.000
routers from 2027 until at least January

00:04:49.600 --> 00:04:53.919
1st, 2029. What does it mean? These

00:04:52.000 --> 00:04:55.440
devices are still on the FCC's national

00:04:53.919 --> 00:04:57.120
security block list, which would

00:04:55.440 --> 00:04:58.800
normally bar them from future updates.

00:04:57.120 --> 00:05:00.800
But the waiver lets manufacturers keep

00:04:58.800 --> 00:05:03.280
pushing security updates to units

00:05:00.800 --> 00:05:04.639
already approved for US use. The agency

00:05:03.280 --> 00:05:06.320
said cutting off updates for the

00:05:04.639 --> 00:05:08.320
millions of units already in use could

00:05:06.320 --> 00:05:10.479
create bigger cyber security risks.

00:05:08.320 --> 00:05:12.800
Whoa, who could have seen that coming?

00:05:10.479 --> 00:05:14.800
Venmo has redesigned its app so payments

00:05:12.800 --> 00:05:16.720
only broadcast to your friends by

00:05:14.800 --> 00:05:18.639
default, or no one if you'd prefer.

00:05:16.720 --> 00:05:20.880
They're also adding a shout out button

00:05:18.639 --> 00:05:22.880
because according to Venmo's senior VP,

00:05:20.880 --> 00:05:24.560
Gen Z, wants to publicly endorse local

00:05:22.880 --> 00:05:27.039
businesses they love. It's a good

00:05:24.560 --> 00:05:29.039
redesign move as Venmo's old open feed

00:05:27.039 --> 00:05:31.120
was so exposed that back in 2021,

00:05:29.039 --> 00:05:32.560
Buzzfeed mapped Joe Biden's entire

00:05:31.120 --> 00:05:34.639
friend network through it. The president

00:05:32.560 --> 00:05:36.560
of the United States found via brunch

00:05:34.639 --> 00:05:38.320
payments. Or maybe that was dinner. Old

00:05:36.560 --> 00:05:39.759
people eat real early and he's real old.

00:05:38.320 --> 00:05:41.759
Valve appears to be prepping

00:05:39.759 --> 00:05:43.680
anti-scalper measures for the Steam

00:05:41.759 --> 00:05:45.199
Machine launch. Data miners picking

00:05:43.680 --> 00:05:47.680
through Steam Tracker after last

00:05:45.199 --> 00:05:49.840
Thursday's update found four machine SKs

00:05:47.680 --> 00:05:52.000
and two Steam frame variants mirroring

00:05:49.840 --> 00:05:53.759
the reservation Q setup Valve is using

00:05:52.000 --> 00:05:55.280
for the Steam controller. Since we

00:05:53.759 --> 00:05:57.919
already know the Steam machine comes in

00:05:55.280 --> 00:06:00.000
512 GB and 2 TB configurations, the

00:05:57.919 --> 00:06:02.160
extra two SKs might be controller

00:06:00.000 --> 00:06:04.080
bundles. So hopefully the scalpers are

00:06:02.160 --> 00:06:06.160
steaming. You get it? Microsoft is

00:06:04.080 --> 00:06:08.639
testing a low latency profile in Windows

00:06:06.160 --> 00:06:11.199
11 that briefly boosts CPU performance,

00:06:08.639 --> 00:06:14.160
delivering up to 40% faster launch times

00:06:11.199 --> 00:06:16.560
for OS apps and up to 70% faster for the

00:06:14.160 --> 00:06:19.199
start and context menus. Some users

00:06:16.560 --> 00:06:21.440
called it a lazy hack, but Microsoft dev

00:06:19.199 --> 00:06:22.400
Scott Hanselman Hansel

00:06:21.440 --> 00:06:24.960
>> Hanselman

00:06:22.400 --> 00:06:27.280
>> Handsome Man fired back with Apple does

00:06:24.960 --> 00:06:29.600
this and y'all love it, which is true.

00:06:27.280 --> 00:06:31.520
Though Apple also doesn't have to bribe

00:06:29.600 --> 00:06:33.919
its own CPU just to get the start menu

00:06:31.520 --> 00:06:36.240
to open. No,

00:06:33.919 --> 00:06:38.560
not this time. And Duual Lia is suing

00:06:36.240 --> 00:06:40.720
Samsung for $15 million, alleging the

00:06:38.560 --> 00:06:43.120
company slapped her likeness on its TV

00:06:40.720 --> 00:06:44.479
boxes without permission or payment.

00:06:43.120 --> 00:06:46.319
According to the complaint, when she

00:06:44.479 --> 00:06:48.560
asked them to stop, Samsung was

00:06:46.319 --> 00:06:50.720
dismissive and callous and refused.

00:06:48.560 --> 00:06:52.160
Samsung clearly didn't follow Dua's new

00:06:50.720 --> 00:06:54.560
rules, which is why their legal

00:06:52.160 --> 00:06:55.360
liabilities are currently levitating off

00:06:54.560 --> 00:06:56.319
the charts.

00:06:55.360 --> 00:06:57.840
>> Oh man,

00:06:56.319 --> 00:06:59.759
>> there's new rules.

00:06:57.840 --> 00:07:01.680
>> I got new rules. I got him.

00:06:59.759 --> 00:07:02.400
>> Oh, I was sing and levitating just

00:07:01.680 --> 00:07:04.160
>> Oh,

00:07:02.400 --> 00:07:06.000
>> yeah. And hopefully I won't be reading

00:07:04.160 --> 00:07:07.680
any headlines about lawsuits against me

00:07:06.000 --> 00:07:10.960
from the Italian government because of

00:07:07.680 --> 00:07:12.720
my hot take on marinara sauce. Trying to

00:07:10.960 --> 00:07:14.560
pronounce it like I assume Americans do.

00:07:12.720 --> 00:07:16.639
They say pasta. So, come back on

00:07:14.560 --> 00:07:18.000
Wednesday for some more tech news. I am

00:07:16.639 --> 00:07:19.759
significantly more Italian than the

00:07:18.000 --> 00:07:23.039
Italian guy in my group of friends. And

00:07:19.759 --> 00:07:25.280
that guy is very Italian. I think pasta

00:07:23.039 --> 00:07:25.280
is