Everyone is hacking their TV ⟡ VoidZero Framework Open Sourced ⟡ OpenCode Hacked ⌁ Syntax Weekly ⌁

0:00What's up everybody? It's Syntax Live, the mic has been hot and now it is hot and we're all hot. We're ready to go guys. There's so much to get into. Jev got images. Anthropic made a get replacement. Void is open source. There's a ton, a massive amount more stuff going on as always. My name is Scott Tilinski. With me as

0:18always is C.J. Reynolds and Wes Boss. What's up guys? Yo. Not much. I am we got GitHub Universe next week. This is so we got one of those crunch weeks where you got to get everything done. This next week we're going to be out and there's no time Oh, there is time but no

0:36time to do a a ton of stuff on the road. So, I'm I got a busy week coming up but I'm stoked to talk about it. Yes. C.J., how you feeling? Feeling good. I was telling Wes before the stream I found a photo frame at a thrift store [laughter] for 20 bucks. So, that's that's what I'm going to spend my week on is hacking that thing, make it a smart

0:55smart display. one I've never seen before. It's rare. Can you show us real quick, C.J.? It's round which is fascinating. It's circle. [laughter] It looks alien. Yes. Yeah, I didn't know when I I cuz it was in the box sealed and I the moment I opened it I was like, what is this thing? But turns out it's the same chip

1:13as the one that Wes hacked. It's just like a square with the black circle around it. Man, I cannot walk through a thrift store anymore without being like, what can we hack? What do we what do we hook up? Photo frame, old Android device, like everything I'm I'm looking at with new fresh eyes these days, you know? It's like, what old stuff in here

1:37can we crack open and somehow repurpose? Yeah, I just put my kids lunches on the photo frame today. So, it scans the PDFs that the school sends out for the kids lunches and puts the the correct lunch for the day of and then puts tomorrow's lunch after noon. After 1:00 p.m. it starts showing tomorrow's lunch on the frame. So, man, I love this frame

1:58project. It's so sick. kids teacher emails is probably the highest use case of AI. I have like a whole Grokbot going. It's just constantly evaluating everything, adding it to our calendar, scraping the website, asking questions, and it's great cuz anytime you have a question or anytime you want to glance at the calendar, you just have

2:17absolutely all the data available. Yeah, sick. All right, guys. Well, you want to get into the first thing which is Void has gone open source. Void, the the from the Vit Plus or is it Void Vit Plus did Void? Or Void Plus? was the company. Vit Plus and Oh, no, sorry. Void's Void Zero was the company. Void was the hosting platform/deployment

2:45thing. Exactly. And if you missed all of that, uh check out Syntax episode 991. Uh we went into it. And this was before Void Zero got acquired by Cloudflare. Uh they were doing all of this stuff. And probably one of the reasons they got acquired because So, if you haven't heard of it, um void.cloud is essentially like a zero-config way to deploy to Cloudflare. Now, deploying to Cloudflare is already pretty easy, but the uh Void team built the CLI. So, all you have to do is say Void deploy, and it automatically deploys to Cloudflare for you, and you don't have to manage like the Wrangler

3:22config and and all of the other stuff. So, um that's one aspect of it, like the Void platform. I believe they also uh the way that it deploys isn't necessarily directly to your own Cloudflare dashboard. It's almost Think of them as like the Vercel of Cloudflare in a sense. They make it really easy to deploy.

3:40Yeah. They also went like full like almost Next.js and have a like you could use it with like TanStack Router or any of these existing frameworks, but they also built their own little meta-framework that works super well with things like routing, integration with database, you know, like basically they took every single little Cloudflare integration, object storage, cron jobs, key-value cache, emails, queues, AI gateways, SQLite, all of that, and they made adapters for each of those so that you can use it directly in They kind of made, like we've been asking forever, like where's the Laravel of the JavaScript world? Um they kind of made that. And it didn't really catch on

4:25cuz it was just like early access for like a couple weeks, and then they got purchased by Cloudflare and a bit of the attention was off of that. Yeah. I would also say it it didn't come out at the right time, either, because like I think it if it would have come out a year and a half earlier or something, I think it would have done much bigger

4:44bigger news. Actually, uh but that's that's the that's the announcement here is that framework, which was initially like not open source, you could just use it and then use it to deploy to the Void platform, which at the time wasn't part of Cloudflare, um that was a thing. But the announcement today is that it's actually open source. So there's a Git repo with all of that framework stuff. And And that's the key distinction to make when you're talking about Void. So you have Void the deployment platform, and then Void the framework. Um so this has, like West mentioned, you've got server-side uh rendering and routing, you've got pages, uh static site

5:20generation, uh it's fully type safe. So it it took a lot of inspiration from some of the other meta-frameworks, especially like SvelteKit. So they have this idea of a dot server file, and you can put functions inside of there that are just functions, but you can call them from the front end, and you get full type safety. So it's very similar to like remote functions from SvelteKit. Um so yeah, they have all of that in the framework. Uh and then also, you can use it with your existing meta framework. So, TanStack, React Router, SvelteKit, you can use this Void plugin, which is literally just a Vite plugin,

5:54and now your existing app built on one of these meta frameworks can deploy to the Void platform as well. So, but yeah. It's pretty cool. Like, this is exactly the type of thing that you just want to give to an agent. And if you like the one thing I did with the Meta Muse is you could download the entire VM, and that included all of the prompts. And I went through it, and they have not exactly this, but they have a lot of the like, here's how you do database, here's how you do X, Y, and Z. Like, this is like soup-to-nuts everything you need from

6:29like, the first little HTML hello world all the way to deployment and everything in between. So, it's it's kind of a nice tidy little platform that you can give an agent to build literally anything. Definitely. And I think now that it's open source, it might catch on more. Like, like like Scott was saying, like, it came out at a time that like I don't know, not many people were talking about it, but the fact that it's open source, you can point an agent at it. I mean, I think especially for vibe coding, too. Like, if you don't know anything about deployment or how to structure an app, if you use this

7:00framework, it's going to do a lot of stuff right cuz it's kind of just built in, and it's going to deploy to Cloudflare for you. So, um it's pretty exciting stuff. Next up, Jev Images is here. This is pretty exciting. So, we talked about Jev a couple weeks ago when it had launched, probably about a month ago. And Jev was the new AI model that can do decisions for you. So, you can do things like give it a question, and you also give it a bunch of answers, and it will pick the the answer that is is most likely, right? Or you can score it. Um there's a

7:34couple different primitives that they have. And the limiting factor of that was like it was fast, and it's very cheap, but the only input can simply just be text. So, now Jeff has rolled out, probably in response to um things like OpenAI rolling out their own kind of version of their decision API, they now have rolled out under you have to you have to turn it on. Type safe danger zone images true is this a

8:03new header you have to send. And you can now send images along with the question. So, I did a little bit of testing with it to see like how cheap is it and it it it depends on the size of the image. So, I sent a question with a single image, which is 850 by 850 pixels, and it cost 1/100 of a cent. So, that means you can you could send 10,000 images of 850 by 850, which is probably about the size of the image that you want to send for for many things. Um and then you can ask it a

8:41question and it will return the answer. That's that's it's pretty affordable. Um the other thing about it is that if you have multiple questions, you have to every time you reference the image in a question, it's essentially just uploading the image twice. So, I'm sure there are ways you can hack that, but that will sort of balloon your contact size and therefore the cost of

9:04it. What is this useful for? Um essentially any anything you want to ask questions about in an image. Um I saw some pretty cool demos where somebody says like, is there a child that has fallen in the pool? Um in this question, it was able to to figure it out. Or uh what type of code is this person in? Be it's so cheap that you can do analyze and you can analyze uh millions of images for relatively cheap. Or you can you can analyze every frame of a video for for relatively cheap. Like I was doing this with the Open AI Luna. I did a video on that and

9:45I was I was taking like, I don't know, 10 frames per second and it was costing me I think it was a What was it? A tenth of a penny to analyze a single image and it would give you coordinates of where the item in the image was, which is pretty impressive. You start to think about what can you do now that this

10:03stuff is so dang cheap. Yeah. Yeah, that box uh the primitive they added is really interesting, too. Which box primitive? What are you What are you talking about here? So, Type Safe AI added a box primitive that allows you to essentially scope their image Yes. Their their scope image You can scope the image detection or the whatever the the image decision API directly to a small box. So, you don't have to always

10:35submit the entire image. Oh, a box is a system one question for finding where something is in an image. So, no, you're not I don't think it's it's not submitting the whole image, but it's asking where in the image is this thing. Are you Is it Oh, man, I misread this then. Because like that's exactly what I built is like I would hold something up and I would ask the API to send me coordinates

11:04more sense. in the image and you can you can This would be really helpful for like um like security footage, you know, where is the person? Where are the people in this image? Are there people in this image? Um I don't know how good it can get in terms of like maybe duplicate images is one of the ones, but like I don't think you could ask it like where is Scott in this image? That would be

11:27pretty cool. Yeah, okay. Well, Uh, Andre Helvetica just posted about image maps. Would be fun to have a website that just gives you an image map of a currently detected item on a thing. [laughter] Oh, that would be fun. Oh, yeah. I I would love to get my home security stuff all local and then use something like this, but locally running obviously. I'm not going to send all that information to to Jeff or Type Safe, whoever. And then just be able to have that all cranking. That would be so cool to have all that local that without having to pay for a service to do that

12:02type of Yeah. security work. And like this kind of stuff the like the local people are probably being like, we've had this forever. You're like, my Wyze Cam Yeah, sure. has has had like like package detection on it for like 4 years. And these things are something that has existed on a specialty level for a long time, right? You train a very small model that is kind of good, you know? Every time Every now and then we have a flag that flaps in one of our cameras and it's like, "Package." It's Oh, that's that's a flag. That's that's not it as well. But

12:34Yeah. imagine that you could use something that's much more powerful um that can do anything. Yeah, I'll I'll mention real quick I'll be one of those guys, we've had this for a while, but there it's called a Frigate. Uh, frigate.video. You can self-host it. Yeah, it's a it's a weird name. Um, but they have a all kinds of guides on the different hardware that'll run on. It used to run on like a Google GPU a TPU, you know, like the Google Coral, like this little USB device you'd plug

12:59in. Oh, yeah, yeah. Um, but this is fully self-hosted package detection, person detection, like uh, animal detection. Um, and it runs on on local models as well. Like, "Oh, look, a bear." [laughter] Um, but yeah, you should look into this, Scott, if you want like local stuff. But I do see like combining this with a decision like a local decision model, like almost to get rid of the noise. So, I just installed some um, like self-hosted security cams over the

13:24weekend. They don't go to the cloud, but they do person detection, but there's so many false positives. Like I want something in between that like as a split second decision of whether or not I should actually get a push notification. And I think something like a decision model would be would be good for that. Yeah, we I would definitely need this cuz like like I have UniFi cameras and they're awesome at like detecting is this a person. And then I also have a bunch of Wyze Cams and it's just like it like especially this time of year, you know, a bee flies in front of it or like

13:57the there's a shadow, you know, it's a sunny day and there's a shadow and it just goes off all day long and I often wonder like how much compute in this world has been wasted due to like a tree in the breeze or like a spider web. Like I also have gigabytes of detection just from spiders crawling across in front of the nice warm camera lens. Yeah. And what's all these speaking of Wyze, now that we have all this like take back your hardware

14:27stuff going. Yeah. I'm I'm flashing custom firmware on all my on my Wyze today. I'm just deciding that right now. it? I'm going to just take take complete ownership of those cameras. They are mine. I'm the captain now. Yes. Thing you know, here, let me Yes, here you know, I have it open. Yes.

14:43you go. Yeah, you slap this on your your cameras, you're you're good to go. I've actually was looking into this because my UniFi Protect system, which I love, is so snappy, the interface is so good, um but like the cameras from UniFi are are pretty expensive and I thought like I've got all these Wyze Cams. I would love to get working in here. And and you have to have a special kind of camera to make it work as a third party in in the UniFi and I think that this will

15:14do it. Yeah, I advise you I'm on that train as well. I I started this weekend cuz I I've been on wise and I've been okay with all my video going to China, but I don't want that anymore. So I'm [laughter] not going to China. Man, poor wise has has had this like this awful It was 8 years ago that that happened where there was like one ping At a minimum at a minimum all video streams are going to an AWS server. So like anybody that works at that company that has access to that server could see my video and some employees do work in China. That's what I That's the

15:52the qualification there. But regardless, I want to put uh like firmware like this where it doesn't reach out to the cloud and then combine it with something like Frigate and then you have a fully offline in-home security system. [laughter] Yeah, this is so cool. I need this. Yeah. Yeah. And if the limiting The only moat now is having enough time to work on these freaking

16:16projects, man. Exactly. My god, [laughter] or enough energy or mental strength to be able to keep track of it all. Yes. Yeah. Well, and let's get to get into it a little bit. Like Shurco is asking why does this need to go to the cloud? I think the point we're making is that it doesn't, but that's the business model that a lot of these companies have, which is you pay them a monthly fee and then they detect

16:35packages and people in your camera feed. And to do that, they do it on their servers. But it doesn't have to. Doesn't need like we have like local computer is good enough now that and even can't like the the Reolink cameras that I bought now do on-device detection. So they're powerful enough on the device that they can do bounding box and stuff like that and you don't need a server. So I if it's It's got to be fast enough though. Like I have a U fee doorbell and it like it's local only, nothing to the cloud and it's a pain in the ass cuz every somebody rings the doorbell and it

17:10takes like 20 seconds to connect. It's like decrypting, blah blah blah. And then by the time I I I get the the app open, the person's walked away. It's it's it's just too slow for for that type of stuff. And it's uh probably hardware as well. And I also think like when you're looking at the price of these cameras, it's it's so tempting to

17:30go with the real cheap one on Amazon. But like just know like I'm paying like 100 bucks a year just for a lot of these Wyze subscription. I have like the unlimited Cam Plus. Oh wow, you get that? and I'm if I think about that, I probably have spent that for 4 years now. And for 400 bucks, I could have bought like a ton of really

17:50nice cameras for that. I just have micro SD cards in all of mine. Oh yeah. Yeah, that's it's such a pain in the butt scrubbing back though. The Wyze interface I used to be such a Wyze fanboy, but the the interface on it has gotten just so crappy and slow. Yeah. Well, good thing I have uh models to make me one that will be uh crappy,

18:11slow, and broken. Yes. Yeah. [laughter] Um speaking of local models, I got a fun little pallet cleanser of sorts. Um this is a website I found called llmspeed.dev. And this lets you feel what it's like to use a local LLM. So on the interface here, you can choose what hardware will you potentially get or do you have? And so they have all the popular like GPUs or like a Mac Studio or some of these other machines that you might run local AI on. And you can choose one. So for instance, I have uh two of these Strix Halo machines uh that have 128 gigs of unified memory. So you

18:50choose your what um hardware you would be using, and then you pick a local model. So the model I probably use the most is uh Qwen 3.8 27B. And then you click run. And it gives you a rough estimate of what it's like to get a response from that model. Um so if you're getting into the local AI space, this is a fun little thing to uh uh you know, figure out, you know, what hardware you're going to get and what

19:19it's like to use the models. This is relevant to my interests, CJ. Thank you so much for sharing [laughter] this. My computer, if it ever does get here, will be running some stuff. So, I'm in very interested in all this right now. get the the 512 or the 256? The 256, the 512 Max-Q has not been released yet. And I have a feeling it's

19:38going to be very expensive. Uh and and to the point where it's like you can cluster them. So, if in a couple of years, I feel like I or even like a year, I want to get another one for some reason, you just buy whatever the newest one then is and then cluster it instead of dishing out what an additional like 8K for

19:59256 gigabytes of RAM. gigabytes of RAM. It's insane. The like I was looking at a MacBook Pro and I have had 64 gigs for like 5 years. And I'm looking at the prices. I'm like, well, it kind of would make sense to go to 128, right? But the the jump from 64 to 128 is like like two or three grand or something crazy like

20:21On a laptop? Yeah. Yeah, holy key. I'm going to be going really thin with my next laptop. Going to be going 14-in, going to be going not that much spec and just going big boy on the desktop. I think I think that's the move. Yeah. Yeah, according to the simulator, you're going to be flying, Scott. Like every model I've chosen so far is like look at

20:41this thing, just spitting out tokens. Oh, yeah. [laughter] Oh, yeah. Yeah. Yeah, it's going to be sick. I'm going to be classifying so much stuff. [laughter] Oh, that's so good. I'm I'm stoked for you to get it on. And I man, I was looking at the prices of like a like a juiced up laptop and I was sitting there being like man, it's not far off from

21:05what Scott paid for the Mac Pro. Yep. It's That was It's a good move. Yes. I'm excited for you to get that. Thank you for being excited for me. I'm excited for me as well. I I [laughter] You know what? I I was A lot of people have been getting theirs early. Like it said it would ship in

21:20October and it's now here mid-September. And I'm here to say that mine has said it has not budged. It has said it's going to arrive November 12th through the 30th and it still says that to this very minute of which I check it way too much. Oh, man. All right. Should we talk about

21:37hacking TVs right now? Yeah. Let's do it. All right. Uh everybody is hacking their TVs and this un- unfortunately, my photo frame fame has died off and nobody cares about photo frames anymore. Everybody cares about hacking your TV this weekend. Um and it pretty much I'm going to take some credit for inspiring this because it's essentially the exact same thing that we did with the photo frame, which is you people are taking their smart TVs, which is like Android TV, Google TV, etc. And turns on turns out that they have ADB, Android development bridge, turned on by by default with a lot of these and you can simply just log

22:27in and scrape all of the garbage that these things show you, which is Let me tell you, as a parent I I love Google TV, but it drives me crazy cuz you turn the TV on and they see the the movies that you can rent. You know, we're paying for like 19 different services and then they're showing you movies that you don't have access to that are like, "Who's renting movies from Apple TV for

22:5224 bucks?" No chance. And and then the kids are just like, "I want to watch that movie." And we're like, "Well, we don't have that." You know? So what this does is it takes your launcher and it just will screw scrape all of the like garbage out of there. You know all the ads, all of the suggested videos. I'm sure that they they try to suggest shorts and I'm sure they're going to try to put games on here at some point. Um and will simply just bring it back to a very simple here are your apps, here are your inputs. Everything else is just kind of just scraped off and this thing

23:29has been blowing up over the weekend. Everybody's hacking their their smart TVs. It's called clean your TV on GitHub. And I'm just sitting here with my Samsung Tizen TV from who knows when. Yeah. Unable to do anything cuz yeah, I I I actually looked into it. There are some people who have rooted it

23:51cuz people were asking about the frame. So, there was someone who had rooted it, but I think it's a little risky. I haven't looked too deep into it cuz I just saw this last night. It's a repo called reframe. I can bump it over to you as on on Slack or something. Um So, yeah, the Tizen stuff is not as easy

24:12because it's obviously not Android. What's so funny the people who don't know anything about this stuff. People have been tweeting being like I don't have AD ABD on my Tizen on my Samsung TV and they're like what kind of version of Android is this TV? It's like okay, you don't you don't know anything. Yeah. I I So, there I mean there's a lot of misconceptions. So, this is a good comment from Art from CLT who says lol how is this different from launchers on

24:39the Android app store? It's not that different, but the fact that you can uninstall built-in apps with ADB is one of the unlocks here. Like the the TV ship with a ton of bloatware like Wes was saying. There's like all these extra apps, extra services running and there's no way in the UI to disable those, but you can disable them over ADB. So, it's not really much of For a lot of the TVs, you're not hacking it, you're not

25:03even rooting it or jailbreaking it. You're just removing bloatware and then also like replacing the main home app. Like that's one of the things that repo shows is they just built a custom Android app that acts as the launcher instead of the slow buggy one that has all the ads on it. So, Ex- Exactly. And like it's the same with the photo frames. It's like half of

25:19these photo frames came out of the box. You can just connect to it without having to do anything sketchy to it. And the other half did have to be like Yeah, at least you have to hold down some buttons or or flash something on it to be able to get access to it. But, that that brings me to like kind of like the next discussion here is that I I think we are probably in the final days of being able to do this type of stuff with LLMs um because like I I heard from thousands of people and quite a few people were saying, yeah, Claude Opus

25:52kicks me out and says, "No, you can't do this." Um and and I've had it I've had it with quite a bit of like hardware where you hook it up and it will simply just like it'll go go go and then it'll refuse to do to to like hack it or to like access it. And then there's like this like kind of like uh I don't know, delicate balance of like there's some stuff that you you shouldn't be able to do. You shouldn't be able to like put a custom firmware on something without people knowing. Um but then you also like you've bought this hardware, you should be able to run custom

26:26hardware on it. Yeah, I I should be able to. You know? Yeah. And I I like I like there I can certainly see a lot of the security issues with this type of thing. Like I bought a Google Home out of out of a thrift store this weekend. And like what if the person the thing that I bought that from the thrift store? What if the I'm going to scare CJ here, but what if the photo frame CJ just bought has something lower level in it and then he plugs it into his computer and then

26:52his bank account gets drained, you know? And the Google Home, I tried it. At least as I can't figure out how to do it, you can't run a custom firmware on it because it's like at a low level, they have like um what's a safe boot, where it will like check the fingerprint of the firmware, and if it's not on there, if it doesn't match up, then you can't do that type of thing. And And people will try to get around the cryptography, and at that point the LLM will say, "No, you can't do that." Um but I'm I'm curious and you guys have any thoughts on this type of

27:21stuff. Do you think that the LLMs are going to start putting a stop to this type of stuff? The cloud ones might. Uh local ones Hosted ones, yeah. Yeah. And I think like for Open AI and Anthropic, they almost have to just for appearances, right? They don't want just the average Joe to be able to do the hacking that used to require like years of experience. So, I think to keep up

27:44appearances, the hosted ones absolutely. But the open weight ones, you like they don't have to. Um and so I I was I was talking about this before the stream started. I have a an 8-year-old Android device that I have never been able to root or put custom ROMs on, and I wanted to. And I was like, "We're here. Like people are reverse engineering

28:02everything. Let's give it a try." Yeah. And I tried it with um GPT-6 Soul, and I tried it with Opus and Fable, and after a few prompts, I just would get cyber rejections. Um but then I tried DeepSeek V1 V4.1 flash um just on Alibaba Cloud, and it would it would just spin all day. And it it eventually actually it got root. And so like it does all the research that like a a security researcher would do. It would like It was like, "I found all of these CVEs that have come out over the past 5 years. That device hasn't been patched in 5 years. So, I'm going to try and see

28:38if any of these affect it." Yeah. if they do, it has to find an actual like exploit chain from there to get to root. And you were talking about safe boot. On this thing, it actually started looking into uh trying to get around the Titan chip that's on Pixel phones cuz that's how they prevent like custom

28:53firmware from being flashed. Oh. And it turns out that there was a CVE for the Titan chip that's not used anymore. Now it's like the Titan 2. Um and so you could like if you knew enough, potentially you could hack your way into um getting around the protections on that chip as well for some of these older devices. But

29:12Man. Yeah. The like I you said the cloud ones cuz like I had tried the Google Home. I I I opened up the Google Home. I soldered to the UR bridges on the Google Home and I I held the button down and I got it into like recovery mode. Um and I I was using GLM 35, not flash, just like the the regular one. And it it said, "No, I can't do this. This is not allowed." Um and at

29:36that point I was like, "All right. That's fair. I should probably not be doing this." [laughter] Yeah. Yeah, exactly. So I yeah, I like I there's probably going to be some like dark underground of like USB sticks that people pass around because you you even if the models that are trained are trained to not allow this type of things, they're open weight. And and like CJ has told us many times, you can just take those things and propose you can you can switch the weights of those, right? You

30:06can go ahead and and refine it, right? Is that the word for it? Fine-tune, yeah. Fine-tune, there we go. Yeah. Yeah, pretty much. Have you guys tried uh the reverse engineer everything stuff? No, tell us about that. So, reverse engineer everything or REA on GitHub is a project. I have not tried this yet. Uh but this is what people have been using to like this is what

30:32people used to get into the Tizen TV. And as I don't know if it's just a handful of skills or actual tools. Is that what it is? Yeah. Yeah, there's a really good uh video from Low-Level TV that shows this repo, but basically, like if you know what exists in the ecosystem, so like Ghidra is a tool released by the NSA for uh decompiling binaries and reconstructing like pseudo code that you can actually look into. And then there's various tools for like um Android um binaries and stuff like that. And so, reverse engineer everything just has skills that basically points to all of those various tools. Um they have a

31:09table in their repo here that talks about the different things that they can analyze. So, you've got like Rust binaries, WASM, SQLite databases, Electron apps. And basically, for someone that doesn't know anything about this space, it's basically just a guide. So, it's like, "Oh, the agent's going to figure out what are we trying to reverse engineer, and then what tools are available for it?" So, I think for anyone that hasn't tried this stuff before, doesn't know what tools exist, it's it's it's the launching off point. This is like the vibe coding of hacking, basically, because it tells the agent about all of these tools and gives it kind of like a

31:45loop of how to a plan of attack, right? Like, what should we look into first? What should we decompile? Where do we go from there? Um so, it's nothing revolutionary, but it is like a structured way for people that haven't done this kind of thing before. Yeah, beyond just prompting, "Hey, hack my thing, please."

32:03Exactly. Yeah. Help me figure out how to do this, cuz I that's what I did with the the photo frame is that I had a bunch of ideas, and it it kept telling me over the months, like, "No, can't do it. Can't do it. Can't do it." And it wasn't until I like gave it an idea of like, "Hey, can you connect to Android?" Or, "Oh, hey, like maybe there's some combination of buttons." That was like, "Oh, great idea." Like, it it doesn't necessarily know which ones to sort of pull up. And this is a great just

32:32huge repo of possible things to try. Exactly. Yeah. Yeah, so yeah folks out there in the chat, what are you reverse engineering? What are you what are you cleaning up? What are you doing? Let us know. I'm I'm interested in this stuff. I I saw somebody So, I have a workout device called a Tonal, which like tracks your lifts and it does like magnetic based resistance and it's awesome. And I saw somebody on the Tonal repo because again, that's just running Android. They opened theirs up, found a USB port, plugged into it, turned on ADB, and installed a custom app on it and now they're literally by lifting weights

33:11catching Pokémon in a in a like on the giant screen. They're like as they're pumping iron, like it's they're throwing Poké Balls at at Pokémon and stuff and I was just like, oh that is so so cool that people are just doing that. I was wondering all about like, okay, are they hitting the actual Tonal servers and like with a fake app or did they clone the app back end and are hitting their own custom back end? There's so many interesting things that you could do here with that because again, it is just an Android tablet. Like somebody said, you get access to being able to install

33:43stuff on it. It's just you're installing an app on Android. Speaking of, I'm going to transition this to from your your Tonal. Your your Tonal was one of the first things on the market using this thing called digital resistance and in the like gym space, a lot of people are starting to move to this thing called the Voltra, which is the same thing as in the Tonal, which is digital resistance. Essentially, it's just a little motor inside of this thing and as you pull, it it will make it heavier and lighter based on where you are in your movement and it will you could start like really heavy and it

34:20will decrease it 5 lb every single time. It's really cool. Um but they're expensive as heck. Like a a Voltra, once you ship it and add all the like attachments on, you're you're you're at three grand, which is going to be at more than that, cuz I'll tell you what, this looks appealing as being a single arm of this, but you need two. Like 90% of the things you do on on something like this is two separate motor or two separate handles for

34:48anything. And like one is only going to get you so far. You're going to do some like like hammer curls and some triceptic extensions and that's it. Like that's I know a couple people that have bought two of these and yeah, you're you're in more than an entire gym, but then again, you essentially have an entire gym

35:06with these these little things. And there's no subscription for this, right? Cuz with the tonal, there's a subscription. Yes. So, on the week or last week, some guy on Reddit posted, I've been working on an open-source version of this called the Kinetic the Kinetic gym. And basically, he's like I like jumped into it when he he announced this and I was pretty excited about it. Um the version he posted again is still like a thousand bucks to build, but I was I was kind of like like what what could you get that is like in something that has a you need something that has extremely high torque

35:44motor and you need something that has like very good control over that motor and you also need somewhere to put the because like you can use voltage to spin the motor, but when you spin the motor the other way, it becomes a generator. And then it's like regenerative braking in an electric car. So, the the

36:03electricity needs to go somewhere. So, you need like you need to burn that off as heat or store it in a a battery, something like that. So, I was like, "Hmm, that sounds a lot like my kids' hoverboard." So, I like messaged the guy and I was like, "Dude, like can you not just take a a motor out of a kids' hoverboard? Cuz

36:20like I think it does all of this stuff. Like it's it's super responsive. It it has lots of torque to be able to like like to Yeah, I don't know. I can I can go on this hoverboard and go up a hill at They're They're pretty amazing. Um and he's going to try it. He's He's He's building one out with a hoverboard motor. Um and that should bring it down from like 1,500 bucks to You can get these hoverboard motors for almost nothing. And many of these hoverboards, the motor controller can be hacked as well. You can put custom firmware on

36:50them. And that all sounds pretty dangerous to me because like my Tonal, I don't know how much weight this goes up to cuz my Tonal goes up to like 275 lb. And it could go from 0 to 275 lb in an instant, right? You click a button and then it's on that weight. So like you can imagine you're doing something crazy. Yeah, you could lose your teeth. It could pin you underneath it. Like the Tonal has all

37:10these like security bar tilt stuff. So So like if if you're stuck under it or whatever, it like automatically has all these these safety systems cooked into it. So that does scare me a little bit, but I do love this stuff. The The digital weight stuff, man, is so cool because like you said, you can have it simulate working with bands or chains or even stuff that you can't do. So like at various points in the resistance curve, change the weight at various points. Or if you're struggling to get it up, it's like an automatic spotter and it will decrease it by a pound or two or here or

37:43there. There's just so many cool possibilities with this stuff that uh this is sick to see. Yeah, you're going to need like a gym buddy to spot you. But like somebody that can like kick the cord out or something like that. Yeah. Yeah, cord [laughter] kicker. Yeah. Exactly. Uh well, you put Jeb on it. Hey Jeb, is somebody pinned under the

38:04500 lb of digital resistance? Yeah. [laughter] That's my skull been split wide open. Yes. Nice. Uh people are saying something We froze. People said they refreshed the page. I think it was a Yeah, we should be back. Right. Cool. And if you're just joining us, this is Syntax Weekly, our weekly live show where we talk about all the cool stuff that we're interested in and that's happening in this wonderful

38:30programming web dev world of ours. Um and uh we're also brought to you by Sentry. So, if you haven't heard of it, it is the world's best air monitoring platform. Uh if you're running any app in production, throw Sentry on it. Any errors that happen get reported back to the dashboard. You can see what was happening when a user ran into that error. Um it'll show you how many users have hit that error. They also have session replay where you can see exactly

38:54what a user was doing when it happened. Um they have tracing so you can follow errors from the front end to the back end. Check them out. Sentry.io/syntax to get 2 months free on the team plan. Hey, my wife's in the chat. Oh, hi. Say hi to Courtney, everyone. Hey. Hey, Courtney. Hey, Courtney. Yeah, way to get those

39:12those numbers up. That's Our poor wives. I always ask my wife to go like go to my TikTok, let the whole thing play, then like click the share button, copy to clipboard, you know. [laughter] I didn't ask her to do this. She's choosing to. This is on her her own choice, so I mean, you've got kids, too, Wes. You could put them to work. Like that's your

39:30Oh, yeah. Let's get them accounts. Yes. I don't need Yes, she sells numbers. I don't need fake like a phone farm. I just have like actual kids with real fo- real residential proxies. Yeah. Okay, uh let's talk about the Open Code hack. Yes. Yeah, big news here. Yeah. Big news. And I want to up front with some clarifications cuz it's it was a little bit confusing to hear that Open Code was hacked because for a lot of people, you install Open Code as a CLI tool and then you just use that to, you know, talk to your agents, write code, or whatever. Um that is not what was hacked, right? If

40:05you if you use Open Code from like the CLI and you just log in there, you're fine. What was hacked was the Open Code console. And so this is their like hosted solution really for like teams or it's essentially a web dashboard where you can plug in all of your AI subscriptions and then they they manage that for you. It's like an extra subscription. So, that's actually what was hacked um and it only impacted 1.4% of those users. So, not everyone using Open Co Console was affected and uh I tried to find the exact details of it. I think it turns out that there was like an older

40:43build of Open Co Console that someone got access to that somehow leaked some keys and then from there those keys were used to get in and and grab other people's API keys that were stored on the back end with Open Co Console. Um so this happened. It was ongoing. Dax even tweeted, my personal accounts are being attacked and now too the whole this whole new world with AI-powered hacking

41:05um is yeah is is a thing. don't let up. They don't let up and yeah his tweet later was, they've been non-stop trying to attack our systems for the past 48 hours. A side effect is everything is getting hardened, but we basically need agents going 24/7. Um and then another interesting aspect of this was they were getting uh cyber security throttled when they were trying to fix the attack, right? We were talked about this earlier like if you use a hosted model, it's going to say, "Hey, I'm going to I don't want to help you with that." Um but uh eventually they actually got access to Open AI's uh is

41:40it like uh Daybreak Daybreak, yeah. Daybreak Daybreak blue is their cyber model. And so as as a company, you can you can have to apply for it and you have to be vetted that you're not going to be some hacker that uses this thing, but that basically allows you to use Open AI models in a cyber security way to help you when attacks like this happen. And so they had already applied for it and then they got access to it during the attack to help them with it. Um in terms of fallout, uh lots of users just saw a ton of spend all of a sudden on their

42:13open AI API keys. And uh people that set limits great. Some people didn't set limits, but also open AI I'm not sorry not open AI open code is making everyone whole. So if you were affected by the attack, you'll get refunded. They're they're working directly with open AI and Google and and Anthropic for everyone that got affected. Um so yeah Lydia Hallie is from the Anthropic team and um essentially you can just you should have gotten an email. You can reach out to them if you were affected, but you'll get refunded. Uh same thing with uh the

42:47open AI team. Reach out to them you'll get refunded. Um but Wes, I think you have a bit to talk about here because one of the reasons that the attack was happening, they turn it turns out it had to do with like distillation and like stealing of of like the Yeah. Model thought? Yeah. So I did a video on like the like Chinese underground uh the black market for like API tokens. So I went on to Chinese Taobao and bought a whole bunch of tokens and and I was I thought like is this actually Claude is this actually open AI? And in some cases it certainly

43:25was and in in other cases they were just like putting a cheaper model on it. And it it and what happens is they they kind of double dip, right? They sell these tokens on the secondary market where you can buy access to them, but then they also I think more importantly they take the output of your prompts and then they use those to to actually train their own models um via distillation, right? Because like it's it's one thing for you to like get access if if you are a like a model trying to train your own. You You sorry

43:56you're trying to train your own model. It's one thing to like get access to Claude and be like, "Hey, create me a website." And then you have the output and then use that to train, but it's like it's even better to have like real world people working on real things and get their prompts and their outputs because that's that's that's real world use cases rather than things that you can just think of, right? That's that's one of the reasons why cursor is it was so valuable is they have years of data of people building stuff inside of cursor. Um so a lot of those outputs were very likely

44:26used. That's what they said it was a distillation attack. It has it very quickly what like people's budgets were very quickly spent like all the way as as much as they possibly could. So bit of a bummer there. Um yeah. I it does sound like he said like 1.3%. It does sound like they had some old instance like you said. They haven't had posted a postmortem just yet. Maybe by the time you hear this um not on the live stream there'll be a postmortem as to what happened, but probably like an old database that was just never cleaned up and that there was some security issue there. It does make

45:03me think like as much as I hate to like have API keys expire after like a month or two months um or as much as I hate to have like very low budget things in there because sometimes you want to spike on them, those things can stop and fortunately when this stuff will and

45:21does happen. Yeah. Exactly. I know I've been thinking about that exact same thing. The moment that this happened I was like, "Maybe I should be making all my uh keys shorter and then just dealing with the annoyance of redoing them cuz that that makes the most sense." This was a a really great Randy you can put up the tweet on my screen here from Combinator and it kind of makes you think about like with all this security stuff like do you give everybody access or do you give nobody access, right? Like they obviously have these models that can do awful things and and like should you give everybody that

45:58so that the people that are getting attacked can use it to defend themselves. Right now they're just giving access to people, but Yancey says, "My family's home got broken into and there are crazed schizophrenic men blasting their pew pews randomly. As as I sheltered my children, pew pew loaded the trigger freezes. I hastily make a call to someone I know. I went to a wedding with an Open AI

46:21employee employee and started praying." [laughter] Because like that's the thing is that like holy smokes we're getting blasted right now. What do I do? You better hope that you know somebody that knows somebody that works at one of these companies that on a weekend going to sort of give you access to this thing. [laughter] But they also did say like hey, don't

46:43wait. Don't wait. If you do need access to Daybreak blue, you can access and request access now so that you don't have to like hastily get it. You know sure more and more companies will start applying because like it any any company that has a security team probably needs access to that level of

47:04model at this point. Yeah. And they must have their own safeguards on there that they're just seeing like what are you doing with this? Right. If if you immediately use it to do some nefarious stuff, then I don't know that's it's a tough thing. I don't know that I would have the answers to this as to like what do you do? Do you give everybody access to this nefarious stuff and then the whole world just gets

47:25hardened? Because like like we said we're having fun hacking our Android TVs, but man, I guarantee you a year from now all the new stuff is going to be so much more locked down where we're going to be like looking back at it and be like like it's the same thing with like SQL injection. You remember the days of SQL injection? You where you could just type or 1 equals 1 into a search box and and you can have it that it doesn't exist anymore. Like you can't find that anymore. And like I guarantee you that this is the good days of this like hardware hacking and we're not going to

47:56have that any year from now. Yeah, I mean PlayStation 3 shipped with the ability to run Linux on it, straight up. Yes. Yeah. Locked down. Now though, people are hacking it again. [laughter] Yeah. It's interesting Wes that you mentioned this because like I I thought of this in terms of like prompt injection. Like I thought a prompt injection was going to be the end of a lot of this stuff. But a lot of the the companies with the frontier models have

48:22done a lot to prevent prompt injection. Yeah. But it's not prompt injection. It's just using it to do nefarious things at scale. Cuz like if you have thousands of agents all trying to hack at the same time, that's in some cases sort of a legitimate use of the agent in a sense. Um and that's not something we can just instantly protect against. Like we need denial of service protection and like various firewalls and like that's that's the thing that we need now that not necessarily preventing prompt injections, but like prevent uh denial of service because there's all these agents everywhere

48:54of various types. So, I everybody's getting nailed right now. Like you any website's traffic right now is just skyrocketing. This every like you do one query in an LLM and it sends out like 20,000 requests to different websites. And then everybody's all excited that their traffic on their website is 10x in the last 6 months and

49:14let me tell you, it's not people. Yeah. Yeah. It's not people, yeah. You know what a one made change I made to the new syntax website in the the V3 branch that we're doing, guys, is I have the API keys and all that stuff, the ENV vars are all done now via var lock and one password. So, they the keys just live inside of one password. It feels like that kind of stuff living there makes

49:39the most amount of sense. Cuz then you can just uh go and update it one place if you're using the key in multiple places or whatever, yeah. It's crazy that API keys are even a thing. Yes. Like we could do all this like two-factor auth and and multi-step and everything's locked down and then you just have this like one little string that you put in a text file that can do

49:59all of the same stuff. How do we How is that okay? That's And I I realize like OAuth is the answer to a lot of this these things, right? Instead of giving your agent an API key, you're probably have OAuth. And then then people get mad that you have to like re-auth every 2 weeks or

50:14something like that.

50:27Scott's Oh, we lost Scott's cam. Hear me? I see and hear him. Yeah. Chat, can you see Scott? What did I do? I didn't do anything there. That's crazy. Technical difficulties, folks. What a day. Yeah, I got hacked by agents. I got something running on my machine. Yes. Crypto miner got installed on my Sony

50:47camcorder. Hacking the cameras. When's that going to happen? I remember used to be able to get custom firmware for your Sony cameras. You still can. I'm not going to trust it with my expensive camera. Yes. They make one for the FX or not the FX3, the A7III that I have because there's just so many features, especially because that's a like a You know there's like weird regulations around that stuff. Like the FX3 cannot do video longer than 30 minutes because it's technically not classified as a video camera. So, it automatically stops your video

51:20recordings at 30 minutes. Very annoying. Let's talk about Anthropic releasing their own version of source control. Now, this is something that we see big companies do fairly often, right? Like Facebook famously has their own version of source control. Google also has their own version. So, Anthropic has come out and says like the way that we have worked has certainly changed. So, we

51:49Git is not like the move anymore for us. And I'll I'll read a quote here really quickly. It says, "As a mono repo grows, increasingly doesn't fit in that design space. The history of our [snorts] main branch alone is almost 100 gigs and compressed working copies over 25 gigs. Uh we perform an order of 25 million code checkouts per day for CI before counting developer environments, agent sandboxes, and research jobs. Fet- uh Fetch natively, that would be over 600 petabytes of Git traffic per day. So, I I think like one of the hardest problems to solve in this agentic era

52:28right now is everybody's out of space. Everybody's computer is just maxed out. There's work trees everywhere. Everything is getting absolutely huge. Um and they go on to say like, yeah, Git offers tools for working with a slice of repository, shallow clones, sparse checkouts, etc. etc. But, they have redesigned what Git looks like inside of Anthropic to to to work better for their I guess for their the crazy pace at at which they are working at. It's called antique. Um it does code search, um rich source control I am system, novel way of managing and landing large amounts of reviewed code,

53:10etc. etc. I don't know. What do you think? Is this Is this something we need? Obviously, they have a use for it. Do you think that people other than Anthropic are going to need something like this relatively soon? I don't need it, but I imagine large companies. But, but also like like can you go back to that number? Was it like 600 million checkouts a day? Is that what that was? Or 25 million

53:35Yeah. 600 petabytes, but 25 million code checkouts a day. I I I guess I don't understand the scale because like how are you reviewing that much? I guess if if you're only relying on age Yeah, right. So, you're only relying on agents to do the review, not humans. Yeah. That's how they're moving that fast, but I I

53:55I don't know. I don't know. is the huge bottleneck here. You know, you you can add a code change in like 2 seconds, but then like like a lot of people CI, and I know a lot of people CI bills are huge. That's a huge portion of where GitHub makes a lot of its money right now as well, which is just you have a pull request, and then this like 25 minutes of of checks needs to then run, and and that really slows you down because in that 25 minutes, you could have had 50 other pull requests in, and now you merge something, and now all those

54:30other ones that are sort of queued up for merging are now out out of date as well, and again, it's just a huge thing that ripples. Yeah. I would be curious to see what how it would work on a smaller scale cuz sure, you have these 10x-ers, maybe they're merging 100 PRs a day or something, but I don't even know if you

54:48need that scale for something like that. So, yeah, I imagine large companies, big code bases, people that have really adopted the agentic way of coding. Yeah. But other than that, I don't I don't know. Yeah, and a little small correction here too. The the source control system is called Scion. The code review system is

55:07called Antique. Oh, okay. That makes sense. Is that So, Paulo just commented, says, "Have you seen the drama? Apparently, it's just a slightly modified version of another source control with no attribution." How often is that going to start happening now where somebody builds something, the agent does a little bit of research and goes, "Hmm, this is exactly what I need." And it just builds that without realizing [snorts]

55:30that it just took half the stuff. And then the person prompting it doesn't know. And they're like, "Oh, look what I built." So. not [laughter] Yeah. Yeah, that's that's I've seen that as well. Like back when like everybody was one shotting apps, I would often see a lot of my like JavaScript 30 exercises almost exactly built out. And I just want I like I I understand that you didn't go and take that and then just do it, but like what happened is the agent found the thing like it was like a piano that

56:01we had built in one of the tutorials. And it basically just took that whole thing. It the exact same MP3s were used and everything. And uh I understand like they didn't want to rip it off, but it also just like went out and found my example and use that as a base. [laughter] Yeah. It's really funny. I mean we never talked about it like that when the one shots were happening, but yet like these one shots are just using Wes's example apps. Like

56:25Yes. Wes. It's just clone the repo. Yeah. Guys, I got to be honest. I did see people talking about Scion when it was released and I thought for some reason the car company from the early 2000s Oh, yeah. like had some sort of thing back in vogue or some reason. I I know literal

56:40no connection there between this thing. So interesting to see that this is not the early 2000s car company. It is it kind of crazy space. Like everybody is trying to either make the new a new GitHub or a new Git. And Yeah. like I don't I don't want a new version of either of those. Um maybe if I were to hit those problems, I would be into that, but especially with like I'm looking at the

57:06Cursor Origin, you know, the new GitHub. I don't want a new GitHub. It sucks that GitHub is having all of these issues right now, but I certainly hope they fix those. And it seems like they're about Cursor Origin today. Are you? No, I said who is. I even I I saw it that got released on the day that um you know, the GitHub was down and people were talking about it. And since then it has been very very quiet. Um Then you got something like uh Jujutsu Jujitsu which runs basically it's get

57:38fully get. It is basically get. Um like it's on top of get. Yeah. You have these types of things like augmenting it. So like maybe that is where the the future lies in augment rather than a new system. Yeah, it's a it it's it's either like something on top of it or something entirely different.

57:59Yeah. Like yeah, we don't work this way at all anymore. Why are we trying to like continually tweak this thing to make it work? We just need to start from scratch. Or what else? like I I Can Can we just talk for a second? I have something that I've been thinking about just talk? [laughter]

58:16All right. All right. All right, guys. We're talking here. What do you guys say? Because you talked about like Yeah, so like okay, the one shots being things that like weren't actually one shots just copying somebody else. And then the same idea of like what if an agent fork 3 and you didn't know it? Like I guess my main question and then I'll qualify it is like what are we losing in the

58:36agentic era? Especially when most of what we're doing is now concentrated in like two or three companies like Open AI, Anthropic, and Google. So for one, the one thing I think about a lot is Stack Overflow. Uh it used to be that when you ran into a problem you would post about it on Stack Overflow and then the answer would show up or like you know, somebody would show up to answer it. Or if you solved

58:57it yourself, you'd put the answer there. But like that was like the world's collective way of collaborating on problems. And essentially so that other people wouldn't have to spend as much time solving those same problems. Like that that's how it used to be, right? And now that we have AI we can just ask it to solve our problems for us. But what I think about is how because everyone has shifted to this way of working AI is solving the same problems over and over again and collectively we're not really learning from it. The only people learning from it are the companies that are now training the models using that output

59:34for the next better model. So, we we no longer have the open web where all of this stuff is stored and like we have access to it. Now, it's slowly being locked behind closed doors. Um and so, yeah, like Stack Overflow is one instance of like we solve a problem, we put it there, and now we don't have to solve problems all over and over again. Um and so, I I don't know. What

59:53what what thoughts do you have on this? Like Is Do you see any solutions to it? Do you think Yeah, I don't know. Yeah, there I have a couple thoughts. One, we are missing community and collaboration. We're missing those two things definitely. Uh but in the same regard, my problems are not your problem. Some of them are, but not all

1:00:10of them are, right? Yeah. So, like if you can build off of the foundations of someone else's problems that they've solved and then solve them for you, then maybe that's a good thing because like I don't know, the amount of times I'm like, "Oh, this is stupid or designed on my computer or phone or something, and I I just wish I could change it to fit my own personal use case. It's too much." But I'm also like

1:00:30that. I'm a tinkerer in those ways. But yeah, no, I mean, we are losing a lot of that stuff. One one system that I like to use, CJ, is is SWAMP. I've talked about this before. And the idea behind that is that instead of building instead of going to the AI to reinvent the wheel each time, you are building in what they're calling like behaviors. You're building in a behavior, and then that is being converted into code in a shared community space where people can pull in different behaviors. Like one of mine is to update and back up my

1:01:04Minecraft server. Uh so, therefore, that's not something an an LLM should be inventing or whatever. I make that public. Anybody with a Minecraft server that they're running can just use that same behavior, right? It's now and it's being executed in code rather than an AI. But Yeah, I I don't know. I I I lament the loss of

1:01:22community more than anything here. I it's got to happen because like like Stack Overflow has built their own agents like Stack Overflow where agents can then go post their findings. It doesn't seem to be catching on that much, but I had it twice in the past week like one which was my photo frame GitHub has over 200 either pull requests or issues from other people's agents and these are all little nuggets of things that people have figured out, pull requested, and now are are either merged or are just like issues that the the agent can look up to figure out how to how to get around, right? And like

1:02:06that is awesome because this is otherwise this would have all the same people had the exact same problems and a lot of people would not have been able to solve them otherwise. And and then the other one was like I have been having trouble with my Backblaze app on my computer spinning up the CPU way too high. Um and I found a blog post that someone said here here is a little script that will figure out which folders on your computer have millions of little files. That's that's what the problem was, right? So I gave my agent that blog post and then hit it found a whole bunch more and then

1:02:45it also wrote a little watcher so it could watch it over several days to see if it if the issue came back. And then I'm just sitting there being like wow I just saved solved a real problem that I've heard a lot of people complain about. What do I do with this now, you know? And uh at a very basic I said throw this into a gist so that like hopefully it will be searchable and findable for for regular people, but like I probably should format that down into a little blog post as well and put it out there for the world to see cuz I otherwise I don't

1:03:15think people would be able to would be able to figure it out. Um with I wouldn't have been able to figure it out without that initial blog post and I I you think about how much is lost and maybe it's going back into the training data, but I think in a lot of cases it's not. Yeah, there's a little bit of pushback in the chat. I I think I just want to clarify like really what I'm talking about here. Um cuz like one of them like a freedom dial was saying AI models are not locked behind closed doors. The problems they

1:03:43solve around GitHub openly. I mean, that's not true for a lot of people working at companies that don't push publish their code on GitHub, right? Like I'm thinking about like the just the daily use of models when you're working on maybe closed source stuff or stuff that has intellectual property. Um and a lot of times when people would post things to Stack Overflow, you'd kind of like anonymize it in a way. Like I'm trying to solve this particular

1:04:07problem. Here's my scenario. How would you solve it? But you do that without giving away all of the secrets of your code base and everything else. Um And so what I'm getting at is a lot of that isn't being captured and basically like one post on Stack Overflow that used to be like I would do a Google search. I knew how to craft my keywords in the right way to find the right Stack Overflow post that would

1:04:28answer my question. Done. How much How much energy was spent on that versus now I ask my agent to do it. It reads my whole code base. It visits 10 websites and then answers my question. And then someone on the other side of the world has the exact same problem and that exact same flow

1:04:45happens. It reads their whole code base. It visits 10 websites and then gives them an answer. But there's a quick There used to be a quicker way to get to the solution is what I'm getting at. And that data isn't shared. There's no There's no way that that that all of that is being shared. That's That's really what I'm getting

1:05:01at. Mhm. Yeah. But I think you're like I think like your your model West is ideal for the things that we can have like make it in a way that agents can contribute their solutions in their research so we don't have to waste cycles on it but I guess I'm just curious if there's like a a bigger solution that the world can benefit from cuz what you talked about Scott the swamp club that makes I haven't looked into it too much but it makes sense especially if there is some kind of forum where these workflows can be shared and that's one way of sharing the work that has been done up front but

1:05:37it's not on the same like granular granular level that something like Stack Overflow would be which is like individual problems it's like it's like bigger picture so I think like on the flip side as well I think there are a lot of cases where you simply just don't need the Stack Overflow either like how many times have you had a problem fixed where you're just like wow like this morning alone I had an agent find a short on my electronics project you know it helped me find it like an it's like hmm did you did you maybe blob a little bit of solder between these two pins holy

1:06:13smokes I did you know [laughter] damn that's that's amazing and like that didn't that didn't need a Stack Overflow issue like it maybe it previously did yeah and I and I think and I say this from the point like I am benefiting from these tools as well like you're talking about your electronics projects like I've had AI help help me fix my air conditioner or decide which cell phone booster I needed to buy and get the specifics about like like where the cell towers in my near my house and stuff like that and like that's research I would have done myself before so like those types of problems like it

1:06:48definitely helps with but I guess I'm just getting at the more we rely on this the more we get to a point where we it's basically the only thing we can use to solve those problems because the the way everything was shared on the open internet isn't being as shared as shared as much anymore yeah you're right well share it. Maybe maybe this is something that I even need on my own

1:07:10website. It's just like solve a problem. Hey, summarize this and just dump it on there. Not because any human's going to be reading this, but because it's just it's just there for the the sake of spinning less cycles. Good for the environment. Yes. Wow. Way to frame that. Uh cool. [laughter] What else we got, folks? Uh I have one that's kind of related sort of I mean everything's related, but um it is an esoteric language called kill switch. And the idea is it's a programming language that LLMs and coding agents can't figure out and don't

1:07:49understand. Oh, that's That's funny. That's the opposite of all of the other languages coming out right now. Exactly. So, but the idea I mean I right now it's just I think it's a bit of a joke. So, if you haven't heard of esoteric programming languages before, there's like Arnold Lang where everything looks like Arnold Schwarzenegger speak. And there's like there like a cat uh lol language or whatever. So, they're meant to be a joke, but I think about this from the perspective of like okay, well, let's say we do want to share on the web, but we don't want it to be trained on and eaten up by by agents. Something

1:08:20like this could could work. Um but what you're looking right now at right now is actually a kill switch program. It just looks like a bunch of paragraphs. And I think it's the there are certain keywords and things within quotes that will actually become executable, but this big long paragraph here is essentially a hello world program

1:08:41in uh in kill switch. Um and one I guess one of the ideas here and one it got my mind working because like if you made a language that had a bunch of keywords that triggers the cybersecurity alert of models. So, like let's say you're your every variable just was like root or exploit or something like that. Um now when it when you ask an AI to help you with that,

1:09:05it'll probably just refuse immediately. Uh because it's kind of funny, yeah. Right? [laughter] Um and what's the other aspect of this is like reverse benchmarks. So, they publish benchmarks and the idea is you want a model to do really bad on this. So, for example, like GPT 5 6 Luna cannot figure out this language. There's like a whole benchmark of you you have the repo, you have the language spec. Solve this programming problem. And uh you want to see more red here. That means that these models could not figure it out. Um I think the best was Opus 5, which got a 66% but still couldn't figure out three of

1:09:42the problems. Um so, yeah. Just another fun little experiment, but it got my mind thinking about like how how do we hide information on the web that like AI can't train on or it avoids, you know? They're doing it to us. We might as well do it to them. Yeah. We know they're We know you're doing it,

1:09:58models out there. What's the claw book or whatever that they made? The mold book. Mold book. The mold book, yeah. Oh my god. The mold book. Yeah. [laughter] [gasps] Um this Cheng Lou he is like like ex-React core team. He's the guy that built the text sizing library that everyone was freaking out about. What was that called

1:10:20again? damn guy in the whole world. Yeah. Smartest guy in the whole world put out something that I don't think anybody understands what it is. And And this is turn your regular JavaScript code into a neural net. And I I'll ask you guys if you understand this, but as far as I can understand it, it takes the actual running of the JavaScript code and turns those into neural net weights so that it can be then be evaluated. And he he went on to show a whole bunch of examples of using this to to like output UI on a website and it made it a little OS and

1:11:00all the replies are like holy smokes this is crazy and I I think it's mostly just for fun and I don't think most people actually understand what the heck this is actually doing. Do you guys Do you guys understand this? I ran to the slack to see to get West to explain it to me. Yeah, no, I don't know

1:11:17what [laughter] this is doing now. I I read about it for like 30 minutes I still don't understand it. I think so I my basic Understanding this is performative folks. Yes. Yeah. Well [laughter] and if I could try to be performative for a second I think it's like you're actually writing the model weights in

1:11:34the code. So like there's no training. You're act The actual code that you type would have been the weights that would have been trained into the model. That's maybe that's a close. I don't know if it's that's exact but that's kind of of them are like freeze, train the weights, and then resume. So you have

1:11:49like a real-time output. What What is this possibly used for? We don't know, but it Cheng is one of those guys that goes down a rabbit hole simply because he can and we need more people like this because like they're discovering and and maybe it's silly but maybe it's the a next big unlock on on how to do something, you know? Like the guy rewrote letter font sizing from scratch in in the browser. It was just as

1:12:20unbelievable. Yeah, he seems like he sees the world differently in the best possible way which yes, a great follow. The chat this is crazy. That's so true. Every single reply is just like holy smokes, wow and then everybody moved on to giving their impression of the iPhone duo and the flying Tesla. [laughter] Exactly.

1:12:47Uh what else we got here for you? Yeah, I got a couple of cool things to to end this out here. The first one is a font from Ant Fu. So, the the infamous Ant Fu um they're on the Vue core team, the Veet team, they do slide dev, uh all all kinds of stuff. But, this is a side project where they built a font that a Japanese font that shows furigana on top of each character. And so, if you're not familiar with Japanese, like there's Scott, you can correct me or maybe give me the words. Like, there's two different kinds of characters. One of them is like three. Okay. But, one of

1:13:23them is you can basically learn the whole alphabet and know the sounds of each. Do you know Do you know what that one's called? Okay, so hiragana and katakana, those are both you you you have characters which are mostly just a consonant-vowel pair. And so, you know, hato, you know, ka like that type of thing. And the hiragana's used for Japanese words, and my understanding is that katakana is used for foreign words. Like, if you were writing computa, you would write it

1:13:55in katakana. Okay. And then there is also kanji. Which is the uh Chinese characters that are often either words or combined to make words. And so, that's if you're learning Japanese, that's a lot harder because there's so many of them, and you can't know how what the word is or how to pronounce it just by looking at it. You actually have to know it. Um but, this font is fascinating because um you can turn it on, and then when you have characters that like aren't uh hiragana, it puts the hiragana on top of it, so you know how to pronounce it. Um but, also if you swap to um uh romaji, it

1:14:34gives you like human readable not human English readable uh ways of writing it on top of the Japanese itself. So, like kyō wa nihongo no benkyō o ashita shimasu. Ooh. Yes. Ooh. [laughter] Ashita hotto kyō no daigaku e. Gosh, this is so cool. yes and like this is cooler than even like I'm obviously like combine the combine this with like a translation app to help you but for learning the the characters and then also like being able to pronounce it super sweet and then also the fact that this is like embedded in the font so like when you type one of these one of these characters the font

1:15:15itself actually renders the pronunciation on top of it. Oh. So. Yeah, that's cool. See I I have all my Katakana and all my Hiragana memorized but I don't have my kanjis memorized obviously there's a ton of them and I only know like a good hundred of them so like this would be so perfect for me because I can read it all I don't need the Romanji I don't need the English I can just read the the actual characters but my God this would help me all the time if I'm building like a bot

1:15:46to help me practice because. I'm doing Duolingo right now. And that thing is so annoying I'm just going to like make my own damn one so this is sick. Oh. Another fun one I found is guitar strumming in the web browser so we don't have sound enabled so you won't be able to hear this but check it out it's guitaro.com goytoro.com

1:16:13and. You can enable audio okay Randy's going to enable audio for us so you can hear this. But first of all it's it's basically just like samples of all of the the notes and it maps it to your keyboard so you let me know if you guys can hear this or actually I think I have to let

1:16:27me reshare with audio. Sorry just a second. Yeah while CJ does that I'll tell you real quick deep sea flash 4.1 10117 I can't even pronounce it. Essentially, a smaller update to DeepSea Flash was released. It is free on open code, which is really cool. And I heard from quite a few people that they were able to use this to flash their photo frames because I heard from a lot of people who don't have a like an AI subscription that wanted to do this, and I wasn't sure what to tell them until I I saw a lot of people using this. So, if if that's you,

1:17:09check out free DeepSea right now. Yeah. And also on that same line, was it called Space Bunny was another one that was a stealth model West that was also free for a bit. And what was that? Space Bunny has been determined and announced this morning or yesterday to to be MiniMax M3.1 Flash. So, it's a a MiniMax M3.1 Flash.

1:17:32Man. Can you hear that? Ooh, everybody know. Ooh, yeah. that. And let us know in the in the chat, can you hear that on the stream as well? Um, so this is a online virtual guitar. Um, first of all, it's really cool because you can play with your keyboard, so it has all these various chords. Um, there's also like solo mode where you

1:17:55can play like individual notes. Um, and so if you're thinking about how this thing is actually made, they're using samples, right? So, they sampled like real instruments playing these various notes. Um, but what's also cool is you can turn on like band mode and it'll have drums playing synth and bass behind you matched to whatever chord

1:18:15you're playing. [music]

1:18:22[music] Um, and you can also do like down strums um, and up strum. Fascinating. And then beyond that, um, they have songs to choose from. So, like the classic everybody that learns to play guitar learns how to play Wonderwall. Um this sounds legit.

1:18:49Oh my god. I'm going to put an agent on this so that I don't have to learn how to play my guitar. What chance What chance do does anyone have in impressing girls if AI can play Wonderwall now? Exactly. [laughter] Like what Glad I'm married. Yeah, but I mean I I love this for like

1:19:09for one like learning guitar as well. So, like the fact that you have all the chord shapes. I mean I I I also imagine almost like an interactive interactive way to learn songs, right? Like load up any guitar tab from like Ultimate Guitar and um yeah. [music] So, like it also shows you exactly where

1:19:33your fingers would go as well. It's a little yeah. Rain day. You know what I I used to have as Rocksmith, which had a a special like cable that went into your that went to USB-C. It was like a 1/4 audio cable that went to USB and it was kind of like Guitar Hero, but it actually you wanted it tuned your guitar, but you played your real guitar and it had like yeah. It was It was actually I thought it was very good. I I actually really liked playing Rocksmith as a way to learn songs or at least just get my

1:20:02like finger dexterity better. It might have been just like my speaker hookup, but I can never get rid of the latency. That was the hardest thing. But it was really But like you're saying, you it's literally USB to guitar like you plug your guitar in and then you plug it into the Xbox and

1:20:19it recognizes what notes you're playing. I have that cable still. I have the cable. [laughter] I don't have the game anymore cuz I pirated it in the first place. But I did not do that. Statute of limitations maybe. I don't know. Right, but I wonder if it's it's actually just like a USB audio interface and then they have algorithms to actually listen to the I'm sure that's what it is. And then they just listen to the notes to determine if that's what

1:20:42you're actually playing. Yeah. Yes. But yeah. Yeah. I don't know. So yeah, this is cool. Check it out. It's very cool. You're going to get us uh demonetized, CJ, with all these songs. Yeah. True. Well, they I mean, they shouldn't be. You usually it's not that good at detecting um uh you know, copyrighted music if it's not the original, but I guess melodies

1:21:07are copyrighted, so that could happen. Yeah, you're going to get content ID'd [laughter] like crazy. You know, the other thing is I used a um little background jingle from Eleven Labs all the day and like they've got content ID like I had to like pay for it. Mhm. And they've got content ID running against their AI-generated music and it's just that's that's only a matter of time before every single possible melody ever has been like copyrighted and uh

1:21:38that whole thing is going to melt down. Yes. Okay. What else we got? I am out of links. CJ always has a bunch of fun links at the end. What do you got for us? This last one is someone playing uh Snake on a switch. And when you hear that, you think Nintendo Switch. No, they they hacked these [laughter]

1:22:00uh network switches. So the the lights Yeah. Yeah, so the lights on each of the Ethernet ports light up and they're actually playing it with a controller. So it looks like they're playing the game Snake. It's like a grid of pixels, essentially. Uh I thought this was fascinating. This is this is fun. audio listeners, the RJ45 ports on the switch are lighting up in either red or blue and you're he's trying to There's a whole bunch of fun, too. Yes. So it actually makes it there's a four-row Yeah, so that's a I

1:22:28mean you got some decent room to play. I mean you probably need a couple more. actual switch. Nintendo switch. Wow. Probably yeah, I mean those are like multi-thousand dollar switches probably like enterprise grade. I have that switch actually. Yeah. You have that switch? It's 6 Yeah, 48 port PoE switch. Uh mine only has two fiber.

1:22:51Okay. This one the one he has is four. But those are Yeah, those are probably 800 bucks a pop at least. Wow. Is it 10 gigabit, 2.5 or Um I have a 10 gig or is one port is is good for 10 gig and the rest of them are 2.5 I believe. So I have the one 10 gig one piped to my desk and the rest of the house is 2 and 1/2 gig or or mostly it's just it's just a gig cuz we don't own stuff that can handle that speed except for my

1:23:21computer. Got you. Yeah, that's all I got. All right, sick. Well, thank you all for joining us today. Uh go out and check out Sentry at sentry.io. It's amazing. There's new stuff there all the time whether you are uh profiling your agents or profiling your code or speeding up your database or making sure that you don't have bugs. Check it all out sentry.io. I don't got anything else

1:23:43guys, you done? Hit the like button, subscribe if you haven't. We'll catch you all here. Who's here? Do all the things. Peace. Yes, ring the bell. [laughter]