AI, Security Flaws, Game Studio Cuts and Big Tech
PHP vulnerabilities and AI-assisted attacks
The hosts discuss the PHP Foundation’s announcement of patches for two critical vulnerabilities, whose details were disclosed before the planned release. The flaws, called PHP 2 Shell, could enable denial-of-service, remote code execution and data exposure attacks. Cloudflare reported rapidly increasing exploitation attempts, while the hosts consider how AI tools may make it easier to find and exploit vulnerabilities. They also discuss defensive uses of AI, mitigations, the need to update PHP, and the contribution of Andre Suri’s maintenance of older PHP packages. Linus says LMG’s IT team responded quickly and that the company’s PHP systems were addressed.
BioWare and games
The hosts discuss EA’s announcement that BioWare is closing and that around 400 jobs are being cut across EA. They mention the cancellation of the early-development Mass Effect game, leaked pre-production footage, and the Mass Effect TV series reportedly remaining in development. The conversation turns to EA’s stated investment priorities, the impact of buyouts and debt, and the hosts’ memories of BioWare games.
They then celebrate Tape to Tape reaching version 1.0, discuss its price, platforms and ways to play with friends, and plan a possible gaming stream. The next topic is Steam Next Fest, where users have complained that AI-generated games and artwork make indie games harder to discover. The hosts connect this to AI-generated YouTube content, creators being mistaken for AI imitators, and the difficulty of separating AI-assisted work from low-effort output.
AI reliability, workplace policy and creative work
Linus and Luke discuss how people may overestimate AI agents’ reliability, despite models making mistakes. Dan recounts an agent controlling Home Assistant that turned off all the lights after misunderstanding a question. The hosts consider how LMG should handle staff using AI tools, and Linus describes two proposed principles: people must take responsibility for submitted output, and computers should not make management decisions.
They discuss where AI may or may not help in video production. Linus argues that human judgment matters for story structure, emotion, pacing and personal relevance, while the hosts describe using AI as a fallible aid for fact-checking and early warnings. They emphasize verifying its findings and consider whether audiences would notice quality changes in AI-completed scripts.
Linus’s China trip
Linus recounts a tightly scheduled trip involving factory and company visits, filming, flights and limited time to rest. He describes visits to XGIMI, DJI, Tacomas, Seasonic and Unitree, including impressions of projector lens shift, DJI products and Unitree’s demo room. He also tells a detailed story about the group’s unusual restaurant experience after the DJI visit: the staff went to buy ingredients after the group ordered, and the meal was prepared from what they brought back.
Google privacy and technology choices at work
The hosts examine a change to Google’s privacy-policy wording concerning personalized ads and data from Drive, Gmail and Google Photos when information is made available to other Google services. This prompts a discussion about self-hosting, leaving Google Workspace or Microsoft 365, and the practical barriers to changing software across a large company. They weigh privacy and subscription concerns against staff familiarity, existing workflows, compatibility requirements and the disruption of switching tools such as Adobe Premiere.
Other technology and platform stories
The hosts discuss a reported private jailbreak for PS5 firmware, Sony’s update, and separate exploits associated with running pirated games. They then cover hidden instructions found on WhatsApp help pages that told its support chatbot not to direct some users to regulators or refer to privacy laws in certain situations. WhatsApp said the instructions appeared because of a bug, and the blocks were removed.
The conversation turns to Starlink restrictions affecting Ukraine’s use of the service, competing accounts of who made the decision, and the risks of relying on privately controlled communications infrastructure. They also discuss the consequences of the war and the dangers of countries drawing lessons about nuclear weapons and military drones.
After a brief exchange about reading and history, the hosts cover Plex vulnerabilities that can be chained to access servers without a password. The reported attacks use compromised servers for cryptocurrency mining and proxy networks. They relay Plex’s update and cleanup guidance, then recall LMG’s past attempt to mine cryptocurrency on computers at its LAN center.
Smart TVs and graphics technology
The hosts discuss people using tools including Claude Code to remove ads, unwanted apps and some tracking from Android and Google TV devices, or to customize their home screens. They note that these modifications can break devices and may not provide complete privacy, and discuss the maintenance burden of home-built tools.
The final technology topic is a mod bringing DLSS 5 neural rendering features to some AMD GPUs, followed by AMD and Microsoft’s announcement of FSR 4.1 support for Xbox systems and some older AMD hardware. The hosts mention that existing console games need developer updates and that testing reported performance trade-offs on older GPUs.
Closing messages and announcements
The hosts respond to audience messages about items that drew scrutiny at airport security, including a small tool and a prototype power bank that was confiscated on a domestic flight in China. They also discuss difficulties caused by services and features being unavailable to Canadian users. The episode closes with merchandise and Floatplane announcements, along with sponsor messages.