CYBERSECURITY CHERNOBYL: How AI broke PHP, why China is freezing robotaxis, and what happens when your bank goes dark
Send us Fan Mail Check our Matt & Jimmy' products here: Browzr | Discover the Web Beyond Algorithms KickoffHQ: Live Start Times & Scores for Every Sport Des Cartwright — Paintings Meridian Health Tracker Germanya — Deutsch lernen Digital Detox Club We didn't plan for this to be a slightly unhinged, super-nerdy episode but our finely crafted plan falls apart within the first fifteen minutes. Instead of a breezy monthly catch-up, we dragged ourselves through everything from obscure local LLM architectures to state-mandated employment buffers, before finally arriving at the bug that almost broke the internet—and then arguing over whether you need to stockpile tinned fish. Here is what we actually spent an hour and a half dissecting: Jimmy’s Niche Corner (Flint & Mercury 3): We kicked off with two models almost nobody listening will ever actually use. First, Flint—a 40B MoE coding model built via recursive self-improvement that runs on consumer hardware. Then Mercury 3, which ditched traditional next-token prediction to generate text in parallel via diffusion at 1,000 tokens a second. Very clever, extremely fast, and entirely irrelevant unless you’re an engineer building low-latency voice bots. Matt’s "Boring" Policy Deep Dive: China’s State Council issued an 18-point guidance document that essentially tells industries: embed AI everywhere, but stop firing people . We looked at how Beijing is actively metering displacement, running employee risk assessments, and freezing robotaxis in places like Wuhan, while the West sticks to its classic strategy of "maximise deployment and sweep up the wreckage later." The Jensen Huang Delusion: Matt listened to Jensen’s interview with Ezra Klein and briefly wondered if the Nvidia boss is right that existential AI risk is just an overblown software bug labs can sandbox their way out of. Jimmy’s counterpoint: when your entire empire relies on flogging GPUs, of course you’re going to tell the world that containment is just an engineering fix. The Big Cyber Mess (PHP2Shell): The main event. A 12-year-old remote code execution flaw sitting silently at the core of PHP—the language quietly running 70% of the web—was finally ferreted out by frontier AI models, leaked four days before patches were finished, and triggered a scramble across global servers. We debated the defender vs. attacker dynamic, China’s mandatory 48-hour vulnerability reporting to MIIT, and why agentic AI poking around in bank accounts might end badly. How to Prepare (The Prepper vs. The IT Guy): We wrapped up by offering two completely incompatible pieces of survival advice. Matt suggested getting ready for the inevitable multi-day grid or payment outage with water filtration tablets, a stash of emergency cash, and nine litres of bottled water. Jimmy suggested that before you turn your flat into a bunker, you might just want to set up 2FA and stop using the same four passwords everywhere.
