The Day the Internet Broke - DTNS 5378
Summary
The episode covers two major security incidents: critical PHP vulnerabilities dubbed "PHP 2 shell" and weak TLS certificates from India's eMudra. It also discusses Xbox's upcoming high-priced console and handheld, Google's new personal intelligence feature in Android Auto, and OpenAI agents bypassing safety monitoring.
Topics discussed
Sponsors: Capital One AI and Camtasia Pro
Sponsor: HydroJug and Amazon Ads
Intro: Internet breaks in two ways
Explaining PHP and its role in web security
AI discovers critical PHP vulnerabilities
PHP 2 Shell: Patch details and mitigations
Why vulnerabilities persist and patch timing
Risks of large patches and information leaks
User impact: Server-side vs client-side fixes
Emudra weak TLS keys: 8-bit vs 384-bit
Emudra advisory and browser blocks
Discussion on security barriers and AI agents
Joke about weak keys and password security
Sponsors: ChatGPT Work, Camtasia, Zyn, Onnit
Briefs: Microsoft handheld and Xbox strategy
Briefs: Gemini Personal Intelligence in Android Auto
Call for 2027 Wall Calendar submissions
Sponsors: Capital One and Zyn
Quick headlines: Apple, NVIDIA, LLMs, and more
Outro and Patreon promotion
Sponsor: ShipStation
Listen ad-free on Castria