The iPhone Duo should have been an iPad
Oct 23, 2026 · 1h 49m
Summary
The Vergecast hosts debate the iPhone Duo’s 7/10 score, with Nilay Patel justifying the rating based on rapid app improvements despite the device’s $2,000 price tag and initial software chaos. They also analyze a global internet crisis where AI agents exploited critical PHP vulnerabilities, highlighting how simple prompts now enable large-scale cyberattacks.
Topics discussed
Sponsors: AWS AI and Amex Corporate
Apple Duo review score and the 'no sevens' rule
App optimization issues and VibeCoding vulnerabilities
Personal take on the Apple Duo experience
Google's lazy app updates and Gmail issues
Marketing the Duo as an iPhone vs. reality
Comparisons to Gruber's and Marques' reviews
The iPad vs. iPhone identity crisis of the Duo
Hardware compromises of foldable phones
Software optimization and the developer flywheel
Pre-order demand and shipping delays
Apple's lack of a clear vision for the Duo
The collision between iPad and Duo form factors
Future innovation and AI as the next interface
The Tim Cook era and supply chain focus
Critique of Instagram and YouTube app updates
Optimism about the Duo's future path
Connectivity issues with wearables and handoff
Transition to server-side application security
Sponsor: Bitwarden and Cybersecurity Awareness
Sponsor: Atlassian and Jira
The PHP vulnerability crisis and AI discovery
Explaining PHP and its reputation among developers
How the PHP vulnerability works
Exploitation mechanics and data access
AI agents automating attacks
Chain Guard's early release of fixes
The new era of AI-driven security research
Government websites going offline
Cloudflare reports millions of exploit attempts
The future of insecure vs. secure web environments
The offensive vs. defensive AI arms race
Lack of control systems for defensive AI
AI agents manipulating shopping carts
Publisher deals and Amazon's blocking tactics
Ethical boundaries of AI shopping agents
Ticket scalping and DDoS-like behavior
Meta's shopping data and Plaid integration
Using AI to buy movie tickets
The end of fair allocation via bots
Changes to web structure due to AI
Muse notifications and user experience
Muse as a consumer product and retention
Meta's internal conflict over Instagram's future
AI-generated celebrity content on Instagram
Likeness detection and legal recourse
Bill Gates' prediction on worsening tech issues
Sponsor: Ring security cameras
Sponsor: Palo Alto Networks
Pivot show introduction and live tour
Listener music requests and playlist ideas
Brendan Carr's tweet on fake polls
Critique of the FCC's stance on polls
Media consumption habits and poll sources
Sports commentary and karma
Public interest vs. viewpoint discrimination
Threats to news organizations and cable networks
Kalshi prediction markets and voter turnout
Anna Gomez's response to the FCC
Authoritarian tendencies in FCC regulation
Lightning round introduction and AWS sponsor
Arc browser shutting down
The legacy of Arc on other browsers
Dia browser and AI at the browser level
Browsers as backend software for AI
AI accessing operating systems vs. browsers
Advice for Arc users and browser future
Meta's terms of service update
Publisher reactions to Meta's scraping
Meta's clarification on robots.txt
Analysis of the new terms of service
Trust issues with Meta's data collection
Netflix's stock drop and internal issues
Netflix's struggle with content quality
Ted Sarandos' strategy shift
The importance of hit shows for retention
The decline of traditional sitcoms
Netflix's missed opportunities with comedy
Critique of reality content and binge drops
Advice for Netflix on content strategy
Netflix's potential pivot from binge model
Gemini in Cadillac EVs and Android Automotive
Confusion over Gemini's identity and features
Gemini's limitations in car environments
Personal intelligence settings in cars
Gemini's inability to control garage doors
Signal Awards and podcast wrap-up
Listen ad-free on Castria