Eric codes and Jon harvests cocoons on the three day weekend. Path traversal bugs in Anthropic's git MCP server, and why LLMs continue to fall for prompt injection attacks. Drive and listen to local radio in cities around the world, and does a disconnected brain hemisphere dream?

• 0:00 - Intro
• 7:17 - Anthropic Git MCP
• 10:14 - Context and Judgement
• 19:04 - Drive and Listen
• 21:14 - Brain in a Vat

Jon and Eric are in Texas. Again. Eric continues his AI Coding journey porting old Mac Apps to SwiftUI. Jon may or may not have a fixed vehicle when he returns. China fights scam compounds for China. ClickFix continues to challenge consumers. Eric finds fun ways to say "No" while Jon discovers the Great Daylight Fireball.

• 0:00 - Introduction
• 3:42 - Do Not Buy This
• 9:32 - China Fights Scam Compounds
• 13:06 - ClickFix Continues
• 20:35 - No
• 22:06 - The Great Daylight Fireball

Eric makes an app, and Jon semi-celebrates the new year. For topics we have robocall registration penalties, reverse engineering a scooter's protocol, and the current saga of Mongo Bleed. And for fun we have a captcha game, training a doodle model, and a personal filament extruder. Happy New Year!

• 0:00 - Intro
• 10:52 - Robocall Deepfake Followup
• 17:06 - Reverse Engineered e-Scooter Protocol
• 22:17 - Mongo Bleed
• 29:13 - Not a Robot
• 31:23 - Quick Draw
• 33:17 - Filament Extruder

Eric goes out to eat, Jon gets powertools. Arrests at Coinbase outsourcing firm. Six Cybersecurity predictions for 2026. Eric finds a personally nostalgic TV show and Jon looks back on the scientific discoveries of 2025.

• 0:00 - Introduction
• 10:46 - Inside Job at Coinbase
• 13:59 - Cybersecurity Forecast
• 19:56 - Untamed
• 22:31 - Significant Scientific Stuff of 2025

Eric and Jon are both fully prepped for the holiday. Flock leaves (many) cameras including control panels open and exposed to the open internet, what if more malicious npm packages worked as advertised, and Microsoft is finally disabling rc4 by default in Active Directory. For fun we have two movies for holiday watching: F1: The Movie, and Howl's Moving Castle. Enjoy!

• 0:00 - Introduction
• 11:38 - Open Flock Livestreams
• 18:09 - WhatsApp Stealer
• 23:39 - Obsolete Cipher
• 30:38 - F1: The Movie
• 33:04 - Howl's Moving Castle

Jon's car may or may not be fixed. Eric didn't go to Disneyland. Android is making in-call scam protection better. AI is creating a Blessing of Unicorns. Parked Domains keep scammers alive. Space is getting crowded. Word of the Year - Slop.

• 0:00 - Introduction
• 6:38 - In Call Scam Protection
• 10:21 - A Blessing of Unicorns
• 13:15 - Parked Domains are Evil
• 17:55 - House of Satellite Cards
• 24:10 - Slop

Christmas in full swing at both Eric and Jon's places. Less secure certificate validation mechanisms being deprecated, and SEO of AI chats to deploy ClickFix style lures for Stealer installation. For fun we have a shockingly good way to avoid motion sickness in VR, and a promising Leukemia treatment using gene therapy.

• 0:00 - Intro
• 9:28 - Weak Validation
• 14:45 - No Red Flags
• 21:34 - Stimbox
• 27:42 - BE-CAR7

Eric tracks hack attempts and Jon trades blood for pinball. Shai-Hulud is back, Calendly invite scam, Rust for good and evil. Giving Machines for the holiday season and Spores in Space!

• 0:00 - Introduction
• 13:48 - Shai-Hulud is back
• 16:59 - Calendly Invite Scam
• 19:11 - Rust for Good and Evil
• 24:33 - Giving Machines
• 28:00 - Spores in Space