Apple Sold a Ton of iPhone 17s and Mac Minis - DTNS 5260

0:00Insurance isn't one-size-fits-all. That's why drivers have enjoyed Progressive's Name Your Price tool for years now. With the Name Your Price tool, you tell them what you want to pay, and they'll show you options that fit your budget. So, whether you're picking out your first policy or just looking for something that works better for you and your family, they make it easy to see your options. Visit Progressive.com. Find a rate that works for you with the Name Your Price tool. Progressive Casualty Insurance Company & Affiliates. Price and coverage match limited by state law. Taking care of your eyes shouldn't be a hassle.

0:31That's why Warby Parker is a one-stop shop for all your vision needs. Our prescription glasses and sunglasses are expertly crafted and unexpectedly affordable. Stop by a nearby store or use our app to virtually try on frames and get personalized recommendations. Did we mention we offer eye exams and take vision insurance too? For everything you need to see, head to your nearest Warby Parker store or visit warbyparker.com today. That's warbyparker.com. Capital One's tech team isn't just talking about multi-agentic AI. They already deployed one. It's called Chat Concierge, and it's simplifying car shopping.

1:08Using self-reflection and layered reasoning with live API checks, it doesn't just help buyers find a car they love. It helps schedule a test drive, get pre-approved for financing, and estimate trading value. Advanced, intuitive, and deployed. That's how they stack. That's technology at Capital One. Atlanta. Imagine trading traffic for turquoise waters and turning your next long weekend into an unforgettable adventure. In Belize, you can soar through lush rainforests, explore ancient Maya temples, or just unwind on a Caribbean beach that feels like your own secret escape. And getting there is easier than ever.

1:45Delta offers nonstop flights from Atlanta straight to Belize City with a quick journey of just about three hours. Start planning your getaway now at TravelBelize.org. That's TravelBeliz.org, your closest faraway paradise.

2:06This is the Daily Tech News for Friday, May 1st, 2026. We tell you what you need to know, give you the important context, and help each other understand. Today, well, it may be May, but Apple shared its biggest earnings for the month of March ever. What? Wait a minute. Yeah, that's a big deal. We're going to talk all about it. I'm Jason Howell. I'm going to do it now. Let's start with what you need to know with the big story. Apple announced its best March quarter, as you said, Wynn. In company history, revenue up 17 % year over year. I'm going to do my best to kind of just dance around some brief numbers before we get into the discussion.

2:46Net income up roughly 19 % to around$29.6 billion, which sounds like a lot to me. CFO Kevin Parekh announced on the call that the iPhone 17 is, quote, the most popular lineup in Apple's history. I imagine that's one of those things that they say every year. It's kind of like if it wasn't, there would be, you know, I'd be a little concerned about that. But revenue up 22 % year over year. And yet iPhone sales slightly missed on expectations. CEO Tim Cook told Reuters that demand for the phone was off the charts, his words, even as chip shortages kept the company from fully meeting demand. So essentially, that just means they could have sold a whole lot more if they weren't faced with this constrained supply that they find themselves in.

3:34There was a lot of demand, didn't quite have the supply, and they're blaming chip shortages for that. Cook did warn that memory costs will continue to rise significantly in this next quarter and have a, quote, increasing impact on Apple's business. Curious to know what that impact is going to look like for consumers. We can certainly talk about that. Also, services, a really big deal, hit an all time high of around thirty one billion dollars for the quarter. Apple TV Plus called out as a growing driver of the subscription-based revenue, which is high margin and really working for Apple. And we can kind of stop there because there is more.

4:17But yeah, I mean, doing well, even though it was especially with the iPhone 17 lineup, most popular ever. However, we could have done better. We could have done better if it was a different time. But there you go. There you have it. I suppose this all makes very much sense. The brand is still very strong. People are still managing to buy new smartphones despite socioeconomic circumstances. So I mean, good on them. I don't really have much to add other than, yeah, I guess I'm with you. It would be a little worrying if the newest iPhone wasn't the most popular in the history of iPhones yet. Yeah.

4:54I think that one of the things that jumped out for me is that increasing impact. What did they say? The cost rising will have an increasing impact on Apple's business. Again, that's one of those comments is kind of like, okay, well, yeah, if costs are rising, clearly it's going to have an impact. What I wonder is whether that means Apple products, which are already pretty pricey products when you compare it to competing hardware competitors in the marketplace, might end up doing or being tempted to do what others are doing. We've seen Samsung. We certainly talked about it on Android Faithful starting to kind of inch up their cost or their cost for their premium smartphone.

5:42I think the S26 baseline phone was$100 more this year. And many people are looking towards the next foldable release from Samsung as those probably, you know, guessing anyways, but likely to go up in price because of this moment that we're in. And I wonder if that's a tactic that Apple takes with their already pretty, you know, premiumly priced hardware. Or does Apple lean into its strength, its market strength, its financial strength, and shoulder that burden so that more people walk through the door and get their amazing services, which they're doing well with? Yeah, absolutely. I mean, I guess it was, again, not a finance person and obviously an Android engineer.

6:24So biased, maybe. You can accuse me of bias. But that's when I heard that revenue's up, but that iPhone sales slightly missed expectations. I couldn't help but wonder like how much of that is because of the increasing cost of literally everything, including iPhones and premiumization, where they get us to pay more for this. I mean, I would say there's always improvements, but, you know, it feels like the ROI in terms of like dollars per, however you want to quantify how much better smartphones are each year, whether that's a factor in it as well. In services, yeah, I think that's where honestly Apple TV is killing it.

6:55And I just say that as an avid fan of many Apple TV shows. and as you mentioned they are high margin it feels like it's so it's just so interesting because obviously hardware is hard as we've said many times on various podcasts we've been on and it's really interesting to see i never expected i suppose apple tv not that they're i i do really enjoy apple tv shows it's so fascinating to see a company that makes hardware and has made hardware for decades and is known for making amazing computers you know laptops you know, smartphones also have an amazing$31 billion for the quarter in regards to its subscription-based, you know, content service.

7:31It's really, really interesting. And I wonder, like, is there a future out there where, especially given these increasing impacts where, I don't know, will Apple ever become like mostly a media company? I don't know. That's a little bit navel-gazing, but I just think it's interesting. Yeah, yeah, yeah. I certainly think the Apple media side of things, or rather the Apple TV Plus side of things, and its success, it's taken a while for them to get there. I feel like the story around Apple TV Plus, at least in the beginning and a few years after, has switched away from, oh, Apple's trying and failing to build momentum on their media.

8:19They're spending far too much on their films and their TV shows that are appearing on the service and people aren't connecting with it nearly as much as they are Netflix and whatever the other competitors are. But yeah, they've really cultivated a very strong service. I totally agree. There used to be a time where it was like, maybe a couple of shows are appealing, but now they're starting to really kind of put out content that's really compelling at a much higher pace for my taste. And it sounds like for other people's taste because they're doing pretty darn well in their services related to that.

8:51then we've got apple's hardware roadmap cook and perek both shared that apple is winning in the ai spending boom uh because they're selling max that people are already using for ai that are using for agentic tools and of course this has been a story that's been bubbling up right people in in the shadow of the open claw thing that started a couple of months ago mac mini mac studio being bought for these uses and shortages as a result. Apple's taking several months to resolve those shortages because AI developers and users are buying them for their workflows faster than Apple can actually make them.

9:35And they mentioned this on the earnings. Incoming CEO John Ternus made an appearance to promise an incredible roadmap ahead with strong forecasting for the next quarter. You know, I wonder how how Apple strategy around Mac Mini and Mac Studio, like I wonder what's happening behind the scenes right now as they're witnessing in real time and reactively speaking, because they probably didn't see this coming based on what they said in earnings, how these machines are suddenly being used in full force for these agentic use cases. How is that influencing or impacting their kind of strategizing around these machines going forward, right?

10:16Yeah, it's so funny because we've obviously, last year and the last couple of years, they haven't been doing so well in terms of their own models and in the model arms race that's going on. Yeah, with everything else. But reading this, I'm like, well, duh. I mean, I guess for a little flavor, I'm an Android developer, but I use a MacBook Pro for my everyday job. And I think most developers that I know, regardless of the platform, tend to use MacBooks. And so because they're because because, again, they're they're amazing at hardware. You know, the the recent Apple Silicon have have just has been gangbusters.

10:48It's been a huge win for them. And so I think it's so interesting reading this like, oh, man, I guess there's like another way to win in the AI boom by providing that hardware that can drive, you know, that can run and drive these AIs and authentic tools. So, again, somehow I'm surprised, but also not surprised. But, yeah, I do wonder, like, what's that going to mean? What kind of things are we going to hear at, say, WWDC or at, like, you know, any Apple event in regards to how they can frame this to their advantage? And I don't say that with any, like, sarcasm or snark in there. It's fascinating.

11:23Just fascinating how that seemed to, I don't know, how they're actually winning in this regard. Well, bravo to you, Apple, for your wonderful March news, even though, as you said, it is May. But these things get delayed. They got to chew on the numbers and turn them around. So there you go. Well, we here are winning because of you guys. DGNest is made possible by you, the listener. So let's take time to thank Bill Russell, Erwin Sturr, Ken Hayes, and AJ Downs. Thank you. Yay. Thank you. Thank you. Thank you. I'll be honest. Nothing tests my patience quite like sitting on hold, listening to the same four bars of music on repeat.

12:04Turns out, all that time adds up. The average person spends over 40 days listening to that dreaded hold music. 40 days! This episode is sponsored by Parloa, the AI platform built to make that a thing of the past. Parloa's AI agents are available 24 hours a day, 7 days a week, fluent in any language, and smart enough to remember every customer across every interaction. because no one should have to explain themselves twice. From payment processing to roadside assistance, flight rebookings to appointment scheduling, Parloa delivers the kind of customer experience that turns a one-time buyer into a customer for life.

12:40See Parloa's AI agents in action at parloa.com. That's P-A-R-L-O-A dot com. If your eyes are the windows to your soul and your glasses are the windows to your eyes, then it's pretty important to find your perfect frames. That's why at Warby Parker, we've made shopping for eyewear as easy and fun as can be. Peruse endless styles in our stores, or use our app to virtually try on frames and get personalized recommendations. To find your next favorite pair of glasses, sunglasses, or contact lenses, or to locate your nearest Warby Parker store, head over to warbyparker.com. That's warbyparker.com.

13:22All right, there's more we need to know today. Let's get to the briefs. All right. Well, Google is bringing, not surprisingly, Gemini to cars with Google built in through an over-the-air OS update starting in the U.S. in English over the upcoming months. Gemini will replace the system in new vehicles as well as existing ones, though Google didn't announce any specific models in the announcement. General Motors made a separate announcement sharing that Gemini is coming to 4 million of its vehicles from 2022 and newer. that includes Cadillac, Chevrolet, Buick, and GMC. With the update, drivers will see an on-screen prompt to transition over to Gemini, and once integrated, the old Hey G voice command will summon the chatbot along with the on-screen mic and a steering wheel button if that exists on the vehicle.

14:10Gemini in the car is touted as being much more conversational and able to handle more complex multi-step tasks while pulling in contacts from the vehicle and apps like Google Maps. Google says Gemini will soon pull in information from Gmail, Calendar, and Google Home for more comprehensive controls and queries. Yeah. And I don't know, when I kind of heard about this news, and this isn't the only, you know, Gemini in the car. I think they were releasing this to Android Auto, which is different than this, which is, you know, Google built in. And they've got all of these different auto efforts. And this is more like on an infrastructural layer, I suppose.

14:51Like, what is the difference between Google built in and Android Automotive, which is the structural thing? You know, they're so confusing with how they name these things. But anyways, when I read this, I was like, on one hand, I think this is great news. Google putting a lot of energy into Gemini right now. I mean, so much so that I'm sure some listeners are getting sick of hearing of all the new changes. But that means that Google is putting a lot of attention into Gemini and how it interoperates with all their products. And so that's good because it's getting a lot of Google's time and attention.

15:24On the other hand, you and I were just talking on Android Faithful about the Gemini-fication, which is a word that I think I created. I don't know, baby. So, hey, if that takes off, yay, I finally made a word. of Google Home and how that has promised to be one thing and kind of ended up being annoying in many ways in this transitionary period. And so I really do wonder, like, okay, as Gemini comes to the car, how does that impact the driving experience? Because when it gets something wrong when you're driving, that can be potentially really distracting. I hope that doesn't happen. but Gemini isn't perfect.

16:05Neither was assistant, but Gemini is proving to be imperfect in the home. I wonder how that applies to the auto. Yeah. And driving is such a very particular experience. And obviously we all know that distracted driving is dangerous driving. And there's this weird balance of wanting something to be fully featured so that I could multitask so that I could call my husband and ask him to do a thing for me while I'm on the way home or listen to any important messages and things like that. Or maybe like, it's like a weird balance, right? Because hopefully, Gemini would allow me to stay more focused on my driving by doing certain things that I might be tempted to do with my phone looking on the side very dangerously.

16:44But at the same time, the cell of Gemini is conversational and engaging with people, right? And I'm just like, at what point are you engaging with me too much? And is all of this necessary? And I agree with you, I think, sorry I think one thing that got me with assistant in auto was that at least even though it was kind of rote and it was annoying sometimes when I didn't quite say the whatever phrase correctly it was simple right I just I didn't have to I didn't really think too much outside of okay say the phrase it does a thing and then I kind of go back to what I'm doing and I think I worry that was Gemini being more conversational.

17:24It will stop being what it needs to be, especially in the car, which is being just like, just do the thing. I don't need you to have a conversation with me. I don't need you to treat me like a buddy. I just need you to do a thing, which I think is what also got annoying with the home assistant, right? There were so many integrations that they had wired in for home lights, for all these different things, for setting timers. And it is such a hard... I mean, obviously, the capabilities of Gemini and all these other models are amazing. The fact that it can get you to really anthropomorphize it and be able to understand you as you are a human being speaking and not using like rote commands is amazing.

18:02But at the same time, it feels like sometimes we miss the forest for the trees when it's just like, I just want it to do the thing. I just want it to do the thing. It was a very simple task. It just made it incredibly complicated in the pursuit of making it better somehow. Well, yeah. And I think what that brings up for me is when I'm driving and I've got somebody in the passenger seat, I might be talking to the person in the passenger seat. And unless they're doing something to explicitly pull my attention away, the simple act of talking to that person isn't necessarily in and of itself distracting.

18:34Maybe if you were to put it on some sort of percentage-based system, it might be more distracting than if no one was there, but it's not inherently very distracting to just be talking to someone in the passenger seat. Does that change when a chatbot gets more conversational and we're just having a conversation with a chatbot? Are we like in our minds? Are we thinking about that conversation differently that on that continuum that doesn't exist? Or maybe it doesn't. I'm just not aware of it. But that that point of distraction is actually more than just me talking to someone in the passenger seat.

19:08And does this switch over to Gemini actually improve that? Or does that potentially make things more distractible? I don't know the answer. I don't either. That's a fair point, though, that given that it is able to easier understand you the way you speak as a normal human being, maybe that would be less distracting. But maybe if it doesn't quite understand you and you get into a fight with it, that might end. Yeah, it's hard to say. I guess we'll see how it turns out. Yeah. I mean, we also tend, I think in my own experience, I tend to go to different places in my conversations with, say, chatbots than I would with someone who's sitting there that I'm like, hey, so how you been?

19:47Versus I'm working while I'm driving. You know what I mean? Like so much of what I do with chatbots are very directed to this task that's specific to my work. I want to enhance the amount of time and get my time back because I want to build this process, blah, blah. And the temptation is totally there. Like I've experienced it where I'm driving around and I have this idea. I'm like, I just want to fire this off to my chatbot so it's working on it while I'm driving, you know? And I think once you have Gemini in the front seat with you, maybe that's the point of distraction is, oh, suddenly driving time isn't just driving time or leisure or whatever.

20:24Suddenly we're working while we're driving and that could be pretty distracting. That's that brain fry actually that people are talking. Sorry, it's like that brain fry because we're doing so much now and constantly because AI is enabling us to. It's like we are always on with and not just on, but like doing work, doing productivity type stuff. So interesting. The temptation is there, too, because you get that endorphin hit when you when you fire off a thing and it does it. And you're like, oh, well, I just now this thing. And, you know, you got three or four or five of them going at the same time.

20:54And now you're driving also. So anyways, a security company called Theory, that's T-H-E-O-R-I, so spelled a little differently, released details and code on Wednesday for an exploit in the Linux kernel versions 5.10.254 through Linux kernel version 7.0. It's a much easier one to say. It's called copy-fail because it uses a destination buffer as a scratch pad, failing to stay inside the buffer. The attacker needs to get on the machine somehow, and that could happen through a WordPress vulnerability is one example. But once it does, it's a straight-line logic flaw across distros and all local systems.

21:39In a data center, that could cover a lot of clients that share the same kernel, like a Kubernetes node, that sort of thing. It's considered one of the worst root vulnerabilities in recent history. Certainly the headlines about this are saying as much. I think the Ars Technica headline was the most severe Linux threat to surface in years. So there you go. You're going to see a lot of those headlines. As significant as the vulnerability itself was, the fact that it was disclosed with exploit code before vendors had a chance to patch it. Some call that a zero-day patch gap. Theory privately disclosed it to the Linux kernel security team five weeks ago.

22:19It has been patched, but few of the Linux distribution makers had incorporated the patch before the exploit was released. theory found the bug, by the way, using the, is it Xint or Xint code security tool, which is powered by LLMs. So that's kind of interesting. But what are your thoughts on this? Yeah, I wonder what the gap was. So it seems that they were notified, but basically somehow, how i don't know like to be fair i don't know much about linux distro linux make linux distro makers and stuff like that too so i maybe this is unfair but it's fascinating that there was in i assume that gap is like the the gap between when they're aware of it and when they could actually patch it i find that so fascinating like i don't even know what like what is is it just the natural delay in okay understanding that we have a vulnerability and being able to actually patch it and being able to get that out to the distros is it that kind of gap and but then yeah the fact that it was found using llms we're seeing a lot more of these stories right and of course that's the whole thing with mythos right is that um like like obviously like a lot of it is with llms it's not even necessarily that they are smarter or better than human beings but it's it's it's it's a program it's a thing in a machine that can work tirelessly and way faster than a human being can and so just by just by the fact that it is this kind of like restless um like infinitely infinitely faster working machine than us, that it's able to pick up things that maybe would have taken longer or would be less likely for a human, you know, a human being to find.

23:59Is it scary? Is it getting scary out there? Are we worried? I mean, even taking mythos out of it, taking like some kind of like, you know, like apocalyptic singular model that could nuke everybody, I guess, sorry, metaphorically nuke everybody. Is this getting scary that we're giving these tools, not just for us to do, to get brain fried by doing 15 ,000 things in our car at once, but also for giving, you know, bad actors a tireless little minion that can find vulnerabilities. Yeah. Well, I mean, in the case of this, it's not really, you know, given to bad actors. This was done by a security company.

24:32This was an AI LLM that was able to discover something that's just been basically gathering dust since 2017. So it found this thing that no one else had found. I'd consider that a win. I'd be like, okay, well, then this system did something pretty awesome. Then it found this thing that won't be acted upon. And it existed before this system was able to find it. I think what's interesting to me about this is as AIs are – like LLMs, not just AIs, but LLMs are really good at pattern recognition. So it makes sense to me that more of this is going to happen as we are seeing, just like you said, we are seeing more AI versus legacy code stories right now and how AI is discovering these things or LLMs are discovering these things that had sat around dormant and whatever.

25:27And if it's suddenly much quicker to discover these things, do the people on the other end that have to patch and remediate, do they have the time? Are they overwhelmed because now suddenly discovery is more rapid. I don't cut my teeth in the security world. So I would be curious to hear from security professionals about that. These things are really good. Are they so good that suddenly there's the threat of being overwhelmed by this influx of these vulnerabilities that need to be addressed? And is that an issue? That is such a great point. And that taps into kind of more, just to wrap up real quick, that taps into more like kind of everyday purposes, because I know like I've mentioned and other folks who have like written and mentioned that it's still we're still at the point where AI, especially when it comes to like software engineering, and I presume security as well, sorry, not to talk out of my lane or anything, that there still needs to be a human element there.

26:28It's really good at finding the flaws. Because I presume, again, people who are in security, you can correct me, please, that we still need human intervention, whether that is just literally the mechanism of getting a distro out because a person needs to do that. And we still aren't quite ready to trust, you know, LLMs in particular to patch it and do the work of rolling it out. Or maybe we just haven't gotten to the point where those systems have been set up yet. It's like it's a different kind of gap, right? The finding the gap versus the fixing, the find versus the fix gap. and we're still like in various ways, including apparently in security, trying to figure out how to close that gap.

27:06Yeah. Sure. Yep. All right. Well, if you're a retro gamer, you might like this. Retro Games Unlimited and Blaze Entertainment are launching two new retro clamshell handhelds for truly old school gaming fans, a Commodore 64 and ZX Spectrum, or is it ZX Spectrum? ZX, ZX? I don't know. I think it's both. I think it's both. It could be both. Both have 4.3-inch IPS screens, quad-core 1.2 gigahertz processors, 256 megabytes of RAM, stereo speakers, though neither machine supports stereo sound, USB-C connectivity, and around three hours of playtime on a 2 ,000 milliamp battery. Yes, there is a USB-A port if you want to plug in a keyboard or joystick, which sort of defeats the purpose of a handheld, but hey, flexibility is nice, right?

27:55The foldable handheld ship with 25 preloaded games each. And yes, there is a micro SD card slot so you can bring in thousands of your legally acquired ROMs as well. Pre-orders are live now ahead of an October 15th ship date. And it'll set you back$129.99. Oh, these things make me so happy. I don't know if I'm going to get one. But I have the, by the same maker, Retro Games Limited did a C64 Mini. I think it was called that, which was like a smaller one with a non-functional keyboard, though it looked like a Commodore 64 keyboard. And then they did a Maxi version. And I have the Maxi one. And apparently those are kind of hard to get.

28:41I don't know. I don't think it's the same thing that Tom got that he talked about a handful of weeks ago. I think his is a different effort. But I love that machine. The problem with it is, you know, it's a full size thing. So you got to have a space for it. I got to be in the right mindset to be like, all right, I'm going to sit down and play some Commodore 64 and sit down at the battle station, which is, you know, very much the sort of thing that that teenager me did back in the day that now I find far less time to do that. And so then when I look at these handhelds, I'm like, well, that might actually be the ticket.

29:15Because if I'm just sitting on the couch watching Survivor, why not play Paradroid, you know? Seriously. Oh, man, I love it. Yeah, I'm very happy. This is a good day to be an old gamer. Wait, sorry, not that old. A good day to be an older gamer, I guess. All right. Well, if you don't have an older gamer or retro gamer in your family and you need a snazzy gift, guess what? We have you covered dozens of ideas over at DailyTechNewsShow.com. You can pick up a mug, a t-shirt, or a mouse pad, all with our new DTNS logo. They are great gifts and, of course, great ways to support the show.

29:57If your eyes are the windows to your soul and your glasses are the windows to your eyes, then it's pretty important to find your perfect frames. That's why at Warby Parker, we've made shopping for eyewear as easy and fun as can be. Peruse endless styles in our stores or use our app to virtually try on frames and get personalized recommendations. To find your next favorite pair of glasses, sunglasses, or contact lenses, or to locate your nearest Warby Parker store, head over to WarbyParker.com. That's WarbyParker.com. Atlanta. Imagine trading traffic for turquoise waters and turning your next long weekend into an unforgettable adventure.

30:33In Belize, you can soar through lush rainforests, explore ancient Maya temples, or just unwind on a Caribbean beach that feels like your own secret escape. And getting there is easier than ever. Delta offers nonstop flights from Atlanta straight to Belize City with a quick journey of just about three hours. Start planning your getaway now at TravelBelize.org. That's TravelBelize.org, your closest faraway paradise. All right, now some quick headlines that are good to know might make you look smarter in the future or now. Well, Microsoft is rolling out a new Windows 11 update that brings its Xbox mode to all Windows 11 PCs, which turns the Xbox app into a full screen controller friendly interface that was first seen on the Asus Xbox Ally handhelds.

31:21It's happening. amazing amazon launch joined the chat as part of its here the highlights experience this is going to bring an ai audio shopping chat bot uh to select u.s product pages inside of the amazon app for users to you know do do your typical stuff interact with the the product summary details all those details ask follow-up questions uh could be pretty useful amazon has joined the chat. Well, the Pentagon has now signed agreements with Microsoft, NVIDIA, Amazon Web Services, Reflection AI, and Oracle to deploy their AI tools on classified military networks. Yeah, it's adding to all the other movement with OpenAI, non-anthropic notably, and a few others.

32:06Macworld citing its sources reports that Apple's upcoming foldable iPhone, whenever that may come out, will be called iPhone Ultra. And there's more to this. A touchscreen laptop that's set for 2027 release will be called MacBook Ultra. So Apple getting Ultra into the game. Would this be the first Ultras in their lineup? I mean, I'm used to them that in Android devices. Yeah. I'm still sad they're not going to call it the iFoldable. Come on, y 'all. iFoldable. The iFold. With a PH. iFoldable, anyway. Oh, I do like that. Yeah, that's good. All right. Well, OpenAI is rolling out an opt-in advanced account security mode for chat GPT targeting high-risk users that pairs with two new co-branded YubiKey hardware keys plus pass keys to lockdown accounts as protection against phishing attacks and other threats for chat users.

33:05Okay. And finally, Anthropic rolling out its Cloud security as a public beta for Cloud Enterprise customers using the Opus 4.7 model. That's its latest publicly available model for code scanning and patch workflows. To be clear, this is not anything to do with Mythos, which we've been talking about in recent weeks. All right. We end every episode of DTNS with some shared perspectives. Mark has a follow-up to Howard's note about least privilege and how it related to the Jertain railway cursor agent situation where cursor's agent deleted a railway production environment. We talked about it earlier this week.

33:45All right. Mark writes, hey, team, I'd like to respond to the letter about the need for least privilege. I totally agree with the author of the letter, but that was not the case here. From Jair Cranes, the founder of Pocket OS's Explanation on X, he writes, to execute the deletion the agent went looking for an api token it found one in a file completely unrelated to the task it was working on that token had been created for one purpose to add and remove custom domains via the railway cli for our services we had no idea and railway's token creation flow gave us no warning that the same token had blanket authority across the entire Railway GraphQL API, including destructive operations like volume delete.

34:29Had we known a CLI token created for routine domain operations could also delete production volumes, we never would have stored it. The agent didn't have the privilege to perform the act, it found it. So the writer was correct, and the scope of least privilege needs to be larger than we assume. Yeah, when these things happen, you're like, wait a minute, I thought we had this covered, but apparently we did not. And as a user, I suppose we make certain assumptions that when we're told something can or cannot do a certain thing, that that is true. And that might actually be true. And then somehow something like this happens.

35:06It's a messy scenario. Yeah, I will say this kind of hits a spot in my brain. And thank you for bringing this up, Mark, because obviously the least privilege did not apply to that token. That token had way too many like, you know, privileges built into it. And I mean, just as a flavor from my everyday life, I know, like, I generate like API keys, I think from GitHub or something. And it like, oftentimes when you generate API keys on like a very much more rigorous service, you have to check off very specifically, you can read this and you can write this or, or, or not. And you have to check all these things.

35:41And obviously, I never thought about least privilege being applied to not like, you know more and like not to an entity such as myself or an agent but also to the token itself the the thing that the key that with which you give permission to do things should also be likely i don't know i guess i guess we don't we don't really do that with keys and realize i guess skeleton keys but yeah no skeleton keys just like very specific keys for very specific doors or other things that require keys all right well what are you thinking about do you have any more like security feedback or information for us we'd love to hear it insight um all that kind of stuff We love it.

36:16Feedback at DailyTechNewsShow.com. That's right. Thank you to Mark for contributing to today's show, for helping us out there. And thank you for being along for Daily Tech News Show. You can keep us in business by becoming a patron. That's Patreon.com slash DTNS.

36:34This week's episodes of Daily Tech News Show were created by the following people. Host, producer, writer, Tom Merritt. Host, writer, Jason Howell. Co-host, Sarah Lane. Co-host, Rob Dunwood. Co-host Jen Cutter, co-host Wintwet Dow, producer Anthony Lemos, producer Roger Chang, editor Hammond Chamberlain, editor Victor Bognat, contributing producers Kevin Tech, Noel Cow, and Brandon Richards, science correspondent Dr. Nikki Ackermans, social media producer and moderator Zoe Detterding, our mods Beatmaster, Wscottis1, BioCow, Captain Kipper, Steve Guadurama, Paul Reese, Matthew J. Stevens, aka Gadget Virtuoso, and J.D.

37:13Galloway. Mod and video hosting by Dan Christensen. Music provided by Martin Bell and Dan Luters. Art by Len Peralta. Acast ad support from Tatiana Matias. Patreon support from Bobby Wagner. And thanks to all our patrons who make this show possible.

37:45Hehehehe. Hehehehe.