Podcasting 2.0 for September 26th, 2025, episode
236.
No Nancy here.
Hey everybody, the Rodecaster's working.
Don't worry, you won't be subjected to all
kinds of nonsense for hours on end.
No, instead, it is a regularly scheduled board
meeting of Podcasting 2.0 where we discuss
everything going on in podcasting, the history, what's
happening now, and where we are going in
the future.
I'm Adam Curry.
Wait, I forgot to tell you, we're the
only boardroom that rejects work slump in the
office, there it is.
I'm Adam Curry in the heart of the
Texas Hill Country and Alabama, the man who's
my first call in case of a security
breach.
Say hello to my friend on the other
end, the one and the only, the only
pod sage, Mr. Dave Jones.
Are you cleaned up now, are you clean?
Yes, I'm clean, man, I'm clean, I'm clean.
That was kind of interesting.
I have never had a breach in my
life.
You got popped.
I sure did.
That was, I mean, who in their right
mind?
No, but who in their right mind is
thinking, hey, you know what, I'm going to
run a crypto miner on a two gig
Linode instance.
I mean, what are they mining?
They were probably just all kinds of stuff.
I mean, everything you can think of.
They run crypto miners on- Washing machines.
Like home routers and crap.
I mean, if it's got a CPU, they're
going to mine on it.
Collectively, when you're mining on 7,000 hacked
machines, you actually get some horsepower.
So I've always, honestly, I've just always been
too lazy to figure out how to do
all the key stuff.
I'm like, oh, it's SSH.
If it's SSH, then it should be secure.
Then whatever I'm sending should be secure.
How do they actually sniff out my access,
my password, if I'm using SSH from my
machine into the server?
What are they doing that they can sniff
that out?
Well, so the way, it's all credential stuffing.
So you're going to have, there's mass scanners
out there polling for OpenPort 22 all the
time.
Oh, I see that, yeah.
And then as soon as they, they'll get
a list and then they just start throwing
password dictionaries at it as fast as possible.
Can they see usernames?
Don't know about that.
Because I don't have a traditional- But
you had root permit, you had root-
They didn't come in through root.
They came in through Atom?
No, different names.
None of them were Atom, which is why
I thought it was kind of interesting.
It's like, so how do you guess that?
I mean, it's possible that they came in,
I mean, you haven't really traced that breach
through the logs, but I mean, it's possible
that they came in a different way, but
I would not, that would not be my
first thought.
Interesting.
It's, it could be that- But I'm
pretty sure root access was open.
I'm pretty sure that was open.
So if- So in that case, you've
got root and then you just have to
guess the password.
Yeah, you can look at your, you can
look at your authentication log and see where
the initial hit was.
It should still be in there.
You know, you'll see in your, oh man,
what is the name of that log?
Is it, let's see.
I think it may be in just your
sys log coming in as cron.
I mean, excuse me, as SSHD.
Authentication.
Maybe you need to like, so what happened
was your, one of your boxes got-
Two, two boxes.
Okay, two of your vibe coding boxes got
popped.
Well, one that was actually in production and
it's, you know, it's running an FFmpeg streaming
radio thingamabob with a singular Python script.
And I'm very wary of resources for a
whole bunch of different reasons.
I want to see if I can put
it on a, on a one gig linode,
you know, and keep it even cheaper, even
smaller.
And so I have HTOP running.
I'm like, wow, why is it at a
hundred percent?
And I go looking and it says, okay,
you've got this process called K audit zero
running at 97%.
So that was kind of, that was actually,
it's actually kind of nice because you don't
notice it right away.
You know, it was like my stuff was
still working because it uses very little CPU
and very little overhead.
And there, this K audit zero mining thing,
it just uses CPU.
It doesn't really use a lot of memory.
And so that's how I saw it.
And I'm like, oh crap.
And, and, you know, I could see that
it all happened yesterday because, well, first of
all, I noticed it yesterday and I wasn't
quite sure what it was.
And, but I could see that, you know,
they put in SSH keys and all this
stuff all on the 25th.
So, okay, all right.
Backdoor.
Yeah, cron tabs and all that stuff.
So, I would imagine that, you know, if
you have, if you have anything, if you
have a relatively weak password, it's, it's gonna
be.
Yeah, that's the thing though.
I have, you know, my passwords are generated
by, what do you call it?
Vault warden, bit warden.
So, Your SSH login password?
Yeah, yeah.
It's possible.
So, it's possible that it came in through,
and that's why I would want to do
is check, check the SSH log and see
if that was the actual first hit because
it could have been, they could have come
in through some, through a flaw in some
other part of the system.
I mean, that's possible too.
You have, you have, you know, how much
stuff do you have open on that box
is the question.
Yeah.
And exposed.
You know, which ports do you have open
with running software on it that may not
be secure?
Well, I can see, you know what?
I can see right now, they definitely came
in through root.
Oh, well then that's, that's probably SSH then.
Yeah.
Cause I'm seeing they're trying now.
Oh, really?
Yeah.
Let's see, they're trying port 39550, the port
58232.
That just gotta be a scan then, I
guess.
I just scan the ports.
Well, now what are you, where are you
seeing this at?
In var log auth.log. Okay.
And that's, and those are SSH attempts?
I guess.
It doesn't actually say, it says, yeah, SSH
authentication, authentication failure, root, root, root, root, root,
root.
Yeah.
And then user vios.
Okay.
All right.
So you got, so you got hit by
root then.
Yeah.
Did, had you, did you have a long
password on root?
Yeah.
Oh yeah.
Yeah.
That's, I don't know.
It would be interesting to go back and
see where that first successful login was, you
know, like when it happened.
Let me see.
So that would be, here's how, I'll just
try it one, then we'll give up on
it.
Yeah.
Cotton gin.
He, yeah, he's, he's got it.
He's got root and password logins disabled.
Oh yeah.
They are now.
He's keys all the way down, baby.
Let me see.
Okay.
And this would have to be on the
20.
Oh, interesting.
Hmm.
Binary file matches.
Yeah.
You can ignore that.
What would I be grepping for here?
Well, I mean, just the SSH authentication entries,
you know, SS, var, log, auth, log with
SSH.
You can search it for SSH.
Yeah.
That's interesting.
Nothing past the 27.
That doesn't make any sense.
Well, maybe, I don't know.
So whatever.
As long as you, yeah, as long as,
so, I mean, my standard protocol for this
kind of stuff.
Which I now have.
Thank you very much.
Which you have.
I have the Dave Jones standard protocol.
I'm very happy with this.
If anybody's running servers, you know, Linux servers,
you really, I mean, to me, like bare
minimum is you need to disable, disable root.
If this is in your SSH configuration, you
need to disable root login, disable password login,
disable interactive keyboard login.
Only put your SSH server on a different
port than 22.
Then make, and then enable only key pair
authentication, public key authentication.
And the, what I go, I go one
step further.
Some people don't want to go this far,
but I go one step further and I
restrict access to my SSH port using UFW
to only particular IP addresses.
So I don't, I just, I do not
play around with that stuff.
And it's sometimes, you know, and sometimes it
can be a pain and people don't want
to deal with it because you're on the
road or something and you want to log
into your machine and you, you know, you
can't because you're restricted.
It is a pain, but now with TailScale,
I just restrict everything.
I restrict all the logins to all the
boxes, to my, to the CIDR block that
is part of my residential IP scheme.
And then I just come back.
That way, if I get a new IP
address at my house router, it's not gonna,
you know, I still, I'm still okay cause
I'm on the whole subnet.
And then if I ever need to get
onto it from the road, I just use
TailScale and come back through my house and
just get it that way.
The bottom line is, if you're gone, podcast
index is history.
Hey, Melissa, Melissa.
Okay, just sit in front of the console.
Tell me what you see.
What windows are open?
Oh, this 18 open.
Okay, let me see.
Type in S-S-H.
Go to the dead body.
Is his phone in his pocket?
Can you put his thumb on the authenticator
for me?
Okay.
Hold it in front of his face.
Open his eyes, open the eyelids.
Just open them up with your fingers.
Yeah, okay.
There you go.
Perfect.
Oh, the finger's too cold.
Okay, switch to the face.
That's hilarious.
But not really.
No.
Not really.
Oh man.
And it was, cause you know, I got
a lot going on these days.
So this morning I was like, oh, cause
last night after, after I did no agenda,
I'm pretty tired.
I had modularized, modularized, modularized, modularized, my Python
script, which was actually kind of cool.
Cause you know, and the only reason I
did it is the, the vibe coding machines,
they stopped being able to write the whole
script.
It was like 1200 lines.
And it went, it just kept not completing.
And I learned something else by the way.
If you upload your, this is grok in
this case.
If you upload your scripts, it may truncate
it on the upload.
I said, well, I never had the full
script.
What do you mean?
I uploaded it to you.
Well, no, I never had it.
It got truncated.
Oh, that's good to know.
So it only accepts a certain amount of
input and then you're toast.
Well, unless you paste it in, which is
okay.
That's fine by me.
So I'm like, well, why don't I just
modular, modular.
Why don't I chop it into bits?
I chopped it into bits.
And so I was all excited.
This morning, I got a couple hours like,
ah, it's great.
I'm going to work on this.
I hadn't actually tried it out yet.
I'm sure there were some bugs.
There were, and I'm like, whoa, everything's spiking.
All the machines are spiking.
So I spent a lot of copy and
pasting your instructions on how to do this.
And then once I got it, like, okay,
now I know how it works.
Then I just shored up everything.
Cause I got other machines that haven't been
hacked yet.
And so I started shoring up everything.
But I'm- There's still time.
But I can tell you this box is
just, it's getting hit every second.
Oh, you're- Every second.
You're a target now.
Yeah, now it's trying FTP users.
It's like, it's nonstop.
Oh, really?
Yeah, oh yeah.
My first, my first ever, my first ever
hack experience was at an old job many,
many years ago.
This is probably 96, 97.
I don't remember.
But do you remember the University of Washington
FTP server?
Oh yeah, what was that?
Yeah, it was just kind of like the
standard FTP server that was shipped with like
Red Hat 6.
Yeah, yeah, yeah.
And FreeBSD and all that, you know, OpenBSD,
they all used the UWFTP, the University of
Washington FTP server.
And so I fired it up because I
needed to, I needed to push some files
up from a different location and forgot to
turn it off.
It was only going to be temporary and
forgot to turn it off.
And of course, I mean, like within 24
hours, it was hit.
I got a call saying, hey, our website,
like the front page of our website has
something weird on it.
And I'll go and look at it.
The website had been defaced.
You know, this was back in the days
where hacking wasn't really for money yet.
People just wanted to like deface your website
so they could say, I've been here, look,
I own you.
Exactly.
Back when it was fun, in the good
old days.
We were just having fun, man.
Don't get your panties in a bunch.
Yeah, back before ransomware and all that.
And so I was like, I mean, I
was, gosh, I don't even know how old
I was, 20.
I was like, oh crap, you know, freaked
out, finally figured out where it came from.
And from like then on, I've been Mr.
non-standard port, firewall, everything, just like so
paranoid.
It only takes once.
No kidding.
So the SSHD config you gave me, that
basically shuts everything off.
There's no, they can't log in any other
way than with the public key.
Right, okay.
Right, yep.
Because I can see that actually trying to
use the password, which is an actual path
on the machine, which is an odd combination
to try.
Now, it's a file path they're using as
the password?
Yeah, I just saw it, just tried that,
trying everything.
This guy's like, man, my Bitcoin, my Bitcoin's
on that machine.
How do I get my Bitcoin?
How do I find that Bitcoin?
Is that Bitcoin on my machine somewhere now?
Man, I had four sats on there, dang
it.
Can't be much more.
Okay, that tells me, actually, that may be,
if they're using a file path, that could
be a file traversal vulnerability and some sort
of web thing that you have going on.
I'm presuming that they were already in there.
I mean, they could be looking at NGINX,
because port 80 is open, 8,000 is
open, 8080 is open.
But they're not on those ports, though.
If they're able to upload, if you have
a file traversal vulnerability or a file upload
vulnerability in one of the web, in one
of your web things that you're serving, then
that would allow an attacker to upload something
to the box into a location on the
file system they specify, then come in later
and address that file they uploaded in an
SSH login or some other attempt.
So they could be, essentially, they backdoor you
by uploading through an existing open hole in
your web.
I mean, I would, you know, there's no
telling what's in that Python script that you're
using.
It may have- Could be all kinds
of groovy stuff in there.
It may be allowing all kinds of stuff.
I mean, is it using like Jenkins or
some sort of Python?
No.
Jenkins?
Web framework or something like that?
Unfortunately, I am using Flask on, I wonder
if Flask has a vulnerability.
It could, yeah, it could.
It's a very common thing in CMS is
to allow- Stick something in there.
Like, oh, I got something for later.
Upload.
A little candy, a little candy for later
on, everybody.
Bastards.
Nah, so far, it seems they're having trouble.
Okay, we're good.
Yeah.
Anyway, so do you have anything on, I
got some stuff, I don't know, do you
have anything on your list for today?
Oh yeah, I've got tons of stuff, always.
And if I could bring up my notes.
You go ahead, I'm trying to bring it
up.
Well, the main thing, I guess, there were
two things on my list.
The big thing was AI tagging, which Power
had, we're talking about that quite a bit
on the show this week.
It's on my list too, yep.
And then censorship is podcast index.
Is it really censorship resistant?
Well, you know, the AI tagging thing, I've
also got that on my list.
And I've also, I just got some, I
mean, I think we just need to probably
talk about AI stuff in general.
I mean, not that we don't talk about
it every freaking week.
Well, for two years, everyone's been saying, oh
yeah, yeah, AI is a new thing in
podcasting.
And here we are.
Surprise, surprise.
It's here.
I mean, I think the word that hit
me this morning was after listening to James's
interview.
Yes, with what the lady's name?
Janine.
Wainthright.
No, not Wainthright.
Janine something.
Wainthright.
Right, Janine Wright.
Janine Wright.
Co-founder, CEO of Inception Point AI, yes.
I mean, the thing, the word that hit
me this morning was creative hyperinflation.
I think that's what, I think that's what
we're beginning to live through.
I like that, creative hyperinflation.
Yeah, I mean, like I wrote, as I've
been thinking about this on and off all
week, and we talked a little bit about
this last week, where if there's a way
for somebody to farm content for money, it's
gonna happen.
That, you know, like that guy Tanner Campbell
from a long time ago, I think, did
we have him on the show?
No, I don't remember if we did.
No, I don't think so, no.
But I mean, he had this whole thing
where he's like, here's how you make money
in podcasting.
You go and buy, you put your podcast
on Spotify using Anchor, then you go buy
a bunch of Facebook ads pointing to your
Spotify podcast.
And then you buy, then you do, and
that gives you enough hits to enter Spotify's
mark, like a creator advertising program or whatever.
And that gets you, it was this whole
formula, this spreadsheet saying how you could take,
you could launch a show and within six
months have X number of dollars coming in
through ad revenue using, you know, essentially farming
the system.
Yeah, sure.
And, you know, that's how this stuff works.
And AI is the latest version of a
farming scheme.
I mean, that's what we're dealing with, the,
you know, in Inception Point or whatever, you
know, I think that's the name of that
company.
Inception Point AI.
Yeah, that's what this is.
This is just a, this is a ad
revenue farming mechanism.
And that's not to say, like, that doesn't
mean that it's, I'm not making a moral
judgment on it at this point, because people,
lots of people have been doing this since
the web started.
This content farms, quote unquote, have been around
for many years now on the web.
And at scale, at a high enough scale,
okay, well, let me back up and do
it like this.
So when I'm thinking about whether the index
should ingest this stuff or not, you know,
right now we are, and I don't, I
do not anticipate that we would stop.
But in general, digital has a huge drawback.
And that is that creating new information that
will then have to be stored forever is
too easy.
There's not enough of a cost to it.
You know, imagine if there were a book,
like a physical book, okay.
Imagine if there was a book creation machine
that someone create, that someone built.
In this book creation machine, there's actually a
short story that's very similar to this.
I'll have to look it up and find
a link to it later.
Or it's not about this kind of thing,
but it's very similar.
Imagine if there was a book creation machine
that would create new books at a rate
of like 10 trillion books a day.
Within a few years, the entire surface of
the earth would be covered seven feet deep
in books.
With books, yeah, a lot of books, a
lot of books.
So that's essentially what we have now with
LLMs. We have the ability to create virtually
infinite amounts of, quote, creative.
And that information, if it is then pumped
into standard channels of distribution, it is going
to overwhelm the digital platforms that exist.
So this is actually very interesting because I
kept hearing James talk about, well, whatever the
advertisers want.
And my initial response is, what?
Advertisers don't determine what we do.
But now I get it because the advertisers
are effectively being duped.
Well, and the question is, are they being
duped?
When it comes to downloads, yeah, I think
so.
And so when you have in your model,
so you have 3,000, you have 5
,000 podcasts creating 3,000 episodes a week.
And you can hear that they have two
ads in front of every single one of
them, which probably are not even listened to.
And we know from my own experimentation, you
can create download bots quite easily.
There's only one hosting company that really blocks
anything that they don't see as an approved
user agent.
Everyone else, if you use Mozilla, obviously.
In fact, everyone accepts Mozilla, but not from
certain IP addresses.
So if you're building a bot farm on
Linode, you're gonna be disappointed by at least
one host.
But in general, from what I see, I
could do that for every other hosting company.
And in fact, I could do a version
of what we did when we initially filled
up the podcast index is I could just
get a million, a million downloads, 4 million
downloads or 4 million accesses, whatever you wanna
call it, over time.
And that would be a nice little bit
of pocket change.
I don't think I'd get rich on it,
but yeah, it'd be nice.
Yeah, just some nice little coin in my
pocket.
And so that's the problem.
The whole AI tag is not for you,
not for me, not for Joe, the listener,
because Joe, the listener will know very quickly,
oh, that sucks.
Or it's AI, but I kind of like
the information, but it's the advertisers.
That's who everyone's trying to protect in this
is it's going to flood the advertising ecosystem.
And that's where the problem is going to
be.
I think that's what you're saying.
Yeah, because this is essentially a audio version
of what if it was done on Google,
we would call kind of click fraud.
Yeah, kind of, complete.
Not just kind of, it is click fraud.
I recommend everybody listen to James's interview with
the- Janine Wright.
With Janine Wright.
What was your takeaway?
What's your takeaway from it?
She seemed very uncomfortable.
To me, that was a general sense that
I got.
And I don't blame her, I would be
too.
If there was, I commend her for coming
on the show.
Sure.
And actually doing the interview.
But I think she did sound uncomfortable.
I also think that this sounds very much
like a company who's looking to get purchased.
I don't think this is a long-term
thing for them.
This seems to me more like a, hey,
look what we're doing.
Somebody, we've got some really cool tech.
Somebody needs to come buy us.
And to me, that feels like what this
whole thing is.
It's just essentially like an idea flip.
Interesting.
But, and so in that regard, having, being
on an interview like this, this is an
all news is good news type situation.
People get mad.
Maybe people in the podcast industry get mad,
but that doesn't really mean anything in the
ultimate scheme of things if they flip the
company and get paid.
So for their admittedly pretty cool technology.
And, but then, but, I mean, long-term,
who knows how this thing goes?
I think James's questions, I think what he
was getting at was obvious, which is, it's
not about the AI part.
It's about, is there a human doing anything?
Is there- Oh, even writing the script.
Yeah, even writing the script is where James
was going.
Right.
Yeah, and if there's not, if there's absolutely
no human oversight whatsoever, then it really is
just like the book generator machine.
Yeah, but the point is some of it
may actually be enjoyable.
Some of it may be what people like.
In fact, a lot of it may be
what people like.
If you look at the comments on some
of these AI podcasts, yeah, a lot of
them are like, this is crap, this is
no good, this is AI.
But some of them are like, well, well,
I do that knitting stitch differently and it
works quite well for me.
You know, so not everyone, clearly not everyone
thinks it's slop.
Yeah, my question would be, does anyone think
that it's, does anyone understand that it's actually
AI?
Yeah, I think a lot of people do.
The ones who respond positively.
Do you think- They might not, no,
they might not.
They might not, they, I don't know.
I mean, a lot of people are talking
to their AIs and they don't seem to
have a problem with it.
So if they don't mind their own personal
AI talking to them, maybe they don't mind
a podcast AI.
You know, not everybody in the world is
normal.
Hey, man, some people are weird.
Wow, is this a new discovery that you've
made?
Like somebody who gets their knitting tips from
an artificial intelligence voice, that's- Yeah, you'd
be surprised.
I'm willing to say that not everybody is
like, you know, a hundred percent.
I've been reading this book, I just started
it.
Do you know a guy named Paul Kingsnorth?
No, I don't think so.
Lives in Ireland and he's got an interesting
background.
He's a Catholic brother, but he came from
an, like an ecology, what would you call
that?
Like a, he was part of, do you
remember Earth First?
Why does this ring a bell?
I can't recall it.
They were like a, they were like a
70s version of stop the oil or whatever
those people are that like glue themselves to
the street.
Oh, X something.
Yeah, I know what you're talking about.
Yeah, like it was, they were like a
radical environmentalists.
Okay, and I'm, I don't, yeah, I think
that's a fair thing.
I think they would accept that they were
radical environmentalists.
I think that movement collapsed.
There's actually a book about it that I
have on the shelf.
I haven't even read it yet.
I've only perused it, but it's about the
Earth First movement and how it collapsed and
set back environmentalism a long way.
But he was a member of that and
that kind of thing.
But anyway, so he just wrote a book
called Against the Machine.
And it's a book just about modernism, industrialism,
technology, technologism, that kind of thing.
It's a very, it's just a book that
you would think is pretty fitting for our
time.
And I've got, I actually wanna read a
section of this real quick, because I think
this is kind of like, I think he
captures something here.
He says, and forgive me for the length
of this.
He says, meanwhile, out in what is fondly
called the real world by people who often
don't know very much about reality, you are
living in a metastasizing machine, which is closing
in around you, polluting your skies and your
woods and your past and your imagination.
If you have the kind of sensibility which
prefers Lothlorien to Isengard, this means that you
are a character in a tragedy rather than
a heroic epic.
Most of the things you like are fading
away.
The great forests and the stories made in
and by them, the strange cultures spanning centuries
of time, the little pubs and the curious
uninhabited places, the thrumming temples and dark marshlands
and crooked villages and folktales and conviviality and
spontaneous song and old houses, beaches and wild
hilltops, the chance of getting lost in the
rain forever or discovering something that was never
on any map, a world without maps, a
world without engines.
This world you can see is on the
way out.
If it is not already long gone, the
one thing is manifesting to replace it is
a left brain paradise, all straight lines and
concrete car parks where the corn exchange used
to be.
The future is STEM and chatbots and cashless
parking meters and economic growth and asteroid mining
forever and ever.
There is no arguing with it.
You can feel the great craters that it
makes in the world.
You can feel what is being tarmacked and
neatened and rationalized into oblivion in the depth
of what is leaving, but you cannot explain
or justify it in the terms which are
now the terms we live by.
You just know that something is wrong.
Everybody tells you that you feel this because
you're infected with something called nostalgia or that
you picked up a dose of Luddite-ism
or romanticism at a party or in a
doctor's waiting room.
Basically, there is something wrong with you.
You don't understand progress, which is always and
everywhere a good thing, but you can feel
something going on that is not a good
thing and it doesn't matter how many lies,
damn lies or statistics are produced to prove
otherwise.
You can feel this as something enveloping you.
The Welsh poet R.S. Thomas described it
chillingly in his poem, Other, in a verse
I've never forgotten since I first read it.
The machine appeared in the distance, singing to
itself of money.
Its song was the web.
They were caught in, men and women together.
The villages were as flies to be sucked
empty.
God secreted a tear.
Enough, enough, he commanded, but the machine looked
at him and went on singing.
Now, that's depressing.
It reminds me a little bit of, what
was the Neil Stephens' book?
I think it was, was it Snow Crash?
I think it was Snow Crash.
Snow Crash, yeah.
Yeah, where the only thing left in real
life was food delivery and FedEx.
Yeah, right.
Everything else was online and everything got hacked
all the time, basically.
It says, he says, you can feel something
going on that's not a good thing, and
it doesn't matter how many lies, damn lies,
or statistics are produced to prove otherwise.
You can feel it's something enveloping you.
That's what I heard in that interview.
Yeah.
Is, look, this is fine.
What we're doing is fine because let me
give you some statistics.
Let me tell you why in 24 months
everything's going to be AI and none of
this is even going to be an issue
anymore.
None of those arguments truly matter because you
could tell that what James was was, was
uncomfortable with this.
He's uncomfortable with something about the way this
thing is being done.
Yeah.
And I think the uncomfortableness is what Paul
Kingsnorth is referring to here.
It's, and it's like we talked about a
couple of weeks ago, being part of the
push right now with AI is to get
us to be comfortable with it because so
many of us are.
It's an attempt to flood the zone with
so much AI content that we become sort
of numb to the thing that is, you
know how sometimes you have like a, I
think a lot of us have had this
experience in the past.
Somebody new comes into our life, somebody that's
like a new acquaintance or friend of the
family or something like this.
And this new person comes in and, you
know, and starts to, you know, through connections
that we have in the community or whatever.
And this new friend begins to be around
us more, around our family more and that
kind of thing.
And there's something that just makes you uncomfortable
about this person.
You can't pinpoint it.
You can't, there's nothing explicit that they have
done that is, that you can point and
say that I don't like, I think this
person's dangerous or concerning or whatever.
But there's just something about that person that
you just, that bothers you, makes you uncomfortable.
You think they may not be trustworthy or
whatever.
And the longer you sort of deny that,
that sort of, that internal feeling you have,
you numb yourself to it.
And then you may find out later, you
know, this guy ends up, I don't know,
in jail or something.
Your concerns were validated.
And you think, you know, I knew there
was something wrong with that guy.
I knew it the whole time, but I
sort of seared my conscience against it.
Right.
And I think that's what's happening now with
a lot of the, with AI.
I think we are getting, we're getting, this
is a, we're living through a phase of
desensitization.
Oh, for sure.
You know?
Yeah, oh, definitely.
And honestly, I think that's why podcasting is
so wonderful because I don't believe any AI
in our lifetime will be able to recreate
a human being speaking in your head.
Video takes away so much of the recognition
that, hey, this is not real, because it
just, you look at something and your brain
goes, that's real.
And audio is a whole different beast.
Yeah.
I guess I would say to that, but
what if it does?
Okay.
Then you become jelly.
What more can I say?
You're screwed.
Nate, this is acclimation to institutification.
There's a- More of it, as far
as I'm concerned.
The more, that's the only way.
The more slop we create, the more that's
published, which I'm actually quite happy with, publish
as much slop as possible because ultimately that's
going to lead to entropy.
I just don't see any, I don't see
how they can protect themselves against it.
It just seems impossible.
So we might as well go now.
I mean, again, the no agenda art generator,
which for 15 years, people have been making
art and uploading it.
They've all stopped.
Every single one of them who was making
art by hand.
And they've either gone away or some of
them may be doing some prompting, but it's
crap.
I mean, it's so disappointing.
Yeah, there's a couple of people who have
gotten around some of it, but you can
see it.
You can see the washed out images.
Everything's orange, the cartoon phase, or everything's a
cartoon.
Now you can just see these things ingesting
crap and spitting it back out.
And it's just worse.
I can literally see it.
And now you're, an academic paper could be
written about the no agenda art generator.
Absolutely.
Someone should do that.
And you can see, and now what happens
is your, is the no agenda show album
art is almost indistinguishable from something like the
media round table.
Yes.
Whereas used to, they used to be complete.
You would never associate those two, but now
you scroll through your list.
Since y'all are both essentially having AI
generated artwork, they just kind of blur into,
they look like they're the same thing.
Yeah.
And orange is the predominant color for some
reason.
I'm not sure why.
That's true.
Yeah, I don't know why either.
Orange just seems to keep popping up.
Everything, faces are orange, backgrounds are orange.
Orange is a favorite color.
Fish are orange.
It's just weird.
I'm scrolling.
It's like, everything's orange.
Everything is orange.
I don't have an answer.
And there, that's another part of the desensitization.
I think that one thing I took away
from James's interview was just, he was pushed.
Sadness.
I heard sadness is what I heard.
Melancholy.
Yeah, right, right.
But it's the, he was respectful and did
not push too hard, but it was the
thing, it was the, what was unsaid was
just as powerful.
Yeah.
And it made me think, you know what,
I need, I have got to resist being
consumed by just, oh well, it's the future.
I'm going to push back on that.
I'm going to resist even harder.
On a personal level, you mean?
Yeah.
I mean, like, you know, and ultimately I
don't think that, I don't think that we
need to ban anything out of the index
unless it gets out of control.
Now, if it gets out of control and
you end up with the automatic book creation
machine and people start pumping in a million
podcasts a day, we are going to stop
that.
We're going to, there is a threshold somewhere
of which I do not know where it
is at right now, but there is a
threshold of which we have to take action
against this.
Yeah.
I don't think it's going to get that
far.
I just don't see it.
I mean, the thing with podcasts is there's
no real discovery mechanism.
YouTube, yes, there's this discovery mechanism.
And there's lots of ways you can get
the algos to kick in and do things.
And once you reach certain levels, then you're
kind of golden.
You can fly along and that's when AI
will be perfect.
I mean, just go look for any topic
on YouTube and you have to go through
all the AI generated slop before you get
to something useful, an actual human being.
But with podcasts, like what's the recommendation machine?
This may be the biggest downside to podcasting,
which is you really only hear about other
podcasts from other people in other places.
Like, oh, that's a good podcast.
Oh, I'll go look it up.
The biggest downside to podcasting may be its
biggest defense.
Okay, that's an interesting thing because that was
part of what they were...
Okay, one of the things she said in
there was she was talking about the Charlie
Kirk thing.
And she said, she gave the example of
when Charlie Kirk was assassinated, we had a
podcast out about that within like two hours,
I think is what she said.
Hey, there were books that were published the
day before.
Oh, really?
Well, that's interesting.
If you believe the telegram groups, yeah.
Oh, the telegram, okay.
Such a, so trustworthy.
The old, hmm, how could this book be
published on September 9th when Charlie Kirk died
on the 10th?
Hmm, hmm.
Coincidence?
Interesting coincidence, yeah.
All right, okay.
Yes, like, so she's like, well, we had
a, we had a podcast out within two
hours about Charlie Kirk and it went to
number three on Spotify's list if you searched
for Charlie Kirk.
Wow.
Okay, now, this caught my attention.
Yeah.
Because that's not the way that works.
I'm sorry, but if you don't just create
a podcast, name it something that is like
some other search term and have it show
up at the top of the list of
a platform like Spotify or Apple or even
us.
That you do not get, ranking is not
as simple as naming.
So there's, I don't know what, the only
way that happens is if you pair it,
if you pair your podcast that you just
created and stuck into the directory, if you
pair it with some sort of traffic generation.
Yeah, of course.
You have to have- Popularity.
Yeah, search, search, search, search.
Right, because you don't just create a podcast
called Charlie Kirk and it instantly show up
in the top three.
Well, I would say that people probably went
searching for Charlie Kirk on Spotify and they
came across it.
And if you, you know, juice the machine
a little bit, it might move up far
enough for people to catch it.
But if, how, let me, I'm going to
go to podcast index right now and search
for Charlie Kirk, Charlie Kirk.
And I mean, there's, there's like 30 results
that show up immediately.
I mean, Inception Point AI, let's see, that
is one, two, three, four.
It's number four and number five.
Number four, yeah, I see four and five,
yeah.
How did it get to that level that
fast?
Well, only you know how that works.
It works through traffic.
Right, so you don't think people just searching
for Charlie Kirk biography or Charlie Kirk death?
Those are good titles to search on.
If you search- Let's listen, let's listen
for a second here.
I'm going to get an ad, of course.
When it comes to results.
Okay, I'll wait for the ad to go.
Yeah, I'm giving him money.
Yeah, I'm sorry.
No, I mean, I have to admit, there
must be a lot of metrics.
There's either a ton of metrics- So
you're saying you have to have some kind
of juicing machine inserted in order to get
it there.
It just can't happen organically.
I would love to know if they're using
something like MOPOD or something like that.
At Pismata Valley University, I'm James Carter.
And in this third and final installment of
our series, we turn to legacy, investigation, and
the broader implications of this tragedy.
My role as- They did three episodes
on one day.
Released at 6.59 PM, 7.01 PM,
and 7.03 PM.
So they made it look legit too.
This has got to be, there's got to
be something like one of those services that
are being employed to drive traffic is all
I can think.
No, possible.
You just don't go to the top of
the chart organically that fast.
It's just not possible.
So, I mean, this is not really, to
me, it's not really about the AI so
much as it's about like, you could do
this same thing that they're doing.
You could do that with a thousand anonymous
Indians.
You know?
I mean, at enough scale, at a big
enough scale, people, if you have a sufficient
quantity of people, you can also churn out
as much content as this does.
Yeah.
I mean, you know, if you hired a
thousand anonymous Indians as, you know, like Amazon
did for their, you know, for their stuff,
you could pump out just as much content.
3,000 episodes a week.
And, you know, and it would, all people
just copying, pasting off Wikipedia or something.
Yeah.
So, I mean, to me, it's not this
particular company.
Yes, they're doing it with AI in order
to, you know, increase their profit margin, but
they, you know, it's, this is not, the
AI is not the most interesting part of
this to me.
It's just, how exactly are they juicing this
stuff into the charts?
Right, okay.
So, bottom line, it doesn't really hurt podcasting.
It could hurt platforms like the index.
If we're, you know, if there's a million
submissions a day, the trillion book problem, that
could just be a resource drain that becomes
a problem.
But it doesn't actually hurt podcasting to me
in any way.
It hurts advertisers because they're being scammed.
That's- And the loop is, you know,
now the loop is complete because we already,
we know that download scams are happening whether
it's by putting something in a game that
no one actually listens, it's just a download.
There's a million different ways to do it.
And Silicon Valley is filled with companies who
do this, you know, just before the board
meeting.
Look at our traffic, it's up, it's amazing.
We're spiking, we're doing great, give us more
money.
It happens all the time.
But now the creation part is what's complete.
And so it's, for all intents and purposes,
it's legit.
You know, it's not something I'm interested in,
but it's legit.
It's no less, to me, it's like, all
right, so you created it with AI and
there's content and it may or may not
be interesting to me and it may or
may not be something, a voice that I
want to listen to or copy that I
think is useful, but it's legit creation.
You know, my example is always Eddie Van
Halen.
Eddie Van Halen would, he really, when, what
was the, what was their big album when
they still had David Lee?
What was the one with John and...
Oh, 1984.
84, exactly.
So that was kind of when studios were
really, really upgrading and, you know, punching in
and just creating these unbelievable solos that you
just listened to it like, wow, this guy
is amazing.
So then they went out on the road
and Eddie Van Halen had to learn how
to play those licks that he had basically
created in the studio.
So this is nothing new.
And he really couldn't actually replicate it the
way that it sounded on the record.
It was almost a physical impossibility, just you
don't have enough fingers.
You know, you can't place them.
That's what happened to the band Alabama, the
fiddle player, they got studio musicians to come
in on...
Sweet Home Alabama?
No, no.
That was Lynyrd Skynyrd, I'm sorry.
Yeah, yeah, yeah.
You know, the band Alabama had, I forgot
which song it was.
They had one song where the studio fiddle
player just, I mean, he just set the
strings on fire.
And the fiddle player for Alabama was like,
ho, ho, ho, ho there, champ.
You're gonna have to calm that down.
There's no way I can play that.
He's like, I can't play that in concert.
So they had to like, he had to
tone it down so the real guy could
play it.
Yeah, but my point is like, we've always
had fake stuff.
You know, Milli Vanilli.
They got a Grammy.
They didn't even sing on the record.
I mean, anything can be done.
So if we wanna label it, no one's
gonna adhere to it.
The people who are in this game, they're
not gonna label their content as AI.
They're not gonna.
It's not for the listener.
This is all about the advertiser.
And James kept saying it as such.
Well, it's up to the advertisers, what they
want.
Okay, well, so it's an advertiser problem.
To me, it's not a podcasting problem.
You know, I might actually listen to one
of these podcasts.
I don't know.
It could happen.
I'd be like, oh, that's interesting.
It's AI, but the content industry.
It could be.
You don't know.
Charlie Kirk shows say that they're hosted by
James Carter, a seasoned national news anchor with
a calm, authoritative presence.
It says nothing in here that is AI.
The description was written by AI though.
No, but that's fine.
You know, they're not going to say it.
And why they shouldn't have to.
They use the podcast namespace in their feed.
So I'm happy.
Oh, well, good for them.
These guys, they rock.
Spreaker.
They're awesome.
Spreaker gave them the air legitimacy.
Awesome.
So now that would, as far as tagging,
I mean, I don't, I cannot think of
a way to do it, honestly.
No, there's no, it's like explicit.
Now you're either going to have to have
a way for people to complain and say,
hey, this should have an explicit tag or
this should have an AI tag.
And then the feed is no longer the
source of truth.
The minute we allow that.
I've been wrecking my brain trying to think
of a way to, that this would work.
And I just can't.
Nobody's, I mean, if.
But I don't really care.
The thing is who benefits and who's hurt.
This company benefits short-term and who gets
hurt?
Well, the advertisers, I'm sorry.
You've got a crap metric to start with.
Fix that.
How about that?
If the core problem is not AI podcast,
the core problem is the download metric.
That's the core problem.
Yeah, I mean, there's just not.
Yeah, so yeah, Nathan's right.
I mean, solving the advertiser problem, that's just
not something a tag is going to do.
No.
It's just not.
No.
It's not.
Unfortunately, this is one of those examples of
trying to use.
And by the way, it's only dynamically inserted
ads.
That's the problem.
It's not for host reads.
Yep, yep, because there's not going to be
any.
Yeah.
Because nobody's going to buy that content.
Good, well, good.
Then that scourges out of my life too.
Well, I mean, honestly, the dynamic insertion, I
mean, if you're buying dynamic insertion as an
advertiser, you deserve what you get.
Yeah.
Because that's bottom of the barrel stuff anyway.
Yeah, yeah, exactly.
I mean, I don't know.
I just cannot, for the life of me,
imagine how this would work.
The exact people who are going, who you
would want to tag are the ones that
are not going to put the tag in
there.
So it doesn't matter.
Yeah, exactly.
So this does flow into censorship because, and
classic government censorship is one thing, but at
a certain point, Adam and Dave are going
to say, well, this is hurting our system,
this flood of a trillion books, we're going
to have to censor this, which is a
form of censorship.
Like, no, you can't be in our index.
And that would be the only reason that
I would pull that trigger is because it
is essentially out of platform self-defense.
Yes, platform self-defense.
I mean, there's no other, because, I mean,
what is being said, I mean, we've said
this since the very beginning, we're just not
going to get involved in that.
That's up to the apps.
The apps can layer on top of us
and decide to show whatever they want.
We're not going to be pulling stuff off
based on content.
Exactly.
But, you know, unless it's locally illegal to
us.
Now, I'm sorry.
Go ahead.
No, but if we have to play self
-defense because we're getting overwhelmed with a certain
type of garbage content, like AI generation or
Vietnamese poker SEO, I mean, yeah, we're going
to pull those off.
Those are fun.
Give me access to API.
I need right access to API.
Urgent, urgent.
Dave, Dave, Dave, I need access.
It's amazing they got your name.
I mean, they were hounding us for a
couple of weeks.
Dave, Dave.
I think they finally gave up.
Give me right access API is very important
for our podcast platform.
Why did you not respond?
You actually did respond once.
We take care of spam.
It's good.
Look now.
Yeah, yeah, we, yeah, shaking now we got
rid of it all.
Okay.
Oh man.
Well, so just because there's so much, I
think we talked about it on the last
show.
There's so much confusion about the FCC.
And to be fair, in other countries, there
are organizations who police content.
And this is certainly happening in the EU
and certainly happening in the UK.
And I don't believe they have any jurisdiction
over podcast index.
They could certainly block us, I guess, on
a network level.
That'd be cool.
It would be something different.
Be fine.
Yeah, it'd be fine.
So that's certainly something they can do.
In the United States, it really comes down
to one thing and that's liability.
And the reason we can do this at
all is because of section 230.
Yeah.
And of the Communications Decency Act, I think
it is.
And that says that we can have content
that is created by other people.
And if there's something, if there's some form
of, what's the term I'm looking for?
Slander or the other term, you have slander,
you have- Libel.
Well, in essence, if someone says, I'm going
to kill this person and it's in a
podcast or in a description somewhere, we are
not liable for that.
And if they change section 230, which I
highly doubt they will because that would kill
everybody.
That would kill Facebook.
That would kill X, everything.
Every social media site, even Google could run
into trouble then.
So I doubt they're gonna get rid of
that.
But there's no organization, no governmental agency in
the United States that can stop us from
doing anything we want to do, except for
the courts.
And if that happened, if they changed section
230, well, that could be difficult.
Then we're just back to bloated apps with
the whole index on it.
I don't know what else we can do
in that case.
SQLite download or whatever, yeah.
Yeah, you just pull in the whole thing.
Yeah, I don't, I mean, there's no, yeah,
we're not gonna, I think some, maybe in
the beginning of when we started the index,
it got a little confused that what we
were saying was- Right wing nut jobs.
Yeah, like Alex Jones and stuff like that,
which is just like, that's not the case.
I mean, there's no, it does not matter.
That was just who happened to be the
target for censorship at that time.
But the targets for censorship change constantly.
That's always been the case.
And your particular political quote enemy today maybe
is- Could be you tomorrow.
Yeah, it could be you tomorrow.
So the thing is just complete, we're just
completely neutral hands off.
And that's the only way you can make
anything like that work.
It's just the only, it's the only way
you maintain credibility.
But for sure, Spotify and Apple and others,
I think they take stuff off all the
time.
We know this, we know this from the
hosting companies.
I used to get a lot more in
from Todd, but he died, that sucks.
Like Todd would give you all the dirt.
Todd, that was, I miss you, Todd.
That was cool.
Oh, no hacker.
There is no username Celine on my server.
Stop it.
Celine?
Yes.
They're just rolling through the whole index.
I saw Nancy, I saw Celine, I saw
emo.
Nancy?
Nancy.
No username Nancy.
No, no Nancy here.
Yes, there's no Nancy here.
That like, you should name all your SSH
users Nancy.
Yeah.
Hi, I'm Nancy.
How you doing?
Isn't that an old timey term to call
somebody like a wuss?
Yeah, you're Nancy.
Yeah, oh, absolutely.
That's right.
You Nancy.
There's no Nancy on this server, go away.
That's funny.
Go ahead.
I was going to move on to something
else.
Yeah, sure.
Did you see the X402 foundation on Coinbase?
The X402 transactions?
Yeah, well, there's been a lot of movement
on the 402 thing.
It's very interesting.
Because I think Cloudflare is doing something as
well.
Yes, yes.
Cloudflare is partnering with Coinbase to create the
X402 foundation.
The foundation's mission will be to encourage the
adoption of the X402 protocol an updated framework
that allows clients and services to exchange value
on the web, there's my favorite word, using
a common language.
In addition to today's partnership, we are shipping
a set of features, blah, blah, blah, SDK,
et cetera, et cetera.
And the way I see this, this is
your programmable money.
This is what we were trying to do
and succeeded with the Lightning Network and with
Bitcoin.
And I think that they've probably got a
very, very decent idea here with 402 payment
required response.
And what you're talking about, and I'm gonna
have to rely on you for this because
I have not researched it.
So you're talking about the Coinbase thing right
now?
Well, it's a foundation.
So it's Coinbase and Cloudflare, they're both in
it.
And the idea here is to fully bring
402 out of the like- The dungeon.
The dungeon, the Bitcoin dungeon and make it
where it's multi-currency.
Well, what they're using it for is pay
-per-crawl.
You see the Cloudflare guy, who seems like
a pretty decent guy, actually.
I read a long interview with him.
Yeah, I think so too, yeah, yeah.
He said, look, everybody, all the AI companies
are just crawling all of your crap all
day long.
Put your stuff behind our Cloudflare wall, wall
of protection, and you can allow bots to
crawl your website, but they have to pay
for it.
And it's an automatic process through this X402
protocol.
They call it pay-per-crawl.
Which, I mean, think about that with the
index.
We should set it up regardless.
You never know, we could make some bank
on that.
Pay-per-crawl, everybody.
Man, bot fighting is like a freaking full
-time job.
So, interesting thought.
But it can easily be turned around and
used for good in a positive manner by
incorporating it into value-for-value transactions between
podcast apps and podcasters.
The way I see it, I don't see
any way it wouldn't work or any downside
to it.
The upside is probably because it's unavoidable that,
and I've said this before, that Stablecoin is
going to be in our lives all the
time, everywhere.
It's a fact, it's just coming.
Then it may not call it Stablecoin, just
be, here's a dollar, you know?
How much?
Oh, you owe me 10 bucks.
Okay, here's 10 bucks.
Oh, you want to boost me three cents?
Here's three cents.
And I think it'll be fee-less, probably.
So, the idea here is that perhaps we
could change, I'm trying to think this through.
We could perhaps modify the value tag to
use the 402 for payment.
Yeah, but I don't even think you have
to modify it much.
You just have to add, here's another option.
Right.
I mean, they got code and everything.
They got code, man, sample code.
Let's run it.
Let's run it, Nancy.
Yeah, right, just download that thing and run
it.
Let's run it, Nancy.
SSH Nancy run code.
I think, this is, yeah, this is interesting
because I never really thought about, and when
I've thought about 402, I always thought about
it in terms of like what Sam is
calling secure and Sam and Russell call secure
RSS.
You know, and that's clearly working on TrueFans
and Fountain and Pod2 and, but using it
for, if we had a common API, okay,
all right, well, how would this be?
Suppose there's a common API defined and let's
say it could be a continuation or a
fleshing out of Alex's MetaBoost API spec.
Yeah.
So you have that as the interface and
then a hosting company or publisher would publish
the callback to that in a value tag.
Let me give you the examples, the examples
they list, okay?
Which is, and someone's going to do this.
Someone is going to do this, whether it's
us or not, I guarantee you.
So the examples they give, they say X402
can be used to monetize traditional use cases,
but also enables monetization of a new class
of use cases.
For example, an assistant that is able to
purchase accessories for your Halloween costume from multiple
merchants.
So that's like an AI agent.
Okay, fine, whatever.
Then they have an AI agent, which could
also just be a person on a web
browser, pays per browser rendering session instead of
committing to a monthly subscription fee.
And the third example, an autonomous stock trader
that makes micropayments for a high quality real
-time data feed to drive decisions.
So in my mind, it's like you can
listen to this podcast for free, but if
you enable your X402, then you will automatically
make micro, and I don't know if they
have like an open-ended payment or if
it's like an invoice that has a number
on it, but you can then decide to
make payments in real-time micropayments for the
high quality real-time data fee of MP3
information that comes back.
It's the same thing.
They're just thinking of in commerce and I'm
thinking value for value.
So, you know, it would say payment, let
me see, payment required.
Okay, we know that.
I just don't know if it can be
open-ended.
Chad F., does it do keysyn?
Well, that is, it's funny, but that's actually
the question, is does it do bolt 12?
You know, does it, can you have an
open-ended payment requirement or does it have
to be a specific number?
This, I don't know.
Well, it's just, if you're, if you ping
the, if we're doing X402 or
L402, I don't know why they could call
it X.
I don't know what that's all about, but
if there's a 402 endpoint that you're hitting,
then you're gonna get some, you know, you're
gonna get some sort of token and then
you could use that to make your payment.
And then I'm just thinking that the API
that it's gonna call can hold all of
the, because we're gonna have, you know, what
we need is an API that is like
the abstraction layer between whatever the currency is
gonna be and whatever, and what the payer
is sending.
Because it could be anything on either side
and it's just gonna get, you know, it
would just get translated.
I don't, this is interesting.
I'm gonna have to think about this.
Because I can see how this would solve,
Bolt12 is just a different form of LNURLP.
It's the same thing.
Really, Bolt12 is just LNURLP, but it's been
pulled completely into the Lightning protocol.
Here, you have an answer.
X402 supports variable payment amounts, which can be
adapted for open-ended donations where users specify
different values.
The protocol uses HTTP 402 responses to find
payment details, including the exact amount in stable
coins like USDC and allowing flexibility per request,
such as basing the amount on user input
or parameters in a donation flow.
While it's primarily designed for automated micropayments, AI
agents, it can handle custom amounts for purposes
like donations through appropriate client-server implementations.
So there'd have to be a back and
forth.
Like, hey, I wanna send you three cents
a minute.
Okay, I'm gonna give you a three cents
a minute token.
Something like that.
Right, Nathan says 402 is just the HTTP
response.
I don't believe the version of Cloudflare Coinbase
will support Lightning Network.
No, I understand that, Nathan.
I understand that.
What I'm trying, what I'm thinking, I'm not
being clear because I'm trying to think this
through in real time.
What I'm saying is that if the value
tag is changed to support instead of raw
Lightning, if it's changed to support 402 in
whatever flavor that is, whether, you know, this
thing X402 or- Then you need an
API to do some back and forth, is
what you're saying.
Right, right, because right now the API is,
when you're talking about a Lightning value tag,
the API that you're communicating with is already
defined.
Right.
It's defined by the RPC, excuse me, by
the either, you know, REST or RPC or
Keysend or Bolt11, all those things, all those
layers of that stack are already there and
we know what they are.
So that's why when you define the method
equals Lightning, that you know how to interface
with that.
So if we change the available value tag
method to be something like X402, then the
question is, what does the API look like
on the other side of it?
And we know that X402 is going to
be defined.
Yeah.
That's clear.
They're going to define that, but it's going
to be, everybody can implement it.
And so each person's implementation can have its
own flavor.
And so what I'm thinking is that if
we have an X, if we have a
flavor of X402 that is tuned to podcasting's
need, it can be backwards, it can be
compatible with X402 in the general sense, but
that it can also have baked into it
the metadata stuff that we need so that
that is an exchangeable.
Right.
Because I'm imagining that X402 itself is not
- There's no metadata.
I don't know this.
No, there's no metadata.
Nothing.
Or just something generic.
Right.
Something generic, just like, who knows what that
is?
I haven't looked at the spec yet, but
if it's just something generic, we may be
able to take and shoehorn in the metadata
spec that we need it to be.
So yeah, I know I'm referencing Lightning, but
I know they're two separate things, but I
think this, we could make this, we could
make this work, I think.
I think so too.
Okay.
Gonna have to, gonna have to think about,
I wonder, I mean, does anybody have example
servers up yet?
Maybe Cloudflare?
Yeah, I have a, they got all kinds
of stuff on Cloudflare, hold on.
Okay.
I'll give it to you.
Because, you know, Alex started writing that MetaBoost
spec, MetaBoost API, I mean, we could, we
could just modify 402 to accept the thing
we need it to be.
That's what I would kind of hope for
in this.
And they're taking contributions to the protocol.
So get your code in now.
Yeah.
Well, they got a, they got a GitHub.
I wonder where that is, let me.
Yeah, it's in that link I just sent
you.
The Coinbase X402 thing?
Yeah.
Vue docs, I wonder if that's- Hey,
they have a free app.
They have a free app.
A free app?
Yes, a free app.
The free app that makes your internet safer,
now available for even more devices.
What does this app do?
Okay.
It's Warp.
It's the Warp.
GitHub Coinbase X402, here we go, okay.
So it's GitHub.com slash Coinbase slash X402.
There you go.
And yeah, it looks like CloudFlare's, yeah, CloudFlare
agent docs, they're also the X402.
So we need to figure out where all
this stuff crosses over.
One line of code to accept digital dollars,
no fee, two second settlement, 0.001 cent
minimum payment.
That's cool.
Open standard, the phone will never force reliance.
Yeah, okay, we just need to read through
this.
I'm glad you brought this up because I
had seen it multiple times this week and
just had not gotten into it.
Yeah, it's, you know, you know me.
I'm like, this is beautiful.
It's got a payment sequencing, the OCV1 protocol
sequencing, it's like payment method.
Yeah, the question I have is just, where
is the, do they have anything like a
sandbox?
That I don't know.
Up and running that you can hit and
see what it does.
Yeah, I haven't looked at it yet.
Not that deep.
I've been fighting hackers who are now at
N for Nokia.
Oh, they're just going through the alphabet.
Went from Nancy to Nokia, took them a
half an hour.
Oh boy, you guys, I'm telling you.
Yeah, I'm telling you.
You're going to be there all day.
I hope they packed a lunch.
It's kind of fun.
It's kind of fun to know that someone
is desperately trying to do this.
All these things are probably coming from like
some hacked home router in Brazil, you know?
Oh, it's actually, no, some of it's coming
from Linode.
Interestingly enough.
So they're, you know, using a Linode to
hack a Linode.
And- Oh, really?
Some of it, yeah.
A lot of people.
Yeah, what is this one?
Hostingmail, servermail.org is another fine one.
Oh, it's giving you reverse name.
I've got trace routing some of them.
Oh, you're tracing, okay.
Yeah, so they've hacked in all kinds of
stuff.
Like, oh, I got someone's mail server.
Cool, we'll use this.
Great, great, yeah.
And you know what?
There's a lot of hacked servers out there,
that's for sure.
Oh yeah, I bet.
It's unbelievable.
Let's see, where is this one coming from?
Oh, interesting.
Dude, I think, what's this from?
Global, telemark.brazil, yeah, Brazil.
Yeah, the reason I said Brazil is because
I think Brazil had a huge, I think
they had millions of home internet routers that
were of one particular kind that had like
a horrible flaw in them a few years
ago.
Oh, and they're all pwned.
Yeah, it's like the botnet army of the
universe.
Nice.
Hey, let's thank some people, Dave.
I heard some boost coming in, which is
nice.
We got Chad F with 333 and Dreb
Scott with 12345.
12,345 sats.
Go, Nanaia, podcasting.
Yes, I'm with you.
Anonymous from CurioCaster222.
AI has already ruined V4V music.
Well, it's ruined all music.
I mean, has it really ruined music?
Has it ruined V4V music specifically?
I don't know.
I mean, has it ruined music?
I don't listen to AI stuff.
Some stuff, I don't know.
I mean, I think Taylor Swift is basically
AI anyway.
Yeah, there you go.
SaltyCray on 236.
AI dumbing the world down with one bad
search and song at a time.
Yes.
Chris, you know, 1800 sats.
Stacker.news is up to 26 different lightning
wallets you can connect.
I'd recommend anyone make a free Stacker.news
account just to look at stacker.news slash
wallets page, see how many different options are
out there.
Would love to see these options in P2
.0 apps.
Oh, I have to take a look at
that.
Bad signal received from SaltyCray on 777.
Heard that during the opening of the show,
I think.
And anonymous podcast guru user with 408 sats.
Oh, I love that guy.
Yeah, he's a good guy.
Any updates on the wallet stuff?
The arguing and blaming people is starting to
turn even more people away or at least
making them feel like they're doing something wrong
for using the tools available to them.
Well, I don't know.
What's the update?
Is there any update?
On what?
I don't know, on the wallet stuff.
What is the wallet stuff?
I'm not sure.
Like, you know.
Is it my Albi or something?
I guess.
I mean, I guess the ongoing KeySend versus
LNURL.
I mean, that's.
Well, I mean, that to me, it's just
a done.
It's just that argument's over.
KeySend's just a redheaded stepchild.
It's never gonna go.
Nobody supports it.
So, I mean, you can't.
Your massive users are on strike in Cash
App and in those kind of apps.
And they're just not gonna, they're just never
gonna support KeySend.
They're not gonna do KeySend.
It's just not.
It doesn't matter what I think about it
or anybody else.
It just matters what happens.
And that's the way the universe is moving.
So, I mean, I'm not blaming anybody.
No, no.
Blame anybody.
It's just the way, just this life.
I mean, we're not, you know.
You can't, you just, that's just the way
it's gotta be.
So we gotta adapt.
And I think we got a good spec.
The Bolt 11 stuff is, LN address works.
You know, the metadata thing is a problem,
but, you know, I don't, I'm not convinced
that we actually need the metadata.
I'm just not, you know.
We have, when you send somebody a PayPal,
you see, a lot of times all you
see is a little, a short note in
their name.
And that's fine.
Because what matters is they gave you money.
That's the way I see it.
So, I just, I'm not, if there was
something more specific you were talking about, you
know, to respond, but I don't, I just
think that's where we're at.
I think that's just, that's the future.
No, I love cotton gin.
Apple just controls the podcast index.
It's just the way it is.
It's what the universe wants.
No, they don't.
So that's patently not true.
What?
I don't know.
This is, they think you're lame.
You're lame.
Lame answer.
You need to support Keysend.
I can't make Cash App support Keysend, or
Strike, or Coinbase.
I can't do, I mean, like, they're just
not going to do it.
I don't know what I can do about
it.
I mean, okay.
That's where, I mean, that's where all the,
most of the Bitcoin is.
That's literally where the money is.
Literally.
Yeah.
My entire claim to starting this project, yeah,
exactly.
And that's what we did.
We totally did that.
Apple doesn't control the podcast.
Apple doesn't control podcasting.
That's exactly why we added the value for
value because we had programmable money through the
Lightning Network.
It was very cool.
And then Keysend went away, and then the
wallets went away.
And so now we have to fish or
cut bait.
Either we use LN addresses and everyone is
happy with it, or we don't.
Yeah, I mean, Brian on the index this
week, Brian showed the RPC calls for LND.
Now, they will not let you send Keysend
directly through the RPC calls.
The- Oh, really?
They're broken.
Really?
On LND, they won't let you do that
anymore?
On LND, they deprecated the RPC call that
had the pub key in as a destination
address.
The new RPC call, Brian of London is
who I'm talking about, the new RPC call
in LND that's meant to replace the deprecated
one does not have a public key property
in it to send to.
So whenever that other one, which is marked
deprecated, whenever that other one goes away, Keysend
is gone.
Well, I think what we need to do
because this pops up all the time, aren't
you using Keysend to receive these boosts?
Okay, good.
I'm going to remove all the Keysend and
we'll just use LNURL.
That's fine.
I really think there's a disconnect going on
here.
BitPunk, yes, nobody ever said that it doesn't
work right now for everything.
What we're saying, people don't understand, some
Keysend still works.
Okay, I'm just going to lay this out.
This is the truth as far as I
understand it right this second.
Some Keysend still works across the board.
Okay, that is a fact.
Keysend does not and will never work on
hosted wallet solutions where most of the easy
onboarding is like CacheAppStrike, et cetera.
The deprecation that we were talking about with
Keysend is one layer removed than what you
think it is.
Keysend itself is still supported in LND.
The API, LND's own API, the RPC calls
for LND that support Keysend, that has been
deprecated, okay?
So the RPC call to send a payment,
they deprecated version one of that call and
replaced it with version two.
Version two does not support a public key
as the destination address, which is what you
have to do to send Keysend.
So the call that supports Keysend in LND
RPC has been deprecated, even if Keysend itself
has not been deprecated as a feature.
Because it doesn't matter if Keysend is still
in there.
If you can't get to it, then you
can't send it.
And the quote, some guy named Brian, he's
the guy that's quoted in Lightning Lab's documentation
about how to send Keysend.
That's the some guy named Brian.
They literally used his code as the example
in their own documentation.
And if you want a better explanation for
this, look back on the podcast index social
from back after the show last week.
And Brian piped in and gave links to
the documents showing the deprecated API calls.
This was discussed right after the show because
nobody believes that there was a deprecation issue
going on.
And the confusion is, it's Lightning Labs.
Don't blame me, blame them.
Because they've deprecated the APIs that allow that
stuff to be sent.
Now, the marquee tag in HTML is also
deprecated, but it's still supported by a whole
bunch of browsers.
But nobody, but everybody's gonna use CSS animations
instead of marquee because nobody knows when it's
gonna go away.
Because it's officially been deprecated.
So look, just, I don't know what else
to say.
It feels like a losing battle.
So I don't see why we're gonna continue
to fight this.
Yeah.
Well, I'll switch our feeds to LNURL.
That's easy.
And we may not get boosts with metadata,
but we'll get payments if people still wanna
send money and support the index.
So I got no problem with that.
Look, I don't like it.
I don't like it.
I love KeySend, I love the way it
worked.
It was so simple.
But you're shooting the messenger here, man.
Yeah, exactly.
Okay.
Why don't you read some of the last
boosts we'll ever receive?
The Bruce, the ugly quacking duck, 2222 through
podcast guru says, love the testing 73.
Thanks guys.
You're welcome, Bruce.
And let's see, we got, oh wait, we
got Tommy.
Yeah, here it is.
Commissioner blogger, 13710 through fountain.
He says, howdy Dave and Adam.
Although I'm agnostic now, in childhood I was
Christian and I even visited the Vatican several
times.
And today I want to recommend a podcast
that can be found by searching for quote
the Charlie Kirk show unquote in podcast apps
or at www.charliekirk.com.
After Charlie's murder, new episodes are still being
published.
Thanks to Daniel J.
Lewis for the hint.
Yo, CSB.
Thank you.
We got some, we got some monthlies.
We got Chris Bernardik, $5.
Michael Kimmerer, $5.33. Dreb Scott, $15.
Christopher Reimer, $10.
James Sullivan, $10.
Cohen Glotzbach, $5.
Jorge Hernandez, $5.
And Michael Goggin, $5.
All right.
Well, thank you all very much for supporting
the Podcast Index Project.
It all goes into the funds to keep
this thing rolling and to keep us indeed,
keep podcasting independent from Apple or anybody else
for that matter, which is the entire mission.
Go to podcastindex.org.
You can read our mission.
It's right there on the homepage.
And below it is a big red donate
button.
We do accept your fiat fund coupons.
And just hit that button to send us
some.
I feel like we're ending on a downer
here, Dave.
Man, I know.
I just want like, the boardroom just went
nuts.
Went hostile.
Hostility, hostility.
We have, what do you call it?
Activist investors on the board.
It's a hostile takeover.
Hostile takeover.
All right, everybody.
We'll be back with new lightning addresses on
the Node next week.
Join us then for the board meeting of
Podcasting 2.0. I
think they're cool.
You have been listening to Podcasting 2.0.
Visit podcastindex.org for more information.
Go podcasting!
I mean, that is hilarious.