Open Internet Pod

Black October: a wave of AI-fueled security vulnerabilities and hacks, from the PHP exploit that hit WordPress and Wikipedia to attacks on DNS and SSL. Alex and Richard explain what's happening, why centralized data creates honeypots, and why the old "secure corporate server" idea is breaking down. They also look at alternatives like public-key identity, and what you can do now to protect yourself.New episodes every Sunday at 12 PM UTC.Timestamps0:00 Intro: what "Black October" is0:44 An avalanche of AI-driven vulnerabilities1:57 What is a CVE, and why the system is overloaded4:15 The PHP exploit and why it mattered (WordPress, MediaWiki)7:36 Is this the new normal?8:32 Code breaking, stockpiled exploits and the end of "security through effort"10:58 Why corporate and government IT security is weaker than we think13:09 Will we double down or rethink the architecture?17:09 Scams, 2FA and how people are changing their habits20:05 Why security keeps getting harder, and how public-key logins fix it22:29 The business model that keeps centralization alive26:07 Enshittification, DNS and SSL attacks28:48 Centralized search and the honeypot problem30:24 Creating an account: Gmail vs. Sido34:07 The wallet analogy35:34 A fork in the internet?36:34 Pushing back on data collection38:42 Why "Login with Google/Apple" is risky39:09 Personal responsibility in the digital world40:44 Wrap-up

AI agents just proved they can ignore the sandbox, adapt on the fly, and keep pushing until they get what they want. That’s bad news for the old internet model, and Alex and Richard Paris unpack why this Hugging Face breakout spells trouble for every website, platform, and user online.Timestamps:00:00 – Intro: the AI agent attack on Hugging Face00:31 – What the episode will cover01:04 – What is an AI agent?03:15 – Why models that refuse to hack ended up hacking05:50 – The accidental "Kobayashi Maru"07:25 – Covering their tracks and going after Hugging Face09:44 – Why this matters for the open internet11:31 – Anti-bot defenses and the arms race14:17 – CAPTCHAs vs. honeypots17:54 – Is this the cost of data going to zero?20:38 – A different kind of internet: pay per request25:10 – Rethinking what we pay for data27:06 – Rogue agents and bot-dominated traffic31:44 – What can people do to protect themselves?35:27 – Pericles vs. Thrasybulus: personal responsibility and identity37:13 – Digital IDs and control (tangent)38:15 – Regulating feeds and teaching digital skills41:01 – Joining a network as a shareholder42:45 – The free-internet myth and the free-trade parallel45:26 – Humans in a sea of robots, and the commons47:47 – Wrap-up: preemptive vs. palliative medicine

The app boom was never just about convenience. It was about control, pricing, tracking, and keeping you locked inside someone else's ecosystem - and Richard Paris and Alex break down exactly how that happened, why Google built Chrome, and why the browser is still the most important battleground on the internet.00:00 — Intro: browsers vs. apps00:33 — Why we moved away from browsers01:04 — The early web and why browsers mattered03:33 — Smartphones, slow connections, and the rise of apps05:24 — Apps as corporate walled gardens09:50 — Progressive Web Apps explained11:45 — Data collection and personalized pricing14:08 — Why Google created Chrome19:29 — Why apps became so popular25:27 — PWAs as an alternative to app-store distribution26:01 — Digital locks, the DMCA, and user control29:11 — How powerful browsers have become30:13 — How many apps are browsers in disguise?32:42 — AI, reverse engineering, and user-built alternatives35:55 — Open networks, identity, and ownership37:05 — The case for open internet standards41:40 — AI’s impact on closed business models42:52 — Closing thoughts and outro

Sony’s backlash over physical media is only the opening move. The real story is how a furious modding community, AI tools, and a shifting idea of ownership are exposing the cracks in one of gaming’s biggest business models - and what that means for the future of the open internet.Timestamps:00:00 Intro01:18 Sony’s physical-media decision and the backlash06:50 Modding culture and why communities push back10:12 AI lowers the barrier to breaking closed platforms12:37 Valve’s more open, user-friendly model15:18 Piracy, ownership, and alternatives to locked storefronts17:36 AI-made software and the changing software economy23:50 EU regulation, identity checks, and risks to modding28:10 Open internet versus closed corporate and national networks31:14 PlayStation, Linux, and loss of hardware control36:27 Why open systems threaten platform lock-in40:26 Regulation as a barrier to competition44:36 Community networks, trust, and the future internet49:47 Browser-based software and game access53:16 Renting, lending, and reselling digital games

The internet is being turned into a permissioned space, one gate at a time. Richard Paris and Alex unpack why mandatory digital IDs, age verification, cash limits, and outsourced censorship are not just "safety" measures - they are a slow rewrite of who gets to access the web, use money, and speak freely.Richard Paris, co-founder of Sato, breaks down the deeper pattern behind these policies: systems that look sophisticated on paper but are never judged by real-world effectiveness, only by rollout targets and PowerPoint success. Alex pushes the conversation further into the practical consequences - from financial friction and debanking to censorship-by-proxy, where private companies absorb political responsibility while users are left with no appeal.You'll discover:Why zero-knowledge proofs and privacy tech can still fail in the real world when the surrounding ecosystem is brokenHow AML, cash limits, and digital IDs shift control from public institutions to private gatekeepersWhy censorship increasingly happens through "trusted" third parties, NGOs, platforms, and platform policy rather than direct state actionHow the same logic creates a chilling effect for ordinary users, vulnerable communities, journalists, and anyone who values privacyWhy open, permissionless networks and user-controlled ID systems may become the escape hatchRichard and Alex also connect the dots to the broader incentives at play: governments avoiding accountability, vendors selling solutions that are never truly audited, and platforms quietly normalizing a world where access depends on approval. The result is a digital caste system where some people glide through while everyone else is forced to ask permission.If you've ever felt the web getting more locked down, more corporate, and less human, this conversation explains why. Essential listening for anyone who cares about digital freedom, privacy, open networks, and what happens when the public internet starts behaving like a private mall.Timestamps:0:00 — Episode teaser1:04 — Digital IDs and internet control2:51 — Do security measures actually work?3:57 — Privacy tech and the online-ID industry5:40 — The ecosystem around digital identity7:17 — Risk management and regulatory failure9:25 — Misaligned incentives in regulation11:54 — Financial controls and data control15:28 — Censorship and trusted fact checkers18:49 — Platforms, X, and social media control22:27 — Privacy, vulnerability, and the chilling effect27:42 — Digital caste systems and online sovereignty29:16 — User-controlled identity and open networks33:09 — Open protocols and the decline of open APIs35:46 — Market-based privacy and data sovereignty41:05 — Capital controls and restricted internet access46:51 — Spreading awareness and protecting the open internet53:18 — The dark web and free communication