#71 PHP2Shell, OpenCode BREACH, Webflow-Quelltext anzeigen, Claude Duet, Arc eingestellt
Auf YouTube ansehen
Über diese Folge
Diese Woche befassen wir uns mit wichtigen Sicherheitswarnungen, analysieren die weit verbreiteten PHP2Shell-Schwachstellen und beleuchten einen schwerwiegenden Sicherheitsvorfall bei OpenCode, bei dem API-Schlüssel offengelegt wurden. Außerdem blicken wir gespannt auf die neue „Source“-Funktion von Webflow, wägen die Vor- und Nachteile der agentenbasierten Entwicklung ab und vergleichen den bald erscheinenden „Claude Duet“ von Anthropic mit dem leistungsstarken „Grockbot“. Zum Abschluss bedauern wir das Ende des Arc-Browsers und staunen über ein brillantes Projekt von Wes Bos, das reale Räume mithilfe von KI in interaktive Spielumgebungen verwandelt.
Transkript
I'm loud. You You can kind of hear it when you're when I'm editing. You can kind of hear a little bit of a clutter, but um I can stop it, but I'll probably just stand. Oh, we are live. Well, we're live. We're live. Let me do a quick audio check. Um, we'll talk about it, but I've moved on to a new browser uh today and so I'm getting used to Helium. Helium? Never heard of it. Helium. Yeah. Well, we can talk about it later, but um it's all a bit new to me at the moment. Uh, how has your how's your week been? Very very busy. Uh uh this week I started with a new gig and I've been just like working like crazy uh honestly. So it's been like nonstop work and I kind of like miss you know working on my own little project. So it's been a week of working on client project. That's good man. Yeah. especially on the side that I'm pushing Claude to do things that I never thought was possible. So essentially you're being nice to it. Anything you can anything you think of like you ask and it does like it's like it's just insane what it can do. Um, and I noticed this more because now, you know, there were like high stakes with client work and I could absolutely push it to do stuff and deliver. Um, it it's insane. I've been using I mean, we will talk about um, uh, do it. So, I've been actually using Grock bot and I'm completely blown away. H well save the conversation for duets. Yeah, exactly. Make your notes. Um um yeah, this week's been uh not too bad. Uh mostly filming, mostly trying to get some sponsors because by the way, I'm going on holiday tomorrow, so I will not be around for next week's stream. Okay. Yeah. So, um feel free live. without me. But uh yeah, just trying to get sponsorships like agreed uh integrations filmed and and everything lined up. So it's already so it's just been chaos and this will be the last time you see this frigin pink background last time. Yeah, I'm moving house. Where are you moving to? Oh, nice. Where to? Place called Fulham. um still in London, but and it's only temporary. So, you'll you'll get used to that and then I'll move again in a month. So, yeah, it's uh a real man. I mean, I'm tired of it now. I'm freaking tired. I just want I did try to look for a place longer term, but long story short, I couldn't I just couldn't find anywhere like, you know, but I want somewhere where I can have a beautiful backdrop like yours where there's things going on in the background, not this friaking pink thing, which yeah, given if if it was different situation, if it was my place, if this was my if I owned this place or, you know, whatever, I'd probably would wallpaper it or paint it or do something, but you know, it's not mine. That's the that's the life of living in London. And I watched a video or a short about people's bewilderment about how expensive it is to live in London and it's um Yeah, it's it's ridiculous. Yeah. Um well, I have some chats pe uh on Instagram people asking about Grock. We'll we'll talk about it. We'll talk about it. Um I heard it sends data to Elon. I mean Elon and Zuckerberg and you know uh everyone essentially they are they are getting they are stealing data. They are getting your data probably um I probably know what you're talking about uh about sending data to Elon. That's not the case anymore by the way. I'm mostly joking. Mostly we'll talk about it. We'll talk about it. So, we have we don't have a busy week, but we have a few pieces of drama. All right. So, should we start? Um, just thinking if there's anything that we want Oh, we we're officially a podcast now. We're officially a podcast. So, if you like to listen and and we can get into the tech side actually for it because it's not newsworthy, but it's interesting nonetheless because I think people want to know how we do things, how do we use AI, so this might be a bit of an insight there. But, um, you know, if you're new here or or whatever your situation is, you might know this already, but we stream in real time the clips that get released next week, right? So, we stream with you guys, we chat with you guys, we go over things, we we banter a little bit um live on air and then we take that and we clip it up and put it into things. But obviously you guys like tuning in to the live stream and I wish more of you would I wish we get loads of people on the stream because it's so nice when people are in the chat. If you are in the chat, let us know where you are from and uh what brought you here because this is what makes it a bit more interesting than just us two waffling on like idiots. Anyway, it was never a podcast. It was never, you know, even though it would slip out every time, every now and again, like if if someone asked me what I do, I'd say, "Oh, I have a podcast, too." Because it's just the easiest way to describe this, right? But it's not really. It's a stream that we, you know, it's a live recording. Anyway, people were asking for the podcast and so I've been really getting into having Claude edit my videos, my personal YouTube videos. Um, and but also actually it started out taking the stream and then editing the clips from the stream. And what Claude does, and you've just got to ask Claude to do this. It's not there's nothing clever about well there is but like you just you you you download your files you point Claude at that folder and you say edit this thing and you give it a load of direction right and we'll get into that remind me about the skills this is really important the skills so I tell Claude to edit this video and here are the topics that we cover this week and it it does an amazing job of really understanding things because before I would just we do a little intro. You you'll notice it now again if you're new here. We do a little intro and then we talk about the news. What I tend to do when I was editing, which took loads of time by the way, I would just use that intro as the intro. Sometimes sometimes a bit of gold comes out at the end or in the middle or something like that and and Claude knows to use that as the intro because that's more interesting than the original intro that we we wrote in the first place. So, it's really good at really understanding things. And funnily enough, I made a video on my personal channel about editing. And my first stab at it before I released it was it's not there yet. And then Fable 5 and then Fable dropped. No, Fable 5.1 dropped. And then I remade the video and I came to the conclusion that actually it's pretty good. Still kind of not there. It's pretty good. And then a few weeks later, Opus 5.5 gets released and it does an amazing job at understanding what's being said and the nuances and this and that. It's really good. So, all that to be said, we've got our clips. We've transcribed the the stream, the entire two-hour stream. We've got that in transcriptions because that runs on my local machine. Whisper transcribes it. So, we've got all these inpoints and outpoints and all the rest of it. So, we have all of that really useful data. So, now we've moved on to creating shorts, like vertical format shorts from that as well. So, we create the clips and then we create the shorts because all that data is in there as well. We can tell it to put intros in. I I I formatted it and all the rest of it. And then from that, because we have everything, it was like, well, why don't we now just put it up as a podcast and with slight direction because if again, you'll know if you hear a lot, we do a lot of screen shares. We do a lot of like things and sometimes we sit back and we watch something and on a podcast that ain't that interesting. So, in my prompt for the podcast or later skill, um, I say that be aware of a lots of watching. If we're watching something or whatever, get to the good bit. Get to the conversation. Like, example would be our um, Roadster coverage last week. On the podcast, you don't really hear that. We just talk about the we talk about what's going on. So, it does that and it does a little bit of clean up. It makes it sound a bit more boommy because that's what people like in the podcast thing. So now, you know, that's what the skill does. So I've got uh well, that's what that that's what the prompt does. It cleans it all up. And now and then it automatically uploads it to our feed, which is we're self-hosting the feed, the XML, the RSS feed, which which um uh powers all of the podcasting platforms. you have an XML feed and all of the Apple, uh, Spotify can do it, but we don't do that. Um, what else? Uh, Amazon, they all read from this XML file that we publish on our own URL. So, all we do, we put push it up to our website. We host it on our website. All of it's done on our website, and then all of the all of the podcasting platforms point to that, and then when they see a new episode, they link to it and then show it on your Apple Podcasts app. Spotify is a bit different because they want they want you to they want you to upload it directly to them. You can do it through there, but but it removes the ability to monetize on Spotify if if you read from an external RSS feed. So, it's like, well, we don't really want to do that, so we'll upload it directly to Spotify. That can all be done through the Claude extension as well. You can ask the Claude extension to do that. And remember, this is all this is all through prompts. I'm I'm just asking Claude I pointed it at the video files and I'm asking Claude to just do what I want it to do with with a little bit of direction. And once once we've got to a point and once once um and I do this one at a time, we slowly built up to this podcast. The first like a couple of weeks ago it was just the edit. Last week it was the edit plus the shorts. This week it will be the edit plus the shorts plus the podcast. And it's this iterative thing where you you ask Claude to do it. you watch it back and then you tweak it because it's like, "Oh, it forgot this or make sure you do that or whatever." And then when I'm happy with it, that goes into a skill. I say, "Let's make a skill out of what we've just talked about here." And now we have this master skill that just churns through, point it at an episode, churns through everything, does a bit by bit, and at the end of it, we've got podcast up on our website. Um, we still have to manually upload them to YouTube, but it can um, and I have to manually upload all the videos really because Claude has a limit of 10meg. You It can't upload any more any files bigger than 10 meg. So, annoyingly, that's a bit of a I've got to upload it and then when I tell it I've uploaded it, it then schedules it and does all this. Do you know what I mean? You can just see it clicking around in the extension. What if what if you hit the API? What API? uh the YouTube API. We could do we could do all that. We could do the YouTube API. That could be another kind of another thing you do, but I'm just saying the extension. I'm working on that side. And sorry, I'm working on that side. Uh I hope I I can get your hands on something like that. I don't very soon. Yeah. Yeah. Sure. Sure. Um it's it's trivial. It's trivial, you know. It's not it's not difficult, but I'm building also an MCP for it, so you could hit it from your your side. But I so I've already got I've already built an MCP for the and I've made a video on building for an MCP for uh you it'll never see the light of day because it was for a client but it was a video I I wrapped the YouTube API in an MCP. So I've already got that. Um Okay. Yeah. And I use it to because I've got a dashboard of all the data that we use and stuff like that. You do have it too. Yeah. It's really Yeah. So um yeah, I do all sorts. But yeah, you're right. And and this is the beauty of the iterative thing is that you you come up with a new idea. You mentioned about having a little outro in our in our uh shorts. Uh you just add it to the skill. Add it to the skill and it will do it next time and you can just develop. You can just if you want to change things and then and then actually one one other thing we have a command AI design skill so that everything looks and feels the same way. So it it's only three skills that we have. have I think the command AI design skill, the caption skill because that needs to be that I want that to be separate. Technically, we could work it into the design skill, but whatever. We have a caption skill and then we have a um edit skill. The master edit skill which is pretty is pretty large but it it just takes a it takes a raw set of clips creates creates h sorry raw set of video files creates clips from them create shorts from them create podcasts from them upload them and then now we can add that layer of of API access to just automatically upload them. So, it's just a progression thing. And that's I mean, you know, you guys keep asking us for like how do we do things and learning more or whatever. I hope that's not too abstract, but it really just comes down to just asking Claude to do or asking your agent to do what you want it to do. And I I I think Yeah. Go on. One last point. Um, so what what's an amazing workflow is certainly from my personal channel videos is I get Claude to edit it and then sometimes I want to tweak it. I want to like tweak this, move this, clip that because sometimes it doesn't because it's just reading raw words. It's not listening. It's reading raw words. Like in the transcript it makes sense because I because it double checks itself. It does its edit and then double checks the it transcribes it again and then double checks its work. Sometimes it doesn't it transcribes well but when you listen to it it doesn't whatever. So I ask it to create a final cut XML file. So then I open that up and I make the little edits here or there and then I I've exported it or whatever. I wanted to have a back and forth with Claude. I want to be able to edit it and then I wanted to take my edit and then work on that, you know. So, so I didn't know how to do this. So, I literally asked Claude, I want to do this. I What happens? What's the best format for me to give you an edit that I've done in Final Cut? Maybe it's the first edit and it says you don't need to do anything. Don't render anything. export the XML and give that back to me and I will make those edits and then we'll just we can just pass back and forward XMLs basically because they can't you you don't save if you save a Final Cut edit it doesn't save as an you have to reexport it. I was unclear about what I should do. So I just asked Claude and it told me what I should do. So that's that's the last thing I'll leave it on is like you even I don't know how to do some of these things and it's just through talking that's where you get to it. So this is kind of like yeah all good all good. Uh this is kind of what I wanted to actually point at. Um when you mentioned the XML at the end of the day it is a file right and I think this is the mind shift switch that people need to do. People don't know that uh it's all through files. Even if you like you do work on GitHub and you know that everything that you do it's just like files. These agents can read it. If you have a JPEG, if you have an MP4, this is a file on your computer and it's made out of code essentially like an MP4 is a container. inside of it there are I assume I don't know exactly what but multiple file types uh defining like the properties of that file and then your computer knows how to handle ampp4 and read it what like we humans we never touch that at least like 99.9% of people never ever touch that layer we just click it and it opens but what changes everything is knowing that AI can create any file or pretty much read any file. A lot of these files, I don't know yet now specifically for one specific file, but this is what I did this week as well. I I started creating file types without having the programs for them necessarily or like the direct the typical program that uh like you didn't have Photoshop but you create a Photoshop file as an example. Exactly. Exactly. So you can do a bunch of things like this and all you have to understand is just point claude to a folder. Don't use claw chat. If you use chat GPT does like the same thing. Don't use the chat interface. Let them have access to a folder and then give them a task to do it on that folder. You don't have to understand what an XML file is. But you can always ask which will help you in the long run. Yeah, quick quick anecdote. I I went out last night and I was chatting to my ex- boss and he's he's a bit slow to it. He hasn't he's he's more business owner. He used to code but whatever. He's telling me how he came about coding, you know, with AI and it was only recently was in the last few months, right? And he was just blown away. He was just blown away by what you can what you can do that you can ask it to do anything. and he hasn't even looked at a line of code. And my other friend said, "What um what languages do you use? What frameworks do you use nowadays?" Because we haven't all haven't seen each other for a few years, so we're all catching up. And I'm like, "I don't care." Like, whatever. Like, I like using JavaScript and TypeScript, but I honestly do not care what language I'm writing in. I'm looking at the output. What is the result, you know? Yes, but I mean you're a developer. If Claude does something stupid, you will probably correct it, right? I'm able to correct it and read what he's done. Yeah. Which is why I but I wanted I I was being not facitious, but I was being dramatic by saying I don't care. I do a little bit, but when we're beyond the point of caring now too much about it. The the point is you understand it and then you see that it does it correctly. That's why you don't care. Yesterday I started creating an offer uh tool, a mini tool for myself and I gave it to Claude and it made an Astro project and I immediately opened another chat and I was like here's actually the full because I didn't give it enough context that that's why it did Astro. I gave it full context and I was like this is not the type of work that you do in Astro like I understood that this should be an XJS project. So even though I don't write code, I don't write react but I have kind of like this rough understanding uh if you wish to to point it at the right direction if I notice it does something wrong. But at the end of the day if you are starting with something just understand that everything is a file. You point these AI tools at the file. They use your terminal to manipulate that and they can do much more than you think. Uh, and now to the comments like how much do you spend on AI editing? I personally thought like spending on AI doing video edit. I mean you you're the one who should answer this. I'll just say it's probably less than what people think. People think the AI needs to see every frame and do every decision by like looking at it like us humans. No, they they look at the transcript and they are very efficient with creating a JSON file of the transcript knowing exactly at what point did you say what and they match that with the video and they just make the cuts without looking at it and then there is a pass where they might look at some of the frames and find like differences and they might not even need to do it through their agentic flow which would take a lot of tokens. They could use there are tools I'm sure I don't know the names but I'm sure they can match the frames and know where a dramatic um change happens programmatically without spending a lot of tokens and then look at those specific frames so the AI can figure it out. And what I also ask AI sometimes I'm like be token efficient. I don't know if it helps, but I'm trying to tell them to not overthink it, to not like go on a ri like, you know, to to do a bunch of exploration. Just be token efficient. I um just on the token efficiency. Um I just did a video with a sponsored video with a with an AI company and my prompt because I was doing a bunch of benchmarking. My prompt was literally to do this task and do it in less than 200 tokens and you do do it in less than 40 tool calls as an example. So you can be very technical and very specific like that, but I'm sure the AI is good enough to interpret what that means. But in answer to your question, well, caching is is one of the best things uh these models are doing and and Opus or or well Opus 5.5 is fantastic at caching as in sorry, you don't get good or bad caching. The price of the cached version, the cached hits, they are significantly lower than the like a non-cashed hit. So, as you have a conversation, you ask a question, you get an answer. You ask another question, you get another answer. You ask another question, all of the previous questions are cashed hits because they it's already processed them. It's already processed. Yeah. And what what I've noticed it's quite good at is that it will um and we'll get back to your question about the cost in a minute. Uh what I've noticed is that it knows when the cash will time out, when it's when it's idled. So it will compress the conversation. So then the ne because if you pass the window of cash the the cash time out and then send another prompt all of that conversation has got to go back into claude. So it you can turn this off obviously but if you if you compress the conversation then you're only sending another little chunk because you you've you've missed the window. You're only sending a little chunk as opposed to the whole thing. You can pick and choose what you prefer. You might might be like, "Nah, it. I'm I'm I'm minted. I can I'm I'm loaded. I can I can afford this and just send the whole thing, which is the mo which is better for workflows because a condensed conversation, a compressed conversation isn't going to contain the nuance. Yeah. the price I spent. It took me, believe it or not, in this day and age even, I'd hate to think how long this took me would have taken me uh previously to get all 70 episodes edited, podcast edit, edited, which is mostly the same process. It took me three days of con, well, not constant, but but three days of pretty heavy Opus 5.5 usage. Didn't hit my limit. Insane. All night. It was going It was going all night as well. Yeah, cuz the thing is well the one thing that took the most amount of time which is what I said to you earlier in in in our chat um the Claude uh transcribes our episodes using local AI. That's what took a lot of time. So all Claude's got to do is just tell Whisper to transcribe this file. When it's done, it just reads that file. So, not really a lot of, you know, input and and token usage there because it's waiting. It's just waiting a lot of the time. Yeah. But I was the amount of work I was doing. I created a whole series of clips. I created a whole series of shorts from last week's episode and I created all the podcasts all before my weekly reset after a week of working. So, very very token efficient is Claude. I can't say the same for other providers, but um it's worth a shot. It's worth a shot. Um I'd be interested to know. I do I could do a little little look up to see what um what my usage actually was, but it'll be it'll be a guess at best cuz obviously yeah, I would just have to look at my chats and do status. The final thing I will say before we get on the show because you kept saying something along the lines of all you need to know the the only thing the only thing I would say that is the only other thing the only other thing that I think is important to know is it's helpful to know what is possible. Yeah. To to you know to but that comes back to asking the question can we do this? What is the best way to do this? and then reading its output. We we've been going on about reading its output for a little while now. Reading its output about what it should do. So, I bet people didn't realize people think that, oh, what Claude opens up Final Cut and then edits it in Final Cut and then this and that and the other. Claude knows that if it can, you know, if you know that it's just got to transcribe and you can do transcriptions with local AI, that's already an unlock there from your perspective on what you can do. So you unfortunately you don't know what you don't know, but it's through your curiosity and your inquisitiveness that you unlock what is possible, which then in turn makes you think, oh, it's just a file. It's just a file at the end of the day. So, I'll just point Claude at that file. So, you've got to remain curious and we we we don't just magically know this is going to happen sometimes. Sometimes we do. We've through years of doing this sort of thing, but other times like the XML thing in Final Cut passing it back and forward. I needed Claw to tell me that and now I know. Now I know what that that's possible and and it doesn't and I don't because basically I didn't want to do an edit and then render it because that render is 20 gig on its own and I want to avoid rendering something. He's like no no no don't render it out. Just export the XML and it can read the in andout points of all of the clips. You just keep the main source files, right? Yeah. So yeah, that's all I'll say there. Yeah. No, you are absolutely right. And you don't know what you don't know but you got to Thanks, Claude. You are absolutely right. You got you got to ask and u yeah I've been reading a lot of like the output. I feel like I read more than ever uh the AI output and I do ask this is I think going to be helpful for some people. I do ask what am I missing? What is somebody an expert? Yeah. What is something somebody an expert in this domain would do or would ask you to do? What what where is the bridge? What is like I am completely uh blind to and more often than not the answers are fascinating. Um, I did a t-shirt design. Like it's just so insane that I'm like just doing t-shirt design and I got Yeah, I got I got the like I can't unfortunately I can't show it but the the mockup that I got it was like image generated. And when you have an image generated, the lines often kind of like uh they have some artifacts and like a lot of people don't notice these stuff but like you can't like sh you could not ship it. So if you are somebody who wants to do like a task like that you might not know that you cannot ship that you you cannot like you could not do a proper uh print with that. So what I did, I told Claude to create basically a mini website, a mini app to to create to generate that type of um let's say illustration and it absolutely did with all the controls to you know to have mine and some parts of it like there are some Python running on my computer locally to do some of the calculation because it's pretty fascinating stuff and it's just amazing that it creat creates visuals with code, but then it's deterministic and all of that. All of that I I think is possible because I know that that thing is possible without knowing how to do it. Yeah. Yeah. Yeah. Yeah. So, how much do you spend on editing editing a video of one minute long? Pretty much nothing. I mean, rewind. Yeah. We we don't really know, but like cuz I'm I'm paying a subscription. I'm not paying API prices. It will depend on what model you're using. It will depend on how you're using that model. Whether you're going through open router or you're, you know, price different API, we can't we can't answer that. Basically, I I just say this and we move on from this. I don't know many people who have a $200 subscription and they are hitting their limits. uh whether it's Claude or uh CH GPT, it seems like the $200 subscription is more than enough to do pretty much anything unless you're like go create 50 things on your own and then you know it finishes. Um yeah. Yeah. Yeah. CL claw pro you in the chat if you're using the chat claw pro is fine but the moment you start needing to do any like co-work or coding you hit your limits very very quickly yeah you need the max yeah cool should we uh yes yeah all right well I mean I don't know how long you're going to be able to do it but like um like again like 19 bucks won't won't last too long, but try it. I think you'll I think you'll hit your limits quite quickly on the 19 bucks plan. Yeah. Anyway, let's move on. Let's let's do the intro. Yeah. All right. So, yeah, it was a long uh pre-hat, but let's go through the intro. So, this week we had a bunch of hacking going on. So, open code got breached. It was really bad. Uh we will talk about web flow source uh for a little bit. We had PHP. I mean everybody is talking about PHP. Uh probably your mom and dad are messaging you about uh PHP. Are you son using PHP? Uh because it hit mainstream and it's really bad. Anthropic uh teased us with Claude Duet. We'll talk about it and compare what we've seen with my experience with um Grockbot, which has been amazing. Uh probably the saddest news that we could see it coming. Uh Arc is dying. Well, is being officially sunset uh by the end of the year. Apple Music made a I would say like a really cool behind the scene video as they always do for a rebrand they did and we'll show you a really cool 3D uh project done by uh West Boss. I I hope I'm pronouncing his name right. All of this in today's episode. This is Command AI. I'm Kabarza and I'm Sam and this is a week in AI design and dev. Um let's try something. I might have to restart because I'm using a new browser as I say. Let's see how this goes. Okay, restart. We're good. We're good. We're good. Okay, so um Open Code, one of the best, most inclusive open-source coding harnesses out there, got targeted today by some pretty, I guess, malicious, sickening people. Uh we got this message here directly from open code. We had a security breach last night related to a large scale distillation attack that impacted 1.5% of open code console users. We have notified them all this morning via email. If you did not get an email, you are not impacted. It was a subset of users who had external providers linked. The incident is ongoing. So we cannot share more details at this point, but we are working with Anthropic, OpenAI, and Google to remediate. Pretty pretty um pretty shitty 1.5% of users. I couldn't get a definitive number on that, but I'm I'm guessing I don't even know what Open AI console even is. That's not my I don't use I do use Open AI, but um Open Code. Open code. Sorry, Open Code. So yeah, this was the article I was going through. We can highlight a few things. While the company didn't specify how the distillation attack occurred, basically leaked API keys. Uh they they found a bunch of API keys to all of these um these providers and overnight developers began posting spending alerts and unauthorized charges. I think I saw multiple thousands of uh dollars being spent on people's a API keys because again open code has its own links to to use the uh to different models but you if you've got say you want to use claude you can put in your API key and it will use claude will take that money from you instead of open code so uh API keys can help users with restricted uh access to American models to generate high volume outputs needed for that process Some skeptics call the framing an overstretch, arguing that the incident was a straightforward breach whose use for distillation remains unproven. That is just a comment on this here saying last night we had a related uh large-scale distillation attack. So this is this is unclear, unproven, but that's what they think they were trying to do. Basically, like I say, they got they got like given people were getting alerts. Imagine that. Imagine that. just getting spending alerts of thousands and you just don't know where it came from. Like that would be my worst nightmare. Um, we can get into what you should do. I think I think there's some lessons to be learned here for what you can do, but of course this is something you cannot help. This is this is this is cyber security now and we'll get into it more later on, but this is where we're at. Open AI said it'd be working with Open Code to restore access and refund API customers. I would I'm guessing they're making a note of that here that Anthropic and Google aren't looking to do that, but we'll we'll see. We'll see. The API keys have been blocked so they can't use them. Uh but yeah, Open AI are working to give refunds because I mean, you know, they spent OpenAI spent money on compute, but it's probably not nowhere near as much as the thousands that would be in charge. They've obviously got to make up a markup on the on the tokens they um they spend. But this is a really good faith thing from OpenAI, I think, to to to be refunding people, actively being refunding people. Yeah, that's nice. Well, yeah, the open source uh app and command line tool were not affected. So, this is the thing that you download. Again, it's this open code console thing that that they talk about. No, this is the open code console, not open code itself. Those keys never come to us. So, I guess you can just use an online version of it. And yeah, uh the this is this was interesting as well. So, and they did this with did this with hugging face. They had to use agents to keep working for 48 hours requiring the team to keep AI defensive agents running around the clock. So, it's no longer about humans jumping on and whatever. You they're literally getting their agents to like patch things, block people, look at logs, and all the rest of it. I mean, it makes perfect sense, but it's just crazy. 48 hours of doing that. Um, and then Open Code later received access to Open AI's Daybreak Blue program, which I guess is their mythos. I'm guessing it's their mythos equivalent which is because the thing is and this is what happened with with hugging face is hugging face weren't able to use clawed or open AI because they've got guard rails in place to prevent people from doing these attacks. Yeah. So what do they call it? They call it like um uh the asymmetry problem. They call it the asymmetry problem where it's like you know you're kind of So open hour gave daybreak uh which is which is obviously going to help them out and and they said it's actually helped them quite a lot to do that. So yeah um open code is not detailed how how the attackers gained systems how uh how the keys were stored or anything like that. So to be fair, I haven't followed up with this because this this article was likely written at the time, but yeah, pretty pretty devastating attack and and I think we're going to see more and more of this, but you know, um, common common cyber security practices is, and I know we don't do this, but you really need to think carefully about the API keys, where they're stored. you know, they're a password at the end of the day, but a lot of these tools allow you to do two things. They allow you to set um expiry dates on these things, and I've started doing this on my tutorials because in case a in case a API key leaks on one of my tutorials, which it has done in the past, it I I just set a day expiry. So, by the time the video's gone out, that API key is expired. So, I do that. Um what was the other thing? Um, oh, there was two things, but I forgotten what the second one was. Um, a limit. Can you put on a limit on the Yes, that was the second thing. You can put credit limits on these things. So, and this is less about API keys, more about the the the um the platforms themselves, but you can spend you can put spending limits on. And I know it's extra work. This is what people do. These this is what the professionals do. They really I think by default get get uh hub doesn't let you put a non-expiring personal access token. They they may interesting put 90 days. So it's just this is ongoing personal p uh security practices in in full swing like you should be looking after your apps and they shouldn't have unlimited access, unlimited spending. They should have an expiry. you should be readressing your security every few months. You know, uh if you're looking after an app, it's like, okay, cool. Are we still hashing things? Do we need to rotate keys? Maintaining protection is part of what it takes to run a a commercialized application. So, it it's crazy. You don't notice these when you vibe code something, but it will hit you once you scale or like once a breach like this happens. Uh, yeah, on a kind of like a different note, but it feels similar. It's not the same thing. Um, I did put up a project, a really stupid game, and it hit uh 1.5 million CDN requests in like four days. And sorry, I missed that because I was just like, yeah, I I I put on a stupid Tesla game and I made a video on it. Yeah. Yeah. It hit one point. It's unversal. It hit 1.5 million CDN requests in four days. So, uh, luckily before I did this, I know it's different from the cyber security, but it's in a similar realm like you can be hit um with a with a huge bill. I did actually check uh if Versal is going to automatically charge me if something like this happen. I didn't anticipate this, but I was just like I was just careful. I was like, I don't know how much the hobby allows me to do because I'm on the free plan. So, if I hit the upper limit, will it automatically upgrade and, you know, send me like a $2,000 bill or will it limit it or like downgrade it or something like this? Uh, so far I've been allowed to do 1 million, but even past the 1 million, they've been not shut down anything. And luckily, it's going down, so I'm not going to have to do anything. I think I bet you wish you had some call to action, some like, you know, Well, I did. I I didn't have like a crazy call to action, but it was like I I disabled uh my app, everything that I had, and I redirected everything temporarily to the launch page for the weight list, and I have like now 1,500 emails. So, nice, nice, nice. It It wasn't all for nothing. Have you checked the logs? Has anyone tried to hack or or access URLs on the app or anything like this? No. So, I had Post Hog installed. So, if you don't know, it can do like analytics, but it's not just like analytics like Google Analytics. It's for more products. Um, I had it, but it was not set up properly. So, I missed out on the biggest range of like what the users were doing, but I later on fixed it and it seems like people were just like hitting it, playing the game for a few minutes and then and then just moving on which which is fun which is like more than I wanted like people were commenting saying that oh I have tried it it's fun and that's all I wanted because it was genuinely stupid and playable for like five 10 minutes and and maybe show it to a friend or something like Yeah. to look at this. It's really funny. It's like the physics of it uh is really funny. But it's crazy what you can do nowadays, you know. Yeah. The scaling side of things, the the building like it's just you need to get your you need to get your apps on uh Cloudflare. I made um uh Yes. So I made another claude session tonight was working on that. So bringing everything because it's a Nex.js app. Uh I was first hesitant like will it work properly with Cloudflare because you know Versel is much more suited suited for that but then Claude was like yeah no worry we can adopt everything like yeah sure let's do it. I'd say nextj is a bit overkill the most astro but it could have just been a reactor app but who cares? Interesting. Yeah. Yeah. Did you ask for Nex.js? Yes, I did. But I did some research. I was like for this type of project where we have this type of like components that are self-contained, but at the same time we have like login and all of the dashboard stuff. Oh, there's a login is there. Yeah. Yeah. Yeah. Right now you don't just go to it and then you just play it. It's like you have to lo but like the login is there. Uh I have disabled everything because I wanted people to just go and play. Yeah. Yeah. Yeah. Got it. Got it. Um voice being distinct. We know it's a it's an issue. Um let's move on. I'm going to make a note of the time stamp. I'm going to try and be better at doing this, but at 4606, uh we're going to talk about web flow. What if we post a comment? Do you think that would help? Like just have a specific comment that comes from us saying that's okay. I can just I've done it now. I've done it now. So Okay. So I'm going to update that cuz we ch chatted 26 26. Yeah. So let's get a bit faster if we can. We we are about to get up. Well, if you stop talking. I'm sorry. We are We are not synced. That's why I guess. Yeah. Um Well, no. You're No, no, no. We're synced. It's your audio that's behind it's your ah okay yeah right 46 right so we're about to get our first glimpse of web flow source and the community might be back I don't know I don't know um let's get this up actually the tweet is a little bit better yes we got it um so web flow showed us this build for the web at agent speed with your codebase as the source of truth. This is source. Watch it live. View source episode 1 October 27th. So that's next Tuesday at 9:00 a.m. Pacific, 12:00 p.m. Eastern. Join us. Timothy Ricks, Matthew Munger, and Catherine I don't know how to say that name. Really sorry, Katherine. So, I'm pretty excited about this and I think it means more to the community than we we think it does. And by the way, I just watched a a podcast with Matthew Mungar because that, by the way, they're they're two forward deployed engineers at Web Flow. They're they're working together. I just watched a podcast with Timothy Ricks um Matthew Munga and Corey uh Moen on No Code Supply. We should try and we should try and do some sort of collab with them by the way. I think you should work on that. But back to the news at hand. Built for the web gent to speed blah blah blah blah blah. Uh we'll show you live and unscripted what we're building with source by web flow. So hopefully there's going to be a load of demos actually using web flow. And these are two technical people as well. Fear not if you are a marketing person. What's possible with re with the research preview today and what's on the horizon. So, a real sneak peek about what what we're going to get. I'll leave my um uh my negatives to to the end. So, source work source working on a real Astro or Nex.js project built with three in three ways with the source agent on the visual canvas and in code. So, that's pretty cool. I think we knew this but um the worry is that the visual canvas has taken a back step but the fact that you can can you build an entire site on the visual canvas that's going to be the the the thing I have comments on that yeah how custom code comes together we're going to be positive we're going to be positive with a few negatives at the end um if they are ex in existence how a custom view comes together so this is for your marketing folks allowing you to shape your workspace to the specific jobs you or your teammates need to do and shipping from source to Web Flow Cloud in one click. Then we'll cover what's coming next to take and take your questions live. I'll definitely be tuning into this. Now, episode one, where did I see that? I saw that somewhere. This is episode one. This could be a whole this is this is going to be a re hopefully a dev focused uh podcast show something that Web Flow is putting out there into the community. This is the first time they've done something like this in a long long long time. And I think I'm I'm genuinely excited about it. Like I say, Matthew Munger, forward deployed engineer, guest Timothy Ricks. Well, he's not really a guest, is he? Oh, maybe he's not going to be the consistent person on the on the show, so I guess that's why he's Maybe that's why. Yeah. A guest, sorry. And then Katherine, um, product manager. So, join us live 27th of October, um, and all the rest of it. So, get signed up. I'll be there. I think I think it's about 400 p.m. um, our time, 5:00 p.m. your time, but I'll definitely be there. And it'll be amazing to start seeing Source. My only thing, my only negative is I think everyone's anxious about the price. I think we just we we want to know how much all this magic's going to cost, if anything at all. So, yeah, I'm on the edge of my seat about that. Maybe they're going to release the price. But anyway, thoughts, opinions. Um, yeah, I think you just nailed it. The price and how how they are going to charge you. It's not just is it going to be expensive or not. We know Web Flow is not the cheapest tool but you know compared to frameware again they're not too expensive but compared to today's market like you get yourself a claw max subscription if you are doing anything serious you have that right now the question becomes how will web flow charge you is it going to be per website that you host on their uh cloud infra infrastructure and then maybe use their agent because they specifically mention they give you three ways uh to do things. One is you do it yourself on the canvas. Uh another one I'll I'll comment on that. Uh another way is through their agent which I assume is going to cost just like how it is with framer and how it is uh you know with pretty much every other tool out there. And then another one is code which is technically just you know you can do this with claw code and then I don't know how that will sync with with source. We will see I'm I'm most curious about that. Okay, just just to just to be clear, I'm most curious about knowing how can I do the work with cloud code in the way that I like doing it and then how can source add some value for me with the custom views maybe with the um with access with teammates and things like this maybe even the canvas and now my comment what I mentioned about the canvas I don't see myself or many people be building using a visual editor anymore and the Reason for that I for a long time I thought that that's how I wanted to do stuff but I started doing it with stacky and I noticed the biggest issue is as these builds get more complex you will no longer know how to do stuff right you you you might know that okay what systems is being used for the styling and so on but isn't it better if you let the agent to take care of that side of thing and you kind of like orchestrate the bigger picture instead of like trying like conceptually it's easy to think and understand well I have a heading it's too small let's make it bigger which way is easier to ask the agent to do it or just literally drag it and make it bigger of course dragging it and making it bigger is just much more uh joyful as well like I want to do it but I'm I'm a reserve there. I'm pretty sure you cannot do this reliably because you don't know how everything was built unless there will be a layer built that allows you to do these kind of things and then that can be translated into something for the agent to take care of and be like this user made this bigger. Let's find the most scalable way to do this across the website or just here. So I can see a lot of workflows can happen with this type of like essentially just prompts. But at the end of the day, I think the future of the web is to build these experiences with prompts and then the canvas is where you probably compare and you again another thing to be really um excited about is the controls that you can you know ask the agent to make. So, it's not the canvas controls like the standard ones, but actually the specific controls that you make for whatever you're making. So, I want to see those and I'm excited about them. Yeah, Timothy and uh well, on the on the no code supply podcast, they did go over a couple of tools. I've forgotten what they were called, but they present to you with UI elements and things like that. So, um, well, before we get into that, um, because Kabaza is desinct, I'm not sure why you said this, but I I disagree. I disagree because we see it in our comments. We see it in the passion behind Timothy Ricks that we there are still people, we know this, there are still people who can't uh, what's the word? They can't process the idea of what's happening with code and files. They they need the visual you know you you know you do this because you know now and it if it wasn't for the if it wasn't for web flow giving you the foundation to understand this your jump to aentic coding is much much smaller. But you got to go right back to your day one of using Web Flow and how simple visual how it's so easy to understand. The first website you ever built probably was a mess. But let's be honest, you knew what was happening. It you were in all you were in control and there's just going to be so many people who need that. But this will only make sense if the price is right. Free. Yeah. If it's free, we can drag and drop and build with Web Flow for free. I think that will be heavily used. I'm not. But you um Pixel Geek here, you you already have the foundation. You you understand the leap now. What Web Flow gave you. By the way, that's cat food. Um you're able to make that jump and and and you're not wrong, but I don't think it's just like a hard and fast rule that people are just going to be like, "Yeah, we're just building with agents now." People just still can't compartmentalize, I think, is the word I'm looking for. But either way, it seems like Web Flow's supporting the whole shebang. They've still got the web editor. They've got whatever it is that they've got the UI elements inside of source. Um I just don't think it's fair to say that this is how we're building now and everyone should just accept it. I I think I I I think it's conceptually it makes sense what you say but in practice when you if you do some agentic work on your website let's say you make a website manually and then a teammate comes with an agent and like just you know does like a big change and then you go back in. Can you make a change that you can absolutely make sure that is not going to break something else somewhere else? Like if I go into one of my old builds that I understand fully and was not built by an agent, I can make sure I know what I'm touching and I know how it affects everything else. Do you though? Do you? Depends on how clean it was. Okay. Well, but that's kind of in there in lies the magic that source is meant to bring this interoperability this like you use your agent you use the you know we want that smooth transition and I have to say I started laughing how is it that I'm the one defending web flow and you're like I'm not like yeah the table yeah true well well I'm I'm not like against any parts of the source. I'm just saying like realistically I won't be using the the on canvas direct editor realistically. Maybe for content maybe for content like I still find it just much easier to just type in the content or maybe you know all the eyebrows for the eyebrows that the the agent has you can just click them and delete them. You know there there is joy in just pressing the delete there. Yeah. Um, Pixel Geek or yourself, do you want to do you want to explain a little bit about this this car analogy we're going for? Do you understand this? From what I understand is like the the manual uh transmission is when you do stuff manually like on the canvas and the automatic is like you just drive the car. You don't care like you know what what gear you are on. And this is this is how I understand it. Like when you make a website, maybe you want to care about the brand and the messaging and how it lands with your users and maybe how it looks on a phone, but not how can you make it look correct on the phone, but just make sure that it does look correct on the phone. So that's kind of like the idea. All that to be said, I'm just I'm just hammering this point home. people still love manual cars. So I I understand the not everyone and and I am you know I'm funny enough I am I know not everyone that's what I just said people people still like manual cars but but funnily enough like I agree with you like I agree with like doing the things that you agree to do. I'm just putting my customer hat on and being sympathetic to that there are people out there who still like to drive manual cars, who still want to drag and drop, whether they're right or wrong or like I'm not doing that. No, but I'm just putting I'm just I'm just trying to speak for other people right now. So, yeah. Yeah. Um yeah, VJ's arguing here. Uh but it's not similar to automatic in my opinion. Um, but it's more akin to it. I don't think it's like, you know, set it and forget it. I think it's still, well, just like you're you're still steering on an automatic car. It's not full full self-driving. You know, you still have to steer it. You still have to, you know, make sure the radio's on and pumping out tunes. There is still an element of control that you have, but a lot of the piping and and decisions and things like that are being abstracted away from you by the agent itself. I think that's what we're going for here. But yeah, but either way to remain positive, I I'm looking forward to this stream. Um, and I hope that it's a continuation of or sorry, not a continuation, a revi revision revision of the Web Flow community because this this looks great and I hope it doesn't turn into a frigin business marketing. Hey, we've got the our CRO. No, no, no. What is it called? What do they call AIO or whatever they call it? um person. I want it to remain community focused, but that's for episode two, three, and four to decide for us. But yeah, for the first one, the community is uh is back. Uh let's move on. Um V is just saying something here. It's more like eyes closed asking the car where you want to go and expected to get. That's what I mean by full self-driving, I think. Right. Next. Um 1 hour 206 01 02. Let's put the seconds in. Uh 15. So again, if you're living under a rock, one of the most devastating attacks on the the internet has ever seen has just taken place. And I think it's disguised in a very it's very nuanced but PHP to shell uh two exploits were revealed in PHP the the source code that's been in existence for non 20 years now. The reason why this is critical is because every like so like we talk about our Nex.js JS websites and our web flow websites and stuff like that. Blah blah blah blah blah blah. So much of the web is run by some form of PHP framework. Yeah. WordPress, Drupal. Uh we'll go over it actually. Um so let's get this up and chatting about it. So uh basically two vulnerabilities here. I know they've got long complicated words, but they are all all rated uh I think 9.3 and 9.5. These are ratings they get given uh on how severe they are and how much it affects these things. And it essentially comes down to memory allocation and being able to reuse that memory. So this is all way beyond me. I'm sorry I can't be too uh detailed with it but effectively PHP you have to manage the memory of the application. You say I want to use this block of data or this block on the on the memory um and when I'm done with it I want to clean that. Now there are certain functions very very basic functions actually that when you say you're going to use this block of data with this particular function when you remove that function because of the way it was written it still thinks that block of memory is being used and people have found a way to flip it and use that block of data um to to run their own code basically to that's why it's called PHP2 shell they now have shell access based on that little switcheroo that's happening with the with the memory. Those what both that's basically what both these um you know uh both these exploits are doing. They're both they're both doing the same thing. So uh let's try and find something that's not boring because I know that was probably a lot to whatever. No, it was actually very interesting the way you explained it. Uh I liked it actually. No. So, basically, you're you're going to have to update to 8.5.12 because they're slowly releasing these uh they're slowly releasing these uh patches to to fix, right? And what you in fact actually cuz I we we're uh No, we're not affected by this. Actually, we're not affected by this. Let me let me read some research I was doing because um where's where's old chat GPT going on here? It was a really good good little rund down here. PHP here we go. Um, memory corruption. Which websites are effective? So basically if you're running WordPress, Drupal, Jumla, Laravel, Symphony, PHP, FPM deployments, find NGX, I don't know what that is. Apache, uh, which is, you know, a lot of lot of servers are using Apache, light speeded, frank PHP, CGI based PHP servers. It's it's crazy. And uh there are patches released for version 8.5, 8.4, 8.3, 8.2. Basically, if you're on anything before 8.1, you just need to update to 8.5.12. Uh because, you know, like I say, this has been around for like 20 20 years. Uh and I have a I was having conversations last night and I have a feeling that this was warned by someone. They were like, "Something big's going to drop tomorrow." like there was a tweet sent out or something there was there was a leak so-c because this vulnerability was found I believe in uh August. Okay. Yeah. And then they were working on the patch and then they they wanted to release the the press basically telling everyone hey there's a vulnerability and now it's time to update it because like how else do you want to do it? There are like millions and millions of websites using PHP. You cannot like reach out to every person and be like, you know what, there is a vulnerability. Let's fix it. You have to release it. But that's kind of like the dangerous thing when you release it. At the same time, you now let a lot of more people know about the vulnerability. But you you got to have a patch in place first. So they did have the patch. They wanted to press release release it on the press but a few days before that it got leaked. Sure. So so they had to release to they had to do the press a day or two earlier to what it was planned. So everything got in a rush and it kind of like become a bit messy. And another thing that happened, it got into mainstream media, which it it is worth getting into mainstream media because it is actually like very severe and important. But at the same time, I I believe because of all the mess and maybe because not much else was going on, it got like absolutely viral. So basically all the mom and dads of like the the people in the IT would be calling them and like do you know about this? So when your non- techy friends tell you about something you know that it is like it has reached that point of virality. Uh but yeah you if you are having PHP and your provider is not updating your server or not uh responsible for that because I got an email like that uh for a server but yeah I got to do it myself. So um I saw I saw a tweet by someone um basically they had they had messaged someone they it's levels actually levels I io uh he all of he's like a PHP dev all of his stuff all everything he makes is on PHP love it or hate it he knows PHP so that's where he built all this stuff but obviously then he that means that he's in a bit of a ring with a lot of other PHP developers he messaged someone to Hey, look at look at this. This is this is big. And the response was something to the effect of I'll look at it in a few days. I'm out of office at the moment. And it's like you do not realize because you know we're talking about enter a lot of enterprise is running on PHP. Um it's fundamental to so many people's uh uh infrastructure. So what you should do obviously if you're looking if you're you know you're running PHP you want to basically well no you should audit your whole thing to to uh to know if you're uh you are using PHP or you are using engineext or something like that again point claude at your your environment your code and ask it is there any are we affected here you know run your audits and understand if you're at all affected by this I I know I'm not you know but we will get into something that we were affected by. Um, if you obviously patch it if there's been a uh a patch for it. And fun fun fact fun fact in all this, I spoke to someone last night that everyone's finger was on the trigger waiting for a patch to be released. So what happened was when that patch got released, everything the whole internet just basically grinded and grunted because everyone was updating at the same time. So the the next logical choice is to just take your systems down. Like just just take them down. Um yeah, pause. And and that's what they ended up doing. They just ended up taking a bunch of non-essential services down for everyone else to update the essential services and then start patching as things chilled out a little bit and whatever. Yeah. So, uh, PE, restart all of your workers as well once it's, um, once it's working and then and then review the web server. And and here's the thing as well. I asked you earlier with your with your um your your viral game like did you look at the logs? Is there anything going on logs? Like all good applications should have logging going on. You should understand what's going luckily Versel actually has this for you. But I I installed something called Sentry which logs errors and things like that. It just gives us information about what's going on. And again, you're just able to point your agent at these logs, at these things. If they've got an MCP server or a CLI, you can just ask your agent, is there anything weird going on here? Or, you know, again, you should be you should know this sort of stuff. Um, yeah. And um and that's kind of it. don't rely on the uh WFT which is web application firewall or something like that. Like it's it's so core like once someone's through like anything like it's just this exploit is so core to to web infrastructure and servers that it's just it's it's pointless. That's you know with WordPress if it's a dodgy plugin then you just update the plugin and that's it right. Um, and it's restrict and and what are the chances that how many people are actually using that plugin? You know, probably obviously quite a large one, especially if you're talking about advanced custom fields, which is a WordPress plugin that's pretty much on anything or sorry, advanced security fields or something like that. If you know anything about the WordPress drama that happened a few months ago, but um, yeah, point is it this is this is so widespread that it it needs to happen at a core level. So pretty pretty wild times. Um the thing that we were affected by is that railway was also exploited. Now railway is just a server you know it's a it's a server um infrastructure client. It's really nice really nice UI. Our command AI website is running on railway. We have a separate CMS. We have a database. We have the front end. It's all running on railway and API keys got encrypted API keys got leaked through that and I got an email saying you need to basically take action right now because API keys were uncovered and leaked similar to the open code article we covered earlier. So I had to um again audit the website look at what's going on what we need to do. I just asked Claude I just asked Claude what do we need to do here? And it I needed to manually rotate a lot of the API keys that we have uh to and and push them up and and because that I mean we we're not really um the what did the audit come back with? Let me tell you what the audit came back with because I would say you know it's not it's not like um you know we didn't have any API keys to any AIS or anything like that. So let's have a little look. Um, here's what the code reads. Ranked what an attacker could do with each one of them. This is what Claw told me. This is what Claw told me. Database URL and password. They could basically just rewrite and do stuff to our database. I mean, realistically, we've just got a bunch of clips and streams. Like, it's not a big deal, but that's probably the most serious one. The admin JWT secret lets someone forge admin panel sessions, which means full CMS control. JWT secret signs users permissions uh tokens not referenced in our code. So I deleted that because that wasn't needed. API token salt hashes strappy API tokens. I don't understand some of this to be honest. Uh transfer to token salt. Same for transfer tokens. App key session cookies. Uh encryptions like let's post let someone post streams to our website. Um, as in like when when a when a when a stream goes live, if you go to our website right now, it's posted this stream to our website. So that's an automatic thing. It means that someone else could do that. Again, we are small fry in all of this. But the Claude I said there was a breach. How is our website affected and what do we need to do about it? So yeah, and that was it. So pretty pretty crazy stuff there from uh from PHP. Hopefully we did it justice, but we're not well equipped to explain all of this stuff. But all you need to know, it's a big deal. It's a big freaking deal. Anything to add? Uh, no. Uh, we've covered everything that was needed. Yeah. Great. Great. You heard it from Kabaza first. We've covered everything that was needed. Uh, sorry, I'm just What's going on here? Hang on. Just cleaning up our time stamps. Cool. Well, you get to tell us a little bit about Grock bot because Claude has joined the party with his personal proactive agents. Now, there's an annoying thing about all this because what's that? 155. I'm just noting down the time stamps because it's not available in the EU or um or the UK. I saw a little video from how I AI. Do you look at that? Do you follow that podcast at all? Uh, she was she was talking about Claude Duet and I was looking everywhere for it like just could not find this Claude Duet. I was like refreshing my app and seeing if I downloaded everything. Uh, could not could not find it. Um, but we'll talk about it nonetheless. Let me get up on my screen. It's as you'd come to expect. It is a proactive personal agent. something that's constantly working around the clock, cloud-based that's doing things for you. We're opening research preview of Claude Do It, a new app where Claude works as a proactive agent. It comes to you with what needs your attention, completes tasks as you ask for it, keeps working when you step away, and checks with you before it acts on your behalf. Um, I don't know. I mean, I don't have a lot of experience with these proactive agents. Um, because I sort of go the more techy route like I I still use N and I I ask Claude to check my calendar every morning and notify me because you can set schedules, you know, but it does make these proactive agents more accessible, I think, to the less techy less techy people. Um, that's that's kind of it when it comes to this. It's just another one. Um, so did you want to did you want to talk about Grockbot and your experience? Yeah, I've been using Yeah, I've been using Grockbot and I'm blown away. Like I'll probably continue paying the subscription. So uh and it's it has already paid for itself. So you've got a Claude subscription. I have a claw subscription. You wouldn't use claw duet if and when it becomes available in the EU. Yes, I will. Uh when it becomes available, I will give it a try. I believe they mentioned that it's not going to do it's not going to have the same level of um kind of like it's not as as free of an agent as Grock, which we can understand. you know, Grock does things that uh Claude probably will not. But anyway, the I want you to understand like the uh the mind kind of like the it's a it's a shift in how you are using AI with with all other agents. You have a folder uh or a project, an environment, whatever you call it. They call it different things. And then you have each chat instance a session that you care about managing the the context. You care about like not switching different you know tasks and you basically keep things there and and all of a sudden you have many different sessions and you know it it's kind of a mess. It has a lot of control though. You can click and see what the agent is doing. Now there is a shift when you start using uh an app like Grock. So here I asked it to help me with moving all my data from one drive and Dropbox to my uh next cloud that I bought for less than half the price of these two combined. Less than half. By the way, I think Nextcloud is affected by PHP to I saw NextL do a little research about Nextcloud. I've seen it in something. Sorry. Continue. Oh, good. So, here I come and tell the the bot do this do this transfer. So, it pops up a a window where I can add my credentials without it seeing the credentials. That's kind of like the ease of use of it. I don't have to deal with the the env files. I don't have to deal with so much. It's just everything the the bot tells me and I will just give it the information and it starts doing stuff. And I'm like, hey, can you make a dashboard to show me like the status? It made this dashboard showing like how the transfer is going. Right now it has stopped but that's kind of like uh it has stopped because I hit my limit because I was doing so much with this. It can build you apps. It can it has its own computer. I will show you what it can do. It's insane. So this was just one example and in this example it has paid for itself. This has saved me so so much time. Imagine me going into transferring three terabytes of data from like these clawed um these clawed infrastructures that doesn't they don't allow you to do this kind of stuff easily. It's hell. A bot is taking care of all of that. Another one that is really interesting is this one. So this one can search like for shopping. It can search the internet wherever I point it at. It can proactively find items that I like and it can render them in the room the way I want. Like it can find the item and render it in the room and then I can be like, do I like this or not? And I I think this is just a huge difference. If I go to the library here, uh you kind of like see many uh like more examples like it it finds the item. It's like measures it and like puts it in the room and I can like compare stuff. And I I think this is just an insane level of managing everything for you without you dealing with anything. I don't have to install Blender. I don't have to give it my computer to do the blender on. It has its own computer. It does everything where it where it has like its own computer and it doesn't slow me down. It doesn't like bother me like taking control of my computer. It does everything and comes back to me with an answer with an asset with a dashboard. Or uh another one that I don't want to show uh it it looks at my emails every uh every 10 minutes. It creates drafts where it needs to and it it already has started u paying for itself literally it's just much user friendlier that's the the thing like I know you can do all of this with cloud code but if you do any of these with cloud code you have to spend time and like set things up here it just does it so the the the two that you just showed me I don't think really shows off the power of Grockbot The sec the third one, the email one does is this idea of something that is working for you continuously proactively. The two that you showed us are very much like you've just you've leveraged a um a a managed agent which Claude already has a managed agent, right? I would I would I would be interested to know if you did the same thing with a managed agent what it would do because that is a remote. It has its own um has its own computer and it can do things on that computer and create artifacts and things like that. You you you essentially did that. The the the bot is the idea of a bot is something that is again just reacting to a Slack me or not even Slack message, sorry, but it's just it's constantly watching. It's constantly working on your behalf. the the the clothing one kind of came close because it's like, you know, it's it's going off and doing things and then already rendering things. But it would be like how you would turn that into something that I would understand a bot to do is that I'm I'm redecorating my living room. Go off and just pull things that look good and do this and that. And it's sort of like you let it do its thing in the background. So that's I think where where bots really come into come in clutch really is is that proactive element and that's what duet will do. It will be proactive in looking at your emails, preparing your day and and I already do those things with a schedule but so much work needs to go into doing that to get it to work whereas duet will be a bit better at and and a lot easier for people who aren't tech technically minded. like I need to read transcripts, block out my calendar, um do like have a schedule bot, look at my calendar every day, create like it's just so much technical faf which I'm okay with, but duet grobbot. Um VJ here mentioned Gemini task. I'm not aware of Gemini Task, but if that sounds like in this wheelhouse that this is this is what Gemini task does, proactive personal agent, this is what we're talking about. So yeah, I I would challenge you to look at managed agents and I would be interested to know if Claude Duet will achieve the same things for you. We probably answer that now because will you cancel Grock when Duet comes out? We will we will see probably um the the agent that I've been talking to the most is the one that I cannot show. Uh it's been doing so here's the thing like in Claude you have different context and different here as well you have different agents for different things but I have this agent I'm calling Mike it it looks at my emails and it helps me with everything there so it doesn't matter what that thing is. So in one of them h in a few of them it actually helps me create a draft. Uh in another instance it a it gave my team access to clot flare because it's connected to my cloudflare. So it does all types of like different things in one chat. That's my point. It's in one chat and it I don't have to clean up. I don't have to to think too much about managing it. And in a in another instance, I have to write an offer for a client. And it started not just writing the offer, but creating the web page because again, these are agents that can create you an app. So it started create an essentially just an HTML file here. Uh but it was really good. I was like surprised by how good it was. And then I handed that to Claude code because I asked Mike to put it on my computer and then I handed it to Claude code for more control for more development. So that's where you get you know you you go much deeper and much much more probably you this is where you are willing to spend a lot more tokens. But with these type of managed agents uh you don't have to think of all that level that detailed level. it's just managed for you. Uh in another one, I'm trying to get it to do all my marketing for me by because it has uh it can connect to the recent MCP. And in Claude, I would go and do the designs for my emails. But here, I would probably do the writing or like do the sending because it's just much easier, more user friendly to do the sending here rather than going back to a claw chat. And not to mention like in Claw Chad uh you like if you use the mobile version of Claude it's you have to go through your sessions and find that specific session that does for example connect to resend to send that email that you have here you just have a bot that has not one context but a group of things and it and another fun thing it does I'm using it I'm using my codeex tokens through Grockbot wherever it's it's like building something big codeex tokens. Yeah. Yeah. I'm like don't use your own token. Yeah. So I'm telling Rockbot to use the terminal on my machine to Got it. to run codeex to do the coding for it. So it doesn't I don't have to do all the tok. So, in another way, in another way, I'm I'm not letting my tokens from Codex, which sometimes just sit around and then, you know, I hit the the end of the week and I haven't used uh all of my tokens. I don't let them go to waste anymore because I can point an agent that is that has these cron jobs. I can tell it like every half an hour work on this and you know build it build whatever that you build one after another. So and and and then it's kind of like again I'm cor I'm connecting um to it. I have it on my phone and I can chat to it like I can talk to it which no other app has. This has been also big. I can talk to it um like the chat mode, but then it can turn whatever I'm saying into an actual task. Put it on a dashboard. I didn't show that either because there was like sensitive information, but I have a very beautiful dashboard. I'm saying beautiful because I'll I'll talk about that. Um, I'm putting all that information as chat is talking and it puts it on the board and then it does its own thing and it gives it to codeex to do the coding. So that's been just much nicer to to do instead of like going into the details. I'm pretty sure once the things are further developed I will bring them to claw code where I will work on the design where I will work on a few like ironying because this is not the best um agent to do design. Last thing I want to mention I is that what you were going to say about beautiful by the way? Yeah, exactly. Great. This is beautiful. No, it's clean. It's serves as power. This is I would say this is like above average. This is what a designer would do. And from what I understand, I did this with Mike as well. Mike has a canban with all the tasks. And the canban is even more clean than this. It's beautiful. It's really minimal, very beautiful. And from what I understand, this is a type of kind of like like Grockbot has access to some sort of its own UI kit. So you can tell it to build you a custom HTML page. It does. uh it spins up grock whatever you know on the in the terminal on builds you something or if you ask it to for in my uh experience it has been using the word dashboard to say like build a dashboard for me for the stats or whatever it uses its own UI and the results are really nice very clean and these are by the way sharable under the gro domain so yeah Um, it's really nice. It's really nice to have this side of the Um, yeah, it's it's been great. It's been great. Uh, I will miss it for the next few days because I have hit my limit. I'm almost like thinking if I shall like put in€ 10 or something to just get me over the weekend at least Mike with the emails because it has been so nice to reply to emails and the text does not sound like AI because I dictated and it takes my words the way I mention them and just cleans them up and it it does not look like you know the the typical text from you know chat GPT sometimes makes it very AI like this has been really nice with the tone. Yeah. Another thing I know I said this is the last thing. It was really funny because I asked I asked Mike which is my Grock assistant to email Aurora which is my actual like real life human assistant for information about an offer. So it got an email from a client to write the offer but it didn't have enough context and Aurora had. So I told Mike, hey, email Aurora and ask her for that context. And it emailed like, hey, this is Mike, the assistant from Kavara. Can you give me these stuff? So Aurora sent sent Mike the information and Mike received it. And obviously I didn't have to prompt again to say like do this and that with it. It it it got in the email. It knew that it was a reply to him and he got into working in uh on it. So um question. How are you managing multiple emails? Because I've started to move more into like chatbt being the one to manage my emails cuz I have CRM and things like that and I ask it like hey did we send this person an invoice blah blah blah. I've had to ask it to computer use Apple mail because I have Gmail I have multiple Gmails and I have obviously Apple iCloud and all the rest of it. How are you how are you managing multiple emails? Um, mostly one email. I'm not I haven't connected my other emails, but that's kind of interesting. Yeah, I um, from what I see, I I can't add two emails. Let me see. Because I already have Grockbot has an email, right, that you can Oh, I can add another account. Yeah, I can add another account. It shows. Yeah. Yeah. Um, so I have a Gmail added and there's a button add another account. That That's nice. Yeah, you can't do that in chat BT annoyingly. Um, there is a question here. How do you plan to run all AI concurrent delegating tasks to each other? Well, funny you ask this because Bro Grockbot teams team bots has been released. I have not read this. I have not watched this video. I saw it literally just before the stream and my understanding is this is a delegation thing. So, you're welcome. Check out Matt Palmer. Um he's he's the kind of devil advocate. Interesting. I heard about it, not that video, but about um groups. I I don't have the option to group bots together, but the my bots, they have persistent memory and then they add to it, but they have access to each other memory as well. Interesting. So, I can tell you I I can tell Mike, hey, what did that other bot did in they don't load it in by default. I noticed I have to specifically ask for it. But, but it has been really nice because they can pass information to each other. I've just noticed something. Cursor and bot at SpaceX SI. So, it's not SpaceX AI anymore. SpaceX SI. Speaking of which, I also noticed of like exactly the same thing. Look exactly here on my screen. Super intelligence X. And do you notice anything here? That's that I wanted to understand. What is happening? Grock build formally cursor. Wow. Formerly cursor cursor. What? What's happening? There we go. Hot off the press. Did Did Web Flow just leak a rebranding or renaming of Cursor? I Yeah. What's what's happening to cursor? Because like we still have cursor, but is it and I I think it would be sad to rename cursor. I mean Twitter, we still call it Twitter, but cursor another one. Another good brand name. Cursor on their website. It's still cursor.com. So maybe Web Flow just accidentally leaked it. This will be a nice little short, little tasty short. Yeah. Um we'll we'll move on to the next one. But a final question here. How is privacy with Grock? What data is being transferred? You'll have to read their privacy policy. I don't suppose you've done that, Kabaza review, but but what I'm going to I'm going to take a stab. I'm going take a stab and say they say they don't train off your data, but the the worry is that no one believes them anyway. Even if it said they don't train off your data, you're not going to believe them anyway, right? Yeah. No, I don't I don't believe I don't think that any of these companies are the like getting I I believe all of them are doing something with our information and I don't think uh from like understanding how these LLMs work I I don't think like they are specifically reading your information. I I don't know maybe maybe they will they are uh I I saw some videos on chat GPT knowing just so much about you and then when it comes to Okay. Okay. So here's the crazy thing. uh from what I saw like if you try to buy an ad space on Chad GPT apparently you can target just so specific that it's scary because Chad GPT knows so much about you about your habits about your dark dark secrets and apparently advertisers can target to a very specific like degree I have to look into it further but from the video that I saw It looked borderline creepy. You do you do not want it to be targeted like that. But I mean they have all this information. They might say we're not training our models on it. But uh they you can be damn sure they are building a profile like your profile. They know you better than your mom. Crazy, right? Let's uh let's move on. Today is a dark day. A moment of silence, please. Ark has died. No, I I I I don't want Can Can we skip this? Can we not face reality? We um we've decided to sunset Ark on the December 22nd, 2026. That's not an easy sentence to write. We spent years building ARK and celebrated each day with every release along the way. We have so much pride and love for what we made alongside the ARK community. Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant Sorry, you probably hear that. My phone's going off. God, that ruined that. Uh, our priority is deliver best-in-class security for our members. Keeping a browser secure takes constant dedicated work that it only is only increasing in the age of AI. DIA was built from the ground up to meet today's security standards. So, that's where our engineering and security teams will focus moving forward. I mean blah blah blah blah blah. Yeah, they are making the rest of the post is uh about the rest of the post is about making it easy to go from arc to DIA. And there are people saying like why don't you go to DIA? It does everything Arc does. No, it doesn't. It just doesn't. I updated it. I checked. It does not. I want an uninterrupted full screen, no URL, no chat AI button nowhere. I want an uninterrupted full screen experience and DIA doesn't give me that. Uh, I want to be able to do nesting with folders. DIA doesn't give that to me. It seems like DIA is like with the folders, it's a bit better with the UI. It's still like more minimal than what the hell Chrome is doing, but it's still not my arc. I want my arc back. I Why can't they make it open source? Like, we have all these tokens. Why can't we build AR? Why can't we reverse engineer ARC and, you know, have it as an open? I swear I will be uh committing some of my tokens every week to to it because it's been that good. It's so funny that I made some videos on Instagram about something completely different. I believe it was about the the the Tesla Roadster thing. Some people me some people commenting here's an Arc user or something like this. Not in a mean way, but like that we it was a community of people using Arc and people recognize it that and and and now it's gone. It's just I know 99% of people on Earth do not give a Like most people on the internet probably are not using Arc anymore. They don't care. But for the community using Arc and still holding on to it, man, it's it's sad. I I told Aurora, my PM and my assistant, I said like Arc is dying. And she was like, "No." She she hold her laptop and she was like, "No, I I love my arc. I I don't want to delete my arc." Like Dia is just not there uh yet. And I'm not sure if it ever will be because they have this chat button that they it seems like they do not they do not want to give up. At least allow me to have my full screen uninterrupted. I can live without the nested folders for now. But the uninterrupted chat in Arc is just uh the uninterrupted view not chat uh in in Arc is just beautiful. Uh yeah, sorry. We have a comment. I love Arc. Um yeah, man. Like I don't know though what it means uh to sunset. Like I mean we have it downloaded so it probably still work. Uh but I believe like things like shared live folders will stop working and then no security and no Chrome update will uh will be um you know deliver then it becomes a vulnerability. So you probably don't want to use it after that point. Oh wow. Yeah. Well, they they made specific they specifically called out the security and to maintain security on two apps uh is is obviously too much work for them. I Isn't it Isn't it like funny that we are in this age of we have so many tokens and you you point an agent at with all the tokens you can and they weren't they weren't they acquired by Atlassian? Don't they have like enterprise level of money? Like can't they just have one engineer? So it seems like I can be that engineer. It seems like I cannot let it go. Can't you give us one engineer? God damn it. Like they had one of the best communities on the internet after Webflow. Like this is just so sad that you know we had web flow community it was so bright so beautiful like finding friends and then we had um Arc and now Arc is actually dying. Yeah. Yeah. Yeah. Um so I started using Helium today and what's that? It's I think it's open source. Don't quote me on that one, but it's uh I basically I use Comet, which is uh Perplexity's browser. It's Chromebased Chromium. And for some reason, many times this week, all of my tabs have crashed. Are you getting Helium up? Um Um Is that Helium? Is that Helium? Helium computer? Uh yes. privacy first browser without no there is distraction like remove these you can remove all that you can oh you can you can okay maybe I mean and it and it's and it's open source I can I can change it how theact yeah so I I literally I was like for whatever reason comet all of my browser tabs crashed I don't know why it's happened multiple times this week so I was like this I've had enough. I just searched what is a Chromiumbi based privacy first browser. First recommended Brave. I don't really I've used Brave in the past. Then it recommended Helium. My AI recommended Helium. So now I can't use Helium. The you know from a UI perspective, it's a it's a little bit not to my taste. But as you just saw, you can completely clear. They call it frameless and you move your mouse up to the top and they just appear like it's a dock or you can have it to the side. If you don't like all that, if you want it in the in a certain way, it's open source. So you There you go. See, you're downloading it. Um, I'm downloading it. I'm on You're welcome. You're welcome. If I make When I make money, if I when I make money, I will become a sponsor if it's good. like I I cannot um it's really hard to explain to somebody who have never like for somebody who's who arc never clicked for like if you never fell in love with arc you won't understand but if you used it for a certain amount of time and then you get used to the con concept of a clean uninterrupted use and then you have all your tools here these are persistent these um tabs but these are not tabs. So in arc you there is no tab there is no bookmark. They are mixed together. Your bookmarks are your tabs. Your tabs are your bookmarks and you can have duplicates of them and you can have them in folders and you can have them live and you can share them with other people in that folder. When that clicks for you it's it's just you are much more productive. like it's just so nice to have this UI and I hope that Helium goes that route. So, I'm I'm going to give it a shot. And even like I noticed that they have bangs. What's a bang? A bang is like a mini app or something. I don't care about all of that, by the way. Yeah. So, you could bang YouTube and then the search happens inside of YouTube or bang Google and the search happens in Google if you've got it set to duck.go or something like that. So interesting. Interesting. That That's No, that's pretty good. Let's also give them a star. So there we go. You're so kind. You're so You're so generous today, Gabbaza. Look at that. They have 21.9K stars and I have not heard of it. H how? Like I've been living in under a rock. I feel like um how how did that happen? By the way, why is it called Why is it a computer TLD? What? Because that is your computer because like you do everything in a in a browser nowadays. Uh, by the way, one thing about Arc that annoyed me and for that reason I've been switching. So, I haven't been completely um using like Arc every day for everything because it doesn't it doesn't support the sidebar API. So, you know, in in normal Chrome you can click chat GPT and it opens on the sidebar. Arc doesn't have that. It doesn't allow that. DIA, I believe, does I believe. I'm not sure because they have their own chat thing. I do think this is using the same API. Um I assume I I hope that Bang does support that and then if it does that would be really nice. Yeah. Yeah. Well, so you're welcome. You're welcome. Uh and it's not even um release one. This is 0.2. Oh wow. which which but also this says that it's um yeah it is something active and let's have a look at releases to see like how often so this is the like where do we see this I thought like I here I can see how often they there were releases but it's or am I missing something on you might have clicked on the release rather than releases is like click on releases. Ah yeah, true. I was look I was looking at the Okay, now yeah I I see okay so we see a lot of Yeah. Okay. I will I will look into this. I I will be very interested to see like what are they working on and what they are doing because there should be also um don't they make a page to to show like what what's next what they are working on a road map the road map yeah I don't know not too sure let's dig around so I'm really happy you mentioned this and I'm really happy I I know you you mentioned it pre-show, but I'm happy that I didn't check it. So, now we all together experience footage. It's good footage. Yeah, that bad news. Maybe maybe this can be it because I did try DIA and I could not I I could not I could not could not imagine myself with Well, let's end on an equally high note. I'm just going to make a note of the time stamp. Um, and we'll go to there. Well, Apple once again proved that creativity is not dead. Have you seen their rebrand for Apple Music? Yeah. Have you seen the new advert that's gone along with it? I've I saw it on Instagram. Yeah. Yeah. It's quite nice. It's quite nice. Um, I mean, liquid glass being front and center of it all, but I mean, maybe not do that. It's annoying because this is a sound thing, but they've done this thing where they This is actually oil in water and they've employed Fred again, which is a DJ, to create noise basically that triggers all of these little things. Um, and yeah, obviously just playing around with different effects and things like that. It's really, really nice. And I love that, you know, in the age of AI, it's so easy to do this stuff now. But if you take time, if you have fun with your craft, if you love what you do, then you can come up with really cool stuff like this. Like again, certain frequencies did different things. Uh, really, really quite nice. And it's weird to think that's oil as well. It's really cool. I mean, we've been a fan of this. Uh the old Windows logo was a real effect, you know, the desktop, the the blue one. This being real. Apple has been doing this for quite some time. In the video, they mentioned they wanted to have like the perfect um what's it called? Like wave based on that sound. I thought they were like maybe pushing a bit too hard on that. idea, but I I get it. I think so, too. I I say I will say something that might be unpopular. People were in the comments, by the way, in the Instagram, they were all like amazed by how this is not AI, but I will say something unpopular, which is I don't think this is an AI versus real world issue. I think the issue is in care. like if you do it with care, if you know what you are doing and if you do it with care, you explore uh and I think there is a level of contribution as well like in this case you see like working with real artists, working with people. If you do this even with AI, if you can do it with AI, why not? right now in my my team. I I I shipped uh the last latest version of our homepage. Uh we have like some 3D stuff going on. Shipped it on GitHub. One of my devs just pulled it and he's changing the colors and made something much more beautiful than what I had. And this is and we are doing all of this with AI. And I I not not that I'm comparing like the the quality of the work by the way just just to be sure just to be clear about this but I I believe uh what people are upset about which is rightfully so is like people who tell you do I can do this with one prompt so you know and and they can't and they give you uh output which is maybe a nice segue for our next video about doing something absolutely amazing and doing it all with AI, doing it with taste, doing it with care and then you learn something. You you create something and then you share it with people which is I believe has been the issue. So maybe we we jump to that one and you will watch that in the next video. Yeah. Yeah. you. Okay, let me uh get my screen uh here. Okay, so this is probably one of the most fun projects I've seen in a while. You can turn your own room, your own living house, your whatever you have, your real world into a gaming environment that you can actually game in and that in like really really really high quality. It's like photo realistic and it's insane how good this is. So this is a project by best boss which is also open source. So that's that's also amazing that it's open source. So look what he has done. He has scanned his entire house. And in this case, we see only his room. And all of that was done by AI, but also with like his direction. He's a developer. He knows obviously what he's doing. And in this video, he goes through it and he shows what he has made and how all of this works. So, he shows his room. Yeah. Go on. Yeah, you can do it. Sorry. So, he shows his room and then he shows the idea that he wanted to do this type of like um mapping but it's really difficult to do it with the existing tools and with existing tools like there there are like 3D like LAR tools that you can use on your iPhone. He shows them that they are not really good. So, first of all before we get there he tried to do it just with pictures and give it to Astra charg Astra. By the way, this is, I believe, a sponsored video or something like that. It's in collaboration of some sort, I believe. I'm not really sure, but anyway, uh, Astro creates something really cool, but this is not photo realistic. So, what he does, he he tries to mix a bunch of different methods. He uses uh like these apps. This is this is one of them one of these apps to create kind of like photorealistic but not really version and it's it's just not there. So he's like you know what I'm going to create my own app. So he creates his own iPhone app that creates this 3D uh environment but also as it creates the environment it notes where the iPhone is the orientation and every information about it and snaps a picture. So it's the 3D environment captured with the LAR from the phone and the photos on top of it. And then he uses the room API from Apple which I didn't know about. I knew about the other two things. I wanted to do something similar. Maybe that's why I'm so excited about this because he has done the majority of the leg work for me. Uh so now I can build on top of it. So anyway, he he puts all of these three things, the LAR, the images, and the room uh structure into uh Astra and Astra basically creates the depth map, creates the materials and then maps everything and create and here he goes into much more detail which is very enjoyable to watch. So 100% recommended. He shows like like all the accuracy and like it's just so cool. Look at this. This is amazing. And once you have this amount of data and you can give it to uh basically an LLM to process it and creates it. He shows how some of this is programmatic like a Python I I believe it's a Python code that um it runs locally and it checks the scenes and checks the outputs and make sure to iterate until it gets it really close. So it's like the real you see how the real image and the render. It does it iteratively until it gets it right and once it's right you can then do crazy stuff with it. So he he can then create this game in it. He can walk in it. He can do this kind of like shot where he lays down everything uh every object that is scanned in the room on a surface which is really really cool. So again, we we talked about the the whole Apple uh advertisement that was done by real humans and people were really happy that it wasn't done by AI. And my point was kind of like, you know what, it can be done, but like you can create cool stuff uh with AI. It doesn't you don't have to be anti AI. I mean, look at this how cool this is. And he without AI this probably would take him month month of work and it has been probably a a week or so project and yeah the project is open source. Uh the app that he made for iPhone he mentioned that he has submitted it to Apple. So once that becomes available, it will be it will be just much easier to to go to do all of that. But you don't have to wait for that. You can just point your agent at this repo and be like set all of that uh up for me and then it will tell you how to do this. I wanted I messaged him as well. I wanted to do this for my raised bed. I have a garden. I have a raised bed. I wanted to scan it with all the plants and then kind of like create just for fun, all the information, all the all of what I got from my garden and then plan next year because you know why not a farmer with a farmer with uh two billion tokens. Uh so I wanted to do that but I was like yeah I need to do this in 3JS and then I like I don't know like will will the LAR take all the plants correctly and you know pick it up correctly and now that he has done this I know kind of like how to go about it and so so I'm personally very very excited. Yeah. It's funny because when I when I saw this, I thought of you immediately. I was like, "Oh, because you have your little room thing and I didn't know you were going to show that uh the this clip and also the one from earlier. I didn't realize that." But yeah. Um yeah, but but now that you know this goes right back to what we were saying right at the beginning of the show, which is now that you know that this stuff is possible, like you can now vibe code this thing that you know that the room API exists. You know that liar can be a way to Yeah. capture a room's depth and all that sort of stuff because we all have it, you know. So, more you know, the more you know. Yeah. Yeah. That that's that's exactly the point. And it's just so fun to see his learnings as well. Like he has learned there. He he he sees like where the where the issues are and yeah, he can he can now create kind of like a game in his garden. Maybe I will do that. Maybe I will like scan my garden and create Yeah. a sniper game there. That'd be really fun. Yeah. Yeah. Cool. All right. Well, I think that's all we got time for, I think. Yeah. If you're on YouTube, give us a like and subscribe and hype. Hype the button. Button with the hype. Don't know. Um, we have the podcast now if you want to listen to us on Apple Music. Give us a review on Spotify or or Apple. Make sure it's five stars. Of course, you can say whatever you want, right? You can tell us it's rubbish or whatever, but just give us five stars and we'll love you forever. So, yeah. Uh, yeah, that'll do everything. I've been Sam. I've been Kabarza. Keep on vibing.