Tech Brew Ride Home - Mon. 05/05 – Why Clone A Messaging App?

Episode Date: May 5, 2025

The whole Telegram use by government officials story gets weirder as a Telegram clone has been hacked. Apple is thinking about REALLY shaking up its iPhone release schedule. Who put AI in my crypto? D...eepfakes are being chased from the Internet. And the maker of Cursor closes its big round. Sponsors: Take control of your cellular health today. Go to qualialife.com/ride and save 15% to experience the science of feeling younger. Links: TeleMessage, a modified Signal clone used by US govt. officials, has been hacked (TechCrunch) Apple Plans iPhone Release Schedule Shakeup, New Styles (The Information) Tether CEO says the firm's AI product will enable peer-to-peer network of AI agents (The Block) Senate Democrats' reversal on US stablecoin bill throws future of legislation into doubt (The Block) Leading deepfake porn site is shut down for good (Engadget) Maker of AI ‘vibe coding’ app Cursor hits $9bn valuation (Financial Times) Reports: US losing edge in AI talent pool (Semafor) Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript
Discussion (0)
Starting point is 00:00:00 On April 4th, 2023, around 2 in the morning, a man was found stabbed multiple times on a sidewalk in downtown San Francisco. Hey, who did this to you? What happened next turned the story into a political firestorm. Reports have identified the victim as Bob Lee, the founder of Cash App. From Bloomberg Podcasts, this is Foundering, the Killing of Bob Lee, beginning April 16. Welcome to the Tech meme right home for Cinco de Mayo 2025. I'm Brian McCullough today. The whole telegram use by government officials story gets weirder as a telegram clone has been hacked. Apple is thinking about really shaking things up with its iPhone release schedule. Who put AI in my crypto? Deepfakes
Starting point is 00:00:53 are being chased from the internet and the maker of cursor closes its big round. Here's what you miss today in the world of tech. TeleMessage. A maker of modified versions of Apple. like Signal, Telegram, and WhatsApp, has apparently been hacked, leaking some user messages, contact info, and more. Now, until recently, I'm not sure this would have been a story we would have done, as I'd never heard of TeleMessage, except that now, quoting TechCrunch, telemessage came into the spotlight last week after it was reported that former U.S. National Security Advisor Mike Walts was using TeleMessage's modified version of Signal.
Starting point is 00:01:32 Israel-based telemessage, owned by Smarsh, offers its clients away to archive messages, including voice notes from encrypted apps. The messages of cabinet members and waltz were not compromised. 404 media said, but the hacked data contained contents of messages. Contact information of government officials, backend login credentials for telemessage, and more. Data pertaining to the U.S. customs and border protection, crypto exchange, Coinbase, and financial service providers like Scotia Bank were extracted by the hacker, the report said.
Starting point is 00:02:04 The hack revealed that the archived chat log, are not end-to-end encrypted between the modded version of signal that telemessage offers and the ultimate location where it stores the messages 404 media reported. Smarsh, Signal, U.S. Customs, and Border Protection, Coinbase, and Scotia Bank, did not immediately return requests for comment, end quote. And quoting 404 media, the hack shows that an app gathering messages of the highest-ranking officials in the government, Waltz's chats on the app include recipients that appear to be Marco Rubio, Tulsi Gabbard, and J.D. Vance, contained serious vulnerabilities that allowed a hacker to
Starting point is 00:02:38 trivially access the archive chats of some people who use the same tool. The hacker has not obtained the messages of cabinet members, waltz, and people he spoke to, but the hack showed that the archived chat logs are not end-to-end encrypted between the modified version of the messaging app and the ultimate archive destination controlled by the telemessage customer, end quote. Now wait, why is there a market for clones of free messaging apps? Quoting Cyber Insider. The compromise tool is a modified signal client developed by telemessage in Israeli firm that sells tailored versions of encrypted messaging apps to government and corporate clients.
Starting point is 00:03:15 These custom versions allow institutions to comply with legal archiving requirements by silently capturing message contents normally protected by end-to-end encryption and routing them to external storage systems. While the original Signal app is widely lauded for its robust security model, TeleMessage's version introduces a silent third-party participant to message threads for archiving purposes. In theory, this allows institutions to retain full chat histories without undermining the app's encryption. However, 404 Media's investigation reveals that in practice, the implementation leaves a major gap. The communication path from the modified app to the storage endpoint is not fully end-to-end encrypted. This vulnerability allowed an unnamed hacker to extract significant trove,
Starting point is 00:03:55 of archive chat data with little effort. The attacker told 404 media that he breached telemessages system within 15 to 20 minutes of becoming curious about the product following earlier media reports. He claimed that the vulnerable archive endpoints were hosted on AWS in Northern Virginia and were trivially accessible. Source code from the modified app obtained and reviewed by security professionals confirmed the AWS infrastructure and revealed no significant hardening or isolation to prevent unauthorized access. The hacker did not notify telemessage prior to publication, citing concerns the company would attempt a cover-up. TeleMessage, which maintains contracts with several U.S. agencies, including the State Department and the Centers for Disease Control
Starting point is 00:04:36 and Prevention, has declined to comment on the breach. The company markets its services as a compliant way for government and enterprise clients to log encrypted communications from platforms like Signal, WhatsApp, Telegram, and WeChat. However, this breach challenges the firm's security claims and raises broader concerns about the risks introduced by compliant surveillance tooling, end quote. It's Monday. I've got an Apple scoop for you, but it's not from Mark Gurman this time. The information is reporting that Apple is planning to really shake things up in terms of iPhone release cadence. The plans are apparently to launch two iPhone 18 pro models next year in the fall of 2026, a thin iPhone 18 and a foldable iPhone, but the standard iPhone 18 will only come a year later in the spring of 2027.
Starting point is 00:05:33 Quote, while Apple hasn't confirmed plans for the new thin model, it is expected to be around 5.5 millimeters in thickness, which would be the thinest phone the company has ever released, and one of the thinest smartphones currently on the market. Apple's hope is likely that the new model will prompt people to upgrade faster, overcoming the problem that users are holding onto their smartphones for much longer nowadays than they used to, largely because most annual upgrades bring only minor changes. However, the smaller size of the new thin model will require compromises to its capabilities. The device will contain only a single speaker instead of the two speakers that Apple's other phones usually have, one rear camera lens instead of the three in Apple's flagship phones, and reduced battery life. Internal testing shows
Starting point is 00:06:17 that battery life for the thin model will fall short of that, of previous iPhones. The percentage of users who can go a single day without recharging the thin phone will be between 60 and 70%. For other models, that metric is between 80 and 90%, one of the people said. To solve this, Apple is developing an optional accessory, a phone case meant for the thin model that also contains a battery pack, according to three people familiar with the matter. One of the people said that until pre-orders start in September, it's impossible to predict whether the manufacturing lines the manufacturers are setting up will be enough, or even over capacity for the thin iPhone, given that it's an entirely new product with no historical demand to reference.
Starting point is 00:06:58 For all these reasons, manufacturers reserving production capacity for the phone are looking at how quickly they can convert their manufacturing lines to other models if the thin model doesn't sell well to people said. Release of the thin iPhone will mark the start of a bigger shift in Apple's iPhone planning. Next year, Apple plans to release its first foldable iPhone, the information previously reported, The book-style foldable device will have an inner display measuring just under 8 inches diagonally when unfolded, and an outer display of just under 5.7 inches diagonally when shut, according to a person involved in its manufacturing. Also next year, Apple plans to stagger the release of its iPhone by only releasing the premium, more expensive pro models in the fall,
Starting point is 00:07:39 and delaying the standard iPhone model, in this case the iPhone 18, until the following spring, according to three people involved in the iPhone supply chain. The iPhone 18 series will include updated versions of Apple's thin iPhone, Pro, and Pro Max, along with the new foldable device. In spring 2027, Apple plans to release the standard iPhone 18 and a successor to the more budget-friendly iPhone 16E, the people said. Both of those models, which are based on older and less complicated designs will undergo manufacturing trials first in India as part of Apple's efforts to reduce its manufacturing risks in China. Two of the people said, the change to the iPhone's release window could make it easier for Apple to ramp-up production of an increasing number of different phones. By staggering the launch, Apple can reduce the need to deploy large numbers of manufacturing workers and equipment simultaneously, end quote.
Starting point is 00:08:33 Tether CEO, Paulo Arderino, has announced Tether AI, an open-source AI runtime that supports USDT and Bitcoin payments without a central point of failure. Quoting the block, Ardoino said the firm is working on an open-source AI runtime that aims to operate on any hardware or device and integrate with crypto payments via Tether's wallet development kit or WDK. Tether is the issuer of the largest stable coin by market capitalization, currently around $149 billion. In a post on X, Arduino detailed the vision for Tether AI, which he said was coming soon. A fully open-source AI runtime capable of adapting and evolving on any hardware and device. No API keys, no central point of failure, fully modular and composable.
Starting point is 00:09:19 WDK infused to enable USDT and Bitcoin payments, Arduino said, Tether AI tech will enable an unstoppable peer-to-peer network of billions of AI agents, end quote. This comes as AI-related discussions dominate the crypto sector. AI agents powered by LLMs are increasingly used to enable crypto payments and leverage natural language processing to analyze market trends and real-time data. Tether's AI project has its own website, Tether.A.I, which states that its product will also potentially integrate its peer-to-peer communication app, Keat, as well as other data tools. Tether has been expanding its reach into the world of artificial intelligence over the past few years.
Starting point is 00:09:59 In previous efforts to bolster its AI operations, Tether invested an undisclosed amount in the German data center operator Northern Data in September 2023. Two months later, Tether increased Northern Norton's debt financing to $610 million, among other endeavors, the block previously reported, end quote. Several Senate Democrats key to the passage of a forthcoming landmark stablecoin bill have withdrawn support for the bill, quote, as it currently stands. Quoting the block again, days before the Bipartisan Genius Act, guiding and establishing national innovation for U.S. Stable Coins, was set to hit the floor of the Senate. The future of the legislation has been thrown into question after nine Senate Democrats came out against the legislation in its current form. The group includes four senators who voted to advance the bill out of the Senate Banking Committee in March, according to Politico. A statement released by the group said,
Starting point is 00:10:59 The current version of the bill has, quote, numerous issues that must be addressed, namely adding stronger provisions on anti-money laundering, foreign issuers, national security, preserving the safety and soundness of our financial system and accountability for those who don't meet the acts requirements, end quote. Republican Senator Ben Hagerty, one of the bill's authors, emphasized the need for the legislation in response to the statement on X, We have a choice here, Haggerty wrote, move forward and make any remaining changes needed in a bipartisan way, or show that digital asset and crypto legislation remains a solely Republican issue, end quote. The bill would require stable coins to have 100% reserve backing with U.S. dollars and short-term treasuries or other similarly liquid assets, also monthly public disclosure of reserves and annual audits for issuers with more than $50 billion in market capitalization. The bill also lays out strict marketing standards, guidelines on, insolvency proceedings and other provisions. The bill will require 60 votes to pass the Senate.
Starting point is 00:11:56 With Republicans controlling only 43 seats, a bipartisan deal is a must. We're going to continue to work to improve the bill, Haggerty said, when it advanced out of committee. Axios previously reported that Senate Democrats wanted more provisions around national security and law enforcement to be added to the bill. The territorial battle over stablecoin legislation, both in the halls of Congress and between lobbyists for various firms, has escalated in recent weeks as two bills. The Genius Act in the Senate and the Stable Act in the House have begun advancing towards a floor vote. Yet Democrats have raised concerns over how the legislation will govern President Trump and his family's crypto business dealings, end quote. The biggest deep fake porn site on the internet, Mr. Deepfakes, says it is
Starting point is 00:12:43 shutting down permanently. Quoting in Gadget, a critical service provider has terminated service permanently. Data loss has made it impossible to continue operation. A note on the site reads, We will not be relaunching. Any website claiming this is fake. This domain will eventually expire, and we are not responsible for future use. This message will be removed around one week, end quote. As sites continued to crack down on non-consensual deepfake porn, Mr. Deepfakes became an open space for it. Users could upload videos and connect with creators to commission videos. People also used that as a way to collaborate on new techniques, share their methods, and provide datasets. All of that was with the goal of creating this non-consensual media, sometimes with a strong likeness to real people. The creator of Mr. Deepfakes is still technically
Starting point is 00:13:29 anonymous, however, German newspaper Der Spiegel reportedly tracked down one of the individuals behind it, a 36-year-old in Toronto. Governments across the world have been taking steps to make sexually explicit deepfakes illegal. Last week, the U.S. Congress passed a bill criminalizing the, quote, publication of non-consensual sexually exploitative images, including deepfakes. The UK has made multiple attempts in recent years to make it illegal to create sexually explicit deepfakes. currently it's illegal to share this content but not to produce it. In early 2024, the European Commission proposed new rules to criminalize sharing non-consensual intimate images, including deep fakes, end quote. Sources at the FTs say that any sphere, maker of that AI coding tool cursor,
Starting point is 00:14:18 raised $900 million at a $9 billion valuation up from $2.5 billion in valuation just back in January. This was led by Thrive with A16Z and a cell participating. Quote, Annesphere was founded in 2022 by a quartet of 20-somethings who met studying maths and computer science at the Massachusetts Institute of Technology. It was previously valued at $2.5 billion in January when it raised $105 million, also from Thrive and Andreessen Horowitz. The huge jump in Annesphere's price tag comes after annual recurring revenues grew quickly since its last funding round, rising to about $200 million in April to make it one of the fastest growing software companies ever. Curser has won millions of fans among computer programmers for its AI-powered software
Starting point is 00:15:00 development kit, which its creators say writes almost one billion lines of working code every day. By using natural language to tell the AI what to make instead of writing code by hand and auto-completing updates, it accelerates productivity for programmers one of the most in-demand skills in the tech industry. Despite competing with tools such as Microsoft's GitHub co-pilot, Curser has customers at tech companies including Stripe, OpenAI, and Spotify, according to its website, as well as prominent AI researchers such as Andre Carpathie. The former Tesla and OpenAI engineer coined the phrase vibe coding in February to describe an almost trans-like state of talking to cursor's AI to create software, quote, where you fully give in to the vibes, embrace exponentials, and
Starting point is 00:15:43 forget that the code even exists, end quote. Finally today from my fear of Silicon Valley losing its global dominance file. Remember, one of the things that I pointed out in my essay is that AI is already maybe showing us a world of post-Silicon Valley dominance. Well, according to Zeki, the 12-month rolling average of AI talent entering the U.S. in 2025 equals the number leaving the U.S. quoting semaphore, China's ascendancy has played a role. A recent paper from the Hoover Institution, A Policy Think Tank Flaggues. that some of the industry's most exciting recent advancements, namely Deepseek, were built by Chinese researchers who stayed put. In fact, more than half of the researchers listed on Deepseek's papers
Starting point is 00:16:34 never left China for school or work. Evidence that the country doesn't need Western influence to develop some of the smartest AI minds, the report says. Meanwhile, London is becoming an epicenter for AI safety boosted by the presence of Google Deep Mind. Europe and the Gulf states are doubling down on their talent retention efforts as countries like the UAE and Saudi Arabia build out their AI infrastructure and energy sector to support AI, according to Zeki, which provides data on AI talent. India, traditionally, an exporter of top tech talent, is gradually becoming a consumer of it as the country bolsters its national tech sector and immigration to the U.S. becomes more difficult, end quote. Nothing more for you today. Hope you had a great weekend. Talk to you
Starting point is 00:17:27 tomorrow.

There aren't comments yet for this episode. Click on any sentence in the transcript to leave a comment.