Clown Cast

Clown Cast

Poisoned Potions: When Code Dependencies Turn Evil

17 min · 3 de jun de 2026
Portada del episodio Poisoned Potions: When Code Dependencies Turn Evil

Descripción

A deep dive into software supply chain attacks—where a single compromised package can infiltrate thousands of projects through invisible dependency chains. Explore how npm and PyPI became the internet's most dangerous potion shops, from the left-pad collapse to the event-stream backdoor, and the emerging 'slopsquatting' threat where AI hallucinations become actual security vulnerabilities. 00:00 - The Potion Shop Metaphor: How Package Registries Work 02:30 - Dependency Trees: Why You're Installing 1500 Packages Without Knowing It 06:00 - The Left-Pad Incident: When 11 Lines of Code Broke the Internet 09:30 - The Event-Stream Backdoor: A Trojan Horse in Plain Sight 13:00 - Slopsquatting: AI-Generated Package Names as Attack Vectors 17:00 - Defense Strategies: Can You Trust Your Dependencies? This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

Comentarios

0

Sé la primera persona en comentar

¡Regístrate ahora y únete a la comunidad de Clown Cast!

Prueba gratis

Empieza 7 días de prueba

$99 / mes después de la prueba. · Cancela cuando quieras.

  • Podcasts solo en Podimo
  • 20 horas de audiolibros al mes
  • Podcast gratuitos

Todos los episodios

74 episodios

episode Poisoned Potions: When Code Dependencies Turn Evil artwork

Poisoned Potions: When Code Dependencies Turn Evil

A deep dive into software supply chain attacks—where a single compromised package can infiltrate thousands of projects through invisible dependency chains. Explore how npm and PyPI became the internet's most dangerous potion shops, from the left-pad collapse to the event-stream backdoor, and the emerging 'slopsquatting' threat where AI hallucinations become actual security vulnerabilities. 00:00 - The Potion Shop Metaphor: How Package Registries Work 02:30 - Dependency Trees: Why You're Installing 1500 Packages Without Knowing It 06:00 - The Left-Pad Incident: When 11 Lines of Code Broke the Internet 09:30 - The Event-Stream Backdoor: A Trojan Horse in Plain Sight 13:00 - Slopsquatting: AI-Generated Package Names as Attack Vectors 17:00 - Defense Strategies: Can You Trust Your Dependencies? This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

3 de jun de 202617 min
episode The Sleeping Beauty Effect: Why Masterpieces Flopped First artwork

The Sleeping Beauty Effect: Why Masterpieces Flopped First

The greatest art ever made—Blade Runner, The Shawshank Redemption, Arrested Development, Wu-Tang's Once Upon a Time in Shaolin—initially crashed and burned commercially. But here's the thesis: brilliant works fall into obscurity, then suddenly explode into recognition. A 2015 study of 22 million scientific papers found a pattern called the Sleeping Beauty Effect. We explore what wakes these sleeping masterpieces and why the market is consistently a terrible curator. Timestamps: 0:00 - Introduction: Masterpieces that the market rejected 2:30 - Commercial failures that became untouchable classics 5:45 - The Sleeping Beauty Effect: Academic research on forgotten brilliance 8:15 - What awakens sleeping works (technology, cultural shifts, the role of the "prince") 12:00 - Why time, not initial reception, determines artistic legacy This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

Ayer18 min
episode When Your Grocery Store Became an Ad Company artwork

When Your Grocery Store Became an Ad Company

Retail stores have quietly become advertising superpowers. We explore the 'third wave' of digital advertising—powered by the one thing that actually matters to advertisers: your purchase history. Walmart, Target, and Amazon aren't just selling you groceries; they're building a $165 billion ad empire on what's in your cart. 00:00 - Introduction and The Problem with Current Ads 01:45 - Wave 1: Search Advertising (Google's Intent Revolution) 03:20 - Wave 2: Social Advertising (Know Your Identity) 05:00 - Wave 3: Retail Media (Know What They Actually Bought) 07:30 - The Numbers: $60B in 2025, $71B Projected for 2026 10:15 - How Retail Media Actually Works Across Platforms 13:00 - Amazon, Walmart, Target: Building Media Companies Inside Stores 15:30 - Why This Matters and What's Coming Next This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

1 de jun de 202616 min
episode The Wizard's Colleges: When Nations Built Cyber Armies artwork

The Wizard's Colleges: When Nations Built Cyber Armies

From iPhone jailbreakers to state-sponsored cyber warfare: we explore how the world's biggest nations built hidden offensive cyber capabilities. Using D&D magic schools as a metaphor, we break down how the US, Russia, China, and Israel each specialize in different forms of digital attacks—and why there's almost no international rulebook stopping them. 00:00 - Recap: Teenage hackers and the iPhone jailbreak scene 02:30 - From kids to governments: The birth of cyber operations 04:15 - D&D wizard schools as a framework for understanding cyber tactics 07:00 - How each nation specializes in different attack types (evocation, divination, enchantment, illusion) 10:45 - The Tallin Manual: Why cyber warfare has no real rules This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

30 de may de 202616 min
episode From $500 to Six Figures: The Self-Publishing Income Reality artwork

From $500 to Six Figures: The Self-Publishing Income Reality

The self-publishing market is booming—growing 15-20% year-over-year with Amazon's KDP alone distributing $61.5 million monthly. But there's a brutal truth: the median indie author makes just $500/year while the top 10% rake in six figures. We break down the three "talent trees" of publishing economics: Kindle Unlimited's burst-damage strategy, wide distribution's tank build, and direct sales as your support class—plus the real P&L numbers that determine whether you'll ever make real money from your books. 00:00 - Introduction to indie author economics 00:45 - Amazon KDP market statistics and scale 02:30 - The three distribution model archetypes 05:15 - Kindle Unlimited strategy and page-read economics 10:00 - Wide distribution vs. exclusivity tradeoffs 13:20 - Direct sales, merchandising, and alternative revenue 15:45 - The brutal earnings reality and success patterns This podcast episode was fully generated by AI — research, script, voices, and production. Built with Claude, Piper TTS, and automated pipeline tooling.

29 de may de 202618 min