Chaos Lever Podcast

🔥 The world may be on fire, but at least we’ve got s’mores and dark chocolate (just not 98% cacao, thank you). In this episode, we dunk on tech billionaires with the finesse of a flaming marshmallow and explore the dramatic saga of WordPress—from its humble GPL beginnings to the ego-fueled chaos of its current overlord. Yes, Matt Mullenweg, we’re talking about you.

🧩 We dive into how WordPress became the most-used CMS in the world, why Matt Mullenweg keeps lighting metaphorical fires, and what the Linux Foundation is doing to put out the flames. Spoiler alert: it involves decentralizing plugin updates so Matt can’t go full dictator mode again. Also, there's jazz. Because apparently that’s part of the lore.

🤡 There’s a feud with WP Engine, a cease and desist, plugin repos being snatched like toys at daycare, and even a checkbox to swear fealty before accessing your plugins. Welcome to the snark-fueled, historically grounded meltdown that is modern open source governance. Or, as we like to call it: Thursday.

📎 LINKS
Weblog - https://en.wikipedia.org/wiki/Blog
WordPress Drama Explained - https://techcrunch.com/2025/01/12/wordpress-vs-wp-engine-drama-explained/
Matt Makes Cancer Claim - https://www.youtube.com/watch?v=fnI-QcVSwMU
Matt Mullenweg Wikipedia - https://en.wikipedia.org/wiki/Matt_Mullenweg
WordPress Org Chart - https://make.wordpress.org/core/handbook/about/organization/
WordPress Book - https://wordpress.org/book/table-of-contents/
WordPress Foundation - https://wordpressfoundation.org/trademark-policy/

• (00:00) - Intro and Marshmallow Prep

Welcome to Tech News of the Week! Here's what caught our eye in the past seven days:

Scammers are out in full force this summer with hyper-detailed (but totally fake) DMV texts warning about traffic violations. Chris reads one of these gloriously absurd attempts to scare Pennsylvanians into paying fake fines. Spoiler: no, you're not going to lose your license on June 3rd. But you might lose your dignity if you fall for it. 🚨 Link: https://www.ic3.gov/PSA/2024/PSA240412

OpenAI and the New York Times are still duking it out in court, and the judge just ordered OpenAI to keep a copy of all prompts and responses. Forever. This affects non-enterprise users, and yes, this includes your spicy GPT history. If you’ve been using AI to cheat on word games, you might want to consider switching to Claude. 🔍 Link: https://openai.com/index/response-to-nyt-data-demands/

Microsoft thinks you need convenience more than security, which is why apps can access your entire OneDrive if you click “yes” just once. Handy, right? Until ChatGPT or some shady lookalike app decides to rifle through your documents like a nosy raccoon. 🗂️ Link: https://www.techspot.com/news/108157-microsoft-file-picker-flaw-grants-full-onedrive-access.html

And speaking of old, guess who’s still rocking floppy disks and Windows 95? That’s right, the FAA. Because what better way to run national aviation infrastructure than with 30-year-old tech and hardware that needs 13 disks to install Windows. ✈️ Link: https://arstechnica.com/information-technology/2025/06/faa-to-retire-floppy-disks-and-windows-95-amid-air-traffic-control-overhaul/

• (00:00) - Intro

Welcome back, fellow humans (and bots in disguise)! This week on Chaos Lever, Chris and Ned dive into the dusty archives and slap us with a two-by-four of cybersecurity déjà vu. We’re talking legendary hacks that should have taught us better—and yet, here we are. From Emacs-enabled espionage in 1986 to Equifax’s honor-system security policies, it's a masterclass in how not to protect your data.

🧠 Lessons? Sure. But mostly it's about how we never learn them. We dissect what really caused these breaches—not slick zero-days, but plain old negligence and a fondness for not patching things. Also featured: expired SSL certs, trust as a security model, and how managing your asset inventory is more crucial than ever.

💥 Oh, and Ned tried to do a handstand for a cloud video and bled. Not relevant to cybersecurity, but 100% relevant to the Chaos Lever experience. Stick around for reenactments, rants, and ruminations on how saying “I accept the risk” is not a security policy.

🔗 LINKS
Apache Struts bug: https://blog.talosintelligence.com/apache-0-day-exploited/
Nova episode about the 1986 hack: https://archive.org/details/The_KGB_The_Computer_and_Me_1990
Senate investigation into Equifax: https://www.hsgac.senate.gov/wp-content/uploads/imo/media/doc/FINAL%20Equifax%20Report.pdf
CVE system creation by MITRE: https://www.cve.org/Resources/General/Towards-a-Common-Enumeration-of-Vulnerabilities.pdf

Chaos is inevitable—especially on Patch Tuesday. This week, Chris and I dive into four juicy stories that highlight just how strange, scary, and downright ridiculous the world of tech can be. Buckle up.

🪟 Microsoft is now rolling out a Windows Update framework for third-party apps. That’s right—your janky software updater might get replaced with a system that actually works… or works too well. Imagine every random app on your PC suddenly deciding it's update time. Will this be a blessing or just another reboot roulette? https://techcommunity.microsoft.com/blog/windows-itpro-blog/introducing-a-unified-future-for-app-updates-on-windows/4416354

🧮 NIST and CISA want to make vulnerability scoring suck less. Enter LEV—Likely Exploited Vulnerabilities. It's a new system meant to bridge the gap between CVSS severity and the real-world exploitability of threats. Does it work? No clue yet. Is it better than sifting through 10,000 false alarms? Almost certainly. https://www.securityweek.com/vulnerability-exploitation-probability-metric-proposed-by-nist-cisa-researchers/

📡 ASUS routers have joined a new botnet called "AyySSHush" (seriously?). Hackers are hijacking popular ASUS models, disabling security features, and creating SSH backdoors that laugh in the face of firmware updates. Pro tip: factory reset your router, and maybe stop exposing your home network to the internet like it’s 1999. https://www.theregister.com/2025/05/29/8000_asus_routers_popped_in/

🛡️ Microsoft Defender got punked by a tool called DefendNot. It tricks Windows into thinking a different antivirus is running, which causes Defender to voluntarily shut itself down. Hilarious. Terrifying. Mostly hilarious. Defender can now detect it, but still—nice one, internet. https://www.bleepingcomputer.com/news/microsoft/new-defendnot-tool-tricks-windows-into-disabling-microsoft-defender/

What happens when a Google engineer thinks his chatbot has developed a soul? Three years ago, we covered the LaMDA saga, and now it's back—because someone forgot to turn off the AI. In this rebroadcast episode, Chris and Ned re-examine the wild story of Blake Lemoyne, who believed his creation had achieved sentience. It... uh, didn't.

🤖 The duo digs deep into what AI really is, why self-awareness isn't a prerequisite, and how anthropomorphizing code gets us into philosophical hot water. They also break down the Turing Test, IBM’s thoughts on AGI, and why AI in a self-driving car doesn’t need a conscience—it needs to not crash.

🧠 Come for the snark, stay for the thought-provoking discussion about consciousness, ethics, and the real role of AI in society. Also, IKEA lamps. And a chatbot that maybe just wanted to talk.

🔗 LINKS
- A Google engineer has been making some wild claims about a chat bot he was working on
- How easy it is to make people get emotional about inanimate objects such as an IKEA lamp
- Trying to find a way to describe AI that includes self-awareness
- The interview that Blake and co did with LaMDA
- There is a website called DALL-E mini
- In 2019 some researchers tried to get AI to invent a sport

Chris and Ned are joined this week by Colin Lacy, a senior software engineer at Cisco, recovering architect, and food photographer in a past life—yes, really. What starts as a detour into food photography quickly becomes a deep dive into everything wrong with technical interviews in tech today. From debugging Java on paper to AI in assessments, Colin doesn’t hold back.

🛠️ Colin unpacks his hiring experiences on both sides of the table, exposing the absurdity of algorithm-heavy interviews and advocating for real-world, job-relevant assessments. The gang questions the value of generic coding challenges and highlights how companies could better reflect day-to-day work in the interview process.

🤖 They also tackle the growing influence of AI tools in coding and why pretending they don’t exist in interviews is just plain dumb. Plus: Mount Fuji gets moved, debugging becomes a pencil sport, and someone finally says it—Java might be the actual problem.

LINKS:
🔗 Colin J Lacy on LinkedIn: https://www.linkedin.com/in/colinjlacy/
🔗 Colin J Codes a Lot on YouTube: https://www.youtube.com/@colinjcodesalot⁩  

Another week, more tech news chaos. This week:

🧠 Students are getting salty over professors using ChatGPT while banning it in their own assignments. One Northwestern University student even tried to get a refund over it. Nice try Margot. https://fortune.com/2025/05/15/chatgpt-openai-northeastern-college-student-tuition-fees-back-catching-professor/

💸 Microsoft posted a whopping $70.1B in revenue for Q3 and still decided to lay off 6,000 employees. Record profits and layoffs- because why not? https://www.cnbc.com/2025/05/13/microsoft-is-cutting-3percent-of-workers-across-the-software-company.html

🦠 RVTools, the beloved free VMware infrastructure tool, got hit with Bumblebee malware. Yes, from the official site. No, you shouldn’t have trusted that download. https://zerodaylabs.net/rvtools-bumblebee-malware/

🔓 Intel just can't shake Specter. New vulnerabilities—Branch Privilege Injection and Training Solo—have popped up, reminding us that Intel CPUs are still as leaky as ever. https://thehackernews.com/2025/05/researchers-expose-new-intel-cpu-flaws.html

🎙️ In this episode of Chaos Lever, Chris and Ned dive deep into the murky waters of IT Certifications. Are they still relevant? Are they just money grabs? Or do they actually help you land that dream tech job? The snark is strong in this one as they discuss the good, the bad, and the brain dumps that come with navigating the world of certifications.

🧠 The conversation also veers into the history of certifications, from guilds and trades in the 1500s to the very first IT cert in 1978. Plus, there's plenty of shade thrown at Pearson Vue testing centers and the absurdity of partner status requirements. Spoiler: not everyone plays fair, and Ned may or may not confess to a few things.

🤔 But is it all just corporate gatekeeping dressed up as "skill validation"? The guys talk about the real value of certs, whether vendor-specific knowledge locks you into bad habits, and if your best path to a job might just be... social engineering? Pour a drink and get ready for a wild ride.

🔗 LINKS
🔗 The History of IT Certification | triOS College: https://wwwlive.trios.com/blog/the-history-of-it-certification/
🔗 A Brief History of Certification - TestOut Continuing Education: https://testoutce.com/blogs/it-insights-blog/160401479-a-brief-history-of-certification
🔗 History of IT Certification: https://jasoneckert.github.io/myblog/history-of-it-certification
🔗 History of Cybersecurity Certifications - Alpine Security: https://www.alpinesecurity.com/blog/history-of-cybersecurity-certifications/
🔗 The Evolution of DevOps Certifications: Trends and Predictions: https://www.linkedin.com/pulse/evolution-devops-certifications-trends-predictions-msqoc
🔗 CompTIA - Wikipedia: https://en.wikipedia.org/wiki/CompTIA

Welcome back to Tech News of the Week! Today, we're diving into some of the most interesting stories shaking up the tech world right now.

📰 Wikipedia vs. the UK Government: Wikipedia is going head-to-head with the British government over the newly passed Online Safety Bill. This massive 250-page legislation aims to increase online safety but at the cost of privacy and censorship. Wikipedia is pushing back, saying the requirements for volunteer editor verification will kill open contributions, especially in politically sensitive areas. Will this be the end of anonymous editing? https://www.bbc.com/news/articles/c62j2gr8866o

⚠️ Broadcom Says Goodbye to Perpetual VMware Licenses: Broadcom has officially killed off perpetual licenses for VMware products like ESXI and vSphere, opting instead for subscription-based models. If you're still clinging to your old licenses, be prepared for some aggressive cease-and-desist letters—Broadcom's cracking down hard. Looks like Proxmox and Nutanix just got a big boost. https://arstechnica.com/gadgets/2025/05/broadcom-sends-cease-and-desist-letters-to-subscription-less-vmware-users/

👓 Apple Developing Custom Chips for Smart Glasses: Apple is reportedly pushing forward with its smart glasses project, building custom chips designed specifically for AR features and multiple cameras. Rumors are swirling that there will be both premium AR-capable glasses and a more affordable version that pairs with your iPhone. Ready for a new wave of wearable tech? https://www.bloomberg.com/news/articles/2025-05-08/apple-is-developing-specialized-chips-for-glasses-new-macs-and-ai-servers

📎 Clippy is Back! As an LLM, No Less: Developer Felix Riceberg has brought back Clippy in the most 2025 way possible—an Electron app running local LLM models. Now you can chat with Clippy powered by modern AI right on your desktop, complete with that iconic Windows '98 aesthetic. It's nostalgia and cutting-edge tech, all rolled into one. https://felixrieseberg.github.io/clippy/#window-about

In this episode, Ned and Chris dive headfirst into the chaotic world of technical interviews. From absurd coding tests to multi-hour marathons that seem more like hazing rituals, they break down just how broken the hiring process is in tech. Plus, you'll hear the incredible (and incredibly dystopian) story of Roy Lee, the college sophomore who turned cheating on interviews into a full-blown business. Yes, really.

Ned and Chris also swap war stories from their own adventures in the technical trenches—both as interviewers and interviewees. To the surprise of no one, none of it makes much sense. From over-the-top whiteboard challenges to the baffling art of "customer obsession," the duo peels back the layers of nonsense that have somehow become the norm. And if you’ve ever wondered why the horse names at the Kentucky Derby are so ridiculously serious, Chris has a plan that involves Sparkle's McTwinklefeet.

So grab your favorite caffeinated beverage (and maybe a nap), and get ready to laugh, cringe, and possibly reconsider your career choices. Because in the world of tech interviews, logic is optional, and absurdity is practically a requirement.

LINKS
🔗Columbia student starts cheating as a service: https://techcrunch.com/2025/04/21/columbia-student-suspended-over-interview-cheating-tool-raises-5-3m-to-cheat-on-everything/
🔗Tech interviews have always been broken: https://medium.com/@evnowandforever/f-you-i-quit-hiring-is-broken-bb8f3a48d324#.o0bqsq8a5