SED News: PHP’s Megabug, a Hidden Mic at OpenAI, and Dead AI Products
Episode
54 min
Read time
2 min
Topics
Investing, Startups, Fundraising & VC
AI-Generated Summary
Key Takeaways
- ✓PHP Vulnerability Scale: A remote code execution bug in PHP — affecting an estimated 70% of internet sites including WordPress and Wikipedia — required governments worldwide to take sites offline for emergency patching. Originally discovered in 2024 but dismissed as non-exploitable, AI tools from OpenAI and Google later demonstrated it was fully weaponizable without any user interaction.
- ✓AI Product Failure Mode — Platform Absorption: Standalone AI products built around a single feature consistently get absorbed by larger platforms. Vector database companies like Chroma, AI workflow tools like Relay, and audio-from-content platforms like Huxe all lost their market when Google, OpenAI, Spotify, and existing databases shipped equivalent features natively, making dedicated vendors redundant within 12–24 months.
- ✓AI Product Failure Mode — Cost Unsustainability: Video and generative AI products can collapse under their own usage costs before achieving commercial viability. OpenAI's Sora reportedly accumulated $15 million in compute costs in a single day from one user, while Character.ai burned $8–9 million monthly before shutting down in October, compounded by legal liability from harmful outputs to minors.
- ✓AI Product Failure Mode — Agent Displacement: Notion Mail launched April 2025 and shut down by September 22, 2025 — a five-month lifespan — after Notion reported that over half of users managed email entirely through agents without opening the inbox. Products building UI-based interfaces for tasks agents can handle autonomously face structural obsolescence before achieving meaningful user retention.
- ✓GPU Utilization Opportunity: Startup Flapping Airplanes raised $1 billion at a $6 billion valuation at Series A — one year after founding — by developing a "mega kernel" that runs memory-bound inference alongside compute-bound training simultaneously on a single GPU. This keeps the GPU continuously active rather than idle between tasks, addressing systemic waste in current AI infrastructure deployment.
What It Covers
Gregor Vand and Sean Falconer cover four major tech stories: a critical PHP remote code execution vulnerability affecting 70% of the internet, an OpenAI corporate espionage case involving a hidden recording device, and a structured analysis of how AI products fail, categorized across four distinct failure modes with real company examples.
Key Questions Answered
- •PHP Vulnerability Scale: A remote code execution bug in PHP — affecting an estimated 70% of internet sites including WordPress and Wikipedia — required governments worldwide to take sites offline for emergency patching. Originally discovered in 2024 but dismissed as non-exploitable, AI tools from OpenAI and Google later demonstrated it was fully weaponizable without any user interaction.
- •AI Product Failure Mode — Platform Absorption: Standalone AI products built around a single feature consistently get absorbed by larger platforms. Vector database companies like Chroma, AI workflow tools like Relay, and audio-from-content platforms like Huxe all lost their market when Google, OpenAI, Spotify, and existing databases shipped equivalent features natively, making dedicated vendors redundant within 12–24 months.
- •AI Product Failure Mode — Cost Unsustainability: Video and generative AI products can collapse under their own usage costs before achieving commercial viability. OpenAI's Sora reportedly accumulated $15 million in compute costs in a single day from one user, while Character.ai burned $8–9 million monthly before shutting down in October, compounded by legal liability from harmful outputs to minors.
- •AI Product Failure Mode — Agent Displacement: Notion Mail launched April 2025 and shut down by September 22, 2025 — a five-month lifespan — after Notion reported that over half of users managed email entirely through agents without opening the inbox. Products building UI-based interfaces for tasks agents can handle autonomously face structural obsolescence before achieving meaningful user retention.
- •GPU Utilization Opportunity: Startup Flapping Airplanes raised $1 billion at a $6 billion valuation at Series A — one year after founding — by developing a "mega kernel" that runs memory-bound inference alongside compute-bound training simultaneously on a single GPU. This keeps the GPU continuously active rather than idle between tasks, addressing systemic waste in current AI infrastructure deployment.
Notable Moment
A Saudi national working at OpenAI concealed a sophisticated recording device behind a conference room television, camouflaged inside toilet paper. OpenAI discovered it during a routine security sweep. Camera footage later identified the employee. The incident raises questions about whether AI lab security now requires national government-level coordination.
Episode Transcript
Hello, and welcome to SCD news. This is the monthly installment of software engineering daily, where myself, Gregor Vand, and Sean Falconer with me. Hey, everyone. Hey, Gregor. We take a spin through the tech headlines. We then do as a bigger topic in the middle and then we take a look at our favorites from hacker news that popped up through the month as well. Both of us have been pretty busy, think, since we last were doing SED news, but we did actually see each other in person as well in SF, which is very, very nice always to see you in the real world, not just on a video screen. Yeah. We went... I don't know how long it was. Well, over a year, having never met each other and then now three times in a couple quarters. So that's pretty good. Yeah. So yeah. I was over in SF for the super base conference, although we kinda call it a festival. I don't know, Sean, you popped your head in for a couple hours. Could you attest to being more of a festival than a conference? Is that... Yeah. I guess it kinda had a festival type feel to it, but you could probably also label it a conference, but Yeah. Definitely a good energy and vibe there. Sweet. Nice. Yeah. Managed to briefly meet Steve Wozniak, which was quite That's amazing. A bit of a pinch me moment. But actually just seeing him speak on stage was actually great as well. He was very funny. What was he talking about? It's funny the you know, we had our CEO and CTO interviewing him and they kept sort of trying to ask about AI and things and he kept sort of changing the topic back to really just his personal life and, and like stories from before bringing up things to do with Steve Jobs and took a dig at Oracle, which was obviously, we quite enjoyed that because he was saying how much he loved Postgres. So yeah, it was really just sort of whatever he felt like talking about. But that was kind of nice in a way. And it was actually his, he was doing this on his wedding anniversary. So and he has apparently wine that he has his name on or something. So they were like drinking the was wine on stage. It was kind of a nice way to round out the conference, I guess. Yeah, that sounds awesome. Yeah. Otherwise, I got to I'm sure a lot of people listening have done this already, but riding a waymo on the freeway, like an early access thing. Apparently, I kind of forgotten I'd signed up to early access on my last trip. Then I needed to take a car to the stripe office, which is down in a place called Oyster Point, which is sort of South San Francisco. And Waymo claimed it would do it for me. I was …
Get the full transcript (10,455 words) + summary by email — free
One-time email with the complete transcript and AI summary of this episode. No account needed.
One email, no spam. We’ll also show you what SignalCast does.
You just read a 3-minute summary of a 51-minute episode.
Get Software Engineering Daily summarized like this every Monday — plus up to 2 more podcasts, free.
Pick Your Podcasts — FreeKeep Reading
More from Software Engineering Daily
Demis Hassabis and the Race to Build AI with Sebastian Mallaby
Nov 3 · 65 min
Pivot
Trump TV, Meta’s Muse Charm, and Xi in D.C.
Sep 25
More from Software Engineering Daily
AI Regulation and What Every Tech Company Should Know
Oct 29 · 53 min
Pivot
WHCD Shooting Aftermath, Musk and Altman Face-Off, Spirit Airlines Bailout
Apr 28
Books, tools, and gear mentioned in this episode
SignalCast may earn commission on purchases via these links. As an Amazon Associate, SignalCast earns from qualifying purchases.
Products
by Notion
“Notion Mail launched April 2025 and shut down by September 22, 2025 — a five-month lifespan”
company
“Startup Flapping Airplanes raised $1 billion at a $6 billion valuation at Series A — one year after founding — by developing a "mega kernel" that runs memory-bound inference alongside compute-bound training simultaneously on a single GPU”
More from Software Engineering Daily
We summarize every new episode. Want them in your inbox?
Demis Hassabis and the Race to Build AI with Sebastian Mallaby
AI Regulation and What Every Tech Company Should Know
Managing AI Coding Costs at Scale
Blitzy and Autonomous Software Development for Enterprise
Physical AI at NVIDIA
Similar Episodes
Related episodes from other podcasts
Explore Related Topics
This podcast is featured in Best Cybersecurity Podcasts (2026) — ranked and reviewed with AI summaries.
Read this week's Investing & Markets Podcast Insights — cross-podcast analysis updated weekly.
You're clearly into Software Engineering Daily.
Every Monday, we deliver AI summaries of the latest episodes from Software Engineering Daily and 192+ other podcasts. Free for one show.
Start My Monday DigestNo credit card · Unsubscribe anytime