Axios Hack… Can You Trust It? (And Why We Still Want Things That Make No Sense)
Dave’s Garage: Shop TalkShow Notes
A trusted tool gets compromised… and it raises a bigger question: why do we trust anything at all?
The Axios npm hack wasn’t just another security incident — it was a reminder of how much trust we place in systems we don’t fully understand.
In this episode of Shop Talk, we start with the Axios supply chain attack and then dig into something deeper: why we trust things that “seem right,” even when they aren’t — from software to backups to classic cars.
This show is driven by real viewer questions from Dave’s Garage and Shop Talk on Dave’s Attic — especially the ones with question marks.
Topics in this episode:
The Axios npm compromise and what actually happened Why “working” systems often fail when it matters Trusting the cloud vs owning your data AI that looks right… but isn’t Why we still want things that make no logical sense
If you enjoy thoughtful engineering discussions, debugging philosophy, and real-world systems thinking — this is Shop Talk.
00:00 Intro
07:09 SYSTEMS — When “It Works” Isn’t True 07:50 Purpose vs Results 08:26 Notifications ≠ Success 08:44 Schrödinger’s Backup 09:11 Restore Failure Reality 10:35 Never Trust the Cloud
11:04 TRUST — Who Controls Your Data? 11:48 Data Ownership Risk 12:22 When the Cloud Fails
13:02 AI SLOP 15:58 AI Almost Gets It Right 17:18 AI Rewriting AI Code 20:28 Vibe Coding? 21:53 WTF Are Those Diagrams?
27:33 QOTW 27:37 Do They Make Sense? 28:08 Where’s the Walkaround? 30:13 Maybe Part 2? 31:21 Geo-location Reveal? 32:21 Today’s Equivalent? 34:21 Legacy in 50 Years? 36:53 No Brazil Reference?
More from Dave’s Garage: Shop Talk
What would 1996 Dave think of rebuilding Task Manager with AI? Dave and Glen celebrate 100 episodes of Shop Talk with Windows stories, retro computing, fresh viewer questions, and a look at the community behind the show.Across the first 99 episodes, our comment archive contains more than 23,000 comments. We recognize some familiar contributors, revisit the rebuilt Task Manager episode’s response, and share the most-liked comment in the archive.Then it’s back to your questions: how overlays helped programs fit into limited memory, porting Colossal Cave to a PDP-11, getting started with AI, checking AI-generated code, and using AI for business strategy.Plus: a difficult day at Microsoft, whether Spy++ deserves a modern makeover, TMOG follow-ups, missing hard-drive activity lights, and Deluxe Asteroids.Thank you to everyone who has watched, commented, and kept the conversation going.
Windows war stories meet AI-assisted retro computing in this week’s Shop Talk. Dave and Glen explore AI development on the PDP-11, how they prompt and review generated code, and what older computers can still teach us.Dave discusses improving top for BSD, compiler changes for ksh, and getting Samba running on a 16-bit machine. Viewer questions cover detailed specifications, native apps versus Electron, ownership of AI-generated code, and improving PDP Gary.We also revisit Microsoft Bob’s connection to the Windows XP disc, instant shutdown shortcuts, and a CHKDSK job that could run for days. Plus: TMOG memory usage and temperature graphs, lessons from the TRS-80, Windows 3.1 on modern hardware, and Tempest with a joystick.
PDP Gary has a personality—but how did Dave define it? This week on Shop Talk, Dave and Glen start with Gary, then explore Dave’s recent work using AI on BSD, the PDP kernel, and its peripherals.
What happens when AI stops being a useful tool and starts becoming a crutch?
Can autonomous AI agents cause serious harm without being conscious, sentient or malicious?