Show Notes
Wes, Scott, and CJ run through the week’s biggest web dev news: everyone’s hacking their TVs, VoidZero open-sourced its Void framework with Cloudflare deploys, OpenCode got hacked, and Anthropic built its own git replacement. Plus DeepSeek V4.1 Flash, Cloudflare’s security audit skill, Krea 3, a local LLM speed tester, and Killswitch, an esoteric language designed to break coding agents.
Show Notes
00:00 Welcome to Syntax!
00:44 CJ Hacks a Round Thrift Store Photo Frame
02:18 VoidZero Open Sources the Void Framework
06:58 Jev Adds Image Support to Its Decision API
11:18 Local Security Cameras: Frigate and Custom Wyze Firmware
17:41 LLM Speed: Try Local Models Before You Buy Hardware
21:00 Everyone Is Hacking Their TVs With Clean Your TV
24:51 Are These the Final Days of Hardware Hacking With LLMs?
29:24 Reverse Engineer Everything: Skills for Agentic Hacking
31:42 Hacking a Tonal and Building a DIY Digital Resistance Gym
37:24 Brought to you by Sentry.io
38:34 OpenCode Console Hacked: What Happened and Who’s Affected
41:31 Black Market API Tokens and Distillation Attacks
44:13 Should Everyone Get Access to Cyber Models?
47:48 Managing API Keys With Varlock and 1Password
48:45 Anthropic Builds Its Own Git Replacement
55:15 What Are We Losing in the Agentic Era?
01:04:26 Killswitch: A Programming Language Built to Break LLMs
01:06:53 Cheng Lou Turns JavaScript Code Into a Neural Net
01:09:30 Antfu’s Furigana Font for Reading Japanese
01:12:32 Guitoro: Strum a Guitar in the Browser
01:17:39 Playing Snake on Network Switch Lights
Hit us up on Socials!
Syntax: X Instagram Tiktok LinkedIn Threads
Wes: X Instagram Tiktok LinkedIn Threads
Scott: X Instagram Tiktok LinkedIn Threads
Randy: X Instagram YouTube Threads
More from Syntax - Tasty Web Development Treats
Scott and Wes talk with Adam Jacob about software factories: what they actually are, why they’re unique to each team, and how to build trust in agent-generated code. They dig into Swamp Club, black box testing, domain driven design, adversarial review for accessibility, and whether unit tests still earn their keep.
Deno is shutting down and the team is heading to Cloudflare — Scott, Wes, and CJ break down what that means for the runtime, JSR, and workerd. Plus OpenCode 2.0 on durable objects, TanStack Start 1.0, SubQ Snap, Gemini 4 Argon, and Wes’s accidental $50 photo frame movement.
Someone just clean-room ported seven Adobe apps to Rust, and Wes is shocked at how good it is. Scott and Wes break down what it gets right, what’s still missing, and why copying software is easy but inventing what comes next is the hard part.
Scott, Wes, and CJ break down the latest Pi updates, including durable long-running agents, Codemode, and MCP support, then debate whether pull requests are dead in favor of issues. Plus Supabase picks up Turso, Screen Studio 4 drops, JavaScript Composites bring value-based equality, and a stack of new AI models from Google, OpenAI, Cloudflare, and more.
Scott and Wes answer listener questions about what replaced blogging, what to do while your AI agent works, and who should pay for token costs. They also cover keeping agents from going off the rails, getting your team excited about AI, and staying motivated when AI takes the fun out of coding.