Uneasy Money: Is the Internet Breaking Because Bots Never Get Lazy?

A certificate authority's private key was the number 4 for over a year. Kain, Taylor, and Austin on why the internet's trust schemes are cracking.

========================================================

Thank you to our sponsor!

Put your crypto to work with Nexo: earn daily interest or borrow funds against your assets on one platform trusted by more than 10 million clients.

Find out more at⁠ Nexo⁠.

Geo-restrictions, eligibility and terms apply.

========================================================

Quick favor: We’re deciding what Unchained does next; new shows, stream times, what’s worth paying for.

⁠⁠⁠⁠Our listener survey⁠⁠⁠⁠ takes five minutes, it’s anonymous, and I read the write-in answers myself. Everyone who takes it can enter a drawing for a free year of Unchained Premium or Bits + Bips Premium. Open through Sunday, October 18.

— Laura

========================================================

For more than a year, the private key behind signatures from a certificate authority trusted across the internet was the number 4.

Taylor Monahan walks Kain Warwick and Austin Griffith through how eMudhra passed two audits with eight weak keys, and why revoking them now runs on an email thread between Google, Mozilla, and Apple. Kain argues it fits a pattern: schemes that assumed nobody would bother trying, now facing AI agents that never stop.

The hosts also cover two remote code execution bugs in PHP, Austin's $1 test that drew three competing theft transactions the moment it landed, papertrade's 1,000x leverage launch and its lose-to-earn token, and why DeepSeek keeps getting cheaper even as DHS bans it for government use. They close on Anthropic, and Kain's case that any frontier lab that turns cash-flow positive would be worth "infinity," a prospect he calls petrifying.

Hosts:

⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Kain Warwick⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ - Host of Uneasy Money and Founder of Infinex and Synthetix

⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Taylor Monahan⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠ - Co-host of Uneasy Money and Security Expert

⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠⁠Austin Griffith⁠⁠⁠⁠⁠ - Co-host of Uneasy Money and Builder Enablement at Ethereum Foundation

Timestamps

🎬 00:00 Intro

🌐 02:07 Why a burst of unrelated internet-breaking bugs landed in the same 48 hours

🔑 05:13 How a certificate authority's private key turned out to be the number 4

📧 17:47 Why revoking bad certificates runs on a literal email thread

🤖 22:52 Kain on why schemes built on human laziness are unraveling against AI

🐘 25:34 PHP to shell: two remote code execution bugs in the language behind the web

🛡️ 33:21 How Cloudflare is shielding unpatched PHP admin panels during the rollout

🎣 36:04 Austin's $1 test: how fast bots drained a weak Ethereum private key

💼 37:44 Nexo: Generate daily interest on your crypto or borrow funds against your assets at https://unchainedcrypto.com/go/nexo-podcast-yt

🪣 38:25 papertrade's 1,000x 'bucket shop' and the token you earn by losing

📚 48:55 The mechanism design lessons hidden under DeFi Summer's degeneracy

🐋 52:35 How DeepSeek keeps getting smarter while Kain's API bill fell to $3 a month

🏛️ 57:06 Why DHS banned DeepSeek and why Austin says local models are the safer bet

♾️ 01:05:13 Why Kain says Anthropic gives off SBF vibes and could be 'worth infinity'

🎯 01:14:23 The drained-key update: bots grabbed 10-digit keys, but 12 digits held Learn more about your ad choices. Visit megaphone.fm/adchoices