Show Notes
Most modern hacks aren’t happening because of genius attackers…
They’re happening because of simple decisions developers keep making.
In this episode of Shop Talk, Dave and Glen break down:
Why third-party scripts are still one of the biggest risks on the web How modern dev stacks are increasing complexity (and attack surface) Whether AI is helping developers… or making things worse What actually separates a good developer in 2026
And as always — we’re answering real questions from viewers.
If you’ve ever wondered: “Why does this keep happening?”
…this episode is for you.
Question of the Week: Why are we still linking to code we don’t control?
📺 Shop Talk is where we dig into your questions, ideas, and opinions about software, systems, and the industry.
Leave your questions in the comments for the next episode.
00:00 - Start 00:18 - Hey I’m Dave 00:40 - It ticks me off every time I see a website linking to third party script files on a server they do not control. 02:43 - Dependencies, control, and attack surface 04:50 - Will we get to a point of eliminating the ability to run scripts? 06:02 - What does that say about control over these systems? 09:29 - Are we trusting systems too much? 10:44 - If you must use third-party scripts, what’s the right way to do it safely? 12:27 - Tooling, abstraction, and complexity 13:17 - Because XMLHttpRequest is too hard for people? 13:58 - What are we actually paying for now — complexity or value? 15:00 - Why does this guy have a VW shirt? 16:52 - Understanding vs generation 17:16 - Using AI to generate code… does that mean fewer developers actually understand what they’re building? 18:04 - If AI is just aggregating existing knowledge… is it actually creating anything new? 18:57 - AI is a large percent smoke & mirrors… 20:52 - Is it possible Claude is leaking itself on purpose? 21:28 - Ownership, testing, and risk 22:10 - If developers even accidentally read leaked code… can that affect their ability to work legally in the future? 22:39 - How do you test the restore? 23:55 - What matters for developers now 26:25 - Windows 11 is malware that installs itself despite user wishes… 27:11 - I’m rather enjoying using AI to pump out code and never having to hear another developer tell me how they are the best… 27:40 - Human side of technology 30:25 - Did wanting better hardware back then actually make you a better programmer? 30:57 - There used to be an app called The Simpsonizer… I guess AI can do that now… 32:53 - Are we losing something creative now that AI can do everything instantly? 36:20 - The Friendly Coder…
More from Dave’s Garage: Shop Talk
What would 1996 Dave think of rebuilding Task Manager with AI? Dave and Glen celebrate 100 episodes of Shop Talk with Windows stories, retro computing, fresh viewer questions, and a look at the community behind the show.Across the first 99 episodes, our comment archive contains more than 23,000 comments. We recognize some familiar contributors, revisit the rebuilt Task Manager episode’s response, and share the most-liked comment in the archive.Then it’s back to your questions: how overlays helped programs fit into limited memory, porting Colossal Cave to a PDP-11, getting started with AI, checking AI-generated code, and using AI for business strategy.Plus: a difficult day at Microsoft, whether Spy++ deserves a modern makeover, TMOG follow-ups, missing hard-drive activity lights, and Deluxe Asteroids.Thank you to everyone who has watched, commented, and kept the conversation going.
Windows war stories meet AI-assisted retro computing in this week’s Shop Talk. Dave and Glen explore AI development on the PDP-11, how they prompt and review generated code, and what older computers can still teach us.Dave discusses improving top for BSD, compiler changes for ksh, and getting Samba running on a 16-bit machine. Viewer questions cover detailed specifications, native apps versus Electron, ownership of AI-generated code, and improving PDP Gary.We also revisit Microsoft Bob’s connection to the Windows XP disc, instant shutdown shortcuts, and a CHKDSK job that could run for days. Plus: TMOG memory usage and temperature graphs, lessons from the TRS-80, Windows 3.1 on modern hardware, and Tempest with a joystick.
PDP Gary has a personality—but how did Dave define it? This week on Shop Talk, Dave and Glen start with Gary, then explore Dave’s recent work using AI on BSD, the PDP kernel, and its peripherals.
What happens when AI stops being a useful tool and starts becoming a crutch?
Can autonomous AI agents cause serious harm without being conscious, sentient or malicious?