Spicy Hinges - Apple's 1st Foldable, GM Forward 2026, & PHP Vulnerabilities

Summary

Apple’s First Foldable iPhone

The panel discussed the iPhone Duo, a roughly $2,000 foldable iPhone that opens into a larger, tablet-like display. The Verge reviewer Allison Johnson found the format genuinely useful for tasks such as viewing a recipe alongside a shopping list, watching video, and reading documents. The hardware felt solid, though heavier and less carefree to use than a conventional phone.

Key trade-offs and early observations:

• Camera: Its main camera was described as a capable baseline iPhone camera, but not on par with the iPhone 18 Pro. Reviewers noticed some oversharpening, and the Duo lacks a telephoto camera; digital zoom was not a satisfying substitute.
• Authentication: It uses side-mounted Touch ID rather than Face ID. Users may need time to adjust, while unlocking with an Apple Watch can help.
• Durability: The hinge and folding screen raised questions. One reviewer’s accidental chili-powder exposure caused no immediate issue, but the panel also discussed early reports of screens developing cracks or white lines near the hinge. The scale and cause of those failures were unknown.
• Repairs: Apple published repair documentation, but replacing or handling the display’s nano-texture film sounded difficult. The reviewer recommended AppleCare or professional repair rather than attempting it at home.
• App support: Older apps could appear with black bars, while apps updated for the new OS could resize to fill the display. More thoroughly optimized apps offered layouts tailored to the Duo. Slack was cited as an example of an app that became more useful after an update, while Google Docs remained poorly suited to the inner screen.

Tips and early-use techniques discussed:

• Set a Shortcut to lock the phone when it is closed and no app is open.
• Enroll multiple fingers in Touch ID. One user found that registering the part of a finger nearer the palm could help with a grip-based unlock.
• Expect some trial and error with how the phone is opened and oriented, as well as with apps that have not yet been optimized.

The panel also briefly discussed reports of upcoming Mac hardware with touchscreens and potentially OLED displays. They questioned whether touch would add much to a traditional laptop and whether adapting macOS for touch could make its interface less comfortable for keyboard-and-mouse use.

GM’s Next-Generation EVs and Autonomous-Driving Plans

Sam Abuelsamid described GM’s GM Forward technology preview and its plans for future EVs:

• GM said its new lithium-manganese-rich (LMR) batteries had reached a cost and performance level that could allow the company to use them across its lineup, rather than relying on separate battery chemistries for different vehicle classes.
• The company plans to replace the many separate electronic control units found in current vehicles with a more centralized computing architecture. Higher-end models are expected to use Nvidia’s Thor chip, with the platform arriving in vehicles around 2028.
• GM is targeting unsupervised, hands-off and eyes-off highway driving, initially limited to highways and later expanding to other roads. Abuelsamid said GM’s proposed system would safely bring the vehicle to a stop if it reached its operating limits and the driver did not take control.

The panel emphasized that, as of the episode, there were no federal U.S. safety standards specifically governing assisted or automated driving. Some state laws treat the automated system as the driver when it is active, potentially placing liability on the system’s manufacturer. Tesla’s consumer “Full Self-Driving” system, by contrast, was described as supervised, leaving responsibility with the human driver.

A proposed NHTSA rule would use cyan lights to indicate that a vehicle is operating autonomously. Abuelsamid also described technologies that could help automated vehicles operate more safely, including vehicle-to-vehicle messaging and sensors at intersections that alert vehicles to hazards they cannot see around buildings. Systems such as HOS Alerts can also distribute warnings about approaching emergency vehicles, construction zones, and potentially hazardous road conditions.

The discussion of in-car technology noted that automakers may favor native infotainment systems over Apple CarPlay or Android Auto because they can integrate more closely with vehicle features, maps, charging, and driver-assistance systems. GM’s integration of Google Maps with Super Cruise was given as an example: the system can use map and lane guidance to help change lanes for an upcoming exit. A Spotify native in-car app on Audi vehicles was mentioned, though not explored in detail.

PHP Vulnerabilities and AI-Assisted Security Work

The panel examined emergency PHP fixes released on October 21 for two critical vulnerabilities that could allow remote code execution and server takeover without a login. The flaws were rated 9.2 out of 10 in severity, and the discussion stressed their potential reach because PHP supports major web platforms and was said to underpin a large share of websites.

The panel said an outside security audit had identified an early sign of a memory-limit issue in 2024, but disagreements over the fix delayed progress. OpenAI and Google-owned security firm Wiz later reported finding the flaws with AI assistance. AWS reportedly observed an attempted exploit on October 17, before the vulnerabilities were publicly disclosed and patched. Cloudflare added protective rules, while some services temporarily took systems offline to apply fixes.

The episode framed the incident as a warning about the web’s reliance on critical but underfunded open-source projects. The PHP project was described as having only one full-time employee, alongside contractors, despite the software’s widespread use.

Security guidance discussed: Administrators should update to a fixed PHP release. The episode listed versions 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and earlier were described as unsupported, so operators of older installations need to assess their own exposure. Users of managed hosting or WordPress.com were advised to confirm that their provider applied the fix.

AI Tools, Agents, and Security Concerns

The speakers shared examples of AI tools helping with coding, debugging, research, and reverse engineering—including identifying how a Bluetooth device communicates, fixing an older Mac application, and building a basic alternative to a scheduling service. They also warned that generated software can be insecure even when its creator or the AI says it is safe, and that agents handling personal data or taking actions on a user’s behalf introduce additional risks.

The guests expressed different levels of enthusiasm. Some viewed AI as a productivity tool that can extend an individual’s capabilities; others preferred to do tasks themselves or worried that saved time would simply be filled with more obligations. The discussion also raised concerns about privacy, job displacement, and the broader consequences of AI development.

Gaming, Xbox, and Digital Music

The panel discussed Xbox’s difficulties, including layoffs and concerns about the direction of the business, against a broader backdrop of high development costs and pressure on game studios. One view was that consoles are increasingly resembling locked-down PCs, with Steam hardware and PC gaming potentially becoming stronger alternatives. The guests also noted the tension between AI tools’ possible value to small game developers and resistance to AI within the gaming community.

The closing discussion covered the continued presence of the iTunes Store. Some major pop artists were reportedly using iTunes-exclusive releases to encourage purchases before later making music available on streaming services. The panel contrasted this with vinyl’s resurgence and discussed how digital purchases differ from owning physical media.

The episode also mentioned an ongoing case involving an OpenAI employee accused of recording a restricted conference room. Prosecutors reportedly raised possible ties to Saudi interests; the panel discussed the allegations and potential value of internal company information but treated the investigation as unresolved.

Reviews, Guides, and Practical Advice

• iPhone Duo review: Allison Johnson’s The Verge review covered the foldable’s usability, cameras, durability, Touch ID, and app support.
• Duo tips: Use multiple Touch ID registrations, consider a Shortcut to lock the phone when closed, and expect uneven app optimization during the early rollout.
• PHP security guidance: Update to a fixed version promptly; check with a hosting provider if updates are managed, and pay particular attention to unsupported older PHP installations.
• Car technology analysis: Sam Abuelsamid explained GM’s EV computing plans, autonomous-driving liability, and potential vehicle-to-vehicle and vehicle-to-infrastructure improvements.

Main Speakers and Sources

• Mikah Sargent — host
• Allison Johnson — The Verge; iPhone Duo reviewer
• Sam Abuelsamid — automotive analyst
• Glenn Fleishman — technology writer and publisher
• Other sources discussed: PHP project and its security team, OpenAI, Wiz, AWS, Cloudflare, NHTSA, GM, and The Verge reporting.