Latest / Connecting the Dots / GitHub Security Breach, Gemini 3.5 Flash Launch, And AI Model Pricing Shifts
Transcript
- 0:00Today's tech news moves fast, but understanding
- 0:03it shouldn't be hard. That's why Snarfle Solutions
- 0:06Group brings you Connecting the Dots, where we
- 0:09break down what's happening in tech and why it
- 0:11matters to you. Now, let's dive in with your
- 0:14hosts. Imagine finding out that the core software
- 0:19running like... 90 % of the Fortune 100 was just
- 0:23quietly breached. Right, and the craziest part
- 0:25is it wasn't even the work of some, you know,
- 0:28ultra -sophisticated hacking syndicate. Exactly.
- 0:30No million -dollar firewall is being dispatched.
- 0:32It literally happened just because someone somewhere
- 0:36wanted a slightly more convenient browser tool
- 0:39and just clicked install. Yeah, just trying to
- 0:43save a few seconds. Today, we are unpacking the
- 0:46true cost of our digital convenience, plus the
- 0:49arrival of Google's new era of AI interns. And,
- 0:52of course, the exhausting reality of what people
- 0:54are calling the zombie internet. Welcome to Connecting
- 0:56the Dots, broadcasting straight from Snarfle
- 0:58Solutions Group in Sacramento, California. I'm
- 1:01Alex. And I'm Morgan. And today is Wednesday,
- 1:03May 20, 2026. We've got a really packed deep
- 1:07dive into the source material today. But before
- 1:10we get into the tech, let's get you caught up
- 1:12with your morning star updates. Always a good
- 1:14place to start. Looking out the window here in
- 1:16Sacramento, it is a gorgeous sunny 93 degrees
- 1:18with just a really light like one to five mile
- 1:21per hour breeze. Nice. Yeah, but nationally,
- 1:25the map looks quite a bit more turbulent. There
- 1:28are actually 400 active weather alerts across
- 1:31the US right now. Wow, 400. Yeah, 400. So depending
- 1:35on where you are tuning in from today, please
- 1:37stay safe and, you know, keep an eye on your
- 1:40local advisories. Definitely. And looking over
- 1:43the financial markets, it was a pretty bumpy
- 1:45ride to close out Tuesday, the Dow closed down
- 1:48about 332 points. Ouch. Yeah. And the S &P 500
- 1:52also took a slight dip, dropping by, I think,
- 1:5422 points. Right. But hey, if you happen to be
- 1:57holding crypto, you're probably having a much
- 1:59better morning. Oh, for sure. Bitcoin is having
- 2:01a really solid day. It's up over $580 to close
- 2:05just above $77 ,340. Not bad at all. And moving
- 2:10over to sports, it was kind of a mixed bag for
- 2:12our local Northern California fans. The Oakland
- 2:14A's absolutely crushed the Angels 14 -6. Nice
- 2:17win for them. Yeah. But on the other side of
- 2:19the bay, the Giants dropped their game to the
- 2:21Diamondbacks 3 -5. Yeah, tough break. And for
- 2:24the Hoops fans, the Kings are actually resting
- 2:26today, so no game on the schedule. Well, which
- 2:28gives us plenty of time to focus on our mission
- 2:30here at Connecting the Dots. Because every day,
- 2:33our goal is to break down complex tech news and
- 2:36explore its everyday impact on, well... You working
- 2:39professionals, families, completely free of the
- 2:43dense jargon. Let's unpack this. So I want you
- 3:05to think about the last time you were working
- 3:07on your computer. You probably needed like a
- 3:10quick tool to format a document or maybe block
- 3:13some annoying pop -up ads, right? Or like manage
- 3:16a PDF or something. Exactly. You found a little
- 3:18browser extension or an app plug -in and you
- 3:20just absentmindedly clicked install. Guilty as
- 3:23charged. Right. I mean, you didn't read the terms
- 3:25of service. You certainly didn't like audit the
- 3:27developer's background. Nobody has time for that.
- 3:30No, you just wanted the immediate convenience
- 3:31to finish whatever you were doing. We all do
- 3:33it. It's basically the ultimate digital temptation.
- 3:36We willingly trade a little bit of security for
- 3:40a lot of immediate utility. And most of the time,
- 3:43nothing bad happens, which just reinforces that
- 3:45habit. Well, that exact human impulse just caused
- 3:48a massive, massive headache for GitHub. Yeah,
- 3:51it really did. And for the listener who might
- 3:53not be a developer, GitHub is basically the foundational
- 3:56library for modern software. And they just confirmed
- 3:59that roughly 3 ,800 of their internal repositories
- 4:03were breached. It's just a staggering number.
- 4:06And it happened because a single employee installed
- 4:09a malicious, trojanized extension for VS Code.
- 4:12Which is wild. And let's break down the mechanics
- 4:15of how that actually works because it really
- 4:17is fascinating. Please do. So VS Code Visual
- 4:19Studio Code is this massively popular text editor
- 4:23that programmers use to write software. And just
- 4:26like the regular web browser you use every day,
- 4:28it has this huge marketplace where developers
- 4:31can download extensions. Right, to add new features
- 4:33and stuff. Exactly. Maybe they want a tool that
- 4:36color -codes their text or, you know, an extension
- 4:39that autocompletes repetitive typing to make
- 4:42their life easier. Makes sense. But in this specific
- 4:44case, the extension that the employee downloaded
- 4:47was poisoned. It had a Trojan horse in it. See,
- 4:50I look at this and my mind immediately goes to,
- 4:53like, a physical analogy. Oh, I love your analogies.
- 4:56Let's hear it. Okay. So imagine a high -security
- 4:59bank vault. You've got the biometric scanners.
- 5:02armed guards, foot thick steel doors, you know,
- 5:06the whole nine yards. Totally impenetrable. Right.
- 5:08And this vault doesn't get compromised because
- 5:10someone blew the doors off with dynamite. It
- 5:13gets compromised because a bank teller bought
- 5:15a shiny new desk plant from some stranger on
- 5:18the street, walked it right past the guards,
- 5:20set it on their desk inside the vault. And guess
- 5:22what? The plant had a microphone hidden in the
- 5:24dirt. Oh, man, that is so spot on. The defenses
- 5:27were looking outward, not inward at what the
- 5:30employees were carrying inside. That paints a
- 5:32really clear picture of the supply chain vulnerability
- 5:35here. Because when an employee installs a tool
- 5:38inside their environment, that tool inherits
- 5:42certain permissions. Right. It gets their access.
- 5:44Exactly. If that tool is malicious, the hacker
- 5:47doesn't need to actually break into GitHub. They
- 5:49just ride the coattails of the employee who already
- 5:51has the keys. That is terrifying. And the scale
- 5:54of the fallout is what makes this so critical.
- 5:57Like you mentioned, GitHub isn't just a regular
- 5:58tech company. It's used by 90 % of the Fortune
- 6:01100. It's where the biggest companies in the
- 6:04world store their private code. Now GitHub has
- 6:07officially stated that they don't have any evidence
- 6:10that customer data stored outside of those specific
- 6:14internal repos has been impacted. Which is a
- 6:17relief, I guess. Yeah, they caught the breach,
- 6:19they removed the malicious extension, isolated
- 6:21the device, and started their response protocols.
- 6:24But I mean, the damage to those 3 ,800 internal
- 6:27repositories is done. The desk plant was already
- 6:30inside the vault. Yeah, the microphone was already
- 6:32recording. And the group claiming responsibility
- 6:35for planting that microphone is a hacker group
- 6:37called Team PCP. Right, Team PCP. Yeah, they
- 6:42recently posted on this cybercrime forum called
- 6:44Breached, claiming they have access to GitHub
- 6:47source code along with thousands of repositories
- 6:50of private code. The ransom note they posted,
- 6:53though, is what I find so bizarre. Oh, it's weird.
- 6:55It's incredibly casual. They're asking for 50
- 6:57grand for the data, but they explicitly state
- 6:59to the forum like, this is not a ransom. We do
- 7:02not care about extorting GitHub. They're just
- 7:05throwing it up for auction. Literally optioning
- 7:07it to the highest bidder on the dark web. They
- 7:09actually wrote, it looks like our retirement
- 7:12is soon, so if no buyer is found, we will leak
- 7:14it free. The casual tone is just chilling, but
- 7:17it reveals a really calculated strategy. Hackers
- 7:19know that targeting the developer platforms directly
- 7:22is, well, it's highly efficient. Yeah, why hack
- 7:25the user when you can hack the tool, right? Exactly.
- 7:28If they compromise the building blocks that the
- 7:31engineers use, the code editors, the package
- 7:33managers, they bypass the end user entirely.
- 7:36So bringing this back to you, the listener, if
- 7:39you are a working professional or just trying
- 7:41to manage your family's digital footprint, The
- 7:43takeaway here is pretty stark. The weakest link
- 7:46in digital security is rarely the complicated
- 7:49backend code. No, not at all. The weakest link
- 7:52is human convenience. It really demands a shift
- 7:55in how we evaluate the tools we download. We
- 7:57have to start treating plugins and extensions
- 8:00with the exact same skepticism that we apply
- 8:03to suspicious email attachment from an unknown
- 8:06sender. Absolutely. The convenience of a quick
- 8:08fix just isn't worth the risk if you can't verify
- 8:11exactly who built it and what permissions it's
- 8:14quietly requesting in the background. Well, speaking
- 8:16of our constant desire for convenience, while
- 8:18humans are over here making simple errors and
- 8:20accidentally installing Trojan horses just to
- 8:23save a few keystrokes, Google is rolling out
- 8:25AI designed to just do the typing for us entirely.
- 8:28Which ties perfectly into the major news out
- 8:30of Google I .O. 2026. Yeah, let's talk about
- 8:33that. For anyone who doesn't follow it closely,
- 8:36Google I .O. is their massive annual developer
- 8:38conference, where they basically set the stage
- 8:41for the next year of tech. And the entire spotlight
- 8:44this year was dominated by the immediate release
- 8:47of Gemini 3 .5 Flash. And the rollout strategy
- 8:51alone is noteworthy. Google completely skipped
- 8:54the usual preview phase. Yeah, they didn't even
- 8:56put it in a sandbox for a few months. Right,
- 8:57they just dropped it globally, making it available
- 9:00immediately in the Gemini app and in Search's
- 9:03AI mode. And they're touting this as their strongest
- 9:07agentic encoding model yet. It's a very aggressive
- 9:10push to integrate this into the daily workflow
- 9:13of everyday users. The focus is entirely on bringing
- 9:17what they call frontier intelligence directly
- 9:19to the consumer. OK, I have to stop the train
- 9:21for a second because we need to define some of
- 9:23these terms. Sure. Google keeps throwing around
- 9:25the word agentic, you know, welcoming us to the
- 9:28agentic era, promising agentic workflows. What
- 9:31does that actually mean for you listening right
- 9:33now? How is an agent different from the standard
- 9:36AI chatbots we've all been playing around with?
- 9:38It's a really vital distinction and it represents
- 9:40a massive leap. Think about a standard chatbot.
- 9:44It operates a bit like a highly advanced conversational
- 9:47dictionary. Okay. You give it a single prompt,
- 9:50you ask a question, or you tell it to draft an
- 9:52email, and it gives you a direct one -off response.
- 9:55It's entirely reactive, it only moves when you
- 9:58push it, and it only takes one step at a time.
- 10:00Right, so if I ask for a recipe, it prints the
- 10:03recipe, and then it literally goes back to sleep
- 10:04until I talk to it again. Precisely. And agentic
- 10:07AI fundamentally changes that dynamic. It's designed
- 10:11to handle complex long -horizon tasks without
- 10:15needing you to hold its hand every step of the
- 10:17way. So more autonomous. Yeah, it acts much more
- 10:20like a digital intern. Instead of just answering
- 10:22a question, you give an agent a broad goal. You
- 10:25might say, research our top three competitors'
- 10:28pricing for the last three quarters, build a
- 10:30comparative spreadsheet, draft an email summarizing
- 10:32where we are losing our margin, and send that
- 10:34email to the sales team by four o 'clock today.
- 10:37Wow, so it's not just generating text, it's executing
- 10:40a full multi -step project independently. Yes.
- 10:44The AI has to break your large goal down into
- 10:47subtasks, navigate different software tools to
- 10:50find data, make judgment calls, format the spreadsheet,
- 10:54open the email client, and deliver the outcome.
- 10:57That's incredible. It possesses a level of autonomy
- 10:59or agency. That's what the tech industry means
- 11:02by agentic. If this technology truly works the
- 11:06way Google is promising, it is going to fundamentally
- 11:08shift the day -to -day reality of the professional
- 11:11world. We're basically transitioning from a workforce
- 11:14that does granular tasks to a workforce that
- 11:17manages AI agents doing those granular tasks.
- 11:20It requires a completely different skill set.
- 11:22Your value won't be in knowing how to build the
- 11:24spreadsheet yourself, but in knowing how to instruct
- 11:27and quality check the digital intern building
- 11:29it. You become an editor and a manager. But of
- 11:32course, hiring a fleet of shiny new digital interns
- 11:34isn't exactly cheap. No, it's really not. And
- 11:37as we dig into the deeper realities of this Gemini
- 11:40rollout, we're finding out that sometimes these
- 11:42digital interns don't even show up for work when
- 11:43they're supposed to. Let's look closer at the
- 11:46hitting price of the future. The capabilities
- 11:48of Gemini 3 .5 Clash are impressive, sure, but
- 11:51that agentic power comes with a very steep price
- 11:54tag. It's currently three to six times more expensive
- 11:57than its predecessors. Let me put the actual
- 11:59numbers on the table so we can see the scale
- 12:00here. The pricing is set at one dollar fifty
- 12:03cents per one million dollar input tokens and
- 12:06nine dollars per one million output tokens. Yeah,
- 12:09those tokens add up. Before we go further, let's
- 12:11clarify that. If I'm a small business owner trying
- 12:14to budget for this. What exactly am I paying
- 12:16for when I buy a token? That's the core metric
- 12:19of the AI economy. A token is basically how an
- 12:22AI reads and generates language. You can think
- 12:25of it as a chunk of a word. So 1 million tokens
- 12:27translates to roughly 750 ,000 words. Okay. Input
- 12:31tokens refer to the data you feed into the AI,
- 12:34like your prompts or the documents you upload.
- 12:37Output tokens are the words or code the AI generates
- 12:39in response. Okay, so $1 .50 to have the AI read
- 12:42a massive stack of documents, and $9 for every
- 12:45million tokens it spits back out. At first glance,
- 12:48that might sound incredibly cheap. A million
- 12:50tokens is a lot of text. It sounds cheap until
- 12:52you realize how it works. Right. The problem
- 12:54is how agentic workflows actually consume those
- 12:57tokens. This is where the math gets dangerous.
- 13:00When you ask a normal chatbot a question, it
- 13:03uses a few tokens to read your prompt and a few
- 13:06hundred to give you an answer. Simple. But an
- 13:08agentic AI operates in loops. If you tell it
- 13:11to build a software feature, it generates a chunk
- 13:14of code that uses output tokens. Then it reads
- 13:18its own code to check for errors that uses input
- 13:20tokens Then it rewrites the code to fix a bug
- 13:24More output tokens it loops over and over again
- 13:27in the background Burning through tokens at an
- 13:29exponential rate before it ever shows you the
- 13:31final product which leads to a hilarious But
- 13:35very telling anecdote from the rollout I know
- 13:37exactly what you're gonna say a tech blogger
- 13:39decided to test the new model by asking it for
- 13:41a simple image The prompt was just to generate
- 13:44an SVG image file of a pelican riding a bicycle.
- 13:48A very noble use of frontier intelligence. The
- 13:50ultimate stress test, right. So the AI went to
- 13:52work and instead of just pulling an image, it
- 13:54generated a massive complex block of raw code
- 13:58to manually draw this pelican from scratch. Someone
- 14:01joked that the resulting image looked like a
- 14:03pelican attending a Miami crypto conference because
- 14:07it had these blocky retro aviator sunglasses.
- 14:10But the real ticker was the cost. That single
- 14:13image generation looped so many times that it
- 14:16burned through over 14 ,000 output tokens and
- 14:20cost the user 13 cents. goofy image of a pelican.
- 14:26Now imagine scaling that up to an enterprise
- 14:28level. Exactly. If you have a company running
- 14:30automated agents constantly in the background,
- 14:32parsing databases, grafting hundreds of emails,
- 14:36those pennies turn into thousands or even millions
- 14:38of dollars, astonishingly fast. The tech labs
- 14:41are definitely testing the price tolerance of
- 14:43the market right now. They absolutely are. But
- 14:46the financial cost is only half the frustration.
- 14:48There's a growing, very vocal exhaustion within
- 14:51the tech community regarding the psychological
- 14:53costs of these massive announcements. Yeah, specifically
- 14:56the feeling that we are just drowning in vaporware.
- 14:59The reaction to Google I .O. this year was surprisingly
- 15:01muted. And it wasn't because the tech wasn't
- 15:04impressive. It was because almost none of the
- 15:06truly groundbreaking features are actually ready
- 15:09for the public to use today. It really felt like
- 15:11an endless parade of coming soon. They announced
- 15:14their absolute top -tier model, Gemini 3 .5 Pro,
- 15:18but admitted it won't be available until next
- 15:20month. They showed off this mind -blowing video
- 15:23generation tech, but told everyone it's limited
- 15:26to a select group of paid users sometime later.
- 15:29The generative UI for Search, coming this summer.
- 15:32The agents and mini -apps, also this summer.
- 15:35They even teased new intelligent eyewear, but
- 15:38suggested it might be this fall or maybe even
- 15:40next year. This strategy creates a very specific
- 15:43type of fatigue. When a massive company holds
- 15:46an annual keynote to hype up products that don't
- 15:48actually exist on the market yet, it feels, well,
- 15:52manipulative. It totally does. The goal isn't
- 15:54just to excite the consumer. The goal is to freeze
- 15:56the market. They want to convince you to hold
- 15:59off on buying a competitor's product today because
- 16:01Google's vastly superior version is supposedly
- 16:05right around the corner. As a professional trying
- 16:07to navigate this space, you really have to ask
- 16:09yourself, Are we paying premium subscription
- 16:12prices today just to act as beta testers for
- 16:15features that are perpetually stuck in the pipeline?
- 16:17And that fatigue bleeds right into another phenomenon
- 16:20that's deeply impacting how we experience the
- 16:23internet right now. There's a term gaining a
- 16:26lot of traction lately that perfectly captures
- 16:29this feeling. the zombie internet the zombie
- 16:32internet it sounds like the title of a bad sci
- 16:34-fi movie but it is incredibly descriptive of
- 16:37what is happening and we should clarify for the
- 16:38listener this is distinctly different from the
- 16:41dead internet theory yes the dead internet theory
- 16:43is the idea that the web is entirely devoid of
- 16:47humans just automated bots talking to other automated
- 16:50bots to generate fake traffic right the zombie
- 16:53internet is much more insidious because humans
- 16:55are still involved But their interactions are
- 16:58entirely mediated by AI. It's humans using AI
- 17:02to talk to other humans who are using AI. Think
- 17:04about how exhausting this is in a daily workflow.
- 17:07Let's say a colleague wants to send you an update.
- 17:10Instead of just writing three bullet points,
- 17:12they use an AI agent to draft a polished five
- 17:16paragraph email. They send it to you. You receive
- 17:19this massive wall of text and instead of reading
- 17:22it, you use your own AI agent to summarize the
- 17:25email back down into three bullet points so you
- 17:27can understand it. You have two machines performing
- 17:31a highly inefficient expensive dance. just to
- 17:34transmit a simple thought between two humans.
- 17:36It's absurd. And it goes far beyond emails. You
- 17:39have influencers spinning up automated YouTube
- 17:41channels to spam the algorithm for ad revenue.
- 17:44You have AI -generated summaries of books flooding
- 17:47online marketplaces. Drowning out the actual
- 17:49authors. Exactly. You even see it in social spaces.
- 17:52Someone will post a heartfelt, vulnerable story
- 17:54on a forum seeking human connection, and they
- 17:56get a deeply empathetic, multi -paragraph response.
- 17:59that was entirely generated by a marketing firm
- 18:01using a language model to build account engagement.
- 18:04Oh, that just hollows out the core of why we
- 18:07communicate in the first place. It creates this
- 18:10profound, underlying sense of distrust. You never
- 18:13truly know who or what is on the other side of
- 18:16the screen. You're constantly wondering if the
- 18:18warmth in an email is genuine, or if it was just
- 18:21an output token optimized by an algorithm. Then
- 18:23that constant second -guessing requires a massive
- 18:26amount of cognitive load. If we synthesize all
- 18:29of these elements together, the exponentially
- 18:32higher token costs of Eugentic AI, the endless
- 18:35vaporware promises that freeze the market, and
- 18:38the sheer mental exhaustion of navigating the
- 18:40zombie internet, it all points to a massive reality
- 18:43check. Definitely. For the everyday professional,
- 18:46the math simply has to make sense. The value
- 18:48proposition can't just be about speed anymore.
- 18:51If your shiny new AI coding agent helps you write
- 18:54software twice as fast, you'd better be absolutely
- 18:57certain that it also cut your maintenance costs
- 18:59in half. Because if you double your output, but
- 19:01the AI generates messy, convoluted code that
- 19:04takes your human engineers twice as long to debug,
- 19:07you haven't actually saved any time or money.
- 19:09You've just created a larger, more expensive
- 19:11mess. You are trading a temporary burst of speed
- 19:14for permanent maintenance debt. The adoption
- 19:17of these tools needs to be deeply intentional.
- 19:19It's a cautionary tale to avoid AI FOMO, the
- 19:23fear of missing out. You shouldn't adopt an agentic
- 19:26workflow just because it was announced at a flashy
- 19:28developer conference, or because you feel pressure
- 19:31to have an AI strategy. Right. You should only
- 19:34adopt these tools if they demonstrably solve
- 19:36a specific problem in your life without creating
- 19:39a larger, more exhausting problem in its place.
- 19:42Absolutely. Before we wrap up, a quick thanks
- 19:44to Old Glory, an iconic music and sports fan
- 19:47merch store. Perfect for the techie in your life.
- 19:50Use promo code SNARFL for 15 % off at oldglory
- 19:54.com. Great stuff. So let's take a step back
- 19:57and look at the broader journey we unpack today.
- 19:59We started by looking at the very real dangers
- 20:01of our own digital habits, seeing how a single,
- 20:04casually installed plug -in brought a massive
- 20:06headache to the internal systems at GitHub. It
- 20:08was a stark reminder that the strongest vault
- 20:11in the world is useless if we willingly carry
- 20:13the microphone inside. Very true. From there,
- 20:17we explored the arrival of the agentic era, dissecting
- 20:20how Google's new Gemini 3 .5 flash is attempting
- 20:23to transition the workforce from doing our own
- 20:26digital chores to managing complex digital interns.
- 20:29But we also face the harsh reality of that transition.
- 20:32Those digital interns are surprisingly expensive
- 20:35to run, many of their best features are stuck
- 20:38in the vaporware pipeline, and we are all feeling
- 20:41the growing exhaustion of navigating a zombie
- 20:44internet where humans use machines to talk to
- 20:46other machines. Which really leaves us with a
- 20:49fascinating paradox to consider. We are pouring
- 20:51billions of dollars into building technology
- 20:53designed to perfectly mimic human output. at
- 20:56scale in order to make our lives easier and more
- 20:58efficient. Right. But as the internet fills up
- 21:00to the brim with these polished, perfectly articulate
- 21:03AI agents talking to other AI agents, it really
- 21:06makes you wonder, as everything becomes artificially
- 21:08perfect, will genuine, unpolished human connection,
- 21:12you know, the kind with typos, raw emotion, and
- 21:15actual vulnerability, become the ultimate priceless
- 21:18luxury of the future? We're here to help at Snarfles,
- 21:21so reach out on our website if you have any more
- 21:22questions. That's a wrap on today's top stories.
- 21:29Remember, tech doesn't have to be complicated,
- 21:31and we're here to help connect the dots. If you've
- 21:34got questions or want to learn more, visit us
- 21:37at snarful .com. Thanks for listening, and we'll
- 21:40catch you next time.