Eric (4:16)

I'm good. Big fan of your work.

BJ Vogt (4:18)

Oh, thank you. I appreciate your Costco hoodie Kirkland signature.

Eric (4:21)

Well, thank you.

BJ Vogt (4:25)

The question came from this listener, Eric, a man with impeccable taste. And his question had to do with one particular feature on the the audio message. Some people call these voice messages or voice notes. I switch in between all three. But it's where you can send someone a recording of your voice rather than a text message. Well, normally you can. But Eric had learned of an anomaly, one specific phrase which if you said it into your iPhone, the message would refuse to go through. And the phrase in question was a surprising one.

Eric (4:56)

So I'm in a group chat, per usual, with just some buddies of mine. We've been friends since college. And so Thursday my friend Alex said, you gotta try this. Record a voice memo message and mention Dave and Buster's and it will not be delivered.

BJ Vogt (5:13)

Dave and Buster's, as in the American restaurant that's Chuck E. Cheese for adults, Skeeball and rum and Coke. Dave and Buster's.

Eric (5:20)

So of course he sent us a bunch. And everyone says negative. Did not get that. Nope, didn't get that. So everyone's like, what the fuck? That's wild.

BJ Vogt (5:30)

Can I try it with you right now?

Eric (5:32)

Yes.

BJ Vogt (5:32)

Do you mind? We'll bleep it out. But can you give me your phone number?

Eric (5:35)

Sure. Sorry. All the fours.

BJ Vogt (5:38)

That's okay then. Audio. Wait, is it audio? I never leave voice memos. I'm like. I record my voice in monologue for a living.

Eric (5:48)

Oh, I know. Me neither. I think famous people do it. Cause my wife has, like, a famous friend. That's the only way she messages. So really, I don't know. Yeah.

BJ Vogt (5:56)

Wait, why do you think famous people are more likely to send voice memos?

Eric (5:59)

I don't think they want to spend time actually typing out their thoughts. It's like a phone call without actually having the commitment of a phone call.

BJ Vogt (6:07)

Interesting. Okay. All right, I'm sending you one. I found the audio message feature on my phone and decided first as a test, I'd send a message without the trigger phrase. Hey, have you heard about the animatronic band at Chuck E. Cheese? There's something to check out. We should go. All right, send.

Eric (6:28)

I've got the three bubbles. Yep.

BJ Vogt (6:31)

It says delivered. Have you heard about the animatronic band at Chuck E. Cheese? There's something to check out. We should go.

Eric (6:38)

All right, that one worked.

BJ Vogt (6:40)

Okay, now let me try Disney. Dave and Buster's.

Eric (6:42)

Yeah.

BJ Vogt (6:43)

You know the place I really want to spend time is Dave and Buster's. I want to be intoxicated and gambling. That sounds cool. Let's go to Dave and Buster's. All right, send. Okay. It transcribes. It says you're more, but it doesn't say delivered on my end. Do you get it?

Eric (7:00)

Nope. I just got three. Three dots.

BJ Vogt (7:03)

Come on. And it just stays on the three dots.

Eric (7:05)

It just stays on the three dots.

BJ Vogt (7:06)

It looks like we're breaking up with each other and I'm, like, really sending you a novella.

Eric (7:10)

That's right.

BJ Vogt (7:16)

We waited, but the message never went through. Just three dots floating forever in the air like stray balloons. For weeks after this call, the search engine team became enchanted by the anomaly. We kept trying to send each other voice notes, convinced there had to be some other combination of words that would also refuse to transmit. It couldn't just be the phrase Dave and Buster's, right? Except it was. This testing itself was addictive. In fact, I want to give you permission to pause this podcast right now and just try it yourself. Go ahead. Make a voice note. And in it, tell your crush you love them. Tell your boss you hate them. Tell a secret that you have kept close to your chest as long as it's iPhone to iPhone and you include the phrase Dave and busters, the message it will not send. Eric's group chat had found out about this anomaly basically through Internet word of mouth. Eric's friend's girlfriend's friend had discovered it herself, then posted about it on her personal Facebook page. Can you read me the original Facebook post that you made?

Nicole Williams (8:28)

Okay, friends, help me solve a mystery. Audio messages sent between iPhones will not send. If you say Dave and Busters in the audio, don't believe me. Try it. I sent an audio text to an Android user and it went through. Is there beef between Apple and Dave and Busters? Does that name sound like something inappropriate and is being blocked? I don't know, but y' all try and comment below your results and please share this so maybe it will find the right person to answer me. Hopefully that's you, right?

BJ Vogt (9:02)

This is Nicole Williams, patient zero for the Dave and Buster's anomaly. So when you post that, I'm curious, like, how had you discovered this anomaly?

Nicole Williams (9:11)

So my best friend, she and I audio text all day, every day, and when they were running a winter pass special and it was Dave and Buster's was, yes, Dave and Busters. And she. And I love arcades and all that stuff. So she continued to send me these audio messages about this Dave and Buster's winter pass, and I wouldn't respond. And so she just would continue to ask me. And it went on for probably a month or so. And then I was at Dave and Buster's and I sent her a message. And somehow through that exchange, we discovered that none of those messages were coming through and it kept me from the winter pass. So I think there's, like, there's. There's monetary damages done too, because I paid way more than I needed to. But then we started testing it.

BJ Vogt (10:03)

Nicole and her friend were doing what everybody does when they learn about this anomaly, experimenting, sending each other and other people different versions of these Dave and Buster's messages.

Nicole Williams (10:13)

My husband is an Android user, unfortunately, and the audio would go through to him. So it was just between iPhones and not between an iPhone and an Android.

BJ Vogt (10:23)

So maybe this was an Apple issue. Could there be something about the phrase Dave and Busters that Apple specifically would want to censor?

Nicole Williams (10:31)

What if it's like the word busters is something derogatory? I don't know if they. If they flagged that word, like, I'm going to bust you in the face or, you know, something. And so they were like, maybe there's violence happening. So then we would just try sending Busters, but no, Busters can go through.

BJ Vogt (10:48)

Nicole ran a few more tests herself, but she couldn't figure it out, so she posted on Facebook. The post reached Eric, who just one day later had sent it to Search Engine. And when we received the call, we accepted the mission. I asked Eric, what did you think when you first encountered this?

Eric (11:05)

What's the conspiracy about Dave and Busters and Apple? Does Tim not like Dave and Buster's? Is Buster a weird word?

BJ Vogt (11:16)

Like, is Buster like, an obscure slur that you've never heard of? Right.

Eric (11:20)

Yeah. Is it something in a different country? England? Do they think Dave and Buster's is weird? I don't know.

BJ Vogt (11:26)

And then what's your second order of theories?

Eric (11:28)

Uh, this is just a weird bug that Apple doesn't know about.

BJ Vogt (11:32)

Yeah, it's so weird.

Eric (11:35)

I know. I'm hoping you guys can figure this out.

BJ Vogt (11:38)

Okay, I'm gonna look into it. But I also want to say the other thing that's kind of cool about this. Right now, you and I are in this glorious window in which if you've forgotten to write someone back and you've offended them, all you have to say is, I'm so sorry. I left you a voice memo. I happened to mention Dave and Buster. You're never gonna believe this. There's this little known error.

Eric (12:01)

Hey, I was just letting you know you were fired, but I wanted us to meet at Dave and Buster's to kind of talk through the severance plan, and that didn't go through. I'm sorry.

BJ Vogt (12:17)

We're going to take a short break, and then an investigation that will take us to some strange places, some dark places, and of course, through the gates of Dave and Buster's itself. All that after these ads. This episode of Search Engine is brought to you in part by Tools and Weapons, the podcast that dives deep into how technology is shaping our world. Hosted by Microsoft's vice chair and president, Brad Smith, it's always packed with fascinating conversations. But right now, they've got something truly special. To celebrate Microsoft's 50th anniversary, tools and Weapons is featuring exclusive conversations with the company's three CEOs, Bill Gates, Steve Ballmer, and Satya Nadella. They're sharing untold stories, big dreams, and the relentless drive that's fueled the digital revolution. And the best part, they all believe we're just getting started. You should listen if you want to hear these tech icons reflect on the past while looking ahead to see what's next. If you love history, innovation, or just a great conversation, you won't want to miss it. Find the CEO series and other impactful conversations with government, business and cultural leaders by searching for tools and weapons wherever you listen to podcasts. This episode of Search Engine is brought to you in part by Rocket Money. When it comes to spending, sometimes it's out of sight, out of mind. That daily coffee habit, those streaming subscriptions? They add up fast without you even noticing. Rocket Money helps you spot those patterns so you can do something about them and keep more money in your pocket. Rocket Money is a personal finance app that helps find and cancel your unwanted subscriptions, monitors your spending, and helps lower your bills so you can grow your savings. You can see all of your subscriptions in one place and know exactly where your money is going. For the ones you don't want anymore, Rocket Money can help you cancel them. Rocket Money will even try to negotiate lower bills for you. They automatically scan your bills to find opportunities to save. Then you can ask them to negotiate for you. They all deal with customer service so you don't have to. Rocket Money has over 5 million users and has saved a total of $500 million in cancelled subscriptions, saving members up to $740 a year when they use all of the app's premium features. Cancel your unwanted subscriptions and reach your financial goals faster with Rocket Money. Go to RocketMoney.com search today. That's RocketMoney.com search RocketMoney.com search welcome back to the show. Before I tell you anything else, I want you to know that this week we found an explanation. We've solved the Dave and Buster's anomaly. I'm going to tell you the path we followed. There were clues along the way, although I didn't always recognize them when I encountered them. Maybe you will. Our journey began online, where there was, surprisingly, a little, thrillingly, almost nothing. There was that original Facebook post which Nicole had written January 29 that had garnered 13 comments. And right there in those comments, I saw theory number one. Theory number one is that this was a corporate feud. Here's the Facebook comment quote I'm cracking up thinking about this beef between D and B and Apple. I need answers. The theory that this was a feud seemed like it imagined a pretty petty world. But we are living in a pretty petty world. Tech CEOs do all sorts of strange things. Still, why would a multi trillion dollar company be feuding with Dave and Buster's? I shelved this idea for a moment. Even in our timeline, it seemed Too absurd. I moved on to theory number two, which both Nicole and Eric had considered tech company censorship. The idea that there was something in the phrase Dave and Busters that the iPhone software was blocking. To me, this also seemed unlikely. You can say whatever you ducking want in a text message, any vile thing. Why would an audio message be any different? I needed more probable theories, so I went looking for them. First stop, the forums on Apple's website. There I found one person posting about this issue, a man named Wesley writing on December 30, 2024 says, quote, craziest thing, try to send a voice text, not dictated text, with the phrase Dave and Busters in it and the recipient will not receive it. It's the craziest thing I've seen. Let me know what you get. Apple moderators closed down the thread. No replies. Wesley's call to follow him silenced into the void. So I looked to the 22,000 member Dave and Buster's community on Reddit. Something you need to understand about this community is that Dave and Buster's offers its customers a sort of soft gambling experience. You compete there for tickets that you can exchange for valuable prizes like a Nintendo Switch. And in the subreddit, people mainly obsess over ticket maximizing strategies and brag about the valuable prizes they've won. One typical thread I saw, quote, cashed in five emoji barcode balls for 20,000 tickets and got the foot massager Another first time hitting the super bonus. A third my favorite plaintiff. How long does it take to get the birthday reward? No mention here, not one of the anomaly. None of these people had noticed they weren't allowed to whisper into their iPhones the name of the place they most loved. I was not yet making progress, but at least I now carried the question with me because socially it was the most powerful search engine query I've discovered. At dinner, at drinks, if conversation lulled, if I wanted to steer things in another direction, I'd pull my phone out. It was a superpower. Want to see a secret almost nobody else on earth knows? The anomaly would provoke a flurry of voice noting and then feelings of wonder, which would melt into feelings of paranoia. A 1, 2. You often encounter in America so many conspiracy theories about Apple, Tim Cook, Dave Buster, phones listening in on you. Which again, I just was not ready to buy any of these. But I had no counter story to offer in return. The first clue, which I would not understand until much later, was hidden inside a story.

James Buster Corley (19:13)

Okay, we now welcome on a very.

BJ Vogt (19:15)

Very special guest which I Heard on a barstool sports podcast called Pardon My take.

James Buster Corley (19:20)

It is James Buster Corley, one of the co founders of Dave and Buster's, the most famous place in the world. In the world.

BJ Vogt (19:34)

It's video. So you see the hosts dressed like pretty standard intelligros. Casually, comfortably. One is wearing indoor Ray bans. And then there's the titular Buster. Buster Corley.

Alex Stamos (19:44)

First let me say I'm jazzed to be on your program. I'm now I gotta be a fan forever. Right, that's it.

BJ Vogt (19:51)

So Buster connecting on video from his home, a man in his late 60s, looking a bit like a fitter off season Santa Claus. Charmingly. There's a large pinball machine in his home just behind him in the frame. The man likes the game.

Alex Stamos (20:06)

I'm happy to be here and I'm happy to, always happy to talk about David Buster's, whatever you want to talk about.

James Buster Corley (20:12)

Okay. All right, so let's start from the beginning. Let's just. Can you just give us the beginning? Like how it all started and how, how it all evolved into being the coolest place for games and fun and eats of all time.

Alex Stamos (20:25)

Yeah. Well, Dave and I started out as business partners and along the way became best friends. And I'm godfather to his children, he's godfather to mine.

BJ Vogt (20:35)

Buster tells the origin story of his and Dave's powerful partnership. Back in the early 80s, these two men, Dave and Buster, were running establishments in Little Rock, Arkansas. Their businesses were separate but side by side. One called Buster's, the other confusingly called Slick Willys.

Alex Stamos (20:54)

Slick Willys was a big ass, really fine pool hall early on. Electronic games, shuffleboard, the whole thing. Right.

BJ Vogt (21:04)

So customers loved Slick Willys games and they loved drinking next door at Buster's. But the rules in Arkansas said that the two places could not be combined. Back then, you could not have pool tables and a liquor license under one roof.

Alex Stamos (21:19)

So Slick Willys and Busters had to be separate. No common door, but there was a walkway between the two. And in our infinite wisdom, we sat at the bar and watched our guests go from one place to the other. They go over to Slick Willys for intense games, then come to Busters to eat, drink, and back and forth, et cetera. So we thought, hey, you know what we need to do is we need to put these two places together.

James Buster Corley (21:47)

Yep.

BJ Vogt (21:49)

So they did. They moved to Dallas, where the rules were different. Where their forbidden desire to mate restaurants would be allowed by local regulators. The new spot, this one, carried both their names conjoined now by a fancy Ampersand Dave and Buster's. From there, the rest was restaurant history. That was Buster's story. And if its obvious pertinence to the solution to this mystery is not clear to you, it wasn't clear to me at the time either. I didn't know what I'd just learned. I couldn't talk to either Dave or Buster directly. Both founders in 2025 have sadly died and Dave and Buster's corporate was not responding to my emails. But I had another idea, something I wanted to test out at the local franchise. Okay, so we're walking in to Dave and Buster's at 11am on Tuesday. It has more arcades than I've ever seen in any single place in my life. This is actually kind of awesome, I have to say. I visited my local Dave and Buster's with my colleague Hazel just as the doors opened.

James Buster Corley (22:47)

It's huge.

BJ Vogt (22:48)

There's so many pines. It's huge. It's like a cob hunt. They've got Minecraft, Armageddon, Pac Man Battle Royale. They've got Axe Throwing, They've got Kinect 4. Dave and Buster's a casino esque entertainment prison. No clocks, no windows engineered to make time disappear while you chase your tickets. I mean, this does seem legitimately fun in a slightly tawdry way. Our reason for being here was that we thought that at least one group of people who must have noticed this anomaly would be the employees of the place itself. Imagine their voice notes. Honey, I'm going to my job at Dave and Buster's. What a long day I've had at Dave and Buster's. I ate some chicken wings on my break at my job, which is Dave and Buster's. I hoped these employees might have some insider information they could share. But as I walked in, I realized there's another question that I didn't even know I had, which is what kind of customer goes to Dave and Buster's at 11am on a Tuesday? Which of this bacchanal's many dopamine highs were these people chasing? Okay, first of all, can I just ask you your name and what you're doing at Dave and Buster's this morning? My name is Alex.

James Buster Corley (23:54)

I'm here to play DDR.

BJ Vogt (23:56)

Right by the door. A couple, a man and a woman. Not drinking, not gambling, just wholesomely playing Dance Dance Revolution. And you were like ripping it up. I've never seen anybody do that. How often do you guys come here?

James Buster Corley (24:09)

So I've been coming here pretty frequently over the last year, probably a couple times A week.

BJ Vogt (24:15)

It's.

James Buster Corley (24:15)

It's a workout for me.

BJ Vogt (24:16)

So, like, I'm doing. You're sweating.

James Buster Corley (24:17)

Yeah, I'm doing it to burn calories.

BJ Vogt (24:19)

So Alex and his wife, two very athletic people, use Dave and Buster's as their gym. I wanted to just make a podcast about that. Instead, I asked about the anomaly. Okay, so the. The actual question that we're trying to figure out are, do you. This is going to seem like a left turn, but do you use an iPhone or an Android?

James Buster Corley (24:39)

IPhone.

BJ Vogt (24:39)

Do you ever send voice notes on iPhone?

James Buster Corley (24:42)

Very rarely.

BJ Vogt (24:44)

I receive them sometimes.

James Buster Corley (24:45)

Yeah.

BJ Vogt (24:46)

Have you ever noticed that if someone. So we've discovered that if you try to send or receive a voice message on an iPhone, and it includes the phrase Dave and Busters, and as far as you can tell, only Dave and Busters, the message will not send. Had no idea. Do you want me to show you how this works? I'll take your word for it. It's okay. The person who's like, nah, I'm good. Alex was keen to get back to his workout, so I moved on. What's your name? It's Ray. And what do you do at Dave and Buster? I'm a janitor. Here we go. An actual employee. Do you have an iPhone or Android? I have an iPhone. Do you ever send voice notes, like, to message people? Yes, I do, all the time. Have you ever mentioned Dave and Buster's when you send a voice note? Like, if you're like, I'm at Dave and Buster's right now. Well, I'll just say I'm at work.

Eric (25:45)

Ah.

BJ Vogt (25:47)

And it wasn't just Tyree. Another employee I spoke to said pretty much the same thing. It was work. It was D and Bs. Of course, I do not tell people on my way out in the morning, I'm on my way to search engine. The anomaly then had gone unnoticed by the folks at this Brooklyn branch of Dave and Buster's. I, however, was noticed. I was soon asked, with polite directness by the manager, to hit the road. So we hit the road. We'd first talked to our listener Eric in February, and now a few months passed. In that time, the American economy shuttered. The President picked a fight with Nauru, a country of 12,000 people. Citizens everywhere planned for their uncertain futures. And meanwhile, I kept showing people the Dave and Buster's anomaly. And despite everything, they kept being arrested in wonder by it. And then finally, we showed it to the right person. Two of them, actually. Two people who would help us solve this riddle. Our big break after this short break, this episode of Search Engine is brought to you in part by the California association of Realtors. Buying a home in California right now can feel like a lot. The market is competitive, the paperwork is complex, and the process, it can be overwhelming. Enter your Realtor, the ultimate teacher guide, coach, advisor, cheerleader, guru of all things home, A trusted expert who knows California real estate inside and out. And is there every step of the way, worried about what you can afford, how to make an offer, what goes into escrow, final inspections, closings? Let your Realtor handle the process, the paperwork and the pressure so you can focus on what really matters, picturing yourself in the place you'll call home. Everything's easier with a Realtor by your side. Don't let what what you don't know stop you from starting your next chapter. Find your realtor@championsofhome.com Member Week is here at Lowe's. Don't miss your chance to get up to 40% off hundreds of items like paint, stain, tools, flooring and more. Shop our exclusive deals happening in store and online from May 8 through May 14. Not a member joining Join Mylowes Pro Rewards for free today and get ready to save more Lowe's. We help you save loyalty programs subject to terms and conditions. Details@lowe's.com Terms subject to change.

James Buster Corley (28:44)

This episode is brought to you by State Farm. Knowing you could be saving money for the things you really want is a great feeling. Talk to a State Farm agent today to learn how you can choose to bundle and save with the personal price plan. Like a good neighbor, State Farm is there. Prices are based on rating plans that vary by state. Coverage options are selected by the customer. Availability, amount of discounts and savings and eligibility vary by state.

BJ Vogt (29:20)

Welcome back to the show. Our big break came from someone at the office. Shruthi had mentioned the anomaly to a film editor here, Andy Grieve. And like everybody, Andy found himself repeating Dave and Busters into his phone, trying to find out if there was some trick that would force Apple to transmit a Dave and Buster's voice note. But unlike everybody else, Andy was successful. Late that night, Andy wrote to Shruti that he'd made a discovery. If you said Dave and Busters into a voice note very slowly, like spreading out the words Dave and Busters, the voice note would sail through. Andy wrote, quote, I've been doing some tests over here and my theory is that it's not Dave and Buster's, it's Dave and Buster's. I know that sounds the same to you. As a listener, because you're not reading my script right now. But the first time Andy wrote Dave and Buster's, he wrote it a n d. The second time, he wrote it with an ampersand. And he's right. The official way to spell Dave and Buster's is with an ampersand. All those years ago, when Dave and his business partner Buster had conjoined their restaurants into one concept, they'd put an ampersand in between their names, not knowing that this one fancy flourish, made years before the invention of the iPhone, would cause an anomaly in space and time decades later. Stunning. And he continued, I tried saying and, and. And. And ampersand. And the message didn't send. So Andy had deduced that Ampersand was the likely culprit. Maybe Andy should be hosting a podcast. Computers, particularly in the past, have had all sorts of problems with special characters like Ampersand's. Andy, as a film editor, knew that his film editing software, for instance, would sometimes reject a special character in the file name if it was a problem there, Maybe it was a problem here. But what didn't make sense to any of us was why you could easily send Dave Ampersand busters over text. What was it about sending Dave and Busters over audio message that would cause the anomaly? It was confusing. I knew that we needed to talk to an expert. Ampersand, a fellow tech reporter, connected me to the right one.

James Buster Corley (31:38)

Hi, my name's Alex Stamos. I'm the chief information security Officer of Sentinel 1 and a Lecturer in computer science at Stanford University.

BJ Vogt (31:45)

And what does it mean to be the chief information security officer?

James Buster Corley (31:50)

It means I used to be a hacker and now I'm a corporate sellout. That's what it means.

BJ Vogt (31:59)

Alex grew up in the 90s doing all sorts of youthful computer crimes. But as an adult, his life flipped. Now companies hire him to legitimately test or protect their security. He ran security for Yahoo. After that, he ran security at Facebook, actually, during the height of Russian hacker paranoia. Very big jobs. He may have been overqualified for the case of the Dave and Busters anomaly. In fact, when I told a journalist friend I'd reached out to the Alex Stamos, his face made this wobbly expression before he said, you asked Alex Stamos about the Dave and Busters thing. So I reached out to you because I'm trying to answer this question, and I just want to say, like, before I explain the question, I understand there's a lot going on in the world right now. If you were to rank Every single problem afflicting the world in order of importance, there's a good chance this one would go last.

James Buster Corley (32:49)

It's fine with me, man. There's plenty of podcasts about the top 100 problems.

BJ Vogt (32:53)

So many podcasts about the top 100.

James Buster Corley (32:55)

So if you're looking for that podcast, turn this one off now.

BJ Vogt (32:58)

Yeah. Get out. Get out. This is about a small and interesting and delightful quirk. So the issue is this. A listener of ours heard about this issue because a friend posted on Facebook. And then the chat group tested it out.

James Buster Corley (33:13)

Yeah.

BJ Vogt (33:14)

What they realized is that if they send one another a voice memo, and the voice memo contains the phrase Dave and Busters, the voice memo will not send.

James Buster Corley (33:26)

What?

BJ Vogt (33:27)

Yes.

James Buster Corley (33:31)

What? That's the back door. It's not like Xi Jinping looks like Winnie the Pooh or SQL Query or something. It's Dave and Buster.

BJ Vogt (33:41)

Dave and Buster.

James Buster Corley (33:42)

Let's do this.

BJ Vogt (33:43)

Yeah. Yeah. Let me do it. Let me do it. I'm gonna try to send you a memo for the last time. I spoke the magic words into my phone and I hit send.

James Buster Corley (33:52)

Yeah. I get three dots and it's still three dots.

BJ Vogt (33:55)

Yes.

James Buster Corley (33:55)

This is giving me anxiety just watching and it doesn't show up. That's crazy.

BJ Vogt (34:02)

So I told Alex about the film editor Andy's discovery around the ampersand. It's funny I should tell you, one of the people that I've said this, he found that if he said Dave and Busters slowly enough, he said, like Dave and Busters. In that circumstance, the message seemed to.

James Buster Corley (34:20)

Send, oh, well, then it's almost certainly the ampersand.

BJ Vogt (34:24)

Alex started to dissect what might be happening behind the scenes with the audio message. And the troublesome ampersand. And his explanation pointed to an additional culprit that never would have crossed my mind. That culprit, AI. It turns out AI is part of the process involved in sending an audio message. When you receive an audio message, you see the actual waveform of the audio where you can click, play and listen. But below it, you also get the transcript of what's in the audio. And Alex noted that this transcript, it's a relatively new trick from Apple, enabled by artificial intelligence.

James Buster Corley (35:00)

They now have this feature, which is they do AI where they listen to the message and do real time transcription of it.

BJ Vogt (35:09)

So when I do a message and I want to be very careful with the words, they listen because I feel like it is a big part of people's theories in this. I've spoken to you so far, but when you say they Listen, you mean I talk into the phone, an AI that's either, I don't know, on my phone, in the cloud.

James Buster Corley (35:26)

I think it's supposed to be on the phone. I mean, this is one of the things that Apple advertises is that their AI is supposed to be more private because it's running on your phone.

BJ Vogt (35:34)

So the AI that's on the phone is like, quote unquote, listening to my message.

James Buster Corley (35:39)

Yes.

BJ Vogt (35:40)

Turning it into text so that when I send people long voice memos, they can actually skip them and just read it. And that's sort of new.

James Buster Corley (35:48)

That's new.

BJ Vogt (35:49)

Apple started offering these auto transcriptions in their fall 2023 update, iOS 17. And the fact that these transcriptions are AI generated is important because Alex pointed out there have been issues with some of Apple's newly released AI features, particularly since their most recent update, which shipped one month before the first report of this. Dave and Buster's Anomaly iOS 18.

James Buster Corley (36:15)

A lot of people have thought this new iOS is kind of like their worst release ever. Here I am getting uninvited from any Apple event ever again. But they demoed all this stuff, like the summaries. Have you seen all the summaries people have shown of. You get broken up over text and it gives you the Siri summary of sorry, they can't, don't hate them, or.

BJ Vogt (36:33)

It'Ll say, oftentimes I just get inaccurate ones where it will try to do an italicized summary of a text message or a headline and it'll say something that sounds incredibly alarming. And then when I click through, I'm like, oh, no, the AI is just confused.

James Buster Corley (36:45)

Right. So it just makes me think like they kind of rushed a bunch of this AI stuff. So my first thought is, is the AI model, for whatever reason, choking on the Dave and Buster's ampersand?

BJ Vogt (36:58)

So this is where the ampersand comes in. The iPhone's AI model takes the audio of me saying Dave and Buster's and tries to turn it into a transcript that writes Dave and Busters with an ampersand, but that breaks something. The iPhone perhaps thinks this ampersand represents here not human language, but a random, misplaced bit of computer code. Because ampersands mean one thing in human English and another thing in code. Engineers usually indicate to the computer when an ampersand should be ignored.

James Buster Corley (37:28)

We do this thing called escaping, where you basically say, hey, treat this as something that's displayed as an ampersand to a human. Don't interpret it as an ampersand, and so maybe it's just forgetting to escape this ampersand in this one particular circumstance. For whatever reason, if it's Dave and.

BJ Vogt (37:44)

Buster's, this ampersand may have been unescaped, one of the most jaw dropping scandals of 2025. But to understand why that unescaped ampersand could have fully crashed the audio message that required further testing, Alex offered to try to get inside the iPhone's mind.

James Buster Corley (38:03)

So I've got an iPhone here that's hooked up to my computer and I could try it here and we could see whether or not we can get to throw an error that we can see. So you see, I've got just this test phone that's got nothing on it.

BJ Vogt (38:13)

And when you say a test phone, it's just like an iPhone that you're purely using for this test.

James Buster Corley (38:17)

Yeah, it's a development phone. It's a totally clean iPhone 14 with a brand new install of 3-1-18. It's set to developer mode. And so it's hooked up to a tool called Apple Instruments, which allows me.

BJ Vogt (38:29)

Now we were screen sharing so I could see the software. On the top of the window was a spiky graph representing activity on the iPhone, almost like a heart rate beneath, eligible to meet the corresponding log entries. For each action the phone had taken, the computer's notes on its own internal workings. Normally these log entries are quickly deleted, but Alex's setup would capture them. So we're going to make the problem happen and then we're going to X ray into the mind of the iPhone to understand what is going on behind the scenes.

James Buster Corley (39:01)

Yeah, and so we're gonna see maybe if something crashes, we might get lucky. And as it dies, it might say, oh, I'm dying.

BJ Vogt (39:09)

Yeah.

James Buster Corley (39:10)

Hey, pj, let's go to Dave and Busters.

BJ Vogt (39:13)

Okay, so you've recorded the message. You're gonna try to send it. I'm receiving nothing. At the moment that Alex had recorded his voice note, I could see the log entries cascading down the screen. Any action the iPhone took required marshaling so many of these little tasks.

James Buster Corley (39:28)

Does not look like it's sending.

BJ Vogt (39:30)

The voice note, of course, did not make it to my phone. But now Alex could check these tasks to see which one had failed.

James Buster Corley (39:35)

And so iam Transcoder Agent. This is probably a pretty good one for us to look at, right? Mobile SMS looks like a good one. There's info debug. So let's see.

BJ Vogt (39:47)

It's funny. You're like fluent in iPhone.

James Buster Corley (39:50)

I'm not a professional in this I just want to point out that out you're.

BJ Vogt (39:53)

You speak enough iPhone to go on vacation in iPhone and like order some cocktails.

James Buster Corley (39:59)

Exactly, yeah. Donde estono el iPhone? Yes, that's it. There are people who do this all day, every day.

BJ Vogt (40:07)

Alex's larger theory about what was going on here was that the unescaped ampersand had perhaps triggered one of the security systems built into the iPhone's internal code. I did not know about these security systems, and Alex started to explain to me how they worked and why Apple's developers created them in the first place.

James Buster Corley (40:24)

One of the things they've done is they've created security protections where if something bad happens, they can try to protect that. If you hack one of those subsystems that hopefully they can contain that hack and keep them from taking over the entire phone.

BJ Vogt (40:41)

And have there been issues in the past where because there's so many programs that are now sort of entering into imessage, someone might find a vulnerability in like memoji and then be able to get in and grab somebody's text messages or something?

James Buster Corley (40:55)

Oh yeah, no, take over the Internet.

BJ Vogt (40:56)

Oh, wow.

James Buster Corley (40:56)

Yeah, yeah. So there's a company in Israel called NSO Group that sells these hacks and is very good at it. You know, the Russians do this, the Chinese do this. So the Chinese government's actually quite good at this.

BJ Vogt (41:07)

And if somebody, nobody would ever do this to me, I not that type of reporter. But if it happened to me, what would happen? Like one day I would get a text message from an unknown number with a funny emoji and that would be them breaking in.

James Buster Corley (41:19)

So there's what are called interaction and non interaction hacks. So there have been ones that are so bad that the message is delivered and in the background, your phone parses the message. They take over your phone and then they delete the message. You don't even know you got hacked. And then they plant the malware on your phone and now they can read all your messages, read your email, and even in some cases, turn on the microphone, turn on the camera, track your GPS location and such. And that's been used against democracy activists, it's been used against journalists and such. Wow, it's really bad.

BJ Vogt (41:52)

Let me tell you a story about what Alex means when he says it's really bad. So one of these iPhone exploits was discovered by nso, that Israeli hacker group Alex mentioned, and NSO sold it to the Saudi government. Here's how they used it. One day in 2018, a flight attendant gets taken into custody at the Dubai Airport. While she's being interrogated, someone opens her phone and covertly installs the exploit on it. Not because they're interested in her, but because they're interested in her partner, a man named Jamal Khashoggi, a Saudi journalist. A columnist at the Washington Post, he'd been critical of the royal family. Five months later, Khashoggi is murdered quite brutally by agents of the Saudi government. Presumably, Apple built these security systems to prevent events like this one. But Alex thought that here, perhaps one of those security systems built for a very important reason was behaving in an overzealous way. The rogue Ampersand, the fact that it had just confused the iPhone for a moment. Maybe the system saw that as a vulnerability and stopped the message from transmitting at all. That's the theory, anyway. I have one more question. If I were like, a different kind of person ethically, like, is there a path by which, you know, this listener is like, hey, I saw a Facebook post. This funny thing happens on an iPhone. Check it out. They send it to me and I'm like, send a message to someone in China or Israel or Russia, and I'm like, hey, there's this little part of the security wall that looks a little funny, like you can use this and, like, they do a little bit more work. And then the next thing you know, someone is calling a journalist and saying, like, dave and Busters. Dave and Busters, Dave and Busters. And getting into their email.

James Buster Corley (43:43)

I mean, it's possible. It is possible. This is the. That this is. If you pull this thread, you find a big hole in the sweater on the other side. This kind of bug, it's not super likely, but it is possible. I have seen more minor things than this turn out to be a highly exploitable condition.

BJ Vogt (43:59)

Really?

James Buster Corley (43:59)

Yeah, it is possible.

BJ Vogt (44:02)

Alex recommended that we email Apple with the details of the anomaly, which we did. Apple looked into it and actually got back to us. They told us what we'd found is a rare bug. I mean, we knew that and said it poses no security risk to its users. They said a fix will be available and a software update soon. So the days of the anomaly we have cherished so much, they're numbered.

James Buster Corley (44:24)

This feels like around seven seconds here.

BJ Vogt (44:27)

But back to Alex's tests.

James Buster Corley (44:28)

There's a bunch of errors getting thrown around the IAM Transcoder agent.

BJ Vogt (44:31)

He wasn't able to definitively find the exact process that the unescaped Ampersand was breaking.

James Buster Corley (44:36)

None of the errors here. It gives us a perfect. But this is pretty good but he.

BJ Vogt (44:41)

Saw enough to feel good about his theory, and he was able to connect us with some iOS experts, people more fluent in iPhone, who were able to confirm that the ampersand was causing the issue here on the sender's side, the anomaly was essentially explained. I asked Alex Stamos what, in the end, he made of all this. When you learn about a glitch like this, what's the feeling it gives you?

James Buster Corley (45:04)

You know, there's a saying that you hear software people say it's turtles all the way down, right? Like, something I tell my Stanford students is that security is an incredible field to get into because it's the only part of computer science that gets worse every year, right? Like every part of CS just magically gets better, right? Like graphics and compute and storage. But systems get more complex, less understandable and more important every year. And so as a result, systems get less safe and there's more need for people to break them and make them safer. And I think AI has just massively multiplied that. I mean, this is one of the weird things about AI. Just theoretically, AI systems are supposed to be what's called deterministic, right? So a deterministic system is a piece of software where if you know the inputs, you can predict what the outputs are. In practice, to human beings, modern AI systems are non deterministic. We have no fricking idea why they work. We just build these things and we train them on these huge training sets and then they just kind of happen. They just kind of do things. We are building software systems that are beyond human comprehension, and we're throwing them in our pockets and then building our lives around them. And this is another thing I tell my students. It is the most exciting time to be in security since the late 90s, because once again, new kinds of vulnerabilities and bugs are being discovered every day of new entire classes of issues, right? This is what it was like when I was young. You'd go to a security conference, you go to DEF CON or Black Hat, and you go to a talk and somebody would get on stage and they would talk about some new research. You would leave and you'd be like, wow, I think every single product on the planet is vulnerable to that bug, because nobody's ever heard of it, right?

BJ Vogt (46:50)

Yeah.

James Buster Corley (46:51)

And that's what AI is like right now, is that somebody might say, we built a secure AI system. And you're like, you can't make that promise because nobody knows what the vulnerabilities are in these systems yet. The fundamental research hasn't been done yet. And so it is both a terrifying and really fun time to be alive if you're in this field.

BJ Vogt (47:16)

Of all the anxieties I have about artificial intelligence and their legion, this was an underrated one that AI might be helping us build things we ourselves don't entirely understand today. That had prompted a silly question about a phone that for its own reasons would not send a Dave and Buster's message. I wondered what questions it would prompt tomorrow. Alex, thank you. Thank you for being so generous with your time as well.

James Buster Corley (47:42)

Yeah, thanks Vijay.

BJ Vogt (47:44)

Alex Stamos is the Chief Information security officer of SentinelOne and a lecturer in computer Science at Stanford University. And thanks this week to Kashmir Hill, Nadeem Hamoud, and very special thanks to Jay Little and everybody at Trail of Bits. They lent us their iPhone fluency. Jay spent his valuable time running tests to better understand this ampersand bug. Thanks so much. SA Search Engine is presented by Odyssey. It was created by me, BJ Vogt and Shruti Pimineni. Our senior producer is Garrett Graham. This episode was Fact checked by Mary Mathis. Theme, original composition and mixing by Armin Bazarian. Additional production support on this episode by Noah John, Hazel May Brian and Sean Merchant. If you would like to support this show and get ad free episodes, zero reruns and the occasional bonus audio, please consider signing up for Incognito Mode. You can learn more at Search Engine Show. Our Executive producer is Leah Rees Dennis and thanks to the rest of the team at Odyssey, Rob Morandi, Craig Cox, Eric Donnelly, Colin Gaynor, Maura Curran, Josephina Francis, Kurt Courtney and Hilary Shove. Our agent is Oren Rosenbaum at uta. Follow and listen to Search Engine for free on the Odyssey app or wherever you get your podcasts. We'll see you next week. Sam.