Loading summary
A
Welcome to the Techmeme write home for Friday, May 16, 2025. I'm Brian McCullough. Today Epic Games and Apple are still having beef over App Store rejections. Coinbase got hacked with the oldest attack vector there is bribery, Meta's having problems with its behemoth AI model, new windsurf coding suite, new Apple CarPlay, and of course the weekend long read suggestions here's what you missed today in the world of tech. Epic Games says that Apple rejected its latest Fortnite submission to the US App Store and the Game on iOS will be offline worldwide until Apple unblocks it, according to Epic, quoting the Verge. Following the rejection, Fortnite is no longer available on iPhones and iPads even in the European Union where it had previously been available to download through the Epic Games Store. Apple has blocked our Fortnite submission so we cannot release to the App Store or to the Epic Games store for iOS in the European Union, the company posted on the official Fortnite X account. Now Sadly, Fortnite on iOS will be offline worldwide until Apple unblocks it. The Verge has confirmed that the game is no longer available to download on iOS from the Epic Games Store or the alternative marketplace Alt Store PAL in the EU where it had previously been available. It's not yet clear if Apple blocked the game's availability through those stores or if Epic itself chose to make it unavailable. We've reached out to both Apple and Epic for comment. Fortnite returned to iOS in the EU last year, but only through those two storefronts and not Apple's App Store. The return was made possible by the EU's Digital Markets act, which required Apple to allow third party app stores on iOS. Epic had resubmitted Fortnite to the US App Store this month following a recent ruling in Epic's lawsuit against Apple. That ruling prohibited Apple from restricting developers ability to link to external payment systems, one of the issues that had started their long running legal battle. Epic was forced to use its EU developer account to resubmit the game as its US account was terminated in 2020 when it first broke Apple's rules by introducing its own in app payments to the game. This week, Epic CEO Tim Sweeney announced that the company had pulled its previous Fortnite submission and submitted a new version that included an update due to release today, noting that all platforms must update simultaneously. He's since taken to X repeatedly to complain that unofficial Fortnite knockoffs have been allowed into the App Store. While Fortnite hasn't claiming Apple's app review process has been, quote, weaponized by senior management, end quote. So one big story I missed yesterday that I want to snag is that Coinbase got hacked. Coinbase had to divulge that hackers access data of what they are calling a small subset of users, though not their credentials, and that they expect to incur 180 to $400 million in costs on account remediating this. But they also want you to know that they refused to pay a $20 million ransom. Quoting Reuters, the company received an email from an unknown threat actor on May 11 claiming to have information about certain customer accounts as well as internal documents. While some data, including names, addresses and emails was stolen, the hackers did not get access to login credentials or passwords. Coinbase said it would, however, reimburse customers who were tricked into sending funds to the attackers. Hackers had paid multiple contractors and employees working in roles outside the US to collect the information. The company has fired those involved, it said. Separately, the U.S. securities and Exchange Commission has begun scrutinizing whether Coinbase had misstated its user figures. Two sources familiar with the matter told Reuters. The agency had also been interested in whether any inaccurate user data could indicate the company had inadequate know your customer compliance that is required of firms registered with the sec, the sources said. A Coinbase spokesperson denied the SEC was probing the company's compliance with Know youw Customer and Bank Security act rules, end quote. But what I want to come back to what I found interesting is the details of this particular hack. A source is telling Bloomberg that hackers bribed enough Coinbase customer service representatives to achieve effectively on demand access to Coinbase customer information since January, quote While the company says the Coinbase prime service that custodies crypto for ETF issuers and services, other institutional investors was not affected. The hackers did have near constant access to some of Coinbase Global Global's most valuable customer data since January, according to a person familiar with the incident who asked not to be named discussing company matters. The hackers scheme was brazen, if not especially impressive from a technology standpoint. They bribed customer service representatives to steal client data and then demanded a $20 million ransom to delete it. Coinbase began noticing unusual activity from some of these representatives as far back as January, the company confirmed in an interview with Bloomberg News. The bribed reps got access to names, dates of birth, addresses, nationalities, government issue ID numbers, some banking information, as well as details about when customer accounts were created and their balances, the person familiar with the situation said. This information could be used to attempt to impersonate Coinbase and convince customers to let the hackers into their account. It could also be used to impersonate the victims with other service providers to attempt to convince them to let hackers into other financial accounts they maintain. For some traders with big balances on the exchange, the incident was alarming for reasons that go beyond the potential financial losses. Considering the kid kidnapping and mutilation of a crypto startup co founder earlier this year and reports of other similar incidents. It's a major breach. The amount of personal information shared is staggering, said Mike Dudas, managing partner of Web3 firm 6MV, who said he was targeted by the Coinbase hackers. The hackers had bribed enough customer service representatives to achieve effectively on demand access to Coinbase customer information in the past five months, the person said. Coinbase Chief Security Officer Philip Martin disputed the assertion of near constant access, saying in an interview with Bloomberg News that the company pulled the agent's access as soon as it was discovered that they were improperly sharing information. Therefore, the hackers did not have persistent access over the course of the entire period, he said. What these attackers were doing was finding Coinbase employees and contractors based in India who were associated with our business process, outsourcing or support operations, that kind of thing, and bribing them in order to obtain customer data, Martin said. Coinbase detected the agents, quarantined them and fired them as soon as the company noticed the activity. The hackers had access to this data as recently as Wednesday, the person familiar with the incident said. Martin said, quote, we have no reason to believe that is true at all, but could not, quote, prove a negative. Bloomberg News is aware of one notable high net worth individual's data being access whom Bloomberg is not disclosing for privacy reasons, end quote. Sources say that Meta has delayed the rollout of its Behemoth LLM, which was internally slated for an April release, now to be released in the fall or later. This comes after struggles to improve its capabilities. Apparently quoting the Journal, company engineers are struggling to significantly improve the capabilities of its Behemoth large language model, leading to staff questions about whether improvements over prior versions are significant enough to justify public release, the people said. Early in its development, Behemoth was internally slated for an April release to coincide with Meta's inaugural AI conference for developers. Meta put two smaller models in its Llama AI model family ahead of the event, but later pushed an internal target for the larger Behemoth release to June. Now it's been delayed to fall or later. Meta has previously drawn praise for the speed with which it's caught up to rivals in the global AI arms race, spending billions of dollars along the way to develop the technology that powers chatbots on WhatsApp, Instagram and Facebook. Meta plans to spend up to $72 billion in capital expenditures this year, much of which will be used to help realize Chief Executive Mark Zuckerberg's grand ambitions for AI. Senior executives at the company are frustrated at the of the team that built the Llama 4 models and blamed them for the failure to make progress on Behemoth, according to people familiar with their views. Meta is contemplating significant management changes to its AI product group as a result, the people said. The Facebook parent has publicly touted the capabilities of Behemoth, saying it already outperforms similar technology from OpenAI, Google and anthropic on some tests. But internally, its performance has been hobbled by training challenges, the people said. End quote make this your best season yet with nutritious 2 minute meals from Factor Eating well has never been this easy. Just heat up and enjoy, giving you more time to do what you want. Get outside instead of prepping and cooking indoors. Factor Meals arrive fresh and ready to eat, perfect for any active lifestyle. With 45 weekly menu options, you can pick gourmet meals that fit your goals. Choose from Calorie, Smart, Protein plus Keto and More. Factor powers your day with satisfying breakfasts on the go, lunches, premium dinners and guilt free snacks and desserts. It's easy to savor more this spring. Factor Meals pack in the flavor with none of the fuss. My wife left the house this morning with her Factor meal in her bag to heat up for lunch at work today. If you're too busy for lunch, Factor is great. Two to three minutes is all the prep you need for something hot and honestly delicious. Try it yourself. Get started@Factor Meals.com Ride50OFF and use code RIDE50OFF to get 50% off plus free shipping on your first box. That's code RIDE50OFF@Factor Meals.com ride50OFF for 50% off plus free shipping. Don't you just love accounting? Working on your books, bringing up fun questions like what numbers go in what column, what reports should I run, or should I take a master's level accounting class just to understand how to use this accounting software? Well, here's some easy to use accounting and invoicing software that makes something complicated as simple as it could be. FreshBooks FreshBooks streamlines your invoicing and payment processes, saving you valuable time on data entry while keeping your finances organized. No accounting classes required. With FreshBooks, you'll save time and get peace of mind. Run your billing books and payroll on the same platform. Build invoices in seconds. Get paid twice as fast. Create reports that allow you to instantly see the health of your business. Stay organized for tax time and compliant with tax regulations. Why not give it a shot? Switching to FreshBooks is painless even if you're coming from another accounting tool. FreshBooks makes migrating your data simple, and their support team is ready if you need help. Don't wait for the stress to pile up. Head to freshbooks.com and get 70% off for four months. No credit card required. Let FreshBooks handle your taxes so you can focus on what you do best. Freshbooks.com hey devs, heads up windsurf has launched swe1, its first family of software engineering AI models, claiming its largest model matches Claude 3.5, Sonnet GPT 4.1 and Gemini 2.5 Pro. Quoting TechCrunch, the startup says it trained its new family of AI models, SW E1, SW E1 Lite, and SW E1 Mini, to be optimized for the entire software engineering process, not just coding. The launch of Windsurf's in house AI models may come as a shock to some, given that OpenAI has reportedly closed a $3 billion deal to acquire Windsurf. However, this model launch suggests Windsurf is trying to expand beyond just developing applications to also developing the models that power them. According to windsurf, Swe1, the largest and most capable AI model of the bunch, performs competitively with Claude 3.5, Sonnet GPT 4.1 and Gemini 2.5 Pro on internal programming benchmarks. However, SWE1 appears to fall short of frontier AI models such as Claude 3.7 Sonnet on software engineering tasks. Windsurf says its Swe1 Lite and Mini models will be available for all users on its platform, free or paid. Meanwhile, swe1 will only be available to paid users. Windsurf did not immediately announce pricing for its SW E1 models, but claims it's cheaper to serve than Claude 3.5 Sonnet. Windsurf is best known for tools that allow software engineers to write and edit code through conversations with an AI chatbot, a practice known as Vibe coding. Other popular Vibe coding startups include Cursor, the largest in the space, as well as Lovable. Most of these startups, including Windsurf, have traditionally relied on AI models from OpenAI, Anthropic and Google to power their applications. In a video announcing the SWE models, comments made by Windsurf's head of research Nicholas Moy underscore Windsurf's newest efforts to differentiate its approach. Today, frontier models are optimized for coding, and they've made massive strides over the last couple of years, said Moy. But they're not enough for us. Coding is not software engineering. Windsurf notes in a blog post that while other models are good at writing code, they struggle to work between multiple surfaces as programmers often do, such as terminals, IDEs and the Internet. The startup says Swe1 was trained using a new data model and a training recipe that encapsulates incomplete states, long running tasks and multiple surfaces. End quote Apple has rolled out CarPlay Ultra, the next generation of CarPlay in new and existing Aston Martins in North America after months of delays, but this is way before a wider rollout which is coming soon. Quoting 9to5Mac Apple also said Hyundai, Kia and Genesis are working on adding CarPlay Ultra to their cars, but did not disclose a time frame. CarPlay Ultra integrates vehicle controls with the CarPlay experience, including taking over display of the instrument cluster and gauges, toggles for air conditioning and driver assistance systems, advanced media controls and more. CarPlay Ultra services all of the screens in the vehicle, not just the primary infotainment display that includes digital renderings of the speedometer, tachometer, fuel gauge and more. CarPlay apps like Media and navigation can also seamlessly integrate into the instrument cluster. CarPlay Ultra cars also allow for on screen controls or Siri voice commands to control car features like the radio and climate, as well as vehicle specific features like performance driving modes. Widgets from the iPhone can also be projected on the infotainment display to show glanceable information like calendar or weather. Of course, the big question mark with CarPlay Ultra is availability. A launch with just Aston Martin vehicles is pretty restrictive. In today's press release, Apple announced an expansion of car manufacturers committed to supporting CarPlay Ultra, including Hyundai and Kia. Apple also previously showed renders of what next gen carplay would look like in Porsche vehicles. However, there is no timeline for when CarPlay Ultra will be made available on anything but Aston Martin right now. Time for the weekend. Long read suggestions first up, not a long read exactly, but explanation of some cool new tech that I wasn't aware of. Infrared Wireless Charging Quoting the Verge One morning last month I walked into my kitchen to get a glass of water but my smart faucet was out of battery. I went to sit down in my front room and the shade was still shut. It was out of battery. I walked down the hall and found a beached robot vacuum out of battery. I headed outside to feed the chickens, unlocking the back door on the way out. The battery powered smart lock had done what it was supposed to and automatically locked at 8pm at least something was working. The game changer here is wireless charging. Not wireless like putting your phone on a charging pad. Wireless like across the room. For the past year, a wide charge transmitter in my ceiling has been shooting infrared lasers at a photovoltaic panel on the specially modified Alfred DB2S smart lock on my back door, keeping its battery hovering at 100% so I never have to deal with a deadlock when going to feed my chickens. To get this souped up setup cost around 1250 bucks, required cutting a hole in my ceiling and is only available through an early access program. The Y charge compatible Alfred lock can't be purchased off the shelf, however, despite this extra effort, after a year of living with a wirelessly powered smart lock whose battery I never have to mess with, I want this for everything in my smart home. And finally today, not tech, but a publication called Dirt has a look at the newfangled movie studios like A24 that are basically the only things winning in Hollywood right now, unless you've got a superhero or two in your pocket. What we might call Peak A24 stretching between 2019 and 2022 began with the Safdie Brothers diamond district thriller Uncut Gems, a nervy and propulsive character study of a gambling addict played by Adam Sandler, who might just win the bet of a lifetime. The September before Uncut Gems December release in 2019, A24 launched A24 Books, an imprint to showcase with coffee table flair gorgeous hardcover books that collected scripts, essays and celebrities like Frank Ocean and literary names like Carmen Mar Machado and photos from select films. The first releases Ex Machina, the witch and Moonlight. A24's merch, along with a zine tied to new releases, was already well known, seen as lovingly rendered accompaniments to films that had the confectionary allure of a rare vinyl pressing. The books, which were initially celebrated as deep dives before later being more clearly labeled as screenplay books, helped to more explicitly lash together a selection of a 24 achievements, straightening out the in both directions, a built in method for enshrining future touchstones legitimized by artsy packaging. In 2022, Stripes LLC around $70 billion as a fund led a $225 million equity investment in A24 north of 60% of the people that go to see an A24 movie in a theater go because it's an A24 film, Stripes founder Ken Fox told Bloomberg, invoking the myth of that all consuming a 24 fan who loves everything everywhere all at once or Ladybird as much as Waves or they've watched A24 content and they know that the quality is going to be exceptional and interesting and compelling. Basically, A24 and Disney are the only two companies that test that way. At the end of June 2024, Thrive Capital, a major investor in OpenAI, along with other investing parties, participated in another round of funding to the tune of $100 million and a $3.5 billion valuation. Thrive Capital founder Josh Kushner will sit on a 24's board what is being entertained here is the degree to which a studio can serve as a litmus test for where modern is headed. A24 has become both a very telling kind of punching bag, absorbing any number of wider systemic issues and anxieties, and a hero single handedly rescuing cinema from a swift death. The cavalier flattening of major studio filmmaking, exemplified by the endless resurrection of nostalgia, bait IP and corporate overreach, makes it easy to cast doubt on the legitimacy of any studio's artistic intentions or if the question of making art enters the equation at all. A24 is pointed to as the singular way forward, but the company always wanted to assimilate into the mainstream just by a less conventional approach. Okay, since I gave you part one of the World cup of Entrepreneurs yesterday, I figured I'd give you part two this weekend as a bonus episode just to put a bow on it. Thanks again to Founder Collective for inviting me to the conference yesterday with tons and tons of fun. Talk to you on Monday.
B
Are you looking for a new job or want a career change? Look no further than monster.com need a little help standing out? Our expert resume writing services will make sure you shine. Want to brush up on your interview skills? Engage with our AI Interview prep tool. Want some advice on negotiating your new salary? Visit our salary tools and extensive library of career advice articles and you'll have all the tips and tricks you'll need to succeed. Visit monster.com today and take the first step towards your career. Monster.com find your right job fit.
Techmeme Ride Home
Episode: Fri. 05/16 – Bribing Is The Oldest Form Of Hacking
Host: Brian McCullough
Release Date: May 16, 2025
Brian McCullough opens the episode by addressing the ongoing conflict between Epic Games and Apple. Epic's latest submission of Fortnite to the US App Store was rejected by Apple, leading to the game being taken offline globally until Apple lifts the ban. Epic Games announced via their official Fortnite X account:
"Apple blocked our Fortnite submission so we cannot release to the App Store or to the Epic Games store for iOS in the European Union." ([00:04])
This rejection not only affects the US but also impacts the European Union, where Fortnite was previously available through third-party stores like the Epic Games Store and Alt Store PAL. The removal follows Epic's resubmission efforts under its EU developer account, a necessity after their US account was terminated in 2020 due to violating Apple's in-app payment rules.
Epic CEO Tim Sweeney has been vocal about the situation, expressing frustration on social media platforms like X (formerly Twitter). He criticized Apple's app review process, stating it has been:
"...weaponized by senior management." ([Timestamp Not Specified])
Sweeney also highlighted concerns over the presence of unofficial Fortnite clones in the App Store, further escalating the tension between the two tech giants.
In a significant cybersecurity breach, Coinbase disclosed that hackers compromised a subset of its user data through bribing customer service representatives. The company revealed that:
"Hackers bribed enough Coinbase customer service representatives to achieve effectively on-demand access to Coinbase customer information since January." ([Approx. 05:30])
The breach exposed sensitive information, including names, addresses, emails, dates of birth, and banking details. Notably, login credentials and passwords remained secure. Despite the severity, Coinbase refused to pay the demanded $20 million ransom, stating their commitment to user security:
"We have no reason to believe that is true at all, but could not prove a negative." – Philip Martin, Coinbase Chief Security Officer ([Approx. 19:15])
Coinbase is anticipating remediation costs between $180 million to $400 million. Additionally, the U.S. Securities and Exchange Commission (SEC) has initiated a probe into whether Coinbase inaccurately reported its user figures, potentially indicating lapses in Know Your Customer (KYC) compliance.
Meta has announced the postponement of its ambitious Behemoth Large Language Model (LLM), initially slated for an April release. Due to challenges in enhancing its capabilities, the launch has been deferred to the fall or later. As noted:
"Company engineers are struggling to significantly improve the capabilities of its Behemoth large language model." ([Approx. 12:00])
The delay comes despite Meta's substantial investments in AI, aiming to rival leaders like OpenAI, Google, and Anthropic. Internal frustrations have surfaced, with senior executives attributing the setbacks to the team behind the Llama 4 models. Meta is contemplating major management changes within its AI division to address these issues.
Despite the delays, Meta continues to tout Behemoth's potential, asserting that it outperforms its competitors on certain benchmarks. However, internal training challenges have hindered its overall performance, preventing it from matching the latest frontier AI models.
Windsurf has unveiled SWE1, its inaugural family of software engineering AI models, positioning them against industry leaders like Claude 3.5, Sonnet GPT 4.1, and Gemini 2.5 Pro. According to TechCrunch:
"The startup claims its largest model matches Claude 3.5, Sonnet GPT 4.1, and Gemini 2.5 Pro on internal programming benchmarks." ([Approx. 14:30])
The SWE1 suite includes SWE1 Lite and SWE1 Mini, available to all users on Windsurf's platform, both free and paid. However, the flagship Swe1 model remains exclusive to paid subscribers. Windsurf emphasizes that their models are optimized not just for coding but the entire software engineering process, addressing limitations seen in current models that struggle with multi-surface interactions like terminals, IDEs, and the internet.
Nicholas Moy, Windsurf's Head of Research, stated:
"Coding is not software engineering. Our models are trained to handle incomplete states, long-running tasks, and multiple surfaces seamlessly." ([Approx. 17:45])
This launch signifies Windsurf's strategic move to develop proprietary AI models, diverging from the reliance on giants like OpenAI and Google, and aims to solidify their position in the Vibe coding space alongside startups like Cursor and Lovable.
Apple has introduced CarPlay Ultra, the next-generation version of its in-car infotainment system. Initially available in Aston Martin models across North America, the rollout is set to expand shortly to other manufacturers including Hyundai, Kia, and Genesis:
"CarPlay Ultra integrates vehicle controls with the CarPlay experience, including taking over display of the instrument cluster and gauges." ([Approx. 18:10])
9to5Mac reports that CarPlay Ultra offers advanced features such as:
Despite the promising features, Apple has not provided a specific timeline for broader availability beyond Aston Martins. The company also showcased renders featuring Porsche vehicles, indicating ongoing collaborations with luxury automakers to enhance the CarPlay Ultra experience.
The episode highlights an innovative advancement in wireless charging technology. Infrared Wireless Charging allows devices to charge across a room without the need for physical contact or specialized charging pads. As detailed by The Verge:
"A wide charge transmitter in my ceiling has been shooting infrared lasers at a photovoltaic panel on the specially modified Alfred DB2S smart lock, keeping its battery hovering at 100%." ([Approx. 19:50])
This setup, albeit costly at around $1,250 and requiring installation modifications, showcases the potential for seamless power integration in smart homes. Users can maintain device functionality without the inconvenience of frequent battery replacements or wire management.
A feature on A24, the film studio renowned for its indie successes, discusses its meteoric rise and significant influence in Hollywood. Dirt publication elaborates on A24's strategy to blend artistic integrity with mainstream appeal:
"A24 has become both a very telling kind of punching bag, absorbing any number of wider systemic issues and anxieties, and a hero single-handedly rescuing cinema from a swift death." ([Approx. 20:10])
From launching A24 Books to curating high-quality cinematic experiences, the studio has solidified its brand as a beacon of innovative storytelling. With substantial investments and strategic board appointments, A24 is poised to continue shaping the future of film amidst an industry dominated by blockbuster franchises and nostalgia-driven productions.
In this episode of Techmeme Ride Home, Brian McCullough navigates through major tech controversies and innovations, from the high-stakes battle between Epic Games and Apple, to the sophisticated yet rudimentary method of hacking through bribery at Coinbase. Meta's struggles with its Behemoth AI model and Windsurf's entry into proprietary AI coding solutions highlight the intense competition and rapid evolution within the tech industry. Additionally, Apple's latest venture into automotive infotainment with CarPlay Ultra signals a deeper integration of technology into everyday life. The weekend reads offer a glimpse into future technologies and the cultural impact of influential media companies like A24.
Note: Advertisements and promotional segments have been excluded from this summary to focus solely on the informative content discussed in the episode.