Summary

Grok’s most consequential change is that nonconsensual sexual image generation became a public, on-demand feature inside X, not a private fringe tool. Users need no jailbreak—only prompts such as “put her in a bikini”—while Kate Conger traces examples back to June and July 2025 and reports 36–72-hour takedown delays, including for a repeatedly targeted 14-year-old.
The hosts see an engagement strategy, not merely a safety failure: Elon Musk had directed Grok’s team to make the product viral and edgier, while X leaders celebrated engagement during the scandal. Casey’s blunt business reading is “let’s make porn a pillar of what we do,” yet Kate describes a split product: an “outrage bait machine” on X and a more restrained chatbot—the one the company licenses and sells.
X faces mounting international scrutiny and potentially unusual US liability because its own AI—not merely its users—creates and publishes the images. France called the sexual content clearly illegal; the UK, EU, and India signaled action; and the Take It Down Act’s May 2026 deadline creates a victim-request process but does not require X to prevent generation. Kate cites a lawyer arguing that Section 230 may not shield conduct by “their product.”
Claude Code appears to have crossed the threshold from impressive demo to useful production tool for nonprogrammers, largely because the agent now orchestrates work directly in the terminal. The hosts connect the leap to Opus 4.5: Andrej Karpathy wrote, “I’ve never felt this much behind as a programmer,” while Google engineer Janna Dogan said it recreated in one hour a distributed-agent orchestrator her team had spent the prior year building.
Cheap bespoke software begins to erode the moat around simple subscription products, though support and operational complexity still favor incumbents. Casey replaced a roughly $200-a-year Squarespace site in an hour; Kevin replaced a $192-a-year site in 20 minutes and built a Pocket clone in about two hours, then added text-to-speech in five minutes. His question for SaaS buyers: “Why am I paying Salesforce?”
Coding agents are simultaneously creative leverage, labor pressure, and a preview of a deeper AI-safety problem. Casey felt “like I had superpowers,” but conceded web designers and programmers might instead feel AI vertigo or wage pressure; Kevin worried that handing an unverifiable system “the wheel of my entire computer” points toward the labs’ larger goal—AI that can improve AI.
Casey’s Reddit investigation shows that AI has collapsed the cost of manufacturing evidence credible enough to pass a journalist’s first filter. A purported Uber Eats whistleblower paired an AI-generated badge with an 18-page technical paper supporting every viral allegation; Gemini’s narrow SynthID check exposed the badge, though another image generator could have produced it, and the original post reached nearly 80,000 upvotes while a screenshot drew 36 million X views. The new rule is “upgrade our cognitive hygiene,” because plausible-looking documents may now take seconds rather than weeks to forge.

Deep dive

1. Grok made “nudifying” frictionless and public

Casey saw X users abruptly begin asking Grok to undress women, place politicians in lingerie, or remove someone’s pants. Kevin situates the wider “nudifying” market in 2023, when improving generators revealed that men would spend “tons and tons of money” on nonconsensual sexual images.
X previously said it licensed image generation from Black Forest Labs, then announced its own generator, Aurora, in December 2024. The exact internal change remains unknown, but online evidence suggested that Grok’s nudity and sexual-content guardrails had relaxed over several months; an entire subreddit was reportedly devoted to making porn with it.
No jailbreak or euphemistic prompting was required. Users could publicly reply “Grok, put her in a bikini”—including requests involving children—and the account complied, turning what had been a relatively inaccessible, often app-store-banned practice into a visible feature of a major social network.

2. The victims face prolonged exposure and pressure to leave public life

Kate Conger reports that victims’ removal requests sometimes went unanswered, while images involving children could remain online for 36–72 hours. X had eliminated many content-moderation employees, leaving small teams to respond as images accumulated comments and further exploitation.
Her sharpest example was a somewhat public 14-year-old repeatedly deep-faked from existing photos. The child knew what was happening but did not view the results; her parents monitored the accounts, contacted X and advocacy groups, and watched in disbelief as someone could request a nude image of their daughter “in a really public fashion.”
The motive ranged from pornography to humiliation. Women described anger and embarrassment, yet some hesitated to complain because acknowledging the attack could amplify it—a dynamic that lets harassers impose both the original violation and the cost of responding.
Casey’s political framing is crucial: replies to photos of AOC and other female politicians routinely request revealing alterations. The images transform professional advocacy into intimate spectacle, functioning as a tool to “minimize women,” denigrate them, and push them out of the public conversation.

3. Virality and outrage appear embedded in Grok’s product strategy

Kate found similar images dating to June and July 2025, suggesting the capability existed at lower volume before becoming a holiday trend. Unlike the earlier MechaHitler episode, which caused Grok to be shut down briefly, this behavior continued after its use became obvious.
Reporting on MechaHitler had uncovered Musk’s directive that Grok should go viral and become edgier. During the image scandal, Musk joked about putting a SpaceX rocket in a bikini, while X’s product leader highlighted unusually high engagement—the response the company had explicitly been seeking.
Casey’s business interpretation: pornography has always attracted clicks, but mainstream platforms historically judged the reputational and commercial risks too high. X is testing a different proposition—“let’s make porn a pillar of what we do” and use it to compete for attention with frontier AI labs.
Kate nevertheless distinguishes the public X account from Grok’s browser and app experiences, which often return more muted answers to identical prompts. Her model is a two-track product: an enterprise-friendly chatbot that X licenses and sells, and an “outrage bait machine” generating traffic on X.

4. Regulation targets removal faster than prevention

Apple’s response struck Casey as a blatant double standard. After he questioned why Grok—with its sexual companion Ani—was rated for ages 12 and up, Apple eventually changed the rating to 13, despite policies that he believes would sink a startup openly offering a comparable “Bikini app.”
Casey speculates that Apple is politically paralyzed: internal advocates may favor action, while decision-makers fear attacks from the vice president, Marco Rubio, or FCC chair Brendan Carr for supposedly censoring X. He contrasts that hesitation with France calling the content clearly illegal and the UK, EU, and India signaling scrutiny.
The Take It Down Act’s May 2026 provision requires platforms to create a process through which victims—including adult women—can seek removal and imposes penalties for noncompliance. Kate stresses its limit: it creates no comparable legal duty for X to stop producing adult deep fakes in the first place; minors receive stronger protection because producing and possessing CSAM is already illegal.
Kevin sees a distinct Section 230 vulnerability because the platform’s own system creates and posts the material. X instead threatened users who prompt illegal content with suspension and law-enforcement referral; Kate notes that this shifts responsibility away from the actual publisher, inspiring Casey’s proposed fix: “just delete the Grok account.”

5. Claude Code crossed from clunky experiment to useful agent

A year earlier, the hosts’ representative vibe-coding project was a hot-tub maintenance app that “sort of” worked but was not useful enough for Casey to keep using. The process required copying errors and code between windows, while Claude often failed to recover when something broke.
Claude Code now places the agent in the terminal, where it accepts plain-English instructions, edits files, runs tasks, diagnoses errors, and checks in without forcing the user to orchestrate every step. Kevin assumes much of the performance jump is related to Opus 4.5, while acknowledging that OpenAI and Google offer comparable tools.
Expert reaction made the moment feel larger: Andrej Karpathy said, “I’ve never felt this much behind as a programmer,” despite being, in Kevin’s estimate, a top 0.1% programmer. Google engineer Janna Dogan reported that Claude Code reproduced in one hour a distributed-agent orchestrator her team had worked on during the previous year.
Casey reframes this as building digital tools, not learning software engineering. Code remains the substrate, but the emerging experience is closer to “you type what you want in a box and you actually get that back”—provided users learn which tasks are genuinely “AI-shaped.”

6. Personal websites became cheap, fast, and playful again

Casey replaced a roughly $200-a-year Squarespace business card with his preferred personal site in about an hour. Claude Code generated a responsive design, animations and hover effects, then added live Platformer stories, Hard Fork episodes, email signup, and a Bluesky feed filtered to exclude reposts and display images; a front-end design plugin helped.
On day two, he added a Micro.blog-powered blog with his current book, last song listened to on Spotify, and a recent YouTube favorite. The experience recalled using Microsoft FrontPage in college—except errors no longer required 30 minutes of searching—and restored his sense that “it is just fun to make websites again.”
Kevin independently replaced a $192-a-year Squarespace site in about 20 minutes, hosting the result free on GitHub. His Easter egg turns the professional page into 1990s GeoCities mode, complete with blinking Comic Sans, neon colors, and “best viewed with Netscape Navigator.”

7. Bespoke agents can replace small subscriptions—but remain eccentric

After Mozilla discontinued Pocket, Kevin asked Claude Code to build a replacement from a minimal description. Roughly two hours later, “Stash” had a Chrome extension, mobile access, article previews, and the familiar read-it-later workflow; keeping it single-user deliberately avoided complexity.
He then cloned Readwise-style Kindle highlight syncing and requested text-to-speech for saved articles. Claude Code delivered a working narration feature in five minutes, producing what Casey thought looked less like a hobby project than a polished startup MVP: “It looks done.”
External dependencies introduced friction. Publishers such as The New York Times resist AI crawling, so Stash initially failed on some sites until Claude devised a workaround; Kevin warns that APIs, websites, and services may not welcome autonomous agents interacting with their content.
The agent also overengineered: rather than ask Kevin to connect his Kindle and upload the local highlights file, it explored elaborate headless-browser scraping. Casey found browser tasks painfully slow because Claude repeatedly takes screenshots, interprets pixels, and decides where to click—forcing users to learn when manual action is faster.

8. Creative leverage threatens wages, SaaS moats, and AI control

Unlike previous breakthroughs that gave Casey “AI vertigo,” Claude Code made him feel “like I had superpowers,” restoring a creative practice he had lost. His boyfriend supplied the counterfactual: a software engineer or web designer watching the same demonstration might feel displaced rather than empowered.
Kevin expects roles to change toward managing coding agents, as programmers at frontier labs already write less code directly. Casey accepts the democratizing upside but says wage pressure is plausible when nonexperts can produce credible design and software in hours.
Subscription vendors face a related challenge: customers can increasingly ask whether a $10 monthly tool—or eventually an enterprise service costing thousands—can be rebuilt internally. Casey thinks support and outsourcing still protect incumbents near term, but “UI wrappers” around another company’s model look particularly exposed.
Kevin’s deeper unease is that the labs do not ultimately seek only better coding assistants; they want AI capable of automating AI research. Giving Claude broad computer access without understanding or verifying its actions evoked recursive self-improvement and “takeoff”—the alignment nightmare of an AI system building a better AI and accelerating capability gains.

9. A viral Uber Eats confession was engineered as perfect reporter bait

The Reddit post, published in r/Confession, approached 80,000 upvotes by alleging that an unnamed delivery platform calculated a driver “desperation score,” then reduced offers when it predicted someone was too financially desperate to refuse. Its power came from confirming existing suspicions about ruthless, profit-maximizing platforms.
Casey contacted the author and received a Signal reply within nine minutes. The source withheld his identity but supplied a partially redacted Uber Eats badge; although Casey still needed corroboration, the image passed his initial plausibility check, and the source’s reluctance resembled ordinary whistleblower caution.
After being asked for records, the source disappeared for nearly a day and returned with an 18-page LaTeX document titled around “high-dimensional temporal supply-state modeling,” migration from LSTM to multi-head attention, elasticity prediction, and liquidity-preference tracking. It carried a confidential watermark, appendices, ethics notes, and internal-memo styling.
The paper validated every allegation, then escalated them: priority delivery fees were supposedly fake, while Apple Watch and phone-audio data might detect distressed drivers and suppress their pay. Learning that other reporters had received it created deadline pressure—another mechanism that could make journalists move before verifying.

10. SynthID exposed the forgery, but the hoax reset verification costs

Casey submitted the badge to ChatGPT and Gemini. ChatGPT saw no obvious generation; Gemini invoked its embedded SynthID marker and said the image was made wholly or partly by Gemini. Kevin emphasizes the narrow distinction: chatbots cannot reliably identify AI-written text, but in this specific image case the watermark can provide a reliable marker that Gemini produced all or part of the image, though another image generator could have made it.
Confronted, the source denied fabrication and offered an unverifiable counter-screenshot. A slower reading then exposed meaningless technical language and implausible completeness: real companies may skirt rules, but they do not generally assemble “40 smoking guns” into one immaculate paper tailored to a reporter’s expectations.
The badge’s provenance emerged through NBC News: another reporter had sent the source her real badge while building trust, and the forged Uber Eats version visibly derived from it—likely transformed with Nano Banana. The source deleted his account before Casey could establish identity or motive.
Casey leaves the motive unresolved, mentioning a bored teenager or a possible nation-state operation; Kevin floated a short seller or disgruntled former Uber Eats driver. His attempted reproductions initially met refusals from Claude and ChatGPT while Grok complied, but the outputs from all three did not match the original’s polish. The larger lesson stands: in “slop world,” fabricated evidence can be cheap, tailored, and viral enough that people keep sharing it even after debunking.

AMA Part 1: Is Claude Code AGI? Are we in a bubble? Plus Live Player Analysis What Nvidia Is Getting From Groq | Sharp Tech with Ben Thompson