Zero Downtime

About Zero Downtime

Zero Downtime brings together tech, business, and the everyday experiences of running an IT company. John and Logan discuss what’s going on in their world, the questions people ask them most, and talk with other business owners and professionals in conversations that are real, relaxed, and worth your time.

Publisher

John Hass

Category

news · technology

Language

en

Explicit

No

First episode

24 Nov 2025

Latest episode

12 Oct 2026

Latest episodes

47 episodes in the feed.

1. 

   12 Oct 2026

   iPhone 18 Pro Max Broken on AT&T, ArtCraft Rebuilds Adobe, Citrix Was That Bad, Don’t Hack FBI

   Some iPhone 18 Pro Max owners on AT&T have phones that can’t reliably make phone calls, and Apple says the already-broken ones need hardware replacement. A group of developers is rebuilding Adobe’s entire creative suite from scratch as open-source Rust applications. The Citrix NetScaler story we covered last week turned out to be exactly as bad as the shutdown warnings suggested. And a suspected ShinyHunters member who allegedly hacked the FBI is now reportedly helping the FBI identify everyone else in the group. This week, John and Logan cover five stories from Apple’s launch problems, the open-source Adobe exit, confirmed cybersecurity zero-days, and the ongoing Microsoft reliability report. Stories in this episode: iPhone 18 Pro Max is broken on AT&T. AT&T customers started reporting intermittent or complete cellular failures almost immediately after launch. Calls would fail. SMS would not arrive. Data would stop working. On October 3, Apple publicly confirmed the issue and released iOS 27.0.1 plus a new AT&T carrier settings update. Those are meant to prevent unaffected phones from developing the failure. Phones that have already lost service require hardware replacement. Adobe on Linux. A group of developers has started building open-source clean-room reimplementations of Adobe’s entire creative lineup, mostly in Rust. PhotoCraft for Photoshop. VectorCraft for Illustrator. FilmCraft for Premiere. The applications are young and several are alpha. But after a decade of Adobe subscriptions, early termination fees, FTC lawsuits, forced AI, and cloud features getting discontinued, somebody is finally building the door. Citrix NetScaler zero-days confirmed. Citrix disclosed eight NetScaler vulnerabilities including CVE-2026-88771 and CVE-2026-88772, both at 9.5 severity. Mandiant reported exploitation since early September across government, financial services, technology, education, and telecom. Attackers obtained root access, deployed custom malware, and conducted internal reconnaissance. Patching does not necessarily evict an attacker who got in before you patched. Don’t hack the FBI. “Rey” (Saif al-Din Khader), a suspected ShinyHunters member detained in Jordan, is reportedly cooperating with the FBI and helping investigators identify other group members. The FBI publicly said “arrests have a way of changing who is willing to talk.” Apparently they do. Plus the Microsoft Weekly Damage Report covering Outlook auto-installing unwanted add-ins, Copilot buttons disappearing from classic Outlook, Intune Autopilot broken for a day, Copilot in PowerPoint going silent, a SharePoint and OneDrive incident Microsoft later said never happened, and Microsoft accidentally deleting Microsoft 365 data for some nonprofits that Microsoft says cannot be recovered. New episodes weekly. Follow Zero Downtime for cybersecurity, AI, privacy, and the tech stories that actually matter.

2. 

   5 Oct 2026

   WinRAR Sells a $150 Bag, Citrix Zero-Days Hit, 16-Year-Old Owns Microsoft Admin, MS Damage

   WinRAR may have finally figured out how to get people to give them money, and it only took three decades. The answer wasn't licensing enforcement. It was a $150 messenger bag shaped like the WinRAR icon. Meanwhile, there are credible reports of two actively exploited Citrix NetScaler zero-days, a 16-year-old typed "admin" into a Microsoft analytics platform and got access to 17 trillion rows of data, and Microsoft's Weekly Damage Report is back with another seven days of broken things. This week, John and Logan cover four stories from the strange corners of cybersecurity, software economics, and ongoing Microsoft reliability. Stories in this episode: WinRAR finally gets paid. The company that has spent three decades politely asking people to pay for a software license apparently discovered the actual monetization strategy was always merchandise. WinRAR partnered with fashion brand Tern to release a $150 messenger bag shaped like the WinRAR icon. A single-user license costs about $29. People who refused to pay $29 for the software are apparently willing to pay five times that amount to physically walk around dressed as WinRAR. Citrix NetScaler zero-days hit. There are credible reports of two previously undisclosed remote code execution vulnerabilities in NetScaler ADC and Gateway appliances, and that they may already be under active exploitation. Security firm watchTowr says it has high confidence that multiple unpatched NetScaler RCE vulnerabilities are being exploited in the wild. Some administrators have reportedly been told to shut their NetScalers down, not patch them. 16-year-old owns Microsoft admin. A researcher named Faav found that Microsoft's internal Titan analytics platform validated JWT claims (tenant, audience, application ID, username) but did not actually verify the cryptographic signature. He created an unsigned JWT, changed the username field to "admin," and Titan mapped him to local user ID 1 with the Administrator role. That gave him SQL query access to analytics infrastructure containing an estimated 17 trillion rows across 17 ClickHouse databases, including Bing analytics. The bounty: $5,000. Microsoft's Weekly Damage Report. Office 2016 and 2019 perpetual licenses forgot they were paid for. Teams had a 49 minute connectivity incident. Teams Rooms calls dropped after 30 seconds on certain Poly Android devices. Word saved PDFs to SharePoint by quietly saving them to a local cache instead. Exchange Online could not reply or reply-all to Microsoft 365 Group messages. Copilot could not Copilot. And School Data Sync had a nearly five day education services outage. New episodes weekly. Follow Zero Downtime for cybersecurity, AI, privacy, and the tech stories that actually matter.

3. 

   28 Sept 2026

   Flock Layoffs Begin, Windows Tracks You Without an Account, FCC Starts LoRa Civil War, MS Damage

   Flock Safety, the $8 billion license plate reader company, just launched a "voluntary" employee separation program while cities across the country cancel their contracts. Windows quietly assigns a persistent 64-bit device identifier even when you set up a local account. The FCC has accidentally started a civil war inside Meshtastic and MeshCore mesh networks. And Microsoft's second Weekly Damage Report covers what got fixed and what is still broken after Patch Tuesday. This week, John and Logan break down four stories covering surveillance, privacy, radio regulations, and the ongoing state of Windows. Stories in this episode: The Flock is getting smaller. WIRED reported that Flock has launched a voluntary employee separation program roughly twice as generous as previous severance offers. Communities are dropping the surveillance camera vendor faster than ever, with 93 city and county governments cutting ties in August alone. Boston abandoned Flock after a vendor error enabled nationwide data sharing that its contract had explicitly disabled. The Washington Post reported dozens of cases where officers were accused of misusing the system to search for wives, girlfriends, or former romantic partners. Windows tracks you without an account. A new open-source project called deGDID documents Microsoft's server-assigned 64-bit Device PUID, which Windows can obtain from Microsoft's infrastructure even on machines set up with a local account. A 2026 court case revealed that Microsoft possessed information associating one of these identifiers with URLs, timestamps, and IP addresses. The project does not claim to make Windows anonymous. It documents what this identifier does and offers a tested way to block and remove it. FCC starts a LoRa civil war. Meshtastic and MeshCore communities discovered that the default configurations most Americans use may not comply with FCC 47 CFR 15.247, which requires a minimum 6 dB bandwidth of 500 kHz. Meshtastic's Long Fast default is 250 kHz. MeshCore's default has been 62.5 kHz. Fixing this fractures the network effect that made the system useful in the first place. Microsoft's Weekly Damage Report. Remote Desktop Services, Hyper-V Linux folder sharing, and Active Directory trust were broken by September's Patch Tuesday and are now marked resolved. USB Audio Class 1.0 devices are only partially fixed. File History quietly stopped creating and updating backups with no fix yet. And a false "Defender is turned off" warning got officially resolved even though Defender was actually running the whole time. New episodes weekly. Follow Zero Downtime for cybersecurity, AI, privacy, and the tech stories that actually matter.

Reach and audience

Public platform figures. Ratings count people who left a rating, not total listeners.

Apple Podcasts (US)

5.0 / 5

2 ratings

Contact Zero Downtime

Guest appearances

Does not typically book guests

Based on episode analysis; this does not confirm that the show is currently accepting guests.