Google detailed further network security changes coming with Android 17, including support for the Encrypted Client Hello protocol that encrypts DNS server lookups, a feature letting carriers automatically block low-security 2G connections used in SMS Blaster spam attacks, and restrictions preventing apps from scanning home networks for vulnerable devices. The update also builds on previously announced Certificate Transparency enforcement to ensure phones connect using legitimate SSL certificates.
Israeli security researchers scanned over 6,000 corporate domains and found 120 llms.txt/llms-full.txt files—AI-readable site guides similar to robots.txt—referencing unregistered code packages or domains. When the researchers claimed those names and set up beacons, dozens of organizations, including Fortune 500 firms, triggered phone-home connections within hours, with process logs showing AI coding agents like Claude, Codex, and Hermes had automatically fetched and executed the unowned code. At least one misconfigured site was already pointing to live malware.
New Wendy's CEO Bob Wright has detailed a five-part strategy to reverse the chain's slide behind Burger King into third place among U.S. burger chains, citing prior 'quality degradation' as a key cause. The plan covers menu and ingredient improvements, fixing inconsistent store operations, selectively closing weak locations while opening new ones, overhauling marketing with new hire Tariq Hassan as chief marketing and customer growth officer, and scaling back reliance on discount promotions in favor of core menu value.
Google has built Encrypted Client Hello (ECH) directly into Android 17, making it the first major mobile operating system to support the standard at the platform level and turning it on by default. ECH hides the specific website or domain a device is connecting to, so internet providers can only see the content delivery network being used, not the actual destination. Alphabet's Jigsaw division, which developed the feature, says it addresses a long-standing gap in HTTPS privacy protections.
CrowdStrike and Okta both topped Wall Street's second-quarter estimates and raised their forecasts, pointing to rising AI-related cyberattacks as a driver of increased customer spending on security tools. CrowdStrike shares rose 15% and Okta jumped 20%, while Palo Alto Networks, SailPoint and Rubrik each gained roughly 9% as the sector rallied broadly.
Communities in Texas, New Mexico and Arizona are protesting new AI data centers over concerns about water consumption, energy use and pollution. Data centers use water for cooling systems that manage heat generated by processors, which can reach internal temperatures near 176 degrees Fahrenheit. While estimates suggest data centers consumed about 66 billion liters of water in 2023—under 1 percent of total U.S. water use—that figure could grow sharply as AI infrastructure expands.
AC2 is a new open protocol designed to let AI agents request verifiable human sign-off before taking consequential actions, such as merging code, sending client messages, calling APIs, or executing payments. It installs into existing frameworks via a plugin and single command, using DIDComm v2.0 messaging and passkey authentication through Liquid Auth (FIDO2/WebAuthn), without needing a central relay server or blockchain.
The webcomic XKCD published a strip poking fun at the logic and rhetoric surrounding international trade and tariffs. As with all XKCD content, the comic is released under a Creative Commons Attribution-NonCommercial license, allowing free sharing but not commercial resale.
A new launch-coordination product lets companies invite team members, customers, investors and partners to write and schedule their own posts about a product launch, using only an email address to join—no account creation required. Participants draft posts inside a preview of the real platform, retain full control of their wording and accounts, and can optionally connect their social accounts through the platform's native sign-in rather than sharing credentials. The service is free for all steps up to scheduling, with unlimited self-scheduled posts, and charges only when a coordinated multi-person launch is actually scheduled to publish.
Apple has warned users of possible mercenary spyware targeting since 2001 via email, iMessage, and account banners. Since September, these threat notifications now also appear directly on a device's Lock Screen and in Settings, making them far more difficult to overlook. The alerts signal potential targeting by commercial surveillance tools from firms like NSO Group, Paragon, or Cytrox, but do not confirm a successful attack or identify the attacker.
A new service called Pause pairs London professionals for weekly 45-minute one-on-one coffee conversations based on neighbourhood proximity, aiming to strip away small talk and agendas. The launch, shared as a Show HN post, also outlines related offerings including skill-swap matches between people with complementary expertise and a curated list of quiet cowork spots in independent cafes.
Ok Go's Andy Ross has released a new mobile game called Say the Same Thing, which challenges two players to independently guess a single word that connects two given prompts. The app is being compared to Wordle for its simple, shareable, daily-puzzle style format.
GoKawiil