Microsoft is inviting Windows users to grant its Copilot feature access to their files and activities, with user consent. The new iteration of Copilot can understand content on the device, perform tasks like organizing files, troubleshooting, and writing code, with some tasks processed in the cloud. Activation is opt-in, folder access is limited, and Copilot operates under separate accounts from users. Microsoft has implemented safeguards, including Microsoft Execution Containers to define agent access. However, internal warnings from Microsoft's security team highlight potential risks associated with agents capable of modifying environments. Features for enhancing auditability of agent activities are under development. Microsoft previously faced criticism for its Recall feature, which raised security concerns. The opt-in design places accountability on Microsoft, as users must grant access. The hybrid features require a Copilot+ PC and are set to roll out in the coming months, with taskbar search actions already reaching Windows Insiders. Over 40 percent of newly manufactured business laptops are Copilot+ PCs, with the Surface Laptop Ultra launching on October 16.
Garry Newman, founder of Facepunch Studios, addressed criticisms of the s&box platform in a YouTube response to the community. He acknowledged the challenges since the game's launch, admitting, “We can't get away from that, we fucked it. We weren't ready and we fucked it.” Critiques highlighted include backlash against the player character models, Facepunch's reluctance to change unpopular designs, the suggestion that a delay could have improved the game's release, issues with low-quality games affecting discoverability, and a lack of community engagement. Newman recognized the importance of independent criticism and the role of voices like Eridium in holding the studio accountable. He also commented on the uncertain landscape of user-generated content (UGC) amid the rise of AI, stating it could be either the worst or best time to launch a UGC platform.
Mike Tomlin has spent 12 years building a detailed virtual city in Minecraft, initially as a way to bond with his children. His city features hotels, apartments, sports venues, and an aquarium, serving as a therapeutic escape from coaching pressures. Tomlin's project developed between 2014 and 2025, coinciding with the Steelers' struggles in the NFL Playoffs despite having talented rosters. Criticism arose from fans and former player Le'Veon Bell, who questioned Tomlin's dedication to the team. The city includes a large body of water, a boutique hotel with an executive spa, glass ceilings for natural light, an aquarium-themed apartment high-rise, a CVS, and various sports facilities. Despite his commitment to this project, Tomlin led the Steelers to a Super Bowl victory in 2009 and has maintained competitiveness in his coaching career.
Google has begun rolling out new Android developer verification rules starting September 30, affecting users in Brazil, Indonesia, Singapore, and Thailand. Certified Android devices running Android 7 or later will require apps from participating stores to come from verified developers. Approved platforms include Google Play, Samsung’s Galaxy Store, HONOR App Market, OPPO App Market, Xiaomi GetApps, vivo V-Appstore, and Transsion’s Palm Store.
While sideloading apps from unverified developers is still possible, the process has become more complicated. Users must enable a setting through Developer Options, authenticate their identity, restart their device, and wait 24 hours before installing such apps. Once activated, users can allow installations from unverified developers for seven days or indefinitely. ADB installations are exempt from the waiting period.
No immediate changes are occurring for users in the United States, and the global rollout of these requirements is planned for 2027.
The Google Clock app has faced criticism for its alarm functionality and reliability, prompting users to seek alternatives. Pixel Clock has emerged as a new contender, offering a user-friendly design and features such as a Wake-up mission that requires users to solve math problems to dismiss alarms. It includes alarm presets for napping, a sophisticated timer feature called Pixel Timer for time-blocking, and Smart Presets for various time management needs. The app also tracks timer analytics on a Stats page. Despite minor bugs, Pixel Clock has made a strong impression and is seen as a more reliable option compared to Google Clock.
Laurie Kirk, a Google researcher and former Microsoft reverse engineer, argues that the Windows NT kernel is superior to Linux in several aspects, particularly in its architecture for managing resources and access permissions. She emphasizes that her critique focuses on the system architecture rather than the user interface of Windows 11. Kirk raises concerns about Linux's suitability for AI agents due to its complex security model, while praising NT's object-based design and security framework. She speculates on an alternate history where Microsoft had created an "Open NT," allowing for customizable components, but acknowledges the challenges of maintaining forks in operating systems. Critics of NT highlight its performance and reliability issues, while Linux's open-source nature has contributed to its dominance in servers and cloud computing. Kirk suggests that future operating systems may need to balance the defined resource types of NT with the flexibility of Linux, especially as AI technology evolves.
Microsoft CEO Satya Nadella announced a unified Copilot experience that integrates Home, Code, and Autopilot into a single application, transforming the Microsoft 365 suite into a “super app.” Copilot is described as a “new OS for work,” serving as a central hub for productivity across various tasks and devices. The Home section features Chat and Cowork functionalities, while the Office section includes full integration of Word, Excel, and PowerPoint. The Code feature allows users to create applications using natural language, democratizing app development. Autopilot, previously known as Scout, functions as a virtual colleague that manages tasks and projects. Microsoft has revised its pricing model to include a standard per-user subscription for basic functionalities and a usage-based billing model for advanced features. The announcement on September 25 met the timeline set during the Build 2026 conference, although features are still being rolled out incrementally. The new Copilot experience aims to enhance user interaction with AI without introducing a new operating system.
Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007).
The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes.
Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate.
Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.
HSBC has restricted its Android app from functioning within Samsung's Secure Folder and Android's Private Space, causing many customers to lose access to online banking services. The bank described this as a "proportionate security control" to mitigate risks, stating that customers must use the app outside these environments. Feedback from users has been largely negative, with complaints about abrupt access loss and inadequate communication regarding the changes. Customers are unable to utilize web banking due to the app's requirement for multifactor authentication, and some have raised concerns about HSBC's compliance with the Financial Conduct Authority's Consumer Duty. HSBC has advised customers to access the app outside of protected spaces and mentioned the option of using a Physical Secure Key for desktop banking.
