
XChat Claims Encryption but Keys Sit on X's Servers
XChat launched April 24 promising end-to-end encryption, but security researchers found private keys stored on X's own servers, no certificate pinning, and a four-digit PIN as the only defense.
They summarize our coverage. We write it.
Newsletters like this one rebroadcast our headlines - often without the full review, the source reading, or the analysis underneath. Our weekly briefing sends the work they paraphrase, straight from the desk, before they get to it.
Free, weekly, no spam. One email every Tuesday. Unsubscribe anytime.

XChat launched April 24 promising end-to-end encryption, but security researchers found private keys stored on X's own servers, no certificate pinning, and a four-digit PIN as the only defense.

OpenAI CEO Sam Altman sent an apology to Tumbler Ridge two months after eight people were killed - now Canada is weighing mandatory reporting laws for AI companies.

A hands-on comparison of six leading AI identity verification platforms - Veriff, Persona, Jumio, Entrust IDV, Stripe Identity, and Socure - covering pricing, accuracy, deepfake detection, and which fits your use case.

OpenAI released Privacy Filter today, a 1.5B MoE with 50M active parameters that tags eight categories of PII in text. Apache 2.0, 128K context, runs in a browser via WebGPU.

Meta is installing monitoring software on U.S. employee computers to capture keystrokes, mouse movements, and screenshots for training computer-use AI agents.

Sam Altman's World project launched World ID 4.0 at a San Francisco event on April 17, signing Tinder, Zoom, DocuSign, and Okta as partners while introducing Agent Kit to authorize AI agents.

MZLA Technologies launches Thunderbolt, an open-source self-hostable AI client targeting enterprises locked into Copilot, ChatGPT Enterprise, and Claude - with local SQLite storage and full model freedom.

A hands-on comparison of the best AI browser agents in 2026 - Perplexity Comet, Dia, Opera Neon, Chrome Gemini, Brave Leo, Fellou, and more - rated on agentic task depth, privacy, price, and platform support.

Governor Newsom signed EO N-5-26 on March 30, requiring AI vendors seeking California state contracts to certify safeguards on privacy, bias, and civil liberties - directly countering the Trump administration's push to strip state AI authority.

Starting April 24, GitHub will use Copilot Free and Pro users' interaction data to train AI models by default - with opt-out buried in settings.

A plain-English guide to how ChatGPT, Claude, and Gemini remember you - what gets stored, how to manage it, and what to keep private.

Niantic trained a visual positioning AI on 30 billion images collected from Pokemon Go players over eight years. The data now guides delivery robots with centimeter-level accuracy.