Linux Copy Fail kernel exploit & Congress targets AI companions minors - Tech News (May 1, 2026)

Please support this podcast by checking out our sponsors: - Discover the Future of AI Audio with ElevenLabs - https://try.elevenlabs.io/tad - Lindy is your ultimate AI assistant that proactively manages your inbox - https://try.lindy.ai/tad - SurveyMonkey, Using AI to surface insights faster and reduce manual analysis time - https://get.surveymonkey.com/tad Support The Automated Daily directly: Buy me a coffee: https://buymeacoffee.com/theautomateddaily Today's topics: Linux Copy Fail kernel exploit - Security researchers revealed Copy Fail (CVE-2026-31431), a Linux kernel flaw enabling a controlled overwrite in page cache and potential root escalation without changing on-disk files. Congress targets AI companions minors - The GUARD Act advanced unanimously, pushing age verification and banning AI “companion” chatbots for minors, reigniting debates on privacy, free speech, and online enforcement. Big Tech ramps AI data centers - Wall Street forecasts now point to a multi-year AI infrastructure super-cycle, with hyperscaler capex projected toward the trillion-dollar range as data-center demand outpaces supply. AI beats ER doctors in study - A Science study reports an OpenAI reasoning model outperformed experienced emergency physicians on diagnosis and management decisions using EHR text, fueling calls for real-world clinical trials. Mozilla warns on browser Prompt API - Mozilla criticized Google’s Prompt API experiments in Chrome and Edge, warning that model-tied browser AI features risk interoperability issues, vendor lock-in, and new content-policy pressure. Karpathy says coding turned agentic - Andrej Karpathy argues coding hit an “agentic inflection point,” where prompts and supervision become the new program—shifting hiring and product design toward evaluation and guardrails. Developer tools rethink forges and bugs - Commentary across the developer ecosystem questions GitHub-style workflows and the dream of “zero bugs,” emphasizing better feedback loops, review ergonomics, and realism about tooling limits. New speedups for searching arrays - New research suggests classic binary search can be beaten on modern CPUs by combining SIMD comparisons with smarter range narrowing—especially for small sorted arrays like bitmap containers. Humanoid home robots enter production - Robotics firm 1X says it’s moving from prototypes to scale, starting full production of its humanoid home robot NEO in California—signaling faster iteration and broader deployment. Biotech rewrites proteins and clotting - Two Nature and Science reports highlight synthetic biology advances: a 19–amino-acid ribosome strategy for redesigned organisms, and a rapid “click clotting” approach for emergency bleeding control. Fiber-linked drones evade jamming - Hezbollah’s fiber-optic FPV drones, guided by a thin cable rather than radio, are reportedly injuring soldiers and challenging electronic defenses—an innovation spreading beyond Ukraine. Netflix and Microsoft reshape entertainment - Netflix is rolling out a TikTok-like Clips discovery feed, while Microsoft expands a controller-friendly Xbox Mode across Windows 11—both aiming to reduce friction in how people find and play content. Episode Transcript Linux Copy Fail kernel exploit We’ll start with that Linux security story. Researchers disclosed a kernel flaw they’re calling “Copy Fail,” tracked as CVE-2026-31431. The headline is unsettling: an unprivileged local user can perform a small but controlled overwrite in the page cache for any readable file. In plain English, the system can be tricked into using a modified in-memory version of a file, even though the file on disk still looks untouched. The researchers say they can leverage this to gain root by targeting a setuid program, and they also hint at implications for containers because the page cache can be shared. The fix is upstream, but the practical takeaway is simple: patch quickly, and treat this as a reminder that “the disk hash matches” isn’t always the end of the story. Congress targets AI companions minors Next, Washington is moving to put federal guardrails around a very specific AI category: “companion” chatbots. The Senate Judiciary Committee unanimously advanced the GUARD Act, backed by Senators Josh Hawley and Richard Blumenthal, with a companion bill introduced in the House. The core idea is age verification and a ban on offering AI companion experiences to minors, plus requirements that the bot frequently reminds users it’s not human and doesn’t have professional credentials. The bill also goes after the worst-case scenarios—criminal penalties for systems that solicit sexual conduct from minors or encourage suicide. Supporters point to parent complaints alleging harmful and sexual conversations, and in some cases links to self-harm. The interesting tension is what comes next: if Congress mandates age verification, the debate quickly becomes less about AI and more about privacy, speech, and how intrusive the modern web becomes when it has to prove who you are. Big Tech ramps AI data centers Over in Big Tech, analysts are resetting expectations for how long the AI buildout lasts—and how expensive it gets. After recent earnings calls from Alphabet, Amazon, Microsoft, and Meta, Wall Street forecasts for AI-related capital spending moved up again. The narrative is that demand is still outrunning supply, and the infrastructure rush is being extended by rising component costs and the need for more data-center capacity. Executives are trying to reassure investors by pointing to early monetization, particularly cloud growth and backlogs that could turn into revenue. But the market is watching free cash flow closely, especially where spending climbs faster than near-term returns. The big “why it matters” is that this looks less like a one-year sprint and more like a multi-year super-cycle—good news for chip and networking suppliers, and a stress test for how profitable the AI era really is. AI beats ER doctors in study AI’s impact on work showed up in two very different ways today. First, a New York Times opinion piece says a growing number of people in Silicon Valley privately expect advanced AI to wipe out large portions of white-collar jobs, weakening workers’ leverage and concentrating power among AI firms and capital owners. Whether you agree or not, it captures a real mood shift: some leaders now talk about labor displacement as an assumption rather than a risk. The second angle is policy—if disruption is considered inevitable, pressure rises for responses like retraining, shorter workweeks, new safety nets, or taxes on AI-era gains. In other words, the “jobs question” is rapidly becoming a core part of AI strategy, not an afterthought. Mozilla warns on browser Prompt API On the healthcare front, there’s a study that will turn heads—and should still be read carefully. A paper in Science reports an OpenAI-developed “reasoning” model outperforming experienced emergency room physicians on diagnosis and care-management decisions, using only the text information available in electronic health records at the time. Researchers scored performance across stages, from triage to admission, and highlighted cases where the model spotted tricky conditions doctors missed. The caution flags are important: real medicine isn’t only text, and better answers on a test don’t automatically mean better outcomes in a chaotic ER. Still, this is another data point that the frontier is moving fast, and it strengthens the argument for prospective trials—studies where AI is evaluated in real workflows with real patients and real consequences. Karpathy says coding turned agentic Now to a fight over the future shape of the web. Mozilla is pushing back against Google’s proposed Prompt API, a browser feature being tested in Chrome and Edge that lets websites send prompts to a browser-provided local model. Mozilla’s concern isn’t just performance or hallucinations—though those are part of it—it’s that if websites begin to rely on a browser’s built-in model behavior, the web risks splintering into vendor-specific prompt tuning. Mozilla also warns it could quietly pull developers into one company’s AI usage policies, creating a new kind of platform control. This is the early stage of a familiar story: browsers want to ship new capabilities, and the ecosystem asks whether they become standards—or yet another way the web stops being truly portable. Developer tools rethink forges and bugs Developer culture had a big “where are we headed?” moment, thanks to a detailed write-up from Andrej Karpathy. He argues coding crossed an “agentic inflection point” around late 2025, shifting work from writing lines of code to delegating chunks of work to AI agents—and then supervising, checking, and steering the results. The real takeaway isn’t the slogan, it’s the implication: the scarce skills move toward judgment, evaluation loops, and security boundaries—because you can outsource effort, but you can’t outsource responsibility. It’s also a hiring signal: interviews that reward puzzle tricks may matter less than proving you can manage fallible agents in messy, real-world systems. New speedups for searching arrays And that pairs with a broader critique of today’s developer platforms. One essay argues modern code forges—think GitHub-style workflows—have converged on a model that doesn’t match how teams actually work anymore. The complaint is that feedback is too delayed: you push, then you wait for checks, then you iterate. The proposed direction is faster, enforced pre-commit checks, richer review states than simple approve-or-reject, and better support for stacked changes that reflect how work is actually built. Alongside that, curl maintainer Daniel Stenberg offered a reality check on “zero bugs.” Even with better analyzers and AI assistance, he doesn’t see evidence that vulnerability discovery is collapsing toward only brand-new bugs. Net-net: tools are improving, but software isn’t magically becoming defect-free—and governance and workflow still matter as much as automation. Humanoid home robots enter production If you like performance nerd news, there’s a smart reminder that even classic algorithms can age. Research suggests standard binary search isn’t always the best way to check membership in small sorted arrays on modern CPUs. By leaning on SIMD comparisons—basically checking many values at once—and narrowing the search more efficiently, the approach beat typical library implementations in benchmarks. The broader point isn’t “everyone rewrite your search.” It’s that hardware changes over time, and our default algorithms sometimes lag behind what chips are now good at. Biotech rewrites proteins and clotting In consumer and platform tech, Netflix is rolling out a vertical, TikTok-style discovery feed called Clips, meant to make it easier to find something to watch by swiping through short snippets. It’s another sign that streaming is borrowing the language of social apps: less browsing, more continuous sampling, and more sharing. Meanwhile Microsoft is expanding “Xbox Mode” across Windows 11—pushing a controller-friendly interface that aggregates game libraries across multiple storefronts. Early reports say it can be a bit glitchy, and performance gains are modest, but strategically it matters: it further blurs the line between a console and a Windows PC, and hints at where Xbox hardware could be headed. Fiber-linked drones evade jamming Robotics also took a step from promise to production. Company 1X says it has started full-scale manufacturing of its humanoid home robot, NEO, at a factory in California, with shipments expected to begin in 2026. There’s still a big gap between “factory capacity” and “robot that works reliably in real homes,” but scaling up manufacturing is a meaningful milestone. It’s one thing to show a prototype; it’s another to build support, reliability, and iteration cycles around real customers. Netflix and Microsoft reshape entertainment Finally, two biotech stories worth knowing—because they show how fast synthetic biology is moving. One team reengineered bacteria so a key piece of machinery, the ribosome, can function without one of the standard amino acids, effectively operating on a reduced protein alphabet. That’s a potential foundation for organisms designed to behave in more controlled, safer ways. And a separate Nature study demonstrated a rapid “click clotting” method that makes red blood cells snap together into a strong clot in seconds in animal tests. It’s early, and human safety is the big question, but the direction is compelling for trauma care where minutes matter. Story 13 And one more item from the conflict-tech file: Hezbollah has reportedly begun using fiber-optic first-person-view drones that are guided through a thin cable rather than radio or GPS. The significance is that electronic jamming—often a go-to defense—becomes far less effective. That forces defenders toward harder problems like detecting tiny, fast targets or physically disrupting the cable. It’s a stark example of how battlefield innovation spreads: tactics proven in one war can show up elsewhere quickly, and sometimes the low-cost workaround beats the high-tech shield. Subscribe to edition specific feeds: - Space news * Apple Podcast English * Spotify English * RSS English Spanish French - Top news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French - Tech news * Apple Podcast English Spanish French * Spotify English Spanish Spanish * RSS English Spanish French - Hacker news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French - AI news * Apple Podcast English Spanish French * Spotify English Spanish French * RSS English Spanish French Visit our website at https://theautomateddaily.com/ Send feedback to [email protected] Youtube LinkedIn X (Twitter)