Building on Google’s recent announcement that Android’s Quick Share will work with iOS’ AirDrop for Pixel 10 smartphones, Qualcomm revealed in a post on X that the cross-platform file-sharing feature will be available on devices powered by its Snapdragon chips. In the post, Qualcomm said that it “can’t wait for people to use this once enabled on Snapdragon in the near future.”

It’s not a complete surprise since Google mentioned in its announcement that Quick Share to AirDrop would come to more Android devices. However, the Snapdragon confirmation acknowledged that this new compatibility wouldn’t be limited to Pixel smartphones or devices running Google Tensor chips. Soon, we could have the ability to share files with iPhone users, even if it’s with a Samsung Galaxy smartphone, a OnePlus device or even Nothing phones.

Qualcomm didn’t specify exactly when or which smartphones will get this Quick Share to AirDrop feature, but we might see it come to more devices than just smartphones, like tablets or laptops. Along with this latest file-sharing feature, Apple’s announcement of iOS 18 getting RCS compatibility has reduced the longstanding friction between smartphone operating systems.

This article originally appeared on Engadget at https://www.engadget.com/mobile/smartphones/snapdragon-devices-will-soon-be-able-to-transfer-files-to-iphones-via-quick-share-164835065.html?src=rss

“Security, development, and AI now move as one,” says Microsoft’s director of cloud/AI security
product marketing.

Microsoft and GitHub “have launched a native integration between Microsoft Defender for Cloud and GitHub Advanced Security that aims to address what one executive calls decades of accumulated security debt in enterprise codebases…” according to The New Stack:

The integration, announced this week in San Francisco at the
Microsoft
Ignite 2025 conference and now available in public preview,
connects runtime intelligence from production environments directly
into developer workflows. The goal is to help organizations
prioritize which vulnerabilities actually matter and use AI to fix
them faster. “Throughout my career, I’ve seen vulnerability
trends going up into the right. It didn’t matter how good of a
detection
engine and how accurate our detection engine was, people just
couldn’t fix things fast enough,” said Marcelo
Oliveira, VP of product management at GitHub, who has spent
nearly a decade in application security. “That basically resulted
in decades of accumulation of security debt into enterprise code
bases.” According to industry data, critical and high-severity
vulnerabilities constitute 17.4% of security backlogs, with a mean
time to remediation of 116 days, said Andrew
Flick, senior director of developer services, languages and tools
at Microsoft, in a blog
post. Meanwhile, applications face attacks as frequently as once
every three minutes, Oliveira said.

The integration represents the first native link between runtime
intelligence and developer workflows, said Elif
Algedik, director of product marketing for cloud and AI security
at Microsoft, in a blog
post… The problem, according to Flick, comes down to three
challenges: security teams drowning in alert fatigue while AI rapidly
introduces new threat
vectors that they have little time to understand; developers
lacking clear prioritization while remediation takes too long; and
both teams relying on separate, nonintegrated tools that make
collaboration slow and frustrating… The new integration works
bidirectionally. When Defender for Cloud detects a vulnerability in a
running workload, that runtime context flows into GitHub, showing
developers whether the vulnerability is internet-facing, handling
sensitive data or actually exposed in production. This is powered by
what GitHub calls the Virtual Registry, which creates code-to-runtime
mapping, Flick said…

In the past, this alert would age in a dashboard while developers
worked on unrelated fixes because they didn’t know this was the
critical one, he said. Now, a security campaign can be created in
GitHub, filtering for runtime risk like internet exposure or
sensitive data, notifying the developer to prioritize this issue.

GitHub Copilot “now automatically checks dependencies, scans
for first-party code vulnerabilities and catches hardcoded secrets
before code reaches developers,” the article points out — but
GitHub’s VP of product management says this takes things even
further.

“We’re not only helping you fix existing vulnerabilities,
we’re also reducing the number of vulnerabilities that come into
the system when the level of throughput of new code being created is
increasing dramatically with all these agentic coding agent platforms.”

Read more of this story at Slashdot.

“On the slopes of an Oregon volcano, engineers are building the hottest geothermal power plant on Earth,” reports the Washington Post:

The plant will tap into the infernal energy of Newberry Volcano, “one of the largest and most hazardous active volcanoes in the United States,” according to the U.S. Geological Survey. It has already reached temperatures of 629 degrees Fahrenheit, making it one of the hottest geothermal sites in the world, and next year it will start selling electricity to nearby homes and businesses. But the start-up behind the project, Mazama Energy, wants to crank the temperature even higher — north of 750 degrees — and become the first to make electricity from what industry insiders call “superhot rock.” Enthusiasts say that could usher in a new era of geothermal power, transforming the always-on clean energy source from a minor player to a major force in the world’s electricity systems.

“Geothermal has been mostly inconsequential,” said Vinod Khosla, a venture capitalist and one of Mazama Energy’s biggest financial backers. “To do consequential geothermal that matters at the scale of tens or hundreds of gigawatts for the country, and many times that globally, you really need to solve these high temperatures.” Today, geothermal produces less than 1 percent of the world’s electricity. But tapping into superhot rock, along with other technological advances, could boost that share to 8 percent by 2050, according to the International Energy Agency (IEA). Geothermal using superhot temperatures could theoretically generate 150 times more electricity than the world uses, according to the IEA. “We believe this is the most direct path to driving down the cost of geothermal and making it possible across the globe,” said Terra Rogers, program director for superhot rock geothermal at the Clean Air Task Force, an environmentalist think tank. “The [technological] gaps are within reason. These are engineering iterations, not breakthroughs.”

The Newberry Volcano project combines two big trends that could make geothermal energy cheaper and more widely available. First, Mazama Energy is bringing its own water to the volcano, using a method called “enhanced geothermal energy”… [O]ver the past few decades, pioneering projects have started to make energy from hot dry rocks by cracking the stone and pumping in water to make steam, borrowing fracking techniques developed by the oil and gas industry… The Newberry project also taps into hotter rock than any previous enhanced geothermal project. But even Newberry’s 629 degrees fall short of the superhot threshold of 705 degrees or above. At that temperature, and under a lot of pressure, water becomes “supercritical” and starts acting like something between a liquid and a gas. Supercritical water holds lots of heat like a liquid, but it flows with the ease of a gas — combining the best of both worlds for generating electricity… [Sriram Vasantharajan, Mazama’s CEO] said Mazama will dig new wells to reach temperatures above 750 degrees next year. Alongside an active volcano, the company expects to hit that temperature less than three miles beneath the surface. But elsewhere, geothermal developers might have to dig as deep as 12 miles.

While Mazama plans to generate 15 megawatts of electricity next year, it hopes to eventually increase that to 200 megawatts. (And the company’s CEO said it could theoretically generate five gigawatts of power.)

But more importantly, successful projects “motivate other players to get into the market,” according to a senior geothermal research analyst at energy consultancy Wood Mackenzie, who predicted “a ripple effect,” to the Washington Post where “we’ll start seeing more companies get the financial support to kick off their own pilots.”

Read more of this story at Slashdot.

Ice cream might not be the first dessert that springs to mind in late fall, but there’s no bad season for frozen treats, and our favorite ice cream maker is down to $180 for Black Friday. This kitchen gadget, which scored 90 in our review, is guaranteed to make you popular with guests during the holiday season, and at $50 off its regular price of $250 — the lowest price we’ve seen this year for this particular model — now is a great time to buy.

While you’ll definitely need a bit of space to accommodate it, the Creami is a more compact ice cream machine than some of its rivals. It works similarly to a food processor, only here you’ll be using strictly frozen liquid ice cream as a base. Once you have that (you’ll need to give the base around 24 hours in the freezer for the desired consistency) you use Ninja’s machine to blend in your chosen flavors. And if you make a mess (and let’s face it, you probably will), rest assured that most of the components are dishwasher-safe.

It’s admittedly a fairly loud machine during use, but as long as you’re willing to put up with the noise, you can choose between seven one-touch programs, including milkshake if you’re in the mood for a cold drink. And if you’re hosting people with allergies, they can be reassured that you have total control about what’s going into and coming out of the machine, which is much harder to guarantee when you’re buying dessert in a restaurant. This model also includes two pint containers with lids.

If you want the latest and greatest, though, the Ninja Swirl is the ice-cream maker to get. It can make regular and soft-serve ice cream, plus a number of other frozen treats. Right now, QVC has it for the best price we’ve seen, from $350 to $280.

This article originally appeared on Engadget at https://www.engadget.com/deals/one-of-our-favorite-ice-cream-makers-is-down-to-180-for-black-friday-133009181.html?src=rss

“The internet did transform work — but not the way 1998 thought…” argues the Wall Street Journal. “The internet slipped inside almost every job and rewired how work got done.”

So while the number of single-task jobs like travel agent dropped, most jobs “are bundles of judgment, coordination and hands-on work,” and instead the internet brought “the quiet transformation of nearly every job in the economy… Today, just 10% of workers make minimal use of the internet on the job — roles like butcher and carpet installer.”

[T]he bigger story has been additive. In 1998, few could conceive of social media — let alone 65,000 social-media managers — and 200,000 information-security analysts would have sounded absurd when data still lived on floppy disks… Marketing shifted from campaign bursts to always-on funnels and A/B testing. Clinics embedded e-prescribing and patient portals, reshaping front-office and clinical handoffs. The steps, owners and metrics shifted. Only then did the backbone scale: We went from server closets wedged next to the mop sink to data centers and cloud regions, from lone system administrators to fulfillment networks, cybersecurity and compliance.

That is where many unexpected jobs appeared. Networked machines and web-enabled software quietly transformed back offices as much as our on-screen lives. Similarly, as e-commerce took off, internet-enabled logistics rewired planning roles — logisticians, transportation and distribution managers — and unlocked a surge in last-mile work. The build-out didn’t just hire coders; it hired coordinators, pickers, packers and drivers. It spawned hundreds of thousands of warehouse and delivery jobs — the largest pockets of internet-driven job growth, and yet few had them on their 1998 bingo card… Today, the share of workers in professional and managerial occupations has more than doubled since the dawn of the digital era.

So what does that tell us about AI? Our mental model often defaults to an industrial image — John Henry versus the steam drill — where jobs are one dominant task, and automation maps one-to-one: Automate the task, eliminate the job. The internet revealed a different reality: Modern roles are bundles. Technologies typically hit routine tasks first, then workflows, and only later reshape jobs, with second-order hiring around the backbone. That complexity is what made disruption slower and more subtle than anyone predicted. AI fits that pattern more than it breaks it… [LLMs] can draft briefs, summarize medical notes and answer queries. Those are tasks — important ones — but still parts of larger roles. They don’t manage risk, hold accountability, reassure anxious clients or integrate messy context across teams. Expect a rebalanced division of labor: The technical layer gets faster and cheaper; the human layer shifts toward supervision, coordination, complex judgment, relationship work and exception handling.

What to expect from AI, then, is messy, uneven reshuffling in stages. Some roles will contract sharply — and those contractions will affect real people. But many occupations will be rewired in quieter ways. Productivity gains will unlock new demand and create work that didn’t exist, alongside a build-out around data, safety, compliance and infrastructure.
AI is unprecedented; so was the internet. The real risk is timing: overestimating job losses, underestimating the long, quiet rewiring already under way, and overlooking the jobs created in the backbone. That was the internet’s lesson. It’s likely to be AI’s as well.

Read more of this story at Slashdot.

“Copilot Actions on Windows 11” is currently available in Insider builds (version 26220.7262) as part of Copilot Labs, according to a recent report, “and is off by default, requiring admin access to set it up.”

But maybe it’s off for a good reason…besides the fact that it can access any apps installed on your system:

In a support document, Microsoft admits that features like Copilot Actions introduce ” novel security risks .” They warn about cross-prompt injection (XPIA), where malicious content in documents or UI elements can override the AI’s instructions. The result? ” Unintended actions like data exfiltration or malware installation .”

Yeah, you read that right. Microsoft is shipping a feature that could be tricked into installing malware on your system. Microsoft’s own warning hits hard: “We recommend that you only enable this feature if you understand the security implications.” When you try to enable these experimental features, Windows shows you a warning dialog that you have to acknowledge. [“This feature is still being tested and may impact the performance or security of your device.”]

Even with these warnings, the level of access Copilot Actions demands is concerning. When you enable the feature, it gets read and write access to your Documents, Downloads, Desktop, Pictures, Videos, and Music folders… Microsoft says they are implementing safeguards. All actions are logged, users must approve data access requests, the feature operates in isolated workspaces, and the system uses audit logs to track activity.
But you are still giving an AI system that can “hallucinate and produce unexpected outputs” (Microsoft’s words, not mine) full access to your personal files.
To address this, Ars Technica notes, Microsoft added this helpful warning to its support document this week. “As these capabilities are introduced, AI models still face functional limitations in terms of how they behave and occasionally may hallucinate and produce unexpected outputs.”
But Microsoft didn’t describe “what actions they should take to prevent their devices from being compromised. I asked Microsoft to provide these details, and the company declined…”

Read more of this story at Slashdot.

A promotional video for Amazon’s Kiro software development system took a unique approach, writes GeekWire. “Instead of product diagrams or keynote slides, a crew from Seattle’s Packrat creative studio used action figures on a miniature set to create a stop-motion sequence…”

“Can the software development hero conquer the ‘AI Slop Monster’ to uncover the gleaming, fully functional robot buried beneath the coding chaos?”

Kiro (pronounced KEE-ro) is Amazon’s effort to rethink how developers use AI. It’s an integrated development environment that attempts to tame the wild world of vibe coding… But rather than simply generating code from prompts [in “vibe mode”], Kiro breaks down requests into formal specifications, design documents, and task lists [in “spec mode”]. This spec-driven development approach aims to solve a fundamental problem with vibe coding: AI can quickly generate prototypes, but without structure or documentation, that code becomes unmaintainable…

The market for AI-powered development tools is booming. Gartner expects AI code assistants to become ubiquitous, forecasting that 90% of enterprise software engineers will use them by 2028, up from less than 14% in early 2024… Amazon launched Kiro in preview in July, to a strong response. Positive early reviews were tempered by frustration from users unable to gain access. Capacity constraints have since been resolved, and Amazon says more than 250,000 developers used Kiro in the first three months…

Now, the company is taking Kiro out of preview into general availability, rolling out new features and opening the tool more broadly to development teams and companies… During the preview period, Kiro handled more than 300 million requests and processed trillions of tokens as developers explored its capabilities, according to stats provided by the company.
Rackspace used Kiro to complete what they estimated as 52 weeks of software modernization in three weeks, according to Amazon executives. SmugMug and Flickr are among other companies espousing the virtues of Kiro’s spec-driven development approach. Early users are posting in glowing terms about the efficiencies they’re seeing from adopting the tool… startups in most countries can apply for up to 100 free Pro+ seats for a year’s worth of Kiro credits.

Kiro offers property-based testing “to verify that generated code actually does what developers specified,” according to the article — plus a checkpointing system that “lets developers roll back changes or retrace an agent’s steps when an idea goes sideways…”

“And yes, they’ve been using Kiro to build Kiro, which has allowed them to move much faster.”

Read more of this story at Slashdot.