The Daily Index — Friday, October 17, 2025 · TLDR Index

Across today’s newsletters

Today’s Index

TLDR

DOORDASH WILL USE WAYMO'S ROBOTAXIS FOR DELIVERY IN PHOENIX

DoorDash and Waymo have entered into a partnership that brings Waymo's driverless Jaguar SUVs into DoorDash's delivery fleet. Waymo will deliver orders from DoorDash's DashMart store starting in Phoenix. It plans to add more restaurants, retail, and grocery stores over time. Customers will have to go to the vehicle and unlock its trunk with the DoorDash app to retrieve their orders.

theverge.com · 2 min

TLDR AI

Guidelines

💪 Build your team's hands-on AI security skills with expert-led

sans.org

TLDR Dev

CREDENTIAL STUFFING

Credential stuffing is an automated attack that uses stolen username-password pairs from data breaches to gain unauthorized access to user accounts on other services. Defending against this requires a layered approach that combines strategies like multi-factor authentication, breached password detection, rate limiting, device cookies, behavioral analysis, CAPTCHAs, and risk-based authentication.

ciamweekly.substack.com · 12 min

TLDR InfoSec

FAKE LASTPASS, BITWARDEN BREACH ALERTS LEAD TO PC HIJACKS

Cybercriminals are conducting a phishing campaign targeting password manager users with fake breach notification emails that trick recipients into downloading malware disguised as "secure desktop versions" of LastPass and Bitwarden. The malicious downloads install Syncro MSP agent software configured to deploy ScreenConnect remote access tools, giving attackers full control over compromised systems while remaining hidden from users. Security professionals should educate users that legitimate password manager companies never request master passwords via email and that security incidents are always announced through official channels and verified company blogs.

bleepingcomputer.com · 3 min

TLDR Crypto

SEC'S HESTER PEIRCE PUSHES FOR PRIVACY AND TOKENIZATION REFORM

SEC Commissioner Hester Peirce said tokenization is now a “huge focus” for the agency, highlighting ongoing work on token distribution rules, transaction definitions, and crypto custody guidance. Speaking at the DC Privacy Summit, she also renewed calls for stronger financial privacy protections, warning against excessive government data access and citing the Fourth Amendment as a safeguard. Peirce suggested crypto could help the US rethink Bank Secrecy Act, AML, and KYC frameworks to better fit peer-to-peer systems, framing the current policy debate as a chance to modernize financial oversight.

links.tldrnewsletter.com · 3 min

TLDR

HELION RECEIVES APPROVALS FOR NEXT PHASE OF CONSTRUCTION OF WORLD'S FIRST COMMERCIAL FUSION POWER PLANT

Helion has been granted a Conditional Use Permit to start the next phase of development for its commercial fusion power plant. This clears the way for the construction of the fusion generator building of the company's Orion fusion power plant in Malaga, Washington. Helion plans to deliver electrons to the grid before the end of this decade. The company's approach of rapid iteration and testing has enabled it to make steady progress toward a commercial fusion power plant. It was the first private fusion company to achieve 100 million degrees Celsius plasma temperatures, generally considered the required operating temperature for commercial fusion feasibility.

helionenergy.com · 3 min

TLDR

CHINA OVERCOMES KEY BARRIERS TO UNLOCKING ALL-SOLID-STATE EV BATTERIES WITH 1,000 KM RANGE

Chinese scientists have achieved three breakthroughs that could be key to unlocking all-solid-state batteries. The first is iodine ions, which actively attract lithium ions in the interface between the electrode and the electrolyte, plugging the gaps and enabling a better bond. The second is a polymer material that can be bent 20,000 times and twisted into a twist without breaking. The third is a type of 'shield' on the electrolyte surface that passes needle penetration tests and can handle temperatures of over 120 degrees Celsius. The breakthroughs could result in a 100-kilogram battery pack that delivers over 1,000 kilometers of range.

electrek.co · 4 min

TLDR

CLAUDE SKILLS ARE AWESOME, MAYBE A BIGGER DEAL THAN MCP

Claude Skills are folders that include instructions, scripts, and resources that Claude can load when needed to improve performance on specific tasks. Each skill has a Markdown file telling the model how to do something, optionally accompanied by extra documents and pre-written scripts the model can run to help it accomplish tasks. At the start of a session, Claude scans all available skill files and reads a short explanation for each one, which is very token-efficient. Skills are easy to share - the upcoming Cambrian explosion in Skills will make the MCP rush look pedestrian by comparison.

simonwillison.net · 11 min

TLDR

HOW MUCH CAN TESLA PAY ELON MUSK? DELAWARE'S SUPREME COURT WILL DECIDE

The Delaware Supreme Court heard the latest set of arguments over Elon Musk's compensation package for Tesla on Wednesday. The pay package could hypothetically be worth well over $100 billion as of mid-October. A panel of justices will weigh whether the package was an extraordinary move that reflected undue influence or inadequately informed shareholders, or a properly conducted business decision. Meanwhile, Tesla's board of directors has proposed a new, future compensation package that could make Musk the world's first trillionaire if fully realized.

npr.org · 11 min