The Daily Index — Thursday, January 29, 2026 · TLDR Index

Across today’s newsletters

Today’s Index

TLDR

ANDROID'S FULL DESKTOP INTERFACE LEAKS

A bug report on the Chromium Issue Tracker has inadvertently leaked the Android desktop interface. The bug report, which was about Chrome Incognito tabs, was accompanied by two screen captures. They show a taller status bar compared to tablets, a Chrome interface that mostly aligns with the current large-screen Android version, and mostly unchanged desktop windowing. The screen captures are available in the article.

9to5google.com · 2 min

TLDR AI

NVIDIA, OTHERS IN TALKS FOR OPENAI FUNDING, INFORMATION SAYS

Nvidia, Microsoft, and Amazon are in talks to invest as much as $60 million into OpenAI. The total round will contribute as much as $100 billion to OpenAI's funds, which could help alleviate investor concerns about OpenAI's cash burn while continuing the investment frenzy. OpenAI is also attempting to line up funding from top investors in the Middle East in a funding round that could total at least $50 billion. These talks are early, and the amounts could change.

links.tldrnewsletter.com · 2 min

TLDR Dev

HOW X DECIDES WHAT 550 MILLION USERS SEE

X's feed algorithm, which determines what 550 million users see through a component-based pipeline, was recently open-sourced. The pipeline has sources like Thunder (for in-network posts) and Phoenix (for discovery), which feed candidates into a system of hydrators, filters, and multi-stage scorers. Posts are evaluated based on eighteen predicted engagement probabilities, weighted, and adjusted for author diversity and whether they are from followed accounts.

codepointer.substack.com · 9 min

TLDR InfoSec

SIX JAVASCRIPT ZERO-DAY BUGS LEAD TO FEARS OF SUPPLY CHAIN ATTACK

Researchers from Koi discovered six zero-day vulnerabilities dubbed "PackageGate" across four major JavaScript package managers (npm, pnpm, vlt, and Bun) that bypass protections against script execution and lockfile integrity designed to prevent malicious code from running automatically. While pnpm, vlt, and Bun patched the flaws, npm (now owned by Microsoft) declined to fix the vulnerabilities, stating that the behavior "works as expected," leaving gaps in defenses adopted after the Shai-Hulud supply chain attack that affected over 25,000 repositories. The bypasses vary by tool—npm's weakness lies in Git dependencies with malicious .npmrc files, pnpm and vlt have lockfile gaps enabling tarball swapping, vlt has a tar extraction path traversal flaw, and Bun's trust allowlist can be spoofed—raising concerns about potential install-time code execution at scale even in hardened environments.

links.tldrnewsletter.com · 5 min

TLDR Crypto

NOMURA'S LASER DIGITAL APPLIES FOR US NATIONAL TRUST BANK

Laser Digital, Nomura's digital asset arm, filed for an OCC national trust bank license to launch institutional crypto custody, spot trading, and staking. Joining Ripple and Circle, the firm targets federally regulated infrastructure to meet increasing institutional demand for secure, governed access to digital asset markets.

coindesk.com · 2 min

TLDR

TESLA TO INVEST $2 BILLION IN ELON MUSK'S XAI, CANCEL TWO EV MODELS

Tesla entered into an agreement on January 16 to invest in xAI's Series E funding round. SpaceX also invested $2 billion in xAI. Tesla will end production for its Model S and Model X higher-end vehicles, as they have seen sluggish sales compared with other models. The Model X and S factory space will be used to manufacture Optimus robots.

links.tldrnewsletter.com · 3 min

TLDR

RESEARCHERS ARE USING AI TO DECODE THE HUMAN GENOME

AlphaGenome is an AI model that can make predictions about thousands of genes. It was trained on a vast wealth of molecular data, allowing it to predict things like whether a mutation will shut off a gene or switch it on at the wrong time. The model is being deployed for use in things like cancer research, but scientists are still wary of its results. AlphaGenome is still just a prediction tool, so scientists still need to go to the lab to verify its output.

links.tldrnewsletter.com · 7 min

TLDR

VIDEO: CHINA'S 18 HUMANOID ROBOTS EMERGE FROM CRATES IN AN EX MACHINA-LIKE SCENE

LimX Dynamics has released a video showing 18 of its full-sized humanoid robots autonomously performing a coordinated routine. The showcase highlights how teams of robots could be deployed and operate on future manufacturing floors. LimX's robots run on the company's newly introduced COSA system, which allows multiple humanoid robots to function together autonomously. The COSA operating system unifies perception models, learned skills, memory, and basic emotional states for sustained physical interaction in real-world settings. The video is available in the article.

interestingengineering.com · 5 min

TLDR

THE FIVE LEVELS: FROM SPICY AUTOCOMPLETE TO THE DARK FACTORY

The cost of code is dropping so fast that teams need to reconsider their tech debt payment plans. Smart teams are deferring payment on human hours today to pay them back with cheaper AI hours tomorrow. Cashing in on those cheap hours requires understanding how to move through the tiers of automation. Luckily, the federal government has already completed a roadmap for autonomous cars. The five levels of driving automation are a helpful guide on what companies should aim for.

danshapiro.com · 4 min