An August 2026 EFF investigation found ad code inside popular Android apps passing on users' location whenever the app itself had location access. That makes location the first permission to revisit, but not the only one. This guide covers when approximate location (an area of about 3 square kilometers on Android) is enough, what limited contacts and selected-photo access change, why Bluetooth and local network access can reveal where you are, and which Android special access banking malware goes after. It also lists the minimum iOS and Android versions for each control and ends with a step-by-step review using verified settings paths.
Apple's Siri AI beta, which began rolling out with iOS 27 on September 14, 2026, splits work between the iPhone and Apple's Private Cloud Compute servers, and other assistants mix local and cloud processing in their own ways. This guide maps where Apple Intelligence, Pixel's Gemini Nano and Private AI Compute, Samsung's on-device-only switch, Windows Recall and Click to Do, Alexa and the chat apps send your words. It also explains the tells for each mode, why local storage isn't automatically private, what backs private-cloud promises and how long the cloud apps keep chats.
Two 2026 disruptions involving Microsoft show where two-factor sign-in breaks: Tycoon2FA relayed text codes, app codes and push approvals through fake pages, and EvilTokens got people to type an attacker's code into Microsoft's real site. This ranking puts seven sign-in methods in order, from security keys and synced passkeys down to text and email codes, using CISA's strongest-to-weakest table and NIST's 2025 definition of phishing resistance. It explains origin binding, relay kits, push bombing and SIM swaps, shows how a text-message fallback left switched on can drag a passkey down to the weakest method on the account, and covers the code-entry trick that no 2FA method blocks.
New Surface models with an 80 TOPS Snapdragon X2 Plus go on sale October 13 in select markets, and Microsoft backs its "95% faster on-device AI" claim with a benchmark, not with the TOPS number. Here is how to read the figure on any AI laptop spec sheet: what INT8 and sparsity do to it, why Intel's "overall" TOPS adds the CPU and graphics, and why memory bandwidth sets the pace for local chatbots, with a worked 8-billion-parameter example. It also covers the 40 NPU TOPS, 16 GB and 256 GB Copilot+ minimums, which apps actually use the NPU, and the benchmarks worth checking before buying.
Since June 2026, Android has joined Apple's iOS 26 in letting you move passkeys between password managers, so you can now choose whose backup and recovery rules you rely on. Moving them only works while you still hold the device, though. After a loss, your passkeys come back only if they were synced and you can give the provider its secret: an old Apple device passcode, a Google Password Manager PIN or old Android screen lock, a Microsoft Password Manager PIN, or your password manager's sign-in details or recovery key. Some of these allow only 10 tries. A worked example with 20 accounts compares synced passkeys with no backup, and a checklist covers what to set up this week.
Google began rolling out an optional selfie video for sign-in and account recovery on July 23, 2026, and since September 1, 2026, Microsoft's work and school accounts have made passkeys the default. For you, that means getting back into a hacked account now depends less on passwords and text codes and more on what you set up in advance. This guide dates each change, separates Microsoft's open-ended SMS phase-out for personal accounts from its fixed work-account deadlines, and notes that Apple has announced nothing comparable. It also covers what to do if you're locked out now, waits such as Google's 7-day delays, and how to spot a fake recovery page.
Disney+ and Hulu prices rise for existing US subscribers from their first bill on or after October 21, 2026, with Disney+ Premium going to $21.49 a month, and Paramount and Warner Bros. Discovery expect their merger to close on October 6 (still pending as of October 2). Here is what that means for your bill: every major US service at its current price, what the merger, Comcast's Versant spin-off and Hulu's move into the Disney+ app do and don't change for subscribers, how rotating services cut one illustrative bill from about $839 to $408 a year, and why most annual plans only pay off if you keep the service 10 months or longer.
Two federal deadlines in spring 2026 changed what apps and platforms owe families. Since April 22, sites covered by the FTC's updated COPPA Rule have needed a parent's separate consent before sharing a child's data with third parties, and since May 19 platforms have had 48 hours to remove nonconsensual intimate images, including AI-generated fakes, after a valid request. A dated status table sorts the federal bills and state app-store and social-media laws into enforceable, blocked and not yet in effect, with the scope of each court order, then gives the steps for deletion requests, takedowns and complaints to the FTC or a state attorney general.
Desktop Chrome now asks before opening an unencrypted public site you haven't visited recently, and Google's own data puts encrypted page loads at roughly 95 to 99 percent. That makes quiet snooping on airport or hotel Wi-Fi much harder than many warnings suggest, though the NSA still tells its teleworkers to avoid it for banking. The risks that remain are mostly tricks: look-alike networks, fake sign-in pages like those in a 2025 Australian court case, auto-join, open sharing settings and old devices. A table shows what someone on the same network can see on a banking site, a plain HTTP site and a fake portal, and a checklist covers when to use your phone's hotspot or a VPN.
Switching carriers is now a download, but a locked phone or a closed old line can still trap your number. The iPhone 18 Pro went on sale in September 2026 without a SIM tray in the US, following every US iPhone model since the 14 and most of Google's Pixel 10 and 11 lineup. Switching carriers is now a download rather than a card swap, but whether a switch goes smoothly still depends on two older things: whether the phone is unlocked, and whether the number transfer goes through before the old line is closed. This guide covers Verizon's January 2026 unlocking waiver, unlock and transfer-PIN rules at AT&T, T-Mobile and Verizon, iPhone-to-Android eSIM transfers, travel eSIMs and the account locks that block eSIM swap fraud.
