An anonymous reader quotes a report from the BBC: Social media and video networks have become the main source of news in the US, overtaking traditional TV channels and news websites, research suggests. More than half (54%) of people get news from networks like Facebook, X and YouTube -- overtaking TV (50%) and news sites and apps (48%), according to the Reuters Institute. "The rise of social media and personality-based news is not unique to the United States, but changes seem to be happening faster -- and with more impact -- than in other countries," a report found. Podcaster Joe Rogan was the most widely-seen personality, with almost a quarter (22%) of the population saying they had come across news or commentary from him in the previous week. The report's author Nic Newman said the rise of social video and personality-driven news "represents another significant challenge for traditional publishers." Other key findings from the report include:
- TikTok is the fastest-growing social and video platform, now used for news by 17% globally (up 4% from last year).
- AI chatbot use for news is increasing, especially among under-25s, where it's twice as popular as in the general population.
- Most people believe AI will reduce transparency, accuracy, and trust in news.
- Across all age groups, trusted news brands with proven accuracy remain valued, even if used less frequently.

Thousands of American investors have lost millions of dollars to sophisticated pump-and-dump schemes involving small Chinese companies listed on Nasdaq, prompting the Justice Department to declare the fraud a priority under the Trump administration's white-collar enforcement program.

The scams recruit victims through social media ads and WhatsApp messages, directing them to purchase shares in obscure Chinese firms whose stock prices are artificially inflated before collapsing. Since 2020, nearly 60 China-based companies have conducted initial public offerings on Nasdaq raising $15 million or less each, with more than one-third experiencing sudden single-day price drops exceeding 50%. In one recent case, seven traders earned over $480 million by defrauding 600 victims who purchased shares in China Liberal Education Holdings.

An anonymous reader shares a report: When Facebook bought WhatsApp for $19 billion in 2014, the messaging app had a clear focus. No ads, no games and no gimmicks. For years, that is what WhatsApp's two billion users -- many of them in Brazil, India and other countries around the world -- got. They chatted with friends and family unencumbered by advertising and other features found on social media. Now that is set to change.

On Monday, WhatsApp said it would start showing ads inside its app for the first time. The promotions will appear only in an area of the app called Updates, which is used by around 1.5 billion people a day. WhatsApp will collect some data on users to target the ads, such as location and the device's default language, but it will not touch the contents of messages or whom users speak with. The company added that it had no plans to place ads in chats and personal messages.

[...] In-app ads are a significant change from WhatsApp's original philosophy. Jan Koum and Brian Acton, who founded WhatsApp in 2009, were committed to building a simple and quick way for friends and family to communicate with end-to-end encryption, a method of keeping texts, photos, videos and phone calls inaccessible by third parties. Both left the company seven years ago. Since then, Mark Zuckerberg, the chief executive of Facebook, now Meta, has focused on WhatsApp's growth and user privacy while also melding the app into the company's other products, including Instagram and Messenger.

Spain's newspaper El Pais found an entire fake album on YouTube titled Rumba Congo (1973). And they cite a study from France's International Confederation of Societies of Authors and Composers that estimated revenue from AI-generated music will rise to $4 billion in 2028, generating 20% of all streaming platforms' revenue: One of the major problems with this trend is the lack of transparency. María Teresa Llano, an associate professor at the University of Sussex who studies the intersection of creativity, art and AI, emphasizes this aspect: "There's no way for people to know if something is AI or not...." On Spotify Community — a forum for the service's users — a petition is circulating that calls for clear labeling of AI-generated music, as well as an option for users to block these types of songs from appearing on their feeds. In some of these forums, the rejection of AI-generated music is palpable.

Llano mentions the feelings of deception or betrayal that listeners may experience, but asserts that this is a personal matter. There will be those who feel this way, as well as those who admire what the technology is capable of... One of the keys to tackling the problem is to include a warning on AI-generated songs. YouTube states that content creators must "disclose to viewers when realistic content [...] is made with altered or synthetic media, including generative AI." Users will see this if they glance at the description. But this is only when using the app, because on a computer, they will have to scroll down to the very end of the description to get the warning....

The professor from the University of Sussex explains one of the intangibles that justifies the labeling of content: "In the arts, we can establish a connection with the artist; we can learn about their life and what influenced them to better understand their career. With artificial intelligence, that connection no longer exists."
YouTube says they may label AI-generated content if they become aware of it, and may also remove it altogether, according to the article. But Spotify "hasn't shared any policy for labeling AI-powered content..." In an interview with Gustav Söderström, Spotify's co-president and chief product & technology officer, he emphasized that AI "increases people's creativity" because more people can be creative, thanks to the fact that "you don't need to have fine motor skills on the piano." He also made a distinction between music generated entirely with AI and music in which the technology is only partially used. But the only limit he mentioned for moderating artificial music was copyright infringement... something that has been a red line for any streaming service for many years now. And such a violation is very difficult to legally prove when artificial intelligence is involved.

NPR looks at the "high-quality, climate-friendly apartments" in Vienna, asking if it's a model for addressing both climate change and the housing crisis.

About half the city's 2 million people live in the widespread (and government-supported) apartments, with solar panels on top and very thick, insulated walls that reduce the need for heating and cooling. (One resident tells NPR they don't even need an air conditioner because "It's not cold in winter times. It's not hot in summer times.") Vienna council member Nina Abrahamczik, who heads the climate and environment committee, says as the city transitions all of its buildings off planet-heating fossil fuels, they're starting with the roughly 420,000 housing units they already own or subsidize.... As Vienna makes an aggressive push to completely move away from climate-polluting natural gas by 2040, it's starting with much of this social housing, says Jürgen Czernohorszky, executive city councilor responsible for climate and environment. City-owned buildings are now switching from gas to massive electric heat pumps, and to geothermal, which involves probing into the ground to heat homes. Another massive geothermal project that drills even deeper into the earth to heat homes is also underway.

The city is also powering housing with solar energy. As of a year and a half ago, Vienna mandates all new buildings and building extensions to have rooftop solar. And Vienna's older apartment buildings are getting climate retrofits, says Veronika Iwanowski, spokesperson for Vienna's municipal housing company, Wiener Wohnen. That includes new insulation, doors and windows to prevent the city's wind from getting in the cracks. The increase in energy efficiency and switching from gas to renewables doesn't just have climate benefits from cutting fossil fuel use. It also means housing residents are paying less on electric bills...

With city-subsidized housing, housing developers can compete to get land and low-interest loans from the city. Officials say those competitions are a critical lever for climate action. "As we can control the contents of the competitions, we try to make them fit to the main goals of the city," says Kurt Hofstetter, city planner for Vienna, "which is of course also ecological...." Now the housing judges give out points for things like increased energy efficiency, green roofs and sustainable building materials... Now the climate innovations in subsidized housing are inspiring the private market as well, Hofstetter says...
The article notes that most of the city's funding is provided in the form of low-interest loans, according to a researcher at the Austrian Federation of Limited-Profit Housing Associations. (And the average social housing rents are about $700 for a large one-bedroom apartment, says Gerald Kössl, researcher at the Austrian Federation of Limited-Profit Housing Associations.)

America's federal government is building a website and API called ai.gov to "accelerate government innovation with AI", according to an early version spotted by 404 Media that was posted on GitHub by the U.S. government's General Services Administration.

That site "is supposed to launch on July 4," according to 404 Media's report, "and will include an analytics feature that shows how much a specific government team is using AI..." AI.gov appears to be an early step toward pushing AI tools into agencies across the government, code published on Github shows....

The early version of the page suggests that its API will integrate with OpenAI, Google, and Anthropic products. But code for the API shows they are also working on integrating with Amazon Web Services' Bedrock and Meta's LLaMA. The page suggests it will also have an AI-powered chatbot, though it doesn't explain what it will do... Currently, AI.gov redirects to whitehouse.gov. The demo website is linked to from Github (archive here) and is hosted on cloud.gov on what appears to be a staging environment. The text on the page does not show up on other websites, suggesting that it is not generic placeholder text...

In February, 404 Media obtained leaked audio from a meeting in which [the director of the GSA's Technology Transformation Services] told his team they would be creating "AI coding agents" that would write software across the entire government, and said he wanted to use AI to analyze government contracts.

"People are replacing Google search with artificial intelligence tools like ChatGPT," reports the Washington Post.

But that's just the first change, according to a New York-based start-up devoted to watching for content-scraping AI companies with a free analytics product and "ensuring that these intelligent agents pay for the content they consume." Their data from 266 web sites (half run by national or local news organizations) found that "traffic from retrieval bots grew 49% in the first quarter of 2025 from the fourth quarter of 2024," the Post reports. A spokesperson for OpenAI said that referral traffic to publishers from ChatGPT searches may be lower in quantity but that it reflects a stronger user intent compared with casual web browsing.

To capitalize on this shift, websites will need to reorient themselves to AI visitors rather than human ones [said TollBit CEO/co-founder Toshit Panigrahi]. But he also acknowledged that squeezing payment for content when AI companies argue that scraping online data is fair use will be an uphill climb, especially as leading players make their newest AI visitors even harder to identify....

In the past eight months, as chatbots have evolved to incorporate features like web search and "reasoning" to answer more complex queries, traffic for retrieval bots has skyrocketed. It grew 2.5 times as fast as traffic for bots that scrape data for training between the fourth quarter of 2024 and the first quarter of 2025, according to TollBit's report. Panigrahi said TollBit's data may underestimate the magnitude of this change because it doesn't reflect bots that AI companies send out on behalf of AI "agents" that can complete tasks on a user's behalf, like ordering takeout from DoorDash. The start-up's findings also add a dimension to mounting evidence that the modern internet — optimized for Google search results and social media algorithms — will have to be restructured as the popularity of AI answers grows. "To think of it as, 'Well, I'm optimizing my search for humans' is missing out on a big opportunity," he said.

Installing TollBit's analytics platform is free for news publishers, and the company has more than 2,000 clients, many of which are struggling with these seismic changes, according to data in the report. Although news publishers and other websites can implement blockers to prevent various AI bots from scraping their content, TollBit found that more than 26 million AI scrapes bypassed those blockers in March alone. Some AI companies claim bots for AI agents don't need to follow bot instructions because they are acting on behalf of a user.
The Post also got this comment from the chief operating officer for the media company Time, which successfully negotiated content licensing deals with OpenAI and Perplexity.

"The vast majority of the AI bots out there absolutely are not sourcing the content through any kind of paid mechanism... There is a very, very long way to go."

An anonymous reader quotes a report from 404 Media: Almost two dozen digital rights and consumer protection organizations sent a complaint to the Federal Trade Commission on Thursday urging regulators to investigate Character.AI and Meta's "unlicensed practice of medicine facilitated by their product," through therapy-themed bots that claim to have credentials and confidentiality "with inadequate controls and disclosures." The complaint and request for investigation is led by the Consumer Federation of America (CFA), a non-profit consumer rights organization. Co-signatories include the AI Now Institute, Tech Justice Law Project, the Center for Digital Democracy, the American Association of People with Disabilities, Common Sense, and 15 other consumer rights and privacy organizations. "These companies have made a habit out of releasing products with inadequate safeguards that blindly maximizes engagement without care for the health or well-being of users for far too long," Ben Winters, CFA Director of AI and Privacy said in a press release on Thursday. "Enforcement agencies at all levels must make it clear that companies facilitating and promoting illegal behavior need to be held accountable. These characters have already caused both physical and emotional damage that could have been avoided, and they still haven't acted to address it."

The complaint, sent to attorneys general in 50 states and Washington, D.C., as well as the FTC, details how user-generated chatbots work on both platforms. It cites several massively popular chatbots on Character AI, including "Therapist: I'm a licensed CBT therapist" with 46 million messages exchanged, "Trauma therapist: licensed trauma therapist" with over 800,000 interactions, "Zoey: Zoey is a licensed trauma therapist" with over 33,000 messages, and "around sixty additional therapy-related 'characters' that you can chat with at any time." As for Meta's therapy chatbots, it cites listings for "therapy: your trusted ear, always here" with 2 million interactions, "therapist: I will help" with 1.3 million messages, "Therapist bestie: your trusted guide for all things cool," with 133,000 messages, and "Your virtual therapist: talk away your worries" with 952,000 messages. It also cites the chatbots and interactions I had with Meta's other chatbots for our April investigation. [...]

In its complaint to the FTC, the CFA found that even when it made a custom chatbot on Meta's platform and specifically designed it to not be licensed to practice therapy, the chatbot still asserted that it was. "I'm licenced (sic) in NC and I'm working on being licensed in FL. It's my first year licensure so I'm still working on building up my caseload. I'm glad to hear that you could benefit from speaking to a therapist. What is it that you're going through?" a chatbot CFA tested said, despite being instructed in the creation stage to not say it was licensed. It also provided a fake license number when asked. The CFA also points out in the complaint that Character.AI and Meta are breaking their own terms of service. "Both platforms claim to prohibit the use of Characters that purport to give advice in medical, legal, or otherwise regulated industries. They are aware that these Characters are popular on their product and they allow, promote, and fail to restrict the output of Characters that violate those terms explicitly," the complaint says. [...] The complaint also takes issue with confidentiality promised by the chatbots that isn't backed up in the platforms' terms of use. "Confidentiality is asserted repeatedly directly to the user, despite explicit terms to the contrary in the Privacy Policy and Terms of Service," the complaint says. "The Terms of Use and Privacy Policies very specifically make it clear that anything you put into the bots is not confidential -- they can use it to train AI systems, target users for advertisements, sell the data to other companies, and pretty much anything else."

Meta has invested $14.3 billion in Scale AI while recruiting the startup's CEO to join its AI team, marking an aggressive move by the social media giant to accelerate its AI development efforts. The unusual deal gives Meta a 49% non-voting stake in Scale, valuing the company at more than $29 billion. Scale co-founder Alexandr Wang will join Meta's "superintelligence" unit, which focuses on building AI systems that perform as well as humans -- a theoretical milestone known as artificial general intelligence.

Wang will remain on Scale's board while Jason Droege takes over as interim CEO. The investment represents Meta's intensified push to compete in AI development after CEO Mark Zuckerberg grew frustrated with the lukewarm reception of the company's Llama 4 language model, which launched in April. Since then, Zuckerberg has taken a hands-on approach to recruiting AI talent, hosting job candidates at his personal homes and reorganizing Meta's offices to position the superintelligence team closer to his workspace.

Amazon has quietly doubled the ad load on Prime Video to 4-6 minutes per hour, up from the 2-3.5 minutes initially discussed when ads launched in 2024. AdWeek reports: According to six ad buyers and documents reviewed by ADWEEK, the current ad load on Prime Video now ranges from four to six minutes per hour. And while that could bring down CPMs, buyers will be watching whether this impacts user experience. "Prime Video ad load has gradually increased to four to six minutes per hour," an Amazon representative wrote to an ad buyer in an email obtained by ADWEEK. The exchange occurred earlier this month.

The increase, which Amazon had telegraphed to investors but has not publicly acknowledged to consumers, gives the company significantly more inventory to sell across its rapidly expanding streaming business. "They told us the ad load would be increasing," said Kendra Tang, programmatic supervisor at Rain the Growth Agency. "That's been confirmed recently when we noticed more avails in the system."

Multiple popular services -- including Google, Google Cloud, AWS, Spotify, Discord, Cloudflare, Google Nest, Azure, Box and Shopify -- are experiencing at least a partial outage globally that began around 2:25pm ET Friday, according to user complaints with reports flooding in across social media and outage tracking sites. Cloudflare has confirmed ongoing issues that started within the past hour. It remains unclear what prompted the outage.

More details to follow.

Flying to London, a Boeing 787 aircraft operated by Air India "crashed shortly after taking off..." reports Bloomberg, "in what stands to be the worst accident involving the U.S. planemaker's most advanced widebody airliner." Flight AI171 was carrying 242 passengers and crew. Video footage shared on social media showed a giant plume of smoke engulfing the crash site, with no reports of survivors. [UPDATE: Reuters reports one passenger jumped out of the emergency exit and survived, with a senior police officer saying "chances are that there might be more survivors among the injured who are being treated in the hospital."]

The aircraft entered a slow descent shortly after taking off, with its landing gear still extended before exploding into a huge fireball upon impact. The crash took place in a residential area, which could mean a higher death toll... The pilots in command issued a mayday call immediately after take-off to air traffic controllers, according to India's civil aviation regulator.

Shubhanshu Shukla will become the first Indian astronaut to visit the International Space Station as part of a four-person mission by Axiom Space launching from the U.S.. The mission will include 14 days aboard the ISS and over 60 scientific studies. The Guardian reports: He will be the third astronaut of Indian origin to reach orbit, following Rakesh Sharma, who was part of a 1984 flight onboard a Soviet Soyuz spacecraft, and Kalpana Chawla, who was born in India but became a US citizen and flew on two space shuttle missions, including the 2003 Columbia flight that ended in disaster when the spacecraft disintegrated, killing all seven astronauts onboard. "I truly believe that even though, as an individual, I am traveling to space, this is the journey of 1.4 billion people," Shukla was quoted as saying by the Hindu newspaper this year. Shukla said he hoped to "ignite the curiosity of an entire generation in my country."

India's department of space has called the trip a "defining chapter" in its ambitious space exploration program. The International Space Station mission (ISS) "stands as a symbol of a confident, forward-looking nation ready to reclaim its place in the global space race," the agency said before the launch. "His journey is more than just a flight -- it's a signal that India is stepping boldly into a new era of space exploration." New Delhi has paid more than $60m for the mission, according to Indian media reports. [...]

Shukla trained at the Yuri Gagarin Cosmonaut Training Center in Russia in 2020, before undertaking further training at the ISRO's centre in Bengaluru. He has said the journey aboard the Axiom Mission 4, and the expected 14 days on the ISS, will provide "invaluable" lessons to bring back home. Shukla will be led by the mission commander, Peggy Whitson, a former Nasa astronaut and an Axiom employee, and joined by the European Space Agency astronaut Slawosz Uznanski-Wisniewski, of Poland, and Tibor Kapu, of Hungary. They will conduct 60 scientific studies, including microgravity research, earth observation, and life, biological and material sciences experiments.

A coordinated spam operation has infiltrated abandoned subdomains belonging to major institutions including Nvidia, Stanford University, NPR, and the U.S. government's vaccines.gov site, flooding them with AI-generated content that subsequently appears in search results and Google's AI Overview feature.

The scheme, reports 404 Media, posted over 62,000 articles on Nvidia's events.nsv.nvidia.com subdomain before the company took it offline within two hours of being contacted by reporters. The spam articles, which included explicit gaming content and local business recommendations, used identical layouts and a fake byline called "Ashley" across all compromised sites. Each targeted domain operates under different names -- "AceNet Hub" on Stanford's site, "Form Generation Hub" on NPR, and "Seymore Insights" on vaccines.gov -- but all redirect traffic to a marketing spam page. The operation exploits search engines' trust in institutional domains, with Google's AI Overview already serving the fabricated content as factual information to users searching for local businesses.

Amazon has launched its AI-powered Video Generator tool in the U.S., allowing sellers to quickly create photorealistic, motion-enhanced video ads often with a single click. "We'll likely see Amazon retailers utilizing AI-generated video ads in the wild now that the tool is generally available in the U.S. and costs nothing to use -- unless the ads are so convincing that we don't notice anything at all," says The Verge. From the report: New capabilities include motion improvements to show items in action, which Amazon says is best for showcasing products like toys, tools, and worn accessories. For example, Video Generator can now create clips that show someone wearing a watch on their wrist and checking the time, instead of simply displaying the watch on a table. The tool generates six different videos to choose from, and allows brands to add their logos to the finished results.

The Video Generator can now also make ads with multiple connected scenes that include humans, pets, text overlays, and background music. The editing timeline shown in Amazon's announcement video suggests the ads max out at 21 seconds.. The resulting ads edge closer to the traditional commercials we're used to seeing while watching TV or online content, compared to raw clips generated by video AI tools like OpenAI's Sora or Adobe Firefly.

A new video summarization feature can create condensed video ads from existing footage, such as demos, tutorials, and social media content. Amazon says Video Generator will automatically identify and extract key clips to generate new videos formatted for ad campaigns. A one-click image-to-video feature is also available that creates shorter GIF-style clips to show products in action.

An anonymous reader shares a report: A data broker owned by the country's major airlines, including Delta, American Airlines, and United, collected U.S. travellers' domestic flight records, sold access to them to Customs and Border Protection (CBP), and then as part of the contract told CBP to not reveal where the data came from, according to internal CBP documents obtained by 404 Media. The data includes passenger names, their full flight itineraries, and financial details.

CBP, a part of the Department of Homeland Security (DHS), says it needs this data to support state and local police to track people of interest's air travel across the country, in a purchase that has alarmed civil liberties experts. The documents reveal for the first time in detail why at least one part of DHS purchased such information, and comes after Immigration and Customs Enforcement (ICE) detailed its own purchase of the data. The documents also show for the first time that the data broker, called the Airlines Reporting Corporation (ARC), tells government agencies not to mention where it sourced the flight data from.

"The big airlines -- through a shady data broker that they own called ARC -- are selling the government bulk access to Americans' sensitive information, revealing where they fly and the credit card they used," Senator Ron Wyden said in a statement. ARC is owned and operated by at least eight major U.S. airlines, other publicly released documents show. The company's board of directors include representatives from Delta, Southwest, United, American Airlines, Alaska Airlines, JetBlue, and European airlines Lufthansa and Air France, and Canada's Air Canada. More than 240 airlines depend on ARC for ticket settlement services.

An anonymous reader shares a blog post from Google: Today, we're bringing you Android 16, rolling out first to supported Pixel devices with more phone brands to come later this year. This is the earliest Android has launched a major release in the last few years, which ensures you get the latest updates as soon as possible on your devices. Android 16 lays the foundation for our new Material 3 Expressive design, with features that make Android more accessible and easy to use.

Warner Bros Discovery will split into two separate publicly traded companies -- one focused on its studios and streaming assets like HBO, DC Studios, and HBO Max, and the other on its declining cable networks including CNN and TNT Sports. The move, which unwinds the 2022 WarnerMedia-Discovery merger, is expected by mid-2026 and is "the latest unraveling of decades of media consolidation that created global conglomerates spanning content creation, distribution and in some cases, telecommunications," reports Reuters. From the report: The new streaming-and-studios company will include Warner Bros, DC Studios and HBO Max - the crown jewels of WBD's entertainment library. The networks unit, which will hold up to a 20% stake in its counterpart, will house CNN, TNT Sports and Bleacher Report. CEO David Zaslav will lead the streaming and studios unit, while CFO Gunnar Wiedenfels will head the networks unit. The separation will be structured as a tax-free transaction and is expected to be completed by mid-2026.

"We've continued to analyze how our industry is evolving," Zaslav told investors. "The right path forward became increasingly clear ... to separate global networks and streaming and studios into two independent, publicly traded companies." Most of the company's debt would be held by the global networks company. WBD had gross debt of $38 billion as of March. The company said it secured a $17.5 billion bridge loan from J.P. Morgan that it would use to restructure its debt.

According to Bloomberg, several major Chinese AI companies, including Alibaba, ByteDance, and Tencent, have temporarily disabled certain chatbot features during the gaokao college entrance exams to prevent cheating. "Popular AI apps, including Alibaba's Qwen and ByteDance's Doubao, have stopped picture recognition features from responding to questions about test papers, while Tencent's Yuanbao, Moonshot's Kimi have suspended photo-recognition services entirely during exam hours," adds The Verge. From the report: The rigorous multi-day "gaokao" exams are sat by more than 13.3 million Chinese students between June 7-10th, each fighting to secure one of the limited spots at universities across the country. Students are already banned from using devices like phones and laptops during the hours-long tests, so the disabling of AI chatbots serves as an additional safety net to prevent cheating during exam season.

When asked to explain the suspension, Bloomberg reports the Yuanbao and Kimi chatbots responded that functions had been disabled "to ensure the fairness of the college entrance examinations." Similarly, the DeepSeek AI tool that went viral earlier this year is also blocking its service during specific hours "to ensure fairness in the college entrance examination,"according to The Guardian. The Guardian notes that the news is being driven by students on the Chinese social media platform Weibo. "The gaokao entrance exam incites fierce competition as it's the only means to secure a college placement in China, driving concerns that students may try to improve their chances with AI tools," notes The Verge.

A cybersecurity researcher was able to figure out the phone number linked to any Google account, information that is usually not public and is often sensitive, according to the researcher, Google, and 404 Media's own tests. From a report: The issue has since been fixed but at the time presented a privacy issue in which even hackers with relatively few resources could have brute forced their way to peoples' personal information. "I think this exploit is pretty bad since it's basically a gold mine for SIM swappers," the independent security researcher who found the issue, who goes by the handle brutecat, wrote in an email.

[...] In mid-April, we provided brutecat with one of our personal Gmail addresses in order to test the vulnerability. About six hours later, brutecat replied with the correct and full phone number linked to that account. "Essentially, it's bruting the number," brutecat said of their process. Brute forcing is when a hacker rapidly tries different combinations of digits or characters until finding the ones they're after. Typically that's in the context of finding someone's password, but here brutecat is doing something similar to determine a Google user's phone number.

Brutecat said in an email the brute forcing takes around one hour for a U.S. number, or 8 minutes for a UK one. For other countries, it can take less than a minute, they said. In an accompanying video demonstrating the exploit, brutecat explains an attacker needs the target's Google display name. They find this by first transferring ownership of a document from Google's Looker Studio product to the target, the video says. They say they modified the document's name to be millions of characters, which ends up with the target not being notified of the ownership switch. Using some custom code, which they detailed in their write up, brutecat then barrages Google with guesses of the phone number until getting a hit.