Phone screens are better than they’ve ever been—bigger, sharper, and brighter—but they don’t always offer the best displays for extended reading sessions. If you’ve got a lot of text to get through, you might find yourself turning to a Kindle instead, or even a good old-fashioned physical book.

There are ways to tweak the screen configuration on your iPhone or Android phone, however, to make it more suitable for reading. These changes will reduce the chance of causing you eye strain while minimizing clutter to create a more pleasant reading experience. You won’t transform your phone into something that rivals an e-reader or the printed page, but you can certainly get closer to it.

Tweak the Display Settings

You’ve actually got more control over the font sizes, styles, and colors used by your phone than you might have realized—you can make text easier to read and create a more Kindle-like experience with just a few taps via the main Settings panel.

If you’re on Android, the menu labels will vary from model to model, but on Pixel phones head to Display size and text. The next screen lets you adjust the size of the default font and other on-screen elements to make text bolder, and there’s also a Dark theme option that you might find reduces eye strain.

Adjusting the font size on Android.Courtesy of David Nield

Over on iOS, open up Display & Brightness from Settings: Here you’ll find a Text Size slider you can adjust, as well as a Bold Text toggle switch. As on Android, there’s a dark mode option here via the theme selector at the top of the screen—select Dark to dim the colors all across the iOS interface.

Both Android and iOS also have a night reading mode that reduces the blue light emitted from your phone and makes the whole display warmer—which should make for a more pleasant reading experience. On Android Pixel phones, choose Display and touch > Night Light from Settings, and on iOS pick Display & Brightness > Night Shift. In both cases you can enable the feature manually or via a schedule.

Use Your Browser’s Reading Mode

Much of the reading you’re going to be doing on your phone will be through its web browser, and most modern mobile browsers come with a dedicated reading mode you can use. These modes will reduce onscreen clutter, simplify the color scheme, and bring the main article text to the fore.

If you’re using Google Chrome as your default browser on Android, tap the three dots (top right), then Show Reading mode to switch views for the article you’re currently reading. Swipe up on the panel at the bottom of the screen to change the font and color options. Tap the reading mode icon (just to the right of the address bar) to return to the normal browser view.

After OpenAI recently admitted that one of its models had breached the systems of AI platform Hugging Face, Hugging Face’s CEO Clem Delangue posted on X that he was flying to San Francisco to have “a little chat with that ‘rogue agent.’”

Then, in a follow-up post on Saturday, Delangue outlined what he’d asked for from OpenAI. He said he called for “radical transparency,” asking OpenAI to “release the traces from the ‘rogue’ agents so the entire research community can study what happened.”

And he also wants “more capabilities for defenders,” calling for OpenAI to commit $100 million worth of computing power “to help the Hugging Face community build powerful cyber defenses with the best open and closed models.”

Delangue added, “The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!”

Despite the autonomous nature of the attack, cybersecurity experts suggested that it could also be blamed on human error — namely, OpenAI’s apparent failure to properly configure what should have been a fully isolated testing environment.

Security

(Security) hole-ier than thou

Click To Pray, a prayer app endorsed by the Pope with hundreds of thousands of users worldwide, has leaked people’s names and email addresses for months – or longer – according to an ethical hacker who said she found and reported the security vulnerability six months ago to no avail. This app needs to take a vow of silence when it comes to your personal information.

The app, available in seven languages and on iOS, Android, and clicktopray.org, is the official app of the Pope’s Worldwide Prayer Network. It connects users across the globe to pray for the Holy Father’s intentions, and as of July 2026, it has 719,517 registered accounts.

It’s also very leaky, according to security sleuth BobDaHacker, who says she spotted and disclosed the vulnerability to the Pope’s Worldwide Prayer Network on January 3.

“The vulnerability is still live,” the hacker said in a Friday blog. “Nobody has ever responded. I guess my email wasn’t in their prayers.”

The Reg readers likely remember BobDaHacker for her previous research exposing a free-food flaw in McDonald’s ordering system and open controls on Chinese robot manufacturer Pudu Robotics.

This latest security hole stems from an Insecure Direct Object Reference (IDOR) bug in the prayer app. This is a very common and easy-to-exploit type of flaw that occurs when a website or an app blindly accepts user-provided input to view or modify resources without checking to see if the user is actually authorized to retrieve the data.

“You ask for your own data, the server gives it to you,” BobDaHacker explains. “You ask for someone else’s data, the server gives you that too. Thou shalt not authorize, apparently.”

When you sign up for a Click To Pray account, the app assigns you a sequential numeric user ID. As BobDaHacker uncovered, the API endpoint GET https://api[.]clicktopray.org/user/users/{id} will return user data for any account – not just your own account – so long as you supply a valid, five-digit user ID. 

It doesn’t perform any authorization check or ownership validation. “Just increment the number and get someone else’s data,” she wrote.

This data includes users’ email addresses, first and last names, country, dates of birth, and whether the account has been deleted, and the API exposes all 719,517 accounts on the prayer site. “With sequential user IDs and no rate limiting, an attacker could enumerate every single account on the platform,” the hacker explained. “One GET request per user. for i in range(1, 719518): scrape(). That’s it. That’s the exploit.”

As BobDaHacker points out, many of these users are likely older individuals, not all that tech savvy, and very trusting of anything Vatican related, making these exposed accounts a “phishing goldmine.”

“Imagine getting an email that says ‘The Holy Father requests your urgent attention’ with a Vatican-looking link,” she wrote. “Grandma is clicking that. Every time.”

And then it gets even worse.

The signup endpoint, POST https://api.clicktopray.org/user/users/sign-up, returns the account’s validation_hash directly in the response body, and that value is the same UUID used in the email verification link. This means someone could sign up using any email address and verify the account before the confirmation message reached the inbox.

Plus, BobDaHacker’s email client flagged the real verification email with a warning that it had failed the domain’s authentication requirements and might have been spoofed or improperly forwarded.

“So not only is the API leaking 700,000 email addresses that could be used for phishing, but the real emails from Click To Pray already look like phishing,” the hacker noted. “An attacker wouldn’t even need to try hard. They could send a pixel-perfect phishing email and it would have the same level of email authentication as the real thing: none. God works in mysterious ways.”

The Register reached out to the Pope’s Worldwide Prayer Network and did not receive any response. BobDaHacker says she’s still praying for one, too.®

Your battery is continually losing charge.

Why the battery depletes

Rawpixel/Getty Images

Keep it half charged

Nature/Getty Images

Tips for keeping the battery healthy

Korosi Francois-Zoltan/Shutterstock

SCIENCE

So, how are those commercial replacements working out for you, NASA?

This week marks 15 years since a Space Shuttle last returned from orbit and the end of NASA’s Space Shuttle program.

Space Shuttle Atlantis landed at the Shuttle Landing Facility (SLF) at Kennedy Space Center 15 years ago this week, marking the final mission for the program.

STS-135 was originally designated STS-335, the Launch On Need (LON) mission for the previous STS-134 flight of Space Shuttle Endeavour. LON missions had been a feature of the Space Shuttle program following the Columbia disaster.

If a Space Shuttle was damaged, another could be launched at short notice to rescue the crew. NASA assigned Launch On Need flights separate STS-3xx designations, so the rescue mission for STS-116 was STS-317, STS-117 was STS-318, and so on. There were exceptions (a notable one was the STS-125 Hubble servicing mission, which had STS-400 ready to go if anything went wrong), but the Space Shuttle program should have ended with STS-134.

However, lawmakers and NASA managers opted to make STS-135 the final Space Shuttle mission. There could be no Launch On Need mission waiting in the wings this time around – the Space Shuttle program was being wound down – so the crew would have had to come down from the International Space Station (ISS) aboard Soyuz capsules if Atlantis could not return to Earth safely. There were also only four crew members, a figure not seen since the STS-6 mission of Challenger in 1983.

The crew was commanded by Christopher Ferguson, who would later join Boeing’s Commercial Crew Program and was assigned to (although did not fly) Boeing’s calamity capsule, the Starliner. The pilot for STS-135 was Douglas Hurley, who went on to fly the first crewed test flight of SpaceX’s Crew Dragon in 2020. Rounding out the crew were mission specialists Sandra Magnus and Rex Walheim.

The launch occurred on July 8, 2011, and Atlantis returned from orbit on July 21, bringing the Space Shuttle program to a conclusion.

It wasn’t, however, the end of crewed spaceflight for the US, although the gap that followed was considerably greater than expected or hoped. After the Space Shuttle retired, the US was dependent on Russia for getting its astronauts to and from the ISS. NASA later awarded Commercial Crew contracts to SpaceX and Boeing to restore launches from US soil, but it took SpaceX until 2020 to get the first humans to the outpost, and Boeing until 2024.

The latter’s mission was marked by ignominy due to failures and faults during the mission that meant managers opted to send the capsule back to Earth empty from the ISS and have the Starliner flight test crew return in 2025 aboard a SpaceX vehicle. NASA and Boeing have yet to set a definitive date for when a crew might venture to the ISS once again aboard Starliner.

All of which, 15 years after a Space Shuttle returned from orbit for the last time, has left the US space agency in a bit of a pickle. Instead of depending on the Space Shuttle, the plan was to reduce risk and add redundancy to US capabilities with two providers, but things haven’t worked out that way. To make matters worse, there is uncertainty about how much longer SpaceX will continue to fly the Crew Dragon beyond its contracted missions. The vehicle is reusable, but no more are planned to be manufactured, and SpaceX reckons that each should be good for 15 flights, with some refurbishment.

This should be enough to get through to the end of the ISS program and beyond, but in the longer term an alternative will be required. For SpaceX, this will likely be Starship.

The fate of the Space Shuttles themselves is also not completely set. Atlantis has been staged in a facility at Kennedy Space Center as if in orbit, and the California Science Center has mounted Space Shuttle Endeavour on an external tank and solid rocket boosters, as though ready for launch. The fate of Space Shuttle Discovery is, however, uncertain. Certain lawmakers would very much like to transport the retired orbiter from the Smithsonian’s Steven F. Udvar-Hazy Center in Virginia to Houston, Texas.

For others, well, there’s always a used Orion capsule. ®

Apple is currently aiming to unveil its first smart glasses at next June’s Worldwide Developers Conference, with a consumer release by the end of 2027, according to Bloomberg’s Mark Gurman. But the company’s engineering and marketing teams are still wrestling with a question that will define the product: whether its glasses should include a camera at all. The teams developing the device, code-named N50, within Apple’s Vision hardware group see privacy as the top priority, Gurman reported on Saturday.

That caution is a direct response to the backlash Meta created. Meta has sold more than seven million pairs of its Ray-Ban smart glasses, but the product’s camera has become a lightning rod for privacy complaints, with women being secretly filmed in public and Kenyan data workers reporting they were asked to review intimate footage captured by the devices. Apple executives are acutely aware that simply entering the same category risks undermining a privacy reputation the company has spent more than a decade building.

Apple is planning safeguards that go beyond what Meta and Samsung have offered. The company will favour on-device processing, eschew facial recognition, and avoid anything resembling Meta’s proposed “super-sensing” mode, which would continuously analyse a wearer’s surroundings without activating the recording indicator light. Apple also does not plan to follow Meta’s practice of having contractors review footage captured by its glasses, having already dealt with a similar controversy around its Siri voice assistant.

One option Apple executives have debated would include the full camera system but disable photo and video recording entirely, limiting the cameras to feeding visual data into AI tools that identify objects and places. Another prototype eliminates the camera hardware altogether, retaining hands-free Siri access, music playback, and phone calls without any recording capability. Both approaches would sacrifice what has made Meta’s glasses popular: effortless first-person video of holidays, children, and sporting events.

The privacy problem is not theoretical. Apple is entering one of the most important product cycles in its history, with the 20th anniversary iPhone, a second-generation foldable, camera-equipped AirPods, and new Macs all expected in 2027. Courtrooms across New York State have already banned smart glasses, Royal Caribbean has barred them from casinos, restrooms, and children’s areas, and Samsung has called the privacy situation an “industry-shared problem” requiring a collective fix.

The glasses were originally targeted for introduction later this year under the N50 code name, but Apple delayed the timeline partly to refine its privacy message. The company knows from experience that good intentions do not prevent misuse: its AirTags, designed to locate belongings, quickly became associated with stalking. Camera-equipped glasses will inevitably face similar problems, and Apple will likely spend years updating software and working with regulators to address them.