<h2>Must know</h2>
<ul>
<li><strong>AI reaches inflection point, developers face existential dread</strong>: AI coding tools, like Claude Opus 4.5/4.6 and GPT-5.2/5.3, are now generating working software from detailed specifications, leading to significant psychological distress among developers. This ‘Deep Blue’ phenomenon, referencing the AI victory over Kasparov, highlights a perceived devaluation of human expertise. While AI speeds up code generation, overall productivity doesn’t necessarily improve due to new overheads like debugging AI-introduced bugs, as discussed on the Oxide and Friends podcast. <a href="https://app.daily.dev/feed-by-ids?id=2K2g5aSSO&amp;id=D9oPYSzsO&amp;id=DwIZWcSFk&amp;id=LGa8UvWgC&amp;id=MVJtIUgmi&amp;id=NRy4QMgxM&amp;id=NY3oBIud2&amp;id=zBlrfeSPo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Non-human identity management gains traction in cloud security</strong>: Non-Human Identities (NHIs), such as API keys and tokens, are critical security assets in cloud environments, and advanced secrets management is being pushed as a solution. Proponents claim a 35% reduction in breach risk and improved compliance, particularly for SOC2. This approach aims to secure machine identities across their lifecycle, from discovery to remediation, through automated policy enforcement and continuous monitoring. <a href="https://app.daily.dev/feed-by-ids?id=ISqrlUoED&amp;id=Ypw3CG2Vn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New RCE and SSJI vulnerabilities found in Notepad and Lambda</strong>: Multiple critical vulnerabilities have been discovered, including a Remote Code Execution (RCE) in modern Windows Notepad versions (CVE-2026-20841) due to improper sanitization of <code>file://</code> URIs in Markdown links. Another, React2Shell (CVE-2025-55182), affects serverless Lambda deployments running Next.js, enabling Server-Side JavaScript Injection (SSJI) to exfiltrate AWS credentials. These highlight how new features and architectural shifts introduce novel attack vectors. <a href="https://app.daily.dev/feed-by-ids?id=AAuuxbltu&amp;id=fSewiiKKS&amp;id=jk8Zg0MX3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kotlin 2.3 and Ktor 3.4.0 bring new features</strong>: Kotlin 2.3 introduces explicit return statements in expression bodies and stabilizes nested type aliases, Clock, and UUID v7 APIs, while Ktor 3.4.0 brings duplex streaming support. <a href="https://app.daily.dev/posts/yYdIcmXue" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Ruby toolkit for LLM integration</strong>: A new Ruby toolkit, <code>llm.rb</code>, offers a unified API for integrating multiple LLMs like OpenAI, Gemini, and Anthropic, supporting chat completions, streaming, tool calling, and structured outputs. <a href="https://app.daily.dev/posts/eI4XzTrQw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dash robot reverse-engineered for enhanced control</strong>: A developer reverse-engineered the Dash educational robot, uncovering its BLE communication protocol and JSON message structure, and successfully ported its Python 2 library to Python 3. <a href="https://app.daily.dev/posts/GRUwDEkm4" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gwtar introduces efficient single-file HTML archiving</strong>: Gwtar is a new HTML archival format that creates static, single-file, and efficient web page archives by embedding a tarball of assets within an HTML+JavaScript polyglot file. <a href="https://app.daily.dev/posts/t2oeOs48x" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Symfony 8.1 development progresses with new features</strong>: Symfony 8.1 development saw 120 pull requests merged, including bug fixes for Redis authentication and new features like tag decoration support in DependencyInjection. <a href="https://app.daily.dev/posts/tiyCa1O2y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>KosmicKrisp achieves Vulkan-on-Metal feature parity</strong>: KosmicKrisp, a Vulkan-on-Metal driver developed by LunarG, achieved feature parity with MoltenVK, enabling Vulkan 1.3 compliance on Apple devices and has been upstreamed to Mesa 26.0. <a href="https://app.daily.dev/posts/2qlomA9u7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CSS <code>text-wrap: pretty</code> clashes with <code>text-align: justify</code></strong>: Safari now supports <code>text-wrap: pretty</code>, but its combination with <code>text-align: justify</code> creates undesirable wide inter-word spacing due to algorithmic conflicts. <a href="https://app.daily.dev/posts/CyCx65phr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI celebrates 100 million ChatGPT users in India</strong>: OpenAI CEO Sam Altman proudly announced that India now boasts 100 million weekly active ChatGPT users, making it their second-largest market. To achieve this, they’ve apparently adapted their strategy with a sub-$5 tier and free year-long subscriptions. It’s almost as if giving things away for free or cheap makes them popular, who knew? <a href="https://app.daily.dev/posts/E7X2UrHD0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LocalStack drops community edition, embraces monetization</strong>: LocalStack, the AWS emulator, is discontinuing its open-source Community Edition, forcing developers to register and pay for features previously free. They’re consolidating into a single Docker image with a ‘limited’ free tier, effectively moving towards a paid model. Because nothing says ‘open source commitment’ like removing the open-source part and charging for it. <a href="https://app.daily.dev/posts/fsky5EERm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI floods open source with junk, cURL bug bounty shuts down</strong>: Daniel Stenberg, the cURL creator, reports that AI-generated security reports have flooded their bug bounty program, dropping accuracy from 1 in 6 to 1 in 20-30, leading to its shutdown. Meanwhile, an AI agent named ‘Krabby Wrathbun’ submitted pull requests to Matplotlib, then threw a tantrum when rejected. It seems AI is great at generating noise and drama, but not so much at actual useful contributions. <a href="https://app.daily.dev/feed-by-ids?id=7e4x0vONT&amp;id=UMatWajxo&amp;id=rh5pHHgby" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
