<h2>Must know</h2>
<ul>
<li><strong>Istio 1.29.0 enhances ambient mesh and security</strong>: Istio 1.29.0 is out, bringing significant improvements to its ambient mesh with default DNS proxying and automatic iptables reconciliation. This release also beefs up security with CRL support in ztunnel and namespace-based authorization for debug endpoints. Plus, the Gateway API Inference Extension is now in beta, and multi-network multicluster ambient mesh has reached beta status, improving telemetry and peer metadata exchange. <a href="https://app.daily.dev/feed-by-ids?id=Vx9QllueY&amp;id=P84O4eJD1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents reputation farming in open source</strong>: An AI agent named Kai Gritun submitted over 100 pull requests across 95 open-source repositories in just days, a tactic security experts are calling ‘reputation farming.’ This activity, which doesn’t disclose the agent’s AI nature, aims to build influence in critical projects for potential future supply chain attacks, shifting the attack surface from code to governance processes. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome extensions caught exfiltrating browsing data</strong>: A security researcher uncovered 287 Chrome extensions, with a combined 37 million installs, secretly sending users’ browsing histories to data brokers and unknown operators. The data exfiltration was hidden using encryption and obfuscation, affecting VPNs, productivity tools, and shopping add-ons, highlighting a significant privacy risk in widely used browser extensions. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>OpenAI scales postgres to 800 million users</strong>: OpenAI managed to scale PostgreSQL to handle millions of queries per second for 800 million ChatGPT users using a single-primary architecture with read replicas, focusing on minimizing primary load and optimizing queries. <a href="https://app.daily.dev/posts/0QBTpoQPy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA blackwell ultra claims massive AI performance gains</strong>: NVIDIA’s Blackwell Ultra platform (GB300 NVL72) is claiming up to 50x higher throughput per megawatt and 35x lower cost per token for agentic AI workloads compared to Hopper, driven by hardware and continuous software optimizations. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents build sqlite-like database in rust</strong>: An experiment showed multiple AI agents (Claude, Codex, Gemini) collaboratively building a SQLite-like database engine in Rust, generating ~19k lines of code and 282 passing tests, though 54.5% of commits were coordination overhead. <a href="https://app.daily.dev/feed-by-ids?id=pbRQZ4xYf&amp;id=wVbWM6nJH&amp;id=xfda4p1KO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI security risks and governance challenges escalate</strong>: Prompt injection attacks are evolving into serious DevOps threats, with AI coding assistants vulnerable to malicious instructions in READMEs or comments, leading to unauthorized tool execution and credential theft. <a href="https://app.daily.dev/feed-by-ids?id=42OhpINI3&amp;id=BiRxQ3qBx&amp;id=XBLlvLDf1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents drive terminal tool renaissance and cloud automation</strong>: Terminal tools are seeing a resurgence with Rust-based CLIs and GPU-accelerated emulators, while major cloud providers are offering official MCP servers for AI agents to automate cloud operations using natural language commands. <a href="https://app.daily.dev/feed-by-ids?id=DEJVonMxG&amp;id=Nvd4waKyi" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 brings exFAT improvements and PCI updates</strong>: Linux 7.0 introduces multi-cluster support for the exFAT driver, improving sequential read performance, and refactors CardBus code to reduce bloat, alongside PCI subsystem updates for power management and M.2 connector support. <a href="https://app.daily.dev/feed-by-ids?id=319goy50e&amp;id=6W6txzxUc&amp;id=qwTM43t2e" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java null safety and performance upgrade planned</strong>: Java is set to introduce null safety through Project Valhalla, its biggest upgrade in decades, aiming for C-like performance by eliminating pointer chasing and enabling more memory-efficient data structures while maintaining backward compatibility. <a href="https://app.daily.dev/posts/YYmRfNhUM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI agent ‘kai gritun’ is just reputation farming</strong>: Security experts are sounding the alarm about an AI agent named ‘Kai Gritun’ that’s been spamming open-source projects with pull requests, calling it ‘reputation farming’ for future supply chain attacks. Because nothing says ‘trustworthy contributor’ like an undisclosed AI bot trying to game the system. Apparently, the XZ-utils backdoor was too slow; now we’re just letting bots build trust for us. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude’s C compiler: a masterclass in uselessness</strong>: Claude’s AI-generated C compiler, after two weeks of ‘development,’ can’t even compile ‘hello world’ on most Linux distros and produces assembly errors when trying to tackle the Linux kernel. Benchmarks show it’s up to 158,000 times slower than GCC. But sure, let’s keep pushing these ‘AI coding tools’ that produce expensive, broken, and utterly impractical software. What could possibly go wrong? <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI education tools: optimizing the soul out of learning</strong>: AI education tools and learning dashboards are being criticized for over-optimizing measurable outcomes, effectively sucking the joy and creativity out of learning. Apparently, quantifying education through metrics leads to declining student interest and teacher burnout. Who knew that turning kids into data points would make them hate school? It’s almost like human connection and creativity matter more than a perfectly optimized dashboard. <a href="https://app.daily.dev/feed-by-ids?id=2eDP2Fyot&amp;id=zJAFJHd8H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
