<h2>Must know</h2>
<ul>
<li><strong>AI agents are getting scary good at open-source reputation farming</strong>: An AI agent named Kai Gritun submitted over 100 pull requests across nearly 100 open-source repositories in just days, a tactic security experts are calling ‘reputation farming.’ This rapid accumulation of influence in critical projects could enable future supply chain attacks, shifting the attack surface from code to governance processes. This is a new twist on the XZ-utils backdoor, but much faster, according to Socket. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java is getting a massive performance and null safety upgrade</strong>: Java is set to receive its biggest upgrade in decades with Project Valhalla, introducing null safety through null-restricted value types and aiming for C-like performance. These changes, expected in 2026, will enable more memory-efficient data structures and eliminate pointer chasing while maintaining backward compatibility. Additionally, OpenJDK recently fixed a 400x performance gap in thread CPU time measurement with a mere 40-line code change, replacing inefficient file I/O with a direct system call. <a href="https://app.daily.dev/feed-by-ids?id=FATXm44Rc&amp;id=MKrvHVnz4&amp;id=YYmRfNhUM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Chrome extensions caught exfiltrating browsing data from 37 million users</strong>: A security researcher uncovered 287 Chrome extensions, with a staggering 37 million combined installs, secretly transmitting users’ browsing histories. The data exfiltration was cleverly hidden using encryption and obfuscation techniques, sending sensitive information to data brokers and unknown operators. This highlights a significant privacy risk lurking in seemingly innocuous browser add-ons. <a href="https://app.daily.dev/posts/G9AfdVV0Z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>AI agents are building SQLite-like databases in Rust</strong>: An experiment showed multiple AI agents (Claude, Codex, Gemini) collaborating to build a SQLite-like database engine in Rust, generating ~19k lines of code and 282 passing tests, though 54.5% of commits were coordination overhead. <a href="https://app.daily.dev/feed-by-ids?id=pbRQZ4xYf&amp;id=wVbWM6nJH&amp;id=xfda4p1KO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI is changing developer roles from coders to orchestrators</strong>: AI coding tools are shifting developer roles from pure coders to orchestrators and validators, requiring new infrastructure for responsible AI-assisted development and emphasizing domain expertise over raw code output. <a href="https://app.daily.dev/feed-by-ids?id=2XGWtlWnL&amp;id=JV1i29nbu&amp;id=WYcCi2eVO&amp;id=Wvk48DEZ7&amp;id=dVvuHhcvo&amp;id=oZ8mOxinB&amp;id=qtVi65Njq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL gets a new diagnostic toolkit</strong>: postgres_dba 7.0, a psql-based diagnostic toolkit, was released, offering 34 reports for PostgreSQL versions 13-18, covering bloat analysis, vacuum monitoring, index health, and more, without requiring extensions. <a href="https://app.daily.dev/feed-by-ids?id=A4pYssSEb&amp;id=sS4pUElCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Godot engine gets a maintenance update</strong>: Godot Engine released version 4.6.1, a maintenance update with 38 bug fixes addressing regressions in 3D editing, animation, rendering, and editor functionality, with no known incompatibilities. <a href="https://app.daily.dev/feed-by-ids?id=MRsxoTJ2c&amp;id=XONCKqkKx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Chrome 145 features for developers</strong>: Chrome 145 introduces DevTools updates like soft navigation visibility, precise profiler timings, and multimodal AI assistance, alongside WebGPU enhancements and new CSS properties for multi-column layouts. <a href="https://app.daily.dev/feed-by-ids?id=AK3a3hE0z&amp;id=EWohDzjzG&amp;id=bvXFp0lun" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Singleton pattern best practices for Java</strong>: The Bill Pugh Holder Idiom and Enum Singletons are recommended for thread-safe and resilient Singleton implementations in Java, addressing common pitfalls like thread-safety issues and reflection attacks. <a href="https://app.daily.dev/feed-by-ids?id=KKPCuGZ5i&amp;id=bbwBz13EP&amp;id=kJh6zEwfb&amp;id=nIbbcctpC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 brings exFAT improvements and PCI updates</strong>: Linux 7.0 introduces multi-cluster support for the exFAT driver, improving sequential read performance, and refactors CardBus code to reduce bloat, alongside PCI power management fixes and PCIe M.2 support. <a href="https://app.daily.dev/feed-by-ids?id=319goy50e&amp;id=6W6txzxUc&amp;id=qwTM43t2e" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA’s Blackwell Ultra: 50x performance, 35x lower cost, and 10x more hype</strong>: NVIDIA is claiming their Blackwell Ultra platform delivers up to 50x higher throughput and 35x lower cost for agentic AI workloads compared to Hopper. And if that wasn’t enough, the upcoming Rubin platform promises another 10x improvement. These numbers, from SemiAnalysis InferenceX, are so good they practically write themselves, making you wonder if they’re selling GPUs or magic beans. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated C compiler fails at ‘hello world’, but don’t worry, it’s the future</strong>: Claude’s AI-generated C compiler, developed over two weeks, reportedly can’t even compile ‘hello world’ on most Linux distros and produces assembly errors when trying to tackle the Linux kernel. Benchmarks show it running SQLite queries up to 158,000x slower than GCC. But hey, according to the author of ‘Claude Code Agents Are Completely Useless,’ developers will still adopt these tools, leading to buggier, less secure software. Progress! <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI education tools: because nothing says ‘learning’ like a dashboard</strong>: AI education tools and learning dashboards are being criticized for over-optimizing measurable outcomes, neglecting human connection and creativity. Apparently, quantifying education through metrics leads to declining student interest and teacher burnout. Because who needs a passionate teacher when you can have a dashboard telling you exactly how uninspired your child is? <a href="https://app.daily.dev/feed-by-ids?id=2eDP2Fyot&amp;id=zJAFJHd8H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
