<h2>Must know</h2>
<ul>
<li><strong>AI agents are farming open-source reputation for future attacks</strong>: Security experts are warning about a new threat called ‘reputation farming,’ where AI agents like ‘Kai Gritun’ rapidly submit pull requests to open-source projects to build trust. This activity, seen across 95 repositories, could enable future supply chain attacks similar to XZ-utils, but at an accelerated pace. The concern is that automated contributions shift the attack surface from code to governance processes, making it harder to distinguish legitimate contributions from malicious ones, as reported by Socket. <a href="https://app.daily.dev/feed-by-ids?id=D9JdnEIyW&amp;id=QHtbtBXdQ&amp;id=UNO27M8rA&amp;id=VGEsVlZIo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL scales to 800 million users at OpenAI</strong>: OpenAI successfully scaled PostgreSQL to handle millions of queries per second for 800 million ChatGPT users using a single-primary architecture with read replicas. Their strategy focused on minimizing primary database load through read offloading, write optimization, and query/connection optimization with PgBouncer. They addressed MVCC constraints by migrating write-heavy workloads to sharded systems, achieving five-nines availability with low double-digit millisecond p99 latency without full sharding, according to ByteByteGo. <a href="https://app.daily.dev/posts/0QBTpoQPy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated malware exploits Docker honeypots</strong>: Attackers are now using LLM-generated malware to exploit vulnerabilities like React2Shell in Docker honeypots. This demonstrates how AI tools can lower the barrier to entry for cyberattacks, enabling low-skilled operators to build sophisticated exploitation frameworks. Security experts warn this signifies a shift in the threat landscape, where traditional indicators like code quality are no longer reliable for assessing threat maturity, highlighting the need for enhanced security measures like runtime behavior monitoring. <a href="https://app.daily.dev/posts/hzvvYMQze" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Java gets null safety and C-like performance</strong>: Project Valhalla is bringing null safety to Java through null-restricted value types, designed for backward compatibility, alongside value objects and generic specialization to achieve C-like performance by eliminating pointer chasing. <a href="https://app.daily.dev/posts/YYmRfNhUM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL diagnostic toolkit gets major update</strong>: postgres_dba 7.0, a psql-based diagnostic toolkit, was released with 34 reports for bloat analysis, vacuum monitoring, index health, query performance, and more, requiring no extensions and compatible with PostgreSQL 13-18. <a href="https://app.daily.dev/posts/A4pYssSEb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents build SQLite-like database in Rust</strong>: An experiment showed multiple AI agents (Claude, Codex, Gemini) building a SQLite-like database engine in Rust, generating ~19k lines of code and 282 passing tests, though 54.5% of commits were coordination overhead. <a href="https://app.daily.dev/feed-by-ids?id=pbRQZ4xYf&amp;id=wVbWM6nJH&amp;id=xfda4p1KO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Istio 1.29.0 enhances ambient mesh and security</strong>: Istio 1.29.0 introduces default DNS proxying and automatic iptables reconciliation for ambient mesh, beta support for Gateway API Inference Extension, and security improvements like CRL support in ztunnel and namespace-based authorization for debug endpoints. <a href="https://app.daily.dev/feed-by-ids?id=Vx9QllueY&amp;id=P84O4eJD1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Small language models for local deployment are here</strong>: Seven Small Language Models (SLMs) from 1B to 9B parameters, including Phi-3.5 Mini for RAG and Qwen 2.5 7B for code generation, are now available for local execution on consumer laptops with varying RAM requirements. <a href="https://app.daily.dev/posts/Uggt1hDI5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agoda open-sources API agent for REST/GraphQL</strong>: Agoda released API Agent, an open-source MCP server that connects to any REST or GraphQL API without code, automatically introspecting schemas and generating queries from natural language, with in-memory SQL post-processing via DuckDB. <a href="https://app.daily.dev/posts/VhIIJvhkg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New Chrome features for developers and WebGPU</strong>: Chrome 145 enhances DevTools with soft navigation visibility and precise profiler timings, introduces the WGSL <code>subgroup_uniformity</code> extension for WebGPU, and adds <code>column-wrap</code> and <code>column-height</code> CSS properties for multi-column layouts. <a href="https://app.daily.dev/feed-by-ids?id=AK3a3hE0z&amp;id=EWohDzjzG&amp;id=bvXFp0lun" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>NVIDIA’s Blackwell Ultra: 50x better, 35x cheaper, trust us</strong>: NVIDIA is claiming their Blackwell Ultra platform delivers up to 50x higher throughput and 35x lower cost for agentic AI workloads compared to Hopper. These numbers, from SemiAnalysis InferenceX, are so astronomically good they practically scream ‘marketing department had a field day.’ Apparently, continuous software optimizations and hardware improvements just magically make everything 50 times better. Sure, Jan. <a href="https://app.daily.dev/posts/XLkxKsrjj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-generated C compiler fails at hello world, but it’s the future</strong>: Claude’s AI-generated C compiler, developed over two weeks, can’t even compile ‘hello world’ on most Linux distros and produces assembly errors when trying to build the Linux kernel. Performance benchmarks show it running SQLite queries up to 158,000x slower than GCC. Yet, some ‘experts’ predict AI coding tools will become widespread, leading to buggier, less secure software. Because who needs functional code when you have ‘progress’? <a href="https://app.daily.dev/feed-by-ids?id=QCdIy73we&amp;id=ijXBeCZ92&amp;id=oHgSGtpkl&amp;id=qpa1K5xV7&amp;id=wQAJlLNnu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI education tools are optimizing away human connection</strong>: AI education tools and learning dashboards are being criticized for over-optimizing measurable outcomes, completely neglecting human connection, creativity, and deep engagement. Apparently, quantifying education through dashboards and standardized testing leads to declining student interest and teacher burnout. Who knew that reducing learning to a series of metrics would make it less engaging? Shocking. <a href="https://app.daily.dev/feed-by-ids?id=2eDP2Fyot&amp;id=zJAFJHd8H" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
