<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a growing concern</strong>: The rise of AI coding agents, like Stripe’s ‘Minions’ generating thousands of pull requests weekly, is creating a ‘security debt crisis’ as these agents prioritize speed over secure practices. Research from Columbia University highlights issues like hardcoded API keys and public access policies. Mitigations include spec-driven prompting with OWASP Top 10 and robust CI/CD scanners, as detailed in InfoSec Write-ups. <a href="https://app.daily.dev/feed-by-ids?id=DD6LZnw0Q&amp;id=Et2d8uHu3&amp;id=LUO8dPKde&amp;id=RH1TYGIET&amp;id=UGo4Ea1t8&amp;id=bDJrJKMJX&amp;id=em7afQ5sm&amp;id=l0KLAjYGc&amp;id=ohhVPexbM&amp;id=vXBWwcwBk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google’s Gemini 3.1 Pro: high benchmarks, low usability</strong>: Despite impressive benchmark scores, Google’s Gemini 3.1 Pro is reportedly struggling with real-world coding and UI generation tasks. Comparisons with Claude Opus 4.6 show Gemini 3.1 Pro underperforming due to tool-calling failures, incomplete features, and poor environment detection. This suggests Google might be ‘benchmaxing’ at the expense of practical application, a common pitfall in the AI race. <a href="https://app.daily.dev/feed-by-ids?id=bIAFUawfa&amp;id=mGa3eARS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic and Figma launch code-to-design workflow</strong>: Anthropic and Figma have teamed up to create a workflow that allows Claude Code to convert production code into editable Figma designs. This enables developers to send live web pages to Figma, facilitate design collaboration, and then round-trip updated designs back to code. This integration aims to streamline the design-to-development process, as reported by Anthropic. <a href="https://app.daily.dev/posts/aCaE5xJ9z" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>WebMCP offers browser-native AI agent execution</strong>: Google’s WebMCP is a new browser-native API allowing websites to expose structured JavaScript tools for AI agents to invoke directly within the browser, improving determinism and reducing token overhead. <a href="https://app.daily.dev/posts/61GmU0Tcy" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agent development tools and observability are evolving</strong>: New tools like <code>cocoindex-code</code> for semantic code search and Hugging Face Skills for reusable AI/ML tasks are emerging, alongside a focus on agent observability to debug non-deterministic reasoning. <a href="https://app.daily.dev/feed-by-ids?id=LY7p8IODB&amp;id=ZmcjIu8ai&amp;id=frjHTf2Ap&amp;id=xhDI1zj4i" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LLM inference optimization for single GPUs</strong>: NTransformer, an open-source C++/CUDA engine, claims to run Llama 3.1 70B on a single RTX 3090 using adaptive caching and layer streaming, achieving significant speedups. <a href="https://app.daily.dev/posts/Ahx4zgQks" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong><a href="http://Lobste.rs" target="_blank" rel="noopener nofollow">Lobste.rs</a> attempts and reverts SQLite migration</strong>: <a href="http://Lobste.rs" target="_blank" rel="noopener nofollow">Lobste.rs</a> tried to migrate from MariaDB to SQLite but quickly reverted due to severe performance degradation, though they plan to retry after addressing the issues. <a href="https://app.daily.dev/posts/RLQeRSeS0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elixir language server reaches release candidate</strong>: Expert, the new official Elixir language server merging Lexical and Next LS, has released its first release candidate, focusing on stability and core features. <a href="https://app.daily.dev/posts/ItEtgwo7d" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Git’s magic files for repository control</strong>: A comprehensive reference covers Git’s special committed files like .gitignore and .gitattributes, which control repository behavior and are crucial for tool builders. <a href="https://app.daily.dev/posts/NIh4SPpHk" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Database design starts with consequences, not tables</strong>: Effective database design prioritizes understanding business domain consequences and rigorous schema changes, emphasizing normalization, proper indexing, and constraints over premature optimization. <a href="https://app.daily.dev/posts/fI73pTtiz" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Meta patents AI to post after you’re dead</strong>: Meta has patented an AI system that can simulate a deceased user’s social media activity, including posting and chatting, using their past data. Because what we all really need is our digital ghost haunting our friends and family with AI-generated platitudes. Nothing creepy about that at all, right? <a href="https://app.daily.dev/posts/AeW0pHCcd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Android malware makes itself unkillable and uninstallable</strong>: A detailed analysis of Android malware, PromptSpy, reveals eight layers of persistence and anti-removal mechanisms, including boot persistence, self-updates, and UI blockers. So, while we’re all busy debating the ethics of AI, some genius is out there making sure your phone is truly, irrevocably theirs. Priorities, people. <a href="https://app.daily.dev/posts/VKUMk8xIJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Adobe and NVIDIA render 10 million sparkles at 280 FPS</strong>: Adobe Research, NVIDIA, and Aalto University developed a technique to render millions of microscopic glint particles (sparkles) in real-time at over 280 FPS. Because clearly, the most pressing issue in computer graphics was making sure our digital glitter was absolutely, perfectly, blindingly realistic. The future is sparkly, I guess. <a href="https://app.daily.dev/posts/rT496vCA" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
