<h2>Must know</h2>
<ul>
<li><strong>AI agents are a security nightmare</strong>: AI agents are introducing a ‘lethal trifecta’ of security risks: access to private data, ingestion of untrusted content, and external communication, all compounded by persistent memory that enables time-shifted attacks. Traditional security models are proving insufficient, with real-world incidents like a BBC reporter being hacked via an AI platform and critical vulnerabilities found in open-source agents like OpenClaw, as reported by multiple sources including WIRED. <a href="https://app.daily.dev/feed-by-ids?id=1HpSP7L9S&amp;id=1TelNKsBD&amp;id=9xLrRFK2b&amp;id=FuKqPJxtz&amp;id=Jm3weKMWA&amp;id=ZmcjIu8ai&amp;id=em7afQ5sm&amp;id=kdJWfknAe&amp;id=ohhVPexbM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 6 is a stepping stone to a Go rewrite</strong>: TypeScript 6 has been released, but it’s not about flashy new features. It’s a transitional release designed to prepare the ecosystem for a major rewrite of the TypeScript compiler in Go, aiming to tackle performance bottlenecks in large applications. Developers are strongly encouraged to upgrade to TypeScript 6 to get ready for TypeScript 7, which will be the Go-based version, according to Bruno Couriol and other reports. <a href="https://app.daily.dev/posts/tiMDdyFcG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI introduces harness engineering for AI-driven development</strong>: OpenAI has unveiled ‘Harness Engineering,’ an internal methodology that uses Codex agents to automate large-scale software development tasks like code generation, testing, and CI workflows. A five-month experiment reportedly produced a million lines of code without manual writing, shifting engineers’ roles to designing environments and providing feedback. Martin Fowler noted this as a significant framing of AI-enabled software development. <a href="https://app.daily.dev/posts/dPCNsAxds" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Anthropic and Figma integrate Claude for design-to-code workflow</strong>: Anthropic and Figma have partnered to allow Claude Code to convert production code into editable Figma designs and round-trip updates back to the codebase, streamlining designer-developer collaboration. <a href="https://app.daily.dev/posts/aCaE5xJ9z" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare R2 launches local uploads for faster writes</strong>: Cloudflare’s R2 object storage now offers ‘Local Uploads’ in open beta, reducing cross-region write latency by up to 75% by writing data to the nearest PoP and asynchronously replicating it to the home region. <a href="https://app.daily.dev/posts/XbGrpoJDs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS enables event-driven architectures for RDS SQL Server</strong>: AWS now allows Lambda functions to be triggered directly from RDS for SQL Server database events, enabling event-driven architectures by parsing SQL Server’s ERRORLOG for specific messages. <a href="https://app.daily.dev/posts/KzhIuYzeh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux ecosystem sees updates across the board</strong>: Linux 7.0 is getting DRM kernel graphics driver fixes and eCryptfs updates, while GNOME 50 beta includes VRR and fractional scaling, and KDE Plasma 6.6 released with a new login manager. <a href="https://app.daily.dev/feed-by-ids?id=2U7gOjLpG&amp;id=BZn5Av50T&amp;id=LutMi5Kcz&amp;id=MGUcuQgst&amp;id=gNaBG2osm&amp;id=u9gGdIsNO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kotlin community diversifies beyond Android</strong>: The Kotlin community has significantly diversified, with Android developers now making up only 25-30% of users, down from 75% in 2017, and Kotlin Multiplatform gaining traction. <a href="https://app.daily.dev/posts/82WpaCPRf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GrapheneOS offers a privacy-focused Android alternative</strong>: GrapheneOS provides a privacy-centric Android experience, removing Google Play Services by default and offering sandboxed Google Play as an option, though it comes with trade-offs like limited tap-to-pay. <a href="https://app.daily.dev/feed-by-ids?id=840Dw8MXb&amp;id=OwmBaq9Nm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MicroGPT visualizes LLM internals in your browser</strong>: MicroGPT is a browser-based tool that interactively visualizes the internal workings of a simplified GPT model, allowing users to observe training and understand how parameters affect model behavior without writing code. <a href="https://app.daily.dev/posts/OVC1wsXuk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Google VP warns against thin AI wrappers and aggregators</strong>: Google Cloud VP Darren Mowry is out here warning that AI startups just wrapping LLMs or acting as aggregators are basically doomed, comparing them to early AWS resellers who got squeezed out. Apparently, if your ‘innovation’ is just putting a pretty UI on someone else’s model, you’re not long for this world. Who knew that building a business on thin margins and no proprietary tech was a bad idea? <a href="https://app.daily.dev/posts/djwfpUzVm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI CEO dismisses AI water usage concerns</strong>: Sam Altman, CEO of OpenAI, is calling claims of high AI water usage ‘completely untrue,’ specifically refuting the 17 gallons per ChatGPT query figure. He acknowledges energy consumption is a concern but frames AI training costs against human development, claiming AI is more energy-efficient per inference than a human. Because, you know, humans run on water and electricity too, just in a much less convenient data center form. <a href="https://app.daily.dev/feed-by-ids?id=95MvV75SN&amp;id=mGa3eARS3&amp;id=ogUHau6h0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The Document Foundation calls out OnlyOffice as ‘fake open source’</strong>: The Document Foundation, the folks behind LibreOffice, are accusing OnlyOffice of being ‘fake open source’ because they allegedly partner with Microsoft to push proprietary OOXML formats. TDF says this traps users in Microsoft’s ecosystem, drawing parallels to the browser wars. It’s almost like some ‘open source’ companies have business models that involve, gasp, making money and being compatible with industry standards. <a href="https://app.daily.dev/feed-by-ids?id=840Dw8MXb&amp;id=OwmBaq9Nm" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
