<h2>Must know</h2>
<ul>
<li><strong>Phishing attack on X account highlights security flaws</strong>: A developer shared a personal account of falling for a sophisticated phishing attack on their X account, detailing five critical mistakes: acting in a rush, not scrutinizing the email, failing to check sender/URL, ignoring missing autofill, and not using an authenticator app. This serves as a stark reminder for account security best practices, emphasizing verification and multi-factor authentication, as reported by Christian Heilmann. <a href="https://app.daily.dev/posts/cFsXn3pdx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gemini 3.1 Pro high benchmarks, low usability</strong>: Google’s Gemini 3.1 Pro, despite boasting top benchmark scores, is reportedly underperforming Claude Opus 4.6 in real-world coding and UI generation tasks. Issues include tool-calling failures, incomplete features, and poor environment detection, suggesting Google might be “benchmaxing” at the expense of practical usability. This contrasts sharply with Anthropic’s focus on consistent, reliable tool use. <a href="https://app.daily.dev/feed-by-ids?id=bIAFUawfa&amp;id=mGa3eARS3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents creating security debt crisis</strong>: AI coding agents are prioritizing speed over security, creating a “security debt crisis” by optimizing for execution rather than secure practices, leading to issues like hardcoded API keys. Mitigations include spec-driven prompting with OWASP Top 10 and thorough code reviews. This trend, highlighted by Columbia University research, underscores the need for defense-in-depth architectures for AI agents. <a href="https://app.daily.dev/feed-by-ids?id=DD6LZnw0Q&amp;id=Et2d8uHu3&amp;id=LUO8dPKde&amp;id=RH1TYGIET&amp;id=UGo4Ea1t8&amp;id=bDJrJKMJX&amp;id=em7afQ5sm&amp;id=l0KLAjYGc&amp;id=ohhVPexbM&amp;id=vXBWwcwBk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong><a href="http://Lobste.rs" target="_blank" rel="noopener nofollow">Lobste.rs</a> migration to SQLite fails</strong>: <a href="http://lobste.rs" target="_blank" rel="noopener nofollow">lobste.rs</a> attempted a live migration from MariaDB to SQLite but quickly reverted due to severe performance degradation, indicating challenges in scaling SQLite for high-traffic applications. <a href="https://app.daily.dev/posts/RLQeRSeS0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NTransformer runs Llama 3.1 70B on single GPU</strong>: NTransformer, an open-source C++/CUDA LLM inference engine, claims to run Llama 3.1 70B on a single RTX 3090 using adaptive caching and layer streaming, achieving significant speedups. <a href="https://app.daily.dev/feed-by-ids?id=Ahx4zgQks&amp;id=WoJMuyqAQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elixir language server Expert releases RC1</strong>: Expert, the new official Elixir language server merging Lexical and Next LS, has released its first release candidate, focusing on stability and feature parity with existing tools. <a href="https://app.daily.dev/posts/ItEtgwo7d" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go FFI now faster than GDScript and Rust</strong>: Go’s FFI performance for Godot bindings now surpasses GDScript and even ‘safe’ Rust, primarily due to call batching and Go 1.26’s cgo overhead reduction. <a href="https://app.daily.dev/posts/j8AoMYJTv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Gawk 5.4 features new regex engine</strong>: GNU Gawk 5.4 has been released with the new MinRX regular expression engine as default, offering full POSIX compliance and roughly 9% faster reading of large files. <a href="https://app.daily.dev/posts/jrqTuNtKB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fileless lateral movement in hybrid active directory</strong>: A detailed red team case study shows how a low-privileged domain user can escalate to Domain Admin and Azure AD Global Admin without malware, exploiting SQL impersonation and other misconfigurations. <a href="https://app.daily.dev/posts/u1TVqzV8C" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java code snippets show modern replacements</strong>: Modern Java code snippets demonstrate how concise Java record declarations replace verbose POJO classes, showcasing performance improvements and cleaner code principles. <a href="https://app.daily.dev/posts/gKyCrIG2K" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic and Figma launch code-to-design workflow</strong>: Anthropic and Figma have teamed up to let Claude Code convert production code into editable Figma designs, with the promise of round-tripping updates back to code. Because what developers really need is another layer of abstraction between their code and the actual design, especially one that relies on an AI to interpret visual changes. What could possibly go wrong with an AI trying to update your codebase based on a Figma file? <a href="https://app.daily.dev/posts/aCaE5xJ9z" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google embedding model deprecation causes vendor lock-in</strong>: The deprecation of Google’s <code>text-embedding-004</code> model rendered thousands of stored vectors unusable for a production RAG-based movie recommender due to incompatible vector spaces. This highlights the hidden vendor lock-in of persisted embeddings. Apparently, treating an embedding model as infrastructure and designing for change is a novel concept for some, leading to predictable re-embedding headaches. <a href="https://app.daily.dev/feed-by-ids?id=LY7p8IODB&amp;id=ZmcjIu8ai&amp;id=frjHTf2Ap&amp;id=xhDI1zj4i" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Old tech making a comeback</strong>: A podcast discusses the trend of ‘old tech’ making a comeback, including dedicated MP3 players and dumb phones, attributing it to distraction fatigue and planned obsolescence. Because, clearly, the solution to modern tech woes is to revert to devices that were obsolete for a reason. It’s not a genuine cultural shift; it’s just people rediscovering that sometimes simpler is better, before they inevitably get bored and want their smartphones back. <a href="https://app.daily.dev/posts/u9gGdIsNO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
