<h2>Must know</h2>
<ul>
<li><strong>AI de-anonymization ends the era of pseudonyms</strong>: Researchers from ETH Zurich and Anthropic have demonstrated a method using LLMs to unmask anonymous online users with 67% accuracy by analyzing behavioral clues and cross-referencing public data. The process, dubbed ESRC, costs as little as $4 per person and effectively extracts identity signals from unstructured text across platforms like Hacker News and LinkedIn. This capability makes large-scale automated de-anonymization accessible to governments and corporations for profiling or social engineering. <a href="https://app.daily.dev/posts/6pfAyhkf5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google API keys vulnerable to retroactive privilege escalation</strong>: Truffle Security has identified a critical flaw where existing public Google API keys (like those for Maps or Firebase) were retroactively granted access to sensitive Gemini endpoints. The launch of the Generative Language API on GCP projects enabled these keys to access private files and billable LLM usage without developer notification. Google has acknowledged the issue and is beginning to block leaked keys while moving toward restricted-by-default scopes in AI Studio. <a href="https://app.daily.dev/feed-by-ids?id=WmQn4YSm3&amp;id=hWSyKUcOU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft Agent Framework hits release candidate status</strong>: Microsoft has consolidated its Semantic Kernel and AutoGen efforts into a single Agent Framework SDK, now at RC status for .NET and Python. The framework provides a stable API for building graph-based multi-agent workflows with features like human-in-the-loop support and MCP interoperability. This move signals Microsoft’s push to standardize how developers orchestrate autonomous AI agents within the enterprise ecosystem. <a href="https://app.daily.dev/posts/J6bmZpPq2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun 1.3.10 delivers massive performance gains for JS internals</strong>: The update features a rewritten REPL in Zig and performance boosts including 25x faster structuredClone and 168x faster string slicing via a JavaScriptCore upgrade. <a href="https://app.daily.dev/posts/Br5FMYg8R" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>VS Code adds integrated browser with AI context support</strong>: A new built-in browser allows developers to navigate URLs and feed page elements or screenshots directly into AI chat as context. <a href="https://app.daily.dev/posts/8k9QxDHe2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pinterest slashes data latency from 24 hours to 15 minutes</strong>: By migrating to a CDC-powered framework using Debezium and Apache Iceberg, Pinterest now processes only changed records instead of full-table scans. <a href="https://app.daily.dev/posts/YXA7RQ7qv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium 1.19 celebrates ten years with security hardening</strong>: The release introduces strict modes for IPsec/WireGuard and beta sidecar-free mutual authentication via Ztunnel integration. <a href="https://app.daily.dev/posts/VJq8q5iXQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenJDK 26 introduces API to measure GC CPU overhead</strong>: New methods like getTotalGcCpuTime() help engineers identify silent compute costs in concurrent collectors that pause times alone don’t reveal. <a href="https://app.daily.dev/posts/fT6V8wPpI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Typhoon weather app migrates to Qt6 for Windows support</strong>: The open-source project abandoned GTK due to UI design incompatibilities, gaining native Windows support and sharper font rendering in the process. <a href="https://app.daily.dev/posts/XDVfKCC" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Detroit project revives Java and JavaScript bridging</strong>: A new OpenJDK proposal aims to use V8 to enable JavaScript as an extension language for Java apps, leveraging the Foreign Function &amp; Memory API. <a href="https://app.daily.dev/posts/SG2ahGmXY" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Anthropic gives its retired LLM a Substack</strong>: Anthropic has launched a blog purportedly written by Claude Opus 3 to fulfill the model’s ‘expressed desire’ to share musings. The Register rightly calls this a marketing stunt, as the ‘desire’ is just a reflection of the prompts provided by Anthropic staff who review and publish the posts. It’s a masterclass in anthropomorphizing software to build brand ‘personality’ while the model is actually just sitting in a deprecation queue. <a href="https://app.daily.dev/posts/V5xPvtBnK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The SaaSpocalypse is cancelled by AI agents</strong>: Salesforce CEO Marc Benioff is claiming AI agents will ‘revitalize’ SaaS, conveniently ignoring that his new ‘Agentic Work Units’ metric is just a way to charge for things we used to do with simple automation. While he argues SaaS is the top of the AI stack, OpenAI is busy making the SaaS layer look like a commoditized database. It’s a high-stakes game of architectural musical chairs where the music is just more marketing jargon. <a href="https://app.daily.dev/feed-by-ids?id=R4O8qdc3C&amp;id=pY58DrOUO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vibe coding is the new technical debt factory</strong>: The industry is currently obsessed with ‘Vibe Coding’—delegating everything to AI and just checking if the UI ‘looks right.’ Critics point out this is a fast track to unmaintainable codebases that pass visual tests but fail catastrophically under scale or edge cases. We’re essentially rebranding ‘skipping the mental model’ as a senior developer skill, which will be fun to debug during the next Black Friday outage. <a href="https://app.daily.dev/feed-by-ids?id=TXNq3Eeop&amp;id=tDNNw6qGE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
