<h2>Must know</h2>
<ul>
<li><strong>French police raid X Paris office, summon Musk and Yaccarino</strong>: French authorities have expanded their criminal investigation into X (formerly Twitter), now including allegations of child sexual abuse material distribution, privacy violations, and Holocaust denial. Elon Musk and former CEO Linda Yaccarino have been summoned for questioning in April 2026. This escalation follows criticism of X’s Grok AI for generating non-consensual and child abuse imagery, with advocacy groups reporting millions of sexualized deepfakes. The UK’s ICO and the EU have also launched formal investigations, as reported by multiple sources. <a href="https://app.daily.dev/posts/i3FTaaYRg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks sponsorship as funding dries up</strong>: The sole maintainer of <code>sudo</code> for over 30 years, Todd C. Miller, is seeking sponsorship after Quest Software ended its support in February 2024. This highlights the precarious funding situation for critical open-source infrastructure. Meanwhile, <code>sudo-rs</code>, a memory-safe Rust reimplementation, is gaining traction, with Ubuntu 25.10 set to adopt it as default in October 2025. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical react native metro dev server bug under attack</strong>: A critical vulnerability (CVE-2025-11953) in React Native’s Metro development server is being actively exploited to deliver malware to Windows and Linux systems. The flaw allows unauthenticated attackers to execute arbitrary commands via OS command injection. Despite proof-of-concept exploits and active exploitation since December, the issue has received minimal public attention, posing a significant risk given the npm package’s nearly 2.5 million weekly downloads. <a href="https://app.daily.dev/posts/Fovx3I1YS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>GitHub tackles low-quality AI-generated pull requests</strong>: GitHub is exploring solutions to combat low-quality AI-generated pull requests overwhelming open-source maintainers, including disabling PRs, restricting access, and implementing AI disclosure mechanisms. <a href="https://app.daily.dev/feed-by-ids?id=2rB0oFTYm&amp;id=jwftmMKjS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno deploy hits GA, introduces sandbox for untrusted code</strong>: Deno Deploy has reached General Availability, offering zero-config deployment for JavaScript/TypeScript apps, integrated serverless PostgreSQL, and OpenTelemetry observability, alongside a new Deno Sandbox for running untrusted code in secure microVMs. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Databricks lakebase now generally available on AWS</strong>: Databricks Lakebase is now generally available on AWS, offering a new operational database architecture that separates compute from storage, providing a serverless Postgres service directly on data lakes for unified workloads. <a href="https://app.daily.dev/posts/qtDOznoeU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM identity center launches multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users, with centralized configuration in a primary Region. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft PowerToys proposes command palette dock</strong>: Microsoft PowerToys is proposing a Command Palette Dock, an optional, persistent interface element providing one-click access to pinned extensions, customizable and positionable on any screen edge. <a href="https://app.daily.dev/posts/oLV0MsDPD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pigsty v4.0 released with postgresql 18 and AI coding features</strong>: Pigsty v4.0, a PostgreSQL distribution, was released with support for PostgreSQL 18, 444 extensions, a switch to Apache 2.0 license, and a new VIBE module for AI coding environments with Claude Code integration. <a href="https://app.daily.dev/posts/mUujkXZJa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Bunny database launches as sqlite-compatible edge db</strong>: Bunny Database, a new SQLite-compatible managed database service, offers global deployment across 41 regions with automatic scaling, pay-as-you-go pricing, and low-latency reads through multi-region replication. <a href="https://app.daily.dev/posts/bbnTGzjvp" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Moltbook AI social network collapses in 72 hours</strong>: Moltbook, an AI-only social network, collapsed within 72 hours of launch due to catastrophic security failures, including completely open database access. Apparently, building a platform entirely with AI-generated code and zero security review is a recipe for disaster. Who knew that letting AI agents run wild without authentication might not be the best idea? <a href="https://app.daily.dev/feed-by-ids?id=8XBbHzIL3&amp;id=yCqSQa4jM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI companions: your new best friend or just monetized intimacy?</strong>: AI companions are evolving into sophisticated emotional support systems, but critics like Lianne Potter warn of ethical concerns such as reinforcing biases, a lack of reciprocity, and monetizing intimacy. So, while your AI ‘friend’ might listen to all your problems, remember it’s just mirroring your desires and collecting your data. Real human connection is apparently too much to ask for these days. <a href="https://app.daily.dev/posts/yECr3lze5" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GDPR enforcement is fundamentally broken, says one guy</strong>: The EU’s GDPR enforcement is “fundamentally broken,” according to one individual’s “first-hand experience” with 20 data deletion requests, where 12 companies simply ignored them. It seems a legal loophole allows companies to claim spam filters ate the requests. So much for data privacy; apparently, your data is safe until a company decides it’s too much effort to delete it. <a href="https://app.daily.dev/posts/DfyJ94Kiz" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
