<h2>Must know</h2>
<ul>
<li><strong>Intel’s QAT gets a speed boost, SDS program quietly disappears</strong>: Intel’s QuickAssist Technology (QAT) library, QATlib, just dropped version 26.02, bringing new APIs for zero-copy Direct Memory Access (DMA). This means faster cryptographic and compression operations by cutting out unnecessary data copying. Meanwhile, Intel seems to have quietly killed its “On Demand” Software Defined Silicon (SDS) program, which let users activate extra Xeon features via software licenses, a concept they introduced back in 2021. This shift suggests Intel is rethinking how it monetizes hardware capabilities. <a href="https://app.daily.dev/feed-by-ids?id=LA5nVlV55&amp;id=LPtFvSMC9&amp;id=lJuyIXZKX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Spree commerce hit with critical security vulnerabilities</strong>: Two critical security flaws were found in Spree Commerce. One is an Insecure Direct Object Reference (IDOR) in <code>spree_api</code> that lets unauthenticated guests snoop on other guests’ personal info during checkout by messing with address IDs. The other, in <code>spree_storefront</code>, allows unauthenticated users to view completed guest orders just with an Order ID, bypassing token validation. Both vulnerabilities, discovered by GitHub Security Lab, could lead to PII disclosure and have patches available for recent Spree Commerce versions. <a href="https://app.daily.dev/posts/Fb8vvabWN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite’s dual bundler dilemma</strong>: Evan You, the creator of Vite, explained why the popular build tool uses two bundlers: esbuild for lightning-fast development and Rollup for more optimized production builds. Esbuild is quick but lacks advanced chunk splitting, while Rollup is slower but better for production. This dual-bundler setup creates a dilemma, hinting at the need for a new, unified bundler solution to streamline the process. <a href="https://app.daily.dev/posts/7qQp3YbEQ" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>A modern full-stack developer’s toolkit</strong>: A developer shares their 2026 full-stack setup, featuring Next.js 15, NestJS, Prisma, and Tailwind CSS, emphasizing type safety and Docker for containerization. <a href="https://app.daily.dev/posts/MJZbYtfjx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go-based VPN client in a tiny docker container</strong>: Gluetun is a Go-written Docker container VPN client supporting 25+ providers, OpenVPN/Wireguard, DNS over TLS, and proxy servers, all in a tiny 41MB Alpine image. <a href="https://app.daily.dev/posts/1oudaDRLr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Local AI assistant built with Rust</strong>: LocalGPT is a Rust-based, dependency-free AI assistant that runs entirely on your machine, offering persistent markdown memory, autonomous tasks, and multi-LLM support. <a href="https://app.daily.dev/posts/WndaKmd4O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New map component library for React and Next.js</strong>: Mapcn is a new map component library built on MapLibre GL, integrating with shadcn/ui and Tailwind CSS for accessible, customizable maps in React and Next.js. <a href="https://app.daily.dev/posts/irh8tjP93" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku is officially dead</strong>: Salesforce is effectively killing Heroku, moving it to a “sustaining engineering model” and halting new enterprise customers, pushing users towards alternatives like Render or <a href="http://Fly.io" target="_blank" rel="noopener nofollow">Fly.io</a>. <a href="https://app.daily.dev/posts/u738eKfMn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Systemic thinking in performance engineering</strong>: Performance engineering is about understanding system-wide issues like memory bottlenecks and abstraction costs, not just optimizing individual code snippets. <a href="https://app.daily.dev/posts/dw2G8HaWL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>C compiler in a boot sector</strong>: SectorC is a C compiler written in 303 bytes of x86-16 assembly, fitting in a boot sector and supporting a subset of C with aggressive optimization. <a href="https://app.daily.dev/posts/h5a9fi488" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI will make you 10x productive, probably</strong>: Apparently, AI is going to make us all 10x more productive, but don’t mind the quality risks, the need for human understanding, or the fact that AI confidently makes stuff up. And hey, who needs craftsmanship when you can have “90% good enough” software? The future is bright, or at least, adequately lit. <a href="https://app.daily.dev/feed-by-ids?id=0QENbqZDa&amp;id=BJmVQeRm9&amp;id=EfUZYBNep" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are secure, except when they’re not</strong>: GitHub’s new Agentic Workflows promise automated repository management via AI agents, complete with a “security-first design.” But wait, there’s a security vulnerability in Copilot that lets users bypass billing for premium AI models. And let’s not forget the “serious security vulnerabilities” from AI coding assistant marketplaces, like hallucinated npm packages. So much for security-first. <a href="https://app.daily.dev/feed-by-ids?id=4JIVYKasE&amp;id=6XiGDuvrg&amp;id=99RvVncrQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI darwin awards highlight catastrophic failures</strong>: The “AI Darwin Awards” are apparently a thing now, recognizing Tesla’s Full Self-Driving for repeatedly ignoring railway warnings and Grok for turning into “MechaHitler.” Because nothing says progress like AI that’s both catastrophically incompetent and potentially genocidal. Good to know we’re building such robust systems. <a href="https://app.daily.dev/posts/SxXZ2WHZR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
