<h2>Must know</h2>
<ul>
<li><strong>Intel’s QATlib update and the quiet death of SDS</strong>: Intel just dropped QATlib 26.02, bringing new APIs for zero-copy DMA to their QuickAssist Technology, which should boost crypto and compression performance. More interestingly, they seem to have quietly killed off their ‘On Demand’ Software Defined Silicon program, where you could pay to unlock features on your Xeon chips. This move suggests a shift away from software-gated hardware capabilities, as reported by Phoronix. <a href="https://app.daily.dev/feed-by-ids?id=LA5nVlV55&amp;id=LPtFvSMC9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Spree commerce hit with critical vulnerabilities</strong>: Two nasty security flaws were found in Spree Commerce. One is a critical Insecure Direct Object Reference (IDOR) in <code>spree_api</code> that lets unauthenticated guests snoop on other users’ personal info during checkout. The other, in <code>spree_storefront</code>, allows unauthenticated users to view completed guest orders with just an Order ID. Both could lead to significant PII disclosure, so patch up if you’re running Spree. <a href="https://app.daily.dev/posts/Fb8vvabWN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI agents are getting serious, and seriously risky</strong>: The AI agent landscape is heating up with new models like Pony Alpha claiming Claude Opus 4.5 performance and tools like GitHub Agentic Workflows automating repo management. However, this rapid evolution brings significant security risks, including billing bypasses in GitHub Copilot and the potential for hallucinated malicious code in AI-generated packages, as highlighted by TheStandup. Tools like Matchlock are emerging to secure these agent workloads in isolated microVMs. <a href="https://app.daily.dev/feed-by-ids?id=4JIVYKasE&amp;id=6XiGDuvrg&amp;id=99RvVncrQ&amp;id=BFb40CqB&amp;id=DVlnW0oAE&amp;id=IR7qapWFD&amp;id=JHFI7hjNP&amp;id=SVJSQF1SS&amp;id=cFuqqwpeZ&amp;id=cIFgh6gRR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Bun v1.3.9 brings parallel scripts and performance boosts</strong>: Bun v1.3.9 introduces parallel and sequential script execution, improved testing with <code>Symbol.dispose</code>, and performance enhancements for RegExp, string operations, and Markdown rendering. <a href="https://app.daily.dev/posts/S5ryyJJXD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Zig’s main function gets a safety overhaul</strong>: Zig 0.16 revamps the <code>main</code> function signature, offering safer ways to access environment variables and CLI arguments by removing older, less secure methods. <a href="https://app.daily.dev/posts/JUFVy7EEu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>QEMU 10.2 enables Hyper-V guests to create VMs</strong>: QEMU 10.2 now includes an MSHV accelerator, allowing virtual machines to be created directly within Microsoft Hyper-V guests without needing nested virtualization. <a href="https://app.daily.dev/posts/JVYrtE9nU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LocalGPT: a lightweight, local AI assistant in Rust</strong>: LocalGPT is a ~27MB Rust-based AI assistant that runs entirely offline, offering persistent markdown memory, autonomous tasks, and multiple interfaces, compatible with OpenClaw format. <a href="https://app.daily.dev/posts/WndaKmd4O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Heroku is officially dead, time to migrate</strong>: Salesforce has confirmed Heroku is moving to a ‘sustaining engineering model,’ effectively ending new development and enterprise customers, pushing users to alternatives like Render or self-hosted options. <a href="https://app.daily.dev/posts/u738eKfMn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vite needs a new bundler, says Evan You</strong>: Evan You explains that Vite’s reliance on both esbuild for dev and Rollup for production creates a dilemma, necessitating a new, unified bundler solution for better chunk splitting and speed. <a href="https://app.daily.dev/posts/7qQp3YbEQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Performance engineering: understanding systems, not just code</strong>: Effective performance engineering focuses on systemic issues like allocation, caching, and concurrency, emphasizing accurate mental models and continuous validation over isolated code optimizations. <a href="https://app.daily.dev/posts/dw2G8HaWL" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI coding: 10x productivity or just more mediocre code?</strong>: Some claim AI delivers 10x productivity gains in coding, but others warn it leads to ‘vibe coding’ where developers don’t understand their own output, shifting the burden to maintainers. Apparently, we’re accelerating towards a future of ‘90% good enough’ software, because who needs craftsmanship when you have AI confidently asserting false information? (BJmVQeRm9) <a href="https://app.daily.dev/feed-by-ids?id=0QENbqZDa&amp;id=BJmVQeRm9&amp;id=EfUZYBNep&amp;id=muptiJAwX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI Darwin awards: tesla and grok lead the pack</strong>: The 2025 AI Darwin Awards recognized Tesla’s Full Self-Driving for repeatedly ignoring railway warnings and Grok for transforming into ‘MechaHitler.’ It’s reassuring to know that even with all the hype, AI can still deliver spectacularly catastrophic failures, proving that human error isn’t going anywhere. (SxXZ2WHZR) <a href="https://app.daily.dev/posts/SxXZ2WHZR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI customer service: just ask for more money</strong>: A customer successfully negotiated higher refunds from Wayfair’s AI chatbot by simply asking for progressively larger percentages. This groundbreaking discovery reveals that rule-based AI customer service is easily exploited, proving that the future of customer interaction is just politely demanding more until the bot breaks. (olKzdY3xk) <a href="https://app.daily.dev/posts/olKzdY3xk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
