<h2>Must know</h2>
<ul>
<li><strong>Snap Store domain hijacking for malware distribution</strong>: Scammers are exploiting the Canonical Snap Store by registering expired domains previously used by legitimate publishers. This allows them to hijack publisher accounts and distribute malicious updates to trusted snap applications, specifically targeting cryptocurrency wallet users for recovery phrase theft. This tactic undermines trust in Snap’s publisher reputation signals and highlights significant security risks, as reported by cybersecurity news. <a href="https://app.daily.dev/posts/8RJLmL5a0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Iran disrupts Starlink internet with military-grade GPS jamming</strong>: Iran successfully used military-grade GPS jammers to disrupt Starlink satellite internet, cutting performance by up to 80% during a nationwide internet shutdown. This technique targeted GPS signals essential for Starlink terminals, proving more effective than similar Russian attempts. The incident raises serious concerns about Starlink’s reliability in conflict zones and its perceived resistance to censorship, as highlighted in the report. <a href="https://app.daily.dev/posts/VVK9EFJ8w" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>China files for a massive 193,428-satellite constellation</strong>: China has filed requests with the ITU for two satellite constellations, CTC-1 and CTC-2, totaling an astounding 193,428 satellites—four times larger than SpaceX’s Starlink plans. The filings, made by a newly established entity, suggest potential defense applications and are viewed by the US FCC as a national security issue. While China’s current deployment is limited, this move signals a significant escalation in the space race, according to the report. <a href="https://app.daily.dev/posts/9Dqo8zul1" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>PostgreSQL incident reveals critical security misconfiguration</strong>: A PostgreSQL database at Nixopus repeatedly crashed due to ‘trust’ authentication being exposed to the internet, allowing unauthorized connections to exhaust max_connections, masquerading as a stability bug for months until the security flaw was identified and fixed. <a href="https://app.daily.dev/feed-by-ids?id=m4he1CZCb&amp;id=J8z1YJf46" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Rust’s culture of semantic precision</strong>: Rust’s ecosystem fosters precise API design with strong semantic guarantees, leading to more robust software, as exemplified by challenges in integrating Rust into the Linux kernel and ongoing discussions around traits like Copy/Clone. <a href="https://app.daily.dev/posts/xl3PLfHis" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl drops OpenSSL-QUIC backend due to performance issues</strong>: The curl project is removing support for the OpenSSL-QUIC backend in version 8.19.0 due to its inadequate API, extremely poor performance (3x slower), and excessive memory usage (20x more) compared to alternatives like nghttp2+nghttp3 and quiche. <a href="https://app.daily.dev/posts/As2f3e0AW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source models: cathedral, megachurch, and bazaar</strong>: Open source projects are categorized into three models: exclusive ‘cathedrals,’ large ‘megachurches’ like the Linux Foundation, and the majority ‘bazaar’ projects, which are often single-maintainer but critical to infrastructure and face significant funding challenges. <a href="https://app.daily.dev/posts/rr8Vo8FaG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>CLI tool for AI and developer integration with Figma</strong>: dannote/figma-use is a new command-line tool offering full read/write access to Figma, optimized for AI agents and developers, supporting over 100 commands and JSX syntax for programmatic design creation and modification. <a href="https://app.daily.dev/posts/DfAoRLrdU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Engineering fundamentals are critical for team success</strong>: Great engineering teams prioritize unglamorous fundamentals like availability, security, and performance through clear definitions, consistent objective thresholds, and predictable review cadences to ensure stability and enable faster innovation. <a href="https://app.daily.dev/posts/dLmkPcsX0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deep understanding of tech is crucial for developers</strong>: Top-tier developers gain deep understanding of technology internals by exploring source code and tracing API behavior, which helps in debugging, avoiding drawbacks, and excelling in interviews, rather than relying solely on surface-level knowledge or AI for error messages. <a href="https://app.daily.dev/posts/37U9AVczH" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>GPT-5.2 Pro solves an Erdos problem, because of course it did</strong>: Apparently, GPT-5.2 Pro has ‘unambiguously’ solved Erdos problem #281, a feat previously beyond human mathematicians. Terence Tao, a credible mathematician, is quoted, so it must be true. No details on how, just that it happened. Another day, another AI ‘milestone’ that conveniently lacks any technical specifics for us mere mortals to verify. <a href="https://app.daily.dev/posts/pRkd3CPEF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Physical AI and AV industry shifts at CES 2026: more hype than substance?</strong>: CES 2026 was apparently all about ‘Physical AI’ and autonomous vehicles, with Chinese companies making a big splash while US automakers were conspicuously absent. TechCrunch, ever the realist, calls it a ‘hype machine’ for demonstrations, not actual product launches. So, lots of talk, shiny new toys, but still no self-driving cars that actually work reliably outside of a controlled demo track. Shocking. <a href="https://app.daily.dev/posts/MtQzzuuIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-driven incident response: because humans are just too slow for the inevitable AI-induced chaos</strong>: InfoQ is touting multi-agent AI systems for SRE incident response, claiming they automate ‘tedious investigation tasks’ while keeping humans ‘in control.’ They admit production readiness is a ‘challenge’ and AI still ‘falls short of human-guided analysis.’ So, we’re building complex AI systems to fix problems, but they’re not quite ready, and we still need humans to clean up the mess. Sounds like a perfect recipe for more complexity, not less. <a href="https://app.daily.dev/posts/T6l4Ggvwh" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
