<h2>Must know</h2>
<ul>
<li><strong>AI coding tools are everywhere, but still need human brains</strong>: AI coding assistants like Cursor are seeing massive adoption, with Salesforce deploying it to 20,000 engineers and reporting double-digit improvements in cycle time and code quality. However, a hands-on review of OpenCode, a local LLM code generation tool, found it struggles with greenfield projects and produces verbose, generic code, requiring expert oversight. This highlights that while AI can boost productivity for repetitive tasks, human judgment and expertise remain critical for complex development and quality control, as noted by The Replay and Salesforce’s internal reports. <a href="https://app.daily.dev/feed-by-ids?id=Bph7neqjl&amp;id=EHuoSn58k&amp;id=7KqSlBkW9&amp;id=XkFn8TQqF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New security threats from AI and third-party apps</strong>: The cURL project is shutting down its bug bounty program due to an overwhelming flood of low-quality, AI-generated vulnerability reports, making it unsustainable. Meanwhile, research indicates that 64% of third-party apps on websites access sensitive data without justification, a 25% year-over-year increase, with government and education sites seeing significant jumps in malicious activity. This suggests AI is creating new vectors for noise and attack, while traditional third-party integrations continue to be a major blind spot, according to cURL maintainer Daniel Stenberg and various security researchers. <a href="https://app.daily.dev/feed-by-ids?id=zNsgAYHqy&amp;id=FxqZcf7z0&amp;id=ssDvZHbZq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux desktop evolves with COSMIC and better hardware support</strong>: System76 has launched COSMIC, a new modular desktop environment built from scratch for Pop!_OS 24.04 LTS, focusing on customization and accessibility. This move signals a shift towards greater independence from GNOME. Concurrently, a Linux kernel patch is set to significantly reduce CPU wakeup latency on Intel Xeon Sapphire Rapids servers, improving performance without sacrificing power efficiency, and AMD continues to show strong compatibility with Linux, particularly for graphics drivers. <a href="https://app.daily.dev/feed-by-ids?id=yYeANJtWp&amp;id=B7bbeX2o8&amp;id=ETf9xy9sf&amp;id=NWx6tDyeo" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>React state sync library nuqs gains traction</strong>: nuqs, a 6kB open-source library, is gaining significant developer interest with over 9.6k GitHub stars for its ability to synchronize React application state with URL query parameters, supporting Next.js, Remix, and React Router. <a href="https://app.daily.dev/posts/ZeIjZxaxs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Firefox adds key web standards support</strong>: Firefox 147 now supports CSS Module Scripts for importing CSS directly into JavaScript, and has completed support for the View Transition API, CSS anchor positioning, and the Navigation API, bringing these features to all major browsers. <a href="https://app.daily.dev/feed-by-ids?id=7EvuIZfDg&amp;id=Cp1cdd7od&amp;id=zjqLhhiKK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Node.js tightens vulnerability reporting</strong>: Node.js now requires HackerOne vulnerability reporters to have a Signal score of 1.0 or higher due to an overwhelming number of low-quality submissions, aiming to reduce triage time for its security team. <a href="https://app.daily.dev/posts/MwudU18Zl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open-source AI security toolkit BlackIce released</strong>: BlackIce is a new open-source, containerized toolkit bundling 14 AI security tools into a Docker image, designed for red teaming and penetration testing of AI systems, with integration for Databricks Container Services. <a href="https://app.daily.dev/posts/PSfiaCphA" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel Agent streamlines AI code suggestions</strong>: Vercel Agent is now integrated into the Vercel Dashboard, offering AI-generated code suggestions during pull request reviews that developers can apply directly from the dashboard, including multi-file changes and automatic resolution of review threads. <a href="https://app.daily.dev/posts/93nUmFPYd" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AdGuard open-sources TrustTunnel VPN protocol</strong>: AdGuard has open-sourced its proprietary VPN protocol, now called TrustTunnel, designed to evade detection and blocking by mimicking regular HTTPS traffic, optimized for mobile devices and unreliable networks. <a href="https://app.daily.dev/posts/66HApAE7f" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PyTorch 2.10 brings performance and debugging upgrades</strong>: PyTorch 2.10 introduces performance improvements through combo-kernels, a new varlen_attn() operation for ragged sequences, enhanced eigenvalue decomposition support, and a deterministic mode for torch.compile, while officially deprecating TorchScript. <a href="https://app.daily.dev/posts/Cpo6kjsla" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>AI-powered shopping bots: eBay says ‘not on my watch’</strong>: eBay has updated its user agreement to explicitly ban AI-powered shopping bots and agents that place orders without human oversight. Apparently, these bots are a threat to eBay’s revenue because they might drive down auction prices and reduce user engagement. It’s almost like they’re worried about efficiency when it doesn’t line their pockets. Google, on the other hand, is all in, claiming retailers love their agentic shopping tools. Pick a lane, tech bros. <a href="https://app.daily.dev/posts/pVV05ys2O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI will solve all our problems, just not the ones it creates</strong>: Palantir CEO Alex Karp, speaking at Davos, declared AI will eliminate the need for large-scale immigration and cut white-collar jobs by 80%. Meanwhile, Deutsche Bank and Gartner are saying the AI ‘honeymoon is over’ and most CEOs aren’t seeing returns. So, AI is simultaneously going to revolutionize everything and do nothing, depending on who’s trying to sell you something. Classic tech hype cycle, where the ‘solutions’ often create more problems than they solve. <a href="https://app.daily.dev/feed-by-ids?id=3s1vrBGbY&amp;id=FLsBFoZv3&amp;id=FWpexauJL&amp;id=KOoayUI82" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI’s Stargate: a half-trillion-dollar datacenter, 100 jobs</strong>: OpenAI is planning a $500 billion ‘Stargate’ datacenter project, promising to fund its own energy infrastructure and create workforce development programs. The catch? Each facility will employ a whopping 100 full-time workers. So, half a trillion dollars for a handful of jobs and a lot of local opposition over electricity and water. Sounds like a fantastic return on investment for the community, doesn’t it? Just don’t ask about the environmental impact. <a href="https://app.daily.dev/posts/O0VoWxWDb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
