<h2>Must know</h2>
<ul>
<li><strong>Google shrinks quantum resistant HTTPS certificates by 97 percent</strong>: To prevent post-quantum cryptography from bloating TLS handshakes, Google and Cloudflare are implementing Merkle Tree Certificates. This approach replaces massive 2.5kB quantum-resistant chains with a compact 64-byte proof of inclusion, as reported by Ars Technica. The transition is already live in Chrome, ensuring browser performance doesn’t tank when RSA and ECC eventually become obsolete. <a href="https://app.daily.dev/posts/8DoiZIvLO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source repositories face a commercial sustainability crisis</strong>: Sonatype reports that 80% of Maven Central traffic now comes from just three hyperscalers, effectively using open-source registries as free CDNs. The OpenSSF is now advocating for mandatory contributions or tiered payment models for high-volume commercial users to fund critical security infrastructure. This move aims to combat the chronic underfunding that leaves major package ecosystems vulnerable to supply chain attacks. <a href="https://app.daily.dev/posts/ndB4t3RZj" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubetorch brings local development ergonomics to remote GPU clusters</strong>: A new PyTorch ecosystem project called Kubetorch allows developers to run ML code on Kubernetes using a simple remote execution API. It features sub-2-second hot reloading and programmatic fault tolerance for OOMs, significantly reducing the friction of scaling from a local workstation to a cluster. The tool integrates directly with existing VPCs via Helm and a Python client, targeting the ‘production gap’ in AI infrastructure. <a href="https://app.daily.dev/posts/3II62MbL8" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>PHP 9.0 moves toward BSD 3 Clause licensing</strong>: Zend has formally consented to the relicensing, with a final community vote scheduled for mid-March. <a href="https://app.daily.dev/posts/XIpmjFf08" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL index creation without deployment locks</strong>: A new ‘delayed migrations’ pattern for Rails apps allows creating indexes on large tables outside the main deployment transaction to avoid lock timeouts. <a href="https://app.daily.dev/posts/aYURhoY43" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Biopass brings Windows Hello style biometrics to Linux</strong>: This open-source suite uses local LibTorch inference for face and fingerprint auth with anti-spoofing capabilities. <a href="https://app.daily.dev/feed-by-ids?id=bhc2OnxfX&amp;id=pHqfM9sp0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Unsloth Dynamic 2.0 improves LLM quantization quality</strong>: The update uses KL divergence to reduce accuracy loss during dynamic quantization for models like Llama 4 Scout. <a href="https://app.daily.dev/posts/Pggi40VtT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 sets RVA23 as the RISC V baseline</strong>: Canonical is pushing for full product parity on RISC-V hardware, targeting commercial production readiness by 2026. <a href="https://app.daily.dev/posts/nADfDbiVo" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS Network Firewall adds EventBridge integration</strong>: Teams can now trigger automated security workflows based on real-time firewall state changes and rule matches. <a href="https://app.daily.dev/posts/4jQ8dTw98" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Systemd 260 drops legacy SysV init support</strong>: The latest release candidate marks a final break from the old init script system in favor of native service units. <a href="https://app.daily.dev/posts/iAIJ6C3cx" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The Elixir startup stack is apparently a magic wand</strong>: Recent hype claims Elixir teams are 3x more productive because AI writes ‘more correct’ code for the BEAM than for JS or Python. While the BEAM is great for concurrency, claiming it ‘eliminates the need for Redis and Kafka’ is the kind of architectural oversimplification that leads to rebuilding distributed systems poorly from scratch. It’s a classic case of survivorship bias from a few successful MVPs being marketed as a universal scaling law. <a href="https://app.daily.dev/posts/srbpx6CDV" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>India is the world’s AI accelerator for social good</strong>: A Linux Foundation report paints a rosy picture of AI solving 50-million-case judicial backlogs and tripling farmer incomes. While the tech is impressive, framing 76% startup reliance on open source as a purely altruistic ‘social good’ ignores the reality that it’s mostly a cost-saving necessity for companies with zero margin. It’s high-level PR that mistakes ‘using a free tool’ for a coordinated national strategy for equity. <a href="https://app.daily.dev/posts/7IGWrmi3b" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The AI model decision matrix for people who can’t choose</strong>: New ‘frameworks’ are popping up to help you decide if you should use ChatGPT, Claude, or Gemini based on ‘archetypes’ like The Oracle or The Diplomat. It’s a 30-second checklist for a problem that usually boils down to ‘which one isn’t hallucinating today?’ This is peak AI-consultant-speak, turning basic tool selection into a ‘Morpheus Workflow’ to justify the subscription costs. <a href="https://app.daily.dev/posts/H3kAhRD0e" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
