<h2>Must know</h2>
<ul>
<li><strong>Helm 4 adopts WebAssembly for sandboxed plugin security</strong>: The upcoming Helm 4 release integrates the Extism WebAssembly plugin to fix a long-standing security gap where plugins ran with full host access. This move creates an invisible sandbox that restricts unauthorized file and network access, significantly hardening the Kubernetes supply chain. According to reports on the integration, this architecture also introduces mandatory signing and verification for all plugins. <a href="https://app.daily.dev/posts/uqge8CcV2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>ESP32-P4 hardware revision breaks firmware compatibility</strong>: Espressif has released a silent hardware revision for the ESP32-P4 that changes a No Connect pin to a power rail, requiring new passive components on the PCB. Hackaday reports that both versions are being sold under the same SKU, forcing developers to compile separate firmware builds for identical-looking chips. This creates a significant supply chain headache for remote assembly and field updates where the specific silicon revision is unknown. <a href="https://app.daily.dev/posts/hkP5ndwj1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>H&amp;R Block software installs persistent TLS backdoor</strong>: The 2025 edition of H&amp;R Block Business software installs a root CA certificate and its private key into the Windows trusted store, effectively enabling man-in-the-middle attacks. Security researchers found the vulnerability persists even after the software is uninstalled, leaving a permanent security hole on user machines. While the company has acknowledged the issue, no official fix has been deployed to remediate the trusted root store. <a href="https://app.daily.dev/posts/mDaMSoKuM" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Linux 7.0 fixes five year old AMD GPU hang bug</strong>: A small patch adjusting shader clock speed rules for Hainan-based GPUs has finally been merged and back-ported to stable kernels. <a href="https://app.daily.dev/posts/B341Xkvse" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 adopts sudo-rs and enables password feedback</strong>: The next LTS release will show asterisks during sudo input by default, powered by the new Rust-based sudo implementation. <a href="https://app.daily.dev/posts/AvXNa15IP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Mamba-3 model focuses on inference efficiency over training speed</strong>: The new State Space Model architecture utilizes exponential-trapezoidal discretization to outperform Llama-3.2-1B in decode latency. <a href="https://app.daily.dev/posts/Of3MWahiL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl to drop RTMP support in April release</strong>: Citing zero test coverage and a stagnant upstream library, curl version 8.20.0 will remove all six RTMP-related URL schemes. <a href="https://app.daily.dev/posts/LYMsD08n0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Hibernate Search 8.3.0 aligns with Hibernate ORM 7.3</strong>: The final release includes dependency upgrades for Lucene 10.4, Elasticsearch 9.3, and OpenSearch 3.5. <a href="https://app.daily.dev/posts/rxXjGMJDI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Project N.O.M.A.D. launches as offline knowledge server</strong>: This Docker-based ‘survival computer’ bundles Ollama, Wikipedia, and offline maps for environments with zero internet dependency. <a href="https://app.daily.dev/posts/H7iMtIlvB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fortransky brings Bluesky to the terminal via Fortran and Rust</strong>: This experimental TUI client uses a Rust-native firehose decoder to handle binary CBOR WebSocket frames from the AT Protocol. <a href="https://app.daily.dev/posts/KLyAbQi7U" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia projects a 50 trillion dollar robotics market</strong>: Jensen Huang spent his GTC keynote throwing around numbers so large they’d make a central banker blush, including a combined $85 trillion for AI agents and robotics. Despite claiming Amazon is buying a million GPUs, investors were so unimpressed by the lack of clear enterprise ROI that the stock actually dropped during the speech. It’s a bold strategy to claim you’ll power the entire global economy while analysts are still wondering if anyone is actually making money on these chips. <a href="https://app.daily.dev/feed-by-ids?id=tHngHAYCv&amp;id=Cskx8eMnw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The self-healing infrastructure pipe dream</strong>: The latest ‘vision’ for QA involves AI ‘detectives’ that not only find bottlenecks like HikariPool saturation but also open PRs to fix them. It sounds great until you realize you’re trusting a stochastic parrot to tune your production database connection pools without human oversight. Moving from ‘test executor’ to ‘performance architect’ usually involves more than just watching an AI script hallucinate configuration values in your CI/CD pipeline. <a href="https://app.daily.dev/posts/4MHUbwPOb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>LibreOffice adds a giant donation banner to the UI</strong>: LibreOffice 26.8 is set to occupy the bottom third of your Start Center with a donation banner, because nothing says ‘productivity’ like losing 30% of your screen real estate to a digital tip jar. They’re currently ‘finalizing the wording,’ which is open-source speak for trying to make a billboard look like a feature. If you wanted a UI that begs for money, you could have just stayed on the Wikipedia homepage. <a href="https://app.daily.dev/posts/sSUprtMVy" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
