<h2>Must know</h2>
<ul>
<li><strong>Breaking hardware revision for ESP32-P4</strong>: Espressif released a silent hardware revision for the ESP32-P4 that changes a No Connect pin to a power rail, potentially shorting existing board designs. Hackaday reports that both versions are being sold under the same SKU, forcing developers to manually verify chips before assembly. Firmware must now be compiled separately for each revision, creating a significant headache for remote deployments and supply chain management. <a href="https://app.daily.dev/posts/hkP5ndwj1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Helm 4 adopts WebAssembly for plugin sandboxing</strong>: The upcoming Helm 4 release integrates the Extism WebAssembly (Wasm) plugin to fix long-standing security risks where plugins ran with full host access. This move creates an ‘invisible sandbox’ that restricts unauthorized file and network access, significantly hardening the Kubernetes deployment supply chain. The integration also introduces mandatory signing and verification for plugins to ensure clearer provenance. <a href="https://app.daily.dev/posts/uqge8CcV2" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go vulnerability and tool updates</strong>: A critical authorization bypass vulnerability in gRPC-Go has been patched in v1.79.3, and all users are urged to upgrade immediately. On the tooling side, Golang Weekly highlights a new guide for pprof profiling and the release of GoDoc Live for static API documentation. Additionally, the pq Postgres driver reached version 1.12, maintaining its status as a stable choice for backend infrastructure. <a href="https://app.daily.dev/posts/T0g6NctEb" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Mamba-3 focuses on inference efficiency</strong>: The new State Space Model architecture removes causal convolutions and uses exponential-trapezoidal discretization to outperform Llama-3.2-1B in decode latency. <a href="https://app.daily.dev/posts/Of3MWahiL" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 enables sudo password feedback</strong>: The upcoming LTS release will show asterisks during sudo input by default, a change driven by the new Rust-based sudo-rs utility. <a href="https://app.daily.dev/posts/AvXNa15IP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl to drop RTMP support in April</strong>: Citing zero test coverage and a stagnant upstream library, curl will remove all RTMP schemes in version 8.20.0. <a href="https://app.daily.dev/posts/LYMsD08n0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Project NOMAD for offline infrastructure</strong>: A new Docker-orchestrated ‘survival computer’ bundles Ollama, Wikipedia, and maps for zero-internet environments. <a href="https://app.daily.dev/posts/H7iMtIlvB" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kekkai detects PHP file tampering via Go</strong>: A new utility uses content-based hashing and S3-stored manifests to verify legacy PHP application integrity on AWS EC2. <a href="https://app.daily.dev/posts/iAqztGFpc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Capacitarr manages media server disk space</strong>: This Go-based Docker container uses intelligent scoring to automatically prune low-value media from Sonarr/Radarr setups when storage is low. <a href="https://app.daily.dev/posts/37KMYIvgJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.0 fixes ancient AMD GPU bug</strong>: A patch for ‘Hainan’ GPUs that caused hangs since kernel 5.4 has finally been merged and backported to stable versions. <a href="https://app.daily.dev/posts/B341Xkvse" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>Nvidia projects a 50 trillion dollar robotics market</strong>: Jensen Huang spent 2.5 hours at GTC 2026 pitching a future where Nvidia chips power every atom in the universe, yet the stock dropped anyway. Investors seem to be noticing the lack of actual enterprise ROI data behind the ‘AI agent’ hype. It turns out promising $35 trillion in value doesn’t mean much when your customers are still struggling to make a chatbot that doesn’t hallucinate. <a href="https://app.daily.dev/feed-by-ids?id=tHngHAYCv&amp;id=Cskx8eMnw" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno CEO goes missing after layoffs</strong>: After burning through $25M in VC funding and failing to make ‘Deno Deploy’ or ‘JSR’ happen, the company has reportedly hit the layoff button. Developers who bet on the ecosystem are now wondering if Ryan Dahl is planning an AI pivot or just waiting for an OpenAI acquisition. It’s a classic tale of a ‘Node killer’ that spent more time on marketing than on solving the package.json mess it claimed to fix. <a href="https://app.daily.dev/posts/ONnCa8fkU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>H&amp;R Block installs a permanent TLS backdoor</strong>: The 2025 tax software installs a root CA certificate and its private key into the Windows trusted store, effectively inviting man-in-the-middle attacks. Even after you uninstall the software, the backdoor stays behind like a digital herpes. H&amp;R Block acknowledged the issue but hasn’t bothered to fix it, proving once again that ‘security’ is just a suggestion for legacy software vendors. <a href="https://app.daily.dev/posts/1vUhuGLGk" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
