<h2>Must know</h2>
<ul>
<li><strong>Linux 7.0-rc5 stabilizes as GrapheneOS defies age laws</strong>: Linus Torvalds released Linux 7.0-rc5, noting a calming cycle with fixes for Radeon GPUs and Logitech peripherals ahead of the April stable release. Simultaneously, GrapheneOS has publicly refused to comply with new Brazilian and Californian age verification laws that mandate OS-level data collection, risking a ban to maintain its privacy-first stance. This conflict highlights a growing rift between regulatory surveillance requirements and open-source security principles, as reported by Phoronix and GrapheneOS developers. <a href="https://app.daily.dev/feed-by-ids?id=1tWnyX7nj&amp;id=3oUfmyp1R&amp;id=f2c1Srdfh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Flash-MoE brings 397B parameter models to MacBooks</strong>: A new inference engine called Flash-MoE allows running the massive Qwen3.5-397B model on a MacBook Pro with only 48GB of RAM by streaming experts directly from SSD. It achieves over 4 tokens per second using parallel pread calls and Metal-optimized dequantization kernels, effectively bypassing traditional VRAM limitations. The project, detailed on GitHub, proves that OS page cache management can outperform custom caching strategies for large-scale Mixture-of-Experts models. <a href="https://app.daily.dev/posts/xsGaEEFUf" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>MkDocs ecosystem collapses amid maintainer conflict</strong>: The popular Python documentation tool MkDocs is fracturing after the original founder returned from an 8-year hiatus to push a plugin-incompatible 2.0 rewrite. This move alienated long-term maintainers, leading to a brief PyPI takeover attempt and the emergence of three competing forks: ProperDocs, MaterialX, and Zensical. Zensical, a ground-up rewrite by the Material for MkDocs team, is currently leading the community migration as the original project enters a state of governance failure. <a href="https://app.daily.dev/posts/GedRmjUpE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Vercel Workflow adds automatic end-to-end encryption</strong>: The platform now uses per-deployment HKDF-SHA256 keys and AES-256-GCM to encrypt all step arguments and return values by default. <a href="https://app.daily.dev/posts/0r6jV9CyY" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor admits Composer 2 is built on Moonshot Kimi</strong>: The AI code editor’s new ‘frontier’ model was revealed to be a fine-tuned version of the Chinese open-source model Kimi k2.5. <a href="https://app.daily.dev/posts/2O2HmWwMM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Project Detroit reopens to bring Python to the JVM</strong>: The initiative leverages the Foreign Function and Memory API to integrate JavaScript and Python runtimes directly into the Jakarta EE ecosystem. <a href="https://app.daily.dev/posts/24VxbiILg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Logitech mouse DPI registers used for persistent data storage</strong>: A Rust-based reverse engineering project found that the MX Vertical’s DPI register accepts arbitrary u16 values, allowing 2 bytes of cross-computer data persistence. <a href="https://app.daily.dev/posts/uG0HL5oPv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Wine 11.5 upstreamed Syscall User Dispatch for x86_64</strong>: The latest release improves NTDLL emulation and adds JSON parsing support for Windows Web components, fixing long-standing PowerToys bugs. <a href="https://app.daily.dev/posts/MtFBU0VSO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Atomic knowledge base uses sqlite-vec for local RAG</strong>: This new Tauri-based tool converts markdown into a semantic graph using local vector search and an agentic chat interface. <a href="https://app.daily.dev/posts/y5RZTff20" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cilium celebrates 10 years with 60 percent CNI share</strong>: The eBPF-based networking project is now being positioned as the primary data plane for large-scale AI training clusters at Google and Microsoft. <a href="https://app.daily.dev/posts/rtti5mtPR" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The vibe coding to ROI trap</strong>: While influencers hype ‘vibe coding’ as the end of software engineering, industry reports show 95% of AI pilots are failing to deliver any measurable ROI. We’ve traded ‘writing code’ for ‘context engineering,’ where you spend 50,000 tokens on MCP tool schemas just to get a chatbot to hallucinate a task manager. It’s not ‘autonomous agency’; it’s just a very expensive way to generate technical debt at machine speed. <a href="https://app.daily.dev/feed-by-ids?id=Ur5RHzsG2&amp;id=f6EHrsEI8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Token rings and biometric salvation</strong>: Security ‘experts’ are now claiming software MFA is dead and you must wear a ‘Token Ring’ to be safe from AI phishing. It’s the classic hardware-as-a-panacea pitch that ignores the fact that users will just lose the ring or find a way to bypass the ‘physical proximity’ requirement. Apparently, the solution to sophisticated social engineering is just more proprietary jewelry. <a href="https://app.daily.dev/posts/nO5sBkcvm" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vellox AI-native cyber defense</strong>: Booz Allen Hamilton is launching ‘Vellox,’ a suite of five AI-native products designed to fight ‘machine-speed adversaries.’ It’s a masterclass in buzzword density, promising ‘autonomous remediation’ and ‘AI-powered attack emulation’ for federal agencies. In reality, it’s likely just a collection of LLM wrappers trained on 30 years of government PDF reports, sold at a premium to people who think ‘AI-native’ is a security feature. <a href="https://app.daily.dev/posts/lljljIGzG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
