<h2>Must know</h2>
<ul>
<li><strong>GrapheneOS rejects age verification and threatens regional exit</strong>: The privacy-focused Android fork GrapheneOS announced it will not comply with new laws in the UK, Australia, and Brazil that mandate age data collection at the OS level. Because the OS requires no accounts or personal info, the team stated they would rather exit those markets than compromise their core architecture. This stance complicates their recent partnership with Motorola, as those devices likely won’t be sold in regions enforcing these mandates, according to GrapheneOS. <a href="https://app.daily.dev/posts/agWvIPypH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Kubernetes launches Agent Sandbox for stateful AI workloads</strong>: The Kubernetes SIG Apps group has released Agent Sandbox, a new Custom Resource Definition designed specifically for the unique requirements of AI agents. Unlike traditional primitives, this project provides instant startup via a warm pool and dedicated networking for inter-agent communication. It supports secure runtimes like gVisor and Kata Containers to handle the risks of running untrusted agentic code, as detailed by the SIG Apps announcement. <a href="https://app.daily.dev/posts/wroMbko1c" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Interactive Ruby tutorials now run entirely in the browser</strong>: The Evil Martians team has reached the release candidate stage for TutorialKit.rb, which uses WebAssembly and WebContainers to run full Rails environments client-side. By using a deferred packing strategy, they’ve managed to get boot times down to 2-5 seconds despite a 77MB binary size. This allows developers to build complex, interactive documentation that doesn’t require a backend for code execution. <a href="https://app.daily.dev/posts/5gQhfNWeF" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>TurboQuant algorithm claims 6x memory reduction for LLM inference</strong>: Google Research published a compression method for KV caches that reportedly maintains zero accuracy loss on Gemma and Mistral models. <a href="https://app.daily.dev/posts/vMUhhOgpg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>DarkSword exploit chain targets unpatched iOS 18 devices</strong>: Google researchers identified a zero-click JavaScript data-stealer used by spyware vendors to exfiltrate messages and crypto keys from iPhones. <a href="https://app.daily.dev/posts/jvd2zngto" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Fyrox game engine reaches stable 1.0 after seven years</strong>: The Rust-based 2D/3D engine now features a project export CLI for WebAssembly and Android alongside a refactored async scene loader. <a href="https://app.daily.dev/posts/KKp03cmaR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Palo Alto Networks warns of sophisticated recruiter phishing scam</strong>: Attackers are using scraped LinkedIn data to lure senior pros into paying $800 to ‘fix’ fake resume formatting issues. <a href="https://app.daily.dev/posts/qXxvKpglt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Httpxyz fork emerges as original Python library stagnates</strong>: A new maintainer forked the popular httpx client to merge long-overdue bug fixes and move development to Codeberg. <a href="https://app.daily.dev/posts/CFSr4OLYE" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Enterprise Windows PCs lag behind Macs in patching and reliability</strong>: An Omnissa report claims macOS devices update 1.5x faster and experience significantly fewer app hangs than Windows counterparts. <a href="https://app.daily.dev/posts/lwdQa0vA0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel adds scheduled messaging to Chat SDK</strong>: Developers can now use a native thread.schedule method to deliver Slack messages at a future timestamp with cancellation support. <a href="https://app.daily.dev/posts/6RotAn9I3" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The gift retailer that left the keys in the front door</strong>: 1-800-Flowers decided that ‘environment variables’ were just a suggestion, leaking PayPal, Auth0, and Visa API keys directly in their client-side React bundle. As The Daily WTF points out, this is what happens when you treat your frontend like a secure vault just because the user has to open DevTools to see the loot. It’s a masterclass in ‘security through hoping nobody looks at the source code.’ <a href="https://app.daily.dev/posts/d3kA523sX" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Agile is dead long live the aviation metaphors</strong>: If you thought ‘Sprints’ were annoying, get ready for ‘Flights,’ where your tasks are ‘Crates’ and your leads are ‘Captains.’ Agile.flights is the latest attempt to fix broken corporate culture by simply changing the dictionary, because surely calling maintenance ‘Ground Work’ will finally make the stakeholders understand technical debt. It’s the same micromanagement, just with more turbulence and better branding. <a href="https://app.daily.dev/posts/PRTXr8G4W" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The MV pattern is just MVC with a mustache</strong>: SwiftUI developers are patting themselves on the back for inventing the ‘MV’ pattern, which Matteo Manferdini correctly identifies as just MVC from 40 years ago with the labels swapped. Renaming a Controller to an ‘Aggregate Model’ doesn’t make it modern; it just makes it harder for juniors to find the documentation. We’ve officially reached the stage of the hype cycle where we are rebranding the fundamentals to feel productive. <a href="https://app.daily.dev/posts/aJka7v0jz" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
