<h2>Must know</h2>
<ul>
<li><strong>Google sets 2029 deadline for post quantum migration</strong>: Google has announced a 2029 deadline to migrate all internal systems and products to Post-Quantum Cryptography (PQC) to counter ‘store-now-decrypt-later’ attacks. According to Dark Reading, the timeline was moved up due to faster-than-expected progress in quantum hardware and error correction. Android 17 will be among the first to integrate ML-DSA digital signature protection as part of this roadmap. <a href="https://app.daily.dev/feed-by-ids?id=2Ya2QAFm3&amp;id=7VBfWeOlQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Massive supply chain attack hits Trivy and Telnyx</strong>: A sophisticated threat actor group, TeamPCP, compromised the Trivy container scanner via a GitHub Actions misconfiguration, exfiltrating 300GB of cloud credentials and SSH keys. Socket Research also identified a compromise of the Telnyx Python SDK on PyPI, which used audio steganography to hide a credential-stealing payload. Security experts recommend pinning GitHub Actions to commit SHAs and rotating all secrets immediately. <a href="https://app.daily.dev/feed-by-ids?id=1N56isWio&amp;id=EeEZo06er&amp;id=fyhf7Sv5C&amp;id=w52uMMkqR" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 LTS beta arrives with Linux 7.0</strong>: The ‘Resolute Raccoon’ beta is now available, featuring the Linux 7.0 kernel and GNOME 50, with a stable release targeted for April 23. This version marks the full removal of X11 from the main flavor and introduces a new ‘Resources’ app to replace the aging System Monitor. Under the hood, it includes GCC 15.2, Python 3.14, and Docker Engine 29 with Containerd as the default image store. <a href="https://app.daily.dev/posts/ZDMMAi90w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Turbolite enables SQLite queries directly from S3</strong>: This Rust-based VFS uses B-tree-aware page grouping and zstd compression to achieve sub-250ms cold latency for multi-tenant architectures. <a href="https://app.daily.dev/posts/9ZseH6udT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI launches Codex plugin system for governance</strong>: Enterprise IT teams can now package coding workflows and MCP server configurations into versioned bundles with centralized installation policies. <a href="https://app.daily.dev/posts/cyumMjIVx" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Canonical proposes stripping GRUB features for security</strong>: A new proposal for Ubuntu 26.10 suggests removing support for Btrfs, ZFS, and LUKS from signed GRUB builds to reduce the pre-boot attack surface. <a href="https://app.daily.dev/posts/XPJSKIrCG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Shift left cost awareness in Kubernetes IDPs</strong>: Platform teams are integrating tools like Infracost and OPA gates to surface estimated cloud costs directly in pull requests before provisioning. <a href="https://app.daily.dev/posts/EjsJhE0x6" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Materialize tackles Iceberg streaming consistency</strong>: New engineering patterns address the mismatch between Iceberg’s batch-centric design and the needs of transactionally consistent operational data. <a href="https://app.daily.dev/posts/fai6WWQLv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft open sources comprehensive Rust training</strong>: The curriculum covers seven levels from C++/Python bridge courses to advanced async patterns with Tokio and type-driven correctness. <a href="https://app.daily.dev/posts/xssoc0xIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NVIDIA fix addresses 2x CPU performance regression</strong>: A new Linux kernel patch adds SMT awareness to the asymmetric CPU capacity scheduler to fix regressions on the Vera Rubin platform. <a href="https://app.daily.dev/posts/KdFuEG0xp" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The fictional economy of AI deals</strong>: Ed Zitron highlights a cynical pattern where AI labs announce massive ‘partnerships’ with NVIDIA and Microsoft that are actually just non-binding letters of intent. He points to OpenAI’s Sora as a prime example of vaporware that was hyped to scare Hollywood but has since been quietly sidelined without the rumored billion-dollar investments. Despite the noise, only a fraction of the announced data center capacity actually came online in 2025. <a href="https://app.daily.dev/posts/xuU3Q5U61" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The alignment tax of silent failure</strong>: New research shows that RLHF and DPO alignment are breaking the ability to detect when an LLM is hallucinating. By forcing models to be ‘confident’ and consistent, we’ve effectively disabled sampling-based uncertainty estimation, meaning a model will now give you the same wrong answer ten times in a row. We’ve traded actual reliability for the mere appearance of it, making silent failures nearly impossible to catch programmatically. <a href="https://app.daily.dev/posts/59Px0AiZs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Taste is just reps in a trench coat</strong>: The industry is currently obsessed with the idea that ‘taste’ is the only thing AI can’t replace, framing it as some mystical, innate gift. In reality, as one developer points out, taste is just pattern recognition built through years of shipping features and reviewing bad code. Calling it ‘taste’ is just a way for seniors to gatekeep while pretending that their decade of experience is actually just a superior soul. <a href="https://app.daily.dev/posts/1kdbR9MM2" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
