<h2>Must know</h2>
<ul>
<li><strong>Discord solves Elixir actor tracing without performance hits</strong>: Discord engineers developed a custom Transport library to propagate OpenTelemetry context across Elixir processes by wrapping messages in an Envelope struct. To prevent performance degradation during million-user fanouts, they implemented dynamic sampling and a fast-path filter that reads gRPC flags without full deserialization, recovering 10 CPU percentage points. This system, detailed by InfoQ, successfully diagnosed a 16-minute connection delay that traditional metrics missed. <a href="https://app.daily.dev/posts/lB8HcYXrr" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>White House Android app analysis reveals invasive tracking</strong>: A technical teardown of the official White House app using JADX uncovered a GPS tracking pipeline that polls location every 4.5 minutes, despite claims of stripping such features. The app injects JavaScript into its in-app browser to bypass GDPR banners and paywalls, while relying on a personal GitHub Pages account for core assets. Hacker News reports the build includes development artifacts and lacks certificate pinning, creating significant supply chain risks. <a href="https://app.daily.dev/posts/luKGADzaQ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Integer overflow in ASN.1 parser enables TLS bypass</strong>: A vulnerability in a popular open-source TLS library’s ASN.1 DER parser allows attackers to spoof OIDs via an 11-byte crafted input. The flaw stems from a 64-bit Long decoding function lacking overflow protection, which silently truncates values to match trusted standard OIDs. InfoSec Write-ups notes this enables Man-in-the-Middle attacks and highlights the danger of unvalidated VLQ decoding in security-critical parsers. <a href="https://app.daily.dev/posts/DT1x6vmjr" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Kali Linux 2026.1 adds Windows 11 disguise and Metasploit MCP</strong>: The anniversary release includes a refreshed ‘undercover’ mode and eight new red teaming tools for security auditing. <a href="https://app.daily.dev/posts/f8p5k8N1i" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tailscale adds workload identity federation and memory leak fixes</strong>: The March update introduces automated token generation and throughput improvements for Peer Relays across Linux and Windows. <a href="https://app.daily.dev/posts/sl1mQVCfD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Virtual clusters slash Kubernetes control plane overhead</strong>: Tools like vCluster and Kamaji allow running tenant control planes as pods, potentially saving tens of thousands in managed EKS fees. <a href="https://app.daily.dev/posts/LZn0volzl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Go 1.26 improves type construction and cycle detection</strong>: Compiler engineers are refining how the toolchain handles complex type construction to improve build reliability and performance. <a href="https://app.daily.dev/posts/sa2IlLx1E" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>SwiftUI AnyView causes silent memory growth and state leaks</strong>: Using AnyView prevents view storage reuse, leading to persistent instances that don’t show up as traditional leaks in profiling tools. <a href="https://app.daily.dev/feed-by-ids?id=9TV8wk6xM&amp;id=wFNgXz0gl" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PHPantom brings fast Rust based LSP to PHP development</strong>: This lightweight language server starts in under a second and uses only 59MB of RAM while supporting generics and static analysis. <a href="https://app.daily.dev/posts/lreBnQIWD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gzip decompression implemented in 250 lines of Rust</strong>: A clean implementation of DEFLATE and Huffman coding demonstrates the core mechanics of the format without the complexity of zlib. <a href="https://app.daily.dev/posts/cIHyDPn2M" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>React2AWS wants you to write Terraform in JSX</strong>: Because what the industry definitely needed was another layer of abstraction to turn a declarative configuration language into a different declarative configuration language using a web framework’s syntax. It uses ‘Tailwind-inspired classNames’ for infrastructure, ensuring that your cloud architecture is just as unreadable as your frontend. If you’ve ever wanted to debug a VPC using a React live editor, your very specific nightmare has arrived. <a href="https://app.daily.dev/posts/YqbhLHTeP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The framework dictator complex</strong>: A veteran developer’s rant against ‘magic’ abstractions in PHP frameworks reminds us that some people still think using a DI container is a personal affront to their ancestors. While the critique of bloat is fair, the suggestion that every IoT project needs a bespoke stack of curated libraries is the classic ‘I can build it better’ trap that leads to unmaintainable legacy code. It’s the software engineering equivalent of refusing to use a stove because you prefer to rub two sticks together for ‘performance.’ <a href="https://app.daily.dev/posts/1nYaYQslI" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ethereum based equal pay registries</strong>: A hackathon project suggests solving the gender pay gap by putting hashed salary data on the blockchain and issuing ‘soulbound tokens’ to companies. It’s a perfect storm of buzzwords that ignores the fact that companies lying on a PDF will just as easily lie to a NestJS backend before it hits the chain. Adding Ethereum to a spreadsheet doesn’t make the data more honest; it just makes the audit trail more expensive and harder to delete. <a href="https://app.daily.dev/posts/N0mJUcDFE" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
