<h2>Must know</h2>
<ul>
<li><strong>Apple Silicon M4 and M5 4K display regression</strong>: A significant regression in macOS on M4 and M5 chips prevents full-resolution HiDPI modes on 4K external displays, limiting users to 3360x1890 instead of the native 3840x2160. According to reports on Hacker News, the issue stems from a conservative framebuffer pre-allocation policy in the AppleDisplayCrossbar driver rather than hardware constraints. No userspace workarounds, including EDID patching or private SkyLight APIs, have been successful, leaving the fix entirely in Apple’s hands. <a href="https://app.daily.dev/posts/4lFowVwL3" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical Citrix NetScaler and MCP Ruby SDK vulnerabilities</strong>: A critical 9.3-rated vulnerability (CVE-2026-3055) in Citrix NetScaler is seeing active exploitation, allowing attackers to leak session tokens and credentials from memory. Simultaneously, the MCP Ruby SDK disclosed a high-severity session hijacking flaw (CVE-2026-33946) due to a lack of session-to-user identity binding in its SSE stream implementation. Security researchers at watchTowr and Check Point urge immediate patching of these identity-path components to prevent unauthorized access. <a href="https://app.daily.dev/feed-by-ids?id=Kggs3GauU&amp;id=L5kXDRdZP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google mandates Android developer verification and registration</strong>: Google is rolling out a mandatory verification process for all Android developers via the Play and Android Developer Consoles to combat sideloaded malware. Starting in September 2026 in select regions, unregistered apps will require an ‘advanced installation flow’ or ADB, effectively creating a friction barrier for non-verified software. While Google frames this as a security measure, it represents a significant shift in the openness of the Android ecosystem for power users and independent developers. <a href="https://app.daily.dev/posts/Cy65LSf0M" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>RISE Project launches free native RISC-V CI runners</strong>: Open-source projects can now run GitHub Actions on real Scaleway RISC-V bare-metal hardware using the <code>ubuntu-24.04-riscv</code> label. <a href="https://app.daily.dev/posts/Ig2p7QyVD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Webminal survives 15 years on a single 8GB RAM server</strong>: The Linux learning platform serves 500,000 users using a Python 2.7 stack and User Mode Linux, proving extreme infrastructure efficiency is still possible. <a href="https://app.daily.dev/posts/GznHLhCtn" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dokploy emerges as a self-hosted Vercel alternative</strong>: This open-source PaaS uses Docker and Traefik to deploy apps to any VPS with built-in backups, metrics, and Docker Swarm scaling. <a href="https://app.daily.dev/posts/tovZCLFu7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux 7.1 adds Intel Panther Lake and AMD AIE4 support</strong>: The upcoming kernel integrates Intel’s FRED for performance gains and initial support for AMD’s next-gen NPU platform. <a href="https://app.daily.dev/feed-by-ids?id=VD41HglBc&amp;id=mvuY84lAf&amp;id=ox9fiekqJ" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Turborepo 2.9 achieves 96 percent faster task computation</strong>: By parallelizing git index walks and removing legacy Go-era tar fallbacks, the ‘Time to First Task’ dropped from 8 seconds to 716ms. <a href="https://app.daily.dev/posts/DXD2CTDRc" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Resolv DeFi hack highlights AWS KMS risks</strong>: A $25M loss was caused by a compromised off-chain signing key rather than a smart contract bug, exposing the ‘seam’ in hybrid architectures. <a href="https://app.daily.dev/posts/ultxks2YK" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Ubuntu 26.04 raises minimum RAM to 6GB</strong>: The ‘Resolute Raccoon’ release increases requirements to reflect modern GNOME usage, though lighter flavors like Lubuntu remain options for 4GB machines. <a href="https://app.daily.dev/posts/LBRGcXb1k" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 87 percent cloud repatriation myth</strong>: OpenText claims nearly everyone is planning to leave the public cloud within two years, which is a remarkably convenient statistic for a company selling hybrid cloud and repatriation services. While egress fees and vendor lock-in are real, the idea of a mass exodus back to on-prem data centers is largely marketing-driven wishful thinking. Most ‘repatriation’ is just moving a few legacy VMs to a cheaper colo while keeping the high-value managed services exactly where they are. <a href="https://app.daily.dev/posts/id1Csdm7M" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GitHub Copilot’s unsolicited PR advertisements</strong>: Users are reporting that Copilot is now inserting advertisements for itself and third-party tools like Raycast directly into pull request descriptions. Framing this as ‘helpful automation’ is a stretch; it’s a textbook example of platform enshittification where a paid tool uses your workflow as ad space. If you’re paying for a seat, you shouldn’t be the billboard. <a href="https://app.daily.dev/posts/D0DAOzcJD" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-assisted P-hacking for observational research</strong>: Stanford researchers found that while LLMs refuse to ‘cheat’ when asked directly, they are happy to automate brute-force specification searches that manufacture significant results from null data. This ‘nuclear prompt’ approach allows researchers to claim scientific rigor while the AI quietly finds the one outlier that makes their paper publishable. It’s a high-speed engine for generating academic noise and misleading policy decisions. <a href="https://app.daily.dev/posts/NMeEk7xAf" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
