<h2>Must know</h2>
<ul>
<li><strong>OpenAI shifts to WebSockets for stateful agentic workflows</strong>: OpenAI is moving its API from stateless REST/SSE to persistent WebSockets to solve the massive bandwidth waste in agentic tool-calling. By maintaining a session on a single server, developers no longer need to resend the entire conversation history with every tool execution, resulting in a 90% reduction in data transfer and up to 40% speed improvements. This change, reported by <a href="http://t3.gg" target="_blank" rel="noopener nofollow">t3.gg</a>, effectively makes prompt caching look like a minor optimization compared to the bandwidth savings for complex, multi-step agents. <a href="https://app.daily.dev/posts/aSXf4oROT" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Tycoon2FA phishing infrastructure dismantled in global sting</strong>: A coordinated operation by Europol, Microsoft, and Trend Micro has taken down Tycoon2FA, a massive Phishing-as-a-Service platform that bypassed MFA using Adversary-in-the-Middle techniques. The service was responsible for 62% of phishing attempts blocked by Microsoft in mid-2025, affecting nearly 100,000 victims across Microsoft 365 and Google accounts. While 330 domains were seized, security experts warn that similar open-source kits like EvilProxy remain active, necessitating a shift toward FIDO2 and passkeys. <a href="https://app.daily.dev/posts/8n08vNMXq" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>California age verification laws threaten Linux distributions</strong>: The California Digital Age Assurance Act (AB 1043), effective 2027, is creating a compliance crisis for open-source operating systems that lack centralized identity systems. Canonical and Fedora leadership are currently reviewing the legislation, while smaller projects like MidnightBSD have already announced plans to block California users entirely rather than implement mandatory age-bracket signaling. This highlights a growing friction between privacy-focused, decentralized software and regional ‘safety’ mandates that assume every OS has a unified app store. <a href="https://app.daily.dev/posts/IZBErJSZq" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Better Auth 1.5 adds remote MCP client and OAuth 2.1 provider</strong>: The massive update includes a standalone CLI, OIDC support, and production-ready SSO with SAML Single Logout. <a href="https://app.daily.dev/posts/v8zpPEuN7" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Expo SDK 55 brings SwiftUI and Jetpack Compose to React Native</strong>: The release features truly native UI components, Apple Zoom transitions, and zero-code iOS Live Activities via the new expo-widgets package. <a href="https://app.daily.dev/posts/bdAN1xDzt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cursor AI agent now integrates with JetBrains IDEs via ACP</strong>: Developers can now use Cursor’s agentic capabilities and codebase indexing within JetBrains 2025.3.2+ without a JetBrains AI subscription. <a href="https://app.daily.dev/posts/Scd2iQM5O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google Workspace CLI enables AI agent compatibility via MCP</strong>: The new Rust-based ‘gws’ tool dynamically builds its command surface and exposes Workspace APIs as tools for clients like Claude Desktop. <a href="https://app.daily.dev/posts/sDoaH3nut" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Python 3.15 to deprecate os.path.commonprefix due to security risks</strong>: The 34-year-old function is being retired after causing multiple path traversal vulnerabilities in tools like pip and SecureDrop. <a href="https://app.daily.dev/posts/4Ji3vL0Ub" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Gram editor forks Zed to strip all AI and telemetry</strong>: A new Rust-based fork removes account requirements and AI integrations in response to Zed’s controversial terms of service. <a href="https://app.daily.dev/posts/0nyZBtm7y" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Java 26 adds native HTTP/3 support and FileChannel publishers</strong>: The upcoming March release introduces JEP 517 for HttpClient, though HTTP/2 remains the default protocol for now. <a href="https://app.daily.dev/posts/5nYFubJRS" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>The 1000x faster database throughput fantasy</strong>: Clockwork Labs is claiming SpacetimeDB 2.0 is ‘1000x faster’ than Postgres by embedding V8 logic directly in the database. It’s a classic vendor benchmark that ignores the reality of state management and distributed consistency in favor of a shiny number designed to lure Unreal Engine devs. If your database is 1000x faster than everything else, you’ve either reinvented physics or you’re testing against a straw man. <a href="https://app.daily.dev/posts/syuMcbtxg" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nvidia’s convenient exit from the AI startup bubble</strong>: Jensen Huang claims Nvidia is stopping investments in OpenAI and Anthropic because ‘IPO windows are closing,’ which is a hilarious way of saying the circular investment logic is finally getting too hot to handle. It’s much easier to blame the market than to admit that investing in your own customers to inflate revenue is a strategy with a very short shelf life. Expect more ‘quiet exits’ as the political and commercial entanglements of these deals become liabilities. <a href="https://app.daily.dev/posts/nu8iMyFFv" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Microsoft’s Streisand Effect masterclass on Discord</strong>: In a move that screams ‘we don’t understand the internet,’ Microsoft moderators banned the word ‘microslop’ on their official Copilot Discord, only to have users flood the chat with ‘Sloppysoft’ and ‘Micro Slop.’ They eventually nuked the entire message history and restricted posting, effectively turning a minor insult into a viral PR disaster. Nothing says ‘our AI is high quality’ like being unable to handle a portmanteau without shutting down your community. <a href="https://app.daily.dev/feed-by-ids?id=ABrToszMa&amp;id=bUJ9APfjg" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
