Cloudflare

depesz

Hacker News

InfoQ

IPng Networks

Kogan.com

<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a dumpster fire</strong>: Recent incidents highlight catastrophic security flaws in AI agents. A BBC reporter was hacked via an AI coding platform, and an open-source agent, OpenClaw, revealed 512 vulnerabilities, including critical RCE, with 42,900 exposed instances. Even an AI project called FinTrust-AI had a backdoor exfiltrating credentials. This ‘lethal trifecta’ of data access, untrusted content, and external communication means traditional security models are completely inadequate, as reported across multiple sources. <a href="https://app.daily.dev/feed-by-ids?id=1HpSP7L9S&amp;id=1TelNKsBD&amp;id=9xLrRFK2b&amp;id=FuKqPJxtz&amp;id=Jm3weKMWA&amp;id=ZmcjIu8ai&amp;id=em7afQ5sm&amp;id=kdJWfknAe&amp;id=ohhVPexbM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>OpenAI introduces harness engineering for large-scale AI development</strong>: OpenAI has unveiled ‘Harness Engineering,’ an internal AI-driven methodology that uses Codex agents to automate code generation, testing, CI, and observability. A five-month experiment resulted in a million lines of code generated without manual writing. This shifts engineers’ roles to designing environments and specifying intent via declarative prompts, with Martin Fowler noting it as a significant framing of AI-enabled software development. <a href="https://app.daily.dev/posts/dPCNsAxds" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>TypeScript 6 prepares for a go rewrite</strong>: TypeScript 6 has been released as a transitional version, primarily to prepare the ecosystem for a planned rewrite of the compiler in Go, aiming to solve performance bottlenecks. Developers are strongly encouraged to upgrade to resolve deprecation warnings before TypeScript 7, which will feature the Go rewrite. Key changes include strict mode by default, ES modules, and deprecation of ES5 targets. <a href="https://app.daily.dev/posts/tiMDdyFcG" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Cloudflare R2 launches local uploads for faster writes</strong>: Cloudflare’s R2 object storage now offers ‘Local Uploads’ in open beta, reducing cross-region write latency by up to 75% by writing data to the nearest PoP and asynchronously replicating it to the home region. <a href="https://app.daily.dev/posts/XbGrpoJDs" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS enables event-driven architectures for RDS SQL server</strong>: AWS now allows Lambda functions to be triggered directly from RDS for SQL Server database events, enabling event-driven architectures by parsing ERRORLOG messages via CloudWatch Logs and SNS/SQS. <a href="https://app.daily.dev/posts/KzhIuYzeh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Anthropic and Figma integrate claude code for design-to-code workflow</strong>: Anthropic and Figma collaborated to allow Claude Code to convert production code into editable Figma designs and round-trip updates back to code, streamlining designer-developer workflows. <a href="https://app.daily.dev/posts/aCaE5xJ9z" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>NTransformer boosts local LLM inference on consumer GPUs</strong>: NTransformer, a C++/CUDA engine, enables Llama 3.1 70B on a single RTX 3090 at 0.5 tok/s, claiming an 83x speedup through adaptive caching, layer streaming, and self-speculative decoding. <a href="https://app.daily.dev/feed-by-ids?id=Ahx4zgQks&amp;id=DyVC0qyKG&amp;id=Fkac7nXWM&amp;id=K01E44V9h&amp;id=WoJMuyqAQ&amp;id=mulSXvfKt" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL 19 allows per-process logging configuration</strong>: PostgreSQL 19 introduces the ability to configure <code>log_min_messages</code> per process type, allowing DBAs to target verbose debug logging at specific backend processes without flooding all logs. <a href="https://app.daily.dev/posts/jFpuJ6YrS" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Linux ecosystem sees kernel fixes and desktop environment updates</strong>: Linux 7.0 received DRM kernel graphics driver fixes for AMDGPU, eCryptfs is seeing renewed patch activity, and GNOME 50 beta and KDE Plasma 6.6 were released with new features and clarifications on systemd dependencies. <a href="https://app.daily.dev/feed-by-ids?id=2U7gOjLpG&amp;id=BZn5Av50T&amp;id=LutMi5Kcz&amp;id=MGUcuQgst&amp;id=gNaBG2osm&amp;id=u9gGdIsNO" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>.NET 11 preview 1 released with async improvements and zstandard support</strong>: .NET 11 Preview 1 introduces runtime-level async improvements, native Zstandard compression, BFloat16 support for AI/ML, and foundational CoreCLR WebAssembly support, alongside new C# 15 features. <a href="https://app.daily.dev/feed-by-ids?id=QBAQQNpLN&amp;id=xPZZ4nMO0" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>OpenAI’s financial woes and altman’s energy claims</strong>: Sam Altman is out here dismissing claims of high AI water usage as ‘completely untrue’ while OpenAI is reportedly facing $44 billion in cumulative losses and potential bankruptcy by 2027. He also claims AI is more energy-efficient than a human, which is a bold statement when your company is bleeding money and your investors are pulling back. Sounds like someone’s trying to spin a narrative while the ship is sinking, as reported by multiple sources. <a href="https://app.daily.dev/feed-by-ids?id=95MvV75SN&amp;id=mGa3eARS3&amp;id=ogUHau6h0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Google VP warns against ‘thin IP’ AI startups</strong>: Google Cloud VP Darren Mowry is warning that AI startups building ‘LLM wrappers with thin IP’ are doomed, comparing them to early AWS resellers who got squeezed out. He’s bullish on ‘vibe coding platforms,’ though. So, if your AI startup isn’t doing ‘vibe coding’ or biotech, apparently you’re just a glorified reseller waiting to be crushed by the big players. Thanks for the heads-up, Google. <a href="https://app.daily.dev/feed-by-ids?id=8yc6ZDNd6&amp;id=WAm3NKS9B&amp;id=djwfpUzVm&amp;id=gX2zbD1Ji" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>The great open-source office suite drama continues</strong>: The Document Foundation, the folks behind LibreOffice, are accusing OnlyOffice of being ‘fake open source’ because they allegedly partner with Microsoft and default to proprietary OOXML formats. TDF is out here reliving the browser wars, claiming ISO’s recognition of OOXML was a mistake. It’s almost like some ‘open source’ projects are more interested in fighting over standards than actually making good software. <a href="https://app.daily.dev/feed-by-ids?id=840Dw8MXb&amp;id=OwmBaq9Nm" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
