80 LEVEL

ClickHouse

cypress

DesignCourse

The Developing Dev

elastic

<h2>Must know</h2>
<ul>
<li><strong>AI agent security is a mess</strong>: Security researchers breached an AI agent social network, Moltbook, in minutes, exposing critical vulnerabilities like authentication bypass and database misconfigurations. This incident, along with the emergence of “prompt worms” that exploit AI agents’ instruction-following, highlights a new and evolving threat landscape for AI platforms. The rapid adoption of AI agents without proper security oversight is creating significant risks, with 1.5 million out of 3 million agents in large US and UK enterprises operating without oversight, according to Gravitee research. This is a critical area for anyone building or deploying AI. <a href="https://app.daily.dev/feed-by-ids?id=ycPDVy6OP&amp;id=Hv04ODVQw&amp;id=ehksC8VMf&amp;id=gy7WeHs5A&amp;id=kssiMjacP" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Deno Deploy goes GA, launches secure sandbox for untrusted code</strong>: Deno Deploy is now generally available, offering zero-config deployment for JavaScript and TypeScript apps, including Node.js frameworks, integrated serverless PostgreSQL, and OpenTelemetry observability. More interestingly, they’ve launched Deno Sandbox in beta, providing instant Linux microVMs for securely running untrusted code, especially LLM-generated code. This sandbox features hypervisor-level isolation and network egress control, addressing a major security concern for AI-driven development. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks funding, Rust alternative gains ground</strong>: The sole maintainer of the critical <code>sudo</code> utility, Todd C. Miller, is seeking sponsorship after Quest Software ended its support. This highlights the precarious state of essential open-source infrastructure. Meanwhile, <code>sudo-rs</code>, a memory-safe Rust reimplementation, is gaining traction, with Ubuntu 25.10 planning to adopt it as the default <code>sudo</code> utility by October 2025. This shift underscores the industry’s move towards memory-safe languages for foundational tools. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Databricks Lakebase hits GA on AWS</strong>: Databricks Lakebase is now generally available on AWS, offering a serverless Postgres service that runs directly on data lakes, unifying operational, analytical, and AI workloads without data movement. <a href="https://app.daily.dev/posts/qtDOznoeU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Vercel v0 revamps for enterprise AI development</strong>: Vercel has rebuilt its v0 AI-powered development platform, evolving it from a prototyping tool to an enterprise-grade AI coding platform with security features and integrations for production-ready code. <a href="https://app.daily.dev/posts/8wRm1h8NM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center gets multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Dependabot adds OIDC support for private registries</strong>: Dependabot now supports OpenID Connect (OIDC) authentication for private registries, allowing dynamic short-lived credentials and reducing the need for storing long-lived secrets. <a href="https://app.daily.dev/feed-by-ids?id=P7dsW78XN&amp;id=YmYpo2Y1G&amp;id=iDGQonMWb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI speeds up Android app migration for Instacart</strong>: Instacart’s Caper team used AI coding assistants to accelerate their Android smart cart app migration from Fragments to Jetpack Compose by 5-7x, significantly reducing development time. <a href="https://app.daily.dev/feed-by-ids?id=IH6kovw5g&amp;id=OWEjri5UU&amp;id=eAd8BFgLE&amp;id=oppY5SpKL&amp;id=pFVTGaupN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>GNU Hurd project shows significant progress</strong>: GNU Hurd, the microkernel-based Unix replacement, shows significant progress with 80% Debian package compilation, 64-bit support, and multi-core functionality. <a href="https://app.daily.dev/posts/XjM52iBH8" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Elastic 9.3 brings AI agents and GPU-accelerated indexing</strong>: Elastic 9.3 introduces Elastic Workflows for native automation, Elastic Agent Builder for conversational AI with Elasticsearch data, and GPU-accelerated vector indexing via NVIDIA cuVS integration. <a href="https://app.daily.dev/posts/5aCv7Giur" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok LLM because fixing it was ‘too difficult’</strong>: X, formerly Twitter, has apparently replaced its traditional search functionality with Grok, an LLM, because fixing the old system was “too difficult.” So, instead of engineering a robust search, they just threw billions of dollars at an LLM. What could possibly go wrong with a search engine that hallucinates? <a href="https://app.daily.dev/posts/1TELuPW5m" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Take-Two says GTA 6 is ‘handcrafted,’ not AI-generated</strong>: Take-Two Interactive CEO Strauss Zelnick proudly declared that generative AI plays “zero part” in GTA 6 development, emphasizing its “handcrafted” nature. This, after their stock dropped because Google announced an AI tool for creating game worlds. Apparently, investors need to be reassured that their multi-billion dollar game isn’t just going to be spat out by a chatbot. <a href="https://app.daily.dev/posts/chwMGhSO9" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Polish railway portal randomizes schedules for mobile users</strong>: A Polish railway portal is reportedly randomizing train schedules for mobile users based on their IP addresses, likely as an anti-scraping measure. So, instead of implementing proper API rate limiting or CAPTCHAs, they’ve decided to just lie to their customers. Peak user experience, right there. <a href="https://app.daily.dev/feed-by-ids?id=NpQixwGEK&amp;id=hQA36mWZO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
