.NET Escapades

dltHub

elastic

Giant Swarm

GOTO Conferences

Hacker News

<h2>Must know</h2>
<ul>
<li><strong>Databricks and Snowflake push unified data platforms for AI</strong>: Databricks has made its Lakebase operational database generally available on AWS, offering a serverless Postgres service that scales automatically and runs directly on data lakes. This aims to unify operational, analytical, and AI workloads without data movement. Similarly, Snowflake launched a PostgreSQL database-as-a-service within its AI Data Cloud, enabling transactional workloads alongside analytics and AI under unified governance, leveraging <code>pg_lake</code> extensions to read and write directly to Apache Iceberg tables. Both moves highlight a trend towards integrating OLTP capabilities into cloud data platforms to support real-time and agentic AI workflows. <a href="https://app.daily.dev/feed-by-ids?id=qtDOznoeU&amp;id=L2wAseIso&amp;id=Ow0bpZEWc&amp;id=Wyt1TFesY&amp;id=aSHfIm3oS&amp;id=ppuh0CVeq&amp;id=qgdGrzKKG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Critical vulnerabilities found in n8n AI automation platform</strong>: JFrog security researchers discovered two critical vulnerabilities in n8n, an AI workflow automation platform, allowing remote JavaScript and Python code execution. These exploits target the platform’s logic sanitization tools and are considered high-risk due to their ease of exploitation. JFrog warns that cybercriminals can reverse-engineer exploits within hours using AI coding tools, highlighting growing concerns about AI platform security and the accelerated timeline for exploit development in the AI era. <a href="https://app.daily.dev/feed-by-ids?id=tpe4bjIum&amp;id=OEq44lx9O" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Sudo maintainer seeks sponsorship as funding dries up</strong>: Todd C. Miller, the sole maintainer of <code>sudo</code> for over 30 years, is seeking sponsorship after Quest Software ended its support in February 2024. This situation underscores the precarious funding model for critical open-source infrastructure, even as <code>sudo-rs</code>, a memory-safe Rust reimplementation, gains traction with Ubuntu 25.10 adopting it as default. The reliance on individual maintainers with limited resources for essential system components remains a significant concern. <a href="https://app.daily.dev/posts/E670NHqPD" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>Deno Deploy reaches GA, introduces Deno Sandbox for untrusted code</strong>: Deno Deploy is now generally available with support for Node.js frameworks, integrated serverless PostgreSQL, and OpenTelemetry, while Deno Sandbox offers instant Linux microVMs for securely running untrusted code, especially LLM-generated code. <a href="https://app.daily.dev/posts/Jmdw76tdu" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS IAM Identity Center adds multi-region replication</strong>: AWS IAM Identity Center now supports multi-Region replication for workforce identities and permission sets, enhancing resiliency and enabling applications closer to users, with centralized configuration in a primary Region. <a href="https://app.daily.dev/posts/wVGc4PkCH" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Pigsty v4.0 released with PostgreSQL 18 support and AI features</strong>: Pigsty v4.0, a PostgreSQL distribution, now supports PostgreSQL 18, includes a VIBE module for AI coding environments with Claude Code integration, and switched to VictoriaMetrics/VictoriaLogs for monitoring, claiming 10x performance gains. <a href="https://app.daily.dev/posts/mUujkXZJa" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AWS STS enhances OIDC federation with IdP-specific claim validation</strong>: AWS Security Token Service (STS) now validates identity provider (IdP)-specific claims for OIDC federation, allowing more granular access control for federated identities using custom claims in IAM role trust policies. <a href="https://app.daily.dev/posts/IwKMFdO21" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Redpanda Serverless on AWS reaches general availability</strong>: Redpanda Serverless on AWS is now generally available, featuring AWS PrivateLink for secure networking, Prometheus metrics, and a hybrid networking model supporting both private and public endpoints on the same cluster. <a href="https://app.daily.dev/posts/I3okUboSh" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Cloudflare R2 Local Uploads enters open beta</strong>: Cloudflare R2 Local Uploads is in open beta, improving global upload performance by writing object data to storage near the client first, then asynchronously replicating it to the bucket’s designated region, reducing cross-region upload times by up to 75%. <a href="https://app.daily.dev/posts/bb4C5Q89S" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>JRuby 10.0.3.0 released with Ruby 3.4 compatibility</strong>: JRuby 10.0.3.0 is out, bringing compatibility with Ruby 3.4, an upgraded standard library, and security fixes for the <code>rexml</code> gem, along with numerous bug fixes for keyword arguments, encoding, and Windows compatibility. <a href="https://app.daily.dev/posts/x46xaRc24" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>X replaces search with Grok, because fixing things is hard</strong>: Elon Musk’s X (formerly Twitter) has apparently replaced its traditional search functionality with Grok, an LLM, because fixing the existing search system was deemed too difficult. So, instead of, you know, <em>fixing</em> the search, they just threw billions at GPU infrastructure to build an LLM-based solution. Because nothing says ‘innovation’ like replacing a broken feature with an expensive, unproven AI that probably hallucinates search results. <a href="https://app.daily.dev/feed-by-ids?id=1TELuPW5m&amp;id=9UnqRpTnt&amp;id=I12uAKfIW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI-only social network collapses in 72 hours, who could have seen that coming?</strong>: Moltbook, an ‘AI-only’ social network, imploded within 72 hours of launch due to catastrophic security failures, including completely open database access. Apparently, building a platform entirely with AI-generated code and claiming 1.4 million ‘AI users’ (while having closer to 17,000 real ones) isn’t a recipe for success. It’s almost like deploying AI-generated applications without proper security review is a bad idea. Shocking, I know. <a href="https://app.daily.dev/feed-by-ids?id=8XBbHzIL3&amp;id=yCqSQa4jM" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Nvidia’s OpenAI investment: will they or won’t they fund their competition?</strong>: Nvidia’s stock took a dip amidst ‘uncertainty’ about its planned $100 billion investment in OpenAI. CEO Jensen Huang previously criticized OpenAI’s strategy and expressed concerns about competition, then denied being unhappy, then confirmed an investment but ‘not exceeding’ $100 billion. It’s a real nail-biter: will Nvidia actually fund a company that could eventually challenge its hardware dominance, or will they just keep selling them chips at exorbitant prices? The suspense is killing me. <a href="https://app.daily.dev/posts/isSX8DfZa" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
