AICodeKing

daniel.haxx.se

finout

Hacker News

Kotlin Weekly

Adam Argyle

<h2>Must know</h2>
<ul>
<li><strong>Critical RCE in n8n automation platform</strong>: A severe unauthenticated remote code execution vulnerability (CVE-2026-21858, CVSS 10.0) has been discovered in the n8n automation platform. This flaw, stemming from a Content-Type confusion bug in the Form Webhook node, allows attackers to read arbitrary files, extract database and encryption keys, and ultimately execute arbitrary commands. With an estimated 100,000 servers globally at risk, users are urged to upgrade to version 1.121.0 or later, avoid internet exposure, and enforce authentication on Forms. <a href="https://app.daily.dev/posts/4XP5JDLv1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Snap Store publisher domain hijacking for malware distribution</strong>: Scammers are now exploiting expired domains of legitimate publishers on the Canonical Snap Store to distribute malware. By registering these domains, attackers gain control of associated publisher accounts and push malicious updates to trusted snap applications, specifically targeting cryptocurrency wallet users for recovery phrase theft. This tactic undermines trust in publisher reputation signals and highlights significant security risks, as reported by cybersecurity outlets. Publishers are advised to maintain domain control and enable 2FA. <a href="https://app.daily.dev/posts/8RJLmL5a0" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Iran disrupts Starlink internet with military-grade GPS jamming</strong>: Iran has successfully used military-grade GPS jammers to disrupt Starlink satellite internet, cutting performance by up to 80% during a nationwide internet shutdown that disconnected 85 million people. This technique targets GPS signals essential for Starlink terminals to locate satellites, proving more effective than similar Russian attempts. The incident raises serious concerns about Starlink’s reliability in conflict zones and its perceived role as a censorship-resistant tool, as highlighted by various reports. <a href="https://app.daily.dev/posts/VVK9EFJ8w" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Good to know</h2>
<ul>
<li><strong>China files for massive 193,428-satellite constellation</strong>: China has filed ITU requests for two satellite constellations, CTC-1 and CTC-2, totaling 193,428 satellites, dwarfing SpaceX’s Starlink plans and raising national security concerns for the US FCC. <a href="https://app.daily.dev/posts/9Dqo8zul1" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Physical AI and AV industry shifts at CES 2026</strong>: CES 2026 saw Physical AI as a central theme, with Chinese automotive and AV tech companies dominating, Mobileye acquiring Mentee Robotics for $900 million, and Motional shifting to an “AI-first” AV development process. <a href="https://app.daily.dev/posts/MtQzzuuIN" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>New CLI tool integrates AI and developers with Figma</strong>: The <code>dannote/figma-use</code> command-line tool provides full read/write access to Figma, enabling AI agents and developers to programmatically create and modify designs using JSX syntax, optimized for token efficiency. <a href="https://app.daily.dev/posts/DfAoRLrdU" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Open source ecosystem models and funding challenges</strong>: Open source projects are categorized into cathedral, megachurch (like Linux Foundation), and bazaar models, with bazaar projects (single-maintainer) forming critical infrastructure but facing significant funding challenges, which the Sovereign Tech Agency is attempting to address. <a href="https://app.daily.dev/posts/rr8Vo8FaG" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Curl drops OpenSSL-QUIC backend due to performance issues</strong>: The curl project is removing support for the OpenSSL-QUIC backend in version 8.19.0 due to its inadequate API, extremely poor performance (up to 3x slower), and excessive memory usage (up to 20x more) compared to alternatives. <a href="https://app.daily.dev/posts/As2f3e0AW" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>PostgreSQL incident highlights security misconfiguration</strong>: A PostgreSQL database at Nixopus repeatedly crashed due to ‘trust’ authentication exposing port 5432 to the internet, allowing unauthorized connections that exhausted <code>max_connections</code>, masquerading a security flaw as a stability bug. <a href="https://app.daily.dev/posts/m4he1CZCb" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Claude expands into healthcare and life sciences</strong>: Claude now offers specialized, HIPAA-compliant tools for healthcare and life sciences, including connectors to medical databases, clinical trial platforms, and personal health data integrations, with improved performance on medical task simulations. <a href="https://app.daily.dev/posts/A9juL7D3e" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
<h2>Bullshit police</h2>
<ul>
<li><strong>GPT-5.2 Pro solves Erdos problem #281: the AI hype train keeps rolling</strong>: Apparently, GPT-5.2 Pro has solved Erdos problem #281, a mathematical problem previously unsolved by humans. Terence Tao, a mathematician, called it “perhaps the most unambiguous instance” of AI solving an open problem. So, an AI solved a math problem. Great. Now, can it debug my Kubernetes cluster without hallucinating YAML, or is it just another parlor trick for the academic elite? <a href="https://app.daily.dev/posts/pRkd3CPEF" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>AI coding assistants: the new scapegoat for developer laziness?</strong>: Apparently, AI coding assistants are making developers ‘lazy’ by providing instant answers instead of forcing them to read documentation or think critically. One article even claims Tailwind CSS laid off 75% of its engineers because AI reduced traffic to their docs. So, instead of celebrating tools that automate drudgery, we’re now blaming them for a supposed ‘degradation of problem-solving capabilities.’ Maybe the problem isn’t the AI, but the developers who can’t adapt? <a href="https://app.daily.dev/posts/kU6tc6Fse" target="_blank" rel="noopener nofollow">Read more</a></li>
<li><strong>Scalability isn’t just traffic, it’s also… money? Who knew!</strong>: A groundbreaking insight reveals that scalability isn’t just about handling traffic; it also involves managing costs and operations. Apparently, those ‘free’ third-party services and AI coding assistants can get ‘prohibitively expensive’ at scale. It’s almost as if financial sustainability is a factor in engineering. Next, they’ll tell us that servers need electricity. <a href="https://app.daily.dev/posts/yaSSI8AJO" target="_blank" rel="noopener nofollow">Read more</a></li>
</ul>
