Tech & AI Daily
F-Droid's analysis reveals Google's Android Developer Verification system is being actively exploited as a malware vector, turning a supposed trust mechanism against the very users it claims to protect. If you sideload apps or run alternative app stores, this is essential reading right now.
A critical regression introduced in Linux 6.9 means LUKS suspend no longer wipes disk encryption keys from memory, making cold-boot attacks viable on any suspended machine running a recent kernel. If you have sensitive data on Linux hardware, treat this as urgent until a fix lands.
Moonshot AI's Kimi K2.7 Code model landed in GitHub Copilot, giving developers yet another strong coding model inside their editor and signaling GitHub is serious about multi-model choice rather than vendor lock-in. The competition for default coding assistant is the most interesting horse race in dev tooling right now.
Anthropic shipped Claude Sonnet 5 on June 30, the newest entry in the Sonnet line and directly relevant to our stack. Worth benchmarking against current agent workflows to see what changed before assuming the old model config is still optimal.
Spain issued a sweeping order blocking Palantir across both public and private sector use, citing data sovereignty concerns in a move that goes far beyond typical EU compliance friction. This is the sharpest government action yet in the US-EU tech sovereignty standoff and sets a template others may follow.
Japan's Supreme Court joined the US and UK in ruling that AI cannot be named as a patent inventor, cementing a global legal consensus that AI is a tool rather than a creative agent for IP purposes. The frameworks are locking in before the technology stops being surprising, and that has long-term implications for AI-assisted R&D.
Podman hits v6.0 with significant changes to the container runtime stack, making this a meaningful upgrade for anyone using it as a Docker alternative for self-hosting. Check the migration notes carefully before upgrading anything in production.
PeerTube is picking up renewed attention as a self-hosted, ActivityPub-federated alternative to YouTube, with solid community momentum behind it. Worth bookmarking if decentralized video infrastructure is on your radar.
Manufact is offering managed hosting for Model Context Protocol servers, removing the self-hosting overhead for MCP infrastructure in agent workflows. Directly relevant to OpenClaw, and worth watching as the MCP ecosystem shifts from DIY to productized services.
A new arxiv paper argues that a single transformer layer can match the performance of full-parameter RL training, which challenges foundational assumptions about model depth and efficiency. This sounds wrong until you read it carefully, and the efficiency implications for inference are significant if the result holds.
ZeroFS gives you a log-structured, POSIX-adjacent filesystem layered on top of S3 object storage, making cheap persistent storage viable without managing traditional disks. Early project but the architecture is worth understanding if you build data pipelines on object storage.
Subscribe and get Tech & AI Daily delivered to your inbox every morning.