Daily Edition · Page 1

THE DAILY INDEX

Technology, AI, software, security, crypto and business

Across today’s newsletters

Today’s Index

HOW WE ACCIDENTALLY MADE ROUTE MATCHING MORE PERFORMANT BY AIMING FOR CORRECTNESS

TanStack Router achieved a 20,000× performance improvement in route matching by switching from a flat list iteration approach to a segment trie data structure. This changed the algorithmic complexity from O(N), based on the number of routes, to O(M), based on pathname segments. It also added backwards stack processing, bitmasking for optional segments, and reusing typed arrays for parsing to further boost performance across both small apps (60× faster) and large apps (10,000× faster).

PUBLIC GITLAB REPOSITORIES EXPOSED MORE THAN 17,000 SECRETS

Security researcher Luke Marshall examined all 5.6 million public GitLab Cloud repositories with TruffleHog and found 17,430 verified active secrets across 2,804 distinct domains. This exposure is nearly three times that found in a similar scan of Bitbucket. The leaked credentials included over 5,200 Google Cloud Platform keys, MongoDB credentials, Telegram bot tokens, and OpenAI keys. Some secrets date back to 2009 and are still valid today. Although many organizations revoked their credentials after receiving automated alerts—earning the researcher $9,000 in bug bounties—some secrets continue to be exposed on GitLab repositories.

BITCOIN ETFS ARE BLACKROCK'S TOP REVENUE SOURCE

BlackRock's Bitcoin ETFs became the firm's top revenue source despite managing 1,400+ ETFs with $13.4 trillion in total assets. Allocations are nearing $100 billion. IBIT launched in January 2024 and reached $70 billion in assets in a record 341 days, currently sitting at $70.7 billion with net inflows exceeding $52 billion in its first year, while generating an estimated $245 million in annual fees by October. The ETF now holds over 3% of Bitcoin's total supply as BlackRock's own Strategic Income Opportunities Portfolio increased its IBIT stake by 14%. Recent outflows are attributed to expected retail behavior during price drops rather than fundamental weakness.

“TESLA RIDE” PROGRAM LETS RIDERS EXPERIENCE FSD AND GROK AI IN REAL-WORLD DEMOS

The new Tesla Ride program brings supervised Full Self-Driving demos and Grok AI-guided experiences to consumers. Participants will be allowed to sit in the driver's seat while a Tesla Advisor rides in the front as co-pilot. The sessions are capped at 45 minutes each, and participants are required to have a valid driver's license and insurance. The program will run at some locations until the end of December.

ACHIEVING LASTING REMISSION FOR HIV

Researchers have discovered a way to keep HIV under control long-term without constant treatment. Some individuals with long-term HIV eventually produce antibodies that can neutralize the virus. Scientists are now racing to find the most potent broadly neutralizing antibodies and engineer them into a functional cure. Two independent trials have already shown promise, with some participants maintaining undetectable levels of HIV for over a year after treatment without taking antiretrovirals.

HOW GOOD ENGINEERS WRITE BAD CODE AT BIG COMPANIES

For engineers working on self-contained technical projects, the only explanation for bad code is incompetence. Other engineers operate more like plumbers or electricians, working on projects with awkward or surprising parts that are relatively new to them. In these cases, bad code is inevitable, but as long as the overall system works well enough, the project is a success. Engineers don't get to choose the type of work they end up doing - the mistakes made in an unfamiliar system are a deliberate tradeoff being made by the company, not the engineer.

TLDR IndexPage 1