Episode Details

Please support this podcast by checking out our sponsors:
- Discover the Future of AI Audio with ElevenLabs - https://try.elevenlabs.io/tad
- Invest Like the Pros with StockMVP - https://www.stock-mvp.com/?via=ron
- KrispCall: Agentic Cloud Telephony - https://try.krispcall.com/tad


Support The Automated Daily directly:
Buy me a coffee: https://buymeacoffee.com/theautomateddaily

Today's topics:

FastAPI and Starlette auth bypass - A critical Starlette bug, BadHost (CVE-2026-48710), can enable authentication bypass via a crafted Host header, impacting FastAPI and many Python APIs using path-based middleware.

AI-generated noise in communities - Developers are increasingly running into copy-pasted AI answers in GitHub, Reddit, and workplaces, eroding trust, accountability, and the value of human discussion.

Raft consensus without majorities - A proposed Raft variant uses overlapping “voting blocs” inspired by finite projective planes to sometimes commit with fewer than a majority—trading classic quorum guarantees for different availability behavior.

DAC cables vs optical links - Direct Attach Copper (DAC) cables remain a cost- and power-efficient choice for short, in-rack networking, especially as higher speeds make optics pricier and more power-hungry for short runs.

Violence, empathy, and game design - An essay argues modern games increasingly frame monster-slaying as an ethical problem, using titles like Shadow of the Colossus and Undertale to challenge default violence mechanics.

Invasive culture-fit interview practices - A candidate describes a “culture fit” interview that felt like a trauma-focused interrogation, highlighting hiring ethics risks—especially at mental health startups.

-Author Frustrated by AI Answers Replacing Real Human Conversations
-Mini Micro virtual “fantasy computer” highlights MiniScript-based coding, built-in tools, and a growing app library
-How Video Games Made Monster-Slaying Feel Like a Moral Dilemma
-A Raft Variant That Can Make Progress With a Carefully Chosen Minority Quorum
-Critical Starlette “BadHost” Flaw Enables Host-Header Authentication Bypass
-Cloudflare launches Flagship feature flag service with Workers and OpenFeature support
-Guide Details How to Use Claude Code as a Verifiable, Configurable Engineering Agent
-Engineer Says Culture-Fit Interview Turned Into Invasive Trauma Screening
-Explainer: What Direct Attach Copper (DAC) Cables Are and Why Data Centers Use Them


Episode Transcript

FastAPI and Starlette auth bypass
First up, security: researchers disclosed a critical Starlette vulnerability nicknamed “BadHost,” tracked as CVE-2026-48710. The short version is that Starlette can build parts of request URLs from the Host header in a way that some