Senior dev communication 🗣, Canvas hacker ransom 💰, software book club 📚

Q: Instructure paid an undisclosed ransom to ShinyHunters after two Canvas LMS breaches exposed data of

Instructure paid an undisclosed ransom to ShinyHunters after two Canvas LMS breaches exposed data of approximately 275 million users, though experts warn it incentivizes future attacks.

Q: Discord replaced manual ScyllaDB management scripts with the Scylla Control Plane, cutting high-stak

Discord replaced manual ScyllaDB management scripts with the Scylla Control Plane, cutting high-stakes database task times from several days to a few hours.

Q: Agentmemory provides persistent long-term memory for AI coding agents like Claude Code and Cursor, r

Agentmemory provides persistent long-term memory for AI coding agents like Claude Code and Cursor, reducing token consumption by over 90% via a centralized hybrid-search server.

TLDR·Wednesday, May 13, 2026·5 min read

Engineering AI/ML Technology

Share𝕏 in

AI Summary

TLDR Dev's May 13, 2026 issue covers a ransom payment by Instructure after Canvas LMS was breached, exposing 275 million users' data. It also features technical deep-dives on Linux kernel QUIC bugs, Discord's ScyllaDB automation, and opinions on why senior developers fail to communicate. Several new AI and developer tools are highlighted, including Statewright and Agentmemory.

Key Facts

✓Instructure paid an undisclosed ransom to ShinyHunters after two Canvas LMS breaches exposed data of approximately 275 million users, though experts warn it incentivizes future attacks.

✓Discord replaced manual ScyllaDB management scripts with the Scylla Control Plane, cutting high-stakes database task times from several days to a few hours.

✓Agentmemory provides persistent long-term memory for AI coding agents like Claude Code and Cursor, reducing token consumption by over 90% via a centralized hybrid-search server.

Author Takes

SkepticalTLDR Dev

Lights-out AI-generated codebases

Lights-out AI codebases should be treated as a design target requiring new verification infrastructure, not an inevitability — because prompts aren't formal specs and AI-checks-AI pipelines are bolt-on rather than first-class CI.

BearishTLDR Dev

Paying ransoms to hackers

Paying ransoms like Instructure did incentivizes future attacks and offers no absolute certainty that stolen data won't be leaked.

Contrarian Angle

FST - Finite State Transducer (10 MB binary) replacing SQLite (3 GB database)

A Finnish-English dictionary was migrated from a 3 GB SQLite database to a 10 MB FST, reducing storage by 300x by compressing frequent prefix and suffix patterns.

Engineers switching from SQLite (3 GB database) to FST - Finite State Transducer (10 MB binary)

Scylla Control Plane replacing Manual ScyllaDB management scripts

Discord replaced fragile manual ScyllaDB scripts with the Scylla Control Plane, reducing high-stakes task times from days to hours.

Engineers switching from Manual ScyllaDB management scripts to Scylla Control Plane

More from TLDR

Opus 4.7 Fast ⚡, Qwen Image 2.0 🖼️, serverless GPUs ✨

TLDR AI covers the launch of fast mode for Claude Opus 4.7 in research preview, Meta's Muse Spark model powering voice and glasses features, and Googl

May 13

CheckMarx Jenkins Hit ⚙️, OpenAI Daybreak 🤖, Best Western Breached 🏨

This cybersecurity newsletter covers a supply-chain attack on CheckMarx's Jenkins plugin by TeamPCP, a Shai-Hulud npm worm that compromised 42 @tansta

May 13

The Agent Mess Gets Real 🤖, Cyber Gets Autonomous ⚔️, Cloud’s New Pitch 🏗️

This TLDR IT edition covers OpenAI's new Daybreak cybersecurity initiative, a $125M Series B for AI security startup Exaforce, and GitLab's org restru

May 13