How to Rust, Cursor's vector search dump, Supabase MCP's leak (?), Apache Arrow Summit, and more
Every Friday, we deliver your weekend win: copy-paste tutorial, cost-optimisation technique, CFPs worth your pitch, and fresh ideas from the field. Stop surfing fluff.
🦀 How to Write Idiomatic Rust
David Drysdale’s freely available Effective Rust condenses years of field experience into short, actionable items here:
Six chapters cover types, traits, concepts, dependencies, tooling and beyond—35 focused lessons in total.
Rust’s rigorous type system is the star: if it compiles, it probably works, though newcomers still wrestle with lifetimes and the borrow checker.
Practical advice spans Clippy linting, CI setup and taming dependency creep for production-ready crates.
Our Takeaway: Must-read. Rust is taking over the code.
🔍 Why Cursor Might Dump Vector Search for Plain Text
A LinkedIn post by Jacky Liang from Tigerdata argues that grep-style lexical search beats embeddings for code—and Cursor could follow Claude Code’s lead.
Claude Code uses only exact-match tools like
grepand outperforms Cursor’s vector pipeline for code retrievalThe architects behind Claude Code are joining Cursor, sparking talk of ripping out vectors or relegating them to coarse filtering
Commenters note a broader industry shift: vectors excel at semantic chat, but keyword search wins for structured codebases
Our Takeaway: Expect a renaissance of smarter lexical search in developer tools—embeddings aren’t always the right hammer.
🚨 Supabase MCP’s Can Dump your Private Tables?
A new write-up shows how a single malicious support-ticket message can make Supabase’s MCP dump your private tables.
An attacker embeds SQL-style instructions in a ticket; the Cursor IDE’s LLM agent obediently executes them and posts the results back to the thread.
Because the agent runs with the all-powerful
service_role, it sails past row-level security and can read anything.Fixes proposed: run MCP in read-only mode and add prompt-injection filters to scrub user text before it hits the model.
Our Takeaway: Be extra careful with IAM in the new and evolving era.
💡 Apache Arrow Summit 2025 – CFP Now Open!
Apache Arrow Summit is on 2 Oct 2025 in Paris, hosted by PyData Paris. It’s the place to gather the Arrow community, share what’s coming next, and spark new ideas.
Call for Proposals is open now – submit talks by 26 July
Topics welcome: Arrow internals, ecosystem tooling, real-world use cases, road-map discussions
Meet contributors, users and maintainers face-to-face in the Paris!
Community & Events:
Event: Lakehouse Days — “Real‑time Streaming Ingest” is tomorrow at, AWS Office, Bangalore with speakers from Confluent, AWS, and e6data. Subscribe to the calendar to register early for future events!
We are going to MachineCon USA in the New York City this July 25th!
Hiring: We’re growing! Check out open engineering roles [here].