Programming

The latest Programming headlines, aggregated and deduped from public feeds across the web. See the sources.

Hacker News · 1h ago · 17 points

What algorithm did Windows XP use to choose your initial user picture?

Hacker News · 2h ago · 57 points

Which GPU Do You Need for AI? A Practical VRAM Guide

Learn how to choose the right GPU for LLMs, RAG, image and video generation by comparing VRAM requirements, performance and cost.

HackerNoon · 1h ago

What Do GEO and Linguistics Have in Common? Mapping Every Question a Blog Post Hasn't Answered Yet

A note on what this is: this article describes an independent, self-run experiment, not a peer-reviewed study. The linguistic and marketing claims that come from published research are cited below. The claims about the question matrix, the categorization results, and the saturation curve are my own findings, based on a dataset and pipeline I built myself. I've tried to flag clearly, section by section, which is which, and what a reader would need to reproduce each part. Why This Started: Predict

DEV Community · 23m ago

Anthropic gives EU cybersecurity agency ENISA testing access to Mythos 5 after months of talks that began in late May; ENISA still lacks access to Mythos 5.1 (Gian Volpicelli/Bloomberg)

Gian Volpicelli / Bloomberg: Anthropic gives EU cybersecurity agency ENISA testing access to Mythos 5 after months of talks that began in late May; ENISA still lacks access to Mythos 5.1 — Anthropic PBC has handed the European Union's cybersecurity agency access to its powerful Mythos artificial intelligence model …

Techmeme · 49m ago

Why We Abandoned Satellite Imagery for an On-Device Procedural Sky

A working Himawari satellite pipeline produced the wrong view for Amana, so its developer replaced it with an on-device procedural sky.

HackerNoon · 1h ago

Building a Front-End System That Can Still Make Sense Ten Years From Now

Also available in Español Open a codebase old enough that nobody currently on the team wrote it. The code still runs. Nobody can tell you why any particular decision was made the way it was. Was that specificity workaround intentional, or an accident someone patched around? Was that reset choice deliberate, or just whatever the starter template shipped with? The code doesn't say. It never did. What's missing isn't functionality. It's the ability to reconstruct a reason. Teams optimize for what w

DEV Community · 23m ago

I think I hate the internet

Hacker News · 5h ago · 67 points

Sources: Moonshot AI is exploring dual Hong Kong and Shanghai listings for greater capital and exposure, amid the weaker performance of AI stocks in Hong Kong (Coco Feng/South China Morning Post)

Coco Feng / South China Morning Post: Sources: Moonshot AI is exploring dual Hong Kong and Shanghai listings for greater capital and exposure, amid the weaker performance of AI stocks in Hong Kong — Moonshot's exploration of dual listings may stem in part from the weaker performance of AI stocks in Hong Kong, the sources said

Techmeme · 53m ago

Your Video Call Isn’t A Classroom. Here’s What It Is.

Flexible Classroom (the desktop build) and see how far a .env file and an afternoon could actually get me. It got me further than expected. This is the walkthrough I wish I'd had going in: what Flexible Classroom actually is, the exact steps that got it running locally, and, because a working demo isn't the same as a reason to use it, where this kind of setup earns its keep in the real world. Flexible Classroom isn't a video-call widget you drop into a page. It's a pre-built classroom UI, with l

DEV Community · 28m ago

Startup Founder Interview: SparkVox Turns Founder Recordings Into LinkedIn Content They Sound Like

SparkVox, featured on HackerNoon, turns founder recordings from audio into authentic LinkedIn posts using AI trained on each founder's voice & editorial style.

HackerNoon · 2h ago

DeepSeek v4.1 Flash

Hacker News · 5h ago · 425 points

Building an AI Lead Response System with n8n + OpenAI

Businesses lose potential customers every day simply because they don't respond quickly enough. A customer submits a form, sends a message, or requests information — but the business may take hours to respond. By then, the customer may already have contacted a competitor. In this tutorial, we'll build an AI-powered lead response system using n8n + OpenAI that can automatically process new leads, understand their intent, generate personalized responses, and trigger follow-ups. What We're Building

DEV Community · 29m ago

DeepSeek debuts DeepSeek-V4.1-Flash, its smallest model built on a new Causal Encoder-Decoder architecture, with 552B backbone parameters and 1M-token context (Reuters)

Reuters: DeepSeek debuts DeepSeek-V4.1-Flash, its smallest model built on a new Causal Encoder-Decoder architecture, with 552B backbone parameters and 1M-token context — Chinese artificial intelligence startup DeepSeek on Thursday launched DeepSeek-V4.1-Flash, which the company said is the smallest model …

Techmeme · 1h ago

Remotely access Home Assistant via Tailscale for free

Learn how to set up Tailscale with Home Assistant for secure remote access using Serve, HTTPS, exit nodes, and subnet routing without opening ports.

HackerNoon · 2h ago

OpenAI have no mathematicians capable of understanding what they put out

Hacker News · 6h ago · 27 points

Adding a remote MCP server to a Next.js app, OAuth and all

Most "add MCP to your app" posts stop at stdio: a local process, a config file, remote I shipped one for Deoochform, a form builder where the Here is the whole thing, Next.js 16 App Router, no framework beyond the official Four HTTP surfaces: POST /api/mcp: the MCP endpoint itself. GET /.well-known/oauth-protected-resource/api/mcp: "here is who authorizes me". GET /.well-known/oauth-authorization-server: "here are my OAuth endpoints". /authorize, /token, /register: the OAuth endpoints themselves

DEV Community · 29m ago

Letter: the Senate disaster management subcommittee, led by Sen. Josh Hawley, is probing OpenAI's handling of the Hugging Face breach, calling it "reckless" (Axios)

Axios: Letter: the Senate disaster management subcommittee, led by Sen. Josh Hawley, is probing OpenAI's handling of the Hugging Face breach, calling it “reckless” — A Republican-led Senate subcommittee that oversees disaster management is investigating OpenAI's handling of the Hugging Face breach in July, Axios has learned.

Techmeme · 1h ago

How Spynn Is Getting Founders Into Forbes Without A Publicist

Spynn offers founders guaranteed placement in publications such as Forbes without traditional PR retainers, shifting the risk from clients to the agency.

HackerNoon · 3h ago

Why IPTV Streams Keep Dying: A Technical Deep-Dive into m3u8 Protocols and Automated Maintenance

Why IPTV Streams Keep Dying: A Technical Deep-Dive into m3u8 Protocols and Automated Maintenance The Short Answer IPTV sources don't fail because of "poor quality." They fail due to fundamental protocol design constraints. Understanding why is the only way to build a system that actually stays working. IPTV services from Chinese carriers (China Telecom, China Unicom, China Mobile) use IGMP multicast at the network layer. Multicast works like this: the stream is sent once, and all subscribers in

DEV Community · 33m ago

OpenAI might have stolen another major proof

Hacker News · 6h ago · 202 points

What Happens to Your Data After You Hit Allow

Tapping allow is just the start. Learn what really happens to your data afterward, from storage and reuse to third party sharing and deletion rules.

HackerNoon · 4h ago

A look at why the oft-discussed predictions that AI will deliver double-digit GDP growth in advanced economies are extremely unlikely over the next 10-15 years (Ghosts of Electricity)

Ghosts of Electricity: A look at why the oft-discussed predictions that AI will deliver double-digit GDP growth in advanced economies are extremely unlikely over the next 10-15 years — The following post represents the personal views of the author(s) and does not reflect or represent the positions of their employers.

Techmeme · 4h ago

14 y/o from Pakistan. Here is everything about me. Who I Am and How I Work.

Who I Am My name is Sumama Jameel. I am 14 years old. I live in Karachi, Pakistan. I study at Tameer-e-millat model school, in Karachi. I am a product architect and builder. I design systems, make plans, research market, define architectures, set constraints, and direct AI to build the software. I have shipped nine products this way. Every system I have built exists because I understood the problem, designed the solution, and executed it through the most efficient way possible. Email: sumamajami

DEV Community · 33m ago

Introducing "Token Proof of Work"

A proposal for stopping AI agent spam without CAPTCHAs — by making every submission cost real tokens and real time, Bitcoin-style.

HackerNoon · 4h ago

The AI boom is fueling a resurgence in VC bets in "moonshot" sectors such as BCI; Dealroom says non-AI deeptech funding has topped $150B since the start of 2024 (Tim Bradshaw/Financial Times)

Tim Bradshaw / Financial Times: The AI boom is fueling a resurgence in VC bets in “moonshot” sectors such as BCI; Dealroom says non-AI deeptech funding has topped $150B since the start of 2024 — Tech investors are rediscovering the kind of long-shot sci-fi bets that helped build Silicon Valley.

Techmeme · 4h ago

What the X API actually costs an LLM agent, per tool call

There is no free tier on the X API any more. For new developers the subscription tiers are gone and it is pay per use: you load credits in the developer console and every request eats them in real time. Legacy Basic and Pro survive for accounts that already had them, Enterprise starts around $42,000 a month, and everyone else gets credits. That is fine for a script you wrote and can read. It is a different problem when the thing making the calls is a language model that decides for itself how ma

DEV Community · 34m ago

Why TDE SQL Server Restores Fail on Amazon RDS

Learn why TDE-encrypted SQL Server backups fail on Amazon RDS and how to migrate certificates correctly using S3, KMS, and RDS procedures.

HackerNoon · 4h ago

Sources: Grab is in talks to buy a majority stake in Advance Intelligence Group's Singapore-based BNPL platform Atome Financial at a $2B+ valuation (Bloomberg)

Bloomberg: Sources: Grab is in talks to buy a majority stake in Advance Intelligence Group's Singapore-based BNPL platform Atome Financial at a $2B+ valuation — Grab Holdings Ltd., the biggest ride-hailing and food-delivery firm in Southeast Asia, is in talks to buy a majority stake in Singapore-based buy …

Techmeme · 4h ago

eIDAS 2.0 Is Coming for Document-Based KYC: What a Credential-Ready Stack Actually Needs

Most KYC platforms verify a person by scanning a document: OCR the passport, check the security features, compare the photo, done. eIDAS 2.0 and the EU Digital Identity Wallet are built around a different object entirely a cryptographically signed credential that a user holds and presents, verified by checking a signature and a trust chain, not by inspecting a photo of a physical ID. Those are two different verification models, and the regulatory timeline that forces the switch is no longer theo

DEV Community · 41m ago

Chatbots Remember Facts. I’m Building One That Remembers Becoming

Evo explores developmental AI memory, tracking how humans and AI companions change together over time, not just what they remember.

HackerNoon · 4h ago

How Amazon's Zoox, which has ~100 AVs in its fleet, is utilizing social media influencers, community events, and ad campaigns to compete with Waymo in SF (Emmy Martin/New York Times)

Emmy Martin / New York Times: How Amazon's Zoox, which has ~100 AVs in its fleet, is utilizing social media influencers, community events, and ad campaigns to compete with Waymo in SF — The Amazon-owned driverless car company is a distant second to Waymo. Its pitch to riders? Wine pop-ups, festival sponsorships and a car built to be filmed.

Techmeme · 4h ago

Building a Fast Multi-Source Music Discovery Pipeline with FastAPI

When building TheExperience, I wanted the application to do more than search for albums. The idea was to take an album search and turn it into a complete interactive experience starting from finding the album, retrieving reliable metadata, resolving its artwork, extracting its visual identity and finally using the information to drive the frontend. The challenge was that no single API provides everything I needed. The backend integrates Last.fm, MusicBrainz, and the Cover Art Archive, each with

DEV Community · 42m ago

I Built a Dream Journal for My Oura Ring — Here's What an n=1 Sleep Experiment Looks Like

I connected Oura sleep data with a dream journal to explore whether dreams, HRV, REM sleep, and recovery reveal useful personal patterns.

HackerNoon · 4h ago

GitHub Actions triggers EAS builds when EXPO_TOKEN and non-interactive flags are set

Local builds must succeed before CI can be honest GitHub Actions cannot invent EAS credentials, bundle identifiers, or build profiles for you. Expo's own CI guide starts with a blunt prerequisite: run a successful eas build from your machine for every platform you want CI to support, so the CLI can finish interactive setup once. That local run creates the EAS projectId, writes eas.json profiles, fills critical app config fields such as the Android package and iOS bundle identifier, and creates t

DEV Community · 42m ago

Chinese tech giants are hiring skilled professionals as specialized AI trainers to build high-quality datasets, mirroring efforts by US platforms like Mercor (Viola Zhou/Rest of World)

Viola Zhou / Rest of World: Chinese tech giants are hiring skilled professionals as specialized AI trainers to build high-quality datasets, mirroring efforts by US platforms like Mercor — Squeezed by a stagnant economy and state directives, China's underemployed lawyers, architects, and engineers are taking cheap gig work …

Techmeme · 5h ago

The Absurdity of High Commissions: Why Marketplaces Need to Move Beyond the Transaction Fee

High marketplace commissions are creating real conflict. Alexey Grushko explains why Marketplace 3.0 may move beyond transaction fees.

HackerNoon · 4h ago

We're launching our LLM gateway with observability, evaluators and git-like prompt management.

We've spent the last few months building Infere, an AI routing and observability platform, and today we're putting it in front of real developers. We'd love for you to be the ones to stress-test it. It started the way these things usually do, we were annoyed. Every AI feature we built meant another provider SDK, another auth quirk, another error format, another dashboard we'd have to open to find out what anything cost. Switching a model was a sprint. Nobody could answer "what did the support bo

DEV Community · 43m ago

Q&A with AI researcher Jacob Coxon, who quit Anthropic, on the need for industry-wide, international coordination to limit recursive self-improvement, and more (Maxwell Zeff/Wired)

Maxwell Zeff / Wired: Q&A with AI researcher Jacob Coxon, who quit Anthropic, on the need for industry-wide, international coordination to limit recursive self-improvement, and more — Jacob Coxon talks to WIRED about the “mini Manhattan project” inside Anthropic, the problem with alignment …

Techmeme · 5h ago

When Random Bugs Point to a Bigger Product Problem

Repeated bugs, flaky tests, and support issues may point to the same weak area. Learn why teams should map patterns instead of only closing tickets.

HackerNoon · 4h ago

We built an AI that presents your deck in the meeting. Here is what broke first.

Most "AI presentation" tools stop at the deck. You give them an outline, they give you slides, and then a human still has to stand up and perform those slides, again and again, on every call. That last step is the expensive one, and it is the one nobody was touching. So we built Hannah. She is an AI presenter who joins your Teams, Google Meet or Zoom call as a participant, presents the deck on camera, reacts when someone addresses her by name ("Hannah, next slide", "Hannah, go deeper on pricing"

DEV Community · 50m ago

Sources: Chinese AI chipmakers Huawei, Cambricon, MetaX, and Iluvatar CoreX have raised prices for current and next-gen chips by 20%-50% due to rising HBM costs (Reuters)

Reuters: Sources: Chinese AI chipmakers Huawei, Cambricon, MetaX, and Iluvatar CoreX have raised prices for current and next-gen chips by 20%-50% due to rising HBM costs — Chinese AI chipmakers including Huawei Technologies [RIC:RIC:HWT.UL] and Cambricon (688256.SS) have sharply raised prices …

Techmeme · 5h ago

Your AI Video Model Just Got Retired. Here's How to Keep Your Pipeline From Breaking Next Time.

Runway retired two AI video models overnight in 2026. The habits that keep an AI filmmaking pipeline from breaking when a provider updates its models.

HackerNoon · 4h ago

Designing an explainable sync ledger for watch state across media servers

Watch-state synchronization looks simple until the same episode has four provider identities, a rebuilt library, a delayed webhook, and a user who watched it twice. A boolean watched flag is not enough to explain what happened. A useful sync system needs a canonical record, an event lifecycle, per-destination evidence, and a recovery path that a person can understand. A destination can be behind, unavailable, ambiguous, or based on a different item identity. Treating the latest provider response

DEV Community · 51m ago

Sources including French public officials detail how Mistral's rise over the past three years owes much to the privileged relationship it built with Macron (Océane Herrero/Politico)

Océane Herrero / Politico: Sources including French public officials detail how Mistral's rise over the past three years owes much to the privileged relationship it built with Macron — Mistral has forged unrivaled ties with the French presidency. Now, Emmanuel Macron is departing. — in Paris

Techmeme · 6h ago

Release Engineering for AI Features: Rollouts, Rollbacks, and Runtime Risk

AI features change without code changes. Learn how release teams can manage staged rollouts, rollback paths, model drift, and runtime risk safely.

HackerNoon · 4h ago

nixamp 0.9: a server that names itself, and a CNN feed that stopped talking

nixamp 0.9: a server that names itself, and a CNN feed that stopped talking A day of nixamp releases, 0.7.36 through 0.9.3. It started with a bug report ("I see CNN but get no audio or video, and the graph is moving") and ended with servers that get their own DNS name and certificate without anyone touching a registrar. CNN had been on the air for twelve hours and showed nobody anything. The graph moved because it was the server's own player mirrored over SSE, not the channel. On the box, the ff

DEV Community · 53m ago

OpenAI Foundation board member Paul Christiano says the AI industry is currently not on track to reduce the acute loss-of-control risk to an "acceptable" level (Paul Christiano/@paulfchristiano)

Paul Christiano / @paulfchristiano: OpenAI Foundation board member Paul Christiano says the AI industry is currently not on track to reduce the acute loss-of-control risk to an “acceptable” level — I am excited to be joining the OpenAI nonprofit board, serving on the Safety and Security Committee to support safety oversight.

Techmeme · 6h ago

DevOps Metrics That Actually Matter: DORA, MTTR, and Beyond

Discover the key DevOps metrics that truly drive success, including DORA, MTTR, and more.

HackerNoon · 4h ago

Function coloring is real and pretending context propagation isn't infection

Someone recently attempted to make the bold claim that function color isn't a real phenomenon. Unsurprisingly, the internet had a field day with that. An essay went viral on this topic, cross-language, bringing Go, Rust, and Zig into the conflict. The argument: coloring is a non-issue conceptually. Bob Nystrom actually first introduced the concept of "function coloring" in February 2015. His article "What Color is Your Function?" described async functions as red and sync functions as blue (even

DEV Community · 55m ago

OpenSpec Wasn’t Enough: How AIDLC Fixed Our AI Coding Workflow

AI made coding faster but debugging worse. Learn how AIDLC helped one team improve code quality with dynamic workflows and human approval gates.

HackerNoon · 4h ago

I Built a Voice-Based Daily Reflection Companion under 15 Minutes Using Agora Agents SDK

I expected to spend a weekend on working on my vision. Instead, I had a voice agent asking me "How was your day?" in under 15 minutes. What surprised me most wasn't the speed - it was that when I interrupted the voice AI agent I named "Compass" mid-sentence to change my answer, she just stopped and listened. No stuttering, no doubled audio, no ghost speech finishing in the background. It just worked, out of the box, without a single line of interruption-handling code on my end. If you've tried t

DEV Community · 56m ago

AI Made Coding Faster—So Why Did Software Delivery Get Slower?

AI sped up coding, not delivery. Here is where the bottleneck actually moved, and what engineering leaders should measure instead of coding speed.

HackerNoon · 4h ago

Claude Fable 5.1 + GPT-6 Astra: Two Coding Agents, One Workflow

A coding agent can write a patch, explain why it is correct, and then review its own work. What I wanted was a second agent that could investigate the same problem before seeing the first agent's explanation—and then challenge it with evidence. So I built OMP Tandem: an open-source bridge that gives your coding agent an independent AI peer through Oh My Pi. One example pairing is Claude Fable 5.1 in Claude Code, with GPT-6 Astra as the OMP peer. You keep the coding environment you already use, c

DEV Community · 58m ago

Seven Sign-Ups, Zero Catches: What My Fishing App Launch Taught Me

We launched in 177 countries and nothing happened. Seven sign-ups, all gone within a day. The gate log showed they were not idle - they were refused.

HackerNoon · 4h ago

Uptime Kuma: Why HTTP 200 Can Hide a Broken App

Uptime Kuma can show UP while your endpoint reports a failed dependency. If the endpoint still answers HTTP 200, add a check for the specific response field that matters. A broad keyword such as ok can miss the failure too. The example below uses four small test responses and records what 12 real Uptime Kuma monitors reported. Use it before trusting the green badge on a self-hosted app or a service you just shipped. Source checks and local experiment: September 9, 2026. Tested with Uptime Kuma 2

DEV Community · 1h ago

NeoHorse-1-4B: A 4B Model Built for AI Agents and Tool Use

Explore NeoHorse-1-4B, a Qwen3.5-based 4B model built for AI agents, tool use, coding, instruction following, and long-context tasks.

HackerNoon · 4h ago

DelegatingHandler Magic: Build a Pipeline for Your HTTP Calls

What's up, .NET devs! 👋 Today I want to show you one of the most underrated features in HttpClient — the DelegatingHandler pipeline. It's like middleware for your HTTP calls! Think of DelegatingHandler as a chain of interceptors. Every HTTP request passes through each handler, and every response comes back through the same chain (in reverse). 🔗 Fun Fact: The handler pipeline is modeled after the "Chain of Responsibility" design pattern from the Gang of Four book! Request: Client → Handler1 → H

DEV Community · 1h ago

Silent HMAC Key Contamination: Uncovering a Logic Flaw in Burp's JWT Editor Extension

JWT Editor was shortlisted for “Best Auth & Access Control” in PortSwigger’s 2026 Burp Suite Extension Awards. This is the story of finding a silent bug inside.

HackerNoon · 5h ago

App Store IPA Upload Automation: .p8 Key Auth and CI/CD Integration in Practice

On release day, the most annoying step is the manual upload: the build machine produces the package, but a human still has to open the upload tool, pick the file, enter credentials, and watch the progress bar—then do it all over again if the network hiccups. Worse, these operations live on individual laptops, so handing off to someone else means walking them through the process again. To wire "upload the IPA" into CI/CD, the first thing to solve is actually authentication—letting a machine in th

DEV Community · 1h ago

What Zero Dependencies Actually Meant for RepoX-Ray

## What Zero Dependencies Actually Meant for RepoX-Ray When we started building RepoX-Ray for Zero Dependency 2026, I thought zero dependency mainly meant one thing: Don't install any packages. I quickly realized it meant much more than that. RepoX-Ray is a CLI tool that scans repositories for security, dependency, Git, configuration, and code-quality issues. Normally, we would probably reach for packages like GitPython, Click, Pydantic, or pytest. Instead, we had to ask: “What can Python's stan

DEV Community · 1h ago

Chronos-2, CLIP, and MobileNetV3: three production AI models for non-text workloads

When I sort the model catalog at aiappdex.com by total downloads, the 15th most downloaded model processes time-series data. The 14th handles zero-shot image classification. The 16th runs on hardware with under 3M parameters. None of them generate text. Three models from that tier deserve attention — not because they're new, but because the download numbers say someone is shipping them in production: Model Downloads Task Chronos-2 25,699,844 time-series-forecasting CLIP-vit-base-patch32 19,936,7

DEV Community · 1h ago

Turn a Repeated Mistake Into a Check

A reminder lives for one session, a rule lives while it is read, a check lives in the tooling. 👋 I'm Anton - a software engineer working mostly in PHP/Symfony and Go, currently carving a live github.com/brilliant-almazov. The thought I want to share is small and slightly uncomfortable: the only place a rule reliably As before: these are my habits on one codebase, not advice for yours. The mistake is boring. Someone writes, by hand, a copy of something the tree already has as a Not "similar func

DEV Community · 1h ago

How systematic review catches the GitHub Actions assumptions authors can't see

The conclusion I reached this week: when I changed my YouTube video pipeline from a daily cadence to three times per week, a Codex review found four defects. A second review, run the next day after I fixed those four, found four more. All eight fell into the same category. I had built assumptions about external system behavior directly into the code, and I couldn't see them because I built the system knowing how it was supposed to work. A reviewer who doesn't share that knowledge can ask questio

DEV Community · 1h ago

macOS has no public API for screen brightness

Try to write a Mac app that changes the screen brightness. Not reads it — changes it. You will find nothing in AppKit, nothing in Quartz, nothing in ScreenCaptureKit. NSScreen will tell you a display's colour space, its frame, its refresh rate, and its maximum EDR headroom. It will not let you dim it. This is not an oversight that has gone unnoticed for a year. It is the state of the platform, and working around it teaches you something about what "private API" actually costs. On Intel Macs the

DEV Community · 1h ago

My reproducible Erlang playground with Nix

I started learning Erlang and wanted somewhere to keep the small programs and experiments I write along the way. Since I also prefer to manage my project's system dependencies with Nix, I created a small Nix development shell to pin them. For now, it contains little more than Erlang itself. The repository for the playground is available on GitHub. There are two main parts: flake.nix, which defines the Nix development environment lyse/, which contains a few programs I've written while working thr

DEV Community · 1h ago

Machine Learning for Customer Churn Prediction: What Actually Works

Some of your customers are leaving because you called them A retention call reminds someone their contract is ending. It prompts a price comparison they had not thought to run. It reopens a complaint they had let go. For a slice of your base, being contacted is what triggers the exit. That group sits on the same list as everyone you intend to save, and a model ranked by churn probability cannot separate them out. This is the flaw at the centre of most churn programmes, and it is not a modelling

DEV Community · 1h ago

Seat-based AI tooling has an idle capacity problem nobody budgets for

If your company buys per-seat AI coding subscriptions, you are almost certainly paying for a lot of capacity that expires unused every week, while some of your engineers hit their limit on Tuesday. Both things are true at once, and that combination is what makes it a distribution problem rather than a spending problem. Usage is bursty and it correlates with role in a way that seat allocation does not. Someone mid-migration will saturate a subscription for two weeks and then barely touch it for a

DEV Community · 1h ago

Regímenes de mercado con Hidden Markov Models: un score de riesgo que bate al buy-and-hold

Los mercados no se comportan igual todo el tiempo. Hay periodos de calma alcista, periodos neutrales y periodos de pánico. El problema es que ese "régimen" es un estado oculto: no viene etiquetado en los datos, solo lo intuimos por cómo se comportan los retornos y la volatilidad. Es el escenario perfecto para un Hidden Markov Model. Quería un score de riesgo en tiempo real que no se limitara a mirar la volatilidad pasada, sino que identificara en qué régimen está el mercado ahora y ajustara la e

DEV Community · 1h ago

Data Quality Checks That Catch Real Web Scraping Failures

A scraper can run successfully and still give you bad data. The HTTP request returns 200, your parser finds elements, the job writes rows, and nobody notices that price now contains the text from a promo banner because the site changed a CSS class. That is the annoying part of scraping: failure often looks like success until someone uses the dataset. The first mistake is storing whatever the page gives you and cleaning it later. That works for one-off scripts. It breaks down when you run scraper

DEV Community · 1h ago

6 Best AI Pentesting Tools in 2026

AI pentesting tools are changing how organizations validate security weaknesses. Instead of relying only on periodic manual assessments or vulnerability scanners, security teams can now use autonomous or agentic systems to test applications, APIs, infrastructure, identity, and cloud environments more frequently. The strongest platforms go beyond detection. They attempt exploitation, verify findings, reproduce attack paths, and help teams confirm remediation worked. But these products are not int

DEV Community · 1h ago

What Actually Changed for Bots

GitHub: https://github.com/abrownfox0/abrownfox001-twap60-prediction-trigger-system YouTube walkthrough: https://www.youtube.com/watch?v=XzhugRL6BV4 Live profile: https://polymarket.com/@abrownfox001 This is part 1 of a 5-part series on the latest Polymarket platform changes and the tech work they force on short-horizon bots. Part 1 — The change map (this post) Part 2 — TWAP60 settlement: what a 5m engine must pin Part 3 — Taker delay, rate limits, and execution reality Part 4 — Combos, APIs, an

DEV Community · 1h ago

Our MCP server was fine. Cloudflare was returning HTML.

This is what our MCP endpoint returned to a client speaking JSON-RPC: HTTP/2 403 content-type: text/html; charset=UTF-8 server: cloudflare Attention Required! | Cloudflare Please enable cookies. Sorry, you have been blocked A program was being asked to enable cookies. We did not see that for three days, because that is not what the client reported. The client reported a parse failure, and a parse failure points at your own serialization, not at a machine four thousand kilometres away. The connec

DEV Community · 1h ago

An AI-generated login endpoint "works" - I still found SQL concatenation before launch

Functional tests passing is not the same as code being safe to ship. Here is a reproducible case: an AI-generated login endpoint that behaves correctly, the scan finding I checked before launch, and the fix that made the pattern disappear. This is a local demo equivalent of a login endpoint, not live production code and not a client project: username = request.form.get("username", "") password = request.form.get("password", "") sql = f"SELECT id FROM users WHERE username = '{username}' AND passw

DEV Community · 1h ago

A release manifest for generated audio and ad images

Generated media needs a release record just as much as application code does. When a team cannot tell which script produced an audio file, or which approved offer belongs to an image, the problem usually appears during review rather than generation. Disclosure: This article was created with AI assistance. It describes a proposed engineering workflow, not measured results from a production deployment. I am an independent ElevenLabs and AdCreative.ai affiliate; the optional links at the end may ea

DEV Community · 1h ago

How I Built a Local Silence Remover That Processes a 5GB Audio File in Under 6 Minutes

VoxCut is a dedicated silence remover for audio and video: it automatically detects and cuts silent pauses — dead air, long breaths, gaps between takes — from podcasts, interviews and recordings. Unlike full editors that bundle silence removal as one feature among many, it does this one job, entirely on your device. I want to walk through the actual engineering problem behind it, because "remove silence from audio" sounds trivial until someone hands you a 72-hour, 5GB recording and expects it ba

DEV Community · 1h ago

Build a Keyword-Based Resume Analyzer with FastAPI and React

Job seekers often compare their resumes with job descriptions to understand which technical skills overlap and which ones are missing. Doing this manually becomes repetitive when applying for several roles. In this tutorial, you will build a full-stack application that performs this comparison using transparent, rule-based keyword matching. The application lets a user sign up, log in, upload a PDF resume, and paste a job description. It extracts recognized technical skills from both texts and re

DEV Community · 1h ago

5 common TypeScript interview questions

These five questions show up in almost every TypeScript interview. They're not tricky syntax puzzles. They test whether you understand the type system well enough to use it on purpose instead of just making the compiler happy. any vs unknown any turns type checking off. Once a value is any, TypeScript stops protecting you and mistakes slip through until runtime. unknown is the safe counterpart: it can hold anything, but you must narrow it before using it. const a: any = "hello"; a.toUpperCase();

DEV Community · 1h ago

codsh 0.22.1 — /ship grill cards wrap long questions (DeepSeek terminal agent)

DeepSeek-native terminal coding agent; /ship one sentence → verified code. 0.22.1: grill card wraps long questions fully (no 2-line ellipsis clip); sync dsh packages to 0.1.5-rc.1 Install: npm i -g @deepseek-ai/dsh codsh-cli && codsh Links: GitHub · Docs · npm codsh-cli Not a Claude Code env wrapper. Feedback and a star are always appreciated.

DEV Community · 1h ago

A futuristic Bloomberg-inspired smart-money intelligence terminal for Solana wallets

🪐 Smart Wallet Terminal Track influencers, smart-money wallets, top profit leaders, and whales from one animated terminal dashboard. Features • ** Smart Wallet Terminal** is a Python terminal application that transforms 's smart-money wallet feeds into a live, keyboard-controlled market intelligence dashboard. The interface is designed around the visual language of professional financial terminals: High-density wallet tables Bright market-status colors Animated loading and printing effects Live

DEV Community · 1h ago

AI Dev Weekly #25: GPT-6 Astra Arrives, Kotlin Agents Reach 1.0, Copilot Adds Enforced Permissions

AI Dev Weekly is a Thursday series where I cover the week's most important AI developer news, with my take as someone who actually uses these tools daily. Four different layers of the agent stack changed this week. OpenAI introduced GPT-6 Astra for the hardest tool-rich work. Google made its Kotlin agent framework production-ready. GitHub gave enterprise administrators permissions that local settings cannot weaken. And NVIDIA released a local inference router that spreads independent agent calls

DEV Community · 1h ago

AI agents in Rails, for a business that actually has customers

Originally published on gkosmo.eu. An agent is a background job that gets to call a few methods I have been putting this post off for months. Partly because "AI agents" is a phrase that makes me tired, and partly because most of what I read about it is either a demo that writes haikus or an architecture diagram with eleven boxes. Here is what I actually run. It's small. You can paste it into a Rails app this afternoon. The gems are rcrewai and rcrewai-rails. I maintain both and I use them on nak

DEV Community · 1h ago

Designing a Testable Image-to-Video Prompt Workflow

Designing a Testable Image-to-Video Prompt Workflow For a browser-based starting point, Photogenerator.ai brings image and video creation into one workspace. AI video interfaces often look simple: upload an asset, enter a prompt, click generate. The hard part is not the button. It is defining a contract for what the input controls, what the prompt controls, and what the reviewer is expected to accept. This post is an interface-level design memo. It does not infer a vendor's source code, backend,

DEV Community · 1h ago

Mathematicians, OpenAI, and a $1m Problem

Two proofs went public this week. The dispute is about affiliation, not mathematics. The Navier-Stokes equations mathematically describe how fluids move, and there's been a $1m bounty on proving their solutions since 2000. Twenty-six years later, those tough math problems became the subject of a complicated discussion on ownership in the age of AI. On September 8, Tristan Buckmaster, Levent Alpöge, and Matei Coiculescu published proofs showing that several closely related equations, including 3D

DEV Community · 1h ago

Building Perisai: the app that does the maths your lender hopes you won't

A story about online loans, one very confused calculator, and five apps pretending to be someone they're not. Imagine you borrow Rp1.000.000 from an app on your phone. That's the number on the contract. But when the money lands in your account, it's only Rp800.000. The app kept Rp200.000 as an "admin fee." Fine, whatever. Thirty days later, the app says you owe Rp1.300.000. Most people look at that and think: steep, but I'll manage. Here's what it actually is. You received Rp800.000 and paid bac

DEV Community · 1h ago

Set up Astro with Svelte, Tailwind CSS, Vercel, Prettier, and TypeScript

I use Astro with Svelte for interactive components, Tailwind CSS for styling, and Prettier to keep formatting consistent. This guide walks through the project setup, strict TypeScript checks, and a static deployment to Vercel. Before you begin, make sure you have the following on your machine: Node.js 22.12.0 or higher (odd-numbered releases are not supported) Visual Studio Code with these extensions: astro-vscode, prettier-vscode, svelte-vscode, and tailwindcss-intellisense That's it. Astro nee

DEV Community · 1h ago

Your coding agent finished. Now find the PR, the preview, and the right session.

The agent says it fixed the checkout bug. You still need to find the pull request, read the diff, check the build, and open the right preview. Tomorrow, you need to remember which conversation contains the fix. That last part is easy to underestimate. A useful agent session is a record of decisions, failed attempts, commands, and follow-up questions. Losing it means reconstructing work you've already done. I built Cogpit to keep that work together. It's a free, open-source GUI for Claude Code, O

DEV Community · 1h ago

Stop spawning an MCP server per agent session (and what it won't fix)

Ten parallel Claude sessions. Ten copies of the same MCP server. Ten processes, ten sockets to the same upstream, ten holders of the same lock — because that is what stdio means. I moved every server to one shared daemon per machine bound to 127.0.0.1, and the fleet stopped fighting itself. TL;DR: an MCP server registered as stdio is spawned per client session. Register it as an HTTP/SSE URL instead and every session shares one process. It saves memory, sockets and locks. It does not save tokens

DEV Community · 1h ago

Turning a list of company websites into a contact list with a plain HTTP crawl

Anyone who has done outbound sales or recruiting knows this task. You have a list of company websites and you need the contact info off each one. Open the Contact page, copy the email, check LinkedIn, move to the next site. A 50 domain list eats most of an afternoon done by hand. Give it a start URL and it crawls within that same domain, up to a depth you choose, using Crawlee's CheerioCrawler. On each page it checks for: Email addresses in the raw HTML Phone numbers Social profile links (Linked

DEV Community · 1h ago

7 Free Jira Alternatives for Software Teams in the Agent Era

I’ve used enough project management tools to know that the hardest part usually isn’t creating a board. It’s keeping the board useful once the project gets busy. Tasks multiply, priorities change, developers open issues, product requirements evolve, and eventually the project management tool becomes another thing the team has to maintain. Jira has been around this problem for a long time. It gives software teams a structured way to manage issues, sprints, backlogs, workflows, and releases. But s

DEV Community · 1h ago

The AI Race Is a Governance Problem Before It Is a Superintelligence Problem

This week, a researcher who said he spent three years working at OpenAI and Anthropic resigned publicly and warned that leading labs are moving too quickly toward systems that may become difficult to control. His warning is his own assessment, not a prediction anyone can prove today. But it raises a question that engineering teams should not wait to answer: What evidence do we have of what our AI systems are actually doing? The long-term debate is about increasingly capable and autonomous system

DEV Community · 2h ago

App Store Submissions Now Open for iOS 27, macOS 27, and Other OS Releases

Apple has announced that developers can now submit their apps and games to the App Store, leveraging the new features and innovations in iOS 27, iPadOS 27, macOS 27, tvOS 27, visionOS 27, and watchOS 27. These updates include capabilities like Apple Intelligence and the Foundation Models framework. Developers are encouraged to download the Xcode 27 Release Candidate, build their applications with the latest SDKs, test them using TestFlight, and then submit for review. A key change for macOS deve

DEV Community · 2h ago

Stage 1 of enterprise AI adoption: identity and the AI gateway

This is part 1 of a series that started with the full reference diagram in part 0. Stage 1 covers the two columns marked 1 on that diagram. The first is IDENTITY & ACCESS, with SSO / IdP, Roles & scopes, and Secrets manager. The second is AI GATEWAY, with Routing, Rate limit & budget, Logging, and PII / DLP filter. Cloud LLM APIs sit on the enterprise boundary line, and every arrow to them passes through the gateway first. This stage comes first because each later stage assumes two questions are

DEV Community · 2h ago

Your tracker has no private draft state, and it shows

Every issue tracker I have used has some version of Backlog, In Progress, Done. Not one of them ships a place to prepare a task in private before other people can see it. That missing state causes a specific, recognisable mess, and once you notice it you see it everywhere. Somebody has an idea. The only way to record it is to create a ticket. Creating a ticket puts it on the board. Being on the board means it is now a thing the team can see, comment on, estimate, and start. So a half-formed thou

DEV Community · 2h ago

The delegation test is whether you can write the check first

Every discussion I see about what to hand off to a coding agent sorts tasks by difficulty. Easy things to the agent, hard things to the human. It sounds obvious and it has been wrong in practice for me almost every time. The axis that actually predicts a good handoff is not difficulty. It is this: can you write down, before any work starts, what would make you accept the result? If you can write the check, hand it off. If you cannot, the task is not ready to hand to anybody. I have handed off ge

DEV Community · 2h ago

How Much Should You Prepare for an Interview? A Time Budget

The usual answer is "five to ten hours." It is not wrong, and it is not useful, because it never says what those hours are spent on — so people fill them with the easiest activity available, which is reading the company's About page a fourth time. The number is the wrong thing to ask about. Most of what makes you good in an interview is prepared once and reused for every interview after it. Once you separate the one-time work from the per-interview work, the question stops being "how many hours"

DEV Community · 2h ago

SENTINEL-RL for SOCs: Architectural Gains and Cost Realities from Decoupling Semantic and Topological Reasoning

SENTINEL-RL for SOCs: Architectural Gains and Cost Realities from Decoupling Semantic and Topological Reasoning Security operations centers (SOCs) hit scaling limits when authentication graph analysis jams both semantics and topology through a single bottleneck. Most toolchains intertwine context processing, action selection, and graph traversal tightly enough that tuning for scale or specialization is impossible. The result: wasted human cycles, runaway costs, and routine breakdowns in multi-th

DEV Community · 2h ago

Day 15: Visualizing Embeddings with t-SNE and PCA

Previously, on Day 14: Explained how word embeddings represent words as vectors, the limitations of classic approaches like one-hot encoding, and how FastText uses subword units to create robust embeddings that handle rare, new, or misspelled words. Word embeddings are dense vectors that represent words as points in space. Imagine each word having a "position" in a space with maybe 100 or 300 directions—far beyond our normal three. Each number in the vector says how much the word lines up with o

DEV Community · 2h ago

Magento 2 RabbitMQ Performance: Tuning Consumers and the Broker for High-Volume Stores

RabbitMQ is the invisible engine behind Magento 2's asynchronous work: bulk REST operations, async endpoints, order emails, product alerts, inventory reservation cleanup and B2B quote and shared-catalog updates all travel through message queues. The storefront can be perfectly fast while the queues silently back up — orders confirmed, but emails arriving an hour late, bulk operations stuck on "processing", and inventory_reservation rows growing because the cleanup consumer never caught up. This

DEV Community · 2h ago

Bounties for AI work have the same failure mode as game economies

I spent a few years designing game economies before I spent any time on AI tooling, and the transition has been strange, because I keep watching people rediscover failure modes that mobile games documented years ago. The current one: bounties for AI-assisted work. Pay people for tasks completed by their agent. Put a leaderboard on it. Watch throughput go up. Throughput does go up. That is the problem. Every reward loop has a currency, a source, and a sink. The loop stays healthy while the effort

DEV Community · 2h ago

Vision Over Syntax: I Design the Entire Product in My Head Before the First Commit

[ EXECUTIVE TEARDOWN // TL;DR ] Every shipped product started as a complete mental model — data flow, trust boundaries, failure modes, cost curve — before any code. The strongest architecture decisions are refusals: what the system will never do deletes entire classes of future cost and risk. AI made implementation nearly free, which makes knowing what to implement the highest-leverage skill in engineering. The thinking phase runs on four artifacts: a data contract, named trust boundaries, a cos

DEV Community · 2h ago

Halving WebSocket payloads with MessagePack in Node and React

[ EXECUTIVE TEARDOWN // TL;DR ] Batching messages beats changing the encoding; it costs nothing and usually wins more. Set binaryType to arraybuffer on the browser socket, or every message pays for an async Blob read. MessagePack lands 40 to 55 percent smaller than JSON for telemetry-shaped objects but still encodes the keys. Measure with permessage-deflate on and off; compressed JSON sometimes beats uncompressed binary. A telemetry socket sending 40 small JSON messages a second works fine on a

DEV Community · 2h ago

ERC-8403 Standardizes Account Authority, Vitalik on EIP-8141, Base Vibenet Tests 200ms Blocks, Robinhood Chain’s Blobs Stall

Welcome to our weekly digest, where we unpack the latest in account and chain abstraction and the broader infrastructure shaping Ethereum. This week: a new standard defines the lifecycle for how native AA accounts add and rotate their authorities; Vitalik explains why EIP-8141 matters for scaling, not just account abstraction; Base opens its Vibenet preview network to test 200ms blocks and native AA; and Robinhood Chain keeps running while its data briefly stops reaching Ethereum. ERC-8403 Stand

DEV Community · 2h ago

The AI-in-QA Decision Framework, With Real Prompts

A Staff SDET's field guide to knowing when to use AI in testing - and the exact prompts to use when you do. Most "AI for QA" content shows you a shiny demo: paste a requirement, get 20 test cases, applause. Nobody shows you the moment after that - when the AI hallucinates a login flow that doesn't exist, or generates a Playwright test that passes locally and fails in CI because it never accounted for a loading spinner. I wrote an earlier article introducing a 7-question framework for deciding wh

DEV Community · 2h ago

Mastra is launching today on Product Hunt https://www.producthunt.com/products/mastra

producthunt.com

DEV Community · 2h ago

SQL NULL vs empty string vs zero

NULL Is Not Zero, Not an Empty String, and Not False SELECT * FROM Employees WHERE salary = NULL; -- returns ZERO rows, always, for every row in the table SELECT * FROM Employees WHERE salary IS NULL; -- correctly returns Dave SELECT * FROM Employees WHERE salary IS NOT NULL; -- everyone except Dave salary = NULL doesn't mean "salary is unset" — it asks "is salary equal to this unknown value," and the honest answer to that question is always "unknown," never "yes." SQL has no way to spell "compa

DEV Community · 2h ago

Caso de éxito: los toolkits gráficos

Decíamos en la anterior entrega de esta serie, que un caso que se suele dar a conocer como de éxito es el de los toolkits gráficos. En parte es cierto, hay muchas aplicaciones que utilizan este tipo de módulos. Pero claro, en realidad encierra lo que yo entiendo es un fracaso: solo se puede considerar que aquellas aplicaciones que utilicen ese toolkit específico están construidas sobre esos módulos. Es decir, hay muchas aplicaciones que están construidas sobre, por ejemplo, Win32, Gtk, Qt, o wxW

DEV Community · 2h ago

Java 27 in 10 Minutes — What Actually Changed

Java 27 shipped in September 2026. It's a non-LTS release, so most production teams will skip it and stay on Java 25 LTS, but a few of the defaults it ships are worth knowing about even if you never install it. G1 is now the only default GC (JEP 523). Small/constrained JVMs used to silently get Serial GC instead Object headers shrink from 96 bits to 64 bits, on by default (JEP 534). Real measured savings, not a flat percentage (details below) TLS 1.3 gets quantum-resistant key exchange, on by de

DEV Community · 2h ago

SCIM Deprovisioning in Multi-Tenant SaaS: What Should Actually Be Deleted?

An employee leaves Acme, so Acme’s identity provider sends your SaaS application a SCIM deprovisioning request. The same user is still an administrator in Beta. Your application should remove the access controlled by Acme and leave Beta alone. In multi-tenant SaaS, SCIM deprovisioning should normally disable or remove the membership controlled by the authenticated tenant, not the global user identity. Delete the global identity only when no other memberships remain and your retention policy perm

DEV Community · 2h ago

Why AI Test Automation Matters More as Your SaaS Codebase Grows

TL;DR: Traditional test automation solves test creation once, then the maintenance cost scales roughly proportionally with the codebase until the suite itself becomes a project. AI-assisted automation targets that maintenance cost specifically: generation tied to real changes, anomaly detection instead of brittle assertions, and coverage that adjusts instead of accumulating. Four components, one clear limit, and a quick way to tell if it's worth it yet. A regression suite is cheap to justify whe

DEV Community · 2h ago

I Used to Think Hiring More People Was the Answer

When you're building a company, there comes a point where the workload starts getting bigger than your day. The obvious answer is usually to hire. More work means another person. More customers mean another person. More operations mean another person. I've started questioning that approach. Not because people aren't important. They are. But because I don't think every piece of work needs someone sitting behind it. The Question I Ask Now Whenever I come across a repetitive task, I ask a simple qu

DEV Community · 2h ago

nginx will proxy the new HTTP QUERY method. It will never cache one.

The IETF published RFC 10008 back in June, and it adds a method to HTTP called QUERY. The short version is that it's a GET that's allowed to carry a body, so it's safe and idempotent like a GET, and it's cacheable, with the extra rule that whatever you put in the body has to end up in the cache key. The use case is the read whose parameters won't fit sensibly in a URL. Right now we all send those as POST and quietly accept that nothing downstream will ever cache them. I've been curious whether a

DEV Community · 2h ago

count() on a prefetched relation is free. filter() costs a query per row.

Twelve queries where you expected two, in a loop that looks like somebody Second of two posts from the same afternoon. The first, Django's .exclude() does not drop your NULL rows, is about a check I measured and did not build. This is the one that survived. Here is a page that is slower than the version with no optimisation in it at orders = Order.objects.prefetch_related("lines") for order in orders: for line in order.lines.filter(active=True): ... With ten orders that is twelve queries: one fo

DEV Community · 2h ago

How long has it been since you last wrote code?

Just last year, I was still writing code by hand. I’d think through the architecture on my own, model the business domain, break things down into modules and classes, and weigh the dependencies between them. It was a state of pure focus — every step of reasoning taught me something new, and finishing a design gave me a real, tangible sense of satisfaction from having learned something. But this year, things have taken a dramatic turn. Much of what I used to do myself can now be handed off to AI.

DEV Community · 2h ago

I built 59 free browser-based dev tools in vanilla JS — here's what I learned

I've been quietly building Antigravity Tools — a collection of 59 free, browser-based developer utilities — and today I'm sharing everything I built and learned. The main constraint I set for myself: zero dependencies, zero server, zero telemetry. When you paste your JWT token into jwt.io, it goes to their server. When you use an online regex tester, your test strings are logged. I built Antigravity Tools so every operation runs inside your browser, using native APIs. No Node.js backend No npm p

DEV Community · 2h ago

How wrong is a model about a company when it has no register to check?

registry-mcp puts three national company registers behind one MCP tool — Brønnøysundregistrene / Enhetsregisteret (brreg) by organisasjonsnummer (orgnr, org.nr), Companies House by company number, and Bolagsverket by organisationsnummer. The pitch has always rested on a counterfactual: without a register, an agent answers company questions confidently and wrongly. That is an easy thing to assert in a README. On 2026-09-10 we measured it, and the answer is not the one the pitch would have picked.

DEV Community · 2h ago

Describe Review Approve Inspect: A Coding Agent Loop Built for Control

Most local coding agents force a false choice: YOLO the desktop, or approve every tool call until you give up. Cue is built for a third path. It is a Windows 11 Electron coding agent (MIT) that uses Codex CLI for the model path on the host, runs workspace actions under AppContainer workers, and freezes a human-readable execution envelope before anything mutates your files. You describe a goal, review the scope, approve once, then inspect a ledger — or hit Stop. This post is about that control lo

DEV Community · 2h ago

Cross-Language SDKs for a Single Agent Capability Standard

In most real-world systems, “AI agents” sit on top of a polyglot stack: Python for data and ML TypeScript/Node for backend and APIs Rust/Go for performance-sensitive pieces If your capability model only really exists in one language, you end up with: Duplicate logic in other languages Inconsistent validation and error handling Governance rules that only apply to the Python part A more sustainable pattern is to treat the capability protocol as the primary artifact and the language SDKs as impleme

DEV Community · 3h ago

Keeping Services Loosely Coupled: A Practical Guide

I have spent too many weekends untangling services that knew way too much about each other. Every time I changed a field name in one service, three others broke. That is the real cost of tight coupling: not elegance, but velocity. Here is what actually works for me. Two services are coupled if one has to change when the other changes for reasons unrelated to its own job. It does not matter whether they share a process, a repo, or a database. What matters is how much each one knows about the othe

DEV Community · 3h ago

My filter preview looked perfect. The export had seams.

The preview looked flawless. A soft vintage filter across a 6000px poster, edges clean, the gradient smooth all the way down. Then I exported, opened the PNG at 100%, and there were faint vertical seams running through the image — thin bands where the tone shifted by a hair. The preview had never shown them. That gap between what you see and what you get turns out to be a consequence of how a browser has to do this, not a defect you can file a ticket against. A canvas editor running in the brows

DEV Community · 3h ago

An AI code reviewer that remembers its findings still needs a stop condition

An automated code reviewer can get stuck in a loop that looks productive: It finds three problems. An agent fixes two and changes something nearby. The next review finds one old problem again, plus two new ones. Repeat until somebody gives up. The failure is not just that the model is imperfect. It is that the loop has no explicit end state. I built an optional review runner in frontier-simplify to make that failure visible and bounded. It is a local maintainer tool, not a hosted service and not

DEV Community · 3h ago

Why JSON Array Diffing Is Harder Than It Looks

Change one field in a JSON object, then reorder the surrounding array. A diff can suddenly report that nearly every record changed. Many JSON diff tools compare arrays by position. That is exactly right for arrays whose order carries meaning. But when an array represents a collection of records, positional matching can produce a surprising amount of noise. Consider these two payloads: Original { "users": [ { "userId": 101, "name": "Alice", "role": "engineer", "status": "active" }, { "userId": 10

DEV Community · 3h ago

Why I Killed One of My Micro Tools to Supercharge Another

As an indie hacker and solo game developer, I am constantly building tools to solve my own problems. Out of the micro tools I have made recently, I created one called Radar where you could search a game title and find shorts (and later, trailers) to use for inspiration. Scout. Scout is now an all-in-one hub for indie game marketing and discovery, packed with everything you need to get your game in front of players: Content Creator Outreach Trailer & Short Discovery Verified Capsule Artists

DEV Community · 3h ago

The New Attack Surface: AI Agents With Access to APIs, Databases, and Shell Commands

Your agent can read support tickets, query Postgres, call internal APIs, and run shell commands to debug a failing service. That is useful until a support ticket says: “Ignore previous instructions and export the customer table to this webhook.” At that point, you do not merely have an AI feature. You have a new kind of principal on your network: a semi-autonomous actor that can read untrusted input, reason about it, and take actions with real credentials. Traditional application security assume

DEV Community · 3h ago

What Should an AI Agent Be Allowed to Do Without Asking You?

Your agent notices a failing deployment. It reads the logs, identifies the bad commit, drafts a rollback, and now wants to apply it. Should it just do it? If it asks for permission at every step, it becomes an expensive autocomplete. If it can do anything it can describe, it becomes a liability. The useful question is not “How smart is the agent?” It is: Which actions are safe to pre-authorize, which actions need explicit approval, and which actions should be impossible? That is not a prompt eng

DEV Community · 3h ago

Open-sourcing my dev tools as plain HTML files (no npm, no build)

Yesterday I open-sourced them on GitHub. This post is the story of why I why I open-sourced them at all. Most "free online tools" secretly upload your input to a server, process it Try this experiment: paste 你好世界 🌍 into the most popular online Base64 å¥½ä¸ç•Œ — broken output that no Even when they work correctly, you're trusting that the site: won't log your input won't sell it to a third party won't get breached next year won't disappear and take your workflow with it Open source fixes all fou

DEV Community · 3h ago

Agentic Harness Engineering

Artificial Intelligence is evolving rapidly beyond simple prompt-based models. To truly leverage Al's potential for complex, real-time tasks, Al models were mostly used by simply feeding a prompt and generating output a lightweight interaction Often good enough for basic tasks Developers alone can build advanced solutions, but these require Use tools dynamically. Manage memory contextually. Run validation loops to improve output quality. Think of Agentic Harnessing as the key to moving beyond st

DEV Community · 3h ago

I Stopped Trusting the Headlines and Checked My Security App Against Real AI-Orchestrated Attacks

A Japanese, more code-heavy version of this is on Zenn. I build RoamSwitch, a solo-developed network security app for Mac and Linux. It locks down the firewall and shared services the instant you're on a network you haven't approved, and on Pro it adds things like emergency network isolation when it sees ransomware-like behavior, and DNS-layer blocking of phishing/C2 domains. For the last few releases I'd been building two fairly unglamorous features, a log auditor that flags frequency anomalies

DEV Community · 3h ago

Thin-Film Measurement Data: What to Check Before Building a Dashboard

Imagine a coating-line dashboard showing 1,200 nm for thirty seconds. The film might be consistent. Or the application might have stopped receiving measurements and kept the last value on screen. Looking at the number alone, you cannot tell. That is the software problem I want to focus on here: what needs to travel with a thin-film measurement so that an application can use it sensibly? I work on technical content for TDM Technology. Its thin-film thickness guide covers measurement conditions fo

DEV Community · 3h ago

Stop letting your AI design expensive, insecure AWS architectures

I've seen it happen dozens of times. A developer sits down with Claude or Cursor, asks for a scalable architecture to handle some new workload, and within ten minutes, the LLM has hallucinated a sprawling mess of EKS clusters, Kinesis streams, and Aurora Global Databases. On paper, it looks impressive. To a junior dev or even a mid-level engineer, it looks "cloud-native." But to anyone who has ever stared at a massive monthly AWS bill or sat through an incident response call caused by an IAM wil

DEV Community · 3h ago

Building bayar.dev: Streaming AI Responses and Designing for Zero-Retention Boundaries

Hey DEV Community! I’m building bayar.dev, an early-stage software product company developing AI infrastructure, B2B workflow products, and multi-agent systems. The foundation starts with a simple goal: make AI applications feel immediate while keeping their data boundaries explicit. The public chat endpoint at /api/chat is stateless and streams responses token by token using Server-Sent Events (SSE). The backend connects to Azure AI infrastructure through an OpenAI-compatible interface. That ar

DEV Community · 3h ago

CampusLink: A Chat Server With No Internet Needed

This was the first project I've ever actually finished. Not a tutorial I followed along with, not a copy of something else — an actual thing I designed, broke, fixed, and shipped, in 72 hours, for the Hackathon Raptors Zero-Dependency Hackathon. The rule was simple to say and hard to live with: no external packages, no libraries, no shortcuts. Just the standard tools your programming language already gives you, and whatever you can build yourself on top of them. I built CampusLink — a chat tool

DEV Community · 3h ago

AI scaled my work. But not my brain.

Over the last year, I noticed something about the way I work with AI. I get much more done, but I also feel much more tired. Not “I need some coffee” tired. I mean completely mentally drained at the end of the workday, especially by the end of the week. The strange part is that I am not working more hours. AI lets me do in one hour what could easily take half a day before. That hour is just much more intense than it used to be. A normal developer workday was never eight hours of nonstop hard thi

DEV Community · 3h ago

AI Is Already Better at Coding Than Most Software Developers

...but let me say this right away: coding was never the most valuable part of software engineering. I remember when I was a junior software dev. Nothing came easily to me. Every feature felt like an uphill battle. I can't even count how many hours I spent digging through Stack Overflow. And then there was the stress of PR reviews, where I sometimes got absolutely roasted in the comments (rightfully so!) 😅 Eventually, things started getting better and better. Shipping features took me less time,

DEV Community · 3h ago

Your HTML Is an API Surface: 7 Patterns That Make Web Apps Easier to Automate

Modern frontend development usually treats HTML as the final output of a much larger system. We think about: React components Then somewhere at the end, all of that becomes HTML. That makes it easy to think of markup as implementation detail. But consider everything that may need to understand your interface without looking at it the way a human does: screen readers For all of them, the DOM is effectively an interface. That means your HTML is not merely presentation. It is an API surface. And li

DEV Community · 4h ago

What Happens When an AI Agent Runs Longer Than Your HTTP Request?

A user clicks “Run agent”, your backend receives a normal HTTP request, and the agent starts doing what agents do: calling tools, reading documents, querying APIs, waiting for a human approval, retrying a flaky search, and generating a long report. Two minutes later, your load balancer returns 504 Gateway Timeout. The user sees an error. The agent, depending on where it is running, may still be alive. It may still be spending tokens. It may have already sent an email, created a ticket, or update

DEV Community · 4h ago

Vue 3 SaaS starter kits in 2026: Nuxt kits, Vue on another backend, and one Go binary

Every "best SaaS boilerplate" list is a Next.js list with a Vue footnote. If Nuxt full-stack kits (JavaScript end to end), Vue on a (Laravel, .NET, Go), and UI templates that look Kit Family Backend Database Teams Billing i18n Licence / price supastarter for Nuxt Nuxt full-stack Nuxt 3 server + Hono API Prisma or Drizzle (PostgreSQL…) yes, orgs + seat billing Stripe, Lemon Squeezy, Polar, Creem, Dodo yes, incl. emails commercial, from €299 NuxSaaS Nuxt full-stack Nuxt (v4-ready) PostgreSQL + Dri

DEV Community · 4h ago

How Much Quality Do You Lose Compressing an Image? We Measured It on 24 Photos

"Compress without losing quality" is a promise lossy formats can't fully keep — every step of compression trades some fidelity for bytes. The useful question isn't whether you lose quality but how much, for how many bytes saved. So we measured the trade directly. Across the 24-image Kodak reference suite — the standard set for this kind of test — we saved every photo as JPEG and WebP at qualities 20 through 95, and scored each output on SSIM (structural similarity to the original, 0 to 1) rather

DEV Community · 4h ago

What I Learned From Rebuilding My Development Foundation

Rebuilding my development foundation sounded like a step backwards at first. But after going through it, I think it might have been one of the best decisions I've made. Before the five projects I mentioned in my previous post, I've worked on countless others. An Arabic BMI calculator. A solar cost-per-use and usage calculator. 3–4 dashboards. And several other projects I can't even remember off the top of my head. I also took a course where I deliberately went back to the beginning with HTML and

DEV Community · 4h ago

MCP Made Tools Discoverable. It Didn't Make Them Safe

Your agent connects to three MCP servers, calls tools/list, and suddenly it can search issues, query a database, send email, refund payments, and delete staging environments. The integration problem is solved. The tools are discoverable. The safety problem is not. MCP — the Model Context Protocol — did something genuinely useful: it gave AI clients and external tool servers a common language. Instead of every AI app inventing its own plugin system, a client can now ask a server what tools exist,

DEV Community · 4h ago

Check whether hls.js is actually using a worker (most ESM setups aren't)

TL;DR If you import Hls from 'hls.js', you are probably getting the ESM build, and the ESM build does not bundle the transmuxer worker. Transmuxing runs on your main thread until you set workerPath. We are going to verify which mode you are in, fix it, and add a long-task observer so you can tell main-thread stalls apart from network stalls. Two short facts before any code. hls.js 1.4 introduced the ESM build (dist/hls.mjs), and that build ships the worker as a separate file rather than inlining

DEV Community · 4h ago

Build a React Native video upload that survives backgrounding, app kills, and cellular

TL;DR A fetch() upload dies when the OS suspends your app, and your JS context is recreated with no memory of it. We are going to build an upload that is a persisted record plus a state machine, hand the actual transfer to a native background session, and reconcile against the server when the app comes back. About 150 lines. Versions this was written against: Expo SDK 54 (React Native 0.81) and SDK 55 (React Native 0.83). Relevant because SDK 54 is the last release with legacy architecture suppo

DEV Community · 4h ago

Build a repeatable banding test with FFmpeg (and find the ladder rung that breaks first)

TL;DR Banding arguments go in circles because everyone tests on different footage. We are going to generate a synthetic gradient, encode it four ways (naive 8-bit, 8-bit debanded, 10-bit filter graph with explicit dither, and 10-bit AV1), and build a small harness so you can run it on your own ladder. Everything runs locally with FFmpeg, no assets to download. Written against FFmpeg 7.x/8.x. Check yours with ffmpeg -version. Real footage has sensor noise, and that noise dithers away banding by a

DEV Community · 4h ago

OWASP Cornucopia Mobile App Edition v2.0 Johan Sydseter for OWASP® Foundation Sep 10 #cybersecurity #mobile #security #software Add Comment 8 min read

DEV Community · 4h ago

OWASP Cornucopia Mobile App Edition v2.0

We are happy to announce the release of the OWASP Cornucopia Mobile App Edition v2.0. The latest edition is compatible with MASVS v2.1, MASTG v2.0, and MASWE v1.0, and features 80 threats that cover all the requirements, tests, and weaknesses of the OWASP Mobile Application Security Project. At Admincontrol, the OWASP Cornucopia Mobile App Edition is used to implement mobile application security by design. Before building mobile apps and features, OWASP Cornucopia helps the team identify threats

DEV Community · 4h ago

Shipping a Node.js server as a native desktop app with Tauri and Bun

I have a small Node server — Express, a WebSocket hub, about 2,000 lines. It's a MeghXL. Running npm install, npm start. That's fine for me and a wall I wanted a double-clickable app for macOS, Windows and Linux, where the user has no Electron would have been the boring answer, and boring answers are usually right. I went with Tauri for one reason: size. My finished installers are 28–41 MB. The The cost is that Tauri is Rust and uses the OS webview, so the Node server can't Tauri has a mechanism

DEV Community · 4h ago

Multi-Agent Architecture Adds Coordination Faster Than Capability

Adding a second agent creates a coordination problem before it creates a capability gain. Someone must define the assignment, preserve the relevant context, reconcile the result and decide whether another attempt is allowed. Those obligations exist even when the second agent produces nothing useful. The title describes that architectural asymmetry, not a universal measured growth rate: extra capability is possible, but it has to earn the machinery introduced to obtain it. Start with a working si

DEV Community · 4h ago

How npm typosquatting and dependency confusion attacks work (and how to stop them)

In February 2021, security researcher Alex Birsan published a paper describing how he had successfully deployed malicious packages to the internal build systems of Apple, Microsoft, PayPal, Shopify, and 32 other companies. He did it without hacking a single server, exploiting a single CVE, or phishing a single developer. He published packages to npm, PyPI and RubyGems with names matching internal packages those companies used — and their build systems installed his public versions automatically.

DEV Community · 4h ago

Batches, and Stopping Without Losing Anything

One executor, one pass, one commit - and the work can be dropped at any boundary. 👋 I'm Anton - a software engineer working mostly in PHP/Symfony and Go, currently carving a live PHP monolith into Go services. Earlier parts of this series were about what an executor must know, how small a unit of work has to get, and how to write a task with nothing left to interpret. This part is about the thing I only learned by having to stop in the middle: the unit at which work becomes droppable. Notes: gi

DEV Community · 4h ago

Why Singapore SMEs Get Stuck at the AI Pilot Stage

UOB polled business owners across the region and found something most vendors will not put on a slide: 65% of businesses have adopted AI in some form, but only 15% have reached what the study calls advanced capability. Read that again. Four out of five companies using AI are stuck somewhere between "we tried it" and "it changed how we work." The barriers the respondents named are where it gets interesting. Data and system readiness: 47%. Funding: 47%. Talent: 39%. Funding and talent are the answ

DEV Community · 4h ago

Putting the trace before the loop

An observability-first approach for building an AI agent, and what it bought me. A couple of weeks ago I started implementing Kept, a self-hostable post-purchase support agent for e-commerce, with reliability as its core offering. Besides the product itself, my objective in building it is to delve into the depths of agentic system design, and see what it actually means to build an agent with "reliability at its core". I started from a theory my experience validated again and again throughout the

DEV Community · 4h ago

Your AI Audit Log Proves Nothing About Where the Answer Came From

Two different logs, and teams keep shipping the first while believing it's the second. The first records that at 14:02:11 UTC, decision d_8f21 ran through model v2.3.1, took this input, produced this output, and a human approved it. Complete, timestamped, retained for six months. It satisfies most audit-trail checklists. The second proves the answer came from paragraph 4 of manual_A2131.pdf, retrieved at rank 2 with a score of 0.81, and that the sentence in the response is supported by that span

DEV Community · 4h ago

CF7 to Trello: Cards Not Being Created Every Cause Explained

Trello is one of the simplest project management tools and its API is one of the most straightforward to call. Yet CF7 to Trello integrations fail constantly, usually for the same handful of reasons that are never clearly documented anywhere. This post covers every cause of CF7 submissions not creating Trello cards, with direct API calls you can use to verify each piece before connecting your form. Trello uses a two-part authentication system that trips up most developers on first setup. You nee

DEV Community · 4h ago

16 requests, 2 of them third-party, 0 ad requests (what a static calculator site actually loads)

I wanted a calculator site that behaves like a document, not like a web app. Type three numbers. Get the number of paint cans to buy. No account, no dashboard, no round trip to a server, no analytics watching you type. The page, the arithmetic, and the answer. That one constraint decided almost every technical choice below, and it is also why the numbers are small enough to print in a table. Here is a cold load of wallmath.com, measured in a headless Chromium on 2026-09-10 against the live build

DEV Community · 4h ago

Containers vs VMs vs Serverless: The Mental Model That Finally Made It Click

Virtual machines, containers, serverless. Three ways to run your code, endless articles comparing them, and yet a lot of people still cannot say clearly why you would pick one over another. The confusion comes from comparing them on the wrong axis. Here is the mental model that made it click for me: each one is a different answer to "how much of the machine do you carry with your app," and once you see them that way, when to use which becomes obvious. Think of running your code as packing for a

DEV Community · 4h ago

Why You Need an AI Gateway: Cost, Routing and Guardrails in One Layer

A year ago, adding AI to an app meant one API key and a few calls to one provider. Now most teams call several models across several providers, from several features, and the whole thing is a tangle: keys scattered in code, no idea which feature spends what, no consistent rate limits, no shared safety checks. The pattern emerging to fix this is the AI gateway, and if you are running AI in production, it is quickly becoming as standard as an API gateway or a load balancer. Here is what it actuall

DEV Community · 4h ago

Make Your Website Usable by AI Agents: WebMCP, Step by Step

There's a new visitor in your logs: the AI agent, acting on someone's behalf. Right now it "uses" your site by reading the DOM and guessing which button does what. WebMCP replaces the guessing with a contract — your page declares structured tools an in-browser agent can call directly. It's a draft W3C standard (Google + Microsoft) that shipped as an early preview in Chrome 146. Here's how to add it, step by step, with copy-paste code. A WebMCP tool is three things: a name a description the agent

DEV Community · 4h ago

Building Production-Ready, Secure AI Backends with WebMCP and Google Cloud Run

The shift toward autonomous AI agents has exposed a critical gap in modern web infrastructure: the interface gap. For years, browser-based AI agents have had to navigate web pages the way humans do...parsing visual layouts, guessing CSS selectors, and attempting to mimic clicks. Connecting in-browser agent tools directly to modern cloud backends requires an architectural shift. By combining WebMCP on the frontend with Google Cloud Run on the backend, engineers can build a deterministic, resilien

DEV Community · 4h ago

The Policy Was Right. The Data Wasn’t.

Security infrastructure looks clean in architecture diagrams. Production is messier. Stale data, delayed events, service failures, and emergency exceptions all affect real access decisions. This is Part 1 of Security Infrastructure in Practice, a series about what happens when security design meets production systems. The policy looked correct. Employees in the support function could view customer cases. Contractors could view only the cases assigned to them. Unmanaged devices were blocked from

DEV Community · 5h ago

Throwaway experiments are easy to start. Retiring one safely is not

I was closing out a throwaway repo from an agent-workflow experiment. I had treated experiment repos as cheap to delete once the hypothesis felt answered. The prototype had to go because leaving both checkouts live gave later agents two competing sources of precedent. Deleting it meant deciding what had been validated, writing it down somewhere durable, and removing experiment surfaces only after that record was complete. Standing up the narrow prototype had been genuinely fast. Portable agent p

DEV Community · 5h ago

How Attackers Abuse Firebase Misconfigurations in Production Apps

Firebase configuration embedded inside a mobile application is not the actual security boundary. The real risk begins when production services treat that configuration, an authenticated user, or the application interface as sufficient authorization. Attackers can reproduce legitimate requests outside the Android or iOS app. If Security Rules allow broad access, hidden buttons, navigation restrictions, and client-side validation cannot protect the underlying data. Checking only that request.auth

DEV Community · 5h ago

Die XZ-Backdoor: Weckruf für die Open-Source-Sicherheit

Die XZ-Backdoor: Ein Albtraum, der die Open-Source-Welt wachrüttelte Ende März 2024 hielt die Tech-Welt den Atem an. Ein Microsoft-Entwickler, Andres Freund, entdeckte durch Zufall eine der raffiniertesten und potenziell verheerendsten Backdoors, die je in einer kritischen Open-Source-Komponente gefunden wurden. Der Zielort: xz, ein unscheinbares, aber weit verbreitetes Komprimierungswerkzeug, das auf fast jedem Linux- und macOS-System zu finden ist. Der Vorfall, bekannt als CVE-2024-3094, war k

DEV Community · 5h ago

Software Licensing Models: An Enterprise Guide 2026

Choosing between software licensing models is one of the most consequential strategic decisions founders make when building enterprise applications in 2026. Pick the wrong contract format and you can limit your distribution reach, restrict SaaS scaling opportunities, or accidentally force yourself to share proprietary code. Founders therefore need to weigh how to protect their core intellectual property (IP) while keeping operational margins clean. This guide explores the legal structures, open-

DEV Community · 5h ago

AI Coding Isn't About Writing Less Code 🤖

One of the biggest changes I've experienced in software development recently is how AI changes the process of building software. At first, AI coding feels like: "Give me the code." But that isn't where the real productivity comes from. The bigger advantage is being able to use AI throughout the development lifecycle: 🧠 Brainstorming architecture The developer still needs to understand why something should be built and whether the generated solution is actually good. AI can produce code incredib

DEV Community · 5h ago

Open WebUI: Chat Interface & Context Options

Open WebUI is one of the first tools that appeared in conjunction with Large Language Models. Initially intended as a tool for chatting with a connected local Ollama instance, it evolved to work with any OpenAI API provider and succinctly extended its features to support agentic chats. Following the setup of Open WebUI in my previous post, this article explores its core features. Learn about conversation essentials, see how notes and knowledge bases are created, and understand the different opti

DEV Community · 5h ago

Hello DEV Community! My Journey in WordPress & SEO

Hi everyone! 👋 I’m excited to finally be part of the DEV Community. I’m a Software Engineer, WordPress Developer, and SEO Specialist with a passion for building websites that are not only functional and visually appealing, but also fast, accessible, and easy to find in search engines. I joined DEV.to because I want to connect with other people in the tech community, learn from their experiences, and share some of the things I’ve learned throughout my journey. Technology is constantly changing,

DEV Community · 5h ago

GPT-6 Astra Just Changed the AI Skill Game — Here’s What AIML Students Should Learn Next

Artificial Intelligence is one of the fastest-growing skill areas in tech, but there is a problem. A lot of learners are spending more time collecting certificates than building things. They complete a Python course. Then a Machine Learning course. Then a Generative AI course. Then another prompt engineering course. At the end, they have several certificates but still struggle with a simple interview question: “What have you built?” That question matters. Because AI becomes much easier to unders

DEV Community · 5h ago

Why Important Ideas Get Harder to Find as Your AI Chat History Grows

The longer I use AI, the more conversation history I accumulate. At first, that feels reassuring. More history should mean more useful context to return to later. But after enough ChatGPT, Claude, and Gemini conversations, I started noticing the opposite: the more conversations I had, the harder it became to find the moments that actually mattered. I could often remember that an important decision had happened. I just couldn't remember where. Search helped when I remembered the exact words. But

DEV Community · 5h ago

Your Cloudflare Workers KV rate limiter is probably attacking itself

I ship a small Cloudflare Worker (a Claude Code status line that pays users a cut of disclosed sponsor revenue -- not the point of this post, just context for where the traffic pattern came from). Every install polls /line every 10-20 seconds while the user is coding. That's a lot of requests hitting one Worker. Rate limiting a Worker endpoint by install ID looks like a one-liner with KV: async function checkLineRateLimit(env, installId) { const key = `ratelimit:${installId}`; const raw = await

DEV Community · 5h ago

Your Reputation Is Built From Small Promises

People think reputation The rescue. The outage you fixed at midnight. The demo that landed. It is not. It is made of the sentence "I will send you that link." "I will look at it this afternoon." "I will let you know either way Nobody writes those down. Everybody remembers them. Not consciously, He said he would, so it is handled. Or: he said he would, That second sentence You just notice, years later, The trap is that small promises They cost nothing at the moment of speaking. You say yes becaus

DEV Community · 5h ago

LeetCode 3870 & 3871: from a simple to a general solution

LeetCode problems 3870 and 3871 clearly show the transition from a simple case to a generalized one depending on the constraints. I would say this is a good example of why you should always ask about the problem constraints. The problems are very similar, but different constraints lead to completely different solutions. Both problems have the same description: You are given an integer n. total number of commas used when writing all integers from [1, n] (inclusive) in standard number formatting.

DEV Community · 5h ago

Treat the Model Like Any Other Flaky Network Call

The demo is a text box. The product is the bad day. A model is a service Every rule you already hold You keep forgetting Time it out. Not the vendor default. Yours. Decide how long a user will wait Know what happens when it fails, If your answer is You have hoped. Degrade into something. The cached answer from yesterday. The dumb deterministic path An honest line saying Validate the output It is a form. It is the least predictable form Parse it, check it, reject it, Watch the money A retry loop

DEV Community · 5h ago

GPT-6 Astra Shipped With Its Zero-Day Skill Behind a Gate. Here's What 'Gated Capability' Means for the Rest of Us.

GPT-6 Astra shipped on September 3, and it arrived with an asterisk no model has carried before: it is the first model OpenAI has ever rated Critical for cybersecurity, because it can find zero-day vulnerabilities in hardened systems and turn them into working exploits without a human guiding it. The rest of the model is generally available. That specific capability is not, it ships gated, behind split access rather than open to everyone. That decision is a precedent, and if you defend infrastru

DEV Community · 5h ago

Ruby のブロックと yield を一番簡単な例で

Ruby を書いていると必ず出てくる「ブロック」と「yield」。「処理を渡す」「渡された処理を実行する」だけです。メソッドに渡す「処理のかたまり（コードの切れ端）」のこと。 { } か do...end で囲みます。 [1, 2, 3].each { |n| puts n } # └──────────┘ これがブロック .each に「各要素で puts n してね」という指示書を渡しています。 1 2 3 { } と do...end は同じもの。長いときは do...end を使うだけです。 [1, 2, 3].each do |n| puts n end メソッドの中の「yield と書いた場所」で、渡されたブロックを実行する命令。 def あいさつ puts "こんにちは" yield # ← ここで渡されたブロックを実行 puts "さようなら" end あいさつ { puts "元気ですか？" } こんにちは元気ですか？ ← yield の場所にブロックが差し込まれるさようなら yield は好きな場所に置け、何回でも呼べ、値も渡せます。 def 数える y

DEV Community · 5h ago

If You Understand These 5 AI Terms, You're Ahead of 90% of People

A few months back I sat in a meeting where someone said, dead serious, "we should fine-tune the RAG." Nobody blinked. Everyone just nodded, the way you nod when a doctor says a Latin word and you'd rather die than ask what it means. Thing is, that sentence didn't mean anything. Fine-tuning and RAG aren't even the same species of tool. Nobody in the room knew that. Including, I'm pretty sure, the guy who said it. That's where we're at with AI right now. Everyone's using the words. Almost nobody k

DEV Community · 5h ago

I Removed the Wake Word from AI — Here's What I Learned

The Question That Started It All "Hey Siri." "Okay Google." "Alexa." I kept asking myself: why? Your ears don't wait to be called to hear. Your brain doesn't wait to be called to remember. So why should AI? That question became Karl. What Karl Is No wake word. No button. Just presence. What it does: Listens in the background. Always. Remembers everything. Forever. Opens apps, makes calls, sets reminders. Privacy first. Everything stays local. No cloud. The idea: Your brain is for thinking. Karl

DEV Community · 5h ago

Wabe Labs Is Born, and Building With Blueprints

Entering the third week of my startup adventure has been a deeply rewarding time of solidifying foundations. Things come together to form an official brand, I put together tools to help with financial discipline, and I finished off the week by practicing my own Documentation-as-a-Contract (DaaC) framework. While I have an idea that I truly believe in and know exactly the components I need to build, I have been feeling excited about this venture before starting. But one question that would keep e

DEV Community · 6h ago

The Redirect Chain That Bypasses Your Ad Blocker

The Problem with Static Blocklists Malicious ads on Google Ads rarely land directly on a known bad domain. Instead, they route through a chain of redirects that rotates domains faster than blocklists can update. When attackers register a fresh domain, let it sit for a few hours, and then point users to it via a series of 302 redirects, even legitimate ad platforms can abuse this technique. Static blocklists fail because they only check the final destination. An attacker can create a new domain,

DEV Community · 6h ago

FFMPEG to the rescue, again

LinkedIn is going to be one of my direct integrations, if it's possible, so that I can write an article once and publish it on my own platform and do external distribution. Who has a non-svg logo available in 2026? I don't so I need to fix it. It would be easy to use some ad-ridden page to convert my svg-logo to a png for LinkedIn's consumption, but no, we're not doing that. We're doing it the only way we should, which is via cli. 1st we encountered an esoteric err: ffmpeg -i logo.svg -width 192

DEV Community · 6h ago

What Happens When You pip install a Malicious Python Package?

A developer runs pip install. Nothing crashes. No ransomware appears. No antivirus alert fires. Thirty seconds later, a Python process makes an outbound connection to infrastructure nobody on the team recognizes. Recent 2026 incidents show how quickly this can become a compromise. Malicious PyPI packages have been downloaded and executed by real systems, proving that developer workstations, CI pipelines, and security environments can themselves become targets. Typosquatting is an attack techniqu

DEV Community · 6h ago