Automattic has confirmed that Matt Mullenweg has resumed his role as CEO of the company. Mullenweg now holds the combined title of Chairman and CEO at Automattic. The announcement follows an attempted ouster by the company's board. Automattic stated that Mullenweg has returned with the full support of the board.
The Decorator is a structural design pattern from the Gang of Four (GoF) catalog that lets developers add behavior to individual objects dynamically without modifying their source code or creating excessive subclasses. It works by wrapping the original object in additional layers that each contribute a single, focused responsibility, keeping code clean and modular. A DEV Community article explains the pattern using a Java example involving graphical components like buttons, borders, and shadows. The abstract decorator holds a reference to a base Component interface and calls the original behavior before appending new functionality, enabling runtime composition of behaviors. The pattern is recommended when inheritance feels too rigid and when multiple behavior combinations would otherwise require an unmanageable number of subclasses.
JQuickCurl's XML configuration mode allows developers to store all API definitions in a separate XML file, keeping business logic free of annotations or HTTP-related imports. Each API request is declared in the XML catalog with a name and return type, and a factory class binds these entries to matching Java interface methods at runtime. Dynamic values can be injected into curl commands using #{...} placeholder syntax, with method parameters mapped via the @Param annotation from the XML module. Crucially, endpoint behavior can be changed — such as adding headers or switching providers — by editing only the XML file, with no need to recompile or modify Java code. This declarative separation of contract and implementation is the core design goal of JQuickCurl's XML mode.
Failing to enable Row-Level Security (RLS) on database tables has emerged as a leading cause of data breaches in 2025-2026, with encryption receiving far more attention than this more critical access-control gap. A May 2025 vulnerability (CVE-2025-48757) exposed data from 303 endpoints across 170 apps built with the AI tool Lovable, because Supabase RLS was never switched on. Security researchers have also identified hundreds to thousands of Supabase instances globally that can be queried using only a public anonymous key and a basic curl request. The problem is not new or platform-specific — a similar Firebase misconfiguration previously leaked sensitive data belonging to over 1.8 million users across more than 900 apps in health, finance, and education. Supabase has since enabled RLS by default on new tables, but experts warn the risk remains highest during database migrations, when access-control logic must be manually rebuilt from scratch under time pressure.
A tutorial published on DEV Community outlines how freelancers can build a dependency-free, browser-based hourly rate calculator using plain HTML and JavaScript. The guide argues that the common method of dividing desired income by working hours is flawed, as it ignores unbillable time, operating costs, and financial uncertainty. The proposed tool makes all assumptions transparent by displaying intermediate values such as billable hours, required monthly revenue, and contingency amounts alongside the final rate. Built as a static page, the calculator requires no server, framework, or user account, keeping sensitive financial inputs entirely within the browser. The article also recommends separating business logic from display code to make the calculator easier to test, extend, and adapt for related workflows like quotes or invoicing.
A mobile developer built Centence, a Telegram Mini App where sending a message costs cryptocurrency and the recipient earns the payment directly. The app runs on the TON blockchain, routing funds wallet-to-wallet via TON Connect, so the platform never holds user money. This non-custodial design was a deliberate workaround to avoid money-operator regulations, app store payment rules, and Telegram's Stars policy for digital goods. The developer takes a 10% fee as a separate output of each transaction, with the remaining 90% going straight to the recipient. The project was built solo over a few weeks, with an LLM assisting in coding, and all debugging was done using real on-chain transactions.
Paying users of AI tools including ChatGPT and Cursor are voicing growing dissatisfaction over perceived declines in service quality and changing subscription terms. A ChatGPT Go subscriber reported ads appearing inside paid conversations, a practice absent at sign-up, and said the change prompted them to trial rival services for the first time. Cursor Pro users flagged that 'unlimited' auto-mode access was expiring, effectively downgrading plans they had budgeted around. Even top-tier subscribers paying the highest rates complained of slower responses and increased errors from newer models. The complaints, drawn from Reddit and Hacker News posts dated 26 August, reflect a broader pattern of AI platforms tightening terms after using generous early offers to build user habits.
HDFC Bank has forwarded the names of two candidates to the Reserve Bank of India for the position of Managing Director and CEO. The bank's board has also approved the promotion of Jimmy Tata to executive director and sought a tenure extension for V Srinivasa Rangan. These changes would raise the total number of whole-time directors to four, strengthening governance over its subsidiaries. All appointments remain subject to final clearance from the RBI.
The OpenOSRS project offers a beginner-friendly way to learn desktop client plugin development through a minimal Java example called the Welcome plugin. The plugin displays a chat message when a player logs in, demonstrating key concepts such as dependency injection, game event handling, and plugin packaging. Developers need Git and JDK 11 to get started, as the repository includes a Gradle wrapper that handles the build process automatically. The build system downloads a pinned client SDK, verifies it via SHA-256, and uses it at compile time without bundling it into the plugin. Once built, the plugin can be installed directly through OpenOSRS's External Plugin Manager, which includes the examples repository by default.
A software developer has built an automated news briefing system that pulls around 120 items from roughly 100 RSS feeds every hour and uses Claude Haiku on AWS Bedrock to select, rank, and summarize stories. The pipeline renders output as a 480x800 one-bit image for an e-ink desk reader, and also produces PDF editions for reMarkable and Kindle devices. A custom deduplication system merges near-identical stories from different outlets using headline entity overlap, ensuring the same news event is not repeated across sources. The entire pipeline has been exposed as both a public API and an MCP server so AI agents can query the curated briefings programmatically. The developer noted that within a day of listing the MCP server in public registries, traffic consisted almost entirely of automated bots rather than human users.
AWS Lambda MicroVMs offer independent developers a serverless computing option that combines the simplicity of managed infrastructure with the performance of real server environments. Unlike traditional enterprise setups, MicroVMs provide hardware-level isolation, in-memory state retention for up to eight hours, and fast startup times without requiring any infrastructure management. This makes it possible for solo developers or small teams to run production-grade web applications at minimal cost. The approach encourages keeping architecture lean by avoiding unnecessary orchestration layers, complex databases, or security frameworks unless genuinely needed. As software development trends cycle back toward simplicity, lightweight tools like Lambda MicroVMs allow indie developers to ship faster and more efficiently than teams burdened by over-engineered systems.
The Reserve Bank of India has rejected Tata Sons' application to surrender its core investment company registration, bringing the Tata Group's holding firm closer to a stock market listing. Tata Sons had sought to shed the designation in an effort to avoid mandatory listing requirements. Tata Trusts, which holds a majority stake, has been pushing to keep the company private in order to maintain long-term control. However, the Shapoorji Pallonji Group, another key stakeholder, has been in favour of a public offering. The RBI's decision effectively narrows Tata Sons' options for remaining unlisted.
A developer on DEV Community has posted a discussion prompt inviting programmers to share their experiences working with multiple programming languages within a single project. The post asks contributors to describe what they were building, which languages were involved, and how those languages communicated with each other. Respondents are also encouraged to detail any integration issues they encountered, including how long those problems took to diagnose and resolve. The author is equally interested in hearing about smooth multi-language setups and what made them successful. The discussion appears to be part of exploratory research into how developers currently handle cross-language programming challenges.
A technical field guide covering twelve reusable integration patterns for Oracle Integration 3 (OIC) has been published, targeting architects and developers working on enterprise and healthcare projects. Each pattern is supported by real-world examples, architecture views, and sequence diagrams to aid recognition and practical application. The patterns range from synchronous request-reply and API facade mediation to publish-subscribe, event-driven integration, and B2B/EDI gateway designs. Use cases include healthcare scenarios such as claims routing, member onboarding, and eligibility checks, as well as bulk file transfers and scheduled data synchronization. The guide positions these patterns as composable building blocks rather than standalone templates, helping teams make informed architecture decisions on real OIC deployments.
A developer created a location-aware Android app that automatically switches a phone's sound profile based on the user's physical location, eliminating the need for manual toggling. The solution uses Google Play Services' GeofencingClient, which offloads location monitoring to the system and only wakes the app when a user enters or exits a defined zone, preserving battery life. To prevent erratic profile switching caused by GPS signal bounce in urban areas, a 60-second hysteresis buffer was implemented before acting on an exit event. The app stores all data locally using Room for persistence, and re-registers alarms and geofences after a device reboot to maintain active routines. A key challenge encountered was Android's aggressive Doze mode and manufacturer battery optimizations, which disrupted reliable background execution even with location permissions granted.
A Python game engine developer rewrote a basic numeric clamp function — which performs just three comparisons — first into the Squirrel scripting language and then into C, chasing performance gains that were never needed. The Squirrel version added significant overhead, requiring multiple float conversions and a full interpreter loop for a trivial operation. The developer then built a zero-configuration C integration system using Python's cffi library, allowing C files to be compiled and loaded automatically at runtime with no manual build step. Testing ultimately showed that a single line of native Python matched the speed of the C implementation for this function. The project highlights how premature optimization can lead to unnecessary complexity, and documents a practical pattern for embedding C into Python projects with minimal friction.
A preprint review published on arXiv on 20 August 2026 by Michels et al. synthesised existing field evidence on AI-assisted software development and its productivity effects. The study found that 'vibe coding' — where developers describe intent and validate output by running rather than reading generated code — caused code-review time to rise by 441% according to team-level telemetry. Productivity findings across the reviewed studies were contradictory, with some peer-reviewed experiments showing a 26% increase in weekly tasks while independent randomised trials recorded a 19% slowdown. The authors argue the discrepancy stems from differences in measurement methods, with output volume frequently being mistaken for genuine productivity. The review also flagged weak fault detection, hard-to-audit documentation, code-quality degradation, and security failures in deployed applications as additional concerns tied to AI-assisted workflows.
