Craig Overton steers Somerset closer to first four-day title with bat and ball

Somerset moved a step closer to winning their maiden four-day domestic title in a recent match. Craig Overton, the team's talismanic allrounder, played a pivotal role by contributing significantly with both bat and ball. His performance came in response to Ben Cliff's impressive eight-wicket haul, which had put Somerset under pressure. Overton's counter-attacking display helped Somerset regain control of the match and keep their title hopes alive.

Developer shares lessons on using AI coding tools responsibly in production

A Java developer writing for DEV Community has shared observations after several months of using Claude Code, an IDE-integrated AI tool, for professional software development. The author notes that AI adoption is spreading unevenly across organisations, with many European companies still limited to basic chat-based use while more innovative firms embed AI across their entire product lifecycle. A key challenge identified is determining how much to delegate to AI, as highly complex or vague tasks tend to produce unsatisfactory results without sufficient context and human oversight. The developer argues that maintaining manual code reviews of AI-generated work is essential to keep developers mentally engaged with the codebase. Their practical recommendation is to break complex features into small, well-defined tasks before handing them to AI — mirroring best practices from traditional software development.

ER visits for gambling disorders doubled after online gambling expansion

A study from the University of Toronto's Temerty Faculty of Medicine found that emergency room visits related to gambling disorders nearly doubled following the expansion of the online gambling market. The research highlights a significant public health impact linked to the increased accessibility of digital betting platforms. The findings suggest that easier access to online gambling has contributed to a rise in severe gambling-related harm requiring emergency care. Researchers are calling attention to the need for stronger regulatory measures and mental health support systems to address the growing crisis.

India denies Pakistan-China Boundary Joint Comm

US limits visas for South African officials over discrimination against White minorities

How Velo Workspaces Runs AI Agents Safely on Apple Silicon Without GPU Penalty

Running autonomous AI coding agents on a primary macOS machine poses serious security risks, including file tampering, dependency injection, and credential theft via prompt attacks. The conventional fix—sandboxing agents inside a Linux VM—fails on Apple Silicon because Apple's Virtualization.framework blocks GPU passthrough, causing inference speeds to drop by over 80%. Velo Workspaces addresses this by splitting responsibilities: the AI inference engine (Ollama or Apple MLX) runs natively on macOS with full Metal GPU access, while the agent framework executes inside an isolated Ubuntu Linux guest. Communication between the host and the VM travels over VirtIO-vsock memory buffers, keeping latency in the single-digit millisecond range without a traditional network stack. This architecture lets developers maintain strong security isolation without sacrificing the hardware acceleration that makes large language model inference practical on Apple Silicon.

Bangladesh to play historic first bilateral T20I series in Nepal in 2027

Bangladesh will tour Nepal for a three-match T20I series scheduled for March 2027. This will mark the first-ever official bilateral international series between the two nations. The announcement signals a growing cricketing relationship between Bangladesh and Nepal. The series is expected to be a significant milestone for Nepal as they continue to develop their international cricket programme.

A Forgotten Docker Container Had Been Squatting on Port 3000 for Months

A developer discovered that a Docker container, launched in spring to test Open WebUI and never stopped, had been silently occupying port 3000 on their local machine for months. Each time the Next.js dev server started, it simply shifted to port 3001 without complaint, and the developer moved on without investigating. The mystery was solved using the 'ss -ltnpe' command, which revealed the socket's owning cgroup as docker.service — no root privileges required. The incident highlighted that 'listing open ports' is actually three distinct questions — what is listening, who owns it, and whether it is reachable — each requiring different tools and privilege levels. Commands like ss, lsof, fuser, and nc each answer a different aspect of the problem, and conflating them is the source of much misleading advice online.

Developer Publishes Step-by-Step Walkthrough of Web Security CTF Exam

A developer has published a detailed technical walkthrough on DEV Community demonstrating how to complete a web-based real-time assessment (Web-RTA) security exam. The exercise involved two small Flask web applications, each containing exploitable vulnerabilities including SQL injection, JWT algorithm-none bypass, and XML-based attack surfaces. The author showed that just three tools — curl, python3, and ffuf — were sufficient to enumerate endpoints, bypass authentication, and extract flags from both targets. Key vulnerabilities exploited included a math CAPTCHA bypass, forged unsigned JWTs, and admin access gained through login-form SQL injection. The writeup concludes with a full answer table and a summary of lessons learned about common web application security weaknesses.

Dev Team Shares Honest Retrospective on Building AI Legal Tool Fair Fight

A solo-founder team has published a detailed build retrospective for Fair Fight, a mobile-first legal education platform designed to help self-represented litigants organize case facts and understand legal issues in plain language. The app was built using TanStack Start, Clerk for authentication, Neon serverless Postgres, Stripe for one-time payments, and Gemini and Groq for AI-powered legal argument tools. The team emphasized a strict rule of never claiming a feature works until it is verified end-to-end, a principle that exposed several critical bugs during development. Among the key lessons were that TanStack Start API route handlers must be explicitly mounted via createFileRoute or they return 404 in production despite passing unit tests, and that Stripe webhooks require async signature verification to function correctly across all runtimes. The retrospective also highlighted the importance of deduplication logic for webhook events and smoke-testing live routes rather than relying solely on isolated handler tests.

Apple Plans Return to Server Market by 2029, Possibly Partnering with Nvidia

Apple is reportedly planning to re-enter the server hardware market, driven by surging demand for AI computing power, according to The Information. The company discontinued its Xserve server line back in 2011 and has since stayed out of enterprise hardware. Strong interest from AI developers in Apple's Mac Mini and Mac Studio has led to product shortages, signaling a market opportunity. Apple's energy-efficient ARM-based M-series chips are seen as a competitive advantage in the AI infrastructure space. A potential partnership with Nvidia is being considered, though any new server product is not expected to launch before 2029.

Firebase AI Logic Lets Angular Apps Run Gemini Directly Without a Custom Backend

Firebase AI Logic, the rebranded successor to Vertex AI in Firebase launched in May 2025, enables developers to call Google's Gemini models directly from Angular browser apps without building or maintaining a custom server-side proxy. Requests are routed through Firebase's managed infrastructure, with App Check attestation ensuring only legitimate app traffic reaches the AI service. The integration works with Angular 18 and above using the modular Firebase JS SDK and Angular dependency injection, requiring just two new Firebase-specific files alongside minor edits to existing app configuration. Developers can start quickly using the Gemini Developer API path on Firebase's Spark plan, with an upgrade option to enterprise Vertex Agent Platform features via a single-line backend change. The approach is best suited for shopping assistants, support chat, and on-page copilots, while sensitive prompts, private data retrieval, or high-risk billing actions are still recommended to be handled server-side.

Hose and D'Oliveira Rescue Worcestershire Against Stokes-Led Durham

Adam Hose and Brett D'Oliveira put up a resolute batting display to help Worcestershire withstand a fierce bowling spell from Ben Stokes. The match saw England's former Test captain Stokes apply relentless pressure in an attempt to break through the Worcestershire middle order. Despite Stokes' persistent efforts, Hose and D'Oliveira held firm and denied Durham a breakthrough. The performance came as Worcestershire had recently been crowned Division Two champions. The partnership proved crucial in stabilising Worcestershire's innings against a determined Durham attack.

How to Install Composer and Bind It to a Specific PHP Version on Linux

Composer is PHP's standard dependency manager, used widely across frameworks like Laravel and Symfony to handle library installation and autoloading. A step-by-step guide explains how to install Composer on Linux systems while targeting a specific PHP version, such as PHP 8.4. The process involves downloading the Composer installer via PHP, verifying its integrity using a SHA-384 hash signature, and placing the binary system-wide under /usr/local/bin. Users can then invoke Composer through the desired PHP binary directly or configure a shell alias for convenience in interactive sessions and scripts. For systems requiring multiple PHP versions, this approach ensures each project runs Composer against its intended runtime environment.

Suthar's spin haul gives Warwickshire eight-wicket win over Essex

Warwickshire secured a commanding eight-wicket victory over Essex in their County Championship fixture. Spinner Suthar was the standout performer, dismantling the Essex batting lineup with a decisive spell. The emphatic win has propelled Warwickshire to the top of the County Championship table. Essex, meanwhile, find themselves under pressure after a disappointing home defeat. The result puts Warwickshire in a strong position to challenge for the title.

Trump Praises India's Anti-Drug Efforts Even as US Keeps It on Watch List

US President Donald Trump lauded Prime Minister Narendra Modi's efforts to crack down on opium production and drug trafficking in India. Trump described the progress made under his administration in combating drug trafficking and narcoterrorist organisations as 'historic.' Despite the praise, India continues to remain on the United States' drug watch list. The acknowledgment highlights a nuanced dynamic where Washington recognises India's counter-narcotics steps while maintaining official scrutiny of the country's drug situation.

How to Install Ruby on Ubuntu 24.04 Using rbenv, RVM, or APT

Ruby is a dynamic, object-oriented programming language widely used for scripting and web application development. Ubuntu 24.04 users can install Ruby through three methods: rbenv, RVM, or APT, each offering different levels of version control. Both rbenv and RVM are version managers that allow developers to install and switch between multiple Ruby versions on the same server. The installation process for either manager involves setting up dependencies, downloading the tool via a shell script, and configuring the shell environment. Once installed, users can set a default Ruby version — such as the latest stable release 3.3.6 — and verify it using the ruby --version command.

How to Write SaaS Signup Error Messages That Actually Help Users Fix Issues

Effective signup form error messages should name the specific field, explain the problem clearly, and tell the user what to do next. Valid entries should be preserved after a failed submission so users only need to correct what went wrong. W3C guidelines recommend linking error descriptions to their respective form controls and using consistent field names across labels and messages, including for assistive technologies via aria-describedby. Both client-side and server-side validation are necessary, and any mismatch between the two should surface a clear, actionable message to the user. A complete review should also cover service failure scenarios and post-submission feedback, so users always know whether their task is finished.

How to Install and Manage Multiple Go Versions on Debian 12

Go (Golang) is an open-source, statically typed compiled language well-suited for web servers, cloud-native apps, and CLI tools. It can be installed on Debian 12 via the default APT package repositories using a few straightforward commands. Once installed, users can verify the setup by creating and running a simple sample application. For projects requiring different Go versions, specific releases can be installed manually from source by extracting archives into separate directories and setting PATH variables accordingly. Alternatively, shell aliases can be configured to switch between versions with a single command, offering flexible version management on the same server.

How to Install Gradle on Ubuntu 24.04 Using Three Different Methods

Gradle is an open-source build automation tool that supports multi-language development, including Java, Kotlin, Scala, and Android, among others. On Ubuntu 24.04, it can be installed via three methods: downloading the latest release ZIP archive, using the APT package manager, or through Snap. The ZIP method allows users to install the most current or a specific version, while APT offers a simpler setup but installs an older version such as Gradle 4.4.1. Regardless of the method chosen, a Java Development Kit must be installed as a prerequisite, along with a non-root user account with sudo privileges. Once installed, users can verify the setup using the gradle --version command and proceed to build and run Java applications.