SShortSingh.
0
ProgrammingDEV Community ·

Repository Pattern Enables Seamless REST-to-GraphQL Migration in React Apps

A software developer shared how the Repository Pattern solved the challenge of migrating a rapidly growing React application from a REST API to GraphQL without disrupting existing functionality. The pattern introduces an abstraction layer between business logic and data sources, allowing React components to request data without knowing its origin. By defining a shared interface and swapping underlying implementations, the team could switch from REST to GraphQL repositories independently of UI code. The approach also improved testability and centralised data-fetching logic, making the codebase easier to maintain. The developer demonstrated the technique using TypeScript interfaces, dependency injection via Zustand, and React Query for state management.

0
ProgrammingDEV Community ·

TypeScript 7 Ships Native Go Compiler, Delivering Up to 17x Faster Build Times

Microsoft released TypeScript 7.0 on July 8, 2026, replacing its JavaScript-based compiler with one written in Go and compiled to a native binary. The change does not alter how TypeScript code is written or executed — browsers and Node.js still cannot run TypeScript directly, and the compilation pipeline's inputs and outputs remain the same. The rewrite delivers roughly 10x faster full builds across major codebases, with VS Code's build time dropping from 125.7 seconds to 10.6 seconds in published benchmarks. Performance gains come from two factors: ahead-of-time native compilation and shared-memory multithreading, which allows type-checking to run across multiple parallel workers — something JavaScript's architecture structurally prevented. Memory usage also fell by 18–26% on tested projects, and users can further tune performance by increasing the number of checker workers via a command-line flag.

0
ProgrammingDEV Community ·

What Does an Access Point Actually Do in a Corporate Network?

An Access Point (AP) is a network component that bridges wireless devices to a wired infrastructure, forwarding traffic to a switch rather than making independent routing or security decisions. While home users often confuse APs with modems, enterprise environments deploy them for specific purposes including seamless roaming, load balancing, and supporting large numbers of simultaneous users. In corporate settings, a single physical network may serve employees, guests, printers, IP cameras, and IoT devices, making controlled access essential. When a device attempts to connect, the AP receives the request, forwards it to the switch, and facilitates the authentication process before applying VLAN assignments. Rather than granting internet access on its own, the AP serves as the first point of contact in Network Access Control systems, helping enforce security policies decided elsewhere.

0
SportsESPNcricinfo ·

Shashank Singh leaves Chhattisgarh for Puducherry citing disrespect and indifference

Allrounder Shashank Singh has decided to leave Chhattisgarh and join Puducherry for domestic cricket. The player cited reasons of disrespect and indifference from the Chhattisgarh cricket setup as the driving force behind his departure. Singh expressed that he deserved clarity regarding his position rather than being subjected to ridicule. The move marks a significant shift in his domestic career as he seeks a more supportive environment to continue playing.

0
ProgrammingDEV Community ·

How Token Counts Can Expose Silent Failures in LLM Agents Returning HTTP 200

AI agents can return a successful HTTP 200 status with no errors in logs, yet produce no usable output — a phenomenon known as a silent failure. This occurs when a model triggers a refusal policy, generates whitespace, or successfully describes a failed tool call instead of returning expected data. Standard observability tools typically monitor HTTP status codes and miss these output-level failures entirely. Developers can detect such failures by cross-referencing output token counts with actual response content length, since a near-zero or mismatched token count signals something went wrong after the API call succeeded. A simple heuristic function comparing token spend against response content can flag these silent failures before they corrupt downstream pipelines or silently skip critical actions.

0
ProgrammingDEV Community ·

Developer Uses Claude AI to Cut Smart Contract Coding and Review Time

A software engineer with 20 years of experience across banking, blockchain, and digital forensics has detailed how he integrates Claude AI into his daily development workflow. He uses the AI tool as a pair programmer to generate boilerplate Rust code for Soroban smart contracts on the Stellar blockchain, reducing scaffolding work from a full day to roughly two hours. The engineer also employs Claude for adversarial security reviews, where it reportedly identified an integer overflow vulnerability in a reward-distribution loop that static analysis tools had missed. He applies strict prompt constraints — such as banning unwrap() calls — to ensure generated code meets production standards, which he says cut initial review cycles by about 40% across his last three projects. Additionally, he uses Claude to produce audience-tailored documentation, generating both business-facing and technical write-ups from a single code source.

0
ProgrammingDEV Community ·

LoRA-Based Preference Tuning Optimizes Style Over Reasoning, Researchers Warn

A technical analysis published on DEV Community argues that using low-rank adapters (LoRA) for preference optimization methods like DPO systematically biases language models toward superficial stylistic changes rather than genuine reasoning improvements. Because the low-rank constraint limits the update to a narrow subspace, the optimizer defaults to the cheapest signal separating good from bad outputs — typically tone, formatting, and hedging phrases. Full-rank fine-tuning can spread gradient signals across more independent directions, enabling deeper reasoning changes, but it remains computationally expensive and is rarely used in practice. The analysis warns that distilling from a LoRA-DPO model compounds the problem by permanently encoding these shortcuts into student models. The proposed remedy is not collecting more data but reconsidering how rank budget is allocated across the model's layers during preference tuning.

0
ProgrammingDEV Community ·

Smartphone AI Pentesting Agent Can Flag Subdomain Takeover Risks Using WHOIS API

A local AI pentesting tool called Nightcrawler, designed to run entirely on a smartphone without cloud resources, has sparked interest in the cybersecurity community for its pocket-sized offensive-security capabilities. However, phone-based large language models lack the computing power to run full subdomain enumeration and DNS resolution pipelines independently. A proposed solution involves routing reconnaissance tasks to a lightweight backend API, specifically a Domain WHOIS API that bundles RDAP data, DNS records, SSL metadata, subdomain discovery, and takeover-risk scoring into a single JSON response. Subdomain takeover — where attackers claim dangling DNS records pointing to defunct services like GitHub Pages or Heroku — is considered a high-impact, low-complexity vulnerability commonly targeted in bug bounty programs. By offloading the heavy data gathering to the API, the on-device LLM only needs to reason over structured results and surface actionable findings to the user.

0
ProgrammingDEV Community ·

NETO: A Local P2P Chat Tool for Dev Teams That Keeps Data Off the Cloud

NETO is a peer-to-peer chat application built for development teams who want to communicate entirely within their local network. The tool requires no servers, no user accounts, and no external data storage, ensuring sensitive information never leaves the office. It uses mDNS technology to automatically discover other users on the same network without any manual IP configuration. Messages are secured through end-to-end encryption powered by the X25519 elliptic-curve Diffie-Hellman key exchange protocol. NETO positions itself as a privacy-focused alternative to cloud-based platforms like Slack, where credentials and architectural discussions may be stored on third-party servers.

0
IndiaTimes of India ·

India to Triple Airborne Surveillance Fleet to 18 Aircraft by 2028

India is undertaking a major expansion of its airborne early warning and control capabilities to strengthen air defence. The induction of new Netra Mk-1A aircraft is set to triple the indigenous fleet from six to eighteen platforms by 2028. A follow-on programme, the Netra Mk-2, aims to deliver more advanced indigenous AWACS aircraft by 2032. Together, these systems are designed to provide comprehensive battlespace awareness across multiple threat scenarios. The initiative reflects India's broader push toward self-reliant defence technology development.

0
ProgrammingDEV Community ·

Dev builds two-sided AI skills marketplace on a single DynamoDB table

A developer built Skill Exchange, a marketplace for reusable AI skills, using a single-table DynamoDB design to handle sellers, buyers, reviews, and a leaderboard. The key lesson was to define all read access patterns before designing the schema, since DynamoDB lacks joins and restricts queries to a single partition. Global Secondary Indexes (GSIs) were designed to serve multiple access patterns each, with one index powering both the moderation queue and the live marketplace by using a status-encoded partition key. Approving a skill updates a single attribute, atomically moving the item between index partitions without needing separate status flags or scans. The approach also addressed double-payment risks by encoding purchase uniqueness directly into the primary key structure.

0
ProgrammingDEV Community ·

Solo RV Developer Builds Tab Reminder Tool After Losing Critical Browser Tab

A solo developer working from an RV created a browser extension called Tab Reminder after accidentally closing a tab containing a critical bug fix, costing hours of lost work. The tool allows users to schedule browser tabs to reopen at a later time, addressing a common productivity pain point. Building the extension required in-depth use of the Chrome browser's extension APIs, particularly the chrome.tabs API for storing and retrieving tab data. The developer noted that the experience reinforced the value of creating simple, practical tools that solve everyday problems. Tab Reminder has since improved the developer's own workflow and received positive feedback from other users facing similar challenges.

0
ProgrammingDEV Community ·

MD1's COV System Keeps Drone Missions Running When Individual Units Fail

MyData1 has developed a system called Cognitive Orchestration & Vision (COV) designed to prevent silent failures in multi-drone operations. Each drone continuously broadcasts a signal carrying battery status, task progress, and semantic context, allowing the central orchestrator to detect when a unit is going offline. When a drone disengages, the system identifies the coverage gap, uses the departing drone's last observations as a handoff brief, and reassigns unfinished tasks to the most suitable remaining drone. If no suitable replacement is available due to fleet-wide energy constraints, the system escalates to the human operator with a focused question about mission priorities rather than demanding manual micromanagement. Task state is also distributed across individual drones, so a lost connection to the central orchestrator does not halt operations, as nearby drones can negotiate local coverage until the link is restored.

0
ProgrammingDEV Community ·

Lessons from a CEO and CFO who never bent under pressure

A software engineer reflects on working closely with two senior leaders — a CEO and a CFO — at an early-career company that nearly went under. The CEO, unable to read code, had a sharp instinct for identifying the single sellable feature in any product and relentlessly pursued new business categories even as others failed. His drive, the author notes, was forged through financial hardship and a failed venture rather than innate talent. The CFO quietly absorbed the company's gravest financial risks personally, shielding the rest of the team from pressures that could have paralyzed operations. Together, the two shaped the author's understanding of resilience, focus, and the different forms that relentless drive can take.

0
TechnologyThe Verge ·

House House's Big Walk is a co-op puzzle explorer set on a vast island

House House, the studio behind the hit Untitled Goose Game, has announced and released its next title called Big Walk. Unlike its predecessor, Big Walk is a cooperative multiplayer game where players explore a large island and solve puzzles together. The game marks a significant creative shift for the studio, moving away from the solo, mischief-driven gameplay of Untitled Goose Game. A reviewer at The Verge has already logged over 13 hours playing the game in co-op with a partner, suggesting it offers substantial content. Big Walk is being described as reminiscent of open-world exploration games, drawing comparisons to titles like The Legend of Zelda: Breath of the Wild.

0
IndiaTimes of India ·

Australian grandfather, 82, and grandson cycle 5,300km to raise MND awareness

An 82-year-old Australian man and his 18-year-old grandson have completed a grueling 5,300-kilometre cycling journey across Australia. The duo rode from Broome to Bowral over the course of six weeks. Their challenge was motivated by a desire to raise funds and awareness for motor neurone disease. The effort was inspired by the loss of a family member who had died from the condition.

0
ProgrammingDEV Community ·

JWT Authentication Explained: How Stateless Tokens Replace Server Sessions

JWT (JSON Web Token) is a compact, signed token used in backend authentication to verify users without storing session data on the server. When a user logs in with credentials, the server generates a JWT comprising three parts — a header, a payload, and a cryptographic signature — and returns it to the client. The client then includes this token in every subsequent request, allowing the server to verify identity by checking the signature rather than querying a session store. Although the payload is Base64-encoded and readable by anyone, the signature ensures the token cannot be tampered with, since altering any data invalidates the signature without the server's secret key. Security best practices recommend storing tokens in HttpOnly cookies or secure platform storage rather than localStorage, to guard against cross-site scripting attacks.

← NewerPage 53 of 2015Older →