SShortSingh.
0
IndiaTimes of India ·

Delhi bus gang rape: Driver, conductor arrested after assaulting 16-year-old girl

A 16-year-old girl was allegedly gang-raped by a bus driver and conductor in the Greater Noida area. The assailants picked her up during a rainstorm before committing the assault. After the crime, the victim was abandoned near Kashmere Gate in Delhi. Police tracked the bus and swiftly apprehended both suspects. The case has drawn comparisons to the 2012 Nirbhaya gang rape that had shaken the entire country.

0
IndiaTimes of India ·

Teen Gang-Raped on Greater Noida Bus; Driver and Conductor Arrested

A 16-year-old girl was allegedly gang-raped by a bus driver and conductor in Greater Noida, in an incident that has drawn comparisons to the 2012 Nirbhaya case. The assailants picked up the minor during a rainstorm before assaulting her over a 43-kilometre stretch with no stops and non-functional CCTV cameras. After the attack, the girl was abandoned near Kashmere Gate in Delhi. Police acted swiftly and apprehended both accused by tracing the bus. The case has highlighted serious security gaps in public transport in the Delhi-NCR region.

0
IndiaNDTV ·

Gujarat CM Courts Global Investors Ahead of 11th Vibrant Gujarat Summit

Gujarat Chief Minister Bhupendra Patel addressed the curtain-raiser event for the 11th edition of the Vibrant Gujarat Global Summit. He extended a formal invitation to international investors to explore opportunities in the state. Patel highlighted Gujarat's key strengths, including a stable policy environment, skilled youth, and transparent governance. He also emphasized the state's capacity for scale and effective administration as major draws for investment.

0
IndiaTimes of India ·

Mumbai property registrations reach 14-year August high with 11% annual growth

Mumbai recorded 12,401 property registrations in August, the highest figure for that month in over 14 years. This represents an 11% increase compared to the same period last year. The growth reflects robust demand across both primary and secondary housing markets. Favorable economic conditions and sustained buyer interest have contributed to the market's strong performance. Analysts suggest developers should focus on timely project delivery as they plan new launches to maintain momentum.

0
SpaceNASA ·

NASA's Nancy Grace Roman Space Telescope Launches Aboard SpaceX Falcon Heavy

NASA's Nancy Grace Roman Space Telescope lifted off on a SpaceX Falcon Heavy rocket from Kennedy Space Center in Florida on August 30, 2026. The telescope is named after NASA's first chief astronomer, Nancy Grace Roman. Designed for wide-field astronomy, Roman offers a significantly larger field of view than the Hubble Space Telescope. Its primary mission will involve surveying billions of stars and galaxies across the universe.

0
ProgrammingDEV Community ·

What HTTP Response Headers Reveal About Your Site's Security Posture

Before a browser renders any content, a web server exchanges response headers with it — and these headers can expose critical security gaps to anyone who knows how to read them. Key headers like Strict-Transport-Security (HSTS), Content-Security-Policy (CSP), and Set-Cookie attributes determine how well a site defends against common attacks such as man-in-the-middle interception, cross-site scripting, and session hijacking. According to HTTP Archive's 2025 crawl, only about 36% of pages deploy HSTS and just 21.9% send a CSP header, leaving the majority of sites without basic protective layers. Missing or misconfigured headers — such as CSP policies that include 'unsafe-inline' or session cookies lacking HttpOnly — can turn minor vulnerabilities into full account compromises. Developers can audit their own headers in seconds using browser DevTools, making it one of the quickest security checks available.

0
ProgrammingDEV Community ·

MUSTER Framework Limits AI Agent Data Access and Redundant Actions in Enterprise Use

A developer has built an experimental AI framework called MUSTER to address two key risks in enterprise AI agents: excessive access to private data and unnecessary repeated actions when outcomes are uncertain. Rather than granting a central AI agent broad access to all systems, MUSTER keeps each data source isolated, with separate agents for payroll and site-access data operating within their own boundaries, enforced via Google Cloud IAM. Facts are only accepted as authoritative when validated and cryptographically signed by the originating source, while a language model's interpretation alone carries no decision-making authority. The framework also introduces a principle of minimal evidence collection, where the agent stops gathering data once no remaining uncertainty can change the final outcome. In a worked example, MUSTER resolved a payroll dispute for a worker named Ravi by confirming his on-site duration exceeded the policy threshold, issuing a corrected payment without needing to establish an exact figure.

0
ProgrammingDEV Community ·

Three OpenAI API Mistakes That Can Inflate Your Bills Unexpectedly

A developer sharing experience on DEV Community has outlined three common and costly mistakes made when using the OpenAI API in production environments. Leaving max_tokens uncapped and temperature too high can cause simple tasks to consume far more tokens than expected, multiplying costs at scale. Failing to attribute API calls to individual user IDs makes it impossible to track which users are driving expenses or to enforce usage limits. Using powerful, expensive models like GPT-4 for tasks that cheaper alternatives like GPT-3.5-turbo could handle equally well can result in thousands of dollars in unnecessary monthly charges. The author recommends auditing model selection, setting strict token limits, and tracking usage per user from the outset to keep API costs under control.

0
ProgrammingDEV Community ·

Scrum vs Kanban debate misses the point: it's about promise size, not method

A software team working on a 10-month project cycled through three agile approaches — Kanban, Strong Ownership, and Scrum — without changing their core ceremonies or tooling. The only variable that shifted was what the author calls 'promise size': the scope of work a single person commits to, ranging from a micro-task to a full page to a story-point-based sprint. The team's choice of approach at each phase was driven purely by their level of certainty about the work ahead, not by coach recommendations or framework ideology. During the first three months, two methods ran simultaneously — developers pulled Kanban tasks while the lead architect worked under Strong Ownership — and no one found it unusual. The author argues that framing agile decisions around estimation granularity, rather than methodology labels, is a more honest and practical way to manage software projects.

0
ProgrammingDEV Community ·

Why Skipping AI Output Verification Costs Far More Than the Check Itself

Unverified AI-generated content can fail in five key ways, including hallucinated facts, missing safety steps, inconsistent formatting, wrong tone, and invented code or APIs. A structured verification process — taking roughly three minutes per output — can catch most of these issues before they reach customers or downstream systems. In one real-world case, a B2B SaaS company published an AI-drafted case study containing a fabricated customer quote, leading to a pulled article, weeks of relationship repair, and months of lost trust with nearby accounts. Experts distinguish true verification from a casual read-through, noting that proper checks must confirm factual accuracy, format compliance, tone appropriateness, and source traceability. The core argument is that the cost of not verifying AI output consistently outweighs the minimal time investment required to do it properly.

0
ProgrammingDEV Community ·

Why a QMS Checkbox Is Not Enough: Building Compliance Into Daily Work

Medical device companies often treat quality management systems as a documentation exercise, but regulators and auditors are focused on whether the system actually prevents faulty devices from reaching patients. A recurring gap identified in MDR 2017/745 audits is poor traceability — engineers struggle to link incidents, risk assessments, change controls, and device documentation in real time. Standards like ISO 13485 and the MDR define what must be documented but offer little guidance on making those processes usable day-to-day. Experts recommend designing QMS workflows around discoverability, embedding compliance steps directly into engineers' tasks, and keeping risk assessments visibly connected to CAPAs and post-market clinical follow-up. Practical fixes such as structured CAPA templates, one-click traceability checks at change approval, and AI-assisted drafting with mandatory human sign-off can close these gaps without requiring a full system overhaul.

0
ProgrammingDEV Community ·

Why AI Tokens Are Becoming the Internet's Strangest New Economic Unit

Artificial intelligence has introduced a new unit of economic measurement — the token — which represents small chunks of text processed by AI models rather than full words or characters. Unlike traditional software pricing based on storage, bandwidth, or subscriptions, AI services charge per token consumed, turning data centers into factories that sell computational language processing. The economics are counterintuitive: a cheaper token can raise overall product costs, a pricier model can reduce total spending, and AI costs are falling even as total industry expenditure rises sharply. Not all tokens carry equal computational weight, as output tokens and those produced after complex reasoning demand far more processing than simple inputs. This shift is fundamentally changing how developers and businesses think about software costs, making the smallest unit of AI output one of the most consequential pricing metrics in modern technology.

0
ProgrammingDEV Community ·

How a font-free Alpine container silently rendered blank legal document pages

A developer building e-signature platform Putmysign discovered that certificate pages were rendering completely blank in production despite no errors or failed exit codes. The root cause was that the Node 24 Alpine Docker container shipped with no system fonts, so when pdftoppm tried to render PDFs using standard base-14 fonts like Helvetica, it found no substitutes and drew nothing. Installing Liberation fonts — metric-compatible replacements for the base-14 families — resolved the blank-page issue with a single Dockerfile line. A second bug was also uncovered: typed signatures displayed in Dancing Script font were being saved in PDFs as Helvetica Oblique, because the font file was unavailable at runtime in the production image. The incidents highlighted that fonts are a deployment concern, and that a renderer returning exit code 0 is no guarantee the output is correct.

0
ProgrammingDEV Community ·

DEV Community Members Share Weekly Coding Goals in Thread #194

DEV Community's recurring weekly thread #194 invited members to share their goals around learning, building, job searching, and attending events. Participants listed objectives such as applying for jobs, working on side projects, completing CSS Battles, and exploring GitHub Co-Pilot. One member tracked progress on their goals, marking most as completed while noting a missed virtual event. The Virtual Coffee community also featured as a recurring gathering point, with members attending virtual sessions on Thursday and Friday. The thread's cover image featured LEGO photography of Daffy Duck at a desktop computer.

0
ProgrammingDEV Community ·

Why Classical Information Retrieval Is the Missing Foundation of Modern RAG Systems

Many engineers building Retrieval-Augmented Generation (RAG) systems struggle with high costs and fragile architectures because they treat RAG as a new invention rather than a classical search problem with a large language model attached. The article argues that studying Information Retrieval (IR), particularly the textbook by Manning, Raghavan, and Schütze, offers proven solutions to these structural issues. Lexical search algorithms like BM25 complement dense vector embeddings by handling exact keyword matches — such as product codes and error IDs — without relying on neural networks that can become outdated. A multi-stage retrieval pipeline, where cheap methods like BM25 first narrow results to a candidate set before an expensive re-ranker refines the top results, can dramatically cut infrastructure costs. IR also provides rigorous evaluation metrics such as Precision@K and Recall, replacing guesswork with measurable proof that a retrieval system is actually working.

0
IndiaTimes of India ·

Mahomes Foundation raises $1.5M for Kansas City charities at annual gala

Patrick and Brittany Mahomes' 15 and the Mahomies Foundation, along with its partners, distributed over $1.5 million to Kansas City-area charities. The foundation's sixth annual fundraising gala drew more than 900 attendees. In 2025, youth volunteers connected to the foundation logged over 92,000 service hours, generating more than $3.2 million in community impact. The initiative focuses on inspiring young people to engage in charitable work and give back to their communities.

0
ProgrammingDEV Community ·

Six ways green status checks silently lied in a real codebase

A developer auditing their own project on August 26, 2026, identified six instances where automated checks reported passing results despite never performing meaningful verification. Common failure patterns included a scanner that split records on the wrong delimiter and returned zero findings, a file-comparison check that passed because both expected files were absent, and a regex that never matched because the payload structure differed from what the pattern assumed. A separate audit probe, investigated on August 29, found it had no way to distinguish failed items from items that could not be examined at all, silently folding unevaluable cases into failures. Additionally, continuous integration had run zero actual jobs for thirteen days and over 2,000 commits due to a billing issue, with the dashboard showing failed statuses that masked the fact that no jobs had ever started.

0
ProgrammingDEV Community ·

How to Detect If a Website Runs Drupal: Manual Methods and API Tools

Drupal powers websites for governments, universities, and large enterprises, making CMS detection valuable for sales teams, security professionals, and migration consultants. A default Drupal installation exposes several identifiable signals, including the X-Generator response header, which names the CMS and its major version. Security teams have particular urgency around Drupal detection given past critical vulnerabilities like Drupalgeddon and Drupalgeddon 2, which were exploited at internet scale shortly after disclosure. Drupal 7 reached end of life in January 2025, leaving many sites still running outdated versions and creating demand for replatforming consultants. Tools ranging from manual curl commands to programmatic APIs like DetectZeStack can confirm Drupal usage across single domains or large prospect lists.

← NewerPage 650 of 4062Older →