SShortSingh.
0
ProgrammingDEV Community ·

How to Build Auditable Session Revocation Into Go Server-Rendered Login Flows

A secure server-rendered login system in Go should manage session creation, verification, refresh, and logout under a single server-side policy, with password recovery explicitly revoking old sessions before creating new ones. The recommended design uses an opaque cookie backed by a server-side session record, keeping recovery tokens strictly separate from login sessions to simplify expiry and revocation enforcement. During password recovery, only one request should be allowed to consume a recovery credential even if multiple tabs submit the form simultaneously, with all others receiving a generic invalid-or-expired response. A defensible audit trail should log events in order — recovery requested, credential verified, password changed, sessions revoked, and new session created — so that incomplete state transitions can be detected and alerted on. Monitoring should focus on the age and count of recovery flows that changed a password without completing session revocation, rather than relying on raw 401 response counts, which mix unrelated failure types into a single noisy signal.

0
IndiaTimes of India ·

Yash's Toxic Earns Rs 5.1 Cr on Day 8, Domestic Total Crosses Rs 234 Cr

Yash-starrer Toxic experienced a 35% drop in box office earnings on its eighth day of release. The film collected Rs 5.10 crore net domestically on Wednesday, bringing its total India net collection to Rs 234.70 crore. The film's worldwide gross surpassed Rs 322 crore by the end of day eight. Among all language versions screened, Kannada shows recorded the highest audience occupancy. Despite the mid-week dip, the film continues to maintain a strong overall theatrical run.

0
WorldBBC World ·

Sharpeville Massacre Survivors Launch Legal Battle for Justice After 65 Years

Survivors and families of the 1960 Sharpeville massacre have initiated legal proceedings in South Africa seeking justice and restitution. At least 69 people were killed when police opened fire on Black protesters in the township of Sharpeville on March 21, 1960. Decades after the killings, no individual has ever faced prosecution in connection with the massacre. The victims' representatives are now demanding formal accountability and compensation from the South African state.

0
ProgrammingDEV Community ·

Progressive Profiling Should Update Users, Not Recreate Them

A technical guide for healthtech platforms argues that progressive profiling must update a single, immutable user record rather than creating a new one when profile details change. The user ID should serve as the stable aggregate key, while attributes like email act as verified lookup identities rather than primary keys. Each accepted profile change should be recorded as a separately authorized, auditable state transition to maintain a clear account history. The design separates operational profile state from audit evidence, keeping current data bounded while allowing event history to grow into tiered storage. Sensitive data such as password material and reset secrets should be deliberately excluded from audit logs, with deletion schedules aligned to healthcare compliance and incident-response requirements.

0
IndiaNDTV ·

Child Obesity Surges in Developing Nations, WHO-Backed Study Finds

A WHO-backed project has highlighted a growing child health crisis in developing countries, where obesity is rising alongside persistent hunger. In Peru, obesity rates among boys climbed sharply to 19% between 2023 and 2024, up from under 8% in 2010. This increase represents one of the fastest rises recorded among the nations studied. The findings underscore a dual burden of malnutrition now facing lower-income countries, where undernutrition and obesity coexist as major public health challenges.

0
ProgrammingDEV Community ·

How a Monitoring SaaS Fixed Its Own Blind Spot After 47 Minutes of Silent Downtime

A monitoring platform called PulseWatch suffered 47 minutes of undetected downtime when its own internal watchdog component failed silently due to a blocking I/O call inside an async Python coroutine. The stalled event loop prevented the meta-monitor from sending heartbeats, causing the external validator to falsely report normal status while the primary database collapsed. Engineers resolved the issue by implementing a three-layer self-validation system built entirely on standard libraries, avoiding new dependencies under an 8GB RAM constraint. A non-blocking event loop watchdog was introduced to detect stalls exceeding 500 milliseconds and trigger an OS-level signal, adding less than 0.1 percent CPU overhead. A secondary fix replaced an unbounded metrics dictionary with a bounded LRU cache capped at 10,000 entries to prevent out-of-memory crashes.

0
ProgrammingDEV Community ·

Developer Ships Financial Web App Using AI as Full Product Team

A developer launched GranaCheck, a web app that performs financial health checkups and generates personalized budget splits, by using AI tools across every stage of development. Rather than coding from scratch, the developer assigned AI the roles of product manager, UI designer, frontend developer, and QA tester. The app was built using Vue 3 and Tailwind CSS, with AI generating modular components one at a time based on a predefined design system. Layout bugs were resolved by feeding screenshots back to the AI and requesting targeted CSS fixes. The developer's own role was limited to product architecture and decision-making, allowing the MVP to reach production without the project stalling.

0
ProgrammingDEV Community ·

Why AI Agents Pass All Tests Yet Silently Fail in Production

AI agents that clear unit and end-to-end tests are still breaking in production, delivering wrong or fabricated outputs without throwing any errors or exceptions. Engineering post-mortems point to four core failure types: semantic drift, state collapse, tool hallucination, and loop exhaustion — none of which produce invalid JSON or HTTP errors detectable by standard test suites. In one case, an e-commerce recommendation agent saw accuracy fall from 94% to 61% after its embedding index fell out of sync with a daily-updated product catalog, compounded by an unversioned model update from its provider. A fintech team's API-integrated agent passed contract tests for six months before a silent backend change broke production behavior undetected. Experts recommend embedding distribution monitoring, model version pinning, canary evaluations, and semantic output validation to close the observability gap between 'it ran' and 'it produced the right result'.

0
ProgrammingDEV Community ·

Reddit, YouTube, LinkedIn Dominate AI Search Citations Across Major Platforms

A March 2026 analysis by Peec AI examined 30 million citation events across five major AI platforms — ChatGPT, Gemini, Perplexity, Google AI Mode, and Google AI Overviews — finding that Reddit ranked first or second in citations across all tested engines. YouTube and LinkedIn also appeared consistently among the most-cited domains, alongside Wikipedia, Forbes, and G2 in the broader top 10. The study found that citation patterns vary by platform, with Google's AI tools surfacing more social content like Facebook and Yelp, while ChatGPT leaned toward editorial sources. For businesses, the findings suggest that AI-driven search visibility now extends beyond company websites to include community discussions, professional posts, and video content. The research highlights that monitoring only traditional search rankings may cause companies to overlook how they are represented in AI-assisted discovery.

0
ProgrammingDEV Community ·

A Practical Guide to Understanding and Using Cron Jobs on Unix Systems

Cron is a time-based job scheduler built into Unix-like operating systems that automates repetitive tasks by running scripts or commands at defined intervals. Users manage cron jobs through the crontab command, using a five-field syntax specifying minute, hour, day of month, month, and day of week. Best practices include using absolute file paths, adding a shebang line to scripts, making scripts executable, and redirecting output to log files for easier debugging. Common pitfalls involve cron's minimal environment, Windows-style line endings, and its OR logic when combining day-of-month and day-of-week fields. For more complex scheduling needs beyond cron's capabilities, tools like Cronitor or systemd timers are recommended alternatives.

0
ProgrammingDEV Community ·

Developer Builds Self-Healing macOS Guard After Automated Sales Schedule Was Silently Altered

A solo developer running an automated outreach business discovered on August 23, 2026, that four macOS LaunchAgent configuration files had been externally rewritten, cutting daily sales DM runs from 8–7 times down to 3 and shifting one slot to 2:31 AM. The unauthorized change reduced daily outreach by over 60% and introduced late-night sends that risk triggering platform spam detection and account suspension. The developer could not identify the cause, suspecting either a third-party script or a system update side effect. Rather than relying on manual monitoring, they built a launchd-based guard agent that checks all schedule configurations every 10 minutes and automatically reverts any unauthorized changes. The solution was designed around the principle that the system should self-heal before a human even notices the problem.

0
ProgrammingDEV Community ·

Dev.to Writer Opens Up About Losing Passion for Tech and Coding

A software developer has shared a candid reflection on the Dev.to platform, expressing doubts about whether tech is the right field for them. Writing for the site's 2025 New Year's Writing Challenge, the author described struggling with the same professional concerns months later. They noted that the issue is not the difficulty of the work but a lack of measurable progress and personal goals within the industry. The developer said they have gradually lost their passions since graduating college and can no longer recall enjoying coding. Rather than withdrawing, they chose to share their experience publicly and invited others in the tech community to discuss how they are feeling about the field.

0
ProgrammingHacker News ·

Analysis Examines Trends and Disparities in American Household Net Worth

A recent analysis published on the Bet On It blog explores patterns in Americans' net worth. The piece reflects on how wealth is distributed across different segments of the U.S. population. It has drawn modest engagement on Hacker News, accumulating 12 points and 2 comments. The discussion touches on broader economic themes relevant to personal finance and wealth inequality in America.

0
WorldBBC World ·

Alejandro Betancourt: The Oil Baron at the Center of US-Venezuela Deal

Alejandro Betancourt, a 46-year-old Venezuelan oil magnate, has emerged as a central figure in the recently brokered US-Venezuela oil deal. Known for his flair for positioning himself at pivotal moments in international business and politics, Betancourt has long been a controversial presence in global energy circles. His involvement in the deal has drawn significant attention given his colorful background in the oil industry. The agreement has spotlighted how influential private figures can shape high-stakes diplomatic and economic arrangements between nations.

0
WorldBBC World ·

Tim Curry, Rocky Horror Star, Died of Coronary Artery Disease

British actor Tim Curry, best known for his iconic role in The Rocky Horror Picture Show, has died from coronary artery disease. The cause of death was officially listed on his death certificate filed in Los Angeles County. Coronary artery disease was recorded as a significant condition contributing to his passing. The revelation brings closure to fans and the entertainment world following the beloved actor's death.

← NewerPage 770 of 4320Older →