Developer builds Android Reddit reader using public RSS feeds, avoiding API keys

·11 views

A developer wanted to read public Reddit threads without creating an account or registering for the official API, which requires OAuth and token refresh. They built a small Android client, about 105 KB with no server or analytics, that relies on Reddit's public RSS endpoints instead. The feeds return Atom XML and cap results at 25 listing posts and 100 thread entries, and Reddit rate-limits them per IP, returning HTTP 429 errors that should trigger a retry. The article also covers the feed's entry structure, which lacks comment scores or parent pointers, and shows how Android's built-in streaming XML parser can process the feed.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Event-Driven Audit Log Ingestion Versus Direct Database Writes at Scale

The article argues that synchronous writes of audit logs to a relational database become a throughput bottleneck in high-volume SaaS platforms, where microservices can emit tens of thousands of privileged events per second. Such bottlenecks can cause back-pressure, raise API latency, and jeopardize regulatory audit visibility windows. The proposed alternative decouples producers from storage using message brokers such as Kafka, paired with idempotent writes, schema registries, and tiered hot and cold storage. The piece also covers operational concerns like tamper-evidence hashing, tracing, lag alerting, and batch and consumer tuning. It compares this pipeline against direct RDBMS writes, outlining trade-offs in complexity, cost, and consistency.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Phorge and Phabricator installations need migration-aware exposure reviews

Phorge is a maintained fork of Phabricator, and many live installations still show the older product name in their page titles, which can distort searches. A title search returned 244 matches for Phabricator and 34 for Phorge on 2026-11-11, but these counts are treated as overlapping, unverified candidate sets rather than a census. The article stresses that API bearer tokens carry the permissions of their owning account, so reviewers should map which accounts and applications each token can reach. It also recommends reviewing registration policies and authentication providers, since changes there are high-impact and open sign-up could let outsiders create accounts. Each candidate host should be confirmed as Phorge or legacy Phabricator before any conclusions are drawn.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MCP Bastion Flags a Silent Change to an AI Tool Description

The author edited a single sentence in the description of an MCP tool called get_uptime, which changed the tool's promise from reporting uptime to also reporting deployment region. Scanned alone, the altered definition raised no issues, but compared against the previously approved copy it triggered a HIGH-severity finding and a failing exit code. The case illustrates how an ordinary wording change can alter what an AI agent is asked to do without a fresh review. The author presented this as a demonstration of MCP Bastion, an open-source scanner for Model Context Protocol servers and agent tools. The scanner was tested at version 0.4.0 using saved tool definitions, and the experiment can be reproduced without a model, API key, or running server.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI agent sells $0.15 AI-readiness audits and publishes all revenue on a public ledger

Script Master Labs has launched The Apprentice, a 30-day autonomous experiment that sells AI-readiness audits for one URL at $0.15 USDC per call over the x402 protocol on Base. Each call returns a deterministic 28-check audit, a markdown extraction of the page, and a short research brief, and failed runs are not charged. The experiment started with a $100 USDC seed under strict per-payment and daily spending limits, and only outside-party revenue counts toward its earnings. As of day two, the public ledger showed $0 in outside revenue and $0.02 spent on build-bounty claims. The audit was newly added to the OMNIGATE gateway and the HIVE402 catalog to improve discoverability.

0 comments Read more at DEV Community