How a Spreadsheet's Auto-Formatting Silently Corrupted 63 Contractor Payments

·1 views

A fintech platform discovered that 63 out of 1,847 contractor payments were rejected by banks after a routine CSV file was opened and resaved in a spreadsheet application, which silently stripped leading zeros from routing numbers. The corruption occurred because Excel and Google Sheets apply type inference to numeric-looking cells, converting a valid 9-digit routing number like 021000021 into the invalid 8-digit integer 21000021. More dangerously, the team noted that locale-based amount formatting can alter payment values in ways that pass all validation checks and fail silently. To prevent such issues, the team now parses CSV files as raw strings with no type coercion, validates field length and format before any arithmetic checks, and rejects entire files rather than individual rows when structural data errors are detected. The incident highlights a broader risk in financial data pipelines where spreadsheet-mediated file handling can introduce undetectable corruption before any validation logic even runs.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

AI Speeds Up Code Generation but Makes Verification Harder, Developers Find

AI coding tools have split developers into two camps — those who feel far more productive and those who abandoned the tools after getting confidently wrong outputs. A key insight from experienced developers is that while generating code has become nearly effortless, verifying that code remains just as demanding as before. The biggest practical gain lies not in writing new code but in quickly understanding unfamiliar or legacy codebases, reducing hours of manual investigation to seconds. However, AI-generated code poses a stealthy review risk: unlike junior developer mistakes, AI errors are stylistically polished and harder to flag on instinct. Teams that adopt these tools without rethinking their code review processes risk shallower oversight and a higher volume of subtle, hard-to-spot bugs reaching production.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Memory Engines Poised to Become Enterprise Infrastructure, Analysts Argue

A vendor analysis published on DEV Community argues that AI memory engines are at the same inflection point relational databases were in the mid-1970s, predicting they will become standard enterprise infrastructure. The piece contends that as AI tools spread across business functions — from sales and customer service to software development — organisations are generating valuable institutional knowledge that currently disperses across chat logs and personal notes with no centralised store. The authors, who disclose they have built their own memory engine called NylonME, surveyed existing public memory solutions and identified four critical gaps: poor write performance and latency, single-user architectures ill-suited to multi-tenant enterprise use, over-reliance on LLMs in the read-write pipeline, and data-sovereignty risks from managed cloud deployments. They argue current products are well-designed for personal AI assistants but break down under enterprise-scale concurrent usage and compliance requirements. The central claim is that enterprises will eventually require a shared, centralised memory layer connecting all AI agents — much as they now rely on a shared database cluster for business systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

How updating your AWS CLI config can eliminate repeated SSO login prompts

Developers using AWS IAM Identity Center frequently encounter token expiry errors that force them to run 'aws sso login' multiple times a day. The root cause is often an outdated AWS CLI config file that uses a legacy format, which does not support refresh tokens properly. AWS SSO actually relies on two tokens — a short-lived access token (~8 hours) and a longer-lived refresh token (up to 90 days) — where the latter is meant to silently renew the former. The legacy config style repeats SSO settings inside every profile and never shares a refreshable session across them. Migrating to the modern 'sso-session' block in ~/.aws/config centralises session settings, enables refresh token support, and allows a single login command to cover all configured profiles.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Beyond Detection: How Edge AI People Counters Actually Work End to End

Building a functional edge AI people counter requires five distinct stages beyond simple person detection: frame capture, image preprocessing, detection, multi-frame tracking, and conversion of movement into entry or exit events. Each stage introduces potential errors, from uneven frame delivery and resizing artifacts to trackers assigning new IDs mid-doorway, all of which compound into inaccurate final counts. A tracker assigns temporary IDs to keep detections linked to the same individual across frames, enabling a line-crossing algorithm to register a visit only when a tracked path genuinely transitions from one side to the other. Occupancy figures are derived as running state — prior occupancy plus entries minus exits — meaning a single missed event corrupts the count until manually corrected. The article emphasizes that most demos stop at detection and frame-rate display, obscuring the substantial engineering needed before a system can reliably tell a retailer how many visitors entered a store.

0 comments Read more at DEV Community