SShortSingh.
Back to feed

How One Developer Designed a Projected UI to Protect Privacy in a Public Room

0
·3 views

A developer building a Windows desktop app for a Spanish festival group faced an unusual design challenge: the software would be projected on a wall in front of the very people whose data it displayed. The app, called Rueda de Actos, is used once a year to fairly assign participation slots across five events for 96 members of a Moros y Cristianos festival group in Alcoy, Spain. Because sensitive information like unpaid dues and penalties could be visible to the entire room, the developer chose to show blocked table cells without explaining why they were blocked. Three different eligibility rules all render as the same visual pattern — a subtle diagonal stripe — so the audience sees that a rule was applied without learning the specific reason. This deliberate ambiguity replaced the usual tooltip approach, prioritising the dignity and privacy of members over the interface's typical goal of maximum transparency.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

MyZubster Adds Signed Wallet Verification for Off-Chain Marketplace Requests

MyZubster Marketplace has introduced a system allowing users to create marketplace requests verified by an EVM-compatible wallet using off-chain cryptographic signatures. The flow separates identity, intent, and payment — meaning a signed request is not a blockchain transaction and no funds are authorized at this stage. Users connect a browser wallet, sign a backend-generated challenge to prove ownership, and then sign a separate economic snapshot when submitting a marketplace request. Single-use challenge tokens are consumed atomically after verification to prevent replay attacks, ensuring a signature cannot be reused to generate multiple orders. The feature introduces defined wallet states and order statuses, though the team notes the complete end-to-end production flow is not yet finalized.

0
ProgrammingDEV Community ·

AI Pentest Bot Found Admin GitHub Token at $13B Startup Baseten in 25 Minutes

An autonomous penetration testing agent called Strix discovered a live GitHub admin token belonging to ML infrastructure firm Baseten during a pre-vendor security evaluation. The bot found a publicly accessible Harbor container registry on Baseten's domain, pulled a Docker image, and scanned its build history using TruffleHog. A GitHub personal access token had been embedded in a RUN instruction during a March 2023 image build and was never rotated, leaving it exposed in plaintext for over three years. The token granted full admin and push access to core product repositories and read/write access to private customer code, with no human involvement beyond the initial prompt. The root cause was a non-expiring, repo-scoped GitHub token on a bot account, compounded by a long-known Docker ARG secret-handling mistake that bakes credentials permanently into image build history.

0
ProgrammingDEV Community ·

How to Connect an Industrial Laser Distance Sensor to Raspberry Pi Using Python

A new tutorial on DEV Community walks developers through interfacing an industrial phase-shift laser distance sensor with a Raspberry Pi using Python. The guide focuses on the LDL-T series optical module, which offers millimeter-level accuracy over ranges up to 100 meters — far beyond what common ultrasonic or infrared sensors can reliably achieve. It covers hardware wiring, enabling the Pi's serial UART port, and installing the pyserial library to handle communication. The sensor communicates via HEX frame commands over serial, and the provided Python script triggers single-shot measurements, validates checksums, and converts the 4-byte response into a distance reading in meters. The tutorial also includes troubleshooting advice for common issues such as serial port permission errors and wiring mistakes.

0
ProgrammingDEV Community ·

Developer Separates AI Agent Task Execution from Its Own Success Verification

A software developer building a pre-release system called Ranex identified a structural flaw in AI agent pipelines: the same harness that performs a task often decides whether that task succeeded, creating a conflict of interest. To address this, the developer forked the opencode agent harness at a specific commit and locked its plugin surface to prevent unverified components from altering its behaviour. The redesigned architecture separates roles so the harness can only emit work and references, while an independent kernel cross-checks those outputs against its own append-only, hash-chained dispatch record. Completed work is logged as a CANDIDATE rather than a PASS, meaning no approval is granted by the worker that produced it. Final sign-off remains a manual, out-of-band human action to prevent automated self-approval from masking incomplete or incorrect results.