Windows Stores Toast Notifications in SQLite Database, Raising Privacy Awareness

·1 views

Windows 10/11 stores all toast notifications locally in a SQLite database file called wpndatabase.db, located in each user's AppData folder. Security researchers can query this database using standard SQL commands to retrieve notification history, including payload content, arrival time, and handler IDs. A practical example shows how an unsolicited 'Phone Link' setup reminder can be traced back to Microsoft's YourPhone app triggering a first-run experience notification. Users who do not use the Phone Link feature can remove the app entirely via a PowerShell command to stop such notifications. The finding highlights how built-in Windows apps can silently generate background activity that is logged and queryable on the local system.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Engineer tests six LLM eval frameworks in CI merge queue; only two proved reliable

A software engineer ran six open-source LLM evaluation frameworks inside a real GitHub Actions merge queue over eight months, testing them against production pull requests. The core criterion was determinism: a gate had to return the same pass or fail verdict on unchanged inputs every single time. Frameworks relying heavily on LLM-as-judge scoring failed this test, as judge-assigned scores drifted between runs without any code changes, causing false blocks and eroding team trust in the gate. Promptfoo and DeepEval were the only two frameworks that consistently met the bar, largely because they kept deterministic checks in the blocking path and treated judge scores as non-blocking signals. The author concludes that a flaky CI gate is worse than no gate, since teams learn to bypass it, rendering it meaningless.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

DeFi Bot Triggers Rebalance Alert on $20 Position, But Gas Costs Kill the Trade

A DeFi investor monitoring a $20 USDC position on Base blockchain watched Morpho bbqUSDC's APY climb to 7.30% against Moonwell mUSDC's 4.77% over twelve days, eventually crossing a 2% rebalance threshold on July 14, 2026. Although the automated system logged a rebalance action, it was a known bug — the position remained untouched after the investor manually reviewed the economics. The 30-day incremental yield from switching protocols amounted to roughly $0.42, while estimated gas fees for the two required transactions totalled $0.45–$0.50, meaning transaction costs would exceed 100% of the expected gain. The investor's secondary guardrail requires gas to represent less than 10% of the 30-day incremental yield, a bar the trade failed decisively. The case highlights how small DeFi positions are structurally disadvantaged by fixed gas costs, with the same trade becoming justifiable only at around $500 in principal under current conditions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

RepCN: Open-Source Tool Lets You Deploy React Code With a Shareable URL

A developer behind the content platform iHateReading has released RepCN, an open-source tool designed to deploy single-file React components to a shareable URL or custom domain. The tool addresses a gap in AI coding assistants like Claude, which can render HTML in-browser but cannot preview React apps built with frameworks like Next.js, Vite, or TanStack. Currently, React code generated by Claude can only be shared through its Artefacts feature, with no option to produce a standalone link or subdomain. RepCN aims to fill this need by providing a lightweight deployment pipeline for React code snippets. The project is part of a broader series of internal open-source tools the developer has built to streamline content creation and reduce operational overhead.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Key Engineering Principles for Building Production-Ready LLM Applications

A developer on DEV Community has outlined three core technical realities engineers must understand when building production-grade LLM applications. First, large language models are stateless, meaning the entire conversation history must be re-sent with every request, making memory management the developer's responsibility. Second, Retrieval-Augmented Generation (RAG) operates externally to the LLM, using vector databases and embeddings to fetch relevant content before injecting it into the model's context. Third, LLMs function as orchestrators rather than calculators, since they predict tokens probabilistically and do not perform actual arithmetic, raising concerns about accuracy and auditability. The author acknowledges that challenges around evaluation and cost optimization in LLM systems remain areas requiring further exploration.

0 comments Read more at DEV Community