SShortSingh.

Programming

0
ProgrammingDEV Community ·

How to find a reference when you only remember what something was like

The piece describes a common frustration: knowing something exists but being unable to recall its name, which makes standard search ineffective because queries are descriptions rather than titles. It argues that references indexed by the thing itself, rather than by a description, close this gap. Two approaches are highlighted: a relationship view that shows who characters stand next to, exemplified by FandomGraph, and an ingredient view that starts from an item, exemplified by HowToCraft. The author contends that the key test for any lookup resource is whether a person who only remembers what something is like can still find it. Both views exist because they serve cases where a description is all the visitor has.

0
ProgrammingDEV Community ·

Minecraft plugin developer's leaked paid jar: how to trace the buyer and revoke copies

A developer who finds their premium Minecraft plugin shared on a leak forum can follow a set sequence of steps. The guide warns that leaked "cracked" files often contain malware, so they should only be inspected in an isolated environment. If each buyer received a unique copy, the buyer can be identified via embedded license keys or watermarks, then matched against the license server's records. Plugins with periodic license re-checks can have revoked keys shut down copies already running on servers. The advice also covers reviewing the suspect buyer's history, handling refunds or chargebacks, and filing DMCA takedowns against leak sites.

0
ProgrammingDEV Community ·

Offboarding and Insider Access Are Now National Security Concerns for Engineering Teams

An article on DEV Community argues that engineers with legitimate access to sensitive assets such as AI model weights and chip designs can be targets for coercion, recruitment, or deception. It describes three categories of insider risk: malicious insiders, coerced employees, and those compromised through identity fraud or remote-hiring gaps. The author recommends time-boxed access instead of standing permissions, and automated offboarding tied to HR termination events. The piece also cautions against a surveillance-heavy culture and suggests treating open source dependencies with the same scrutiny.

0
ProgrammingDEV Community ·

Free Lua obfuscation guide for protecting paid FiveM scripts

Sellers of FiveM scripts risk buyers reading and copying their .lua source files, which is why obfuscation is recommended. The guide explains that Tebex asset escrow already encrypts files, so obfuscation mainly targets unescrowed files and resources sold outside escrow, and that Cfx.re's Releases section bans third-party obfuscation. Obfuscation makes code harder to read and edit but does not stop determined users, so per-buyer license keys are suggested for sharing control. Because Prometheus outputs Lua 5.1 while FiveM uses Lua 5.4, files with 5.4-only syntax must be identified with a grep command and excluded. The article demonstrates using the SunLicense service's free tier, which includes three obfuscation runs per month, to process a resource while preserving exports, events, and NUI callbacks.

0
ProgrammingDEV Community ·

GDPR and Password Reset Emails: Keep Security Templates In-House, Delegate Only Transport

The article argues that GDPR-compliant password reset emails should keep the security-sensitive template and recipient data handling inside the Node.js application, while an email provider handles transport, suppression, and delivery telemetry. Provider-owned templates are acceptable for support report attachments only if the support team can edit layouts without a deployment, the report avoids unnecessary personal data, and regeneration is controlled. The author stresses that choosing an email API does not transfer GDPR obligations such as lawful purpose, data minimization, access controls, and retention policy. A key cost driver is retention, since rendered HTML, attachments, delivery events, and audit records can persist far beyond the case that created them. The recommended approach is to avoid storing rendered copies by default, keep only minimal delivery metadata, and scrub reset tokens, full addresses, and report bodies from event logs.

0
ProgrammingDEV Community ·

Loop y Graph en osFoundry: cuándo usar cada uno

osFoundry ofrece dos herramientas para automatizar trabajo con agentes de IA: Loop y Graph, situadas en la barra lateral de su aplicación de escritorio. Un Loop sigue siempre el mismo camino hacia un objetivo, evalúa cada ronda con una comprobación y se detiene solo, mientras que un Graph es un flujo guardado que puede bifurcarse, repetir pasos, repartir tareas o pedir aprobación humana. El artículo ilustra el uso de Loop con un desarrollador que ejecuta una plantilla para arreglar una suite de tests en JavaScript, siguiendo el progreso por rondas en la pestaña Rounds. Explica también la interfaz de sesiones, el estado "Verified" y los controles de pausa y cancelación. El ejemplo muestra cómo el loop terminó tras tres rondas al cumplir todos los criterios.

0
ProgrammingDEV Community ·

Hybrid vs Vector-Only Retrieval for a Private Knowledge Manager

The article argues that hybrid retrieval combining lexical and vector search suits cases where exact identifiers and semantic meaning both matter, while vector-only retrieval fits small, stable, prose-heavy corpora. It uses a logistics example of detecting near-duplicate shipment records, where tracking numbers are exact keys and differently worded descriptions must still be matched. The author stresses that retrieval quality should be judged with a labeled test set and measured using recall, precision, and reciprocal rank rather than model leaderboards. Vector indexes carry ongoing costs such as storage, approximate-nearest-neighbor maintenance, and re-embedding whenever chunking or models change. The piece concludes that the choice depends on an index-cost budget and a relevance test set tailored to the application.

0
ProgrammingDEV Community ·

How software license keys work: a beginner's guide to servers, machine limits and checks

A new guide explains how software license keys function, arguing that a random key is only an ID pointing to a record on a license server that holds the buyer, product rules, status, expiry and activated machines. It contrasts this with older serial-number schemes, which could be defeated by keygens once the math was reverse-engineered. The guide describes how apps send the key plus a stable machine ID, how machine slots and IP limits are enforced, and how online checks return outcomes like valid, expired, revoked or too many machines. It stresses that a network failure should not shut the app down, since treating outages as license failures frustrates paying customers and can even be flagged as malicious on some marketplaces.

0
ProgrammingDEV Community ·

Bank statement PDF converter's untested gaps: real-bank layouts, Windows install, scans, updates

The author's bank statement PDF-to-CSV converter has so far been verified only on four digital layouts and synthetic scans that the author built. Its 34-of-34 row accuracy therefore does not show it can handle statements from other banks, since unfamiliar header wording causes a layout to be skipped. The Windows installer compiles on CI but has not been installed and run on a real Windows machine. OCR works on Linux only, and Tesseract is not bundled or tested on Windows, so scanned statements there currently lack a working path. The converter has also not been tested on encrypted PDFs, partially text-layered image PDFs, or degraded scans, and users receive no notice when a newer version is available.

0
ProgrammingDEV Community ·

AI agent ports Karpathy's CUDA GPT-2 trainer to SYCL, verified by hidden checks

A developer built Muse Port, a tool in which Meta's Muse model plans and ports CUDA repositories to SYCL, an open standard that runs on NVIDIA, AMD, Intel and CPU hardware. Porting is accepted only after hidden checks, unseen by the model, confirm the output matches the original. The developer applied it to Andrej Karpathy's llm.c, a GPT-2 trainer written in raw CUDA, and the resulting port passed the project's own test on CPU, AMD and NVIDIA hardware. The initial port ran 36 times slower than CUDA, but after tuning on real GPUs it reached roughly 1.1 to 1.5 times CUDA's step time on NVIDIA hardware, and it also ran on AMD Instinct GPUs. The work was submitted to Meta's Global AI Developer Hackathon, with code and a demo published online.

0
ProgrammingDEV Community ·

VAYU OS Uses Autonomous AI Agents in Discord to Cut Vulnerability Remediation Time

A DevSecOps team built VAYU OS, an autonomous cyber reasoning system that runs inside a team chat, to shorten the typically long time it takes to fix security vulnerabilities. The authors note that enterprise teams average a 68-day mean time to remediate, largely because alerts, ownership questions, code analysis, patching, and review are handled across disconnected tools and people. They point to a wave of late-October 2026 attacks spanning web servers, AI tooling, cloud infrastructure, and developer supply chains as evidence that such delays are costly. VAYU OS divides the work among three specialized agents coordinated through the Switch Agent Protocol: an analyst for taint-flow investigation, a remediator for patch synthesis and sandbox verification, and a gatekeeper that enforces policy and human sign-off. The project was built for the Flip the Switch Hackathon hosted by WeMakeDevs with SandboxAQ and Wispr Flow.

0
ProgrammingDEV Community ·

How to Add AI Narration to Blog Posts Using a Text-to-Speech API

A developer guide explains how blog owners can add audio versions of their posts using text-to-speech technology. It argues that narration improves accessibility, keeps readers on the page longer, and gives a blog a recognizable voice. The author recommends ElevenLabs for its natural-sounding neural voices, voice cloning, and simple REST API. The guide walks readers through generating an API key and provides a Python script and a curl command that convert Markdown post text into an MP3 file. The article also notes that API keys should be kept secret and never committed to public repositories.

0
ProgrammingHacker News ·

The Valley Bubble Breaks: Hacker News Discussion on a Quirksmode Blog Post

A blog post titled 'The Valley Bubble Breaks' was published on quirksmode.org and shared on Hacker News. The post received 8 points and one comment on the Hacker News discussion thread. The provided material includes only the title and link metadata, without the article's full text. As a result, the specific argument or claims made in the post cannot be confirmed from the available information.

0
ProgrammingHacker News ·

SketchAgentBench Launches to Test LLMs on 3D Spatial Reasoning

A new benchmark called SketchAgentBench has been introduced to evaluate how well large language models handle 3D spatial reasoning. The project was shared on Hacker News, where it gathered a small amount of early attention. The source material provides a link to the project's website but does not include detailed information about its methodology, tasks, or results. Further details about how the benchmark measures model performance are not available in the provided article text.

0
ProgrammingHacker News ·

Essay Argues AI Is Already Speeding Up the Research That Builds AI

A post on the Planned Obsolescence blog contends that artificial intelligence is now meaningfully accelerating the pace of AI research itself. The piece is shared via Hacker News, where it drew 16 points and 7 comments. The source material provided is limited to the headline, URL, and engagement figures, so the specific evidence and reasoning behind the claim cannot be confirmed here. Readers are directed to the original essay for the author's full argument and supporting details.

0
ProgrammingDEV Community ·

DEV Seeks Full-Time Community Manager to Steward Its Developer Community

DEV has reshaped an earlier Community Program Manager opening into a full-time Community Manager role focused on community stewardship rather than program management. The position centers on daily presence on the platform, including publishing, engaging with members, and maintaining a welcoming, high-quality environment. Responsibilities include moderation, managing community support channels, overseeing brand presences such as the MLH organization, and curating content through roundups and newsletters. Candidates are expected to be established DEV members with experience running Discord communities, and the package includes a competitive salary, stock options, health and retirement benefits, unlimited PTO, and travel opportunities.

0
ProgrammingDEV Community ·

osFoundry's Memory and Knowledge Base keep AI-learned facts and return them as context

osFoundry bundles Notes, Knowledge Base, Memory, Lessons, Chat History and Indexed Folders to stop coding agents from forgetting project details between sessions. In the desktop app, each store has its own screen, and a toggle on each controls whether the AI may read it. The Memory screen shows what each agent knows, such as database versions and test commands, and separately lists lessons written only after a reviewer rejected work or a step failed. Users can export or import memories and lessons to a file, since they stay on the device and do not move automatically between machines. A user can also index a repository locally with on-device embeddings, which lets the agent search code by meaning and return exact file paths and line ranges.

0
ProgrammingDEV Community ·

Building Audit Logs in Phoenix Without Exposing Passwords

A developer building audit logging for a Phoenix application found that a basic Ecto-based approach had several flaws. Application-level logging can omit sensitive fields like passwords by filtering virtual fields and associations, but it misses changes made outside the changeset path, such as bulk updates or manual database edits. To capture every modification regardless of how it happened, the author turns to PostgreSQL row-level triggers, which fire on every insert, update, and delete. The trigger approach can record old and new values while excluding secrets such as hashed passwords. The article argues that database-level capture is necessary for a reliable audit trail.

0
ProgrammingDEV Community ·

Why an 89% hallucination rate needs context: what the benchmark actually measures

A developer published a video walkthrough to explain the 89% hallucination figure, which is often cited as proof that AI models fabricate information constantly. The figure comes from a specific evaluation setup, including a defined prompt set, sampling method, and a scoring rubric that counts confident fabrication rather than hedging. The author notes that two runs with slightly different random seeds shifted the result by several points. The rubric distinguishes unsupported claims from factually wrong ones, which means a correct answer that the evaluation cannot verify can still be scored as a hit. The author also describes the cost of running the evaluation, including about 40 minutes of compute, hundreds of thousands of judging tokens, and substantial manual human review to check the rubric.

0
ProgrammingDEV Community ·

Tutorial Teaches Building Naive, Advanced and Modular RAG Systems in Python

A DEV Community tutorial walks developers through building Retrieval-Augmented Generation (RAG) systems from scratch in Python, progressing from naive to advanced and modular designs. It explains that RAG addresses LLM limitations such as hallucinations and outdated knowledge by supplying retrieved external documents as context for answers. The workflow covers chunking documents, converting them to vectors, indexing, retrieving relevant chunks, and passing them to a language model. The author uses a Spider-Man story document as a simple running example to demonstrate question answering over external data. The tutorial also covers concepts such as query rewriting, reranking, routing and query fusion, with an accompanying video.

Page 1 of 3081Older →