SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Pune Startup DTI Bets India Needs Court-Grade Proof Layer for Digital Signatures

Pune-based deep-tech startup Digital Trust Infrastructure India Limited (DTI), founded by insolvency professional Rupesh Kuche and incorporated in December 2025, is developing a device and platform aimed at making every digital signature independently verifiable in court years after it is executed. The company argues that India's existing digital public infrastructure — Aadhaar, UPI, eSign — authenticates identity at the moment of a transaction but does not preserve durable, court-grade evidence of what was actually authorized or consented to. This gap has real consequences: Indian banks and financial institutions reported ₹48,021 crore in fraud during FY2025-26, and a Supreme Court bench has described digital fraud as akin to 'dacoity'. DTI's proposed solution includes a hardware signing device and an evidence network called Ascert.in, both currently at the piloting stage with no publicly launched product yet. The startup contends that long-term transaction evidence preservation remains an unsolved problem at national scale, distinct from existing global content-provenance standards like C2PA.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

CyberPanel, aaPanel, CloudPanel: Top Free ServerPilot Alternatives in 2026

ServerPilot charges between $5 and $20 per server plus up to $2 per app monthly, but lacks built-in email, DNS management, and a file manager. CyberPanel, built on open-source OpenLiteSpeed, offers email and DNS at no cost, making it a strong all-in-one free option. aaPanel provides a cPanel-style interface with a one-time Pro licence priced around $399, adding features like a WAF, sub-accounts, and WP Toolkit. CloudPanel is the closest free drop-in replacement for ServerPilot, supporting PHP, Node.js, and Python with a minimal memory footprint, though it excludes email and DNS. A typical setup of three servers and eight apps costs roughly $456 per year on ServerPilot Business, while CloudPanel handles the same workload at no charge.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Nine pre-publish SEO checks that catch invisible errors before they cost you rankings

A structured SEO checklist published on DEV Community focuses on 'invisible' failures — issues that don't break a page visually but quietly damage search performance over time. The guide recommends running structural checks first, covering elements like H1 uniqueness, heading hierarchy, duplicate page titles, and canonical URL consistency with trailing slashes. It also flags that meta descriptions should be previewed in pixels rather than counted by characters, with critical content kept within the first 120 characters. Internal linking is highlighted as a fully controllable navigation signal, with every new page advised to link to at least two existing pages and receive at least one inbound link. Additional checks cover image dimensions and alt text for layout stability, plus accurate structured data markup to avoid misleading search engines.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

90% of Top Homepages Have Open Graph Tags, But Many Are Broken or Incomplete

A developer audited Open Graph and Twitter Card meta tags across 78 well-known websites, finding 62 usable homepages to analyze. While 90% had at least one Open Graph tag, coverage dropped sharply for key fields — only 77% included og:image, and just 35% specified og:locale. Nearly one in five sites omitted twitter:card entirely, which prevents X (formerly Twitter) from rendering a visual card even when valid Open Graph tags are present. Two sites declared a large-image card type but supplied no actual image, with one site's og:image tag present in the HTML but completely lacking a content attribute — a subtle bug that passes most automated checks. Only 23% of sites with an image tag also included width and height dimensions, which can cause intermittent display failures when social platforms cannot pre-layout the card without downloading the image first.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to fix duplicated JSON-LD structured data using @id references

Many websites embed JSON-LD structured data separately in multiple components — such as footers, article templates, and breadcrumbs — leading to redundant and potentially contradictory markup. The core fix involves using the @id property to assign stable identifiers to each node, allowing other nodes to reference them instead of repeating shared details like publisher names or logos. All structured data should be consolidated into a single @graph array in the page head, containing nodes for Organization, WebSite, WebPage, and any page-specific types in that order. Common mistakes to avoid include referencing an @id that has no corresponding node on the page, reusing the same identifier for different entities, and using relative rather than absolute URLs as identifiers. Additionally, datePublished should remain fixed after a page goes live, while dateModified should only be updated when content genuinely changes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Qwen3 27B Runs on One RTX 3090; Dual-Card Setup Offers Modest Speed Gains

The Qwen3 27.8B dense model, released on August 14, can run on a single RTX 3090 GPU using W4A16 quantization, achieving decode speeds of roughly 125–155 tokens per second. A home-lab benchmark compared single-card and dual-card (tensor parallel) configurations using two RTX 3090s running vLLM. Adding a second card yielded approximately 20% faster decoding and 14% faster cold prefill on average, with larger prompts seeing up to 23% improvement in time-to-first-token. Cached prompts appeared 2–3x faster on both setups, but this was attributed to vLLM's prefix caching rather than the extra GPU. At current API pricing and measured electricity costs, generating one million output tokens costs the equivalent of roughly $0.12–$0.20 in power on the test machine.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Check Point Patches Critical CVE-2026-93616 Flaw Actively Exploited in the Wild

Check Point disclosed a critical pre-authentication vulnerability, CVE-2026-93616, affecting its Security Management Server and related products, with a CVSS v3.1 score of 9.8. The flaw allows an unauthenticated remote attacker to exploit directory traversal and file upload weaknesses on TCP port 19009 to execute arbitrary scripts or load malicious Java classes without any user interaction. Check Point confirmed observing a small number of targeted attacks in the wild as of July 23, 2026, though specific payloads and post-compromise actions have not been publicly disclosed. Affected versions span multiple release branches including R82.20, R81.20, R81.10, and several end-of-support versions such as R80 through R81. Check Point has released security hotfixes, and administrators are advised to apply the relevant patches immediately to mitigate active exploitation risk.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Study Compares ChatGPT and Gemini on Introductory C Programming Tasks

A 2025 study published in the Brazilian Journal of Informatics in Education evaluated ChatGPT and Gemini across 46 basic C programming exercises. The research was conducted by authors affiliated with the Federal Institute of São Paulo and assessed both AI tools from the perspectives of students and teachers. ChatGPT outperformed Gemini overall, scoring 78.2% accuracy compared to Gemini's 69.6%. However, both models made notable errors, including mistakes in basic mathematical equations and generating code with memory vulnerabilities. The findings suggest that despite their utility, neither AI tool is fully reliable for introductory programming education.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Public PoC Tool Claims to Block Microsoft Defender Updates via Disk Space Exhaustion

A public proof-of-concept tool called BigDiskBuster has been released, claiming to disrupt Microsoft Defender Antivirus platform and security intelligence updates on all supported Windows versions. The tool works by temporarily exhausting free space on the C drive using hidden delete-on-close files and holding MRT.exe open with restrictive sharing permissions to interfere with update processes. Crucially, the attack requires an attacker to already have code execution access on the target machine, meaning it is not a remotely exploitable vulnerability. Microsoft has not confirmed the issue as a vulnerability, no CVE has been assigned, and no independent reproduction or real-world exploitation has been reported. If update failures persist while the tool runs, Defender's security intelligence could become outdated, potentially weakening protection against emerging threats.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Anthropic Launches Claude Opus 5.5 at 40% Lower Cost With Improved Performance

Anthropic released Claude Opus 5.5 on September 22, positioning it as their most capable model to date while cutting overall task costs by approximately 40 percent compared to its predecessor. The price reduction stems from both lower per-token rates and the model's ability to complete tasks using fewer tokens. Cache read pricing dropped sharply from $0.50 to $0.20 per million tokens, a change seen as especially significant for long-running agent workflows that repeatedly access large contexts. On the same day, OpenAI also launched two lower-cost models, signaling that competition in the AI industry has shifted toward cost-efficiency per completed task rather than benchmark scores alone. Opus 5.5 is available via Anthropic's API as well as on AWS, Google Cloud, and Microsoft platforms, though teams running production agent systems are advised to test thoroughly before upgrading due to several behavioral changes in the model.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Anthropic and OpenAI Cut AI Prices on the Same Day in Rare Pricing Showdown

On September 22, 2026, Anthropic and OpenAI released competing AI models within hours of each other, both accompanied by significant price reductions — an unprecedented same-day rivalry. Anthropic launched Claude Opus 5.5 at $4 per million input tokens and $20 per million output tokens, a 20% drop from its predecessor, with cache read costs slashed by 60%. OpenAI countered with GPT-6 Sol at $2 input and $10 output per million tokens, and the budget-tier GPT-6 Luna at just $0.10 input and $0.50 output — roughly half the cost of the GPT-5.6 models they replace. For a typical cache-heavy agentic workload, GPT-6 Sol works out to roughly 47% cheaper than Opus 5.5, while Luna is nearly negligible in cost. Both companies described their new prices as permanent, signaling a broader industry shift toward competing on cost rather than benchmark performance alone.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Video Avatars Set to Replace Webcams in Meetings and Streams by 2026

Real-time AI video avatars that mirror a user's facial expressions are becoming mainstream across platforms like Zoom, Microsoft Teams, and Discord in 2026. Advances in hardware — including Apple M2-Pro, Nvidia RTX 4090, and AMD MI300 chips — now allow neural rendering at 60 frames per second on consumer laptops. Both commercial tools such as Meta Avatar Studio and Ready Player Me, and open-source options like Avatarify, support integration with major video-call apps via virtual webcam drivers. Privacy regulations are also evolving, with the EU Digital Identity Act of 2025 requiring explicit user consent and on-device biometric processing where possible. Growing interest has been further fueled by the upcoming FIFA World Cup 2026, where broadcasters are deploying multilingual AI presenters using the same underlying technology.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

CLOSEDQUORUM Malware Uses Four AI Models to Vote on Attack Actions Against Windows

Cisco Talos researchers have statically analyzed a Go-based Windows implant called CLOSEDQUORUM, which sends host information to up to four commercial large language models — DeepSeek, Qwen, Mistral, and Google Gemini — and executes whichever attack action receives the most votes. Capabilities built into the implant include credential theft from LSASS memory, browser data and cryptocurrency wallet harvesting, process injection, and persistence via Registry Run keys, scheduled tasks, or WMI subscriptions. Collected data is encrypted with AES-256-GCM, split into segments, and exfiltrated to a Discord webhook. The publicly available version contains placeholder API keys and webhooks, meaning it is non-functional as distributed, and no real-world deployment has been confirmed. The threat actor behind CLOSEDQUORUM remains unidentified, and no CVEs are associated with this implant.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

On-Device AI Hits Real-Time Speed, Challenging Cloud-First Smartphone Model

A proof-of-concept system has demonstrated that a full Gemma 4 language model can run entirely on an Android handset without any server connection, using Google's LiteRT-LM runtime and a .litertlm container format. The prototype was tested on a OnePlus 15 in airplane mode and sustained generation at roughly 40 tokens per second, a rate researchers describe as feeling instant to human users. The system works by loading the model into shared memory and exposing it as a private inference service available to all apps on the device, eliminating repeated cloud calls. Key enabling techniques include quantization, pruning, distillation, and a Matryoshka Transformer architecture that reduces effective memory use without cutting parameter count. The researchers argue this shifts the main bottleneck in on-device AI from hardware capability to software architecture, raising fresh questions about cloud dependency, data privacy, and inference costs at scale.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Oracle SQL Pseudo-Columns Explained: Types, Uses, and Key Limitations

Oracle SQL pseudo-columns behave like table columns but are not physically stored on disk, meaning they can be queried with SELECT but cannot be modified via INSERT, UPDATE, or DELETE. Built-in pseudo-columns include ROWID for unique physical row addressing, ROWNUM for sequential row numbering, NEXTVAL and CURRVAL for sequence management, and ORA_ROWSCN for tracking data changes via System Change Numbers. For hierarchical queries using CONNECT BY, Oracle provides additional pseudo-columns such as LEVEL, CONNECT_BY_ISLEAF, CONNECT_BY_ISCYCLE, and SYS_CONNECT_BY_PATH to navigate and inspect tree structures. A common pitfall involves ROWNUM, which is assigned after the WHERE clause but before ORDER BY, making direct filters like ROWNUM > 1 unreliable without using a subquery. Unlike ROWNUM, ROWID is a permanent physical address that persists across transactions, and while ROWID cannot be indexed directly, ROWNUM cannot be indexed at all; custom pseudo-columns are not supported, though Oracle 11g introduced virtual columns as a logical alternative.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer builds policy-as-code audit tool to verify if AI agent runs were permitted

A developer has added a policy-as-code audit feature to the open-source project agent-lab-trust, designed to check whether AI agent runs complied with declared rules — not just whether they succeeded. The tool evaluates cost caps, call limits, required output artifacts, and forbidden markers, then generates a canonical audit hash for each run. Testing across 13 archived synthetic GenMentor runs showed that a mismatched default contract failed all 13, while the correctly declared GenMentor contract passed all 13 — with the underlying data unchanged. The project distinguishes between operational dashboards that show what happened and governance tooling that shows what was permitted under a specific policy. The tool is reproducible via Docker and is the third installment in a series on making AI agent behavior verifiable and auditable.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

D-Link DIR-822A Router Hit by Two High-Severity Flaws, Patches Pending

D-Link has disclosed two critical vulnerabilities in its DIR-822A router running firmware A_101, assigned CVE-2026-86296 (CVSS 10.0) and CVE-2026-86510 (CVSS 9.9). The first flaw allows an unauthenticated attacker on the local network to trigger a stack-based buffer overflow via a crafted DHCP packet, while the second enables a low-privileged user to cause an out-of-bounds write through L2TP processing. Both vulnerabilities could lead to router crashes, memory corruption, or potential loss of confidentiality and integrity. Public proof-of-concept code exists for both flaws, though real-world exploitation and stable code execution have not yet been confirmed. D-Link is investigating the scope and developing firmware fixes, urging users in the meantime to restrict remote access, block untrusted local devices, and disable L2TP/L2TPv6 WAN connectivity if not needed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Tool 'didrun' Exposes Silent CI Failures When Exit Code 0 Masks Empty Test Runs

A developer tool called 'didrun' addresses a longstanding gap in test automation where exit code 0 is returned even when no tests actually ran, giving a false green signal. The tool introduces four distinct exit states — ran-and-passed, ran-and-failed, did-not-run, and ran-and-failed-wrongly — to separately answer whether a check ran, failed, or failed for the right reason. A concrete example shows that running 'go test ./...' on a directory with no test files exits 0 by default, but wrapped with didrun it exits 3, explicitly flagging that nothing was verified. Additional predicates like '--expect-count' and '--wrote PATH' guard against subtler false positives, such as a test suite printing '0 passed' or a stale output file left over from a previous run. The project argues that silently falling back to forwarding an exit code is itself the defect these tools are meant to catch.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Kapibala Hackers Steal 18,500+ Government Records via WordPress and Zyxel Flaws

A threat actor tracked as Kapibala, suspected to be Chinese-speaking, breached a Western government organization's database by exploiting a WordPress vulnerability chain combining CVE-2026-63030 and CVE-2026-60137, deploying custom web shells to harvest credentials and access internal SQL databases. The attackers exfiltrated at least 18,566 records containing account details, plaintext passwords, and personally identifiable information linked to government and law-enforcement agencies. Separately, the same actor exploited a stack-based buffer overflow vulnerability in Zyxel GS1900 switches (CVE-2026-7273) to steal device configurations, hashed root credentials, and network data from 996 devices across 48 countries. GreyNoise, which published its findings on September 21, 2026, noted the campaign leveraged shared external infrastructure for continuous scanning and exploitation. CISA has added the relevant CVEs to its Known Exploited Vulnerabilities catalog, and administrators are urged to patch affected systems and monitor for anomalous PHP files, bulk SQL authentication attempts, and unauthorized configuration retrievals.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Waymo Launches Transit Rewards Program Paying Users to Take the Train

Waymo has introduced a Transit Rewards program that incentivizes users to take public transit by offering them payments or credits. The initiative reflects a broader push by the autonomous vehicle company to integrate with existing public transportation networks rather than compete with them. Details of the program, including reward amounts and eligible routes, were outlined on Waymo's official blog in September 2026. The move signals a shift in how ride-hailing and robotaxi companies position themselves within urban mobility ecosystems.

0 comments Read more at Hacker News
← NewerPage 1002 of 3191Older →