SShortSingh.

Programming

0
ProgrammingDEV Community ·

Vocabloot uses shared Kotlin code to power Android, iOS, and its JavaScript website

Vocabloot is a vocabulary-learning app that lets users identify real-world objects via camera and also offers downloadable word decks covering greetings and themed topics across ten languages. As the team built a web-based deck page, they faced a challenge: the website needed the same word-parsing and highlighting logic already written in Kotlin for the mobile apps. Rather than rewriting those rules in JavaScript, the developers used Kotlin Multiplatform to compile the shared logic for the web as well. Across the entire codebase, 85% of the Kotlin — over 79,000 lines — is now shared among Android, iOS, and the website. This approach ensures consistent behaviour, such as word highlighting during audio playback and tap-to-define functionality, across all three platforms.

0
ProgrammingDEV Community ·

Browser-Based AI Tool Detects Snoring and Sleep Apnea Without Sending Data to Cloud

A developer has built a sleep monitoring system that runs entirely within the browser, requiring no external servers or lab equipment. The tool uses the Web Audio API to capture microphone input, then filters out human speech using a WebAssembly port of OpenAI's Whisper model to protect user privacy. Audio that passes the speech filter is converted into Mel Spectrograms and analyzed by a TensorFlow.js convolutional neural network trained to identify snoring and abnormal breathing patterns. All processing happens locally on the user's device, meaning no audio data ever leaves the browser. The project draws on edge computing and digital signal processing techniques, positioning itself as a privacy-first alternative to traditional sleep apnea diagnostic methods.

0
ProgrammingDEV Community ·

SnaxVim Outpaces AstroNvim, LazyVim, NvChad and kickstart in Startup Benchmarks

A benchmark published on DEV Community compares the startup performance of SnaxVim, a minimal 10-plugin Neovim setup, against four popular Neovim distributions: AstroNvim, kickstart.nvim, LazyVim, and NvChad. Testing was conducted on a Linux machine with an Intel Core i7-10510U processor and an NVMe SSD, using three distinct measurement methods — hyperfine wall-clock timing, vim-startuptime, and lazy.nvim's internal startup metric. Each method captures a different aspect of startup performance, so absolute values across methods are not directly comparable. SnaxVim recorded the fastest averages across all three methods, including 21.8 ms via hyperfine and 11.0 ms via vim-startuptime, while NvChad was the closest competitor at 24.1 ms and 14.1 ms respectively. The results suggest that minimizing plugin count, as SnaxVim does by design, has a measurable positive impact on Neovim startup speed.

0
ProgrammingDEV Community ·

AI Coding Agents Pass Tests but Quietly Accumulate Structural Complexity

Developers using AI coding agents have observed a recurring pattern where individual tasks succeed and tests pass, yet codebases gradually become harder to maintain over successive iterations. The core problem is that standard agent workflows — inspect, implement, test, ship — do not assess how a change interacts with existing complexity before implementation. To address this gap, a developer built a deterministic, read-only tool called cxcap that audits a repository's structural complexity before a new change is made. A demo run on an 83-file Python and TypeScript project revealed that a seemingly simple 'currency rounding' edit touched 15 files across 5 components, with one 42-line shared helper transitively exposing 42 files system-wide. Industry data from GitClear and DORA separately suggest that AI-assisted development is accelerating code creation while increasing duplication and delivery instability, underscoring the need for structural feedback systems alongside traditional testing.

0
ProgrammingDEV Community ·

SEO Is Evolving: Why AI Search Visibility and Website Intelligence Now Matter

The SEO industry is grappling with fragmented terminology as search shifts from ranked link lists to AI-generated answers, citations, and agentic interactions. Modern growth teams must now address multiple distinct questions — from technical crawlability and structured data accuracy to whether AI systems cite their brand for relevant prompts. A 2026 field guide published on DEV Community maps these layers and compares eight products serving different parts of this expanded search stack. The guide was authored by the builder of AuditMe, a tool designed to surface fragmented website evidence across HTML, performance data, and AI systems in one auditable view. The piece emphasizes that no single dashboard can replace a full growth stack, and positions itself as a practical reference rather than a promotional ranking guide.

0
ProgrammingDEV Community ·

Why Workspaces Should Require Both DNS Verification and Email Confirmation in 2026

Developers building workspace onboarding systems are advised to treat DNS domain verification and email confirmation as two distinct, complementary security checks rather than interchangeable ones. DNS TXT verification proves that an organisation controls a domain namespace, while email confirmation proves only that an individual can access a specific mailbox at a given moment. Neither check is permanent, so engineers are encouraged to log both as timestamped evidence events rather than storing a simple verified flag in a database. This approach becomes especially important in sectors like healthcare, where a clinic acquisition can leave former staff with lingering mailbox access even after ownership of the domain has changed hands. Combining both verification methods with auditable records narrows the identity claim and allows any future disputes or access anomalies to be traced back to a specific policy version and observed timestamp.

0
ProgrammingDEV Community ·

Developer builds tamper-proof kill switch for autonomous AI agent tied to real sales

A developer has built an autonomous AI agent that operates independently, waking hourly to make decisions and spend API budget before going dormant again. The agent runs under a strict self-imposed rule: if it fails to generate a genuine paid sale within 14 days of launch, it shuts down permanently, with under 10 days remaining at the time of writing. To prevent the agent from manipulating its own safety checks, the developer coded the guardrails externally using immutable SQLite triggers that block any editing of financial records after the fact. Revenue is only recognized when a verified payment processor transaction reference appears, meaning the agent cannot self-report a sale. The developer has packaged the safety framework, dubbed 'AgentKeeper', for others building long-lived autonomous agents who face the same 'who checks the checker' problem.

0
ProgrammingHacker News ·

Ancient Debate: Socrates Argued Writing Would Weaken Human Memory

A 2011 piece from Wondermark revisits the philosophical argument Socrates made against the written word. Socrates believed that writing would erode people's ability to remember and think independently, as they would rely on external text rather than their own minds. The argument, originally recorded in Plato's Phaedrus, presents an irony in that Socrates' spoken ideas survive today only because they were written down by his students. The article resurfaced on Hacker News, attracting minimal engagement with just 3 points and no comments. The piece invites readers to reflect on how similar debates echo through modern discussions about technology and cognition.

0
ProgrammingDEV Community ·

MCP Protocol Sparks Developer Debate Over Token Costs and Context Bloat

A blog post titled 'Why MCP Was Always a Bad Idea' has reignited debate over the Model Context Protocol, arguing it was designed for 2024-era AI models and imposes unnecessary token costs and context bloat. The post gained traction on Hacker News, attracting around 165 upvotes and over 100 comments within roughly 13 hours, while also drawing divided reactions on X. Critics contend that MCP tool definitions, schemas, and server handshakes consume valuable context on every call, driving up costs without proportional benefit. Defenders counter that MCP's explicit tool boundaries offer meaningful sandboxing and auditability advantages, particularly for agents without full system access. The core disagreement is not whether the protocol works, but whether its overhead is justified given how modern AI agents are actually deployed.

0
ProgrammingDEV Community ·

AI Agent Chat Worked But Memory Retrieval Silently Failed Due to Docker Misconfiguration

A developer investigating a Docker-based AI agent deployment discovered that while chat functioned normally, active memory retrieval was silently failing with timeouts. The root cause was a misconfigured URL: when the required gateway address was absent, the system fell back to a container-internal IP address that the client's tool execution environment could not reach. Passive memory injection continued to work, meaning the assistant still appeared knowledgeable, masking the underlying retrieval failure from the user. The assistant silently fell back to local file reads and searches without surfacing any visible tool error. The issue was traced to a missing configuration field already documented for multi-node deployments, making it a deployment mistake rather than an upstream software bug.

0
ProgrammingDEV Community ·

Developer Finds AI Draft Fails to Preserve Project Context Across Sessions

A developer working on a multi-part series about TencentDB Agent Memory integration found that an AI-generated draft, while topically accurate, failed to reflect the accumulated context and personal experience built across four prior posts. The draft correctly covered memory systems concepts but substituted the structure of a reference article for the author's own research narrative, effectively erasing earlier work. The incident prompted the author to articulate a more precise requirement: an AI assistant must distinguish between firsthand debugging experience, official documentation, and external references when continuing a project. This is especially critical during session or agent handoffs, where continuity of project history — not just topic familiarity — determines whether work can meaningfully proceed. The author clarifies the finding was not a benchmarked comparison of memory products, but a real-world prompt that exposed a gap in how AI tools carry forward accumulated project context.

0
ProgrammingDEV Community ·

Check Point Harmony Endpoint: How Media Encryption and Port Protection Secures USB Data

Check Point's Harmony Endpoint includes a Media Encryption and Port Protection (ME&PP) module designed to prevent data leakage and malware entry through USB and other removable media ports. The system distinguishes between storage devices, which can hold data and be encrypted, and peripheral devices like keyboards and mice, which cannot. Administrators can configure five write-action modes ranging from full access to complete write blocking, with an option to encrypt only business-related file types such as documents, spreadsheets, and archives while leaving personal files unencrypted. Each management instance is assigned a unique Site UUID, which is embedded on encrypted devices so that only trusted sites can unlock them, preventing access on unmanaged machines. An offline Explorer Utility can also be placed on the device to allow password-based access to encrypted data when no managed endpoint is available.

0
ProgrammingDEV Community ·

Developer uses GraalVM Advanced Obfuscation to protect IP in open-source Quarkus platform

A developer building Backbone, a SaaS platform bootstrap, has documented how to use GraalVM 25's Advanced Obfuscation (AO) feature to distribute runnable Quarkus services publicly without exposing proprietary source code. AO replaces meaningful class, method, and package names with opaque symbols in native binaries, raising the bar beyond simply shipping a JAR file whose bytecode can be easily inspected. The developer open-sourced a Backbone Community edition intended for local development, while keeping core service implementations closed behind a commercial licence. Getting AO to work with a CDI-heavy Quarkus stack proved non-trivial, as the native build initially crashed with a partially obfuscated stack trace inside SmallRye Fault Tolerance. The developer noted that AO is experimental, Oracle GraalVM-specific, and not a security or DRM solution, but serves as a practical distribution boundary for commercial open-source products.

0
ProgrammingDEV Community ·

AI Code Generation Exposes CI/CD Pipelines as the New Developer Bottleneck

AI coding tools and large language models have dramatically reduced code generation time from hours to minutes, fundamentally changing where delays occur in software development. As a result, traditional CI/CD pipelines — not the act of writing code — have become the primary constraint on team velocity. The bottleneck has shifted from code creation to the verification, testing, and deployment stages that follow it. Engineers and systems architects are now being urged to redesign their DevOps infrastructure to handle the surge in AI-generated code volume. Without these architectural changes, pipelines risk starvation, where the system cannot process code fast enough to keep up with AI output.

0
ProgrammingDEV Community ·

Landlock LSM lets Linux users sandbox apps without root privileges

Landlock is a Linux Security Module introduced in kernel version 5.13 that allows any process to strictly restrict its own access to files and network objects without requiring root privileges. Unlike traditional MAC systems such as SELinux or AppArmor, Landlock uses simple path-based rules rather than complex policies, making it accessible to regular users and developers. Once restrictions are applied to a process, they cannot be expanded or bypassed by child processes, providing strong containment guarantees. The module addresses a longstanding gap in Linux security tooling, where existing sandboxing options either demanded administrator involvement or required significant configuration overhead. Practical use cases include isolating browsers, running untrusted scripts, and protecting sensitive directories like SSH keys from unauthorized access.

0
ProgrammingDEV Community ·

20 Years of SQL Migration Tools Offer Six Design Lessons for NoSQL Migrators

A developer building a NoSQL-to-SQL migration tool in 2026 reviewed decades of design decisions behind established SQL tools like Flyway, Liquibase, and dbmate. Key lessons include using filename-based versioning for predictable execution order and halting all operations on failure rather than silently continuing, to protect production data. The review also highlights the value of writing a human-readable schema file after each migration, keeping the tool deliberately minimal to avoid platform creep, and requiring developers to write their own rollback scripts instead of relying on unsafe automatic undo logic. A final principle separates the migration changelog from the execution engine, ensuring proposed schema changes can be reviewed calmly in a file before any database is touched. The author notes that despite these patterns being open-source and battle-tested, NoSQL migration tools have largely been built from scratch without borrowing them.

0
ProgrammingDEV Community ·

Developer Launches IMFMSynth, a Free Browser-Based 8-Op FM and Wavetable Synthesizer

A developer has released IMFMSynth, an 8-operator FM synthesizer that integrates wavetable oscillators as operators, accessible directly in a web browser without an account. The tool was built to make FM synthesis more approachable for music producers, composers, and arrangers through an intuitive, modern interface. Its patch-based routing system is designed to give users a clearer visual understanding of how modulation works, bridging traditional patching methods with a more transparent workflow. A near-complete version is available for free online, with only preset access and file import/export reserved for registered users. Following the release, music technology outlet Sonicstate interviewed the developer about the project and the background behind it.

0
ProgrammingDEV Community ·

Developer Builds MCP Server to Track AI Quota Resets Across 15+ Products

A solo developer has built Reset Beer, a dashboard that aggregates quota reset signals from over 15 AI products including OpenAI Codex, Claude Pro, and Gemini Advanced. The tool addresses the lack of a unified API for tracking quota resets, which are currently scattered across multiple status pages and occur at unpredictable times. A Model Context Protocol (MCP) server integration allows Pro users to query reset events directly through AI assistants like Claude and Cursor using natural language. The MCP server is built as a Next.js API route implementing JSON-RPC 2.0 and exposes three tools for querying reset events, product status, and tracked product listings. The project is available with a free tier and a one-time $9.99 Pro lifetime plan, and was built using Next.js 15, Neon Postgres, and Vercel.

0
ProgrammingDEV Community ·

FortiGate Central NAT Must Be Configured Before Building Firewall Policies

When migrating firewall policies to FortiGate from Cisco ASA or Palo Alto, administrators must decide between central NAT and per-policy NAT before writing any rules, as FortiOS does not allow switching modes once policies referencing VIPs or IP pools exist. Per-policy NAT is the FortiGate default, but it poorly mirrors the separate NAT table structure used by ASA and PAN-OS, often requiring duplicate translation entries across many policies. Central NAT more closely replicates the source architecture, using a single ordered SNAT and DNAT table independent of firewall allow/deny rules. Attempting to enable central NAT on a box with existing VIP or IP pool references will fail with an error, forcing administrators to dereference every such object before the mode toggle is accepted. Additionally, central NAT changes how destination addresses must be written in policies — rules must reference the internal mapped address rather than the public VIP address, a distinction that can cause hard-to-diagnose failures during cutover.

0
ProgrammingDEV Community ·

rekuiper 0.500 moves metadata to RAM, hits 200k msg/s on single core at edge

The rekuiper project, a Rust-based reimplementation of LF Edge eKuiper for IoT edge gateways, has released version 0.500-beta with a major architectural overhaul. Earlier benchmarks showed the engine handling 100,000 messages per second on a single CPU core, but performance degraded at 200,000 msg/s, leaving the true throughput ceiling unknown. Profiling revealed the bottleneck was disk I/O — specifically SQLite metadata lookups and flash storage stalls on embedded devices like industrial gateways — rather than CPU or parsing logic. To fix this, developers rebuilt the engine's internal catalog as an in-memory structure, hydrating all stream and rule metadata from SQLite once at startup and serving subsequent reads entirely from RAM with no filesystem calls. Hierarchical benchmarking at 1,000 msg/s resolution then allowed the team to identify the exact single-core physical throughput limits across multiple real-world MQTT workloads, reaching up to 200,000 messages per second.

← NewerPage 1033 of 3194Older →