SShortSingh.

Programming

0
ProgrammingDEV Community ·

Brazilian Lottery Portal Uses SHA256 Hashing to Make Data Changes Publicly Auditable

A Brazilian lottery results portal, deunobicho.online, has implemented SHA256 content hashing to address public distrust over potential data tampering. The system generates a cryptographic hash of each lottery result's canonical JSON at the time of publication, making any subsequent alteration detectable. Each published result is accompanied by a public evidence page displaying the raw data, its hash, a timestamp, and a link to the official source. If a correction is ever necessary, a new evidence page with a new hash is created and both versions are linked in an audit log. The approach allows any reader to independently verify that data has not been silently changed since it was first published.

0
ProgrammingDEV Community ·

React Still Relevant in 2026, But Learning It Alone Is No Longer Enough

React remains widely used in 2026, with version 19.3 released in September and the React Compiler reaching a stable release. The 2025 State of JavaScript survey found that 83.6% of respondents had used React, underscoring its continued presence in production environments. However, the modern React ecosystem has grown significantly more complex, now encompassing Server Components, Server Actions, Suspense, and compiler tooling. Developers writing about web education argue that beginners who skip foundational JavaScript in favour of jumping straight into React often struggle when debugging real-world issues. The core advice being circulated is to build solid JavaScript fundamentals first, as no framework — React included — can substitute for understanding the language itself.

0
ProgrammingDEV Community ·

Lido Finance Holds $27B in TVL But Faces Growing Liquidity and Governance Risks

Lido Finance, the leading liquid-staking protocol on Ethereum, manages approximately $26.99 billion in total value locked (TVL) across its mainnet and Layer 2 deployments including Optimism, Arbitrum, and zkSync as of September 2026. A DeFi security research team has published a risk assessment highlighting that TVL has grown 125% since January 2023, largely driven by institutional adoption and L2 expansion. The report flags several key vulnerabilities, including governance concentration where the top 10 LDO token holders control roughly 38% of voting power, and withdrawal queue delays that can stretch beyond 30 days during periods of high stress. Additional concerns include Lido's dependence on Chainlink price oracles for fee calculations and its exposure to bridge congestion that could cause stETH to trade at a discount to ETH on secondary markets. Analysts note that while the protocol has operated reliably for over two years, the scale of assets under management amplifies the potential impact of any systemic liquidity event.

0
ProgrammingDEV Community ·

SQL Subqueries and CTEs Explained Using a Beekeeping Database

A tutorial on DEV Community uses a fictional beekeeping co-op dataset to explain how subqueries and Common Table Expressions (CTEs) work in SQL. Subqueries are nested queries wrapped in parentheses that the database resolves first, passing their result to the outer query. They can return a single scalar value, a list, or a full result set, and can be correlated — re-running for each row in the outer query. The article highlights a key pitfall: using NOT IN with a subquery that may return NULL values can silently eliminate all results, making NOT EXISTS a safer alternative. CTEs are presented as an alternate syntax for the same logic, offering improved readability for complex, multi-step queries.

0
ProgrammingHacker News ·

Study Examines Whether Advanced Robots Refuse Dangerous Commands

A research project called RoboHarm has investigated how frontier robot control policies respond to unsafe instructions. The study evaluates whether leading robotic systems have built-in safeguards to decline harmful commands. The findings are published on the RoboHarm website under the RoboCurve research initiative. The research raises important questions about safety alignment in real-world robotics, mirroring similar debates in the AI language model space.

0
ProgrammingDEV Community ·

How Thoughtful Code Reviews Improve Team Quality and Reduce Technical Debt

A software developer argues that treating code reviews as a mission — rather than a formality — leads to cleaner, more maintainable codebases over time. The author outlines key questions to ask during reviews, focusing on whether code meets client expectations, quality standards, and future maintainability. Through consistent, constructive feedback on pull requests, the developer helped a team maintain architectural integrity after a microservice project lost its original contributors. Thorough reviews also catch bugs before QA, reducing pressure on testers and project managers alike. The author concludes that investing 30 to 60 minutes in a focused code review pays dividends in team growth, reduced emergency fixes, and long-term code sustainability.

0
ProgrammingDEV Community ·

Developer builds 40-second product trailers using Pillow, ffmpeg, and a neural voice

A developer has shared a fully code-driven pipeline for producing 40–60 second launch trailers for small AI products using only Python's Pillow library, ffmpeg, and the edge-tts neural voice tool. The workflow generates typography cards with ImageDraw, applies a Ken Burns zoom effect via ffmpeg's zoompan filter, and syncs a five-sentence voiceover recorded at slightly elevated pace. No cloud video service, stock templates, or timeline editor is involved, and the entire trailer renders in under three minutes on a modest ARM machine. The developer's approach involves cutting unsolicited 'spec trailers' overnight from a founder's public website content, clearly labeling them as speculative work. The post includes every command used, framing rigid short-form video formats as better suited to scripted automation than manual editing tools.

0
ProgrammingDEV Community ·

BeeLadybug Ironic: A Browser Tool Helps Developers Decompress After Tough Coding Days

A developer has built an experimental browser-based tool called BeeLadybug Ironic, designed to help programmers mentally unwind after stressful coding sessions. Inspired by the rubber-duck debugging technique, the project extends the concept of self-inspection from code to personal frustration. Users are greeted by a bee-ladybug mascot and offered simple prompts to reflect on whether they are genuinely stuck or simply burnt out. They can type out their frustrations and watch the text dissolve into pixels as a symbolic release ritual. The tool runs entirely in the browser's RAM with no accounts, servers, or external tracking, and is currently in the prototype stage seeking community feedback.

0
ProgrammingDEV Community ·

Free Browser Tool Lets You Check If Your VPN Is Leaking Your Real IP

A developer has built a free, browser-based tool called EvoTechTool that tests whether a VPN is leaking a user's real IP address via WebRTC, a technology that powers video calls and peer-to-peer communication. WebRTC can expose a device's true public IP even when a VPN is active, because it fetches network addresses through a separate channel that bypasses the VPN tunnel. The tool uses the browser's RTCPeerConnection API to detect IP addresses disclosed during WebRTC's connection process and compares them against the IP the VPN reports. All processing happens locally in the browser with no data sent to external servers, according to the developer. Beyond WebRTC, the tool also flags other common privacy risks such as DNS leaks, IPv6 exposure, browser fingerprinting, and time zone or language data that can reveal a user's location.

0
ProgrammingDEV Community ·

ephemora-cell 1.0.4 Launches on PyPI as a Stateless MCP Tool Server

ephemora-cell version 1.0.4, a stateless Model Context Protocol (MCP) tool server, is now available on PyPI. The release eliminates session state and initialization handshakes, allowing servers to be restarted or load-balanced between calls without clients noticing. A key bug fix ensures the get-policy report accurately reflects actual filesystem access granted during execution, closing a gap where sandbox directories were previously underreported. The update also resolves a version mismatch issue by single-sourcing the version number, ensuring consistency between the package metadata and runtime. Backward compatibility is maintained for handshake-era clients such as Claude Desktop, VS Code, and Codex.

0
ProgrammingHacker News ·

FAA Halts East Coast Flights After Fiber Line Cut Disrupts Communications

The FAA temporarily halted flights at busy East Coast airports due to communication issues, according to a Reuters report dated September 21, 2026. Authorities attributed the disruption to a severed fiber line affecting air traffic communications. The ground stop impacted operations at multiple airports along the East Coast. No further details about the scope, duration, or responsible party were available from the provided source.

0
ProgrammingDEV Community ·

VS Code AI Assistants in 2026: Free Tier Limits, Top Tools, and Privacy Risks

By mid-2026, AI assistants have become the most-installed category of VS Code extensions, with 41% of users activating them weekly, according to GitHub data. Tools like GitHub Copilot, Codeium, and Amazon Q dominate the market, though all free plans impose daily usage caps that most developers exhaust within two hours of focused work. Codeium has seen rapid growth, reaching 3.5 million active installs — a 190% rise in 12 months — while outperforming Copilot on Python test generation in independent benchmarks. A key privacy concern has emerged: most free-tier assistants transmit code snippets to remote servers by default, posing potential risks for developers working on proprietary codebases. Tabnine remains the primary option for fully local inference, though its free plan excludes chat and advanced features.

0
ProgrammingHacker News ·

404 Media Seeks Public Help to Map Police Surveillance Camera Use Across US

Investigative outlet 404 Media is crowdsourcing information from the public to document how local police departments are deploying surveillance technology. The effort focuses specifically on Axon license plate recognition cameras, which are increasingly being adopted by law enforcement agencies. Residents are being asked to share what they know about camera installations in their cities or towns. The initiative aims to build a broader picture of how widespread such surveillance infrastructure has become across the United States.

0
ProgrammingHacker News ·

Suspicious NPM Math Library Found Hiding Encrypted Loader in Package

Security researchers at SafeDep discovered an NPM package posing as a math library that conceals an encrypted loader within its code. The package raises red flags because legitimate math libraries have no justifiable reason to include obfuscated or encrypted execution components. This technique is commonly associated with malicious packages that attempt to evade static analysis and security scanning tools. The finding highlights ongoing supply chain security risks within the NPM ecosystem, where threat actors disguise malware as innocuous utility libraries. Developers are advised to scrutinize dependencies carefully, especially those with unusual or unexplained code components.

0
ProgrammingDEV Community ·

How vLLM Solves GPU Memory Bottlenecks in Large Language Model Inference

Modern LLM text generation is primarily a memory bandwidth problem, not a compute problem, with GPUs often running at low utilization while shuffling model weights and KV cache data during the decode phase. Standard PyTorch inference pipelines suffer from memory fragmentation, static batching inefficiencies, and high driver overhead when handling multiple concurrent users. vLLM addresses these limitations through two core innovations: PagedAttention, which manages KV cache memory more efficiently, and continuous iteration-level batching, which schedules new requests as soon as any sequence completes. Benchmarks for the article were conducted on dedicated NVIDIA H100 and H200 GPU clusters, using models such as Qwen3.6-27B as practical examples. The piece provides a technical deep dive into why naive inference stacks fail at scale and how vLLM's operating-systems-inspired engineering overcomes those constraints.

0
ProgrammingDEV Community ·

Google, OpenAI and X Move Ads Into AI Chat Interfaces Across Platforms

Major tech platforms including Google, OpenAI, and X are testing advertising formats embedded directly within conversational AI interfaces rather than in traditional placements. Google announced Gemini-powered ad formats at its Marketing Live 2026 event, designed to appear within AI-driven search and discovery experiences. OpenAI has made ChatGPT Ads available in several regions, placing ads within and alongside chat threads based on conversation topics and user interactions. X has separately experimented with contextual ad units integrated into social post conversations and discussion flows. The shared trend signals a cross-platform shift toward dialogue-aware advertising, where relevance depends on matching a user's conversational intent rather than interrupting their attention.

0
ProgrammingDEV Community ·

Dart vs Freezed: Benchmark Tests Four Ways to Write a Data Class

A developer benchmarked four approaches to writing a data class in Dart — Freezed 4, Equatable, pure Dart 3.13, and Freezed 4 with primary constructors — using a shared suite of 16 tests on a single Note model. The comparison measured lines written, lines generated, build time, and how many places need updating when a new field is added. Dart 3.13, which made primary constructors stable on 12 August 2025, has been gradually closing the gaps that originally made Freezed necessary back in 2020. No single approach outperformed the others across all criteria, with each breaking down in different scenarios. The findings point toward a recommended default approach, with identified exceptions where that default is not the best fit.

0
ProgrammingDEV Community ·

Domain Claim Protocol Aims to Define Clear Boundaries for Autonomous AI Agents

As software systems increasingly rely on autonomous agents that dynamically select tools and services, a key engineering challenge has emerged: defining what each component is actually permitted to do. Unfurl Systems Lab has published an open draft specification called the Domain Claim Protocol (DCP), currently at version 0.2.0-draft, to address this gap. DCP allows each component to declare its role, capabilities, dependencies, explicit refusals, and fault behaviors in a structured, machine-readable format. Unlike API schemas or prompt instructions alone, a DCP claim is designed to be inspectable by compilers, runtimes, and human reviewers before components are assembled into a workflow. The protocol aims to replace implicit, drifting boundaries in complex agent systems with enforceable, transparent contracts that clarify ownership of business decisions and failure handling.

0
ProgrammingDEV Community ·

Kern Promises Local Code Intelligence to Cut AI Token Costs by Up to 80%

A new open-source tool called kern, built in pure Go, aims to reduce the token overhead incurred when using AI coding assistants such as Claude Code, Cursor, and Codex. Rather than feeding entire codebases into large language models, kern uses AST-based parsing to deliver surgical context slices estimated at 500–2,500 tokens per query, compared to much larger conventional approaches. The tool operates as a single self-contained binary with local-first, zero-telemetry architecture that masks PII and credentials before any data reaches an LLM. A comparison with rival tools Graphify and Code Review Graph positions kern as better suited for active daily development, while the others remain preferable for multimodal documentation and CI/PR risk scoring respectively. Kern is available on GitHub under the handle JayveerPrajapati/kern and supports installation on macOS, Linux, and Windows.

← NewerPage 1040 of 3195Older →