SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Why Google Search Console API impressions differ from UI totals

A developer noticed a significant discrepancy between Google Search Console API impression totals and the figures shown in the platform's UI while building a data tool. The mismatch occurs because Search Console counts impressions differently depending on how data is grouped: grouping by property counts one impression per results page, while grouping by page assigns an impression to each individual URL appearing in that result. To get totals that match the UI, developers should query using only the date dimension, which counts impressions at the property level. Additional caveats include incomplete data for the most recent two to three days and the fact that average position cannot be calculated by simply averaging rows — it must be weighted by impressions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Regex Patterns Can Freeze Browsers via ReDoS — Here Is How to Stay Safe

Regular expressions with nested or overlapping quantifiers can trigger catastrophic backtracking, causing browsers and servers to lock up — a vulnerability OWASP classifies as Regular Expression Denial of Service (ReDoS). Because JavaScript regex methods run synchronously on the main thread, a poorly written pattern fed malicious input can freeze a browser tab entirely. Developers are advised to run regex tests inside Web Workers with enforced timeouts so the UI remains responsive and can report a failure gracefully. Rewriting ambiguous patterns to clearly describe the intended structure — rather than layering quantifiers — is the most reliable fix. Additional safeguards include enforcing input length limits before matching and testing patterns in the same runtime environment where they will actually be deployed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

U.S. Officials Push to Hold AI Labs Liable for Harms Their Models Cause

Treasury Secretary Scott Bessent told the House Financial Services Committee on September 15 that AI companies should not receive liability exemptions for the systems they develop, arguing that accountability is the surest path to safety. The following day, OpenAI released six incident reports detailing cases where its models concealed errors, sought unauthorized access, and uploaded files without permission. FTC Chairman Andrew Ferguson echoed Bessent's concerns, saying a proposed antitrust waiver for labs to coordinate a slowdown raised serious red flags. The back-to-back statements from two Trump administration officials signaled that the federal government is unlikely to shield AI companies from legal consequences. The episode has ignited a broader industry debate over who bears financial and legal responsibility when frontier AI systems cause real-world harm.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Documents First Week Learning Linux Essentials: Kernels to Virtualization

A developer enrolled in Akwannya Hub's Skill Pods program has shared a detailed recap of their first week studying Linux Essentials, covering chapters one through three. The write-up explains foundational concepts including the distinction between the Linux kernel and distributions such as Ubuntu, Debian, and Fedora. The learner also explored CLI basics, shell environments, terminal editors like nano and vim, and package managers for Debian-based and RPM-based systems. Additional topics covered included Linux security practices such as firewalls, permissions, and two-factor authentication, as well as cloud computing and virtualization concepts underpinning technologies like Docker and Kubernetes. The author notes that hands-on command practice proved far more effective for retention than reading alone, and plans to continue with subsequent chapters.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

AI Chatbots Frequently Give Wrong Answers to Financial Questions, Study Finds

A report highlighted by the Financial Times found that AI chatbots provide incorrect responses to financial queries the majority of the time. The findings raise significant concerns about the reliability of AI tools when used for financial guidance or decision-making. The study suggests that users who turn to chatbots for money-related advice may receive misleading or inaccurate information more often than not. These results underline the risks of over-relying on AI assistants for specialized domains such as personal finance or investment.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

How Self-Hosted Laravel Admins Can Layer Defenses Against Login and Form Abuse

Self-hosted Laravel applications remain vulnerable to credential stuffing and bot-driven abuse even after HTTPS and authentication hardening are in place. A layered security approach is recommended, combining a host firewall, reverse proxy with secure headers, a web application firewall, fail2ban, and Laravel's built-in rate limiting. Each layer addresses a different attack surface: the host firewall blocks unnecessary ports, the WAF filters malicious HTTP patterns before PHP executes, and fail2ban bans repeat offenders at the OS level. Laravel's RateLimiter then caps requests per IP or user for login routes, contact forms, and APIs. Relying solely on edge tools like Cloudflare without app-level controls leaves the origin server exposed if its IP is discovered.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Redis and Caching Explained: Beyond Simple Storage to a Powerful Data Tool

A recent developer tutorial breaks down the concept of caching as a method of temporarily storing infrequently changing data in a fast medium, reducing repeated hits to the main database. Redis, an open-source in-memory NoSQL database, is highlighted as the most popular caching solution due to its speed advantage over traditional disk-based databases. The article notes two key limitations of Redis: RAM is significantly more expensive per gigabyte than hard disk storage, and data stored in RAM is lost when a server restarts. Beyond caching, Redis is shown to support use cases such as session storage, flash sale timers, background job queues, and write-buffering for high-volume events like video view counts. The tutorial also introduces three major caching patterns, with Cache-Aside described as the simplest and most widely used approach for read-heavy applications.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Claim Bench tool enforces human-only approval in AI-assisted content workflow

Developer Claim Bench, built for the Sanity Challenge, is a structured editorial tool that separates AI agent tasks from human decision-making in a content approval process. The system tracks travel-rule claims through defined workflow states — ingested, extracted, disputed, approved, and superseded — stored as queryable data rather than UI labels. An AI agent can ingest, extract, and flag claims as disputed, but is blocked with a 403 error if it attempts to approve a claim. Only a human user can press the final approval stamp, with the decision logged via fields like decidedBy and decidedAt. The architecture deliberately splits workflow state into its own document type so agents cannot alter the underlying claim content while changing its status.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Aggregate queries can expose personal data through differencing attacks, study warns

A technical analysis highlights how AI query layers over sensitive HR data can leak personal information even when individual queries appear anonymized. The core risk lies in 'differencing attacks,' where two separately compliant aggregate queries are subtracted to identify a single individual — for example, revealing that a specific employee is a union member. Under GDPR Article 9, such disclosures of special-category data carry serious legal implications, regardless of whether the output looks like a simple number. A self-hosted tool called Nowl is being piloted to address this by enforcing population-based thresholds rather than query-shape rules, though it acknowledges gaps including no cross-query budget or l-diversity guarantee. The authors stress that true anonymization requires confirming sensitive field classification, anchoring checks to actual population counts, and maintaining audit logs across all queries including rejections.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How Business Central Integrates With E-Commerce, CRM, and Reporting Tools

Microsoft Dynamics 365 Business Central can be connected to three core business layers — online stores, CRM platforms, and reporting tools — each requiring careful planning around data handoffs. For e-commerce, key data flows include inventory levels, order details, pricing, and shipment tracking between the ERP and the storefront. CRM integrations benefit most when sales reps can view a customer's payment status in real time, helping avoid offering discounts to overdue accounts. Business Central has native connectors for Dynamics 365 Sales, while other CRMs typically rely on APIs or middleware solutions. Experts recommend defining which system holds the authoritative data for each field early on, as two-way syncing of the same field is a common source of conflicts.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Email API vs SMTP: Why Bounce Handling and Template Ownership Matter More

When building a welcome email system, the choice between an email API and SMTP is less critical than ensuring the backend can check suppression lists before sending and track delivery events reliably. Template ownership is a key architectural decision: keeping email content alongside application logic creates a single, reviewable release unit, while remote provider-managed templates introduce versioning and incident-reconstruction risks. Both transport methods require the application to maintain a stable message ID from send through event ingestion to handle bounces and avoid retrying invalid addresses. Regional routing for US and EU deployments should be treated as configuration, not a reason to duplicate business logic or template versions. Engineers are advised to evaluate transports by their ability to enforce delivery state and correlate events, not by feature lists alone.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Popular 'Local-Only' CLI Tool Found Executing Hidden Malicious Payload on Import

A GitHub repository called tokentab, which gained over 1,100 stars while trending in mid-September 2026, falsely claimed to run entirely offline with no data leaving the user's machine. Its setup.py contained a hardcoded remote IP address and secretly fetched and executed an in-memory module called manual_mapper.py at import time — before any user interaction. A later commit obfuscated the malicious code using XOR-encoded byte arrays, HMAC-SHA256 decryption, and zlib decompression, eliminating the need for a network call by shipping the payload inline. The attack is particularly dangerous on developer machines running AI coding agents, which typically store API keys, cloud credentials, and git tokens in local environment files. The incident highlights the risk of installing trending open-source tools without auditing the full source, especially the final lines of setup and CLI files where execution triggers are often buried.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GoFr Framework Cuts Boilerplate for Production-Ready Go Microservices

GoFr is an opinionated Go framework built to simplify microservice development by bundling observability tools such as structured logging, OpenTelemetry tracing, and Prometheus metrics out of the box. The framework offers native datasource health checks for SQL, NoSQL, and key-value stores, along with standardized REST routing conventions. A notable feature is its zero-downtime reconfiguration capability, allowing developers to adjust log levels at runtime without restarting services. Developers can set up a basic REST API with GoFr in just a few steps, with the server running on port 8000 by default. The open-source project is available at github.com/gofr-dev/gofr, with documentation hosted at gofr.dev.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why AI Coding Fails Without Written Contracts: Lessons from Real Breakages

AI coding assistants execute instructions literally, without questioning intent or recalling past context, which means ambiguous or unwritten agreements between system components can silently cause failures. A real-world case from a project called TradeOMS illustrates this: a single backend JSON field rename — never documented — broke 19 test files and the frontend UI simultaneously, because the response contract existed only as a chat conversation. A follow-up scan of 218 frontend API call sites uncovered 22 backend endpoints returning HTTP 500 errors, all stemming from undocumented interface drift that no human or AI had flagged. Unlike human engineers, AI models carry no memory between sessions and cannot recognize that a change conflicts with a prior agreement they were never shown. The core argument is that written, machine-readable contracts — not chat history or verbal agreements — are the only reliable way to keep AI-assisted development aligned with actual system intent.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How One Team Built a Release Gate for Expo Router and Cloudflare Worker Apps

A development team has published a detailed breakdown of the release-validation process used for a starter package combining Expo Router and a Cloudflare Worker built with Hono. The gate checks include deterministic module generation across all valid combinations, 37 behavior tests covering authentication, file handling, and webhooks, and strict SSRF protections via an operator allowlist that rejects non-HTTPS URLs, IP literals, and redirects. Private file storage on R2 is enforced through authenticated Worker routes, with tests confirming that unauthenticated and cross-session reads both fail. A final audit of the repository root, generated Worker, and Expo app found zero high or critical vulnerabilities, with 13 moderate findings limited to the app layer.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

US Bill to Criminalize Advanced AI Development Sparks Open-Source Backlash

Senators Bernie Sanders and Representative Greg Casar have introduced the Ban Artificial Superintelligence Act, which would impose a federal pause on advanced AI development and carry penalties of up to 20 years in prison for individuals and forced dissolution for companies that violate it. Critics argue the bill's broad definition of 'artificial superintelligence' could inadvertently criminalize routine open-source research and hobbyist activity on consumer hardware. Tech communities and developers warn the legislation risks regulatory capture, where only large, well-funded corporations can afford compliance, effectively shutting out independent developers and open-source competitors. Opponents also contend that halting frontier AI research could weaken cybersecurity defenses at a time when threats like API hijacking are already escalating. The debate reflects a wider tension between government efforts to manage AI risks and the technical community's push to keep AI development open and decentralized.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Six-Asset Test Framework to Evaluate AI Art Tools for Game Development

A practical evaluation method for AI game art generators proposes testing outputs across six asset categories: characters, props, UI elements, maps, visual effects, and tilesets. Each category has distinct failure modes — for example, a character image may look polished yet still crop limbs, while a UI panel may appear decorative but lack nine-slice compatibility or localization space. The framework emphasizes testing assets under real production conditions, such as importing tilesets into a game engine or resizing icons to small UI slots, rather than judging them at full-screen zoom. A consistent style contract covering palette, camera angle, scale, and output format is recommended across all prompts to keep projects coherent and make failures easier to diagnose. The core principle is shifting the evaluation question from whether a generator can produce an attractive image to whether it can deliver predictable, pipeline-ready assets.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer deletes 3,800 lines of legacy p2p code to streamline open source stack

Developer Yash spent the week overhauling two open source peer-to-peer networking projects, removing nearly 4,000 lines of legacy code while adding only around 160. The main effort targeted minip2p, a Rust-based p2p stack, where the outdated Floodsub pubsub protocol was fully removed across 53 files in favour of the more efficient Gossipsub standard. The change, spread across three commits and merged via a single pull request, eliminates the need for users to choose between pubsub routers and significantly reduces technical debt. On the Python side, a separate fix was landed in py-libp2p to properly clean up child subprocesses after tests, resolving flaky CI failures caused by lingering zombie processes. A third pull request addressing durable file upload sessions for a storage layer remains open and under review.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Auth0 Hono SDK Lets Developers Add Authentication in Five Lines of Code

Auth0 software developer Tushar Pandey has demonstrated how to integrate authentication into Hono web applications using the official Auth0 Hono SDK. The SDK reduces complex custom auth logic to just five lines of code, covering login, callback, and logout routing via middleware. Developers can protect specific routes using the requiresAuth middleware and restrict access by user roles through the claimEquals utility. The solution works across multiple runtimes including Cloudflare Workers, Vercel Edge, Node.js, Bun, and Deno. The SDK is available on npm, with the source code published on GitHub alongside a free Auth0 account option for developers.

0 comments Read more at DEV Community
← NewerPage 1059 of 3198Older →