0
ProgrammingHacker News ·
Authenticity's Triumph
Article URL: https://blog.smalleycreative.com/authenticitys-triumph/ Comments URL: https://news.ycombinator.com/item?id=49770851 Points: 6 # Comments: 0
Programming
0
ProgrammingHacker News ·
New online quiz challenges users to distinguish AI-generated images from real ones
A web-based game called Slop Sense has been launched to test users' ability to identify AI-generated images. The tool, hosted at labtoagi.com, presents images and asks players to determine whether each was created by an AI or is a genuine photograph. The game has gained attention on Hacker News, accumulating points and user discussion. It reflects growing public interest in media literacy as AI-generated imagery becomes increasingly sophisticated and widespread.
0
ProgrammingDEV Community ·
ZoomEye Data Shows Scale of Internet-Exposed SonicWall SMA Devices After Zero-Day
Following a SonicWall SMA1000 zero-day vulnerability chain disclosed in September 2026, researchers used the ZoomEye internet intelligence platform to assess how many such devices are publicly reachable online. A product fingerprint query returned just 7 matching records, while a broader free-text search found 416 records across ZoomEye's combined dataset as of September 20, 2026. The low count does not indicate safety, as even a small number of exposed edge appliances represents real, non-hypothetical risk to organizations. ZoomEye's value lies in answering whether a product class is exposed, where that exposure is concentrated geographically, and whether device counts change after a public disclosure. Analysts note that meaningful use of such data requires recording the exact query, dataset type, collection time, and unit of measurement to ensure reproducibility.
0
ProgrammingDEV Community ·
Four reasons your order system and payment provider totals never match
Businesses across industries routinely face reconciliation disputes where order systems and payment providers report different totals, yet most teams spend days arguing over spreadsheets without resolving the root cause. According to a software analysis, there are four distinct patterns behind these mismatches: amended baskets with shared order IDs, split or partial captures that confuse total-based comparisons, duplicate records from multiple data sources inflating figures, and genuinely missing records caused by failed webhooks or out-of-sync exports. Three of the four patterns involve no actual financial error — the data is simply incomplete, duplicated, or capturing different moments in a transaction's lifecycle. Only missing records represent a true system communication failure requiring investigation. The piece argues that most reconciliation problems persist because teams apply the same fix to all four patterns, when each requires a different and specific response.
0
ProgrammingHacker News ·
Dungeon Crawl Stone Soup: A Free, Open Source Roguelike Game
Dungeon Crawl Stone Soup (DCSS) is a free, open source roguelike dungeon-crawling game available at crawl.develz.org. Players navigate procedurally generated dungeons, battling monsters and collecting items in a classic turn-based format. The game has been developed and maintained by an open source community over many years. It can be played directly in a browser or downloaded for offline play across multiple platforms.
0
ProgrammingHacker News ·
Friends School Boulder Makes Deliberate Choice to Keep AI Out of Classrooms
Friends School Boulder has published a reflective piece outlining its stance on artificial intelligence in education. The school presents its decision to limit or avoid AI tools as a conscious, ongoing choice rather than a default position. The piece frames the debate around deeper questions of what education is fundamentally for. By repeatedly revisiting this decision, the school signals that resisting AI adoption requires active intention in an environment where its use is increasingly normalized.
0
ProgrammingDEV Community ·
CSS box-sizing Explained: Why Elements Exceed Their Declared Width
A common source of layout bugs in CSS is the default box-sizing behavior, where padding and borders are added outside an element's declared width, making it larger than expected. For example, a 300px element with 20px padding and a 2px border actually renders at 344px under the default content-box model. Switching to border-box tells the browser to include padding and borders within the declared width, keeping the element at exactly 300px. Developers can apply this globally using a universal selector on all elements and pseudo-elements to ensure consistent, predictable sizing across a project. This approach simplifies the layout of common UI components like forms, cards, and buttons without requiring per-element overrides.
0
ProgrammingDEV Community ·
Architect builds open-source AI agent that draws in CAD apps and exports IFC models
An architect frustrated with repetitive drafting work built Axio Coder, an open-source AI agent designed to operate CAD and design software from within a user's project environment. Unlike typical coding agents that only read and write files, Axio Coder interacts with programs that have no API — such as CAD windows — by reading the operating system's UI Automation tree rather than guessing pixel coordinates from screenshots. The agent can visually inspect its own output, comparing generated geometry against a reference image or drawing, then iterating corrections before exporting files in industry-standard formats including IFC, DXF, and STEP. It retains memory across sessions, logs every edit as a before-and-after diff, and includes a self-correction mechanism to break out of repetitive loops. Currently a single-user desktop app built on Electron and Python, the tool aims to automate the repetitive 80% of architectural modelling so designers can focus on work requiring human judgement.
0
ProgrammingHacker News ·
PyPy 8.0.0 Released with New Features and Performance Improvements
PyPy, the alternative Python interpreter known for its just-in-time compilation, has released version 8.0.0. The new release was announced on the official PyPy website in September 2026. PyPy consistently aims to offer faster execution speeds compared to the standard CPython interpreter. The release garnered attention on Hacker News, where developers discussed the update. Full details of the changes and improvements are available on the official PyPy blog.
0
ProgrammingDEV Community ·
Mapping CISA's September 2026 KEV Additions to Real-World Internet Exposure
CISA's Known Exploited Vulnerabilities catalog identifies flaws actively exploited in the wild, but does not indicate which affected systems are actually reachable in a given environment. September 2026 KEV additions notably include services such as GitLab, LiteLLM, and Cisco Secure Firewall Management Center — tools frequently internet-facing and holding credentials or controlling other systems. Internet measurement techniques, including fingerprinting via tools like ZoomEye, can partially bridge the gap by identifying reachable instances of these services. However, a fingerprint match confirms only that a service was observed at an address, not that it runs a vulnerable version or has been compromised. For services that cannot be reliably fingerprinted, internal inventory and continuous discovery remain the more dependable methods for assessing true exposure.
0
ProgrammingDEV Community ·
Silent Inertia SSR failures can fool uptime monitors while breaking Google indexing
A Laravel 12 and Inertia.js stack with React 19 server-side rendering can silently fail when the background Node SSR process stops, yet still return HTTP 200 responses on every page. Because Laravel falls back to client-side rendering when the SSR server is unreachable, human visitors see a fully working site while search engine crawlers receive empty page shells with no indexed content. The failure goes undetected because standard uptime checks and status-code monitors cannot distinguish between a properly server-rendered page and a bare client-side fallback. Common triggers include an unsupervised SSR process started manually over SSH, a JavaScript runtime error in the server bundle, or a deployment that rebuilds assets without restarting the SSR process. The recommended fix involves a strict deployment order — build first, then restart the supervised SSR process — combined with curl-based checks that measure actual rendered character output rather than relying on HTTP status codes alone.
0
ProgrammingDEV Community ·
Engineering Mentor Teaches OOP Concepts Using Sandwich-Making Before Any Coding
A software engineering mentor ran an experiment with an apprentice named John, aiming to build the conceptual foundation of Object-Oriented Programming without writing any code first. Using a sandwich-making exercise, the apprentice learned to distinguish entities, tools, containers, and operations, and discovered how actions trigger state transitions rather than creating entirely new objects. The exercise was then extended to a bank account model, through which the apprentice independently arrived at the principle of Command-Query Separation, distinguishing commands that mutate state from queries that only read it. A final challenge involving 100 cars in a racing simulation led the apprentice to conceptually discover the idea of a class as a reusable template. The mentor argues this design-first approach helps beginners move beyond memorizing syntax and develop genuine problem-decomposition skills.
0
ProgrammingHacker News ·
AI Fails Enterprises That Lack a Strong Data Foundation
A newly published analysis argues that artificial intelligence cannot rescue organizations that have poor understanding of their own data. The piece contends that without clean, well-governed, and clearly understood data, AI tools are likely to produce unreliable or misleading results. The author suggests that data literacy and infrastructure must come before AI adoption, not after. Enterprises rushing to implement AI without addressing underlying data challenges risk compounding existing problems rather than solving them.
0
ProgrammingDEV Community ·
How to Detect and Fix Memory Leaks in Node.js Production Apps
Node.js applications running in production are susceptible to memory leaks, where objects no longer in use are still referenced and cannot be freed by the V8 Garbage Collector. Over time, this causes the application's memory footprint to grow, leading to performance degradation, high latency, and eventual heap-out-of-memory crashes. Memory leaks in Node.js most commonly originate from undeclared global variables, unremoved event listeners on long-lived objects, and closures that inadvertently retain references to outer-scope variables. Developers can address global variable leaks by enforcing strict mode or using linters like ESLint, while event listener leaks can be resolved by explicitly removing listeners once a request or task completes. Understanding how Node.js organizes memory — particularly the V8 heap's New Space and Old Space generations — is essential for diagnosing and preventing these issues in production environments.
0
ProgrammingDEV Community ·
Developer builds browser tool to detect data brokers and automate deletion requests
A developer has created a privacy tool combining a browser extension and companion website to help users identify which companies hold their personal data. The extension runs entirely on the user's device, detecting domains, vendors, and data brokers without sending information to external servers. It then aggregates these findings and generates deletion request templates tailored to relevant national and regional privacy laws. The tool is currently in beta and available for Chrome-based browsers and Firefox, with full open-source release planned after ongoing code refactoring. The developer acknowledges the tool cannot guarantee complete accuracy but says it provides strong indicators to help users reduce their scattered data footprint without hours of manual effort.
0
ProgrammingDEV Community ·
Developer Uses AI as a Mentor, Not a Shortcut, to Learn Backend Development
A frontend-leaning developer working on a project called CourierIQ used AI as a guided learning tool rather than a code generator when tasked with building a backend. Facing an unfamiliar stack of APIs, controllers, services, and middleware under a tight deadline, the developer chose AI over lengthy tutorials to learn while building. Using a tool called Antigravity, they instructed the AI to act as a senior developer mentor — explaining concepts and providing steps without writing the code outright. The developer deliberately wrote all implementations themselves, intentionally making mistakes and asking follow-up questions to deepen understanding. The approach highlights a deliberate distinction between using AI as a crutch versus using it as an interactive learning accelerator.
0
ProgrammingDEV Community ·
Version Your API First Before Updating MCP Adapter Layers, Experts Say
Model Context Protocol (MCP) servers typically act as thin adapters over underlying APIs, making the API contract the most critical point of failure to monitor. Developers are advised to review changes in a specific order: API surface first, then MCP mappings, and finally agent behavior such as prompts and retry logic. Breaking changes like renamed fields, new required parameters, or removed enum values may not surface immediately as MCP errors, instead appearing later as vague tool failures or incorrect agent decisions. A practical baseline for teams includes maintaining an OpenAPI spec, running diffs in CI pipelines, and classifying changes as breaking or non-breaking before updating the MCP wrapper. The recommended practice is to version and gate the API before regenerating or modifying the MCP adapter, especially as small schema changes accumulate over time.
0
ProgrammingDEV Community ·
wFabricSecurity uses SHA-256 hashing to protect blockchain worker nodes from tampering
Developer William Steve Rodríguez Villamizar has released wFabricSecurity, an open-source Python library designed to verify the integrity of code running on Hyperledger Fabric worker nodes. The tool computes SHA-256 cryptographic hashes of critical files and halts execution if even a single byte has been altered, guarding against backdoor injection or silent configuration drift across node fleets. It also ties code hashes to specific version labels, providing an auditable trail confirming that workers ran the approved business logic. The library is compatible with Python 3.10 and above and includes cryptographic identity management and token-bucket rate limiting alongside its integrity checks. It is available on both GitHub and PyPI under the project name wFabricSecurity.
0
ProgrammingDEV Community ·
DMARC Becomes Official RFC Standard in 2026, Removing Key 'pct' Tag
On 19 May 2026, DMARC was elevated to an IETF Standards Track specification under RFC 9989, replacing the decade-old informational RFC 7489. The update removes the 'pct' tag, which allowed domain owners to apply email policies to only a percentage of failing messages, meaning outdated records referencing it may now enforce full policy unintentionally. A new 't' tag has been introduced as a cleaner testing mechanism, applying one step below the published policy while administrators monitor reports. RFC 9989 also advises against using p=reject for domains where real users send mail, citing risks of legitimate messages being bounced by mailing lists and forwarders. Additionally, the spec replaces Public Suffix List-based domain discovery with a DNS Tree Walk method and carries over the 'np' tag for setting policies on non-existent subdomains.
0
ProgrammingDEV Community ·
Developer Launches EmbedCatalog, an Open-Source Tool for Custom Project Embeds
A developer has released a new version of EmbedCatalog, a personal project built over a few weeks and available at embedcatalog.com. The platform allows users to create and manage custom embeds to enhance the visual presentation of applications or Markdown files. It supports a range of project types including open-source tools, web apps, packages, and commercial services. The platform offers both free and premium tiers, with features including user registration, login, and an embed editor. The project is open source and hosted on GitHub, where the creator is inviting community contributions and feedback.
