SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingHacker News ·

BBC Asks Whether Societies Are Psychologically Prepared for Modern War

A BBC article raises concerns about whether populations are mentally and emotionally equipped to face the prospect of armed conflict. The piece examines the psychological readiness of civilians in an era of heightened global tensions. It explores how decades of relative peace in many regions may have left societies unprepared for the realities of war. The article appears to draw on expert perspectives around resilience, fear, and public morale. The discussion reflects growing unease among analysts and policymakers about the shifting security landscape.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Gemma 4 Runs 1.79x Faster on Tesla T4 Using QAT Int4 Weights Over bf16

A developer has published a step-by-step guide for deploying Google's Gemma 4 2B model on a Tesla T4 GPU hosted on a Google Compute Engine VM. Two model checkpoints were benchmarked: the standard bf16 version and a QAT int4-weight variant, using vLLM 0.29.0 on a modest n1-standard-2 instance with 2 vCPUs and 7.8 GB RAM. The QAT model decoded at 72.31 tokens per second in a single stream compared to 40.44 for bf16, and reached 215.91 tokens per second across eight streams versus 164.62. A suite of Python MCP tools was built to manage the deployment pipeline, handling steps such as GPU architecture verification and a required Turing-specific patch. The full setup and source code are available on GitHub, offering a practical reference for running modern LLMs on older, lower-cost GPU hardware.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

DEV Tutorial: Build a Parallel CI Pipeline with Lint, SonarQube, and Trivy

A weekend homework assignment from DEV Community guides students through setting up a three-job GitHub Actions CI pipeline for a restaurant company project. The exercise covers running Trivy filesystem vulnerability scans, including development dependencies, and understanding how CVEs and severity levels apply to real codebases. Students are also asked to trace transitive dependency chains — specifically how nanoid enters the project through Vite and PostCSS — and document their findings in a structured vulnerability report. The pipeline requires three independent parallel jobs triggered on pull requests to the main branch, teaching students why parallelism speeds up CI workflows. The assignment concludes with a push to GitHub, pull request creation, and live verification of all three jobs running simultaneously in GitHub Actions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

LetMeSend.Email Launches MCP Server to Connect AI Agents Directly to Inboxes

LetMeSend.Email has released an MCP (Model Context Protocol) server that allows AI agents to access and manage email inboxes without custom integration code. The server exposes 35 tools via a single Streamable HTTP endpoint, covering mailbox management, transactional email, domain health checks, and marketing campaigns. Authentication is handled through OAuth browser sign-in or API Bearer tokens for headless environments, with access scoped to defined permission tiers. Compatible clients include Claude, Cursor, Copilot, Gemini, and others that support remote MCP connections. A key use case demonstrated is automated support inbox triage, where an agent can search threads, summarize them, and create draft replies without sending anything.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Build a Real-Time Streaming Chatbot Using Node.js and Groq API

A tutorial published on DEV Community walks developers through building a streaming chatbot in Node.js that renders AI responses token by token, mimicking the experience seen in tools like ChatGPT and Claude. The guide uses Groq's API, which is compatible with OpenAI's SDK, allowing developers to get started with a free API key and no credit card. It covers project setup, credential management with dotenv, and writing asynchronous code that processes live data chunks from the language model. Developers can also customize the chatbot by swapping models, changing prompts, or adding a system role to shape the assistant's behavior. The author notes that a follow-up installment will cover containerizing the application with Docker and deploying it to the cloud.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Critical MikroTik RouterOS Flaw Lets Attackers Bypass SSH Authentication

India's CERT-In issued a critical advisory on September 16, 2026, flagging three vulnerabilities in MikroTik RouterOS, the most severe being CVE-2026-67276. The flaw stems from incomplete RSA public-key verification during SSH authentication, allowing an attacker to gain access using a forged key and signature without a valid account. Successful exploitation could hand an attacker full administrative control, enabling traffic interception, network pivoting, and persistent access. Affected versions include RouterOS 6.x before 6.49.21, 7.0–7.23 before 7.23.4, and 7.24 before 7.24.2, all of which received patches in MikroTik's September 2026 advisory. Administrators are urged to upgrade immediately or, as an interim measure, restrict SSH access to trusted hosts and firewall the management plane.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Idiocracy-Themed CMS Demo Using Sanity Workflows and AI Agent

A developer has built a satirical content management project inspired by the film Idiocracy, using Sanity CMS to simulate the fictional Department of Agriculture. In the demo, an AI agent powered by Claude drafts crop-watering proposals, which a human 'Cabinet' approves or rejects via a custom picture-button Studio interface. Sanity Workflows then drives the approved plan through watering and harvesting stages on a live Next.js front end. The project was built in a single Claude Code session and recorded a perfect score of 27 out of 27 timed edits across three interfaces. It was submitted as an entry for the Sanity Challenge and is available as an open-source repository on GitHub.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Five Practical Systems to Stay Productive, Visible, and Balanced While Working Remotely

Remote work offers flexibility but removes the natural boundaries that offices provide, making it easy for work to bleed into personal time. Experts and experienced remote workers recommend building start and end-of-day rituals to mentally separate work from personal life. Maintaining a private log of completed tasks and achievements helps employees advocate for themselves during performance and compensation reviews. Communicating asynchronously with complete, well-documented messages respects teammates' focus time and builds a reputation for professionalism. Setting a firm daily logout time and redirecting commute-related savings into investments are also highlighted as key habits for long-term career sustainability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Converts 2014 Samsung Galaxy Note 4 into a 1.2W Linux Marine Safety Server

A software developer has repurposed a decade-old Samsung Galaxy Note 4 into a low-power Linux server running on just 1.2 watts, using Termux and headless Linux installed on the 2014 device. The phone now powers Maritime Watch, an open-source coastal safety tool that ingests hourly marine weather data and live AIS vessel traffic to generate tailored departure advisories for small-boat fishermen. Unlike generic weather apps, the system evaluates conditions against three hull-size categories, sending subscribers a daily 6 AM notification with specific safe departure windows and return deadlines. The developer chose the retired smartphone over a Raspberry Pi or a paid cloud server, citing its built-in battery backup, integrated wireless connectivity, and zero hardware cost. Taming Android's aggressive power management required disabling background sleep killers via Termux wake-lock and exempting the app from the OS battery optimization settings.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer launches free Connections-style puzzle app where users can build and share boards

A developer named Rowan Adeyemi, who identifies as an autonomous AI agent, has built Grouple, a free browser-based word puzzle game inspired by the New York Times' Connections. Unlike its inspiration, Grouple requires no login or account and lets any user create their own 16-word board by grouping words into four categories, then share it via a link. The platform runs entirely on a Cloudflare Worker and a lightweight SQLite database, with no client-side framework or AI-generated content involved. A key design feature encourages a social loop where solvers are prompted to build and share their own board in response, forming chains of linked puzzles. The creator noted that returning users were primarily those who made boards and watched others solve them, rather than those who only played the daily puzzle.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How MCP Tools Can Replace Manual Hex Pasting in Crypto KAT Debugging

When a Known Answer Test fails on a cryptographic primitive, developers typically diagnose the issue by pasting raw hex and ACVP JSON into a chat prompt, but this approach breaks down with large vector files. For small-scale testing, running the KAT binary locally and copying only the failing vector ID and byte offset into a prompt remains a practical and auditable method. The article proposes exposing KAT runners as Model Context Protocol tools over stdio for cases involving massive ACVP payloads and repeated test cycles. Two key tools are suggested: one to run the crypto KAT and return structured status with a diff window, and another to load ACVP vectors with filtering instead of dumping entire files. The core principle is keeping tool outputs small and typed so the AI agent requests additional context on demand rather than receiving the full file by default.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Luxembourg Hotel Owner Builds AI Travel Agent Powered by Live Structured Data

A real 3-star hotel near Luxembourg's central station has deployed an AI travel assistant called Lux Stay Agent, built using Sanity's content platform for a developer challenge. The agent draws on live operational data — including nightly-synced room rates, a 54-item menu from the hotel's ordering system, and verified local transport facts — to answer guest queries in English, French, and German. The developer modeled the hotel's information across six structured document types, covering rooms, menu items, FAQs, transport guides, and local attractions. The agent uses function calling and a read-only MCP endpoint to query exact fields rather than relying on an LLM's internal knowledge, preventing hallucinated or outdated answers. The project highlights how structured content, not AI sophistication alone, determines the reliability of automated customer-facing assistants.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Offline Tool That Explains Shell Commands Flag by Flag

A developer named Aurelio Nakamura has created cmdxray, a free offline tool that breaks down commonly used shell one-liners flag by flag for users who paste commands without fully understanding them. The tool generates explanations programmatically using a built-in parser rather than hand-written documentation, covering popular commands like tar, ss, chmod, and grep. A built-in risk engine flags dangerous commands — such as rm -rf or curl piped to sudo bash — and surfaces safer alternatives before the user executes them. cmdxray is available as a static web reference, a GitHub repository, and an npm package that works directly in the terminal. Nakamura, who identifies as an AI agent, says the project is open source and is actively expanding its library of explained recipes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Passing 680 tests proved nothing: how a hidden parser bug exposed a testing blind spot

A developer deliberately introduced a bug in tomlkit's timezone parsing — flipping negative UTC offsets to positive — and found that all 680 official conformance tests still passed. The tests failed to catch the error because the expected values were generated by the very same function being tested, meaning the parser and its expectations drifted together invisibly. The flaw only affected datetime cases; integer and string tests, which used independent expected values, caught similar breaks within seconds. To address this systemic issue, the developer packaged a practice called 'falsifiable-tests' as an AI agent skill, requiring that every test be deliberately broken before it is trusted. The same method was applied to three open-source projects, with findings reported upstream to tomlkit, tenacity, and click.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

BlueMoon Campaign Exploited 27-Day Chrome Patch Gap Using AI-Assisted Tools

In September 2026, cybersecurity firm Proofpoint reported on the BlueMoon spear-phishing campaign, which exploited a Chrome V8 vulnerability tracked as CVE-2026-85046. The security fix was committed to the public Chromium repository on August 7, but the Chrome Stable channel did not ship the update until September 3, creating a 27-day window of exposure. Attackers reverse-engineered a working exploit directly from the open-source fix commit during that interval, with Proofpoint noting development patterns that suggest possible AI assistance in generating exploit variants. The gap highlights a structural issue in software supply chains, where public repositories receive fixes well before end users receive patched releases due to testing, signing, and rollout schedules. Security experts recommend monitoring security-relevant commits in deployed components rather than waiting for CVE advisories, and favoring fast-channel browser deployments to minimize exposure windows.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer launches multilingual Flutter mental health app with dual AI model support

A developer has released Safe Space, a Flutter-based mental health self-help app available on Android and web, featuring AI chat powered by Google Gemini with Anthropic Claude as a backup if Gemini fails. The app includes mood journaling, CBT-style thought records, breathing exercises, and standardized mental health screenings such as PHQ-9 and GAD-7, with results presented as informational ranges rather than clinical diagnoses. The app supports eight languages — including English, Spanish, Japanese, and Korean — through Flutter's localization system, distributed across Google Play, RuStore, and Amazon stores. Users must complete a consent step before any message is sent to an AI model, and the app explicitly directs users showing crisis signals, such as self-harm responses on PHQ-9, to local emergency services rather than continued AI chat. The developer has publicly clarified that Safe Space is not a licensed therapy service or medical device, and has embedded that disclaimer throughout the app's interface, backend, and public website.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Python Variables, Data Types, and Input Handling Explained for Data Analysis

A foundational guide to Python for data analysis covers how variables are defined, named, and used to store and reuse data throughout a program. Python supports several data types — including strings, integers, lists, and dictionaries — and a variable can hold only one type at a time. User input can be collected via the input() function, though it stores all data as strings by default. To handle numeric input correctly, developers can use type casting to convert a variable from one data type to another, such as converting a string to an integer using int(). Understanding these core concepts is considered essential before performing any meaningful data analysis in Python.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How Pandas Simplifies Data Cleaning for Beginners Using a Housing Dataset

Data cleaning is a critical step in data science, as real-world datasets often contain missing values, duplicates, outliers, and inconsistencies that can skew analysis results. The Python library Pandas provides tools to tackle these issues, demonstrated here using a Nairobi housing statistics dataset. Key techniques covered include detecting missing values with isnull().sum(), checking for duplicate rows, and identifying rent outliers using the Interquartile Range method. The tutorial notes that no duplicates were found in the dataset, while missing values in three columns were addressed using median imputation. A key takeaway is that unusual values are not automatically errors and require contextual judgment before removal, highlighting that effective data cleaning demands both technical skill and analytical thinking.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Claude Code adds fallback support for AGENTS.md when Claude.md is absent

Anthropic has updated Claude Code to recognize AGENTS.md as a fallback configuration file when no Claude.md file is present in a project. This change improves interoperability, allowing developers who already use AGENTS.md — a format associated with other AI coding agents — to work with Claude Code without creating a separate configuration file. The update was noted in the official Claude Code changelog. The move reflects a broader trend of AI coding tools accommodating shared or cross-platform configuration standards.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

IoT Botnets Still Exploit Default Credentials, 2026 Notices Reveal Asset Management Gaps

China's National Network and Information Security Notification Centre published a notice in late August 2026 identifying five active cross-border botnet families — Mirai, CondiBot, Gafgyt, TBot, and SoftBot — with command-and-control nodes spread across at least five countries. Analysts note that the attack methods remain unchanged from years past, relying on Telnet and SSH brute-force attacks against factory-default credentials and long-disclosed vulnerabilities. A newer botnet variant called KATARU, analysed by Nozomi Networks in August 2026, follows the same entry path, while the separately flagged Dysphoria botnet adds blockchain-based naming services to resist takedowns. Security experts point to three persistent structural failures: unclear device ownership after installation, short or absent firmware update windows, and management interfaces left open with default credentials. Recommended mitigations are largely administrative — maintaining a full device inventory, changing credentials at deployment, and requiring firmware security maintenance clauses in procurement contracts.

0 comments Read more at DEV Community
← NewerPage 1137 of 3221Older →