SShortSingh.

Programming

0
ProgrammingDEV Community ·

AI Speeds Up Code Writing but Creates a New Bottleneck at Code Review

Software engineers increasingly report spending more time reviewing AI-generated code than they previously spent writing code manually, signaling a shift in where productivity costs accumulate. While AI tools have dramatically reduced code generation time — from hours to seconds — the verification and review stage has remained just as slow, or grown slower due to higher volumes. One engineer building AI agent systems identified four recurring verification failures: unsafe tool permissions, flawed plan sequencing, silently broken validation gates, and undertrained reviewers. The proposed fix is not simply adding more reviewers, but shifting routine checks to automated, deterministic gates so human attention is reserved for genuinely ambiguous decisions. The core argument is that teams must redesign their workflows around the new bottleneck, since ignoring it risks mistaking green dashboards and faster output for actual reliability.

0
ProgrammingDEV Community ·

AWS Engineers Warn of Hidden Costs and Complexity When Scaling MCP Agents to Production

Deploying Model Context Protocol (MCP) servers beyond local demos exposes serious operational challenges, including unpredictable autoscaling, per-session IAM role management, and runaway token costs that often go unnoticed until monthly invoices arrive. AWS offers two managed alternatives to self-managed containers: Amazon Bedrock AgentCore Runtime for serverless agent hosting and AgentCore Gateway for converting existing APIs into governed MCP-compatible tools without writing new servers. Unlike traditional services, misbehaving agents rarely throw errors — they silently retry or loop through tool calls, quietly accumulating costs with no immediate alert. Engineers recommend tagging spend at the session or tenant level to accurately attribute costs per agent run, rather than relying on broad service-level metrics. Strict rate limiting at the gateway layer and distributed tracing of agent decision paths — not just request paths — are highlighted as essential safeguards before any production rollout.

0
ProgrammingDEV Community ·

JavaScript Objects Explained: Storing Multiple Values With Key-Value Pairs

In JavaScript, an object is a non-primitive data type capable of storing multiple values as a collection of properties. Unlike primitive types, objects can hold various data types including strings, numbers, booleans, arrays, and functions under a single unit. Objects are defined using curly braces containing key-value pairs, where each key is a string followed by a colon and its corresponding value. A real-world analogy like a football helps illustrate the concept, where attributes such as weight and color represent properties. This makes objects one of the most fundamental and versatile building blocks in JavaScript programming.

0
ProgrammingDEV Community ·

Nous Research's Hermes AI Cut Its Own Codebase by 34% Using 1,393 Subagents

On September 2, 2026, Nous Research tasked its Hermes Agent with refactoring the entire Hermes codebase, a process that ran for 19 hours and deployed 1,393 subagents with up to 218 running simultaneously. The operation reduced non-test Python code from roughly 1.06 million lines to 698,363 lines, a 34.4% decrease, and the resulting pull request was merged on September 4, 2026. Functions exceeding 300 lines dropped from 192 to just 2, while the single file gateway/run.py shrank from 34,847 lines to 5,512. The estimated cost of the main run was approximately $19,300, compared to a human-team estimate of $150,000 to $1.8 million for equivalent manual work. The team openly noted limitations in their own write-up, including that no new tests were written and the existing test suite remained essentially unchanged throughout the refactor.

0
ProgrammingDEV Community ·

Developer Builds Free Browser-Based Voxel Editor With No Account Required

A developer has released VoxelDraft, a browser-based voxel editor that requires no installation or account to use. The tool supports block painting, layered editing, keyframe animation, GIF recording, and export to multiple formats including OBJ, GLB, VOX, Minecraft Schematic, and Roblox RBXL. To maintain performance, the editor uses Three.js InstancedMesh to reduce draw calls rather than creating individual meshes per cube. Projects are saved locally in the browser, with JSON export available as a backup since browser storage can be cleared. The developer notes key architectural lessons: keeping the data model simple, isolating export logic, and offloading CPU-heavy tasks like GIF encoding to Web Workers.

0
ProgrammingDEV Community ·

AWS Guide: Replace Hardcoded RDS Credentials in Lambda with IAM Token Auth

A technical guide published on DEV Community outlines how AWS developers can eliminate static database passwords from Lambda functions by using IAM authentication with RDS Proxy. Instead of storing plaintext credentials in environment variables, Lambda generates a temporary IAM token via boto3 that is valid for 15 minutes and used as the database password. The setup requires enabling IAM authentication on both the RDS instance and RDS Proxy, creating a MySQL user tied to AWS's AWSAuthenticationPlugin, and attaching an rds-db:connect IAM policy to the Lambda execution role. This approach removes the risk of credential leaks through misconfigured policies, accidental log exposure, or compromised deployment artifacts. The method leverages the same IAM mechanism already standard across AWS services, eliminating the need for manual secret rotation.

0
ProgrammingDEV Community ·

agent-usage 0.10.0 Adds Per-Agent, Model, and Billing Charts to Local Dashboard

Version 0.10.0 of agent-usage, an open-source local dashboard for AI coding tools, is now available on npm. The update introduces usage charts broken down by individual agent, billing domain, and model, giving developers a clearer view of where their quota and spending go. Supported tools include Codex, Claude Code, OpenCode, and Grok, among others. The package can be installed globally via npm and runs on macOS with Node 24 or higher under an MIT license. A Cursor connector is included but remains experimental, while a planned menubar feature has not yet shipped.

0
ProgrammingDEV Community ·

AI-generated PRs are quietly draining engineering review capacity

A Salesforce study co-authored by Shan Appajodu and Ravi Boyapati (January 2026) found that AI-assisted development raised internal code volume by roughly 30 percent, with pull requests frequently exceeding 20 files and 1,000 lines, pushing review latency higher each quarter. A separate 33-week panel study of GitHub developers found that AI coding agents significantly increase exploratory work, meaning more branches and prototypes are opened — and discarded — than under traditional human-authored workflows. Every pull request that enters a review queue consumes reviewer attention regardless of whether it ultimately merges, a cost that grows as agents inflate submission counts with short-lived, exploratory changes. Salesforce observed senior engineers context-switching across multiple large AI-assisted changesets daily, and linked declining per-PR review time to shallower scrutiny and erosion of its second-pair-of-eyes quality guarantee. Teams need to distinguish between two distinct problems: genuine reviewer overload, which requires more capacity or better triage, and rational disengagement from submissions that are unlikely to ever merge, which requires stricter upstream gating.

0
ProgrammingHacker News ·

Developer Publishes Guide to Running Claude Code from Source

A developer has published a resource at claude-code-from-source.com detailing how to run Anthropic's Claude Code directly from its source code. The project gained attention on Hacker News, accumulating 12 points and at least one comment. Claude Code is Anthropic's AI-powered coding assistant tool. The guide appears aimed at developers who want greater transparency or control over the tool by building it themselves rather than using the packaged release.

0
ProgrammingDEV Community ·

Why Windows Scheduled Tasks Silently Fail and How to Fix Common Defaults

Windows Task Scheduler tasks often fail silently due to a handful of default settings that block execution before any visible action occurs. Key culprits include battery-power conditions that prevent tasks from starting, and the 'Run whether user is logged on or not' option that runs tasks in a hidden session with no visible window. Error codes such as 0x41303 (task not yet run) and 0x80070002 (file not found) can be diagnosed via the Status and Last Run Result columns or the History tab in Task Scheduler. Developers can also inspect logs through Event Viewer under the TaskScheduler Operational channel for deeper troubleshooting. Using PowerShell's New-ScheduledTaskSettingsSet with explicit parameters — such as allowing battery starts and setting no execution time limit — gives more reliable control than the basic task creation wizard.

0
ProgrammingHacker News ·

Telstra Network Outage Traced to Internal Clock Reverting to Year 2006

Australian telecommunications giant Telstra experienced a significant network outage caused by an unusual timekeeping fault. An internal system within the network incorrectly reverted its date to the year 2006, triggering widespread disruptions. The incident was analyzed and documented by Netnod, a Swedish internet infrastructure organization, which detailed the technical chain of events. The time misconfiguration caused routing and operational failures that cascaded across the network. The case highlights how date and time errors in critical infrastructure can produce serious, large-scale outages.

0
ProgrammingHacker News ·

Goose language claims to outperform C++ and safe Rust while ensuring memory safety

Goose is a new programming language that reportedly runs 1.16 times faster than C++ and 1.12 times faster than safe Rust. Despite its performance advantages, the language is designed to be memory safe, addressing a common trade-off in systems programming. The project is hosted on GitHub under the repository of developer Wouter van Oortmerssen, known for creating other languages. Goose aims to challenge the assumption that memory safety must come at a performance cost. The announcement gained attention on Hacker News, though community discussion remains limited so far.

0
ProgrammingDEV Community ·

AI Speeds Up Shipping, But Experts Warn Trust Has Become the Real Differentiator

A PS5 Linux kernel maintainer recently resigned, citing frustration with developers using AI language models to contribute code they did not fully understand — a incident that sparked widespread debate on Hacker News. The episode has reignited concerns about whether the rapid adoption of AI tools is eroding professional standards in software and product development. Industry observers argue that while AI has made generating content and code nearly costless, it has not reduced the cost of establishing trust with buyers or users. Businesses that document what AI produced, what was verified, and how errors were caught are seen as better positioned to stand out in crowded markets. The emerging view is that human judgment — knowing what not to ship — is now the scarce, premium skill in an era of near-unlimited AI-generated output.

0
ProgrammingDEV Community ·

How One Software Firm Ditched Hourly Billing and Rebuilt Client Trust With 4 Rules

AnyPlace founder and software architect describes how recurring budget overruns and client dissatisfaction led him to ban hourly retainer billing at his firm. The company instead adopted four engineering rules across 50-plus builds, including weekly sprint demos with live working code delivered directly into client-owned repositories. A mandatory discovery phase produces a fixed-scope architectural document, making any mid-project changes explicit business decisions rather than silent budget creep. All code, cloud infrastructure, and CI/CD pipelines are provisioned inside the client's own accounts, eliminating vendor lock-in from the outset. The firm argues that giving clients full ownership and continuous visibility paradoxically increases retention, because dependable delivery removes the motivation to leave.

0
ProgrammingDEV Community ·

Hosted vs Local PDF API: How to Choose for 500-Form Compliance Batches

A solo SaaS developer has outlined a practical framework for choosing between hosted and local PDF APIs when processing compliance forms at scale. The core decision hinges on factors like data residency, offline requirements, and tail-latency budgets rather than API aesthetics. For 500-form batches, the author recommends measuring p50, p95, and p99 latency at varying concurrency levels using real-world form data, not just clean demos. Maintaining a full audit chain — including input digests, template revisions, timestamps, and storage keys — is emphasized as essential for compliance, since a flattened PDF alone cannot reconstruct how data became a document. Idempotency keys tied to job identifiers and template revisions are also advised to prevent duplicate evidence files during retries.

0
ProgrammingDEV Community ·

Google Tag Manager Can Bypass CSP and WAF Protections, Researcher Warns

Security researcher Ryan Chaplin, writing for Raxis, found that misconfigured Content Security Policies using unsafe directives for Google Tag Manager can be exploited to bypass both CSP protections and Cloudflare WAF defenses. The vulnerability stems from developers allowing googletagmanager.com as a trusted script source, which attackers can abuse by hosting malicious JavaScript on Google's own infrastructure. Chaplin demonstrated the risk using a classic reflected XSS vulnerability, showing how an attacker could execute unauthorized scripts even on sites with active security policies. Google acknowledged the findings through its bug bounty program, awarding Chaplin an honorable mention, though the issue is not exclusive to Google Tag Manager and affects any platform permitting user-hosted content with unsafe directives. Organizations are advised to adopt strict nonce-based or hash-based CSP configurations and review third-party script permissions to reduce exposure.

0
ProgrammingDEV Community ·

Why Programming Is Really About Learning to Investigate, Not Memorize

A developer essay published on DEV Community argues that programming proficiency is less about memorizing syntax or frameworks and more about developing strong investigative skills. The author describes a common debugging loop: reading error messages carefully, checking logs, isolating variables, and narrowing a vague problem down to a single faulty condition or value. Effective internet searches also improve with experience, as developers learn to identify the specific, relevant part of a problem rather than searching broad, unhelpful queries. Documentation, the author notes, becomes more valuable over time — not out of habit, but as a practical tool when something breaks, even if answers are sometimes buried in obscure GitHub issues. The key insight is that experienced developers are not people who know everything, but people who have learned how to systematically find what they don't know.

0
ProgrammingDEV Community ·

Developer eliminates alignment marks in tiled poster printing using grid-line cuts

A developer building tiled printing for ArtGrid, a static web tool, devised a method to split large images across multiple A4 sheets without needing alignment marks or registration dots. Instead of cutting pages at fixed paper dimensions, the tool forces every page boundary to fall exactly on an existing grid line, so seams are invisible continuations of lines the user will draw anyway. The key calculation divides the printable area by the grid cell size to determine how many whole cells fit per page, rather than dividing by raw page dimensions. This approach works only because ArtGrid enforces square cells of uniform size, a constraint originally chosen for drawing accuracy that incidentally made seamless tiling possible. The developer verified correctness by asserting that the summed widths of all tiles in a row match the original enlarged drawing rectangle to within 0.01 mm.

0
ProgrammingDEV Community ·

Most AI Code Review Tool Lists Ignore GitLab, Azure DevOps, and Bitbucket Users

Popular roundups of AI code review tools almost exclusively cover GitHub-based workflows, leaving out teams on self-managed GitLab, Azure DevOps Server, and Bitbucket Data Center. Microsoft's Copilot code review is available for Azure DevOps Services (cloud) but is not documented for the on-premises Azure DevOps Server edition. Atlassian's Rovo Dev offers native AI-assisted code review only for Bitbucket Cloud plans, with no equivalent feature documented for Server or Data Center deployments. For self-managed GitLab instances, third-party tool CodeRabbit provides the most detailed setup documentation, though it requires GitLab version 16.x or above to function reliably. Teams on older or self-hosted forge editions must rely on third-party integrations rather than built-in AI review features, a distinction most generic tool lists fail to highlight.

0
ProgrammingDEV Community ·

NodeRAG Retrieves Whole Notes, Not Chunks, Using Local Embeddings and Hybrid Search

A developer has detailed the retrieval half of a personal knowledge system called NodeRAG, which stores notes as plain markdown files and indexes them using a locally run embedding model called nomic-embed-text via Ollama. Unlike standard retrieval-augmented generation systems that split documents into smaller chunks before embedding, NodeRAG treats each self-contained note as a single unit for both indexing and retrieval. The system uses a SQLite database with the vec0 extension for vector search ranked by cosine similarity, paired with a separate full-text index to handle exact keyword queries that dense retrieval often misses. Fusing these two retrieval arms — dense vector search and keyword-based full-text search — yielded measurable recall improvements on a public benchmark dataset. The entire system occupies just 94MB on disk, requires no external API calls, and is designed to be fully inspectable by the user without relying on opaque infrastructure.

← NewerPage 1161 of 3223Older →