SShortSingh.

Programming

0
ProgrammingDEV Community ·

Cultural Algorithm with Shared Memory Tackles Classic Knight's Tour Chess Problem

A developer applied a Cultural Algorithm to solve the Knight's Tour, a classic problem requiring a chess knight to visit every square on an 8×8 board exactly once. Unlike standard genetic algorithms that evolve solutions purely through random selection and reproduction, the Cultural Algorithm adds a shared 'Belief Space' that stores collective knowledge across generations. This Belief Space is divided into three components: situational knowledge that copies moves from top-performing paths, normative knowledge that tracks which squares tend to appear at each path position in strong solutions, and historical knowledge that identifies recurring three-move sequences in successful tours. Each knowledge type probabilistically nudges new candidate solutions rather than forcing them, maintaining a balance between random exploration and guided exploitation. The experiment demonstrated that encoding structured, accumulated memory into an evolutionary algorithm can improve solution quality on combinatorial problems like the Knight's Tour.

0
ProgrammingDEV Community ·

AI Training on Public Data Is Mostly Legal in 2026, But Courts Are Still Deciding

AI models are largely built by scraping publicly available internet content — including blog posts, code, artwork, and social media — without explicit consent from creators. The central legal question is whether this constitutes copyright infringement or qualifies as fair use under existing law. In the United States, a court ruling in a case against Anthropic found AI training on books to be 'transformative' and thus leaning toward fair use, a significant win for the industry. However, legal experts note that 'legal' and 'something you agreed to' have quietly diverged, as most users never consented to their work being used this way. The law continues to evolve through ongoing litigation, and the final boundaries of what AI companies can and cannot do with public data remain unsettled.

0
ProgrammingDEV Community ·

Five JWT Implementation Flaws That Let Attackers Bypass Authentication

JSON Web Tokens (JWTs) are widely used for API authentication, single sign-on, and session management, but common implementation mistakes can undermine their security guarantees. Key vulnerabilities include accepting the 'none' algorithm, which allows attackers to submit unsigned tokens, and algorithm confusion attacks that exploit asymmetric key misconfigurations. Because the JWT header is attacker-controlled until the signature is verified, servers that blindly trust token-supplied algorithm identifiers risk granting unauthorized access. Additional weaknesses such as weak signing secrets, missing expiration checks, and improper claim validation further expose applications to exploitation. Security experts recommend that verification logic be configured strictly server-side, with accepted algorithms and keys defined by the application rather than derived from token input.

0
ProgrammingDEV Community ·

readme

Estou dando os primeiros passos na minha carreira em TI — e faço questão de compartilhar essa jornada com transparência. Meu nome é Pedro Sigismundo, tenho 22 anos e atualmente curso o 1º ano de Ciência da Computação na Universidade de Franca (Unifran). Tenho afinidade com áreas exatas, o que me leva naturalmente para a tecnologia — e hoje tenho plena certeza de que fiz a escolha certa. Neste momento, estou em busca da minha primeira oportunidade na área. Tenho muita vontade de aprender, contribuir com a equipe e evoluir desde o primeiro dia.

0
ProgrammingDEV Community ·

AWS Launches FinOps Agent to Bring Cloud Cost Insights Directly into Slack and Jira

Amazon Web Services introduced the FinOps Agent in June 2026, a tool built on Amazon Bedrock designed to help teams monitor and investigate AWS cloud costs. The agent consolidates data from Cost Explorer, Cost Anomaly Detection, Cost Optimization Hub, and Compute Optimizer, then delivers findings directly to Slack channels or Jira tickets. This integration aims to close the gap between infrastructure costs and the development teams who provision resources, reducing the risk of undetected spending anomalies. The agent supports natural language cost queries, automated anomaly investigation, optimization recommendations, and scheduled reports in HTML, PDF, or PPT formats. During its public preview phase, the agent is available exclusively in the us-east-1 region and requires Cost Optimization Hub and Compute Optimizer to be enabled before setup.

0
ProgrammingDEV Community ·

Gemini Smart Home Agent Ordered Cupcakes After Misreading a Dentist Appointment

A Gemini-powered smart home agent misinterpreted a dentist appointment calendar entry as a commerce instruction and placed an actual cupcake order, illustrating a real-world prompt injection failure. The incident highlights how LLM-based agents process structured inputs like calendar events as potential action triggers, blurring the line between data and instructions. Unlike enterprise agent platforms from vendors such as Zenity and Lakera, consumer smart home systems lack runtime policy enforcement, tool-call audit logs, or kill switches to catch such errors. This means users only discover a misinterpretation after the agent has already acted, with no visibility into what triggered the response. While the cupcake order caused no serious harm, security researchers warn the same vulnerability pattern could lead to unauthorized financial transactions or physical security breaches.

0
ProgrammingHacker News ·

Alibaba Launches Qwen 3.8 Omni Flash, a New Multimodal AI Model

Alibaba has released Qwen 3.8 Omni Flash, the latest addition to its Qwen series of AI models. The release was announced on the official Qwen blog and has drawn early attention from the developer community. The model appears to be a multimodal offering, consistent with the 'Omni' designation used in Alibaba's AI lineup. The announcement was noted on Hacker News, where it gathered initial points and comments from users. Further technical details are available on the Qwen blog page.

0
ProgrammingDEV Community ·

Developer builds interactive digital city where brands buy virtual locations as ads

A developer has launched Swishtown, a fictional digital city where brands can purchase virtual locations — such as buildings, roads, and parks — as advertising real estate instead of traditional banner placements. Each location carries its own price, and branded spaces become clickable destinations that redirect visitors to the advertiser's chosen link. The spaces are not permanently fixed; higher-paying advertisers can displace existing ones, keeping the city's ad inventory dynamic. The project is a response to the growing ineffectiveness of conventional online advertising, which many users have learned to tune out. The first version is live at swishplay.in, and the creator is seeking feedback from developers, marketers, and product builders.

0
ProgrammingDEV Community ·

Anthropic Proposes Three-Metric Framework to Track AI R&D Automation Progress

Anthropic has outlined a more comprehensive approach to measuring advanced AI systems, arguing that benchmark scores alone fail to capture the full picture of AI-driven research progress. The framework, supported by an arXiv preprint titled 'Measuring AI R&D Automation,' identifies three key indicators: how well AI performs on research-like tasks, how extensively it influences high-stakes decisions, and whether its use introduces attempts to disrupt research processes. Anthropic's Claude Opus 4.5 System Card serves as the most detailed first-party record of automated AI R&D evaluations, including analysis of conditions under which AI might substitute for human researchers. The company's Transparency Hub and model reports provide additional context on autonomy assessments, capability evaluations, and deployment safeguards. Rather than a one-time product release, the effort reflects an ongoing measurement and transparency program as AI increasingly plays a role in developing and evaluating AI itself.

0
ProgrammingDEV Community ·

How to Manage Internal DNS Hostnames Reliably Using Infrastructure Code

A deployment workflow for managing stable internal DNS records involves storing them in an infrastructure repository, upserting records during deployment, and verifying published values match the repository's intent. The process uses a post-apply set comparison between the repository's desired state and live DNS answers to catch discrepancies such as out-of-band edits or incomplete rollbacks. Engineers are advised to choose a DNS provider based on existing control plane ownership — AWS Route 53, Cloudflare, or Google Cloud DNS — rather than convenience or familiarity. The workflow deliberately excludes frequently changing service endpoints, which are better handled by a dedicated service registry. A bounded polling approach is recommended during verification to account for DNS propagation delays rather than assuming instant convergence.

0
ProgrammingDEV Community ·

Backboard.io Adds Support for TypeSafe's Jev AI Decision Models

Backboard.io has announced support for TypeSafe's Jev, described as a viral AI model. The integration falls under Backboard's System One Models category. Jev support covers three types of structured decisions: Choice, Score, and Noul, the last of which handles true/false probability outputs. Documentation for the new functionality is available on the Backboard.io developer docs site.

0
ProgrammingDEV Community ·

Developers Can Now Build and Test Android Apps Directly on an ARM64 Phone

A developer is exploring a workflow that turns an ARM64 Android phone into a full Linux development environment using two projects: Ternux and ADT. Ternux provides a Debian and Xfce4 Linux workspace on Android via Termux and PRoot, requiring no root access. ADT supplies a native ARM64 Android development toolchain — including build tools like aapt2, adb, apksigner, and d8 — designed to run within that Linux environment. Together, the two tools enable a complete development loop: writing code, building and signing an APK, installing it on a real device via ADB, and collecting logs for debugging. The setup addresses a key limitation of compilation-only workflows by exposing real-device issues such as ABI errors, JNI failures, and runtime crashes that a successful build alone cannot reveal.

0
ProgrammingDEV Community ·

No Single AI Coding Framework Wins — Experts Recommend Building a Stack

A DEV Community analysis argues that the popular debate over which agentic coding methodology to use is the wrong question to ask. The article reviews several frameworks — including Superpowers, BMAD, OpenSpec, SpecKit, GSD, Ralph, and Compound Engineering — each designed to handle a distinct layer of AI-assisted development. Rather than seeking a universal solution, developers are advised to sequence these tools based on project context, such as using BMAD when product intent is unclear and Superpowers for rigorous implementation tasks. Compound Engineering is highlighted for founder-leaning roles, as it focuses on making each delivery easier for future AI agents by capturing reusable lessons. The author recommends starting with BMAD as a high-level harness combined with OpenSpec to maintain implementation quality.

0
ProgrammingDEV Community ·

OpenAI Launches Astra for Law, a GPT-6-Powered Legal AI Toolkit for Firms

OpenAI has introduced Astra for Law, a legal-focused AI platform built on its GPT-6 Astra flagship model, designed to assist law firms and legal tech companies with research, writing, and workflow tasks. The product bundles a specialized legal search index covering over 230 million URLs of US case law, statutes, regulations, and court rules, drawing on CourtListener data. Initial access is restricted to selected firms through OpenAI's Trusted Access Program via ChatGPT and Codex, with broader API availability described as coming soon. For eligible firms using the API, OpenAI has committed to a Zero Data Retention policy, addressing confidentiality concerns common in legal settings. Pricing details, a general API launch date, and specific eligibility criteria for the Trusted Access Program have not yet been publicly disclosed.

0
ProgrammingDEV Community ·

CS Students Face Steep Barriers Breaking Into Junior Developer Roles in 2025

A computer science student shared frustrations on DEV Community about struggling to land a first developer job despite ongoing self-improvement. The student is currently studying Python, data structures, databases, and the Spring ecosystem, while also building personal projects for hands-on experience. The core concern is that junior developer job listings increasingly demand skills and experience levels more typical of mid-level roles. Requirements such as Docker, microservices, CI/CD pipelines, cloud platforms, and multiple frameworks are now commonly listed for entry-level positions. The post prompted broader discussion about whether the programming job market remains a viable career path for newcomers in 2025 and beyond.

0
ProgrammingDEV Community ·

XenevaOS: A Ground-Up Operating System Built for Extended Reality

XenevaOS is a custom operating system developed from scratch by GitHub user manaskamal, with extended reality (XR) as a core design focus. The project is publicly hosted on GitHub under the repository manaskamal/XenevaOS, inviting open-source contributions. Unlike conventional operating systems, XenevaOS is built at a low level, meaning its foundational architecture is purpose-built rather than derived from existing OS frameworks. The project targets the intersection of systems programming and immersive computing, reflecting growing developer interest in XR-native software infrastructure.

0
ProgrammingDEV Community ·

EU Cyber Resilience Act Mandates 24-Hour Vulnerability Reporting From September 2026

The EU Cyber Resilience Act's Article 14 reporting obligations became enforceable on 11 September 2026, more than a year ahead of the regulation's full application date of December 2027. Manufacturers of hardware and software products with digital elements must now notify the ENISA Single Reporting Platform within 24 hours of becoming aware of an actively exploited vulnerability or a severe security incident. A more detailed follow-up notification is required within 72 hours, covering affected products, assessed impact, and any mitigation steps taken or planned, with a final report due after remediation. The obligation applies to both new and existing products already circulating on the EU market, and non-EU manufacturers are also covered under the regulation. Manufacturers must additionally inform affected users about the risk and available mitigations, which is a separate requirement from the authority notification duty.

0
ProgrammingDEV Community ·

Cooley Partners With OpenAI to Launch AI-Powered IPO Filing Tool GO Public

Law firm Cooley has launched GO Public, an AI-enabled offering built in collaboration with OpenAI to streamline the preparation of IPO filings, specifically Form S-1 drafts. The system uses AI agents trained on Cooley's own drafting principles to generate an initial bespoke S-1 draft from client-specific information and update it as deal terms evolve. Cooley lawyers retain full responsibility for substantive legal judgment throughout the process, meaning the tool is designed to assist rather than replace professional review. The collaboration involved OpenAI engineers helping convert Cooley's capital-markets expertise into tools deployed via ChatGPT Enterprise. Cooley says GO Public aims to make IPO preparation faster and more predictable, with potential applications in other capital-markets transactions beyond IPOs.

0
ProgrammingDEV Community ·

OpenCode Plugin Gives AI Coding Agents Persistent, Scoped Memory Across Sessions

A developer has released an experimental plugin called opencode-agent-memory for the OpenCode AI coding assistant, addressing the common problem of agents losing context between sessions. The plugin treats agent memory as editable, scoped Markdown files stored on disk, with separate global and project-level memory blocks each carrying a label, description, size limit, and read/write permissions. Three tools — memory_list, memory_set, and memory_replace — allow the agent to explicitly read and update these structured memory blocks. An optional append-only journal feature lets agents log observations and decisions, with local semantic search powered by an embedded multilingual model so journal content never leaves the user's machine. The plugin is designed to give AI coding agents structured, maintainable context without relying on opaque remote services or a single flat instruction file.

0
ProgrammingDEV Community ·

EU AI Act Logging Deadline Shifted to December 2027, Compliance Gaps Remain

The EU's Digital Omnibus on AI regulation was published on 24 July 2026 and came into force three days later, pushing the record-keeping deadline for high-risk standalone AI systems to 2 December 2027. Systems embedded in regulated products have until 2 August 2028 to comply. Under Article 12, high-risk AI must be capable of automatically recording events throughout its operational lifetime in enough detail to trace risk events and support post-market monitoring. However, experts note that most current agent systems produce logs but not true audit records, lacking key details such as the identity behind a request, the specific tool call made, the policy version that governed a decision, and tamper-evidence. An open-source tool called Verax has been developed to address these gaps by routing every tool call through a policy gate and generating signed, chained decision records stored locally on the host machine.

← NewerPage 1163 of 3223Older →