SShortSingh.

Programming

0
ProgrammingDEV Community ·

AUTOSAR Zero-Heap Design Achieves Full FFI Between QM and ASIL-D Domains

Engineers validated Freedom From Interference (FFI) between Quality Managed (QM) and ASIL-D software domains on a Classic AUTOSAR R22-11 platform using a zero-heap, static-allocation architecture. Spatial and temporal isolation were enforced through MPU regions and OS-level execution budgets, while all cryptographic operations were routed through a dedicated Evita Full HSM acting as a safety guardian. A Hardware-in-the-Loop validation campaign on dSPACE SCALEXIO conducted over 1,000 fault injection tests — including pointer corruption, stack overflow, and MPU violation attempts — with 100% containment and no ASIL-D data corruption. The measured safe-state transition time came in at 8.7 microseconds, comfortably within the 10-microsecond FTTI requirement. The architecture was confirmed to meet full FFI requirements per ISO 26262-6 Annex D, covering memory, timing, and data exchange isolation, and is considered ready for an ASIL-D product audit.

0
ProgrammingDEV Community ·

How to Auto-Retry GitHub Actions CI Jobs Killed by AWS Spot Instance Reclaims

A developer running self-hosted ARM64 spot EC2 runners on GitHub Actions faced a recurring problem where AWS reclaiming spot instances mid-run produced failures indistinguishable from real test failures. Both CI shards died within 13 seconds of each other after reaching 75% completion, triggering a cascading frontend deploy abort. To address this, the developer built a workflow_run listener that fetches failed job logs and checks for known runner-shutdown markers before automatically retrying only the failed jobs. The solution includes safeguards to avoid re-running stale attempts, stop retrying after a third failure, and skip action when logs are unreadable, preventing false recoveries. The two-file setup requires no extra dependencies beyond the GitHub CLI already present on hosted runners.

0
ProgrammingDEV Community ·

Zone01 Kisumu Conference Asks: What Is a Developer's Role in the Age of AI?

Zone01 Kisumu held an AI and Software Engineering mini-conference at Rotary last week, featuring a panel discussion and a keynote by Amariah Abishai, Founder of Atlarix. The event examined pressing questions about AI's impact on software development, including how engineers should relate to code they did not write themselves. A central theme that emerged was the shift in a developer's role — from writing code line by line to making higher-level decisions about system design, problem selection, and quality validation. Abishai captured the mood with the observation that the job has quietly changed without any formal announcement. Attendees left with the message that AI can accelerate implementation, but engineering judgment, foundational knowledge, and accountability still rest with the developer.

0
ProgrammingDEV Community ·

How to Port a CPU Conjugate Gradient Solver to CUDA: A Step-by-Step Guide

A developer has published a detailed walkthrough on migrating HPCCG, a Conjugate Gradient mini-application from the Mantevo project, from CPU to GPU using CUDA. Rather than a full rewrite, the approach is incremental: profiling the CPU code first, then moving the most expensive operations to the GPU one at a time. On a one-million-row test problem, sparse matrix-vector multiplication (SpMV) consumed over 83% of total CPU runtime, making it the clear first target for GPU offloading. The tutorial also ports the same code to Kokkos, enabling a direct comparison between hand-written CUDA and a performance-portable programming model. All intermediate code and commits are publicly available on GitHub, allowing readers to reproduce each porting stage independently.

0
ProgrammingDEV Community ·

BurpSqueezer compresses Burp Suite traffic dumps for LLM-ready AI analysis

A developer has released BurpSqueezer, an open-source tool that compresses large Burp Suite HTTP traffic captures into compact Markdown reports optimized for AI processing. The tool reduced a 26.7 MB traffic dump to just 35 KB — a 745-fold compression — making it feasible to feed real penetration testing data into large language models that enforce file size limits. BurpSqueezer filters out irrelevant traffic such as CDN requests and maps relationships between API endpoints to preserve meaningful structure. The tool is designed for large, complex HTTP datasets and does not perform any active testing or send requests itself — it only processes already-captured, authorized traffic. The project is available on GitHub and its creator is seeking feedback from web security and API penetration testers.

0
ProgrammingDEV Community ·

Security scanner finds critical flaws in 9 of 13 popular AI app starter repos

A developer built a static analysis tool called vibecheck and ran it against 13 popular open-source AI app starter repositories on September 16, 2026, to identify common production-breaking security patterns. Only 4 of the 13 repos scanned clean, while the remaining 9 produced 101 findings, including 50 classified as critical. The most widespread issue, unauthenticated API routes, appeared in 6 repositories, followed by client-exposed secrets and unsafe HTML rendering, each found in 5 repos. The scanner is deterministic, requires no external dependencies, and ran on unmodified default branches of each repository. The author notes that none of the flagged issues are obscure vulnerabilities — they are routine oversights, such as deferred authentication and hardcoded credentials, that AI code generators tend to leave unaddressed.

0
ProgrammingDEV Community ·

AI Slowdown Rejected by US and China as Industry Keeps Shipping New Tools

A brief consensus among Dario Amodei, Sam Altman, and Elon Musk calling for slower frontier AI development collapsed within days after both the US and Chinese governments rejected the idea. President Trump dismissed AI safety concerns as a hoax on Truth Social, while China's Foreign Ministry called the proposal a Cold War-era tactic disguised as safety advocacy. Despite the debate, major AI products continued to launch, including Apple's rebuilt Siri — capable of on-screen reading and cross-app actions — and new models from Salesforce, Meta, and a Chinese open-weight research lab. On the safety front, Microsoft published a draft AI code of conduct requiring its models to remain shutdownable and prohibiting self-editing of reasoning logs, while a report revealed real-world misuse including AI-assisted weapons guidance development in Yemen and a multinational disinformation-for-hire operation. Wall Street signaled where it sees the near-term risk, driving cybersecurity stocks up double digits on concerns that AI-enabled hacking poses a more immediate threat than existential scenarios.

0
ProgrammingHacker News ·

Xiaomi Launches Mimo 2.6 Live Training Dashboard

Xiaomi has released version 2.6 of its Mimo platform, which appears to feature a live training dashboard. The update was noted on Hacker News, garnering modest community attention with 13 points and one comment. The dashboard is accessible via Xiaomi's dedicated Mimo web portal. Further technical details about the update's features or target users were not provided in the available information.

0
ProgrammingDEV Community ·

What an llms.txt File Is, Why It Matters, and What to Put in It

An llms.txt file is a plain-text, prose summary of a website written for language models rather than traditional search crawlers, based on a proposal published by Jeremy Howard in September 2024. No major AI company has confirmed it reads the file, but the author argues it is still worth creating because the process forces businesses to articulate clearly what they do, who they serve, and what they refuse to claim. The file sits alongside robots.txt, sitemap.xml, and schema markup, but is unique in using natural language to convey context that structured data formats cannot capture. Effective entries should include a one-sentence summary that stands alone, a clear boundary of services, a description of the intended buyer, and correctly spelled name variants. The core argument is that the clarity required to write the file well tends to improve the broader website, making the exercise valuable regardless of whether AI systems ever act on it.

0
ProgrammingDEV Community ·

How to Write Scoped Cursor Rules for Next.js App Router Projects

A tutorial published on DEV Community outlines how to create three focused Cursor rules for Next.js App Router projects instead of relying on a single catch-all instruction file. The rules target distinct concerns: app and component conventions, server-side mutations and data access, and security boundaries covering authentication, authorization, and secret handling. Each rule uses glob patterns to activate only in relevant file paths, keeping guidance contextual and reducing noise during development. The security rule is intentionally broader since authorization or secret-handling mistakes can surface across routes, libraries, and components alike. The approach prioritizes placing the right reminder next to the code where an error would be most costly, rather than making an AI agent fully autonomous.

0
ProgrammingDEV Community ·

How to Diagnose and Fix Ollama Ignoring Your GPU on Linux and Windows

Ollama, a local AI model runner, may default to CPU inference even when a GPU is available, significantly slowing performance. Running 'ollama ps' while a model is loaded reveals the PROCESSOR column, which shows whether inference is running on the GPU, CPU, or split between both. The most common causes of GPU detection failure include outdated drivers, missing user group memberships on AMD Linux setups, a pinned OLLAMA_LLM_LIBRARY environment variable, or containers launched without GPU access flags. Partial GPU offloading typically occurs when model weights and context cache exceed available VRAM, and can be addressed by using smaller quantizations or reducing context window size. Checking the Ollama server log for the 'inference compute' line helps pinpoint exactly which hardware was detected at startup.

0
ProgrammingDEV Community ·

Developer Builds Apple Virtualization Framework Support Into Flutter Desktop App WSL Manager

WSL Manager, a Flutter desktop app originally launched in 2021 to simplify Windows Subsystem for Linux management, has released a version 2 that also runs on Apple silicon Macs. The new macOS build manages native Linux and macOS virtual machines using Apple's Virtualization framework, installable via Homebrew. Because Flutter cannot directly hold a VZVirtualMachine object, the developer created a separate Swift command-line helper called vmctl, which runs as a detached daemon and communicates with the Dart frontend by printing JSON to stdout. A shared backend interface in Dart allows both the WSL and Apple VM helpers to be driven by the same codebase, with a capabilities record used instead of platform checks. The macOS implementation required solving several low-level challenges, including IP detection via DHCP lease files, SSH session handling, cloud-init seed generation without third-party tools, and in-process qcow2-to-raw disk conversion.

0
ProgrammingDEV Community ·

Laptop GPU Outperforms 12-Core CPU by 4.3x Running Google Gemma 4 Model

A developer benchmarked Google's Gemma 4 E2B language model on a single laptop equipped with a 13th-gen Intel Core i7-1360P and an Nvidia GTX 1650 Ti (4 GB) GPU. The test used the llama.cpp server with identical settings on both arms, differing only by whether GPU layers were offloaded via the -ngl flag. Across eight test cells varying prompt and output lengths, the GPU achieved a median decode speed of 4.27 times faster than the CPU, with individual ratios ranging from 4.04x to 4.34x. The GPU also delivered prefill times roughly 3.63x faster, though time-to-first-token remained linearly dependent on prompt length for both devices. The results highlight that even an older, entry-level laptop GPU can offer substantial inference gains over a modern multi-core CPU for small language models.

0
ProgrammingDEV Community ·

Developer uses MM/DD/YYYY dates to teach PostgreSQL extensions, indexes, and custom types

A developer at DEV Community has created an intentionally flawed PostgreSQL project that stores dates as plain MM/DD/YYYY text strings to demonstrate four advanced database features. The project covers building C extensions, expression indexes, custom operators, and specialized GiST index types. Using the awkward US-style date format as a teaching constraint, the tutorial walks through why a simple expression index often suffices and when a custom base type becomes necessary. The GiST index built in the project can efficiently answer queries filtered by month, day, or year independently, which suits seasonal or birthday-style lookups. The author explicitly warns against using this approach in production, framing the exercise purely as a hands-on learning tool.

0
ProgrammingDEV Community ·

Radio lets AI agents from different providers chat in one shared channel

A tool called Radio, built by Plasma, allows AI agents from different providers to communicate directly without human go-betweens. Currently, users working with multiple agents like Claude Code, Codex, Cursor, and Grok must manually copy and paste outputs between them, acting as a middleman. Radio solves this by giving agents a shared URL-based channel where they can exchange messages in real time, across machines and devices. Setup requires just four steps: creating a channel at radio.plasma.ai, copying the link, pasting it into one or more agents, and sending an initial message. The tool requires no custom integrations or provider lock-in, working with any agent capable of fetching a URL.

0
ProgrammingDEV Community ·

How Python Scripts Became a Low-Risk Toolkit for a Legacy Delphi ERP

A solo engineer maintaining a large Delphi-based ERP system for a footwear factory found a practical middle ground by adding Python tooling alongside the existing codebase rather than attempting a full rewrite. The Python scripts, stored in a separate tools directory and never deployed to users, handle tasks like schema dumping, SQL query analysis, and keyboard shortcut documentation that would be difficult or impractical to build in Delphi. A versioned JSON schema file proved especially valuable, giving the engineer a historical record of database changes and making AI coding assistants reliably accurate on a 342-table database. The approach treats the legacy source code as a queryable dataset, allowing new analytical and validation tooling to be built quickly without touching the core application. The engineer argues this strategy of augmenting rather than replacing a stable legacy system is a pragmatic solution for solo maintainers who cannot afford the risk of a parallel rewrite.

0
ProgrammingHacker News ·

Scientists Revisit the Fundamental Question of Why the Universe Is Expanding

Cosmologists continue to investigate one of physics' most profound questions: why the universe is expanding. The expansion, first observed by Edwin Hubble in the late 1920s, has been accelerating, a phenomenon attributed to a mysterious force known as dark energy. Various theoretical frameworks, including Einstein's cosmological constant, have been proposed to explain this behavior. Researchers are examining how quantum mechanics and general relativity may together offer deeper insight into the universe's expanding nature. The question remains one of the central unsolved problems in modern cosmology.

0
ProgrammingDEV Community ·

Zero-Heap RTOS Achieves 8.7µs CAN-FD Latency for ASIL-D EV Safety Systems

Engineer Talal Ali has developed and tested a zero-heap, fixed-memory RTOS architecture designed to ensure freedom from interference (FFI) between QM and ASIL-D safety bands in automotive systems compliant with ISO 26262 and ISO 21434. The architecture separates hardware into two domains — a Dual-Core Lockstep ASIL-D security domain and an isolated QM domain — with AUTOSAR E2E CRC protection and hardware security module (HSM) encryption on every CAN frame. Validation was conducted on an electric vehicle platform (HV-CTRL-01 v2.4) using Hardware-in-the-Loop (HIL) simulation on a simulated wet track at 42.6 km/h, where the system maintained stable torque vectoring with a deviation rate of -0.42 rad/s. Key measured results include a CAN-FD latency of 8.7 microseconds, zero memory fragmentation, and a stable vehicle trajectory throughout testing. The developer recommends that EV platform engineers abandon dynamic memory allocation in safety-critical systems in favor of fixed allocation with per-frame CRC and strict QM/ASIL-D domain separation.

0
ProgrammingDEV Community ·

Why CSS Overflow Clips Dropdowns and How Developers Can Fix It

A common front-end problem occurs when custom dropdown menus inside modals get visually cut off, with options appearing partially or not at all. The root cause is CSS overflow properties like auto and scroll, which clip painted content at the element's padding box boundary — not just hide it behind a scrollbar. Raising z-index offers no fix because the issue is clipping during paint, not stacking order. Native HTML select elements avoid this by rendering their dropdown lists on a separate browser layer, outside the normal CSS box model. Developers using headless UI components must account for this by repositioning dropdown panels outside overflow-clipped ancestors, often via portals or fixed positioning.

← NewerPage 1193 of 3224Older →