SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Harvard Study Finds AI Coding Agents Boost Code Output but Not Ticket Completion

A Harvard study of 718 companies and over 725,000 developers from 2021 to 2026 found that AI coding agents increased code written and pull requests opened. Despite this, the number of completed Jira tickets and epics did not rise. The researchers attributed the gap to longer pull request review times, more rewrites, and senior engineers spending time on AI-related oversight. The author describes a workflow redesign that adds ticket pushback and adversarial code review before commits to address this bottleneck. The approach was tested across several production tickets and a vendor switch, with results reported in the author's flight logs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Edtech Platform Outlines Private Storage and Deletion Strategy for Large AI-Generated Reports

A technical guide recommends storing AI-generated edtech reports in a private object-storage bucket, using multipart uploads for unusually large image files. It argues that a completed upload should not imply indefinite retention, so each report needs a database record tracking its state, retention deadline, and upload progress. Access is granted only after authorization checks, using short-lived signed URLs rather than permanent links. The approach treats multipart uploads as leased work that a reconciler can resume or abort, and it separates deletion of completed objects from cleanup of incomplete uploads.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

paste-sloth: One Chord Pastes Clipboard Text Restructured by a Local 1-Bit Gemma

paste-sloth is a background tool that restructures messy clipboard text, such as CSV into a markdown table or JSON into pretty-printed form, when the user presses Ctrl+Space+V. The cleaned output is generated by a small Gemma model and pasted directly into the focused window, replacing a manual copy-to-chat workflow. The author designed the key chord to avoid firing during normal typing, and forwards the Space key to other apps if it is not part of the chord. A safeguard checks the model's output and rejects it if it contains numbers absent from the input, since invented figures are considered the worst failure, while dropping numbers is allowed. The project offers a one-line installer that can set up a local Ollama-based 1-bit Gemma model, and it was submitted to the Hacktoberfest Open-Source AI Challenge.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

eMudhra to exit global SSL/TLS certificate business after key compromise disclosure

Bengaluru-based eMudhra announced it is leaving the global SSL/TLS certificate business entirely, following the disclosure that eight of its intermediate private keys were trivially guessable. The company says it revoked the affected CAs within 14 hours of discovery and that no end-entity certificates were issued from them, with no infrastructure compromise or data breach. It cited SSL/TLS making up roughly 1% of its revenue, rising compliance costs, and free offerings from larger competitors. Its G1 RSA roots will keep serving customers during a transition period, and a root-cause report to browser root programs remains outstanding.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer Essay Argues Docker Is Weird in Its Design and Conventions

A post titled "Docker Is Weird" was published on codeandcake.dev and shared on Hacker News, where it gained 10 points and one comment. The available material contains only the link metadata and not the full text of the essay, so its specific arguments cannot be confirmed here. The headline indicates the author views aspects of Docker as unusual or unconventional. Readers interested in the author's reasoning would need to consult the original post directly.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Developer tests OpenShell's Z3 policy prover with 29 checks; it misses the cloud metadata address

NVIDIA's OpenShell, a runtime for autonomous AI agent fleets, reached the Hacker News front page and includes a formal verification tool, the openshell-prover CLI, that uses an SMT solver to check whether a candidate policy stays within a boundary policy. A developer built the Rust tool from source, linking it against Z3 via the Python z3-solver wheel because the prebuilt feature failed. Across 29 candidate and boundary pairs, the prover caught nearly every attempted escape, producing concrete counterexamples and refusing to guess when facts were unavailable. However, it failed to flag the cloud instance metadata address 169.254.169.254, the most commonly warned-about target in agent-safety discussions, and similar metadata endpoints were classified as within boundary.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Economist argues AI compute is becoming a commodity that needs a dedicated market

An Economist finance piece contends that computing power for artificial intelligence is emerging as a strategic resource comparable to oil. The article suggests that this compute requires its own market structure to be priced and traded efficiently. The argument is framed within broader debates about how AI infrastructure should be allocated and valued. The source material provided for this item is limited to the headline, link, and a small number of community engagement metrics, so the full reasoning of the article is not reflected here.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Security Review Flags Oracle, Governance and Bridge Risks in Ethena USDe

An independent DeFi security firm published an audit-style report on the yield-strategy layer of Ethena USDe, a USD-pegged stablecoin with roughly $4.63 billion in total value locked across Ethereum and several Layer 2 networks. The review identified high-severity concerns around its composite price oracle, which depends on a proprietary index that may be manipulated through thin L2 liquidity pools. It also flagged governance weaknesses, including a 3-of-3 multi-sig able to alter critical parameters, and a bridge design lacking a challenge period for L2-originated withdrawals. Additional medium-severity issues included unguarded harvest and flash-loan pathways and upgrades without enforced delays. The authors concluded the architecture is fundamentally sound but recommended prioritized remediation to protect capital and peg stability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Retention ledger design for large browser uploads using presigned multipart parts

The article argues that large training artifacts uploaded from a browser should use presigned multipart uploads, with the application database tracking a three-state record of uploading, retained, and deletion_due. Object bytes stay off the Node.js control plane, and every multipart session must be completed or aborted explicitly. Retention is treated as a property of the application record rather than something inferred from bucket state, since incomplete parts have no automatic cleanup rule. The author separates a short deadline for abandoned sessions from the longer retention deadline for completed artifacts, using bucket lifecycle rules only as a backstop with a one-day minimum. The piece suggests tus or UploadThing when interruption recovery matters most, and AWS S3 when versioning or Object Lock is required.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Quad9 to exit France and eMudhra to leave the SSL/TLS certificate market

Privacy-focused DNS resolver Quad9 has announced it will withdraw from France, ending a long-running legal dispute over DNS-level site blocking. Users and administrators relying on its 9.9.9.9 address should plan migrations and review any configs or scripts that reference it. Indian certificate authority eMudhra has also said it will exit the global SSL/TLS certificate business and has outlined a wind-down for existing certificates. Operators with eMudhra-issued certificates or hardcoded issuance automation should inventory them and arrange reissues with another provider before deadlines. Other items this week include GitHub's migration of most repositories to Azure and commentary on how AI-written text can erode reader trust.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Mid-sized tech firm seeks remote freelance DevOps engineer for AWS infrastructure

A mid-sized technology company with an engineering team of about 30 people is recruiting a freelance DevOps engineer to work fully remotely on its cloud infrastructure. The role requires strong AWS experience with services such as EC2, ECS, S3, RDS and Lambda, while familiarity with microservices is a plus. Responsibilities would include maintaining deployment pipelines, supporting the backend team in production, responding to outages, and strengthening monitoring and alerting. The offered budget is roughly $3,000 to $4,000 USD per month, depending on experience and time commitment, and interested candidates are invited to reach out directly.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Blog Post Explores Zig Traits, a Compile-Time Feature Idea for the Zig Language

A blog post published on axelmagn.com discusses traits in the Zig programming language. The article is linked from a Hacker News thread that has so far drawn 9 points and no comments. The available source material provides only the title, URL, and engagement metrics, so the specific arguments and details of the post cannot be confirmed from this information alone.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Local Wikipedia Project Offers Encyclopedia Entries Limited to a Half-Hour Walk

A new project called Local Wikipedia has been shared on Hacker News, presenting a Wikipedia-style encyclopedia focused only on places within a half-hour walk of the reader. The concept centers on hyperlocal information, surfacing content about nearby landmarks, places, and points of interest. The item was posted with a link to the project's website and drew a modest response, with six points and one comment at the time of posting. The source text provided is limited, so further details about the project's scope, data sources, or availability are not included here.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Arista VeloCloud Orchestrator Exposure: What ZoomEye Data Shows and Doesn't

A ZoomEye search on 22 October 2026 for the title fingerprint "VeloCloud" returned 520 matching internet-facing assets. That figure reflects hosts advertising a VeloCloud-related page title, a broad product-family signal rather than a count of vulnerable orchestrators or of systems on affected versions. A narrower query for "VeloCloud Orchestrator" with an HTTP service match returned only a handful of results. Arista has reported active exploitation of CVE-2026-114625 and named two source addresses seen in the attacks. Experts stress that organisations should inventory their own orchestrators and compare release versions against the patched builds instead of relying on external counts.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Private Image Storage: Signed Links, Retention Deadlines and Object-Store Costs

The article argues that images should live in a private bucket and be delivered through short-lived signed URLs issued only after an authorization check. It stresses that retention and deletion matter more to cost and compliance than metadata, especially for property-management apps handling leases and inspection photos. The author recommends a per-object ledger tracking scope, deadlines, legal holds, size and downloads, with monthly storage, request and egress estimates derived from it. Deletion should be handled by a frequent queue-based worker that verifies removal and keeps an audit manifest with a content hash. Signed URLs should never be exposed in pages, logs or analytics, and their expiry should be tuned to the sensitivity of the file.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Parsing Property Owner Names in pandas: Individuals, Joint Owners, Trusts and LLCs

Property owner fields in county assessor records often combine several people and entities in one cell, which complicates contact-finding work. Co-owner markers such as ETUX and ETAL, trustee designations, business suffixes, and estate wording all need to be recognized before a list is used for skip tracing. A tutorial shows how to build a pandas pipeline that classifies each owner as an individual or an entity, splits joint owners into separate rows, and parses LAST FIRST MIDDLE names while flagging ambiguous cases instead of guessing. The approach keeps the raw column unchanged and adds a parse_status column, with tests written as plain assert statements. Because naming conventions vary by county and over time, the author recommends sampling each export before relying on any keyword rule.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Part 5 of the Communications series covers capturing delivery events after dispatch

Part 4 ended with messages marked as Dispatched, meaning a provider accepted them but not that recipients received them. Real providers such as Twilio report later stages like sent, delivered, or undelivered, and email and push services report bounces, opens, and invalid tokens. This article records those delivery events in Communications, stores them, and displays them to buyers on a new Messages page. Communications now sends each buyer a single message on the first channel that can reach them, using only verified email addresses and phone numbers. Delivery events are represented by a provider-agnostic DeliveryReport structure that captures the event, channel, provider, and outcome.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Two Critical PHP Flaws Prompt Rethink of Self-Hosting Versus Managed Hosting

Two critical PHP vulnerabilities disclosed this week could allow attackers to execute code on servers without authentication. A blogger received a Hetzner notice stating that patching a self-managed server is the owner's responsibility. Checking their setup, they found their WordPress sites on managed hosting were already patched by the provider, while their Hetzner server had no PHP installed. The experience led them to keep their sites on managed hosting, citing the cost of same-day patching and the risk a compromised site poses to other services on the same machine. Their stated rule is to self-host only systems they can patch the same day.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Exporting Public Telegram Channel Posts to CSV Without a Telegram Login

A DEV Community tutorial explains how to collect a small sample of posts from public Telegram channels and export them to CSV for editorial research. It relies on the Telegram Channel Scraper, an Apify Actor that reads the public previews Telegram exposes at t.me/s, and requires an Apify account but no Telegram account, bot token or API ID. The guide advises setting a small spending limit, testing with low limits, and keeping each post's original link beside any derived notes. It also notes that the workflow excludes private groups, member lists, phone numbers and full comment threads, and that run summaries should be checked because reaching a page limit is not the same as reaching the end of a channel's history.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Exporting Google Play and App Store Reviews for Competitor Research

Average app ratings alone rarely explain why users leave, while written reviews can expose problems such as login failures, unclear subscription terms, or repeated feature requests. The guide recommends keeping each review's text alongside its rating, version, date, and source so findings can be traced back to evidence. It walks through collecting a modest sample of about 100 Android and iOS reviews using Apify Actors, exporting them as JSON, and checking run summaries for completeness. It notes that Apple's public feed exposes only a limited recent window, and that storefront selection does not confirm where reviewers are located. A short Python script then merges both platforms' differently named fields into one consistent CSV.

0 comments Read more at DEV Community
← NewerPage 12 of 2831Older →