SShortSingh.

Programming

0
ProgrammingDEV Community ·

Ticket tracker switches board views with zero Firestore reads

An open-source ticket tracker called ticket-tracker loads each board's active tickets once and keeps them live, so switching saved views costs no database reads. Firestore cannot OR across fields and would need a composite index for every filter combination, which custom user-defined views would make impractical. Instead, filtering, sorting, grouping and swimlanes run as pure functions in the browser over the loaded tickets. Filters are nested and/or trees over built-in and custom fields, and tokens like 'me' or 'thisWeek' resolve against the viewer when the view is applied. The approach is designed for boards of roughly 5,000 active tickets, or about 5 MB.

0
ProgrammingDEV Community ·

Why Cloud Permission Approvals, Not Installs, Often Delay ROSA Projects

A ROSA install cannot begin until the customer accepts marketplace terms, which takes only minutes. The larger delay comes from the STS-based installer role, whose elevated trust policy must be reviewed by the customer's cloud security team. On the author's engagements that review took three to five days, with one customer needing nearly two weeks. The fix was a runbook change making identity and permissions approval a required pre-check before any install starts. The article also stresses separating authentication (who is making the request) from authorization (what that identity may do), a distinction that applies equally across AWS, Azure and GCP.

0
ProgrammingDEV Community ·

Developer guide compares AI text-to-speech platforms on latency, cost and voice quality

A DEV Community guide published for 2026 compares the leading text-to-speech platforms for developers building voice-first products. It evaluates criteria such as naturalness, latency, voice diversity, cost and developer experience, noting the trade-offs each involves. The article includes a sample cost calculation showing ElevenLabs priced higher per second than Google Cloud, though Google's latency is described as higher. The piece strongly promotes ElevenLabs as the best overall choice, citing its voice cloning, emotion layers and low-latency model. It also contains a promotional link to the company's trial page.

0
ProgrammingDEV Community ·

Candidate Search Retrieval: A 7-Point Release Checklist for Fresh, Citable Results

The article argues that candidate search should be treated first as a retrieval product rather than an LLM feature, with the answer a recruiter needs defined before any system design begins. It proposes a retrieval contract covering candidate identity, matching evidence, tenant scope, recency, and source identifiers. A vector index serves as durable memory for owned content, while live web search covers recent public material, and the two should not silently substitute for each other. The author recommends a two-lane pipeline that filters by tenant and access metadata before ranking, merges results by candidate ID, and labels which evidence came from durable versus live sources. An illustrative TypeScript example shows bounded requests with rate-limit retries, and the article notes the right tooling choice depends on ownership and operating constraints.

0
ProgrammingDEV Community ·

Why LLM analytics demos fail in production: metric definitions and permissions

A practitioner building governed conversational analytics on Looker argues that demos of LLMs querying clean warehouse schemas break down at company scale. Different departments define the same term, such as revenue or active customer, in conflicting ways, so a model querying raw tables guesses inconsistently and erodes trust. The author proposes a semantic layer where each metric is defined once in version-controlled code owned by accountable teams, with the model interpreting intent while the layer defines meaning. The article also warns that broad service-account access lets chat interfaces bypass permissions, and recommends that agents inherit the requesting user's access rights, enforced at the data layer rather than through prompts.

0
ProgrammingHacker News ·

Chrome launches origin trial for HTML-in-Canvas API

Google has announced an origin trial for a new HTML-in-Canvas API in Chrome, giving developers a way to test the feature before it is widely adopted. The announcement was published on the Chrome for Developers blog. The post describes the trial as an opportunity for web developers to experiment with rendering HTML content within canvas elements. The item drew modest attention on Hacker News, where it received 5 points and one comment. Further details on the API's behavior and timeline are available in the original blog post.

0
ProgrammingDEV Community ·

Developer turns GitHub commit streak into a virtual garden that reflects daily coding

A developer found that GitHub's contribution graph did not account for lost streaks on busy days, prompting a different approach. They built Commit Garden, a small app in which a garden's state depends on whether code was pushed that day. The article outlines what the project does, how it works, and a design choice the author favors. The author also shares some limitations of the project and invites readers to comment on whether its withering mechanic feels motivating or stressful.

0
ProgrammingDEV Community ·

Spring Boot Validation: Guarding REST APIs Against Invalid Input

This DEV Community tutorial explains how to add input validation to Spring Boot REST APIs using the spring-boot-starter-validation dependency. It recommends placing @Valid before any @RequestBody parameter in controllers, especially for POST and PUT requests where clients send data. The article outlines standard JSR-380 constraints such as @NotBlank, @Size, @Email, and @Min, and shows how they are applied to a Task entity. When validation fails, Spring intercepts the request, throws MethodArgumentNotValidException, and returns an HTTP 400 Bad Request, with custom messages configurable inline or via messages.properties. The author suggests using DTOs in production applications to keep business logic and database layers protected.

0
ProgrammingDEV Community ·

Video2Law: a laptop app that infers physics equations from a short video

Two undergraduate students built Video2Law in one day at the Open Scientific Intelligence Hackathon 2026. The app analyses a video of a moving object, such as a swinging pendulum, to derive its equation of motion and identify a conserved energy quantity without being given the formulas. It also measures energy loss from friction and can predict future motion, including hypothetical scenarios like lunar gravity. A feature called Neptune Mode infers a hidden, off-screen pendulum from the visible one's anomalous motion, placing it within half a centimetre in tests. The system relies on classical mathematical methods such as sparse regression, SVD and RK4 rather than neural networks, and is written in Rust, with the authors noting they have so far tested only on simulated rather than real footage.

0
ProgrammingHacker News ·

Researchers Demonstrate Complete Bypass of eMudhra's Single-Factor OTP Login

A security researcher has publicly disclosed a method that fully bypasses the one-factor OTP login system used by eMudhra, according to a post shared on Mastodon. The details were posted to Hacker News, where the disclosure drew 56 points and 10 comments from readers. The available source material is a link and discussion metadata, so the exact technical mechanism and scope of the flaw are not described here. eMudhra, a digital signature and identity services provider, has not been confirmed in the source as having responded to the disclosure.

0
ProgrammingHacker News ·

LISP Comes of Age: A 1980 Retrospective on the Language

A Hacker News post links to an article titled 'LISP Comes of Age,' originally from 1980, hosted on microship.com. The item received 4 points and 3 comments on the discussion forum. The provided text contains only the link metadata and no article body, so the piece's specific arguments cannot be confirmed. The original 1980 publication date is taken from the headline itself. Readers would need to open the linked article to see its content.

0
ProgrammingDEV Community ·

How to turn a GitHub project into resume bullets recruiters find credible

A common resume mistake is listing a project's technologies without explaining the problem it solved or what the author personally did. The author recommends answering three questions: what problem the project addresses, which parts the candidate built, and what evidence a reviewer can verify. Using a hypothetical shift-swap app built for a café, the piece shows how a vague stack-focused bullet can become a specific, checkable one. It also argues that projects without real users can still be presented credibly by describing the engineering, tests, and documented decisions instead of invented metrics. The article closes with a checklist for reviewing project bullets and mentions a free resume-checking tool built by its author.

0
ProgrammingDEV Community ·

How to test a data breach claim before believing or sharing it

Breach claims often spread on social media and forums within hours, frequently before anyone has verified them. Many are old leaks repackaged, scraped public data, or stitched-together lists, so a claim should be treated as an allegation until the organisation, CERT-In, a regulator or a credible researcher confirms it. Experts advise checking the source's track record and whether the record counts and fields are internally consistent. They also warn against downloading leaked samples, which carry legal risk and malware dangers. Individuals can check their own exposure through Have I Been Pwned and should change reused passwords and enable two-factor authentication. Under CERT-In's 2022 directions, specified cyber incidents must be reported within six hours of being noticed.

0
ProgrammingDEV Community ·

How Small Businesses Can Move to the Cloud Step by Step Without a Risky Overhaul

A guide argues that moving a small business to the cloud should be broken into small, sequential projects rather than one large migration. It recommends starting with cloud email and file storage for remote access and automatic backups, then migrating business tools such as accounting, CRM, booking, and inventory one at a time while running old and new systems in parallel. The article stresses proper account setup, including individual logins, two-factor authentication, and role-based access, since misconfiguration causes most small-business cloud incidents. It also advises enabling automated backups and updates, testing a restore once, and reviewing cloud spending monthly to avoid rising costs. The piece is published alongside promotion of the author's cloud services firm, Cloudlift Tech.

0
ProgrammingDEV Community ·

Multi-Platform Publishing Pipeline Gains VS Project and Bluesky Support

A developer extended an automated content pipeline so a new project, VS, could publish its daily markdown to Medium, Substack, and Bluesky in a single CI run. The pipeline had skipped the VS batch because its metadata flags were still set to false, which left no posts on any platform and triggered a Slack alert. An initial hard-coded workaround in the publishing script worked once but undermined the pipeline's declarative design. The fix restructured content into dated folders with per-platform files and made platform detection data-driven through metadata flags. A new Bluesky flag defaults to false so payloads can be validated before posting.

0
ProgrammingDEV Community ·

Custom Software or Off-the-Shelf Tools? A Decision Framework for Small Businesses

Small businesses often reach a point where spreadsheets, CRMs, and manual data transfers become a burden, raising the question of whether to buy standard tools or build custom software. The article argues that routine functions such as accounting, email, payroll, and basic CRM are best served by inexpensive, proven off-the-shelf products. Custom software is worth considering when a company's unique processes give it a competitive edge, when workarounds consume significant staff time, or when existing systems need better connections. It suggests a practical test: if a workaround costs more than a few hours a week, get a quote for a proper fix, but if it takes only minutes, stick with the standard tool. The author notes that many businesses end up with a hybrid approach, keeping established systems while building small custom pieces where the real pain lies.

0
ProgrammingDEV Community ·

Developer Builds Postgres-Backed Rate Limiter to Protect Public Netlify Function

Kaleb, a web developer in Pompano Beach, Florida, added a public chat widget to his business website, which runs on a stateless Netlify serverless function. Shortly after deployment, he noticed automated script traffic repeatedly targeting the endpoint. Because in-memory caching fails across scaling container instances, he chose to use his existing PostgreSQL database as a shared store for request counts rather than adding Redis or an edge key-value service. The approach tracks requests per client IP within a rolling window, rejecting clients that exceed ten requests per minute with a 429 status code. The article includes the table schema and JavaScript code, and Kaleb argues the small added latency is acceptable for a low-traffic site.

0
ProgrammingDEV Community ·

Chatbots Answer Questions, While AI Agents Complete Defined Jobs

The article distinguishes a chatbot, which replies to questions with text, from an AI agent, which carries out a specific task step by step and returns a finished, usable result. It describes specialized agents as built for one kind of work and performing it consistently, in contrast to general-purpose chatbots. The author introduces Enterprise AI, a single console offering 42 such agents across categories like marketing, customer support, finance, and procurement. The pitch centers on replacing scattered subscriptions with one login, one usage view, and predictable pricing, with failed runs not charged. The project is described as being built openly from Sahiwal, Pakistan.

0
ProgrammingDEV Community ·

AI Assistant Misspelled Customer Names Despite Correct Data, Dash Developers Report

The developers of Dash, an AI assistant inside a bookkeeping app for small shops, found that the assistant often retrieved correct data but then misspelled names when writing its replies. Because users write in Arabic, Kurdish and English, where names often differ by only a letter, errors like "Karim" becoming "Kiram" produced plausible-looking but wrong names. The mistakes persisted across turns because the model reread and trusted its own earlier wrong replies. Simply asking the model to regenerate answers did not reliably fix the problem and added cost and delay. The team therefore built a narrow post-processing check that swaps a single near-miss word for the correct name from the conversation's data and logs the change.

0
ProgrammingDEV Community ·

GreenBuddy AI: Open-Source Gardening Assistant Runs Locally on Qwen via Ollama

A developer has released GreenBuddy AI, an open-source gardening assistant built with Python, Flask, and JavaScript for a Hacktoberfest challenge. The tool suggests location-aware gardening tasks, such as checking soil moisture and inspecting leaves, and lets users assign due dates and track completion. It runs locally using the Qwen 2.5 3B model through Ollama, so it does not depend on a paid hosted AI API. Checklists are saved in the browser so they persist after a page refresh. The project is not yet publicly deployed, and the developer has invited feedback and contributions on GitHub.

← NewerPage 122 of 2938Older →