SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer Fine-Tunes Open LLMs to Support Moroccan Arabic Darija and Arabizi

A developer has released two open-source language models, SILMA-9B-Darija and SILMA-2B-Darija, specifically fine-tuned to handle Moroccan Arabic (Darija) and Arabizi, the Latin-script form of Arabic that uses numbers for certain sounds. The models were trained on a dataset of over 46,000 cleaned Darija instruction and conversation pairs drawn from real Moroccan exchanges and cultural content. Benchmarks run on a 100-question test covering local history, proverbs, and code-switching showed both models outperforming existing Moroccan-dialect alternatives on accuracy and Darija fluency. Unlike standard Arabic models that default to Gulf Arabic or Modern Standard Arabic, the new models retain native Darija vocabulary and handle prompts in both Arabic script and Latin letters. Both models are publicly available on Hugging Face, with the 9B version requiring around 6 GB VRAM and the 2B version running on under 3 GB, making it suitable for consumer devices.

0
ProgrammingDEV Community ·

Why coding knowledge still matters in the age of AI-generated code

A software developer argues that while AI tools can generate code faster and often cleaner than humans, the critical skills of evaluating correctness, spotting hidden flaws, and understanding trade-offs remain entirely human responsibilities. The author contends that cheap code generation has not eliminated complexity but shifted it — making careful code review more costly and easier to skip, not less important. Developers who cannot read code risk silently accepting poor structural decisions, swallowed errors, or mismatched design patterns embedded in AI output. The piece highlights specific danger zones including debugging, security vulnerabilities, and architecture, where AI-generated solutions can appear locally correct while being globally flawed. The core argument is that coding literacy is no longer about typing speed but about maintaining the judgment needed to verify, challenge, and own what gets built.

0
ProgrammingDEV Community ·

12 critical questions to ask vendors before buying a text-to-SQL tool

A technical guide published on DEV Community outlines 12 evaluation questions buyers should ask text-to-SQL vendors before committing to a purchase. The article argues that product demos are misleading because they typically showcase clean, small schemas, while real-world databases are far more complex and error-prone. Key concerns raised include how vendors measure accuracy, what verification badges actually certify, and whether identical questions phrased differently return consistent results. The piece warns that wrong answers from such tools are especially dangerous because end users, particularly in finance, often cannot distinguish correct outputs from plausible-looking incorrect ones. Buyers are advised to test vendors live during meetings using questions with known answers rather than relying on polished demonstrations.

0
ProgrammingDEV Community ·

30-Day AI Self-Review Experiment Missed a Bug a Human Caught in 5 Minutes

A developer ran a 30-day experiment in which an AI model reviewed every pull request it generated, supported by static analysis and linting tools. The setup performed reliably for 29 days, catching minor issues and enforcing coding standards. On day 30, a human engineer identified a race condition in under five minutes — a logic flaw tied to real-world user behavior that the AI had repeatedly overlooked. The bug stemmed from a mismatch between the system's assumptions and actual user actions, something the AI could not detect because it lacked domain context and understanding of intent. The author concluded that AI review works best as a complement to human review, handling repetitive checks while humans focus on logic, design decisions, and user impact.

0
ProgrammingDEV Community ·

Developer Builds Browser-Based Dataflow Engine Where the Graph Executes the Program

A developer has created an experimental browser-based tool called Computational World (CW), also known as Simwire, which treats a directed graph as both the visual interface and the actual execution model. Unlike traditional visual programming environments that hide computation inside high-level nodes, CW exposes the underlying structure so users can inspect and manipulate it directly. The system resolves execution order automatically using Kahn's topological sorting algorithm, ensuring nodes only run after their dependencies have produced outputs. CW is designed around primitive operations that can be composed into more complex behaviors, rather than relying on pre-built black-box components. A key goal is live propagation — changing a parameter on the canvas immediately updates all dependent nodes, eliminating the repeated write-run-inspect cycle of conventional programming.

0
ProgrammingDEV Community ·

Fine-Tuning, RAG or Prompting: Picking the Wrong AI Method Can Cost Thousands

Enterprises frequently default to fine-tuning AI models when simpler, cheaper alternatives would better solve their problem, according to a cost-focused analysis. The three main approaches — prompting, retrieval-augmented generation (RAG), and fine-tuning — each address a distinct category of issue rather than being interchangeable options. Prompting is best for shaping tone and format, costs little beyond token usage, and can be adjusted instantly in production. RAG is the appropriate choice when a model lacks access to specific or up-to-date information, typically costing £15,000–£60,000 to build. Fine-tuning, the most expensive option at £20,000–£80,000, is suited to teaching consistent behavioural patterns but is ineffective at injecting factual knowledge, which it cannot update, audit, or reliably cite.

0
ProgrammingDEV Community ·

How Kubernetes Schedules Pods: Filtering, Scoring, and Manual Placement Explained

Kubernetes scheduling is the process of binding a pod to a node by setting the spec.nodeName field, after which the kubelet on that node runs the pod. The kube-scheduler automates this in two steps: first filtering out nodes that lack sufficient resources or have incompatible taints, then scoring the remaining eligible nodes to pick the best fit. Developers can bypass this process entirely by manually specifying a node name, but doing so skips critical safety checks around resources, node existence, and taint compatibility. Once a pod is scheduled, it remains on that node for its lifetime, with the sole exception being a NoExecute taint, which can evict a running pod that lacks the required toleration. Manual scheduling is useful for demos and edge cases but is not recommended as a standard practice in production environments.

0
ProgrammingDEV Community ·

Security Analysis Flags Nine High-Risk Vulnerabilities in Grove Finance's $1.9B DeFi Protocol

A senior DeFi security researcher published a vulnerability surface analysis of Grove Finance, a multi-chain yield-aggregation protocol managing approximately $1.92 billion in total value locked across Ethereum and several Layer 2 networks. The assessment, dated September 15, 2026, identified nine distinct high-impact attack vectors and assigned the protocol an overall risk score of 7.4 out of 10. Among the most critical findings were a re-entrancy flaw in the vault deposit and withdrawal functions, an untimelocked proxy upgrade mechanism vulnerable to multisig compromise, and a governance system with only a six-hour proposal delay. Additional risks include oracle feed manipulation, flash-loan exploitation of the rebalancing loop, and weaknesses in the protocol's cross-chain bridge components. Researchers recommended immediate remediation of the highest-severity issues alongside a structured roadmap to address the remaining vulnerabilities.

0
ProgrammingDEV Community ·

LifeOps Part 3: Sport, Library, Cinema and Kanban Modules Added to Personal OS App

Developer project LifeOps has reached its third milestone, introducing four interactive daily-use modules to the personal operating system web application. The new modules cover physical fitness tracking with dynamic metrics, intellectual leisure through book reading progress and an audiovisual catalogue, and professional productivity via a four-column Kanban board linked to projects. A dual-view toggle — switching between an inspirational card grid and a condensed data table — was implemented across all modules, with the user's preference saved persistently in localStorage. The Kanban board stores a chronological activity log using PostgreSQL's JSONB format, while the sports module supports multiple disciplines including running, cycling, gym, and swimming. The live application is accessible at datalaria.com, with two further instalments planned covering report generation and zero-cost cloud deployment.

0
ProgrammingDEV Community ·

Developer Builds Independent Kernel-Level Tests to Verify AI Agent Code Claims

A developer, inspired by researcher Hemapriya Kanagala's question about AI benchmark reliability, built a small native backup client with eight distinct behaviors to independently verify whether an AI agent's code actually does what it claims. Rather than trusting the agent's own logs or test results, the experiment observes program behavior from outside — using packet captures, kernel-level activity, and file comparisons. The setup uses a C client, a Python receiver over loopback TCP, and SHA-256 digest checks to confirm that saved files genuinely match their source. The author notes that when an agent produces both code and its tests, shared misunderstandings between the two can make passing tests misleading. The experiment argues that execution traces, network activity, and resulting file state together provide independent evidence to judge a program's behavior against its actual requirements.

0
ProgrammingDEV Community ·

HTTPS Exposes Website Hostnames in Plain Text Due to TLS Design

Every HTTPS connection begins with a TLS ClientHello message that includes the destination hostname in plain, unencrypted text via an extension called Server Name Indication (SNI). A developer confirmed this by capturing raw TLS handshake data and extracting readable hostnames — such as 'login.mybank.example.com' — without decrypting a single byte. The exposure is not a flaw but an intentional protocol design: servers sharing one IP address need to know which site is being requested before they can present the correct certificate and establish encryption. This creates a chicken-and-egg problem where the hostname must be sent before any encrypted channel exists to protect it. A proposed standard called Encrypted Client Hello (ECH) aims to address this, but it has not yet seen widespread adoption.

0
ProgrammingDEV Community ·

Dev Builds URL Shortener to Learn Backend Basics: Databases, Redis, and HTTP

A developer learning backend fundamentals built a URL shortener as a starter project, finding it an effective way to explore core concepts in a manageable scope. The project involved generating unique short codes using nanoid, storing URL pairs in a database, and handling HTTP 302 redirects to route users from short links to original URLs. To prevent abuse, Redis was integrated as a rate limiter, using fast in-memory counters tied to each alias with automatic expiry windows. Collision handling was addressed through a retry loop that regenerates a new code if a duplicate alias is found in the database. The full source code has been shared publicly on GitHub as a reference for other developers tackling similar beginner backend projects.

0
ProgrammingDEV Community ·

How Power BI Uses Data Modelling, Relationships and Joins to Handle Complex Data

Power BI is Microsoft's business analytics and data visualization platform, capable of connecting data from over 100 sources including Excel, SQL databases, and cloud services. Unlike Microsoft Excel, which struggles with large and complex datasets, Power BI is designed to process, link, and present such data efficiently through interactive dashboards. A key part of working with Power BI involves data modelling — the process of structuring and connecting tables so data can be analyzed accurately and at scale. Two primary modelling approaches exist: the flat table, which consolidates all data into a single denormalized table, and the star schema, which links a central fact table to surrounding dimension tables. The star schema is the recommended approach in Power BI due to its faster performance, simpler DAX calculations, and reduced data redundancy.

0
ProgrammingDEV Community ·

64% of Leaked Credentials From 2022 Still Valid in 2026, Report Finds

A report by GitGuardian's State of Secrets Sprawl 2026 highlights a growing problem of credential exposure persisting across security tools and environments. A single API key can travel from a developer's laptop to code repositories, pipeline logs, support tickets, and teammate configs, creating multiple copies with identical access privileges. Security tools such as repo scanners, endpoint agents, and vaults each guard their own territory but no single tool tracks a credential across all the environments it touches. The report found that 28% of secrets incidents occur entirely outside code repositories, in collaboration and productivity platforms where scanners never look. Most alarmingly, over 64% of credentials found exposed in public repositories in 2022 were still active when retested in January 2026.

0
ProgrammingDEV Community ·

How to Run Arduino Simulations Locally Using Wokwi and VSCode

Wokwi is a cloud-based platform for designing and simulating Arduino projects, but it can also be run locally using VSCode. The setup involves installing the Wokwi Simulator extension in VSCode, obtaining a free trial license, and setting up the Arduino CLI to compile code. Developers must compile their Arduino sketch using the CLI, which generates a build folder containing the necessary .hex firmware file. A wokwi.toml configuration file is then created to point the simulator to that compiled firmware. Once configured, the simulator launches directly in VSCode and automatically reflects code changes after each recompilation without requiring a restart.

0
ProgrammingDEV Community ·

Developer Achieves 100% Lighthouse SEO Score on Next.js App With Structured Fixes

A developer optimised the SEO setup of MockData, a Next.js-based project, achieving a perfect 100 SEO score on Google Lighthouse. Key changes included centralising metadata management via a reusable helper function, setting global defaults in layout.tsx, and adding an explicit robots.ts file with clear crawler rules. A dynamic sitemap was implemented to automatically include new public resource pages, eliminating the need for manual XML maintenance. JSON-LD structured data using Schema.org types such as WebSite, Organization, and BreadcrumbList was added only where it accurately reflected page content. The developer emphasised that a perfect Lighthouse SEO score reflects technical correctness, not guaranteed Google search rankings.

0
ProgrammingDEV Community ·

How a Manager Turned a Junior Engineer's Database Mistake into a Systemic Fix

A junior engineer accidentally dropped a staging database after mistaking it for a dev environment, and immediately reported the incident to his manager instead of trying to conceal it. The manager took charge of communications with the affected team, handled the restoration the same day, and deliberately shielded the engineer from public blame. Rather than disciplining the individual, the manager identified the root cause as a tooling problem — two environments that looked visually identical. Simple fixes were introduced: color-coded terminal backgrounds for each environment and a short pre-execution checklist for destructive commands. The engineer faced no formal repercussions, went on to become a trusted team member, and the same class of incident never recurred.

0
ProgrammingDEV Community ·

Developer Builds Free Browser-Based Toolkit With 13 Privacy-First Utilities

A developer has launched ProTools Hub, a free collection of 13 web utilities designed for developers and general users. All tools run entirely client-side, meaning no data is sent to external servers, addressing common privacy concerns. The toolkit includes utilities such as a JSON formatter and validator, a Base64 encoder/decoder, an image resizer, and a word counter. Each tool is accessible directly through the browser without requiring any downloads or sign-ups. The project is positioned as a lightweight, privacy-focused alternative for everyday development and productivity tasks.

0
ProgrammingDEV Community ·

Microsoft Foundry Local Brings AI Inference On-Device, Eliminating Cloud Dependency

Microsoft has introduced Foundry Local, a tool that allows developers to run AI inference directly inside desktop or mobile applications without relying on cloud-hosted endpoints. The solution targets small, well-scoped tasks such as intent classification, summarization, and voice-to-text, where routing requests to remote servers adds unnecessary latency, cost, and data-privacy risk. Foundry Local leverages quantized small models ranging from 0.5B to 8B parameters and automatically utilizes available hardware accelerators, including NPUs, Apple Silicon GPUs, and commodity laptop GPUs. It maintains compatibility with the same SDKs and API shapes used in Microsoft's cloud-based Foundry offerings, lowering the adoption barrier for existing developers. The release responds to converging trends: improved small-model quality, widespread client-side accelerators, and growing data-residency requirements in regulated industries and consumer applications.

0
ProgrammingDEV Community ·

Why Python Remains the Top Choice for Beginners and Data Professionals

Python stands out among programming languages for its minimal syntax and focus on readability, a philosophy championed by its creator Guido van Rossum. Unlike Java or C++, Python requires little to no boilerplate code, allowing developers to focus on problem-solving rather than syntax management. Its clean, indentation-based structure produces legible code that remains easy to understand long after it is written. Beyond general-purpose use, Python has become the dominant language in data science and machine learning, supported by powerful community libraries such as NumPy and Pandas. These structural advantages make Python a practical first language for beginners and a preferred tool for professionals working with data.

← NewerPage 1241 of 3229Older →