SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Port 514 dominates ZoomEye syslog results, complicating FortiAnalyzer exposure measurement

ZoomEye queries run on 23 October 2026 returned 14,860 hosts fingerprinted as FortiAnalyzer, but none of them showed a matching TLS service. The port 514 query returned 994,157 results, a count inflated by the many syslog-emitting devices on the internet, while port 6514 returned just one. The analysis argues that the port-based count is the least meaningful of the four queries and the one most likely to be misquoted. Because FortiAnalyzer aggregates security logs and configuration records, the article stresses checking whether a specific firmware build appears in Fortinet's advisory affected lists, citing PSIRT advisories FG-IR-26-178 and FG-IR-25-246. It also recommends comparing log retention windows against organisational detection latency.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Bing Adds Topics Portfolio Beta to Show Gaps in AI Search Citations

Microsoft has launched Topics Portfolio, a beta feature in Bing Webmaster Tools that shows publishers where their content is cited in AI-generated search responses and where it is missing. The tool sits within AI Performance reports and groups grounding queries, the search terms Bing's AI uses for Copilot, Bing AI summaries and partner integrations, into broader themes. For each topic it shows approximate citation volume, the number of sites cited and the number of queries, while flagging high-potential queries where competitors are cited but the user's site is not. Microsoft presents the feature as a planning aid rather than an exact measurement system, and citation figures are shown as ranges. Users can start by opening the AI Performance report, selecting the Topics tab and choosing a one- to three-month window.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Deep Work on a Hard CI Bug Went Wrong and How a Clearer Approach Fixed It

A developer spent a long day and night chasing an elusive bug in a CI pipeline, losing track of their own exhaustion and pressure from their supervisor. The root cause turned out to be a backwards-incompatible update in a dependency of a dependency, which was resolved by pinning an older version. On a later occasion, the developer set expectations with their supervisor upfront and debugged by entering the Docker container interactively, which allowed faster testing of fixes. The author argues that the difference between the two experiences lay not in concentration but in awareness of their own state and situation. The account is presented as a reflection on deep work, especially relevant when coding agents parallelize tasks but cannot replace focused human attention.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP Releases Fixes for Two Critical Remote Code Execution Flaws

PHP published patches on October 21 addressing CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that could allow unauthenticated remote code execution. The fixed versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12, or vendor packages carrying equivalent fixes. PHP-FPM users are also required to apply the update. The article advises administrators to confirm the PHP runtime actually serving web requests, not just the command-line version, and to check every deployed instance, including containers, staging servers, and forgotten applications. It also warns that vendors may backport fixes without changing version numbers, and that updating Composer dependencies does not install runtime patches.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Three MCP servers a developer uses daily with Claude Desktop, and how to set them up

A developer shares the three Model Context Protocol (MCP) servers they currently run in Claude Desktop. The filesystem server lets Claude read project files directly, which avoids manual copy-pasting of code, while the GitHub server enables checking issues, reading pull requests, and browsing repositories for code reviews. A Postgres server adds direct database querying from within the conversation, such as finding users who signed up but never logged in. The article outlines a short installation process using the mcp-hub tool, followed by editing the Claude Desktop config file and restarting the app. It also warns that the filesystem server can access an entire disk if misconfigured, so file paths should be set carefully.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Cloudflare's AI security audit skill passed flawed findings, exposing a validation gap

Cloudflare's open-source security-audit-skill is a coding-agent tool that coordinates recon, hunter, and verifier agents to find and vet vulnerabilities, and it has gained rapid attention on GitHub. The skill is large, about 46,000 tokens of instructions, and two of its six phases are devoted to refuting findings. A reviewer tested it against a small Node service by writing four findings by hand, two of them false and one citing a nonexistent file, without installing the skill or running its agents. Cloudflare's findings validator passed all four anyway. The validator checks only format and consistency, since it never opens source files, a limitation the skill's own documentation acknowledges.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Nightly LLM Evals on Short-Lived GPUs Using Runcrate's CLI

A developer describes running LLM evaluations automatically every night instead of only before releases, so regressions surface early. The setup uses Runcrate's command-line tool to create a scheduled job that launches a fresh GPU, runs EleutherAI's lm-evaluation-harness, and shuts the machine down when the eval finishes. The example evaluates Qwen2.5-0.5B-Instruct on 200 ARC-Easy questions, with a run costing roughly a cent. The schedule includes a required maximum runtime to stop hung evals and a default setting that skips a run if the previous one is still active. The author reports running the commands on October 21, 2026, and notes that a PyTorch build must match the machine's CUDA driver version.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Batching 39 Stock Asset Uploads on a 2 GB Server: Lessons in Error Handling

A developer ran 39 asset products through a pipeline on a 1 vCPU, 2 GB RAM server, and the job crashed with a MemoryError around product 14, losing hours of work. Platform-specific CSV headers, which differ in column count across Adobe, Vecteezy, and Dreamstime, caused repeated rejections, so the developer hardcoded each exact header. Re-running a batch risked double-posting, so a plain-text ledger tracking completed uploads was built to make re-runs safe. Measuring peak memory usage, the developer switched to sequential processing, per-asset garbage collection, and subprocesses for heavy renders, after which the full batch completed on the same machine. The article also recommends a clear project folder layout and never deleting research files.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Zomato Parent Eternal Unveils Dark.ai, an AI Assistant It Says It Cannot Read

Eternal, the company behind Zomato and Blinkit, told shareholders in its Q2 FY27 letter filed with India's BSE on October 21, 2026, that it is building Dark.ai. The AI assistant would run fine-tuned open-weight models on Eternal's own infrastructure, with end-to-end encryption designed so the company cannot access user conversations. It would also include a user-controlled encrypted memory layer to retain context across sessions. Founder Deepinder Goyal says the tool is aimed at founders, researchers, enterprises and governments, with a global launch hoped for within 2026. The product has not launched, and no pricing, demo or independent audit of its architecture has been published.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP2Shell: Critical PHP Flaws CVE-2026-109618 and CVE-2026-109619 Found Using AI

Two critical vulnerabilities, dubbed PHP2Shell and tracked as CVE-2026-109618 and CVE-2026-109619, were disclosed in the core PHP runtime, each rated 9.2 under CVSS v4.0. The flaws affect PHP releases from 5.4 through 8.5 and sit in memory management and error handling code that nearly every request uses. An out-of-memory issue behind them was first noticed in 2024 during a security audit, but a patch stalled for about two years because no working exploit had been shown and fixes risked breaking compatibility. Researchers at Calif and cloud security firm Wiz used AI models from OpenAI and Google to find and weaponize the bugs, with Calif producing a pre-authentication remote code execution chain. Several government portals, Wikimedia systems and other public services temporarily went offline as a precaution while patches were prepared.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Nvidia Releases OpenShell on GitHub

Nvidia has published a project called OpenShell on its GitHub account. The source material is a Hacker News link to the repository, which had drawn 23 points and 7 comments at the time it was captured. The item provides no further details about the tool's function, features, or intended users. Readers wanting specifics would need to consult the GitHub repository directly.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Docker vs. Kubernetes: How the Two Container Tools Differ

Docker and Kubernetes are both widely used by application developers working with containers, but they serve different purposes. Docker creates and runs containers, packaging applications into reusable images that behave consistently across environments. Kubernetes is an open-source platform for automating the deployment, scaling, and management of containerized applications, grouping containers into Pods across clusters of machines. Kubernetes offers features such as autoscaling, self-healing, load balancing, rolling updates, and service discovery. Docker suits local development, testing, and smaller applications, while Kubernetes is designed for orchestrating containers at scale.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Python Data Structures: An Introduction to Lists and Tuples

The article explains that data structures are organized ways of storing data in memory so it can be accessed, sorted, and modified efficiently. It describes Python's four built-in data structures, which handle nearly all common data organization tasks. Lists are presented as ordered, mutable collections that allow duplicates and mixed data types, with examples of adding, modifying, and removing items. Tuples are introduced as ordered, immutable collections that cannot be changed after creation and support unpacking of values. The piece notes that Python uses zero-based indexing, meaning the first item sits at position 0.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Passing Unit Tests Doesn't Mean an AI Agent Is Ready for Production

Engineers often treat green test suites as proof of readiness, but autonomous AI agents can still cause damage through their choices. Unlike conventional software, an agent's execution path varies with its environment, tools, and mid-task information, so judgment must be tested alongside outputs. Individually working components may still fail when an agent sequences them poorly, such as retrying transactions into duplicates or overwriting records. Pradeep of BotGauge recommends asserting properties of outcomes, like respecting permissions and escalating when needed, rather than fixed action sequences. He also urges deliberate adversarial testing of six failure modes, plus chaos testing of the agent's environment, before granting production access.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Tortoise: A Productivity CLI That Caps Daily Plans to Encourage Consistency

The author built Tortoise, a small command-line tool aimed at reducing the overplanning common in productivity software. It converts a markdown task backlog into a daily plan with one anchor task and at most two support tasks, bounded by a user-set focus budget. An open-weight Gemma model selects the anchor task, while deterministic guardrails constrain its output. A streak counter tracks consecutive days of completed work to reward consistency over intensity. The project was developed for a 'Slow and Steady' challenge theme in the DEV community.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

ZoomEye Counts Show Proxmox Fingerprint Matches Far Outnumber Port 8006 Hosts

A ZoomEye index query on 23 October 2026 returned 408,609 hosts matching the Proxmox application fingerprint, but only 6 when restricted to port 8006, Proxmox VE's default management port. The gap suggests the name-based fingerprint rule is very broad and captures unrelated hosts rather than management interfaces. The analysis cautions against treating aggregate index counts as a measure of exposed systems. Because Proxmox consoles control every guest on a host, the author argues that exposure should be assessed through deployment-specific factors such as network reachability, authentication, and token scoping. The recommended approach is to run both queries within one's own address space and audit the results directly.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Linux Foundation e IBM lançam llm-d 1.0 para inferência distribuída em Kubernetes

A Linux Foundation AI & Data, em parceria com IBM Research, Red Hat e colaboradores da CNCF, anunciou a versão geral do llm-d 1.0. A plataforma de código aberto foi criada para orquestrar inferência de modelos de IA distribuída sobre Kubernetes. Ela busca resolver problemas operacionais em clusters de GPUs, como a competição entre usuários interativos e agentes autônomos por recursos. Com a versão 1.0, o projeto deixa a fase experimental e passa a ser utilizado em ambientes de produção.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Nemos for Engineers Offers iPhone Notes for Technical Decisions, Debugging and Ideas

Nemos is a note-taking app for iPhone designed for engineers who need to preserve technical context that is otherwise lost or buried. It supports four types of notes: quick micro-scale reference items, decision records with reasoning, sequential debugging logs, and fleeting refactoring ideas, without requiring users to choose a category. Voice-to-text capture lets engineers record architecture decisions and their tradeoffs immediately, making them searchable within seconds. The app also suggests structured templates, such as one for debugging, and encourages building a personal reference library of frequently looked-up commands and quirks. Its article-style guidance extends to capturing decisions, open questions and action items during technical meetings.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Letter Moth and Copy.ai Compared: Focused Outreach Drafts Versus a Content Platform

The article contrasts Letter Moth, a small Chrome extension that drafts LinkedIn notes, cold emails, and job answers from the open page, with Copy.ai, a broader AI platform for marketing and business content. Letter Moth works in Chromium browsers such as Chrome, Edge, Brave, and Opera, reads the page or text box the user selects, and trims drafts to the field's character limit. The author, who builds Letter Moth, says a platform suits team-wide content needs while a focused tool suits individual one-off messages, and notes Letter Moth does not handle long-form content, sequences, or sending. Readers are told to check Copy.ai's own site for current features and pricing, and Letter Moth's privacy practices are described, including that page text is used only to write each draft and not kept.

0 comments Read more at DEV Community
← NewerPage 127 of 2941Older →