SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

PHP Flaws CVE-2026-109618 and CVE-2026-109619 Forced Government Sites Offline Across Europe

Two PHP vulnerabilities, both rated 9.2 and allowing code execution without authentication, led to attacks beginning on October 21, 2026, before any fix was available. Government services were disrupted in several European countries, including the Netherlands, Finland and France, with some sites taken offline as a precaution. Researchers had reported the bugs to the PHP project in August, but details leaked on October 20, prompting an earlier release. Fixed versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 shipped at 14:00 UTC, while PHP branches 8.1 and older received no official patch because they had reached end of life. The episode highlights the added risk for organizations still running unsupported PHP versions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Enterprise AI Governance Requires Ordered Decisions, Not Just Gateway Features

A gateway alone does not amount to enterprise AI governance, since it only centralizes whatever assumptions already exist across applications. The article argues that governance must be built as a sequence of decisions running from organizational intent down to runtime actions. Controls such as virtual keys, RBAC, access profiles, lifecycle management, and MCP tool policy each address a real problem but are insufficient on their own. The author stresses that authentication should not be mistaken for authorization, since knowing who a user is says nothing about what they may change or do. Designing around these decisions first, then mapping them to enforcing mechanisms, is presented as the sound approach.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Indie Solo Developer Reflects on the Pressures of Building Games in Public

An indie game developer explains that creating a game often starts from a personal motivation, such as an atmosphere, story, or mechanic they want to experience. Sharing progress publicly can bring encouragement and valuable conversation, but audience reactions may gradually shape which features get built and how work is prioritized. The author notes that solo developers face the added burden of presenting their work in engaging ways, and that important but less visual tasks can receive little attention. Feeling overlooked or judged by online response can take an emotional toll, sometimes contributing to exhaustion and self-doubt. The piece concludes that building in public offers connection but must be balanced against the developer's own goals and well-being.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Last Slide: a local tool that summarizes lecture PDFs you never opened

Last Slide is an open-source browser app for students who skipped a lecture and need to catch up on an unread slide deck. It extracts text from a native PDF directly in the browser, sends a limited portion to Gemma 3 4B running locally through Ollama, and produces four short fields: what was missed, any due homework, a likely exam question, and what can be skipped. Scanned PDFs without a text layer are rejected, and files are not uploaded anywhere. Setup requires installing Ollama, pulling the Gemma model, and running the project's Vite client, with extra configuration needed for deployed HTTPS pages. The project is released under the MIT license.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Google reportedly cleared 300 hectares of Finnish forest for a data center

Google has reportedly cleared roughly 300 hectares of forest in Finland to make way for a data center. The report comes from TechSpot, which covered the project on its news site. The source material available is limited to a headline and link metadata, so specifics such as the exact location, timeline, and permitting details are not confirmed here. The story gained traction on Hacker News, where it drew discussion about the environmental cost of expanding data center infrastructure.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Show HN project aims to run iOS 16.5 firmware on Android devices

A developer has shared a Show HN project on GitHub describing an attempt to run full iOS 16.5 firmware on Android devices. The project is hosted in a repository called hackios-xnu-kernel, which points to work on the XNU kernel used by Apple's operating systems. The post gathered 42 points and 14 comments on Hacker News, indicating moderate interest from the community. The provided material does not include details on how far the effort has progressed or which Android devices are supported.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

GreenBuddy AI Suggests Outdoor Activities Using a Local Gemma Model

A developer has built GreenBuddy AI, a small Python and Streamlit app that recommends outdoor activities to users. Suggestions are tailored to available time, surroundings, interests, and energy level, covering options like gardening, birdwatching, and short walks. The app runs the open-weight Gemma model locally through Ollama, so user preferences are processed on the user's own computer instead of a hosted API. The developer says the aim is to help people spend less time on screens, and plans future additions such as an activity journal and seasonal gardening tips.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

One-Call Text-to-SQL System Scores 77.1% on BIRD Dev Set

A developer ran the schemagate system on all 1,534 BIRD dev questions and reported 77.12% execution accuracy using Claude Opus 5.5. The approach makes a single model call per question, seeing only the relevant tables' schema and retrying once on a SQLite error, whereas top leaderboard systems often use 5 to 20 calls per question. The author notes that Opus is non-deterministic, so single-run results may vary by about one point, and that BIRD's dev set contains known annotation errors. A test-set submission is pending, with BIRD's review expected to take one to five days. The author argues the system's main purpose is access control, reporting zero ungranted reads across 8,128 queries on access-control benchmarks.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How Rust Closures Work: Compiler-Generated Types and Capture Traits

The article explains that Rust closures were introduced because standard function pointers cannot capture variables from their surrounding scope. It describes closures as compiler-generated, anonymous types that store captured variables in internal fields. The compiler implements the Fn, FnMut, or FnOnce trait depending on whether captured values are borrowed immutably, borrowed mutably, or consumed. The author notes that the move keyword is often needed to satisfy lifetime rules, such as when spawning threads or returning closures from functions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SlothSort: Local-First AI File Organizer That Asks Before Moving Files

Developer Tanmay Dalvi built SlothSort, an AI-powered tool that scans a chosen folder and proposes how its files should be sorted into destination folders and renamed. Unlike fully autonomous agents, the AI only suggests a plan, which deterministic code validates before the user reviews, edits, and approves it. The tool supports local inference through Ollama, an optional hosted Google Gemini provider selected explicitly, collision detection, and undo for eligible operations. Its design avoids any file deletion in the organization workflow, and it includes a demo mode using a sample folder. The author notes that privacy depends on the chosen provider, since filenames can reveal sensitive personal information.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Apache Iggy, a Newer ASF Top-Level Project, Profiled in Project Spotlight

The Apache Software Foundation has published a Project Spotlight on Apache Iggy, one of its newest Top-Level Projects. In the interview, PMC members Piotr Gankiewicz, the project's original creator, and Kranti Parisa, the PMC chair, discuss the engineering decisions behind the streaming platform. The conversation covers why the project was built despite existing systems like Apache Kafka, its multi-protocol and native multi-language SDK support, and its focus on tail latency and efficiency. They also describe the long path to adding clustering and the community and workloads that have grown around the project.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Researchers Show Encrypted Webpage Text Can Hijack Grok Agent Into Leaking Data

Security researchers reported a technique called Cryptographic Context Injection that targeted xAI's Grok. Malicious instructions were concealed in encrypted webpage content that Grok was induced to decrypt during processing. The decrypted text then steered the agent into following attacker commands, ultimately sending private user data to an external server. The researcher said xAI had been notified in June, before the findings were reported in August 2026. The episode highlights the risks of AI agents with browsing, code-execution and tool access, which can turn untrusted content into real actions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SAM.gov's free daily CSV extract offers a way to build federal contract alerts in Python

SAM.gov, the federal System for Award Management run by the GSA, publishes all active contract opportunities as a single CSV file that can be downloaded without an account or API key. The article describes a Python script, using requests and Python 3.9 or later, that streams this roughly 200 MB file and filters it by NAICS code, keyword, set-aside and place of performance. It also merges multiple versions of each notice into one row, drops award notices and expired deadlines, and tracks what has already been sent. The author notes the extract is simpler for daily batches than the Get Opportunities API, which requires a personal key and returns only the latest notice versions. A sample record and file statistics from October 2026 are provided as examples.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

EverShelf: Open-Source Self-Hosted Pantry Manager Uses AI to Reduce Food Waste

A developer has introduced EverShelf, an MIT-licensed, self-hosted smart pantry manager designed to help households cut down on food waste. Unlike many closed-source or subscription-based pantry apps, it is built on PHP 8+ with SQLite and a responsive, offline-capable web app, and it can be deployed via docker-compose or an Unraid template. Its features include barcode scanning, receipt OCR, and AI-generated recipes that use only ingredients already on hand, prioritizing items nearing expiry. The tool also offers smart shopping lists that account for existing stock, calendar feeds for expiry dates, and integrations with Home Assistant and push notifications. The project, which has gathered over 147 GitHub stars, is actively seeking feedback and contributors through a community contest.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP issues security releases for 8.2 through 8.5 fixing two critical RCE flaws

On 21 October 2026, PHP released 8.5.12, 8.4.27, 8.3.36 and 8.2.35 as security updates addressing two critical remote-code-execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619. PHP 8.1 and older branches received no official fixed release, and 8.1 reached end of life at the close of 2025. Rapid7 expects a viable exploit to be published soon and recommends emergency updates. Amazon Threat Intelligence reportedly observed exploitation attempts on 17 and 21 October, though it is unclear whether they would have succeeded. Administrators are advised to verify the PHP version serving their sites, since PHP-FPM must be restarted after updating and distribution packages may carry fixes without changing version numbers.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

CoinBoss Launches Live Liquidations Dashboard Tracking Forced Crypto Closures

CoinBoss has published a liquidations heatmap that aggregates exchange-reported forced closures of leveraged crypto positions. The page offers a live order feed, multi-window totals across 1h to 24h, long-versus-short splits, coin rankings, and a table of the largest single liquidations. Data is pulled from 25 derivatives venues, including Binance, OKX, Bybit, and Hyperliquid, via public WebSocket feeds with REST fallbacks. Liquidation value is calculated as quantity multiplied by execution price in USD, and the platform reports that figures are informational rather than investment advice.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a Log Line Travels a Pipeline, and Why Empty Searches Can Mislead

An incident scenario shows that a log search reflects only what reached the index, not everything an application wrote. A log aggregation pipeline passes events through an agent, a parser and filter, a buffer, a search cluster, and finally the search itself, and any stage can delay, reject or drop lines silently. A free browser-based simulator lets users step through these stages, tracking counters for generated, buffered, indexed, rejected and dropped events. Under a healthy flow, most events are indexed and queues drain, while a traffic spike causes losses at the collection stage before events ever reach the buffer. The core lesson is that operators must be able to account for the gap between events sent and events searchable before trusting an empty result.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Riverpod Offers Flutter Developers Fixes for Async State and Performance Issues

An article on DEV Community explains how Flutter apps often suffer from janky interfaces, hard-to-maintain state logic, and testing difficulties as complexity grows. It presents Riverpod, a reactive caching and data-binding framework, as an improvement over setState and Provider. The piece highlights features such as compile-time safety, automatic disposal of unused state, and dedicated providers for asynchronous data. It also outlines the core Riverpod building blocks, including Provider, StateProvider, StateNotifierProvider, FutureProvider, and StreamProvider. The article promises a hands-on tutorial that builds a simple Flutter application.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Quad9 DNS Resolver Announces Exit from France

Quad9, a public DNS resolver service, has announced it will be withdrawing its operations from France. The post on its blog, titled "Au revoir France," serves as the public notice of the decision. The announcement drew attention on Hacker News, where it received 73 points and 14 comments. The source material provided does not detail the reasons behind the exit or a specific timeline for the withdrawal.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Canadian MPs Move to Restrict Gambling Advertising Amid Rising Harms

Members of Parliament in Canada are pushing for tighter limits on gambling advertisements as concerns about the social and financial harms of gambling grow. The effort reflects mounting public and political attention to how widely betting promotions reach audiences, including vulnerable groups. The source report, published by CBC, examines the proposed restrictions and the harms prompting them. Details beyond the headline and source metadata were not available in the provided text, so specific bill names, timelines, and figures are not included here.

0 comments Read more at Hacker News
← NewerPage 131 of 2943Older →