SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

EU AI Act's chatbot disclosure rule caught a WordPress plugin developer off guard

Article 50 of the EU AI Act took effect on 2 August 2026, requiring AI chatbot providers to clearly inform users they are interacting with an AI system at the start of each conversation. A WordPress chatbot plugin developer discovered their product's default greeting — 'Hello! How can I help you today?' — failed to meet this transparency obligation. The rule places the design duty on providers, not users, and an exemption exists only where the AI nature of the system is 'obvious from context.' Non-compliance with these transparency provisions can attract fines of up to €15 million or 3% of global turnover, whichever is higher. The developer has since shipped a fix and urges other chatbot operators to audit their widgets, including button labels, contrast ratios, and whether disclosures persist throughout the conversation.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

HashAgent Lets You Share AI Agents as URLs That Run Locally via WebGPU

HashAgent is a new tool that allows users to package and share AI agents as simple URLs. The agents run entirely in the browser on the user's local device using WebGPU, requiring no server-side infrastructure. This approach keeps computation private and eliminates the need for cloud hosting or API keys. The project was shared on Hacker News and is accessible via its public web page. It represents a lightweight method for distributing AI agent functionality without centralized deployment.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

AI Eases Stack-Switching, But Engineering Judgment Remains Irreplaceable

A seasoned developer argues that AI tools are making it significantly easier for programmers to work across unfamiliar languages and frameworks, reducing the time needed to become productive in a new stack. This shift is expected to make a developer's primary identity less about a specific technology and more about their ability to solve problems effectively. However, the author contends that AI writing code does not diminish the value of engineering experience — it may actually increase it. Deep technical judgment, such as handling race conditions, system failures, and edge cases in a payment flow, comes from hard-won experience that AI cannot replicate. The real competitive advantage for developers, the piece concludes, lies not in stack knowledge but in the engineering intuition built through years of building and debugging real systems.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developers Implement Experimental IPv8 Protocol in Linux, Libc, and BGP

A team of developers has implemented the IPv8 Internet-Draft, an experimental next-generation internet protocol, across Linux, the C standard library (libc), and BGP routing. The project represents a working proof-of-concept of IPv8, a protocol proposal that goes beyond the current IPv4 and IPv6 standards. The implementation was shared publicly on the GoonHost blog, attracting attention from the Hacker News technical community. The work demonstrates the feasibility of running IPv8 at multiple layers of the networking stack, from the operating system to core routing infrastructure.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Developers Use Free Sanctions APIs to Embed EU AI Act Compliance in CI/CD Pipelines

Software teams building high-risk AI systems under the EU AI Act face a compliance gap when vendor screening remains in spreadsheets rather than automated pipelines. A developer has shared a Python-based approach that integrates free sanctions-screening APIs directly into CI/CD workflows, automatically checking vendor and supplier names against major sanctions lists. The script fails a build if a vendor returns a HIGH or MEDIUM risk verdict, surfacing which data field triggered the match. The EU AI Act's Articles 9, 10, and 25 require organisations to manage risks across their entire supply chain, including training data providers, cloud API vendors, and payment processors. Annual vendor reviews are considered insufficient in fast-moving development environments where new dependencies can be introduced and shipped within days.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

form.fscss lets developers build modern forms using pure CSS, no JavaScript

A new open-source CSS module called form.fscss, part of the FSCSS ecosystem, enables developers to build fully featured forms without JavaScript UI logic. The module uses native CSS mechanisms such as the :placeholder-shown pseudo-class to power floating labels and the checkbox-hack pattern for custom checkboxes, radio buttons, and toggle switches. Inline validation states like error and success are triggered simply by adding a class to the field wrapper, keeping the presentation layer entirely in CSS. Micro-interactions such as a gradient button press effect are also handled through CSS pseudo-classes rather than event listeners. Full documentation, design tokens, and markup requirements are available on GitHub at github.com/fscss-ttr/form.fscss.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Docker Networking and Volumes Explained: How Containers Communicate and Store Data

Modern applications typically run across multiple containers — such as web servers, databases, and cache layers — which must communicate reliably with one another. Docker addresses this through built-in networking drivers, primarily bridge, host, and none, each suited to different use cases. A key feature of Docker networking is DNS-based container discovery, which lets containers reference each other by name rather than by dynamic IP addresses that can change on restart. Docker volumes complement networking by providing persistent storage that survives container removal, ensuring data is not lost when containers are stopped or recreated. Together, Docker networking and volumes form the foundation for building and managing multi-container applications in production environments.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Releases ActiveVPN: Open-Source Terminal Tool to Detect VPN and Proxy Use

A developer has released ActiveVPN, an open-source command-line tool designed to verify whether a VPN or proxy is actively protecting a user's connection. The tool checks network interfaces, running processes, external IP addresses, DNS resolvers, and IPv4/IPv6 configurations to detect potential leaks or misconfigurations. It assigns a verdict score from 0 to 100, ranging from 'Clean' to 'VPN Detected,' helping users confirm their actual privacy status. ActiveVPN supports features such as a kill switch, continuous watch mode with alerts, and JSON/CSV export for logging. The project is available on GitHub and is compatible with Python 3.8 through 3.12 across multiple operating systems.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Integrate a Payment Gateway into a Web App Using Razorpay

Integrating a payment gateway into a web application requires more than a payment button — it involves backend APIs, secure authentication, webhooks, and error handling. A typical flow moves from the customer through the web app and backend to the payment gateway and then the bank, with the backend verifying the transaction before fulfilling the order. Developers should evaluate gateways on factors such as supported payment methods, transaction fees, API documentation, and webhook capabilities before choosing one. For Indian applications, gateways like Razorpay support UPI, cards, net banking, and wallets, and offer a test environment for safe development. A key security principle throughout is to keep secret API credentials server-side and never expose them in frontend code or public repositories.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Wrong AI Input, Wrong Answer: How Raw Evidence Beats Symptom Descriptions

A web developer investigating malicious redirects on his website initially gave an AI tool only symptom descriptions, leading to a false conclusion that a third-party analytics script was to blame. Three weeks later, when an identical attack hit another site, he instead fed the AI the actual rendered HTML captured under the exact conditions that triggered the redirect. The AI immediately identified an 83KB malicious JavaScript payload hidden in WordPress database entries — invisible to any file-level search. The payload contained a browser detector, a link hijacker, and a cookie-based cooldown to avoid repeat triggers. The episode illustrates a key limitation of AI-assisted diagnosis: the tool can only reason about what it is shown, making the quality of input evidence far more critical than the sophistication of the model itself.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a 225-Character Issue Became a 457-Line Spec in 29 Minutes Using AI

A software developer shared how a brief three-sentence GitHub issue, opened on August 1, was transformed into a detailed 457-line feature specification within 29 minutes using an AI coding agent. The entire lifecycle — from issue creation to implementation and merge — spanned under two hours, covering 15 files across two pull requests. The developer noted that terse issue-writing works well for solo contributors who retain context in memory, but breaks down when handing off work to teammates or AI agents. Rather than asking clarifying questions, the AI first read existing codebases to surface relevant precedents, then returned only with decisions that required human judgment. The author argues the real value lies in separating the research phase from the decision phase, making AI-assisted specification a practical part of the development workflow.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How AI Agents Transformed a Tech Lead's Daily Work Without Changing His Core Role

A tech lead describes how AI agents have fundamentally reshaped his day-to-day work over the past year, even as his underlying responsibilities remain the same. Tasks like writing code, reviewing pull requests, and processing emails are now largely handled by automated agents, freeing up his time for higher-level thinking. He now focuses more on understanding client needs, designing team workflows, and ensuring the right products are built in the first place. The shift was not planned but evolved incrementally, with each small automation compounding into broader change. He frames his role today as primarily decision-making — owning outcomes and judgment rather than raw output.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AES-GCM Flaw Lets One Ciphertext Decrypt Validly Under Two Different Keys

A cryptographic weakness in widely used AEAD schemes like AES-GCM and ChaCha20-Poly1305 allows an attacker with two known keys to craft a single ciphertext that decrypts successfully and differently under each key, with neither producing an error. This property, called key non-commitment, stems from the linear structure of AES-GCM's authentication tag, which can be mathematically solved to satisfy two keys simultaneously. The vulnerability has real-world consequences: Facebook Messenger's message franking system, designed to let users report abusive content in end-to-end encrypted chats, was found exploitable because attachment encryption relied on AES-GCM without key commitment. An attacker could send an abusive image that, when reported, would verify as an entirely different, innocuous file, effectively defeating the abuse-reporting mechanism. The flaw was patched, but the broader lesson is that successful AEAD decryption does not prove which key or sender was involved — a guarantee these ciphers were never designed to provide.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

12 Questions Every Developer Should Ask Before Merging AI-Generated Code

A software developer has shared a practical checklist of 12 questions to ask before approving AI-generated code, drawn from over a year of hands-on code review experience. The guidance highlights that AI tools tend to address the literal prompt rather than the underlying intent, which can produce code that passes tests yet solves the wrong problem. Key concerns raised include unverified assumptions about input data, missing error handling for external API calls, and incomplete authorization checks that confirm login but not resource ownership. The checklist also warns that error responses in AI-generated code can inadvertently expose sensitive system details, such as stack traces, in production environments. The author recommends reviewers trace edge-case inputs, read original tickets before reviewing diffs, and be able to explain each code block aloud before approving a merge.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

eBPF/XDP Packet Filtering Offers High-Speed DDoS Mitigation for Linux Servers

A technical guide published on DEV Community by Zyekh Abdul Qadir Jailani on August 4, 2026, details how eBPF and XDP technologies can be used to defend Linux servers against volumetric DDoS attacks. Traditional Linux network processing allocates a kernel socket buffer for every incoming packet, which becomes a bottleneck under high-volume floods reaching tens of millions of packets per second. XDP addresses this by executing eBPF bytecode directly inside the network driver's receive buffer, allowing malicious packets to be dropped before any memory allocation occurs. The approach uses BPF hash maps to maintain dynamic IP blocklists and can process over 10 million packets per second on standard server hardware. The guide also covers compiling XDP programs in C using Clang/LLVM and verifying high-throughput performance through benchmarking.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

vLLM vs Ollama in 2026: Which LLM Serving Tool Fits Your Workload?

A technical comparison of vLLM and Ollama highlights that the two tools are built for fundamentally different use cases rather than being interchangeable. Ollama, a Go-based application built on llama.cpp, is designed for simplicity and local single-user model serving, making it easy to set up and run on one machine. vLLM, developed at UC Berkeley's Sky Computing Lab, is a full inference stack engineered for high-throughput production environments, using PagedAttention and continuous batching to maximize GPU efficiency under heavy concurrency. Benchmarks serving Llama 3.1 8B on an NVIDIA A100 show Ollama performing comparably at a single concurrent request, but vLLM pulling significantly ahead as simultaneous requests scale toward 256. The guidance for 2026 is to choose based on workload: Ollama for local development and low-concurrency use, vLLM for production deployments with multiple users.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Agent-Ready Websites Emerge as Core Product Architecture Decision in 2026

At Google I/O 2026, Chrome introduced WebMCP as infrastructure enabling websites to expose structured actions directly to AI agents, signaling a fundamental shift in how websites must be designed. A 2026 study across 300 agent runs found that agent-ready e-commerce interfaces achieved an 89.3% task success rate compared to just 49.3% for conventional websites. Unlike traditional sites built solely for human navigation, agent-ready websites must also allow AI agents to interpret content, verify permissions, and execute tasks reliably without ambiguity. Security researchers have flagged risks alongside the opportunity, warning that autonomous agents can be manipulated through malicious tools and deceptive instructions. Experts now frame agent readiness not as an SEO tactic but as a product architecture discipline spanning UX design, backend engineering, data structure, and security.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GoodBarber MCP Server Listed as Official ChatGPT Plugin for App Management

No-code app builder GoodBarber has been listed in the official ChatGPT plugin directory, allowing users to manage their apps directly through the chat interface. The integration enables control over content, catalogs, member management, and push notifications via GoodBarber's existing MCP server, which also supports Claude, Codex, and Cursor. Users can connect through the directory without enabling developer mode or manually entering any URLs, lowering the barrier for non-technical app owners. Each connection is scoped to a single app and secured through an OAuth browser flow, with no API keys required. GoodBarber notes that while building the server was a technical challenge, securing a directory listing is what makes the tool accessible to the broader audience it was designed for.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Silent WooCommerce bug hid free trial offers from all new visitors, killing signups

A custom code snippet on Rev6.fit, a WordPress-based fitness membership platform, silently removed 7-day free trial messaging for all logged-out visitors — effectively every potential new customer. The bug lived inside a repeat-trial guard designed to prevent existing users from claiming a second free trial, but its logic also stripped the trial from guests who had no user account to check. No errors were thrown, and monitoring tools including Sentry showed nothing unusual, meaning the issue was only caught when a client contact manually noticed the trial labels had disappeared from product pages. The root cause was a flawed condition that treated unverifiable guest eligibility the same as confirmed ineligibility, despite the platform's architecture already preventing guests from claiming a trial without first creating an account. The fix required only removing the guest-user branch from the condition, preserving the repeat-trial protection while restoring trial visibility for new visitors.

0 comments Read more at DEV Community
← NewerPage 135 of 1332Older →