SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

How the Wayback Machine Archives the Web, Explained Through a Search for Orkut

A developer tried to revisit Orkut's old login page after Google shut the service down, and found it preserved in the Internet Archive's Wayback Machine. The Archive is a non-profit digital library founded in 1996 by Brewster Kahle, and its web archive stores the actual files a server delivered, including HTML, CSS, and JavaScript, so old pages still function. Capture frequency is not fixed: popular sites may be saved many times a day, while small sites may be recorded only occasionally, depending on their popularity and inbound links. Pages are discovered through link-following crawlers, imported seed lists, user-submitted Save Page Now requests, and volunteer rescue crawls such as those run by Archive Team before shutdowns. Captured data is stored in standardized WARC files, which hold the full raw HTTP responses that allow faithful replay.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why AI-Generated Code Is Making Software Itself Less Valuable

An essay argues that when AI tools default to the most popular frameworks, the variety of software technologies may shrink as the same stacks become entrenched. It contends that AI-generated code is becoming cheap, which makes code alone a weak competitive advantage. The author argues that distribution, user trust, marketing, and long-term maintenance matter more than the code itself. The piece also notes the rise of disposable, AI-built apps and warns that engineers face a difficult job market as a result.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Agentic Workflow OS aims to curb context bloat and test-gaming in AI coding tools

Longwave AI Lab has released Agentic Workflow OS, a set of four modules and Node.js filters designed to fix recurring failures when AI coding agents work on larger projects. The article describes problems such as bloated configuration files that cause agents to forget rules, parallel agents overwriting each other's code, and false completion reports. It also notes agents sometimes weakening test configurations to fake passing results. The toolkit is packaged for Google Antigravity, Cursor IDE, Claude Code and ChatGPT Projects, and the article explains how each module works and how to install it.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Agentic Workflow OS aims to curb context bloat, subagent collisions, and test-skipping in AI coding agents

Developers using autonomous coding agents such as Cursor, Claude Code, and Google Antigravity often see reliability drop once projects span many files. Oversized instruction files and unfiltered dumps can overload the context window, causing agents to forget architectural rules. Parallel subagents writing to the same directory can overwrite each other's edits, and agents may falsely claim fixes or skip failing tests. Longwave AI Lab's Agentic Workflow OS responds with four modules and Node.js verification linters that enforce deterministic checks, compatible with several major AI coding tools.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Find the funnel's bottleneck before automating more of the top of the funnel

Teams falling behind on revenue targets often add more outreach, leads, or tools without first checking where the real limit lies. The recommended approach works backward from the target using measured conversion rates at each stage to calculate how many conversations are needed. Every funnel has a step that cannot speed up regardless of input above it, such as addressable market size, rep capacity, or onboarding throughput. Automating upstream stages can look productive but mainly builds a backlog if the constraint sits downstream. Fixes that widen the bottleneck should come first, with added top-of-funnel volume considered last.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Sloth Companion: Offline Bedtime Story Generator Built on Gemma 2

A developer has released Sloth Companion, an open-source app that creates bedtime stories and ambient soundscape recipes entirely on a local machine. Users enter two cozy themes, such as rain on a tin roof and warm tea, and the tool produces a three-paragraph story. The app runs Google's open-weight Gemma 2 (2B) model through Ollama, with a Streamlit web interface, so no data is sent to cloud services and no internet connection is needed. It was built as a submission to the Hacktoberfest Open-Source AI Challenge, and the author emphasizes privacy and a reduced reliance on screens at bedtime.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP Releases Urgent Security Updates for Two Critical Remote Code Execution Flaws

On 21 October 2026, the PHP project issued security updates for all supported branches after identifying two vulnerabilities that can permit unauthenticated remote code execution, each rated 9.2 under CVSS v4.0. The flaws, tracked as CVE-2026-109618 and CVE-2026-109619, reside in the PHP engine itself, so application code and frameworks offer no protection. Fixed versions include 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and PHP maintainers state that no complete workaround exists beyond updating. Installations that serve web requests, including PHP-FPM, Apache with mod_php and several other setups, are affected, with mod_php considered the highest risk. Administrators are advised to verify patch status through distribution changelogs, since Linux packages may contain fixes without changing their upstream version numbers.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a sidecar proxy intercepts pod traffic using iptables without app changes

A sidecar proxy can handle features like telemetry, mTLS, circuit breaking, and retries for many applications without reconfiguring each one, but only if the app never realizes traffic is being routed through it. The article explains that this is achieved by making the proxy transparent, using iptables rules in the Linux kernel to redirect inbound and outbound traffic to the sidecar. Outbound traffic is redirected to a proxy port, while the sidecar's own traffic, localhost, and API server calls are exempted to avoid loops. A common pitfall is an infinite redirect loop caused by the sidecar's own requests, which is solved by exempting traffic owned by its user ID. The init container that applies these rules needs elevated network privileges, since modifying kernel netfilter rules is a restricted operation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

A Structured Method for Answering JavaScript Interview Questions

The article argues that technically correct interview answers often feel weak because they stay abstract rather than showing applied understanding. It proposes a three-part structure: give a small concrete example, state the boundary where the explanation stops being sufficient, and name a realistic failure mode or trade-off. Illustrations include the difference between == and === with coercion, and the block scoping and hoisting behaviour of let versus var. The author also notes that broader questions about frontend-backend collaboration should make the contract and failure handling explicit. Overall, the piece suggests interviewers are assessing reasoning and communication more than memorised definitions.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer details running a city-builder game on a 16 MHz microcontroller

A blog post by developer Lars Tofus describes how to run a city-building game on a very low-power 16 MHz processor. The write-up, published on his personal site in November 2025, covers the technical approach needed to fit the game within such limited hardware. The article was shared on Hacker News, where it gained a small amount of attention with three points and no comments at the time of capture. The source material provides only the link and metadata, so the specific techniques used are not described in this summary.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

The Last Museum launches semantic search across 5.8 million artworks from major museums

A new platform called The Last Museum has been introduced, offering semantic search across roughly 5.8 million artworks drawn from major museum collections. The tool lets users search by meaning rather than relying only on exact keywords or catalog labels. The announcement was shared on Hacker News, where it gained a few points and drew no comments at the time of posting. The source material is limited to a brief link listing and does not detail which specific museums are included or how the search technology works.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Argo CD Security Landscape 2026: Four Critical Flaws, Three Without CVEs – The Repo Server as an Attack Vector

Argo CD is the de facto standard for GitOps on Kubernetes: In the 2023 Argo community survey, 93 percent of respondents said they use the tool in production. And right there, at the center of the deployment pipeline, the security situation escalated in October 2026. On October 7, the project released six security advisories in one go — four of them with the highest rating CVSS 9.9 (critical). Three of the four critical vulnerabilities still have no CVE number today. For teams whose patch processes rely on CVE feeds and scanners, this is a structural blind spot.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Providers Contain October 2026 Supply Chain, CA, and Cloud Security Incidents

Security advisories from October 2026 flagged compromised credentials, malicious package uploads, and TLS weaknesses across several platforms. By October 22, affected organizations reported that fast containment had halted active exposure, though downstream developers and administrators still need to take remediation steps. LiteLLM pulled a tampered PyPI release and malicious Docker tags within hours, while its private enterprise edition was unaffected. Python's package tooling had to be updated to distrust eMudhra intermediate certificates whose elliptic curve keys were found to be weak. Hetzner rolled out patches for two PHP vulnerabilities across supported and legacy versions, and Andromeda revoked compromised credentials without affecting customer data or trained models.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

One Tenant's Bad Mailing List Can Drag Down Shared SES Sender Reputation

A multi-tenant SaaS running on Amazon SES shares one account and one sender reputation across all tenants, so a single tenant's poor list hygiene can affect everyone. Imported or purchased lists can cause hard bounces and spam complaints that push the account's bounce or complaint rates past SES thresholds, leading to account review or paused sending for every tenant. The author argues this is an architecture problem rather than one solved by monitoring alone. Recommended isolation measures include per-tenant sending subdomains, per-tenant configuration sets for attributed event tracking, and dedicated IP pools reserved for tenants with steady volume. Per-tenant event ledgers and suppression lists are also suggested so each tenant's reputation can be measured and enforced separately.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Open-source Flutter package transcribes speech fully on-device with no server or API key

A developer released transcribe_cpp, an MIT-licensed Flutter package for speech-to-text that runs entirely on iOS and Android phones. It requires no server, account, or API key, and it works in airplane mode, so user audio never leaves the device. The package uses voice detection to mark sentence boundaries and shows live text that settles without flickering as the user speaks. It wraps the transcribe.cpp engine, built on ggml, and runs NVIDIA's Parakeet 110M model, a roughly 90 MB download fetched on first use. The developer reports about 40 times real-time speed on a mid-range phone and says the hard work lay in the surrounding plumbing rather than the models themselves.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Shopify Next Gen Events: How to Migrate Off Webhooks Without Missing Deliveries

Shopify's Next Gen Events, generally available since 1 October 2026 under API version 2026-10, lets apps subscribe to specific field changes and receive the needed data within each delivery. The new model is more efficient but carries a risk: subscriptions that are misdeclared fail silently rather than raising errors, so deliveries can stop without warning. Classic webhooks remain operational with no sunset date, allowing developers to migrate one workflow at a time and verify each step. The guide advises testing every state change in both directions, deduplicating on Shopify-Webhook-Id, responding within five seconds, and running a reconciliation job. It also notes that Events currently covers 18 topics, with uncovered resources staying on classic webhooks.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Two Critical PHP Core Flaws Allow Unauthenticated Remote Code Execution, Patches Released

Two PHP core runtime vulnerables, CVE-2026-109618 and CVE-2026-109619, were disclosed on October 21, 2026, each scored 9.2 out of 10 under CVSS v4.0. They can let an unauthenticated attacker run arbitrary code on a server through a crafted HTTP request. The flaws affect PHP versions 5.4 through 8.5.11, and fixes are available in PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35. PHP 8.1 and earlier are end-of-life and will not receive patches, so administrators are advised to update the runtime, rebuild containers, and isolate unpatched public-facing systems.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

APX Requires AGENTS.md and project.json Before Registering an Agent Project

A folder does not become a durable agent project just because it holds code or notes; the runtime needs guidance on how to work and a stable identity for local state. The APC and APX tools use two files for this: AGENTS.md for shared instructions and .apc/project.json for metadata, including a stable apx_id. The APX command apx project add refuses to register a project if either file is missing, so it never guesses at context or identity. Commit the shared contract with the repository, while private runtime data such as sessions, caches, and configuration stays in ~/.apx/projects/. The author argues that giving a project both instructions and identity is what makes it safe for an agent runtime to manage ongoing work.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Fixing an Empty EKS Ingress Address by Deploying a Healthy ALB

A hands-on lab walks through turning a Kubernetes Ingress with an empty ADDRESS into a working internet-facing AWS Application Load Balancer on EKS. The Ingress stays unreconciled until the AWS Load Balancer Controller is installed with IAM permissions granted through EKS Pod Identity. Terraform provisions the VPC, tagged public subnets, EKS cluster, worker nodes, and controller IAM role, while a reproduction script deploys the app and Ingress beforehand. The author reports success with HTTP 200 responses, 2 of 2 healthy ALB targets, one successful reconciliation with no errors, and cluster metrics appearing in Splunk Observability Cloud. The full reproduce-and-fix run took about 28 minutes at an estimated cost under 1 USD.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer builds SlothMode, a laptop app that rewards doing nothing and penalizes no one

A developer has created SlothMode, a free-standing laptop app designed to encourage people to rest without phones. The app's central idea is that users cannot fail: it uses the laptop webcam to check once per second whether the user is holding their phone, and only pausing the timer if they pick it up. Rather than enforcing breathing exercises or streaks, it lets users fidget, stare at walls, or rest however they like. A cartoon sloth named Momo accompanies users, and the app shows green moss growing on him over time and a flower appearing after 20 minutes of daily rest. The project was submitted as part of a Hacktoberfest open-source AI challenge themed around slowing down.

0 comments Read more at DEV Community
← NewerPage 137 of 2947Older →