SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Open Finder Folders in VS Code with a Keystroke Using an Automator Quick Action

The article explains how to create a macOS Automator Quick Action that opens selected Finder folders in VS Code. The setup involves choosing Quick Action, setting the workflow to receive folders in Finder, and adding a Run Shell Script step that uses open -a with the app name. The author recommends this over the code command because it avoids PATH configuration issues and works on other machines with VS Code installed. Users can then right-click a folder to launch it or assign a keyboard shortcut in System Settings for one-keystroke access.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP2Shell Flaws Allow Remote Code Execution in PHP Runtime, Patches Released

The PHP Security Team issued emergency fixes on October 21, 2026, for two critical vulnerabilities collectively named PHP2Shell, both rated 9.2 out of 10 under CVSS v4.0. The flaws, CVE-2026-109618 and CVE-2026-109619, enable remote code execution through memory corruption and stale global state, requiring no user account or victim interaction. Because the issues lie in the PHP runtime itself rather than in individual plugins or frameworks, all PHP installations serving web requests are considered at risk, with Apache mod_php identified as the highest-risk configuration. Patched minimum releases are PHP 8.5.12, 8.4.27, 8.3.36, and 8.2.35, while PHP 8.1 and older are end-of-life and need upgrading or vendor backports. Administrators are advised to treat the runtime update as urgent, since application-level updates do not patch the underlying engine.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Amazon Threat Intelligence Flags PHP2Shell Exploitation Before Public Disclosure

Amazon's threat intelligence team reported identifying exploitation of a vulnerability dubbed PHP2Shell on October 17, ahead of its public disclosure. The findings were detailed in an AWS Security blog post referencing the MadPot honeypot system. The source material provided is limited to the link and discussion metadata, so the specific technical details of the flaw and attacks are not available here. The report highlights how early detection of exploitation activity can precede broader awareness of a vulnerability.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Several Linux kernel vulnerabilities accidentally posted to public mailing list

Details of several Linux kernel security flaws were inadvertently published to the public Linux Kernel Mailing List, according to a Phoronix report. The disclosure appears to have occurred before the vulnerabilities were intended to become public, raising concerns about exposure. The article linked from the Hacker News post covers the incident and the broader trend it reflects. The available source material is limited to the link and metadata, so further specifics about affected versions or patches are not confirmed here.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Hidden text in PDFs could steer AI tools reading bank statements and invoices

A PDF can contain a hidden text layer that people never see but software reads, which becomes a risk when language models process documents. Redact reported in October that WhatsApp help pages carried hidden instructions aimed at an AI, found on 80 of 545 pages, which WhatsApp attributed to a bug and said targeted Meta's own chatbot. Financial documents are a concern because users increasingly ask models to read statements and invoices, and a researcher at Snyk showed in 2025 that white text in a statement PDF could shift a model's credit rating from poor to excellent. The author, who builds a template-based bank statement extractor with no model in its extraction path, tested whether hidden content could affect their own system by planting it in copies of a test statement. The writeup notes no public production case has been found so far.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Offline-First App Uses On-Device AI to Detect Crop Diseases in Central America

Smallholder farmers in Costa Rica and Central America often work in areas with little or no cellular coverage, making cloud-based disease diagnosis impractical. To address this, developers built HealthyCropping, an open-source, non-commercial Android app that runs its core functions, including photo capture, inference, and severity assessment, without an internet connection. The app uses specialist MobileNetV3 models for coffee leaves, cacao pods, and banana leaves, quantized to under 10 MB each and executed through native TFLite runtimes in under 50 milliseconds. To prevent accuracy loss from differences between Python training and mobile preprocessing, the team built a shared fixture test suite that checks for numerical parity between the two environments. Results are stored locally and synchronized to a cloud backend once connectivity returns.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Is it a button or a div? A quick check for keyboard-accessible clickable elements

Landing pages often contain elements that look like buttons, such as menu toggles and tabs, but are built as generic tags with click handlers. Such elements are not reachable by keyboard or announced correctly by screen readers, unlike native button elements. The W3C's WCAG 4.1.2 guidance requires that custom controls expose the correct name and role to assistive technology. The author also notes that a button inside a form submits by default unless type="button" is set. A simple test is to tab through the page, check each unreachable element's tag, and verify that Enter and Space activate it.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PHP Patches Two Critical Vulnerabilities as Java, Node.js, and Railway Also Face Security Issues

On October 21, PHP released fixes for two critical remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, which carry a CVSS v4.0 score of 9.2. The same day, Oracle issued an out-of-band alert for a Java vulnerability, Node.js closed ten flaws, and Railway disclosed that customer secrets had been accessed. A day earlier, a version of the OVHcloud command-line tool was found to have shipped with malware, and affected users are advised to rotate their secrets. According to the PHP Foundation, the underlying problem was first noticed in 2024 but stalled over disagreements about competing fixes before two research teams independently found a working attack path this summer. Security teams are urged to update PHP to the patched releases and restart their services, while no confirmed successful compromises have been reported so far.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Map Beats Object Literals for Lookup Tables in JavaScript

A developer previously recommended object literals over switch statements for input-to-output mapping, but a reader pointed out a flaw in that approach. Plain objects inherit properties from Object.prototype, so lookups for names like constructor or toString return unexpected values instead of fallbacks. This can silently break logic in lookup tables, command dispatchers, and state machines, especially when keys come from user input. The article argues that a Map avoids this inherited-key problem and is the safer choice for lookup tables today.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Icebreaker games for new online groups: getting strangers talking in fifteen minutes

Online groups often start in silence, with participants reluctant to speak first on a call. The article recommends low-pressure browser games that ask for nothing personal and give everyone a task. Options include Trivia Tavern for two to eight players, Draw and Guess for up to twelve, Who's the Spy for three to eight, and Snakes and Ladders for up to eight. The author, Ahmed Moaz, who builds the free Boardit site, advises keeping the session to about fifteen minutes and ending early if it goes flat. Hosts are encouraged to join as players, name each person who scores, and ask a light question afterwards.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer guide shows how to build Apple-style liquid glass effects with CSS and SVG

A DEV Community tutorial explains how to recreate the liquid glass look popularized by Apple's 2025 design across iOS, iPadOS and macOS, using only CSS and SVG. The guide breaks the effect into five layers: a tint, backdrop blur and saturation, a specular rim, a diagonal sheen, and refraction. It notes that classic glassmorphism uses only the first three layers, while true liquid glass adds the sheen and refraction. Code examples include a dark-mode card and a light-mode variant, with advice on adjusting blur and rim highlights for light backgrounds.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Quy trình 20 phút xác định search intent trước khi viết nội dung

Bài viết chỉ ra rằng nhiều brief nội dung chỉ ghi từ khóa và độ dài mà bỏ qua câu hỏi người tìm kiếm muốn làm gì tiếp theo. Tác giả đề xuất quy trình ba bước có thể ghi trực tiếp vào Google Sheet, bắt đầu từ giả thuyết intent dựa trên từ khóa. Bước tiếp theo là khảo sát kết quả SERP ẩn danh để xem loại nội dung, định dạng và góc tiếp cận đang được ưu tiên, đồng thời kiểm tra các tính năng như Local Pack, Shopping hay AI Overview. Cuối cùng, người viết xác định loại trang trên website phù hợp nhất với intent đó cùng lời kêu gọi hành động tương ứng.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Symbolic reasoning engines offer an alternative to LLMs for deterministic problem-solving

A DEV Community article argues that LLMs, whose probabilistic token generation can produce logical errors, are not the only path to AI-style reasoning. It proposes symbolic, rule-based systems that break problems into discrete, verifiable steps instead of predicting statistically likely text. The described architecture has three parts: a world model defining valid states, a constraint solver checking axioms, and a heuristic planner such as A* search. The author notes that the main obstacle is combinatorial explosion in the state space, which symbolic systems must manage through explicit pruning. The article suggests reasoning quality depends more on heuristic sophistication than on the size of the training corpus.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

ما الذي يجب أن تقوله رسالة فشل الاختبار لقارئها؟

تتناول المقالة أهمية رسائل فشل الاختبارات بوصفها الجزء الوحيد من مجموعة الاختبارات الذي يُقرأ خارج المحرر، غالباً على يد شخص لم يرَ الكود. يشير الكاتب إلى أن رسالة مثل Expected True, but found False لا تحدد أي تأكيد فشل، بينما يسهّل ذكر اسم المتغير والقيمتين المتوقعة والفعلية التشخيص بشكل كبير. يعرض النص مثالاً عملياً باستخدام حزمة Jeninnet.Assertions تعمل مع أطر اختبار مختلفة، ويوضح أن أسماء المتغيرات تُلتقط تلقائياً عبر CallerArgumentExpression. كما يؤكد الكاتب أن رسائل الفشل يجب أن تكون ثابتة وغير مرتبطة بالثقافة أو نظام التشغيل حتى تبقى قابلة للبحث والمقارنة. وتختتم المقالة بعرض سلسلة من الملاحظات حول تصميم هذا السطح، تشمل رسائل الفشل بالعربية والتعامل مع الزمن والذاكرة والانتظار.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

CVE-2026-0313: OS command injection in Cortex XSOAR and XSIAM OS Query pack

Palo Alto Networks disclosed CVE-2026-0313 on 14 October 2026, an OS command injection flaw in the OS Query content pack used by Cortex XSOAR and Cortex XSIAM. An authenticated administrator could exploit it to run arbitrary commands on remote endpoints through the SSH integration. The issue is rated moderate urgency, with no known malicious exploitation reported so far. Affected versions are below 1.0.17, and upgrading to that release fixes both products. Security teams are also advised to tighten the privileges of SSH integration accounts and restrict access to management interfaces.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Open-weight models trail hosted rivals as coding agents in new benchmark runs

A reviewer ran open-weight models as coding agents on two agentic benchmarks and found none matched hosted systems this month. Meta's 816B-parameter Muse Spark Open, released 15 October, scored 0.091 and 0.0877 on the Forge 2.0 build, far below the board's top score of 0.8523, and produced no verdict on the Gauntlet 7.2 test. Locally run models including Google's Gemma 4 and IBM's Granite 4.2 did no better, and several pilot runs were cut short or fell below the reviewer's bar. The reviewer noted that recurring failures, such as large files never being written and tool calls returning as prose, were often tied to the test setup as well as the models. Meta's own vendor claims for the model were not matched in these independent runs.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Poster apologizes for disclosing PHP vulnerabilities before coordinated embargo lifted

A Hacker News user has apologized for publicly flagging two upcoming PHP remote code execution flaws, CVE-2026-109618 and CVE-2026-109619, before their coordinated disclosure date. The poster says they believed no embargo existed, having been told so secondhand by a contact. Their post aimed to warn PHP users who compile releases from source about the urgency of the forthcoming updates. The poster acknowledges the disclosure disrupted the disclosure schedule and added workload for others. They say they take full responsibility and have learned from the experience.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

OEM Monitoring Templates Migrated From Old to New Server Using emcli

A guide outlines how to migrate Oracle Enterprise Manager monitoring templates from an OEM 13.5 server to a 24.1 server. The process begins by querying the existing templates and exporting them as XML files with the emcli tool. The exported files are then copied to the new server and imported there after logging in as sysman. When a template references metric extensions not yet published on the new server, the import warns that those extensions must be imported and published first. The guide notes that removing the metric extension entries from the XML lets the template be created without importing those extensions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Six behavioral tests to verify a self-hosted AI agent server is actually locked down

Config files alone can be misleading, so the author recommends checking what the machine actually does for a self-hosted AI agent on a VPS. The suggested checks cover open ports from an outside host, whether the agent listens only on loopback, and whether SSH password login is truly disabled, including drop-in config files. They also test whether fail2ban bans attacking IPs and whether the agent service restarts automatically and sends alerts through the user's own bot. Finally, the piece advises setting a hard spend cap on the API key, since the agent tools lack one, and rehearsing backup and rollback before updates.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Off-the-Shelf Integration Tools Often Fall Short Without Custom Work

Many growing companies spend $50,000 or more annually on enterprise integration platforms such as MuleSoft, Boomi, or Workato to link their sales, warehouse, and billing systems. The article describes a case where a $500,000 deal failed because a nightly batch sync left inventory data outdated, so units already sold online were promised to a client. Pre-built connectors often mishandle custom pricing, shipping rules, or legacy databases, silently skipping data or logging errors nobody reads. Systems also store the same information in incompatible formats, which can cause wrong charges or rejected orders without a proper translation layer. The author argues that integration development partners are needed to build custom connections, data mappings, and real-time syncing that match how a specific business actually operates.

0 comments Read more at DEV Community
← NewerPage 140 of 2949Older →