SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

DeviceTrust: Open-Source Android Library Turns Device Signals Into Fraud Risk Scores

A developer has released DeviceTrust, an open-source Android library built with Kotlin and C++ that collects low-level device integrity signals to assess fraud risk. Rather than relying on a simple rooted-or-not boolean check, the library assigns weighted scores to multiple signals such as detected hooking frameworks, unlocked bootloaders, and suspicious mounts. These scores are combined into a risk level that guides how an app should respond — from allowing normal access to flagging a session for server-side review. The approach addresses a key weakness in traditional root detection, where a single check can be easily bypassed using tools like Frida. DeviceTrust is available via a public dependency and is intended to complement broader fraud-prevention strategies rather than act as a standalone security gate.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

My Virtual World v1.0.61 adds lifelike traffic, birds, and building details

My Virtual World has released version 1.0.61, a visual overhaul focused on making the simulated environment feel more realistic and coherent. Buildings now feature transparent windows, detailed facades, and dynamic sliding doors, while natural elements like trees, flowers, and grass are placed more organically around roads and infrastructure. Traffic has been improved with varied vehicle types, lane-aware movement, curved intersection turns, and proper collision spacing. Ambient birds now exhibit behavioral variety, including perching, walking, taking off, and reacting to nearby agents. The update is available on GitHub and maintains smooth performance despite the significant visual improvements.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Physics Researcher Uses Claude to Trade Stocks for a Week, Sparks Debate on AI Value

A physics researcher with no finance background connected Anthropic's Claude AI to a live US brokerage account and ran an automated trading experiment for one week using $500. Following a conservative, rules-only strategy — long equities, no margin or shorting — the Claude-managed account returned 2.20%, marginally outperforming benchmark ETFs VOO and QQQ over the same period. The researcher ran a parallel manually managed account, which exhibited classic retail investor pitfalls such as overtrading and emotional decision-making, while the AI account strictly followed the plan without deviation. The experiment, which drew over 374 comments in Chinese AI developer communities, has shifted debate away from raw returns toward a deeper question: whether an LLM like Claude adds anything meaningful over a conventional rules-based Python script, given that free algorithmic brokerage APIs have been widely available for years. The author cautions that one week of data is not a conclusive result, and the full strategy logic has not been made public.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Your Runbooks Are Outdated and How to Fix Them

Most engineering teams write runbooks once after an outage and rarely revisit them, leaving steps that reference deprecated tools, renamed commands, or retired infrastructure. Over time, staff turnover and long gaps between incidents mean the engineers who wrote the runbook may no longer be around, and the remaining team hasn't tested it in months or years. A software engineer on DEV Community argues that runbooks should live in the same code repository as the system they document, so updates are part of the same review cycle as code changes. They also recommend having junior engineers run through runbooks quarterly on non-incident days to surface gaps that original authors overlook. The post also proposes a standard three-section structure — symptom identification, immediate triage actions, and investigation steps — and suggests that every post-mortem should result in a runbook update before it is considered complete.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Rebuilds PWA as Native iOS and Mac App Using AI Agent, Cites Architecture as Key

A solo developer rebuilt GSD, his Eisenhower-matrix task manager, from a Progressive Web App into a native iOS and Mac application, with an AI agent handling most of the coding. The app had already been functional for two years as a web and PWA product, but the developer felt the PWA experience fell short of truly belonging on the phone. He found that the critical challenge was not the technology stack itself, but establishing strict architectural boundaries before introducing AI-assisted development speed. A device clock synchronization bug that silently dropped data highlighted the risks of weak layer enforcement during the rebuild. His key takeaway is that a single developer can ship a real product with AI assistance only when intent is clearly defined and architecture enforces firm boundaries.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Build a Unified Personal Health Data Pipeline Using Apache Hop

Health data from devices like Apple Watch, Garmin, and MyFitnessPal is typically stored in separate silos, making cross-platform analysis difficult. A developer guide on DEV Community outlines how to build an ETL pipeline using Apache Hop, an open-source metadata-driven orchestration tool, to consolidate this data. The pipeline extracts data in formats such as XML, CSV, and JSON, then transforms and loads it into a centralized PostgreSQL database. Apache Superset is used to visualize the unified data through dashboards, while Docker and Docker Compose handle the infrastructure setup. The guide also addresses common challenges like deduplication, where syncing the same activity across multiple platforms can lead to double-counted metrics.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why AI-generated business metrics can silently shift without anyone noticing

AI assistants querying business data like Monthly Recurring Revenue can return technically valid but semantically inconsistent results when underlying business definitions change. Finance teams may quietly alter which plans are counted, how credits are applied, or which exchange rates are used, causing the same SQL query to mean different things over time. Experts recommend that production metrics carry immutable version identifiers covering filters, dimensions, timezones, source systems, and policy digests. Metric versions should also be embedded in cache keys, scheduled reports, and exports to ensure historical figures remain reproducible. The core principle is that AI models can retrieve and explain metrics, but business semantics must be explicitly defined and versioned by humans.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Dev Blog: How a Turkish AI Video Pipeline Wrested Audio Control from the Model

A developer building AI-generated character videos in Turkish discovered that the video service's built-in speech synthesis was unreliable, mangling words, repeating phrases, and mispronouncing foreign terms. To fix this, the team removed audio generation from the video model entirely and replaced it with Microsoft's edge-tts, a free, quota-free Turkish TTS engine, tuning speech rate to -8% to pass a Whisper-based quality gate requiring word confidence above 0.80. Lip-sync was handled by Wav2Lip, but its low-resolution mouth output looked blurry on high-resolution faces, so GFPGAN face restoration was applied selectively only to the mouth region using a frame-difference mask to prevent flickering elsewhere. When the audio clip ran longer than the base video, the team used ffmpeg to extend footage with a slow-down and boomerang loop rather than letting Wav2Lip create a visible repeat cut. The resulting pipeline — edge-tts, Whisper gate, Wav2Lip, GFPGAN, and ffmpeg — produced publishable lip-synced Turkish character videos without burning commercial TTS character quotas.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Shadow Traffic Replay Catches AI Code Regressions That Unit Tests Miss

AI-suggested code changes can pass all unit tests and static reviews yet still fail under real-world request patterns, such as burst traffic or edge-case data states. A more reliable verification method involves deploying the candidate change to a shadow service and replaying a full day of actual production traffic against it. The approach compares status codes and response bodies between a baseline and candidate service for each replayed request, producing a reproducible mismatch list. A sample Python harness is provided that reads a JSONL request log, skips write methods to avoid side effects, and strips sensitive headers before forwarding requests to both services. Because the shadow server is disposable and does not need to be production-grade, the cost of running frequent comparisons remains low.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Free-Model Python Script Drafts Manual Smoke-Test Checklists from Git Diffs

A read-only Python workflow has been proposed to help development teams generate manual smoke-test checklists by feeding a git diff summary to a free AI model endpoint. The script deliberately avoids reading source code directly, instead using only file paths and line counts from git diff --stat to limit exposure of private code. It requires the model to return a structured JSON array with defined keys, and fails closed if the response is malformed or missing required fields. The approach is positioned as a middle ground between rebuilding test lists from memory and granting a code generator broader authority over the codebase. The article was published as part of product outreach by MonkeyCode, a disclosure the author includes within the piece.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Free AI Endpoints Need Contract Probes, Not Just Try-Except Blocks

Free AI API endpoints can return HTTP 200 status codes while still delivering malformed, truncated, or structurally unexpected JSON responses that break downstream code. Common integrations relying solely on json.loads inside a try block fail to catch valid but wrongly shaped responses, such as a missing field that silently writes null values into production records. A contract probe — a small, deterministic test request run at the integration boundary — checks transport, shape, cost, and error contracts before the rest of the system processes any data. The probe does not evaluate model quality but instead verifies that the endpoint can fulfill a known response structure at a given moment. A minimal Python implementation using only the standard library can validate required fields, data types, response size, and token usage without any external dependencies.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

9 Key Questions Developers Should Clarify Before Building a Taiwan Business Website

A platform that guides founders through starting businesses in Taiwan has identified a recurring problem: websites are often commissioned before core operating decisions are finalized. This leads to avoidable rework across areas such as domain ownership, contact details, invoicing, legal pages, and site architecture. Developers are advised to first establish the site's business stage, primary conversion goal, verified company information, and asset ownership before writing a single line of code. Bilingual requirements, particularly Traditional Chinese and English, also demand separate planning rather than a simple translation toggle. Clarifying these nine questions upfront is meant to align the website build with actual business needs and reduce costly revisions later.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI-Generated Database Migrations Need Stricter Pre-Merge Checks Than Code Patches

Unlike regular code changes, database migrations that drop columns or truncate tables can make data permanently unrecoverable even if the commit is reverted, warranting a separate review process. Standard AI patch gates typically verify test passage and diff size, but these checks can miss destructive migrations that lack a valid rollback script or fail only against real production schemas. A more robust pre-merge gate should scan for destructive SQL keywords, apply the migration to a throwaway database, and verify that the down migration fully restores the original schema. If the rollback cannot reproduce the prior schema state, the migration represents a one-way change that should require explicit human approval before merging. The article, published as part of MonkeyCode's product outreach, provides a Python script using psql and pg_dump to automate this shadow-apply and round-trip parity check locally.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Contradictory wiki data won't make AI agents hallucinate — but it will break them

A developer built a controlled testbed to examine how ingest quality affects an AI agent that navigates a wiki using search and read tools, rather than relying on vector databases or RAG. The agent scored 4 out of 4 on questions when given a clean wiki, but its correct-answer rate dropped to near zero when contradictory or stale duplicate pages were introduced. Crucially, the agent did not hallucinate confidently wrong answers — instead, it detected conflicting information and refused to commit to a single response. The real cost of poor ingest quality is therefore not misinformation but a collapse in the wiki's authority, forcing the agent to read multiple pages, hedge its answers, and consume more resources per query. The researcher concluded that this failure mode is easy to overlook because no single answer is technically wrong, yet the system's core value — delivering one trusted answer — is effectively destroyed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI's Cybersecurity Access Pledge Faces Scrutiny Over Undefined Terms

A researcher investigating AI model access restrictions for authorized defensive cybersecurity work set out to identify who determines content thresholds and on what basis. The inquiry evolved into a structured audit comparing public statements made by AI leaders against their actual shipped products and policies. Focusing on six documented cases, the analysis found that key tensions were not caused by outright falsehoods but by consequential phrases left operationally undefined at the time of announcement. A specific example involved OpenAI CEO Sam Altman's April 2026 post announcing a cybersecurity model rollout for 'critical cyber defenders,' where the claim of working with government on trusted access was rated a partial match since the action preceded the statement. The researcher concluded that while the rollout itself was verifiable, the stated outcome of helping 'rapidly secure' infrastructure remained unestablished due to the absence of any public measurement isolating the rollout's actual impact.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Block Engine v2.2.0 lets developers run Python, Node.js, Lua and PHP in one file

Block Engine v2.2.0 is an open-source polyglot execution engine that allows developers to run Python, Node.js, Lua, and PHP within a single .blkp document. The tool is designed to reduce friction when combining multiple programming languages in a single project. It works by parsing the abstract syntax tree, running each language in isolated subprocesses, and automatically passing state variables between runtimes. For example, a variable computed in Python can be seamlessly received and used in a subsequent Node.js or PHP stage. The project is available online and requires no additional configuration to set up the cross-language state pipeline.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Engineer launches open resource to help developers use AI coding tools responsibly

A software engineer has launched loveyourclanker.org, a free, non-profit open web resource aimed at helping developers interact more intentionally with AI coding tools and agents. The site outlines various patterns engineers can consciously adopt to stay in control, maintain code quality, and improve efficiency without over-relying on automation. The creator was motivated by concerning trends in the developer community, including token leaderboards, engineers automating away human roles, and others abandoning AI tools entirely due to stress. The goal is to normalize open discussion about how these tools are used and encourage approaches that preserve human agency in the development process. The project is fully open-source, and contributions via pull requests are welcome.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Cloud vs. Local LLMs for Scheduled Curation: A Practical Operational Tradeoff

Scheduled LLM curation jobs run silently overnight to deduplicate, summarize, and re-rank agent memory without any human oversight, making reliability and failure modes especially critical. Unlike interactive workflows where errors are visible, headless cron jobs can fail silently — hanging on unanswered prompts or losing data on pod restarts. Running curation against hosted cloud APIs is quick to set up and benefits from frontier model quality, but costs scale with memory size and every run sends potentially sensitive data off-premises. Pointing the same workload at a locally hosted model addresses both privacy and recurring token costs, but introduces a new layer of infrastructure complexity including GPU management, node affinity, and image maintenance. The right choice depends on data sensitivity, curation complexity, and an organization's operational capacity to manage local model deployments.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Publishes Open Blueprint to Coordinate Basic Survival Resources Beyond Financial Access

A developer has released the first version of the Social Resource Floor, an open blueprint designed to help coordinate access to essential survival resources — including food, housing, healthcare, and energy — without requiring financial access as a prerequisite. The project aims to create a coordination layer above existing social protection systems such as OpenSPP, OpenG2P, and OpenCRVS, allowing independent providers to work together without surrendering their own data or infrastructure. The blueprint uses language-neutral JSON Schemas as its authoritative source of truth, accompanied by prose specifications, a conformance suite, and a non-authoritative reference implementation. A core design principle is that the schemas, not any specific implementation, define conformance, ensuring institutions can adopt the standard using their own technology stacks. The system is intended for use by governments, municipalities, NGOs, and community providers seeking to guarantee a basic resource floor for every person regardless of financial circumstances.

0 comments Read more at DEV Community
← NewerPage 147 of 1333Older →