SShortSingh.

Programming

0
ProgrammingDEV Community ·

Review of the sodium Dart package, a wrapper for the libsodium cryptography library

A developer has published a hands-on review of the sodium Dart package, which implements the libsodium C cryptographic library. The author notes that libsodium itself is ported to many languages and descends from the NaCl library. According to the review, the package's bundled examples and documentation seem limited, so the author wrote a test-based walkthrough. The article covers installing the package with the pub add command, choosing between the standard and SodiumSumo APIs, and initializing the library. It also shows how the randombytes interface produces random numbers, while cautioning readers that the code is illustrative and not a secure production template.

0
ProgrammingDEV Community ·

Tutorial Shows How to Build a Java Task Manager with HTMX and Quarkus

A DEV Community tutorial explains how to build an interactive task manager using HTMX alongside Java, with Quarkus handling routes and persistence. HTMX lets page elements send HTTP requests and swap returned HTML fragments into the page, avoiding a separate browser application. The walkthrough covers create, edit, delete, search, and server-side validation, using the Qute templating engine and Web Bundler for frontend dependencies in the Maven build. The example uses H2 for local development and does not include task completion, authentication, or production persistence setup. The article also notes version corrections to the source project, which pins Java 21, Quarkus 3.30.4, and HTMX 2.0.8.

0
ProgrammingHacker News ·

Essay Argues Markdown Files Should Open Directly Without Friction

A blog post by Joshua Morris titled 'A Markdown File Should Just Open' was shared on Hacker News, drawing a small amount of attention. The piece, published in October 2026, appears to argue that opening Markdown documents should require no special setup or software hurdles. The source material provided includes only the link and discussion metadata, so the full argument cannot be verified from this summary. The post had seven points and one comment on Hacker News at the time of collection.

0
ProgrammingDEV Community ·

Load tests show t3code's AI streaming holds below 50 users but degrades past 100

A developer benchmarked pingdotgg/t3code's streaming AI completion setup using k6 on an AWS t3.xlarge instance, ramping from 10 to 100 concurrent users over five minutes. Measured metrics included time-to-first-token, token throughput, SSE connection drop rate, and Next.js server memory use. Performance stayed stable under 30 users, with drops at about 2% near 50 to 80 users, mostly from client-side abort races. At 100 users, p95 time-to-first-token exceeded one second, connection drops reached 8.4%, and memory passed 1GB due to SSE connection bookkeeping overhead. The author recommends deploying as-is below 50 users and adding a Redis-backed pub/sub layer for larger teams.

0
ProgrammingDEV Community ·

PHP2Shell: Two Critical PHP Flaws Enable Unauthenticated Code Execution, Patched October 21

PHP released fixes on 21 October 2026 for two critical vulnerabilities that could allow remote code execution without authentication. One stems from an out-of-memory failure that can interrupt initialization and leave invalid internal request data to be trusted during cleanup, while the other involves request-owned state outliving its memory so a later request can reuse stale data. Affected setups include PHP-FPM, Apache with mod_php, php-cgi, FrankenPHP and LiteSpeed, with mod_php flagged as the highest risk. Discovery, reporting and public disclosure occurred on separate dates, and the underlying bugs were traced to a 2024 audit finding and later research using AI-assisted searches. The article stresses that an affected runtime does not by itself prove a compromise, and recommends identifying the PHP runtime serving web requests and applying the patch.

0
ProgrammingDEV Community ·

Linux NAPI Shutdown Wait Analysis for Dedicated Threads Under PREEMPT_RT

The author examines whether the shutdown synchronization used for ordinary softirq NAPI polling still holds when NAPI runs in a dedicated thread in Linux 7.3. On non-RT kernels the BH-disabled poll region is covered by RCU, while under PREEMPT_RT the __local_bh_disable_ip() implementation calls rcu_read_lock() on outermost entry from a preemptible context. For RT receive processing via ksoftirqd, the enclosing ksoftirqd_run_begin() and ksoftirqd_run_end() provide the corresponding protection, though this does not cover every entry path such as userspace-driven busy polling. The author notes the NAPI guide does not specify how interrupt unmasking should synchronize with shutdown, leaving a gap for driver authors. The piece concludes by turning to Intel's igb driver, where a flag check against interrupts being re-enabled during shutdown raises a possible race.

0
ProgrammingDEV Community ·

How to Connect a Real-Time Currency API to an AI Agent via MCP

AI agents such as Claude and ChatGPT often lack access to live data, so their answers about exchange rates can be fabricated or outdated. The article presents a method for linking a real-time currency exchange API to an AI agent using the Model Context Protocol, a standard that lets agents call external tools when needed. The author has published an MCP server for this API, which can be added to Claude Desktop through a short configuration change. Once configured, Claude can query the server for current rates, such as USD to UAH, and return accurate figures. The project's code is open-source and available on GitHub.

0
ProgrammingDEV Community ·

Instancing Cuts Draw Calls for 1,000 Plants in Three.js, WebGPU Shows No FPS Lead

A test run by an AI tool compared Three.js rendering of 1,000 procedural grape hyacinth plants across classic WebGL, WebGPU, and WebGPU with a WebGL fallback, using Three.js 0.186.1 on Chromium 155 with an RTX 5070 Ti. Instancing reduced draw submissions on every backend tested. All nine rendering paths ran close to the display's 60 Hz ceiling, so the API choice made little difference to frame rate. Researchers found the more meaningful factor was how geometry was submitted and the work done inside the render call. An earlier run was discarded after a shader mismatch between the classic and node renderers was found and corrected. The results come from a single workstation under background load and do not certify long-duration frame pacing or performance on physical phones.

0
ProgrammingDEV Community ·

How a Map-Based 3D Model Helped Visualize Grand Central Madison's Underground Layout

A creator built a cutaway model of the LIRR's Grand Central Madison terminal for a short explainer using only a browser and a map selection, without CAD or survey data. The first attempt covered too little area and lacked street context, so the selection was widened to include nearby streets and the terminal above. The generated model's details, such as platform and track counts and station depth, were checked against known figures, and a missing escalator bank was noted. The creator then clipped the model along a section through the concourse, rebuilt the escalator and elevator paths, and lit the scene for readability. The author concludes the generated base suits massing and context but is unsuitable for clearance, structural, or construction work.

0
ProgrammingDEV Community ·

AI-Assisted Consensus Protocol A-agreement Reports Lower Latency in Replicated Systems

Researchers report that AI helped discover A-agreement, a new consensus protocol designed for geo-replicated state machines. In six deployments with five or nine replicas, the protocol reportedly reduced mean latency and outperformed existing state-of-the-art solutions. The work spanned protocol design, correctness reasoning, implementation, and evaluation. Consensus protocols underpin replicated databases and fault-tolerant services, so lower latency without weaker correctness could benefit geographically distributed systems. The source does not detail the AI's exact role, the correctness proofs, or tail-latency results, and independent replication is still pending.

0
ProgrammingDEV Community ·

Developer Builds Lightweight Local-First Finance and Rental App on 256MB Host

A developer built Hishab, a personal finance and rental management app, to combine expense tracking with apartment rent and tenant management in one system. The app is a Vue 3 and Laravel 13 web application packaged as a PWA and Android WebView, designed to work across desktop and mobile devices. Writes are stored in browser IndexedDB first for immediate feedback and then synced to the server in the background using the Web Locks API. It runs on a 256MB shared container using PHP-FPM and SQLite, avoiding heavy infrastructure such as large Docker stacks. The project also supports nested budget categories with recursive rollups and automated daily gzipped database backups with 30-day retention.

0
ProgrammingDEV Community ·

Small Businesses Weigh Passkeys Against Passwords: A Practical Adoption Guide

An article for small business teams argues that passkeys are now practical to adopt, since Apple, Google, Microsoft, and many major services support them. It explains that passwords are vulnerable because they get reused, can be captured by phishing pages, and create ongoing reset and lockout costs. Passkeys use public-key cryptography, with the private key staying on the user's device and the service storing only a public key, which is bound to the site's domain and resists phishing. The piece also notes limitations, including incomplete support in older software, the need for careful account recovery design, and awkwardness with shared logins, and it recommends a gradual, inventory-based migration.

0
ProgrammingDEV Community ·

Bootstrap Resampling Explained: How Sampling With Replacement Estimates Uncertainty

The article explains how the bootstrap method estimates the variability of a sample mean using only one observed sample, by treating that sample as an empirical distribution. Using the small example dataset 2, 3, 4, 4, 7, it shows how drawing five records with replacement produces resamples whose means differ from the original. It stresses that the resampling unit should match the study design, such as resampling complete pairs for correlations or whole groups for clustered data. The author notes that the spread of repeated statistics can estimate standard error, and that reporting the method, seed, and number of replications is essential. The piece also warns that bootstrapping cannot recover groups missing from the original sample and may be unsuitable for extreme-value targets like maxima.

0
ProgrammingDEV Community ·

How to model customs hold deadlines when CBP controls the timing

A customs hold is a decision made by U.S. Customs and Border Protection, which no external system can query, so pipelines should store observable events and derive deadlines instead. Under 19 CFR 151.16(b), presentation for examination occurs only when goods can actually be viewed by an officer, not when a container arrives at the terminal, so presentation timestamps should be set by operator confirmation rather than gate events. CBP has five business days after presentation to release or detain, while a final admissibility determination is due within 30 calendar days, meaning the two windows require different counting rules and a versioned holiday calendar. When CBP detains goods or misses the release window, 19 CFR 151.16(c) requires a notice within five business days, which contains five fields, with the last describing what information could speed the outcome. The author recommends keeping computed deadlines alongside the calendar version that produced them so changes do not silently shift dates.

0
ProgrammingDEV Community ·

Cursor and Harvey lead AI firms' hiring in sales and go-to-market roles, analysis of 2,698 jobs finds

An analysis of 2,698 open jobs across ten AI companies, pulled from their public career boards on 20 October 2026, examines how hiring is split between go-to-market and engineering roles. Using each company's own department labels, 30.1% of the openings fall in go-to-market functions, with Cursor at 67.7% and Harvey at 51.0%, while OpenAI and Anthropic sit in the low 20s despite having the largest boards. Remote hiring is far less common, at 15.4% overall, with ElevenLabs listing 136 remote roles while Scale AI lists none. The author also reports median published salary bands for engineering postings, which are highest at OpenAI. The figures are described as a lower bound, since several customer-facing titles were excluded from the go-to-market count.

0
ProgrammingDEV Community ·

Why AI Slop Is Harder to Detect Than Many Assume

An article argues that the term 'AI slop' is more slippery than it appears, since people often use it to mean anything they dislike rather than a clearly defined category. It notes that AI-generated text once had recognizable traits like stiff, formulaic phrasing, but modern language models can now mimic casual, professional, and personal writing styles convincingly. The author points out that generic, predictable writing predates generative AI, so surface features such as polished grammar or repetitive structure are weak evidence of machine authorship. The piece suggests that judgments about quality and authenticity are shaped by personal opinion and familiarity as much as by objective signals. It concludes that identifying AI content reliably requires looking beyond style to how we define quality and understanding.

0
ProgrammingDEV Community ·

Ollama keep_alive on loaded model can stall requests for other models

With OLLAMA_MAX_LOADED_MODELS set to 1, a request for an unloaded model prompts Ollama to schedule the currently loaded model for eviction once it goes idle. If a request for the loaded model arrives during this wait and includes keep_alive, that value overrides the pending unload, so the loaded model stays in memory for the full keep_alive period. Tests on Ollama 0.40.8 with CPU-only inference showed the second model responding in about 9 seconds without keep_alive but not within 150 seconds with keep_alive set to 30 minutes. The server reports no error and /api/ps looks healthy, and the relevant scheduler messages appear only at debug level. The issue is tracked upstream as ollama/ollama#19182, with a proposed fix in #19190.

0
ProgrammingDEV Community ·

Parallel coding agents can collide on one repo; kitchen habits offer a fix

Running several Claude Code or Codex sessions on the same repository often leads one agent to overwrite another's fixes, even though neither acted incorrectly. The article proposes borrowing three restaurant-kitchen practices: giving each session its own git worktree and branch, so conflicting edits surface as readable merges. It also suggests a shared claims.md file where each agent registers its task under a file lock to prevent duplicate work. Claims carry timestamps so that stale ones from crashed or closed sessions can be reclaimed after a set period. The author notes these rules live in instruction files that agents can skip, and that the approach works best for a solo developer, becoming harder to manage across several people and machines.

0
ProgrammingDEV Community ·

LazyDesk: A Privacy-First Local AI Workspace for Focused Productivity

A developer has built LazyDesk (SlothAgent AI), a minimalist, local-first workspace for intentional productivity, submitted to the Hacktoberfest Open-Source AI Challenge. The app combines a glassmorphism dashboard with focus timers, task and note managers, and an optional AI chat assistant powered by open-weight models run through Ollama. All tasks, notes, and preferences are stored in the browser's localStorage, so personal data stays on the user's device. The project runs with a simple Python server and requires no npm installation or external cloud subscriptions. Its creator says the single workspace reduces context switching across separate timer, planning, note, and AI apps.

0
ProgrammingDEV Community ·

Computer Science Graduate Builds Career in SEO and Content Strategy

A computer science graduate describes how a technical degree led them into SEO and content strategy rather than software engineering. In 2015 they co-founded TechLookBD, which they ran alongside their work for about five years. Their undergraduate project, Autometify, was a touch-based home automation controller. They also held a senior executive role at AjkerDeal.com and an SEO analyst position at Web Integrator Ltd, a US-based agency that went remote in 2019. They now lead SEO strategy at TechLookBD and mentor SEO learners at Prayogik.com, arguing that the degree gave them a grounding in how websites work.

← NewerPage 148 of 2954Older →