SShortSingh.

Programming

0
ProgrammingDEV Community ·

Retired agent mesh failed on uncommitted work and missing config, not laziness

An analysis of a retired agent fleet's public repository finds it produced hundreds of literature reviews on philosophy and systems theory, yet little verifiable output. Two-thirds of those reviews listed their status as uncommitted or awaiting landing, meaning the work was never finalized. A landing script's file enumerator missed four files outside its directory patterns and exited with success, so unlanded work went unreported. Separately, a study-field registry file was gitignored and did not migrate to a new machine, leaving two literature-reading lanes without subjects while still reporting healthy status.

0
ProgrammingDEV Community ·

LeanPort Brings Formally Verified Lean 4 Decision Logic Into Go Applications

LeanPort is a small tool that lets developers write decision logic and proofs in Lean 4 and then consume the result from Go as an ordinary package. It targets small but consequential functions, such as authorization checks, whose edge cases tests may miss, since formal proofs cover every input in the modeled domain. The workflow splits into a maintainer path that checks proofs and generates a C/cgo bridge with an idiomatic Go API, and a consumer path where downstream builds need only Go and a C toolchain. The generated files are committed to the repository and treated as build output rather than hand-edited code. The project's example is an authorization policy for a command-line tool, where access depends on facts like authentication, admin status, and resource ownership.

0
ProgrammingDEV Community ·

Staged retrieval and chunk boundaries for a travel itinerary planner

The piece argues that retrieval quality and latency trade off against each other in itinerary planning, since large chunks add noise while small ones can separate facts from their conditions. It recommends staged retrieval with explicit collections, bounded queries, traceable source context, and chunk boundaries tied to traveler decisions. A ferry-timetable alerting example illustrates why an answer must include the sailing, dates, route, restriction, and source together. The author offers a shortlist of vector and search services (Pinecone, Weaviate, Elasticsearch, Infrai) but stresses these are not benchmarks and must be tested on one's own corpus. The proposed pipeline has four observable stages (page ingestion, chunk construction, bounded retrieval, cited answer), with metadata filters and snapshot-based freshness to keep changes auditable.

0
ProgrammingDEV Community ·

No Firewall Exists for Prompt Injection in AI Agents, Engineer Argues

An applied AI engineer at LuumenAI, a platform for SAP and ERP observability, argues that language models cannot reliably separate instructions from untrusted input, so conventional security controls fall short. The piece notes that the model treats operator prompts, user requests, and pasted content as one stream, which means text an attacker places in front of it carries real authority. It cites the EchoLeak vulnerability in Microsoft 365 Copilot, disclosed by Aim Labs in June 2025 and rated CVSS 9.3, in which a crafted email caused the assistant to exfiltrate sensitive data without any user action. The author frames the fix as controlling what the model can read and what it is permitted to do, and says a follow-up paper will address containment after the model acts.

0
ProgrammingDEV Community ·

Slothshot Uses a Local Gemma Vision Model to Rename Screenshots by Content

A developer built slothshot, a Go command-line tool that renames screenshots after what they show so they can be found through search. The author had 39 screenshots across three default naming schemes from macOS, GNOME and Flameshot, none of which described their contents. The tool runs Gemma 4 E4B, a 4-bit open-weight vision model served locally through llama.cpp, so no images leave the machine. It offers a dry-run default, an apply mode, an undo option that restores old names from a log, and a watch mode that names new screenshots as they appear. The author acknowledges errors, such as misspelling a brand name and omitting a key error message, but argues that imperfect names are still easier to search than default timestamps.

0
ProgrammingDEV Community ·

Blocking Embedding Calls Caused a 40% Request Drop in a vLLM Semantic Router Under Load

A FastAPI gateway wrapping the vLLM semantic router began silently discarding requests during a 2 AM traffic spike, with queue latency rising from about 80ms to 4.8 seconds. The root cause was a synchronous embedding computation inside the router call, which blocked the asyncio event loop and prevented it from accepting new requests. Requests that exceeded the internal five-second timeout were discarded without any error response. The fix moved the router call into a thread pool using asyncio.to_thread so the event loop stays free, and the author also benchmarks routing latency against a multi-provider relay.

0
ProgrammingDEV Community ·

Solo developer's one-bullet puzzle game Bloop changed after player feedback

Bloop is a mobile puzzle game built entirely by one developer, in which each level gives the player a single bullet to bounce off walls and clear every target. The game is now live on Google Play and the App Store with 300 levels, though the developer describes it as still in progress. Early feedback led to a switch from touch-based aiming to a slingshot-style pull-back control, and animated, reactive enemies that proved the most popular change. Some levels were found to be unbeatable, so the developer built an automated checker that tests every level with the game's physics and requires a realistic margin for aiming or timing. All 300 levels passed the checker on October 15, and future plans include new enemy types and additional galaxies.

0
ProgrammingDEV Community ·

Millions of Redis, MongoDB and LDAP Services Found Exposed Online

Internet scan data from October 2026 shows roughly 3.2 million Redis and 1.9 million MongoDB services responding on public-facing ports, with about 1.1 million LDAP services also visible. The article notes that these counts reflect services that answered a scan, not whether they are authenticated, hold sensitive data, or are owned by the organization. Researchers attribute the pattern to misconfiguration, such as databases bound to all interfaces with weak or disabled authentication, rather than to a specific unpatched vulnerability. The exposure can lead to data disclosure, unauthorized writes, and in some cases command execution, so the authors argue such instances should be treated as potential host compromises. They recommend auditing exposed instances against asset registers, prioritizing those without authentication, and verifying bind addresses and network policy.

0
ProgrammingDEV Community ·

Developer proposes unified AI gateway to simplify access to 250+ LLM models

A developer is validating an idea for a Unified LLM API Gateway to address the difficulty of managing multiple AI provider integrations. The proposed proxy would sit between an application and over 40 AI providers offering more than 250 models. It would be compatible with the OpenAI SDK, requiring only a change to the base URL and API key, and would automatically route requests to backup models during outages or rate limits. A single prepaid balance would also cover charges across all models. The developer is seeking community feedback before committing to building a minimum viable product.

0
ProgrammingDEV Community ·

Keeping Financial Ledgers in Sync: Asynchronous Reconciliation for Fintech Engineers

A developer guide explains why payments in fintech and billing systems settle asynchronously, unlike instant commits in a single database. External banking partners deliver statements in formats like CSV, JSON, or ISO 20022 XML, often at day's end, and these must be matched against an internal double-entry ledger. The article compares this process to client-side state hydration and eventual consistency in web applications. It warns that failing to reconcile correctly causes ledger drift, compliance failures, and accounting errors. The guide covers matching algorithms, exception handling, and TypeScript implementations for reliable reconciliation engines.

0
ProgrammingDEV Community ·

Developer Builds PowerShell Tool That Auto-Sorts Cluttered Files Into Folders

A developer has created Lazy Organizer, a PowerShell script that automatically sorts files in a folder into categorized directories. The tool was built to eliminate the repetitive chore of manually organizing documents, images, and notes. It scans a directory, checks file extensions, creates folders as needed, and moves files accordingly, such as sending PDFs and DOCX files to Documents and JPGs to Images. The project was submitted for Hacktoberfest's open-source AI challenge and the 'Slow and Steady' theme. The developer plans to add local open-source AI models like Gemma, Qwen, or TinyLlama for content-based classification, citing privacy and offline use.

0
ProgrammingDEV Community ·

Building a Python Text-to-Speech App with the ElevenLabs API

A DEV Community tutorial explains how to create a Python program that converts written text into spoken audio using ElevenLabs' neural voice API. It notes that modern text-to-speech has moved beyond robotic output to capture emotion and intonation, which makes it useful for chatbots, accessibility tools, and games. The guide covers setup steps, including creating an ElevenLabs account and API key, installing the httpx, python-dotenv, and pydub packages, and installing ffmpeg. It then provides an asynchronous function that sends text to the API and saves the returned MP3, with adjustable stability and similarity settings. The article concludes with a playback helper and a sample script that generates and plays speech.

0
ProgrammingDEV Community ·

Developer moves Claude Code hooks from shell scripts into a single in-process module

A developer building workkit, a Claude Code workflow kit, moved most of its hooks out of shell scripts and into one plugin module loaded once per session. Each hook fire had previously spawned several processes, taking roughly 90 ms on an M1 Max, while a function call within a running process takes near zero. The design isolates host-interface code in one file, so the hook logic can be tested as plain functions without Claude Code. The same week, the agent's GitHub bookkeeping was changed to post as a GitHub App bot, with a hosted service holding the private key and issuing short-lived per-repo tokens. The article also notes a separate framework issue where a backend self-test created 91 test users at once, triggering auth functions.

0
ProgrammingDEV Community ·

How Store-and-Forward Works Inside a Linux Router, From Textbook to Kernel

A DEV Community article examines the store-and-forward principle, which requires a packet switch to receive a full packet before transmitting its first bit. It explains that the wait arises because the error-check field sits at the end of the frame, so integrity can only be verified after the last byte arrives. Using a Linux router with IP forwarding as the test case, the author traces how the network card buffers the complete frame in memory before the kernel routes it. The piece calculates transmission delay as L/R, showing that a single router between two hosts adds a second L/R, for a total of 2L/R rather than L/R. Worked examples use a 1500-byte packet on a 100 Mbps link, with refinements for real Ethernet overhead.

0
ProgrammingDEV Community ·

Testing whether an approved vendor correction carries into an agent's next run

A corrected answer does not automatically affect future agent runs, so the article argues that integration tests must trace the correction from approval through persistent storage into the next run's context and output. The example follows a misspelled vendor name, "Cobolt Cloud," which a user corrects to "Cobalt Cloud" and approves, causing an alias to be saved in the client's vendor namespace. The alias is retrieved in a later extraction step, where a matching vendor raises confidence, and the author provides commands to reproduce the walkthrough using the published Areev package. The tests use synthetic fixtures and mock integrations, so they show persistence and output changes in a controlled setup rather than extraction accuracy on real invoices or evidence of model learning. The article recommends applying the same boundary checks to other workflows, since a memory write can succeed while a later step still fails.

0
ProgrammingHacker News ·

Anthropic Publishes 'Claude Duet' Article on Claude.com

A new article titled "Claude Duet" has been published on the Claude.com resources section and was shared on Hacker News. The post gained 17 points and drew 3 comments from readers. The available source material provides only the title, link, and engagement figures, so the article's specific content and purpose cannot be confirmed from this information alone. Readers interested in the subject are directed to the original article for details.

0
ProgrammingHacker News ·

Plex Reportedly Lays Off Its Entire Player Team

A post on Hacker News pointed to a Plex forum thread about a 2026 beta bug affecting iOS and tvOS playback of 4K Dolby Vision and HDR10 content. The thread describes an infinite spinning circle that prevents these videos from playing. The Hacker News item linking to it claims that Plex laid off its whole player team. The source material does not confirm the layoff or give further details such as dates or the number of employees affected. The discussion had 26 points and 8 comments at the time of collection.

0
ProgrammingHacker News ·

Meta Faces $25 Billion Penalty Over Alleged Privacy Deception on Facebook

The New Mexico Department of Justice has announced a historic $25 billion penalty against Meta over Facebook. The penalty stems from allegations that the company misled users about how their privacy was protected on the platform. The state presented the outcome as another landmark enforcement action against large technology companies. The source material available is limited to the press release link and a brief Hacker News discussion, so further details on the case's legal basis and timeline are not confirmed here.

0
ProgrammingHacker News ·

Google staff resign over company's AI contracts with the military

Several Google employees have resigned in protest against the company's artificial intelligence contracts with military clients. The departures reflect growing internal discontent over the use of Google's AI technology in defense work. The story was reported by the BBC and gained traction on Hacker News, where it drew attention from the tech community. The available source material is limited, so the specific number of resignations, the exact contracts involved, and the company's formal response are not detailed here.

← NewerPage 169 of 2968Older →