Programming

ProgrammingDEV Community ·

Esports Odds APIs Offer Match Odds and Data Feeds for CS2, LoL, Dota 2 and Valorant

Esports odds APIs give developers programmatic access to real-time betting lines from multiple sportsbooks for competitive gaming tournaments. Coverage typically spans titles such as League of Legends, Counter-Strike 2, Dota 2, Valorant and Call of Duty, though providers differ in which games they include. Common markets include match winners, map totals, map handicaps, first kills, round-by-round live betting and tournament futures. Esports data APIs are separate: they supply match results, live scores, player statistics, rosters and patch versions but carry no prices, so betting products usually pair them with an odds feed. Official data typically comes from publishers or tournament organizers through a single licensed distributor per title or league.

0 comments Read more at DEV Community

ProgrammingHacker News ·

PHP releases updated versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35

The PHP project has published new maintenance releases across four of its supported branches, numbered 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The updates were announced on the official php.net website and drew attention on Hacker News, where the post gathered 208 points and 63 comments. The source material provided does not describe the specific fixes or changes included in these releases. Developers running any of these branches can find the release details and download links on the official PHP site.

0 comments Read more at Hacker News

ProgrammingHacker News ·

PHP 8.2.35 Released on GitHub

A new maintenance release of PHP, version 8.2.35, has been published on the php-src GitHub repository. The release was shared on Hacker News, where it gathered 251 points and 88 comments. The source material provides only the release link and discussion metrics, without detailing the specific fixes or changes included. Readers interested in the update can find the release notes and download details on the official GitHub release page.

0 comments Read more at Hacker News

ProgrammingHacker News ·

AI tool uncovers critical remote code execution flaw in PHP

A security write-up reports that an AI-assisted analysis identified a critical remote code execution vulnerability in PHP, the widely used scripting language for web applications. The finding was shared on the Wiz blog under the name PHP2Shell and gained traction on Hacker News, where it drew 97 points and 20 comments. Remote code execution flaws of this kind can allow an attacker to run arbitrary commands on a vulnerable server. The source material available here does not detail the affected PHP versions or whether patches have been released.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Developer Reverse Engineers the Hitster Board Game

A blog post by developer Wuemeli describes an effort to reverse engineer the board game Hitster. The write-up is published on the author's personal blog and was shared on Hacker News, where it has gained a few points. The source text provided does not include the article's full details, so the specific methods and findings cannot be confirmed. Readers interested in the technical approach are directed to the original post for complete information.

0 comments Read more at Hacker News

ProgrammingHacker News ·

OpenAI Explores AI Agents for Surfacing New Leads in Biological Data

OpenAI has published a post describing how it is using AI agents to analyze complex biological datasets in search of new research leads. The write-up focuses on scaling AI-driven research workflows to handle the size and complexity of biological data. The article was shared on Hacker News, where it drew modest early attention. The source material available here provides only the headline, link, and engagement metrics, so specific findings, methods, and results cannot be confirmed from this item alone.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Study Argues Most Advice Reflects the Giver's Own Circumstances

An essay on coached.com contends that much of the advice people offer is well-suited to the person giving it but not necessarily to the recipient. The piece suggests advisors often draw on their own experiences, strengths, and situations without fully accounting for differences in the listener's context. As a result, guidance that worked for one person may fail when applied to someone with different resources, goals, or constraints. The argument encourages people to weigh advice with that mismatch in mind. The source article's full details beyond this framing were not included in the provided text.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Uberblok: An Interactive Museum Explaining ZFS Internals

A storage engineer has built Uberblok, an interactive web museum dedicated to explaining the internals of ZFS, the file system. The site covers topics such as copy-on-write, transaction groups, vdevs, RAID-Z, snapshots, the ARC, metaslabs, the ZIL, and send/receive, using explanations and animated diagrams. The creator built the project with their agent swarm organization, Algotitan, and an accompanying source repository is publicly available on GitHub. The author has invited corrections from readers with deeper expertise in the subject. The project was shared on Hacker News, where it had received limited attention at the time of posting.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Japanese Filenames Broke a Mac App's Code Signature After DMG Copy

A Mac app was reported as damaged after distribution, with codesign verification failing on a sealed resource. The developer traced the problem to four Japanese filenames containing voiced sound marks, which were converted from NFC to NFD normalization when the app was copied from a DMG. Because the altered names no longer matched those sealed during signing, the signature check failed even though the names looked identical on screen. The fix bundles the Japanese-named files into a single ASCII-named file that is extracted on first launch with NFC-normalized names. After this change, code signature verification passed following the copy.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Local AI Tool That Writes and Verifies CTF Reverse-Engineering Challenges

A developer created SlothCTF, an open-source tool that uses a locally run open-weight model to generate reverse-engineering CTF challenges from a short text prompt. Early attempts failed because language models repeatedly miscalculated byte-level XOR encoding, so the design was changed to have the model write C programs while the compiler performs the exact arithmetic. Each generated challenge is compiled, executed, and checked to confirm the flag is recoverable, that correct input is accepted and wrong input rejected, and that the plaintext secret does not appear in the binary's strings. The developer reported that all 20 of their planned challenge prompts produced valid challenges, each including source code, a compiled binary, a player README, and an organizer walkthrough. The project was submitted to a Hacktoberfest open-source AI challenge.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Modder's Endless Legend 2 automation tools expose solved city-layer mechanics

A modder has released Endless Legend 2 mods that automatically choose the best population growth, swap jobs, and buy foundations, aiming to reduce tedious micromanagement in wide and late-game play. Players praised the time savings, with one reporting hundreds of fewer clicks. The author argues this reflects that many city-layer decisions have a computable optimal answer, making them data entry rather than meaningful choices. Others counter that the dense adjacency puzzle is a deliberate depth that fans enjoy, though the mandatory nature of district management means solved tasks crowd out the decisions that remain open. The author concludes that the real issue is manual repetition of solved decisions, and suggests Amplitude should incorporate such automation into the game.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

n8n, Zapier and Make Compared on Cost, Control and When to Write Custom Code

The article compares Zapier, Make and n8n, three tools for connecting apps and automating routine work. Its central point is that they bill differently: Zapier charges per action, Make per module, and n8n per workflow run, so costs diverge as workflows grow. The guide reviews October 2026 pricing from Zapier's and n8n's public pages and explains Make's billing without publishing exact figures. It recommends Zapier for simple automations, Make for visual branching at lower step prices, and n8n for long, high-volume or self-hosted workflows. It also argues that teams needing custom interfaces, memory or changeable rules should consider writing custom code, possibly alongside n8n for background jobs.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developers Report Unexplained Obfuscated Code in Next.js and PostCSS Config Files

A GitHub community discussion described obfuscated code appearing in next.config.js and postcss.config.js without any manual edits by developers. The original poster, maewhyxng2-prog, reported the changes surfacing during build or linting checks, raising concerns about unauthorized injection and supply chain risks. Their team responded with stricter static analysis via CodeQL and cryptographic hashing of configuration files, yet the source of the mutations remained unidentified. A community member, 4Raisan, recommended isolating the exact pipeline step where the files change, preserving evidence, and reproducing the issue in a clean environment. The discussion highlights how even well-secured projects can experience unexpected configuration changes that require systematic investigation.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

2026 Marks a Shift Toward Reliable AI Agents Built With Harness Engineering

The AI industry's focus has moved from simply impressing users with prompts toward making agents dependable enough to run repeatedly and safely at scale, as highlighted in a recent China Academy of Information and Communications Technology keyword report. Developers now emphasize the 'harness,' the surrounding code, constraints, and feedback loops that keep a language model on task during long-running jobs, with open-source harness releases from firms like OpenAI and DeepSeek reflecting the trend. Meta has introduced new models featuring Active Memory, which retains user details across conversations, and Active Focus, which helps agents adapt rather than abandon tasks after errors, targeting professional work in law, finance, and software development. Separately, MiniMax's M3.1 Flash model reportedly delivers threefold faster inference and 70% lower usage costs, easing the expense of running agents at scale.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

NestJS Tool Calling: Exposing Service Methods to LLM Agents

Developers can let an LLM invoke NestJS code by decorating a service method with @Tool() and its parameters with @ToolParam(). The model only requests a function call, and the application itself executes the method and returns the result for the model to use in its answer. The guide uses a product catalog service as its example, with a checkStock method that reports inventory for a SKU and throws an error when the product is missing. The service is registered in a module and then listed in the agent's tools configuration, which gives the agent access to every tool-decorated method of that module's providers. The tutorial is part 2 of a series, and its examples were tested with NestJS 12, LangChain 1.x, Zod 4, nestjs-langchain 2.0 and Node 22.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Chunking and Hybrid Search Shape RAG Quality in SaaS Products, Guide Finds

A guide drawing on two years of production RAG deployments argues that practical success depends on a few key decisions. It states that chunking strategy accounts for most retrieval quality, since fixed-size chunks break semantic units like sentences and table rows. The article reports that embedding model choice matters more than the choice of vector database, and that hybrid dense-plus-sparse search generally beats either method alone. It also describes reranking as offering the largest quality gain for the least computational cost. The piece explains that RAG grounds LLM answers in an organization's own data to reduce hallucinations, and is most useful for document Q&A and product knowledge tasks.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GitHub's ubuntu-latest move to 26.04 is rolling out unevenly; re-run checks instead of assuming

GitHub's migration window for ubuntu-latest runs from October 19 to November 19, 2026, shifting the image from Ubuntu 24.04 to 26.04 in stages rather than all at once. A developer's static scans of three repositories on October 20 and 21 showed no changes, but the scanner reads workflow files only and cannot detect when a given repository's image switches. Workflows that have not run since October 19 have not yet been tested against the new image, and the two images differ in 22 toolset entries, so earlier green results may not hold. Separately, the macos-14 runner image retires on November 2, 2026, and any workflow still referencing it will fail completely on that date.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Postgres migration passed in staging but locked a production checkout table for six minutes

A schema migration that ran in 40 milliseconds in an empty staging database caused a six-minute outage on the checkout table in production. The migration added a column, backfilled it with an unbatched UPDATE, and then set NOT NULL, which together rewrote millions of rows and held an exclusive lock throughout. The author explains that the staging environment, built from migration history rather than real data, could not reveal these costs. The recommended fixes include a production-shaped staging dataset, batched backfills, adding constraints in non-blocking steps, and setting lock and statement timeouts to surface problems early.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

PHP Announces Emergency Security Release for Two Critical Flaws on October 21

The PHP security team has scheduled an emergency release for October 21, 2026, at 14:00 UTC to fix two vulnerabilities, each rated 9.2 under CVSS v4.0. Users are urged to prepare for rapid upgrades, and the team says the release could come sooner if details go public or exploitation is observed. As of now, PHP has not published the affected versions, fixed version numbers, or technical details of the flaws. CERT-EU has identified the issues as CVE-2026-109618 and CVE-2026-109619, and cites possible unauthenticated remote code execution, though it has not published technical analysis. Security agencies advise identifying all PHP deployments, prioritizing internet-facing systems, and confirming update procedures until official fixed versions are released.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Local, Browser-Based Design Tool Canvas Anvil for Faster, Private Work

A developer grew frustrated with cloud-based design tools that required slow server round-trips and sent client files to third parties. To address this, they built Canvas Anvil, a focused workspace for designers and media creators that runs locally in the browser. The tool uses on-device AI to deliver instant feedback on design principles such as contrast, spacing, and visual hierarchy, rather than generic aesthetic suggestions. The developer says the local-first design keeps sensitive work on the user's machine and lets the tool keep working without an internet connection. The article presents the project as a deliberately narrow tool aimed at making design decisions faster rather than attempting to do everything.

0 comments Read more at DEV Community

← NewerPage 187 of 2980Older →