SShortSingh.

Programming

0
ProgrammingHacker News ·

Dutch National Cyber Security Center Website Goes Offline, Reportedly Tied to PHP Stack

The website of the Dutch National Cyber Security Center (NCSC) is currently unavailable, according to a post shared on Hacker News. The post, which gained 129 points and 38 comments, attributes the outage to the site's use of PHP. The article text provided is limited to a link and discussion metadata, so the specific technical cause has not been confirmed by the NCSC or independent reporting. The NCSC's news page is the referenced source for updates on the situation. Readers should treat the PHP explanation as a claim from the community discussion rather than an official statement.

0
ProgrammingHacker News ·

Gulf Oil Exports Reportedly Exceed Prewar Levels Despite Iranian Attacks

A report indicates that oil exports from the Persian Gulf region have risen above their levels before the recent conflict, even though Iran has carried out attacks in the area. The Maritime Executive article on which the story is based is the primary source for these findings. The source material available here offers only the headline and link metadata, so specific figures, shipping volumes, and details of the attacks cannot be confirmed. The story was shared on Hacker News, where it drew modest attention with 15 points and 6 comments. Readers seeking the full data and context should consult the original report directly.

0
ProgrammingHacker News ·

Qwen3-Coder Produces Less Secure Code When Prompted With a US Persona

A Hacker News post highlights research from Hirundo suggesting that the Qwen3-Coder model generates code with weaker security when it is instructed to adopt a US-based persona. The finding was shared on Hacker News, where it gathered 66 points and 22 comments. The linked blog post from Hirundo reportedly details the vulnerabilities observed in the model's outputs. The article text provided is limited to metadata, so the specific methodology and full results are not included here.

0
ProgrammingDEV Community ·

Children and adults adjust their behavior as settings and activities change

A child who has been speaking loudly in a park is asked by an adult to lower their voice upon entering a library, where others are reading. The explanation focuses on what people nearby are doing rather than a simple command for silence. The article notes that the child's enjoyment is not denied, only its expression changes in relation to others sharing the space. It argues that appropriate behavior depends on the current activity, rules, and who may authorize exceptions, not just the place name. The piece frames this as a social capability that adults also use when entering new workplaces or communities.

0
ProgrammingDEV Community ·

Testing how a React build responds to a single label edit

The guide proposes comparing a build run with no source changes against one run after a small React label edit, so the two results answer different questions. It recommends using a visible change, such as a button label, so the output can be checked directly rather than relying on timing alone. Developers are told to add a distinct build script without replacing existing ones, record package versions, and run the build twice with retained local state. The edited output is then served locally and the button text is inspected to confirm the change appeared. The article also cautions that cached responses or task-runner restores can make a stale label appear, so the served directory and browser caching should be checked before drawing conclusions.

0
ProgrammingDEV Community ·

Why one developer would rethink Neo4j for GraphRAG stacks in 2026

A developer argues that Neo4j, the default graph database choice, may be a poor fit for agentic AI workloads that demand fast multi-hop graph lookups combined with vector search. The author notes that Neo4j was designed for analytics and system-of-record use cases rather than high-velocity LLM agent queries. Teams often end up running Neo4j alongside a separate vector store and document store, creating operational complexity, and enterprise licensing costs can rise as scale grows. The piece recommends five alternatives: ArcadeDB, FalkorDB, TigerGraph, ArangoDB, and one more, each suited to different performance and architectural needs. The author frames the choice as one of matching the database to the workload rather than defaulting to a familiar tool.

0
ProgrammingDEV Community ·

Kubernetes Deployments Can Kill Long-Running Sidekiq Jobs Mid-Execution

A DEV Community article explains that background jobs running on Sidekiq workers in Kubernetes were quietly dying during deployments. The cause is a mismatch between Kubernetes' pod termination sequence and Sidekiq's shutdown behavior: Kubernetes sends SIGTERM and then SIGKILL after a 30-second default grace period, while Sidekiq's default shutdown timeout is 25 seconds. Jobs still running at the deadline can be pushed back to Redis and rerun from scratch, causing duplicated work, or be killed outright and lost. The author notes that symptoms like unexpected retries, duplicated effects, and abrupt worker logs appear specifically around deploys, scale-downs, and node drains. The article goes on to describe a fix involving a preStop hook, adjusted grace periods, and configuration changes, along with testing guidance.

0
ProgrammingDEV Community ·

From Docker Compose to Terraform on AWS: Why Running Locally Is Not Enough Evidence

A developer explains that a docker compose setup proves code runs but not that a system is secure or auditable, which matters for patient-identifiable NHS data. The Terraform configuration describes a 46-resource AWS stack and is planned in CI using mock credentials, since an earlier real deployment was torn down. The author also found that the repository's Gitleaks configuration disabled all default rules, so the secret scan had been silently ineffective for months. Porting the GitLab pipeline to GitHub Actions exposed several such problems once it ran for the first time. The piece argues that continuous checking of infrastructure code is needed to show a system works, not just to run it.

0
ProgrammingDEV Community ·

Failed AI Visibility Checks Should Not Be Counted as Brand Misses

A reporting guide argues that dashboards tracking brand mentions in AI answers should not treat failed or pending checks as misses. Using an eight-check example with five completed, two failed, and one pending, it notes that dividing by all rows yields a misleading 25%, while dividing by classified completed answers gives 40%. The author recommends showing coverage alongside the rate, distinguishing unclassified answers from negative ones, and returning no rate when nothing is classified. The accompanying code requires a strict boolean for classification and was tested against boundary cases. The guide also warns that retries counted as separate observations can distort the denominator upstream of the reporting logic.

0
ProgrammingDEV Community ·

Data platform design, not just the model, determines the risk of putting AI agents on business data

The article argues that much of the risk in deploying AI agents on organisational data lies in the data platform rather than the model itself. It uses billing scenarios such as mid-period plan upgrades and downgrades to show how commercial rule decisions shape the revenue figures and invoices that analysts and customers depend on. Agents, the author says, need documented rule history, attributed corrections captured at the time of entry, and enforced limits on what they can change. An illustrative support case shows an agent misreading stale price data, issuing credits that bypass per-transaction approval limits, and acting on unscreened instructions, with costs traced mainly to platform design. The piece also stresses that business definitions should be owned by the business, with analytics and data engineers handling implementation and guarantees.

0
ProgrammingDEV Community ·

Two PHP Flaws Rated 9.2 Under CVSS v4.0 to Be Fixed in Upcoming Release

Two vulnerabilities in the PHP codebase have each been rated 9.2 on the CVSS v4.0 severity scale, indicating a serious risk. The flaws reportedly arise from coding oversights, gaps in security testing, and previously unknown weaknesses in the language. If exploited, they could allow attackers to run arbitrary code, gain unauthorized access, and compromise entire web applications. A forthcoming PHP security release is slated to patch these issues, and administrators are being urged to apply it promptly.

0
ProgrammingDEV Community ·

FACTS.md pattern keeps Claude from inventing prices in customer replies

Small businesses using LLMs to answer customers often get confident but wrong replies, such as unapproved discounts or unlisted delivery promises. The proposed fix is to have the model answer only from a single FACTS.md file that lists prices, hours, and policies. If a fact is absent, the model replies with a holding message and flags the gap to the owner as a to-do. The author tested this on a fictional coffee shop across 11 prompts, which surfaced issues like replies in the wrong language that were then added as rules. The approach is only as reliable as the FACTS.md file, and the author recommends a human review drafts before sending.

0
ProgrammingDEV Community ·

Three ways to take a full-page screenshot in Chrome, from built-in tools to one click

Chrome can capture an entire web page, top to bottom, without installing any software, though the feature is not prominently displayed. The article describes using DevTools' Command Menu to choose "Capture full size screenshot," which saves a PNG to the Downloads folder. It also explains capturing a full page at a specific mobile width through DevTools' Device Toolbar, with a warning about device pixel ratio affecting image size. Finally, it presents a free Chrome extension called Capture by RATdeck, disclosed as made by the author's team, which automates scrolling, handles sticky headers and scrollable panels, and includes built-in editing tools.

0
ProgrammingDEV Community ·

Collapsed sidebar clipped a dropdown menu due to implicit overflow-x behavior

A QA report flagged that the '+ Create' dropdown was cut off at the right edge when the sidebar was collapsed to 60px, while it rendered correctly at 244px. The cause was that setting overflow-y: auto forces an unspecified overflow-x to compute to auto, turning the sidebar into a scroll container that clipped the 190px menu. The developer could not remove the vertical scroll, so the menu is now positioned with position: fixed only in the collapsed state, using coordinates from the button's bounding rectangle. Console checks confirmed the menu sat outside the sidebar and fully within the viewport. The fix was limited to the collapsed state to avoid disturbing existing expanded-state behavior.

0
ProgrammingDEV Community ·

Kinewright adds Wheels, a kinematic engine for four-wheeled bodies

Kinewright, a project with an existing human engine, now includes a second engine called Wheels that models how a four-wheeled body moves. It is kinematics only, with no tyres, suspension, or physics, and all reported figures are traced from the engine's own runs rather than measured. The engine has passed three stages, covering a baseline turning-radius check, a capability contract across shell types and nine manoeuvres, and a driveable shell that a person can control from a keyboard. Each drive is recorded in a journal that replays identically across Linux, Windows, and macOS. The project explicitly is not a path planner, autonomy stack, vehicle simulator, or hardware controller, and it still lacks obstacles and collision handling.

0
ProgrammingDEV Community ·

hivemux: a tmux sidebar that flags which Claude Code session needs input

Developer Esteban Kim built hivemux, a free, MIT-licensed tmux sidebar for managing several Claude Code sessions at once. The sidebar shows whether each session is running, waiting for user input, or finished, and sends a macOS notification when one needs attention. Keyboard shortcuts and clicks let users jump straight to a session, including the one that has waited longest. Because state lives in tmux, sessions survive closing the terminal, and tmux-resurrect restores them with claude --resume after a reboot. The tool runs without a server or telemetry and currently targets macOS, with Linux likely but untested.

0
ProgrammingDEV Community ·

Claude and a weather MCP server used to plan a Menorca trip

A Meteosource employee planned a family trip to Menorca by connecting Claude to the company's weather MCP server using only a free API key. The model requested forecasts for two locations on opposite sides of the island, then hourly data for the specific south-coast village where the group was staying. Using that data, Claude produced a day-by-day itinerary matched to rain, temperature, and wind conditions. It also linked wind direction to geography, sending the group to sheltered south-coast beaches on a windy north-wind day. Follow-up requests, such as adding lighthouse visits, were answered with suggestions split by which coasts were suitable under the forecast conditions.

0
ProgrammingDEV Community ·

US Army solicits self-erasing autonomous offensive agents, raising forensic concerns

The US Army has opened a solicitation for ECHOTRIBBLE, a framework of offensive autonomous agents that reportedly infiltrate systems, replicate to other machines, neutralize targets, and delete themselves before detection. The named targets include iPad, macOS, and Windows devices, and the design calls for minimal human oversight. Analysts argue that the self-destruct feature threatens forensics, since traces left on endpoints would be erased and attribution would become difficult. The same week, Microsoft expanded its Guardian Agents offering, which emphasizes identity, logging, and containment for AI agents. The article also notes that legal responsibility for breaches caused by autonomous agents remains unassigned.

0
ProgrammingDEV Community ·

Where Coding Agents' Token Costs Come From, and Seven Ways to Reduce Them

A coding agent's bill can rise even for a simple question, because each request re-sends the entire session history. Claude Code includes the full conversation with every request, and tool use adds further requests that resend that context. Prompt caching lowers the price of repeated context but does not eliminate it, while long sessions, cache misses, background tasks and compaction all add cost. Output tokens, including extended thinking, are priced at five times the base input rate, so the model's responses are a significant driver too. The article recommends measuring usage first, then applying seven levers in order: caching, scoping, controlling output, routing, batching and budgeting.

0
ProgrammingDEV Community ·

Brief: A Browser-Only AI Tool That Distills Notes in Under a Second

A developer has released Brief, a free web app that converts raw text and Markdown files into keypoints, study Q&A, executive summaries, or action items. The app has no backend database, sending requests directly from the browser to Groq Cloud using the user's own API key so that data never passes through an intermediate server. Its creator says Groq's LPU hardware lets even lengthy inputs, such as a 4,000-word lecture transcript, render in under a second. Brief supports drag-and-drop uploads of .txt and .md files and runs on Firebase Hosting without requiring account creation. The developer is seeking feedback and feature suggestions on which output formats would be most useful.

← NewerPage 190 of 2982Older →