SShortSingh.

Programming

0
ProgrammingHacker News ·

Linkit: A Free, Open-Source AI Bookmark Manager Shared on Hacker News

A developer has introduced Linkit, an AI-powered bookmark manager, on Hacker News under the Show HN category. The project is described as free and open source, and its code is hosted on GitHub under the blue-idea account. The post had gathered 3 points and no comments at the time the information was recorded. The source material provides few details beyond the project's name, its open-source status, and its links, so its specific AI features are not described here.

0
ProgrammingDEV Community ·

Cómo planificar una casa inteligente DIY con ESP32 y AWS antes de soldar

Una guía propone definir primero qué debe hacer la casa inteligente, como control desde el celular o por voz y funcionamiento sin internet. Compara la opción local con Home Assistant y ESPHome frente a una arquitectura en la nube con AWS, según el control remoto, el mantenimiento y la curva de aprendizaje. Sugiere elegir controladores ESP32, relés, entradas y alimentación adecuada, además de cajas aptas para instalaciones eléctricas. Recomienda usar una pasarela con ESP-NOW, Zigbee o Thread en lugar de conectar cada dispositivo al Wi-Fi. Advierte que trabajar con la red eléctrica de 230 V o 110-127 V es peligroso y conviene contar con un electricista.

0
ProgrammingHacker News ·

Researchers crack eMudhra certificate authority keys in milliseconds, exposing weak entropy

A blog post by security researcher Scott Helme reports that private keys belonging to eMudhra, an Indian certificate authority, could be recovered in milliseconds. The weakness reportedly stems from only eight bits of randomness being used in key generation, which made the keys trivially guessable. The findings raise concerns about the trustworthiness of certificates issued under the affected authority. The article was shared on Hacker News, where it drew 72 points and 25 comments from readers discussing the implications.

0
ProgrammingHacker News ·

UNEP Report Says Paris Agreement's 1.5°C Target Is Slipping Out of Reach

A United Nations Environment Programme emissions gap report, as covered by UNRIC, concludes that the 1.5°C warming limit set by the Paris Agreement is no longer achievable without a significant overshoot. The assessment is based on current emissions trajectories and the gap between national pledges and the reductions needed. Authors argue that continued delays in cutting greenhouse gases have narrowed the window for staying within the target. The report underscores the need for faster decarbonisation and stronger national commitments. The article was shared widely on Hacker News, where it drew substantial discussion.

0
ProgrammingDEV Community ·

Generating Article Audio in WordPress with Kokoro: Admin-Side Creation, Stored Playback

A browser-based text-to-speech demo typically stops once audio plays, but a WordPress article needs the recording saved and attached to the post. The proposed workflow generates speech in the site owner's admin browser with Kokoro, encodes it into a file, and uploads it to the Media Library so readers can play it without loading the model. The author advises deciding what text gets read, since tables and code may not work well when spoken, and recommends checking the prepared text and listening to samples. Recording runs on the owner's machine while the tab stays open, so it is not an overnight server task, and each recording should be tied to a hash of the spoken text so edits flag it as outdated. Finally, the author notes that local generation avoids sending text to a TTS provider, though the WordPress host still stores and serves the audio.

0
ProgrammingDEV Community ·

Replacing a SaaS Tool With AI Agents: The Hidden Costs Beyond the Subscription

A Latent Space hackathon tested whether a $43,000-a-year event speaker-management platform could be replaced with AI agents built over a weekend, drawing 72 submissions and roughly 100 billion tokens. The article argues the real challenge is not building the replacement but the ongoing work afterward, such as maintenance, documentation, and handling edge cases the vendor previously absorbed. It suggests businesses run a replacement in parallel with the existing subscription for two to four weeks to log gaps before cancelling. It also notes that once a replacement is live, the business effectively becomes its own support contract when something breaks. Replacement makes most sense for boring, well-specified, high-volume tasks, while complex or high-stakes functions may still justify paying for the vendor's service guarantees.

0
ProgrammingDEV Community ·

Juniper SRX GRE Flaw CVE-2026-33792 Has No Published Workaround; Architectural Mitigations Suggested

Juniper's security bulletin JSA112186 describes CVE-2026-33792, a stack-based buffer overflow in the srxpfe process on Junos OS for SRX Series devices, triggered by a crafted packet sent to a configured GRE tunnel. The flaw requires no authentication or user interaction and can lead to root code execution or denial of service, with a CVSS 3.1 score of 9.8. Because the vendor has published no workaround, the article argues that organizations needing GRE should reduce exposure by limiting permitted peers, relocating tunnel endpoints behind the perimeter, or wrapping GRE inside authenticated IPsec. These measures do not fix the underlying overflow but limit who can reach the flaw and what an attacker can gain. The piece also notes that internet scans returned over a thousand matching Junos assets, highlighting the need for each organization to assess its own tunnel inventory.

0
ProgrammingDEV Community ·

Microsoft completes pre-training of 2.8-trillion-parameter MAI-Base-2 model, plans partner licensing

Microsoft AI announced on 15 October 2026 that pre-training of MAI-Base-2, a mixture-of-experts foundation model with 2.8 trillion total parameters and 80 billion active per token, is finished. The run used 16,000 Nvidia GB200 GPUs over 38 days in August and September 2026. Microsoft says its training recipe is more FLOPs-efficient than DeepSeek-V4-Pro-Base and its earlier MAI-Base-1, though those comparisons rest on scaling-law fits that include the model's own score. The model is now moving into post-training, and Microsoft plans to license its weights to trusted partners through Foundry, with no open-weights release, price, or date announced.

0
ProgrammingDEV Community ·

Building a Context-Aware Customer Support Agent on MongoDB Atlas

A tutorial by Samuel Molling describes how to build a customer support agent using MongoDB Atlas. The core is a retrieval-augmented generation pipeline that combines vector and lexical search, merges the ranked results with Reciprocal Rank Fusion, and reranks candidates with a cross-encoder before an LLM writes the answer. The author argues that real support conversations are context-dependent, so follow-up questions like "how much is that?" cannot be searched on their own and must be rewritten using conversation history. Answers may come from documentation, resolved past tickets, or customer account data, and some requests must be escalated to a human. The article therefore adds query rewriting, conversation memory, multiple data sources, customer entitlements, operational tools, confidence scoring, and escalation logic around the retrieval layer.

0
ProgrammingDEV Community ·

Using InstancedMesh in Three.js to cut draw calls for repeated parts

Building repeated geometry such as pergola louvres or fence slats with one Mesh per part can drag frame rates down on mid-range phones, since each object costs a separate draw call per frame. The author reports a configurator running at 12 FPS that reached a steady 60 FPS after switching the 40 louvres to a single InstancedMesh. The approach requires calling updateMatrix before setMatrixAt and setting instanceMatrix.needsUpdate after changing transforms, with per-instance colours handled through setColorAt and instanceColor.needsUpdate. The author suggests the technique pays off for roughly 100 to 200 or more repeated objects, or for objects updated every frame, while plain meshes are simpler below that threshold.

0
ProgrammingDEV Community ·

Four types of health AI each demand a different kind of engineering

A senior engineer building a health AI argues that the term covers four distinct products, each failing in its own way. Ambient scribes that write visit notes can invent statements, so the author would require clinician review before anything enters the chart. Clinician Q&A tools with citations can link to sources that do not actually support the claim, calling for automated checks of each claim against its cited passage. Patient-facing copilots that flag too much risk being ignored, so their flags need measured precision and recall. The author's own free health-information assistant, Tabibu, is designed around preventing false reassurance and dosing advice, and its limits are published openly. The piece also cites a 2026 Mount Sinai study showing a short safety reminder reduced potentially harmful clinical choices from 16.6% to 10.1%, which the author presents as progress but not a complete fix.

0
ProgrammingDEV Community ·

Unverified AI-generated code accumulates technical debt faster, experts warn

An opinion piece argues that teams adopting AI coding tools without changing their verification practices have not gained speed but have instead accumulated hidden risk. As AI has shrunk the time needed to write code, the bottleneck has shifted to confirming that the code actually works. The author cites Google's DORA 2024 report, which linked greater AI adoption to gains in code quality and review speed but to lower delivery throughput and stability. A Stack Overflow 2025 survey found that developers most often complained about AI output that is nearly correct but flawed, and that more of them distrust it than trust it. The piece also points to a 2025 METR trial in which experienced developers were slower with AI tools while believing they were faster, and it notes that METR has since said those results are outdated. Tests are presented as a way to define expected behavior, give agents a clear stopping point, and lock in verified behavior.

0
ProgrammingDEV Community ·

Nine fields to fill in an SEO content brief before writing a single word

A common scenario is described where a website owner gives a writer only a keyword and a word count, and the resulting article ranks nowhere three months after publishing despite being well written. The writer did nothing wrong; the brief simply left them to guess at intent, audience, and structure. The author rebuilds the brief as a checklist of nine fields, covering the primary and secondary keywords, search intent, the reader's goal, the page's role such as pillar or guide, required questions, supporting evidence, internal links, and post-publication KPIs. The fifth field, the URL's role, is the one most often overlooked, since two pages competing for the same intent end up cannibalizing each other. The article also lists technical checks such as a 200 status, self-referencing canonicals, indexable content in the initial HTML, and unique titles and meta descriptions. The author stresses that completing the form does not guarantee top rankings, but it removes guesswork and makes it possible to trace where a page went wrong.

0
ProgrammingDEV Community ·

Block Editor Shifts WordPress Plugin Development, But Classic Methods Remain

The WordPress Block Editor has changed how developers build features, letting users configure content elements visually instead of relying on shortcodes. Blocks are especially useful for page layouts, testimonials, and other reusable components that appear within content. However, the article argues that classic plugin development is not obsolete, since core functions like permissions, payments, database operations, and API integrations still run on server-side PHP. Many plugins therefore combine block interfaces with traditional backend logic. Overall, the Block Editor complements rather than replaces established WordPress development techniques.

0
ProgrammingDEV Community ·

Veteran developer says loyalty and quality lost out to a "good enough" market

A software developer with over 45 years of experience recounts starting on a Commodore 64 and progressing through assembly, the Amiga and C. For nearly 12 years he worked for a movie-industry client, often underbidding and working year-round without raising his fees. He says the client abruptly ended the relationship after deciding that "good enough" mattered more than being better. He reflects that underpricing and loyalty were mistakes in a market that rewards job-hopping, though these lessons conflict with his ethics. He concludes that his career may need to change if continued learning requires it.

0
ProgrammingDEV Community ·

Why Naive String Slicing Breaks Link Previews With Emoji and Urdu Text

Link preview titles and descriptions are often generated automatically from CMS fields, product feeds, or Markdown bodies rather than written by hand. A common one-line approach that slices strings to a fixed length introduces several bugs. JavaScript's slice counts UTF-16 code units, so it can split emoji such as flags or joined sequences, producing broken characters. The same issue affects Urdu, Arabic, and Hindi text, where combining marks can be detached from their base letters. The article proposes counting grapheme clusters with the built-in Intl.Segmenter, which reflects what readers perceive as single characters. It also offers a tested helper that cuts at word boundaries, falls back to grapheme cuts for overly long tokens, and includes the ellipsis within the length budget.

0
ProgrammingDEV Community ·

Lessons from running a 200-game browser arcade on instant-play design

A contributor who helps run PlayPokiGame, a free site of casual HTML5 games playable in-browser without downloads or signups, shares lessons from observing real player behavior. Time-to-interactive proved the strongest predictor of play sessions, with games showing a playable frame within about three seconds drawing far more engagement. The author also found that browser players skip tutorials, so controls should be shown in-game, and that short 10–20 minute play bursts favor games with natural 3–5 minute loops. Instant respawns, auto-pausing on tab blur, and periodic localStorage saves are highlighted as key to keeping players from abandoning games. The author argues these principles apply broadly to web products, given the browser runs on everything from cheap Chromebooks to high-end workstations.

0
ProgrammingDEV Community ·

Browser-based HEIC to JPG conversion for iPhone photos using JavaScript

iPhones save photos in HEIC format by default, which is smaller than JPG but often rejected by websites, forms, and Windows apps. Because only Safari can natively decode HEIC, the author recommends the heic2any library, which uses WebAssembly to convert files directly in the browser. The library is about 1.3 MB, so it is loaded only after a user selects a HEIC file to keep page loads fast. Developers are advised to handle multi-image HEIC outputs as arrays, check file extensions since MIME types can be empty, convert files sequentially to limit memory use, and use a quality setting of 0.9. Since the file never leaves the user's device, the approach also suits private photos.

0
ProgrammingDEV Community ·

Five On-Premises Project Management Tools Compared on Data Control and Workflow Fit

Organizations that must keep project records on infrastructure they manage need to weigh deployment options alongside approval steps, status reporting, and daily usability. A new practitioner's guide compares five tools on deployment and data control, workflow coverage, and operational fit. It recommends first confirming hosting requirements, then testing each candidate against a representative project from planning through reporting. The guide profiles ONES.com, Jira Data Center, Microsoft Project Server, Wrike, and OpenProject Enterprise, noting each one's strengths and caveats such as Jira Data Center's announced end-of-life timeline. Its suggested evaluation method is to trace a requirement through planned work and execution updates to see whether it surfaces in project reporting.

0
ProgrammingDEV Community ·

Treat LLM Agents Like New Bank Tellers: Five Controls That Transfer

A developer with a background in financial systems argues that LLM agents with tool access resemble new bank employees who are fast but cannot reliably distinguish genuine customers from fraudsters. The author suggests that long-established banking controls can be applied to these agents. Key recommendations include enforcing policy in code rather than in prompts, using a gate that checks each proposed tool call before execution, and treating retrieved document content as untrusted data to limit prompt injection. The piece also recommends detailed logging of every proposed tool call, including rejections, and using velocity checks to detect fraud patterns.

← NewerPage 194 of 2984Older →