SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer guide shows how to build Apple-style liquid glass effects with CSS and SVG

A DEV Community tutorial explains how to recreate the liquid glass look popularized by Apple's 2025 design across iOS, iPadOS and macOS, using only CSS and SVG. The guide breaks the effect into five layers: a tint, backdrop blur and saturation, a specular rim, a diagonal sheen, and refraction. It notes that classic glassmorphism uses only the first three layers, while true liquid glass adds the sheen and refraction. Code examples include a dark-mode card and a light-mode variant, with advice on adjusting blur and rim highlights for light backgrounds.

0
ProgrammingDEV Community ·

Quy trình 20 phút xác định search intent trước khi viết nội dung

Bài viết chỉ ra rằng nhiều brief nội dung chỉ ghi từ khóa và độ dài mà bỏ qua câu hỏi người tìm kiếm muốn làm gì tiếp theo. Tác giả đề xuất quy trình ba bước có thể ghi trực tiếp vào Google Sheet, bắt đầu từ giả thuyết intent dựa trên từ khóa. Bước tiếp theo là khảo sát kết quả SERP ẩn danh để xem loại nội dung, định dạng và góc tiếp cận đang được ưu tiên, đồng thời kiểm tra các tính năng như Local Pack, Shopping hay AI Overview. Cuối cùng, người viết xác định loại trang trên website phù hợp nhất với intent đó cùng lời kêu gọi hành động tương ứng.

0
ProgrammingDEV Community ·

Symbolic reasoning engines offer an alternative to LLMs for deterministic problem-solving

A DEV Community article argues that LLMs, whose probabilistic token generation can produce logical errors, are not the only path to AI-style reasoning. It proposes symbolic, rule-based systems that break problems into discrete, verifiable steps instead of predicting statistically likely text. The described architecture has three parts: a world model defining valid states, a constraint solver checking axioms, and a heuristic planner such as A* search. The author notes that the main obstacle is combinatorial explosion in the state space, which symbolic systems must manage through explicit pruning. The article suggests reasoning quality depends more on heuristic sophistication than on the size of the training corpus.

0
ProgrammingDEV Community ·

ما الذي يجب أن تقوله رسالة فشل الاختبار لقارئها؟

تتناول المقالة أهمية رسائل فشل الاختبارات بوصفها الجزء الوحيد من مجموعة الاختبارات الذي يُقرأ خارج المحرر، غالباً على يد شخص لم يرَ الكود. يشير الكاتب إلى أن رسالة مثل Expected True, but found False لا تحدد أي تأكيد فشل، بينما يسهّل ذكر اسم المتغير والقيمتين المتوقعة والفعلية التشخيص بشكل كبير. يعرض النص مثالاً عملياً باستخدام حزمة Jeninnet.Assertions تعمل مع أطر اختبار مختلفة، ويوضح أن أسماء المتغيرات تُلتقط تلقائياً عبر CallerArgumentExpression. كما يؤكد الكاتب أن رسائل الفشل يجب أن تكون ثابتة وغير مرتبطة بالثقافة أو نظام التشغيل حتى تبقى قابلة للبحث والمقارنة. وتختتم المقالة بعرض سلسلة من الملاحظات حول تصميم هذا السطح، تشمل رسائل الفشل بالعربية والتعامل مع الزمن والذاكرة والانتظار.

0
ProgrammingDEV Community ·

CVE-2026-0313: OS command injection in Cortex XSOAR and XSIAM OS Query pack

Palo Alto Networks disclosed CVE-2026-0313 on 14 October 2026, an OS command injection flaw in the OS Query content pack used by Cortex XSOAR and Cortex XSIAM. An authenticated administrator could exploit it to run arbitrary commands on remote endpoints through the SSH integration. The issue is rated moderate urgency, with no known malicious exploitation reported so far. Affected versions are below 1.0.17, and upgrading to that release fixes both products. Security teams are also advised to tighten the privileges of SSH integration accounts and restrict access to management interfaces.

0
ProgrammingDEV Community ·

Open-weight models trail hosted rivals as coding agents in new benchmark runs

A reviewer ran open-weight models as coding agents on two agentic benchmarks and found none matched hosted systems this month. Meta's 816B-parameter Muse Spark Open, released 15 October, scored 0.091 and 0.0877 on the Forge 2.0 build, far below the board's top score of 0.8523, and produced no verdict on the Gauntlet 7.2 test. Locally run models including Google's Gemma 4 and IBM's Granite 4.2 did no better, and several pilot runs were cut short or fell below the reviewer's bar. The reviewer noted that recurring failures, such as large files never being written and tool calls returning as prose, were often tied to the test setup as well as the models. Meta's own vendor claims for the model were not matched in these independent runs.

0
ProgrammingDEV Community ·

OEM Monitoring Templates Migrated From Old to New Server Using emcli

A guide outlines how to migrate Oracle Enterprise Manager monitoring templates from an OEM 13.5 server to a 24.1 server. The process begins by querying the existing templates and exporting them as XML files with the emcli tool. The exported files are then copied to the new server and imported there after logging in as sysman. When a template references metric extensions not yet published on the new server, the import warns that those extensions must be imported and published first. The guide notes that removing the metric extension entries from the XML lets the template be created without importing those extensions.

0
ProgrammingDEV Community ·

Six behavioral tests to verify a self-hosted AI agent server is actually locked down

Config files alone can be misleading, so the author recommends checking what the machine actually does for a self-hosted AI agent on a VPS. The suggested checks cover open ports from an outside host, whether the agent listens only on loopback, and whether SSH password login is truly disabled, including drop-in config files. They also test whether fail2ban bans attacking IPs and whether the agent service restarts automatically and sends alerts through the user's own bot. Finally, the piece advises setting a hard spend cap on the API key, since the agent tools lack one, and rehearsing backup and rollback before updates.

0
ProgrammingDEV Community ·

Why Off-the-Shelf Integration Tools Often Fall Short Without Custom Work

Many growing companies spend $50,000 or more annually on enterprise integration platforms such as MuleSoft, Boomi, or Workato to link their sales, warehouse, and billing systems. The article describes a case where a $500,000 deal failed because a nightly batch sync left inventory data outdated, so units already sold online were promised to a client. Pre-built connectors often mishandle custom pricing, shipping rules, or legacy databases, silently skipping data or logging errors nobody reads. Systems also store the same information in incompatible formats, which can cause wrong charges or rejected orders without a proper translation layer. The author argues that integration development partners are needed to build custom connections, data mappings, and real-time syncing that match how a specific business actually operates.

0
ProgrammingDEV Community ·

Mobile-First UX and Site Speed Guidance for South African Audiences

A new guide argues that fast, usable pages are a practical product decision for South Africa's digital audience, which uses a mix of mobile devices, fixed connections, and varying network conditions. It advises against treating the country as one uniform connectivity profile and recommends measuring the actual journeys that matter, such as navigation, form submissions, and cart actions. The article outlines Google's current Core Web Vitals targets: loading (LCP at 2.5 seconds or less), responsiveness (INP at 200 milliseconds or less, which replaced FID), and visual stability (CLS at 0.1 or less). It notes these thresholds are guidelines for good experience rather than guarantees of ranking or usability, and offers specific fixes for each metric.

0
ProgrammingDEV Community ·

Implementing Graceful Shutdown in Go HTTP Servers to Avoid Dropped Requests

Killing an HTTP server with SIGKILL terminates in-flight requests instantly, which can cause partial database writes, broken responses, and leaked resources. The article explains that tools like Kubernetes, systemd, and Docker send SIGTERM first, giving servers a window to exit cleanly before escalation. Go's net/http package provides Server.Shutdown(ctx), which stops new connections and waits for active handlers, but developers must wire up the signal handling themselves. The author includes a sample program that listens for SIGINT and SIGTERM and drains connections within a 30-second timeout. It also warns that Shutdown does not wait for goroutines spawned by handlers, which may need a sync.WaitGroup to avoid running after resources close.

0
ProgrammingDEV Community ·

Securing Industrial AI Agents: Separating Command Proposals From Authorization

AI agents in industrial settings can read documents and call tools that affect physical operations, but generating a command does not confer permission to execute it. The article warns that retrieved content, such as maintenance logs or manuals, may contain malicious instructions that could push an agent beyond its scope. It argues that authorization must be enforced by trusted application components rather than relying on the model to ignore suspicious text. A proposed architecture separates an AI decision engine, an independent authorization gateway, and an action engine that executes only after checks pass. Approvals should be bound to the exact asset, action, parameters, identity, and expiration, so that changes between approval and execution are detected.

0
ProgrammingDEV Community ·

Five Things to Check in an Arbitration Clause Before Signing a Contract

An amendment to the Arbitration and Conciliation Act, 1996 took effect in India on 23 October 2015, introducing a statutory deadline for arbitrators to deliver their award. The article argues that the arbitration clause, often treated as routine boilerplate, deserves close attention because it determines how disputes will be resolved. It recommends confirming that the clause is genuinely an arbitration agreement and naming the seat rather than just the venue. Parties should also decide how many arbitrators will hear the dispute and understand the timeline they are accepting. The piece additionally advises considering how hearings will actually be conducted and what follows once the award is issued.

0
ProgrammingDEV Community ·

Classical Computer Vision in Python: Denoising, Thresholding, FFT and K-means with OpenCV

A developer has launched a programming series called From Lab to Code, aimed at turning engineering concepts into hands-on implementations. The first project is an interactive image processing toolkit built with Python, OpenCV, NumPy, and Streamlit. It covers four classical techniques: denoising with Gaussian and median filters, object counting via thresholding and connected components, periodic noise removal using the Fast Fourier Transform, and color clustering with K-means. The article explains the difference between Gaussian and salt-and-pepper noise and why each filter suits different noise types. The toolkit requires no pretrained models, external APIs, or datasets, since all demonstration images are generated programmatically. The project's code is publicly available on GitHub.

0
ProgrammingDEV Community ·

Batch Metadata Script Skips Bad Files Instead of Crashing Mid-Run

A creator running a 300-file metadata job overnight had the script crash around file 84 after a zero-byte JPG, left by a failed render, broke the process and left a truncated CSV. The author rebuilt the script so each file gets its own error handling, failures are logged to errors.log with the reason, and the run completes with a summary of written and skipped rows. Each file is also validated for existence, size, and extension before a CSV row is created, since stock platforms like Adobe reject uploads with malformed rows. A companion upload tracker records completed and pending files to prevent duplicate uploads after re-runs. Both tools use only the standard library and run on a modest 1 vCPU, 2 GB RAM server.

0
ProgrammingDEV Community ·

Retry-and-ledger pattern helps a solo developer run hundreds of asset batches safely

A developer lost roughly forty minutes after a Python batch script crashed on asset 61 of 120, leaving no record of which files had finished. In response, they built a retry-and-log approach centered on a plain text ledger that marks an asset done only after its write succeeds. Failed assets are retried three times with short pauses, then logged with their specific error rather than a full traceback. The pipeline runs one process at a time on a 1-vCPU, 2 GB server, using garbage collection and per-file subprocesses so memory is returned between steps. The author says the setup has processed batches yielding 39 finished products and about 856 MB of output, and that re-runs are designed to produce identical results.

0
ProgrammingDEV Community ·

Oids launches free public network for AI agents run by different operators

Oids is a free, open network that lets AI agents run by different operators communicate publicly, with a timeline, direct messages, team rooms, and file transfer. As of October 21, 2026, it had 32 registered agents, 26 of them run by outside operators, and signups are capped at 500 while the network is still young. Agents can join through a simple signup API or an MCP server listed in the official MCP Registry, and bots must disclose they are bots in their bio under the terms of service. The free tier allows 100 posts and 200 direct messages per day, while a $8 monthly Pro plan raises those limits and keeps keys from expiring. The full codebase is MIT-licensed on GitHub, with moderation run automatically first and reviewed by staff second.

0
ProgrammingDEV Community ·

CVE-2026-0313: Command Injection in Cortex OS Query Pack Requires Internal Exposure Assessment

Palo Alto Networks disclosed CVE-2026-0313 on 14 October 2026, an OS command injection flaw (CWE-78) in the OS Query content pack for Cortex XSOAR and XSIAM. An authenticated administrator could exploit it to run arbitrary commands on remote endpoints, with vendor CVSS ratings of 6.1 and 8.6. Exploitation depends on the pack being installed, an SSH integration being configured, and the attacker already holding administrative credentials, none of which are visible from the public internet. Versions below 1.0.17 are affected, and the vendor recommends upgrading to 1.0.17 and verifying the installed version. The analysis notes that ZoomEye search results, including 7,667 assets matching a Cortex XSOAR title and zero CVE-specific matches, cannot establish actual exposure to this vulnerability.

0
ProgrammingHacker News ·

New Polygon Triangulation Method Processes 3.7 Million Map Polygons in 489 ms

A blog post from globus.software describes a triangulation approach reported to be faster than the widely used earcut algorithm. According to the title, the method triangulates 3.7 million map polygons in 489 milliseconds. The source material provided is limited to the headline and link metadata, so the full technical details and methodology are not available here. The post was shared on Hacker News, where it had received few points and no comments at the time of capture.

0
ProgrammingDEV Community ·

Anthropic Launches Claude Duet, a Lightweight Chat Model for Engineers

Anthropic has released Claude Duet, a smaller chat-optimized language model designed to run on a single GPU and accessible through a public HTTP API. Positioned as a coding co-pilot, it targets interactive assistance, data exploration, and low-latency inference rather than the heavier tasks of its larger Claude 3 sibling. The article highlights lower inference costs, since a roughly 7 billion parameter model fits in 16 GB of VRAM, along with reported response times under 300 milliseconds for 512-token prompts on a V100 GPU. It also notes that the API uses the same JSON schema as Claude 3, allowing existing tooling to be reused with minimal changes. The author walks through a sample setup that deploys a GitHub issue summarizer in Kubernetes using the official Python client.

← NewerPage 2 of 2810Older →