SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Phishing and BEC Attacks Bypass Code Defenses by Targeting Employees

Attackers can defeat strong technical security by manipulating staff rather than systems, using impersonation and urgency to trick people into acting. Business Email Compromise is a targeted form of this, where criminals study a company's payment workflows and pose as executives or suppliers to request wire transfers or bank detail changes. The FBI's Internet Crime Complaint Center reported more than $50 billion in exposed losses from BEC between late 2013 and the end of 2022. The article argues that the main defenses are procedural rather than technical, including verifying requests through independently known contact numbers, enabling multi-factor authentication, requiring dual approval for payments, and configuring SPF, DKIM, and DMARC email authentication.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Testing API Failure Scenarios: Why Success Paths Aren't Enough

Developers often verify only the successful 200 OK response, but production systems regularly face server errors, missing data, and network problems. The article illustrates how a simple frontend fetch can crash or leave users stranded when responses are unexpected. It recommends deliberately testing cases such as 500 errors, absent JSON fields, expired sessions, interrupted connections, and requests sent to the wrong environment. Mocking API responses lets teams simulate these conditions without relying on a live backend. Network interception tools such as Proxyceptor are presented as another option for modifying requests and responses without changing application code.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Fan Wiki for Ride A Pet Shows Evidence Labels and Marks Unknown Values

A fan-made guide for the Roblox game Ride A Pet treats every displayed fact as something that must be traceable to a source and date. Each entry is tagged as recorded from gameplay footage, reported by a dated third party, drawn from official artwork, or unknown. Missing measurements appear as "Unknown" rather than zero, so unmeasured stats cannot distort comparisons. Shop and pricing snapshots carry creator, timestamp, and separate "checked" and "last edited" dates to show how current they are. The approach is presented as a data-modeling problem aimed at keeping readers from mistaking guesses for confirmed information.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Study Tests Whether Task Rules Hold When the AI Model Is Swapped

A new paper in the Artificial Deterministic Intelligence series examines whether a bounded operational contract survives when the underlying inference model changes. Task state is kept outside the model weights, and the researchers do not assume smaller models match larger ones in capability. In synthetic first-party tests, a frozen governed package was moved between 8B and 35B models in both directions, with same-model restart controls, and all 120 confirmatory handoff trials kept the measured policy contract and task correctness. The study also compared governed scoped context, authorized metadata-filtered lexical retrieval, and an oracle ceiling, with every configuration completing 90 of 90 trials and conventional lexical retrieval showing lower retrieval-component time. The author states these results do not establish general model equivalence, production readiness, universal safety, or retrieval superiority, and the companion report includes non-acceptances, timeouts, and a non-confirming replication attempt.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Explores Using macOS Touch ID and Secure Enclave for SSH Authentication

A developer has described a method for using Touch ID on macOS to authenticate SSH sessions, with private keys held in the Secure Enclave. The approach aims to avoid the trade-off between security and convenience that comes with passphrases and unprotected keys. The article notes that the Secure Enclave isolates keys from the main operating system, though integration relies on tools such as ssh-agent and custom scripts that could introduce failure points. The author is seeking expert feedback on the method's technical viability and its edge cases. The piece argues that robust yet user-friendly authentication is increasingly important as remote work and cybersecurity threats grow.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Agentic terminals in 2026: seven questions for judging AI coding tools

AI in the terminal has moved beyond command autocomplete to agents that can build an app from a plain description. The article proposes seven questions for telling apart tools that merely suggest code from those that complete the work. Key criteria include whether an agent plans, runs, tests and prepares a project for shipping, and whether a lead agent can coordinate parallel workers. It also highlights multi-model support with your own API keys, the ability to diagnose and fix bugs with configurable approvals, and continuity of work across terminal, IDE, SSH and mobile. The piece is written by the founder of Mel, an agentic terminal tool, who promotes it as meeting these criteria.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Building a Safe Linux Sysadmin Assistant for AI Agents Using a Python MCP Server

AI coding assistants like Claude and Cursor can diagnose errors and suggest system configurations, but giving them raw shell access causes problems such as hung terminals from interactive pagers, excessive token use from oversized log output, and runaway background processes. The article proposes using Model Context Protocol (MCP), an open standard for connecting AI models to local tools, to mediate these interactions. The author's SysFlow MCP server, written in Python, forces non-interactive environment settings on every subprocess to prevent pager freezes. It also enforces hard timeouts that terminate process trees, reads only the tail of large log files with optional regex filtering, and limits service inspection to user-level systemd units rather than root-level daemons.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Quanta Magazine Explores How Hilbert Space Frames Quantum Possibilities

Quanta Magazine has published an article titled 'In Hilbert Space, All Things Are Quantumly Possible' on its website. The piece centers on Hilbert space, the mathematical framework that quantum physics uses to describe the states a system can occupy. The only details available in the source material are the article's URL, a Hacker News discussion thread, and its current point and comment counts. The full article text was not included, so the specific arguments and findings it makes cannot be summarized here.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Claude Code subagents, hooks and slash commands: a practical setup guide

The guide explains how to turn CLAUDE.md guidance into enforced behavior using subagents, hooks, and slash commands in Claude Code. Subagents are Markdown files in .claude/agents/ with YAML frontmatter, each running in its own context with limited tools such as read-only access for reviewers. Hooks configured in .claude/settings.json can block or allow tool calls, such as stopping destructive shell commands or refusing edits to secret files, and can run formatters or tests. Slash commands defined in .claude/commands/ chain subagents into repeatable workflows. The article also advises reading hook scripts before enabling them and keeping them under version control, since hooks run with the user's permissions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AGENTS.md, CLAUDE.md, or .cursor/rules: Which AI Agent Reads Which File?

Different AI coding tools look for different instruction files, so keeping rules in just one tool's format leaves the others guessing. Copying identical text into every format, however, tends to cause the versions to drift apart over time. AGENTS.md is an open, cross-tool Markdown convention read by OpenAI Codex, Cursor, and other agents. Claude Code uses CLAUDE.md, which can import other files such as AGENTS.md, while Cursor uses scoped .mdc rule files with YAML frontmatter, and Windsurf stores its rules as Markdown under .windsurf/rules/. The article recommends a maintainable setup that keeps shared guidance in AGENTS.md and layers tool-specific notes on top.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Java Encapsulation and Visibility: Protecting Object State with Access Modifiers

The article explains how encapsulation and visibility in Java help developers control how objects are used, not just whether code works. It uses a BankAccount class as an example, where the balance field is private so it cannot be changed directly from outside the class. Methods are given different access levels: public for deposits and withdrawals, package-private for applying fees within the same package, and protected for subclasses and same-package classes. A private method, resetBalance, is shown as an internal implementation detail hidden from other code. Together, these modifiers protect the object's data and limit how the class can be used.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

LocalRAG Desktop Beta Offers Docker-Free Private Document Q&A for Windows

A developer has released LocalRAG Desktop, a beta local document question-answering app for Windows that runs without Docker, WSL, or Python. Users can upload text-based PDF, Word, TXT, or Markdown files, which are parsed, chunked, and embedded locally before being searched via Qdrant. Answers are generated by a local Qwen model, with the source file and chunk shown for each response. All services bind to 127.0.0.1, use a session token for API access, and send no default telemetry. The beta supports Windows 10 22H2 and Windows 11 x64 with 8GB RAM recommended, and is not yet code signed, so Windows may display an unknown publisher warning.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Kicking Participants From Video Rooms Needs Server-Side Authorization, Not Client Notices

The article argues that removing a participant from a video room should revoke server-side authorization rather than just send the browser a leave message. It recommends issuing narrowly scoped admission tokens and tracking a membership epoch on the server, so reconnections carrying an outdated epoch are rejected. A tabletop example shows a kicked contractor rejoining within seconds using a still-valid credential, because transport closure was mistaken for authorization revocation. The author stresses that clients cannot be trusted to enforce access and that alerts should detect revoked memberships that regain access. Idempotent moderation commands are also recommended so retries do not produce inconsistent outcomes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Dual Write Problem: Keeping Database Changes and Event Triggers in Sync

Developers often need to perform an action, such as sending an email, immediately after a database change, but the two can fail independently. Wrapping the database insert and the email call in one transaction doesn't work because the email service sits outside the database. Placing a message broker in between still leaves a gap where a failure can occur before the message is published. The commonly recommended fix is the Transactional Outbox Pattern, which writes an event record to an outbox table within the same transaction as the user insert. A separate consumer then reads pending outbox records, triggers the action such as sending an email, and marks each record as processed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Three open-weight AI models released in one week, with licensing and memory needs varying widely

Three open-weight models arrived within a single week from different labs, sized at 35B, 560B, and 816B parameters. The author argues that parameter counts alone are misleading, and that memory requirements, license terms, and the number of parameters active per token matter more for real deployment. MiniCPM-V 4.7 from OpenBMB runs on mobile hardware under Apache 2.0, while Ling-3.1-flash from inclusionAI uses an MIT license and a 1M-token context window. Meta's Muse Spark Open carries a custom license that requires attribution and a separate agreement for large-scale hosted services, showing that open weights do not automatically mean open source.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Edge Sensor Sloth: an offline open-weight tool that turns factory sensor data into a morning digest

A developer built a Hacktoberfest entry that tackles the problem of maintenance teams overlooking dashboards, where early signs of equipment failure go unnoticed. The system reads factory sensor data from ESP32 gateways over Modbus and MQTT, and a lightweight local detector flags spikes and slow drift. An open-weight language model, such as gpt-oss-120b, then converts those few summarized numbers into a short two-line digest prioritizing the issues that matter. Because raw plant data never leaves the site and the tool works without internet access, it is designed to keep sensitive production information on-premises. The author notes that the model can be swapped out while the detection pipeline stays the same.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Quebec Law 25 Raises Compliance Questions for Generative AI Deployments

A Quebec-focused technical guide argues that companies using generative AI must address specific obligations under Law 25 before going into production. The law designates the highest-ranking person in an organization as its privacy officer by default and lists penalties that can reach $10 million or 2% of worldwide turnover. Two of the most relevant penalty grounds concern security measures and automated decision-making, both of which intersect with AI system design. The authors note that the Commission d'accès à l'information has not yet published any administrative monetary penalties or rulings interpreting the automated decision rule, though it has issued orders against AI and biometric systems. They emphasize that the absence of fines should not delay compliance work, since system shutdown orders and class actions remain possible.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Unix timestamp bugs show dates in 1970 and how to fix seconds versus milliseconds

A developer found that a billing page listed every subscription as expiring on 1970-01-21, which was traced to a millisecond timestamp being passed to code that expected seconds. The article explains converting timestamps in Python and Node.js, and how the resulting ValueError reveals the unit mismatch so it can be fixed by dividing by 1000. It also warns that naive datetimes are read as local time, causing eight-hour offsets between machines unless the timezone is set explicitly. Additional pitfalls include the 2038 overflow of 32-bit signed integers and differing date command syntax between GNU and BSD systems. The author recommends naming timestamp fields with their unit to avoid such errors.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

T3 Code Now Mirrored Between GitHub and GitCafe

The T3 Code project is now kept in sync across GitHub and GitCafe, two code hosting platforms. The announcement was shared on Hacker News, where it received 6 points and 15 comments. The source material provides limited detail on the mechanics of the synchronization or its motivations. The project's repository is hosted at git.cafe under the pingdotgg organization.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Base Bridge TVL Reaches $3B, but Liquidity Buffers and Validator Set Raise Risk Concerns

A DEV Community analysis puts Base Bridge's total value locked at about $3.0 billion as of 21 October 2026, making it the main asset-transfer gateway between Ethereum and the Base layer-2 network. The report notes rapid growth since the bridge's 2024 launch, with five assets accounting for most of the locked value. It cites two past withdrawal spikes, linked to a Base network upgrade and a USDC depeg event, as evidence that market stress can trigger sudden outflows. The analysis judges the bridge's combined liquidity buffer of roughly 20 percent, along with a 12-validator set, to fall short of common industry benchmarks and to carry moderate-to-high risk. It recommends mitigations such as larger validator sets, stronger finality guarantees, and bigger liquidity reserves.

0 comments Read more at DEV Community
← NewerPage 207 of 2992Older →