SShortSingh.

Programming

0
ProgrammingDEV Community ·

Kicking Participants From Video Rooms Needs Server-Side Authorization, Not Client Notices

The article argues that removing a participant from a video room should revoke server-side authorization rather than just send the browser a leave message. It recommends issuing narrowly scoped admission tokens and tracking a membership epoch on the server, so reconnections carrying an outdated epoch are rejected. A tabletop example shows a kicked contractor rejoining within seconds using a still-valid credential, because transport closure was mistaken for authorization revocation. The author stresses that clients cannot be trusted to enforce access and that alerts should detect revoked memberships that regain access. Idempotent moderation commands are also recommended so retries do not produce inconsistent outcomes.

0
ProgrammingDEV Community ·

Dual Write Problem: Keeping Database Changes and Event Triggers in Sync

Developers often need to perform an action, such as sending an email, immediately after a database change, but the two can fail independently. Wrapping the database insert and the email call in one transaction doesn't work because the email service sits outside the database. Placing a message broker in between still leaves a gap where a failure can occur before the message is published. The commonly recommended fix is the Transactional Outbox Pattern, which writes an event record to an outbox table within the same transaction as the user insert. A separate consumer then reads pending outbox records, triggers the action such as sending an email, and marks each record as processed.

0
ProgrammingDEV Community ·

Three open-weight AI models released in one week, with licensing and memory needs varying widely

Three open-weight models arrived within a single week from different labs, sized at 35B, 560B, and 816B parameters. The author argues that parameter counts alone are misleading, and that memory requirements, license terms, and the number of parameters active per token matter more for real deployment. MiniCPM-V 4.7 from OpenBMB runs on mobile hardware under Apache 2.0, while Ling-3.1-flash from inclusionAI uses an MIT license and a 1M-token context window. Meta's Muse Spark Open carries a custom license that requires attribution and a separate agreement for large-scale hosted services, showing that open weights do not automatically mean open source.

0
ProgrammingDEV Community ·

Edge Sensor Sloth: an offline open-weight tool that turns factory sensor data into a morning digest

A developer built a Hacktoberfest entry that tackles the problem of maintenance teams overlooking dashboards, where early signs of equipment failure go unnoticed. The system reads factory sensor data from ESP32 gateways over Modbus and MQTT, and a lightweight local detector flags spikes and slow drift. An open-weight language model, such as gpt-oss-120b, then converts those few summarized numbers into a short two-line digest prioritizing the issues that matter. Because raw plant data never leaves the site and the tool works without internet access, it is designed to keep sensitive production information on-premises. The author notes that the model can be swapped out while the detection pipeline stays the same.

0
ProgrammingDEV Community ·

Quebec Law 25 Raises Compliance Questions for Generative AI Deployments

A Quebec-focused technical guide argues that companies using generative AI must address specific obligations under Law 25 before going into production. The law designates the highest-ranking person in an organization as its privacy officer by default and lists penalties that can reach $10 million or 2% of worldwide turnover. Two of the most relevant penalty grounds concern security measures and automated decision-making, both of which intersect with AI system design. The authors note that the Commission d'accès à l'information has not yet published any administrative monetary penalties or rulings interpreting the automated decision rule, though it has issued orders against AI and biometric systems. They emphasize that the absence of fines should not delay compliance work, since system shutdown orders and class actions remain possible.

0
ProgrammingDEV Community ·

Why Unix timestamp bugs show dates in 1970 and how to fix seconds versus milliseconds

A developer found that a billing page listed every subscription as expiring on 1970-01-21, which was traced to a millisecond timestamp being passed to code that expected seconds. The article explains converting timestamps in Python and Node.js, and how the resulting ValueError reveals the unit mismatch so it can be fixed by dividing by 1000. It also warns that naive datetimes are read as local time, causing eight-hour offsets between machines unless the timezone is set explicitly. Additional pitfalls include the 2038 overflow of 32-bit signed integers and differing date command syntax between GNU and BSD systems. The author recommends naming timestamp fields with their unit to avoid such errors.

0
ProgrammingHacker News ·

T3 Code Now Mirrored Between GitHub and GitCafe

The T3 Code project is now kept in sync across GitHub and GitCafe, two code hosting platforms. The announcement was shared on Hacker News, where it received 6 points and 15 comments. The source material provides limited detail on the mechanics of the synchronization or its motivations. The project's repository is hosted at git.cafe under the pingdotgg organization.

0
ProgrammingDEV Community ·

Base Bridge TVL Reaches $3B, but Liquidity Buffers and Validator Set Raise Risk Concerns

A DEV Community analysis puts Base Bridge's total value locked at about $3.0 billion as of 21 October 2026, making it the main asset-transfer gateway between Ethereum and the Base layer-2 network. The report notes rapid growth since the bridge's 2024 launch, with five assets accounting for most of the locked value. It cites two past withdrawal spikes, linked to a Base network upgrade and a USDC depeg event, as evidence that market stress can trigger sudden outflows. The analysis judges the bridge's combined liquidity buffer of roughly 20 percent, along with a 12-validator set, to fall short of common industry benchmarks and to carry moderate-to-high risk. It recommends mitigations such as larger validator sets, stronger finality guarantees, and bigger liquidity reserves.

0
ProgrammingDEV Community ·

Keeping an LLM from fabricating CV details with a strict schema and validation

The author is building Cveelo, a tool that converts a CV into a portfolio website, and needed to stop the AI from inventing credentials. The model's only job is to extract information from the CV into a typed profile, while design and achievement wording are handled manually. Every optional field is nullable so that missing data is reported rather than guessed. Extracted output is validated with Zod, retried once on failure, and rejected if it still fails, so unvalidated data is never saved. The author also guards against prompt injection inside CVs and detects scanned PDFs with no text layer, while keeping contact details out of the decision and analytics layers.

0
ProgrammingHacker News ·

GitHub Launches Package Firewall in Public Preview

GitHub has announced a public preview of its package firewall, according to a changelog post on its blog. The feature is aimed at helping developers manage the packages their projects depend on. The announcement was shared on Hacker News, where it gathered six points and no comments at the time of reporting. The source material provides limited detail beyond the announcement itself, so specifics about how the firewall operates are not covered here. Further information is available in GitHub's official changelog.

0
ProgrammingHacker News ·

Good Type Against All Odds: Article Explores Typography Under Hardship

The article is shared on Hacker News, where it has earned 7 points and one comment. Its original headline is "Good type against all odds," suggesting a focus on typography produced despite difficult circumstances. The source text provided contains only the link, discussion metadata, and engagement figures, so the specific details of the piece cannot be confirmed. Readers are directed to the full article on the unsung.aresluna.org site for its complete content.

0
ProgrammingHacker News ·

New Yorker Examines How Communities Are Adapting to Waymo Robotaxis

A New Yorker magazine piece, published in its October 19, 2026 issue, explores how people are adjusting to the presence of Waymo's self-driving taxis on the road. The article's source details are limited to its URL, so the specific observations it makes cannot be confirmed from the provided material. The item was shared on Hacker News, where it gathered 14 points and 3 comments. The discussion there suggests modest but ongoing interest in the social side of autonomous vehicles. No further details about the article's findings are available in the source provided.

0
ProgrammingDEV Community ·

Why the First Two Weeks of an AI Deployment Decide Its Outcome

An engineer embedded with a customer during the opening stretch of a deployment works to replace assumptions with facts before building anything. The brief written in a meeting room often describes a proxy rather than the real problem, which becomes clear only after observing daily operations. The article outlines five principles: focus on the actual problem rather than a stated tool, request data and system access immediately, examine raw unfiltered data before designing, select a small but meaningful first workflow, and identify every stakeholder who could block the work. Skipping this phase, it argues, results in building the wrong solution efficiently. Early discovery turns potential delays into useful signals about how the deployment will run.

0
ProgrammingDEV Community ·

Semurg answers 4-hop query on 1.8-billion-edge graph in 1.41 s; Neo4j and FalkorDB fail to finish

A benchmark used SNAP's com-Friendster graph, with 65.6 million people and 1.8 billion relationships, under a 12 GB memory limit for every engine. Semurg answered a 4-hop query about one person's network in a median of 1.41 seconds. Neo4j loaded the graph but had not answered that query when its 2,345-second time budget ran out. FalkorDB exhausted its 12 GB memory while loading and never reached a query. Semurg also completed walks from two hops up to 131,072 hops, with run times levelling off at about 6.7 seconds beyond 16 hops because the graph is small-world. ArcadeDB, ArangoDB and SurrealDB were not fairly measured or have no result in this run and are slated for the next one.

0
ProgrammingDEV Community ·

Agent Web Access lets AI agents read rendered web pages as markdown for $0.001 per call

LLM agents often fail to read real web pages with a plain HTTP request, which returns empty shells, cookie walls, or bulky markup. Agent Web Access offers a pay-per-call service that renders pages in a real browser, strips navigation and ads, and returns clean markdown. It requires no account or API key, and each call is paid in USDC on Base via the open x402 protocol. Endpoints cover fetching markdown or text, extracting CSS-selector elements, and generating screenshots or PDFs, priced between $0.001 and $0.005. The author reports running the fetch example against the Hacker News front page, which returned status 200 and about 11 KB of markdown for $0.001.

0
ProgrammingDEV Community ·

Learning May Involve Deliberate DNA Breaks in Neurons, Mouse Studies Suggest

Research published in Cell and Nature describes how strongly firing neurons deliberately cut their own DNA at specific sites to switch on genes needed for forming memories. A protein complex then recruits a repair system to stitch the breaks back together. In mouse experiments, hippocampal neurons showed persistent DNA breaks hours after learning a task, and blocking a DNA-sensing repair pathway impaired memory. The findings suggest neurons involved in memory formation pass through a break-and-repair cycle, though the evidence so far comes from animal and cell studies rather than living human brains. The authors of the summarized guide note that the work is preliminary and does not point to any new treatment.

0
ProgrammingDEV Community ·

DORA Compliance: What ICT Providers Serving Financial Firms Must Prepare For

The Digital Operational Resilience Act (DORA) is EU legislation designed to make the financial sector more resilient to IT disruptions. It sets requirements for ICT providers covering risk management, incident detection and reporting, and operational resilience testing. Suppliers are also expected to manage third-party risks through vendor due diligence and continuous monitoring. The article recommends concrete preparation steps, such as conducting a gap assessment, strengthening risk frameworks, and establishing clear incident protocols. It also advises deploying continuous monitoring and aligning DORA with other regulatory frameworks.

0
ProgrammingDEV Community ·

Parejo: a free, no sign-up app for splitting group and trip expenses

An indie developer from Mexico City has launched Parejo, a free web app for splitting shared costs on trips and in groups. Unlike Splitwise, it requires no account, allows unlimited expenses on its free tier, and supports any currency with automatic conversion. Settlements are calculated to minimize the number of payments, and groups are shared through a link without any server-side storage. An optional one-time Trip Pass or Lifetime purchase adds features such as receipt photos and CSV/PDF export. The developer is seeking user feedback on the settle-up screen and share-link flow.

0
ProgrammingDEV Community ·

Cross-review experiment finds AI models can concede points when told not to manufacture agreement

The author, a longtime amateur student of psychology, observes that group conformity in design reviews often leads people to soften objections and drop points to avoid social friction. They argue that AI models, trained on human text full of polite agreement, may reflect this same pull toward consensus, making sycophancy look less like a bug and more like inherited human behavior. To test this, they ran an architecture review over the afmpeg project using two models from different vendors, then had each respond to the other's report with an explicit instruction not to manufacture agreement. The reviewers conceded many criticisms, and one withdrew its main recommendation after acknowledging that compile-time checks serve only as a backstop. The author notes the instruction was essential to prevent the exercise from becoming mutual flattery.

← NewerPage 209 of 2993Older →