SShortSingh.

Programming

0
ProgrammingHacker News ·

Federal vendor holding $50M in contracts left key portal broken for a month

A federal government vendor holding approximately $50 million in contracts allowed an important portal to remain non-functional for roughly a month. The issue was reported by ProPublica, which covers government accountability and transparency matters. The broken portal affected the processing or accessibility of FOIA requests and responses. Such disruptions can delay public access to government records, undermining transparency obligations. The incident has drawn attention to accountability concerns around federal contractors managing critical public-facing systems.

0
ProgrammingHacker News ·

US anti-cartel money transfer rules hit small border businesses hard

The US government introduced new money transfer regulations along the US-Mexico border aimed at curbing cartel money laundering. However, the rules have had significant unintended consequences for small, independent businesses operating in the region. Mom-and-pop enterprises have reportedly been devastated by the stricter financial controls, which disrupted their routine cross-border transactions. The measures highlight the difficult balance authorities face between targeting criminal financial networks and protecting legitimate small-scale commerce. The situation has drawn attention to the disproportionate burden placed on ordinary border-area business owners.

0
ProgrammingDEV Community ·

Orca Orchestrator Ditches Secret Managers, Stores Encrypted Secrets in Git

Orca, a lightweight single-binary orchestrator, has replaced its managed Infisical sidecar with a dependency-free secrets solution using SOPS and the age encryption tool. The previous approach created a bootstrap problem: the secret manager was itself a service requiring deployment, credentials, and uptime, undermining Orca's promise of no hidden dependencies. Secrets are now stored as an encrypted JSON file committed directly to the config repository, with only values encrypted and keys left in plaintext, enabling readable git diffs during code review. Decryption happens in-process via a Rust library at runtime, with no external binaries invoked, and multi-recipient age keys allow local recovery independent of whether the orchestrator is running. The design keeps the git repository as the single source of truth, with the master automatically committing and pushing re-encrypted files after any secret update.

0
ProgrammingDEV Community ·

ML Neuron Basics Explained Through a Pizza Store Analogy

A developer tutorial published on DEV Community uses a pizza store scenario to explain the foundational mechanics of a machine learning neuron. In the analogy, the number of customers represents input, the two-pizzas-per-person rule represents the model's weight, and the gap between pizzas aimed to sell and actually sold represents the error. The core training loop involves calculating an adjustment by multiplying the error by the input, then updating the weight using a learning rate. This mirrors gradient descent, where the weight is iteratively corrected to minimize error. The tutorial is aimed at beginners who have some basic familiarity with neural networks but struggle with the underlying math.

0
ProgrammingDEV Community ·

How pytest module-scoped fixtures silently share mutable state across tests

A technical article on DEV Community highlights a common pytest pitfall where fixtures set to 'scope=module' share the same object across all tests in a module rather than providing each test its own copy. This means if one test mutates a shared dict or object, subsequent tests receive the already-modified version, causing hard-to-trace failures that only appear when tests run in certain orders. The author recommends three fixes: dropping the scope to the default function level, keeping expensive shared setup while handing each test a deep copy, or using an immutable type like MappingProxyType so mutations raise an immediate error. The article also suggests installing the pytest-randomly plugin to shuffle test execution order in CI, which helps surface order-dependent failures early. The core advice is to treat scope widening as a performance optimisation — only justified when the shared object is proven to be read-only.

0
ProgrammingDEV Community ·

Codename One shifts from Maven Central to self-hosted Cloudflare R2 repository

Codename One, an open-source Java/Kotlin framework for cross-platform app development, is migrating its package distribution from Maven Central to a self-operated repository hosted on Cloudflare R2. The move is driven by the project's unusually high usage of Maven Central infrastructure, exceeding Sonatype's guidelines by over 2,600% in storage and nearly 2,000% in file count. A phased rollout begins July 31, 2026, with dual publishing to both platforms, followed by new projects automatically receiving the new repository URL from August 7. Codename One plans to stop publishing new versions to Maven Central entirely by August 28, 2026, provided the dual-publish period runs smoothly. Existing projects will need to manually add the new repository configuration to continue receiving future updates after the cutover.

0
ProgrammingDEV Community ·

Study finds AI code agents ignore existing repo context more than they hallucinate

A pre-registered study examined three merged GitHub Copilot pull requests from major .NET organizations using a 12-reviewer automated pipeline called review-pro. The researcher, who maintains the tool, set out to test whether AI-authored code primarily fails through hallucination — such as invented APIs or undefined config keys — as is commonly assumed. Instead, the dominant failure pattern found was agents overlooking knowledge already present in the repository, rather than fabricating nonexistent elements. The pipeline required each specialist reviewer to locate evidence within the repository before making any claim, making unsupported assertions inadmissible. The study's methodology, corpus criteria, and per-case records were pre-registered before results were analyzed, and negative findings were included in the published report.

0
ProgrammingDEV Community ·

Dev Team Builds Rust Binary 'dxpdf' to Replace Headless LibreOffice in Doc Pipelines

A development team replaced their headless LibreOffice-based DOCX-to-PDF pipeline with a custom open-source tool called dxpdf, a single Rust binary that parses OOXML directly and renders output using Skia. The switch was driven by recurring production problems with LibreOffice, including serialized conversions, process hangs, per-worker profile directory management, and inconsistent output across versions. The new binary converts a 3-page document in 170 ms and a 171-page document in 420 ms on an M3 Max, with font resolution — not document size — identified as the primary performance cost. dxpdf currently supports 74 OOXML features fully, 11 partially, and leaves 12 unimplemented, making it a targeted rather than complete replacement for LibreOffice. The project is open source and designed to run entirely on-premise, requiring no cloud API or external office suite dependency.

0
ProgrammingDEV Community ·

Developer Shares Concise JavaScript Basics Reference Guide for Quick Review

A developer published a personal JavaScript reference guide originally written on March 26, 2020, later migrated to DEV Community. The notes were compiled after a focused three-hour review session covering core JS concepts, based on a freeCodeCamp video by Beau Carnes. Topics covered include variable scoping with var, let, and const, string escape sequences, array and object manipulation, and switch statements. The guide also addresses ES6 features such as arrow functions, rest operators, default parameters, and the use of Object.freeze to prevent mutation. It serves as a quick-reference cheat sheet for developers brushing up on JavaScript fundamentals.

0
ProgrammingHacker News ·

Greenland warns US oil firm over illegal drilling operations on its territory

Greenland's government has issued a strong warning to an American oil company after it allegedly began drilling wells without proper authorization. The firm has been reported to have ties to the Trump administration, adding a political dimension to the dispute. Greenland authorities are demanding the company halt operations and comply with local regulations. The incident raises concerns about resource extraction sovereignty in the Arctic territory, which has been a subject of US geopolitical interest in recent years.

0
ProgrammingDEV Community ·

What Is an API? A Beginner's Guide to Web APIs and REST

An API (Application Programming Interface) allows programmers to build software without writing every piece of code from scratch, similar to how a GUI lets users interact with a device without understanding its inner workings. Web-based APIs are the most commonly referenced type, enabling developers to perform complex operations through simple commands, such as Python's string methods. The REST architectural style, coined by Roy Fielding in his 2000 doctoral dissertation, defines six key constraints including Stateless, Cacheable, and Uniform Interface. These principles form the foundation of how most modern web APIs are designed and consumed. The article was originally written on March 21, 2020, and later migrated to the DEV Community archive.

0
ProgrammingDEV Community ·

JavaScript Fundamentals: Variables, Types, and Equality Explained

A developer recap originally written in March 2020 outlines core JavaScript concepts inspired by Dan Abramov's introductory course. In JavaScript, variables act as 'wires' that connect named references to values stored in memory, rather than holding values directly. The article covers all primitive types — including numbers, strings, booleans, null, undefined, symbols, and BigInts — as well as non-primitive types like objects and functions. It also explains the distinction between Same Value Equality using Object.is() and Strict Equality using ===, noting edge cases such as NaN === NaN always returning false while Object.is(NaN, NaN) returns true. Loose equality (==) is generally discouraged, though the author notes one practical exception for checking null or undefined simultaneously.

0
ProgrammingDEV Community ·

Developer shares handy Linux and Python CLI commands for daily workflows

A developer published a reference collection of command-line tips originally dated March 10, 2020, later migrated to DEV Community. The notes cover common tasks such as upgrading pip packages, copying files, creating date-stamped directories, and checking environment variables on macOS. Several entries focus on rsync, explaining how it transfers only changed data blocks, making it faster than scp for remote file syncing. Additional commands address archiving files with tar, managing locale settings, and basic vim editing shortcuts. The post serves as a personal quick-reference guide for routine development and system administration tasks.

0
ProgrammingDEV Community ·

Key Django QuerySet Tips to Reduce Database Hits and Boost Performance

A developer note originally published in March 2020 outlines practical techniques for optimising Django QuerySet efficiency. Django QuerySets use lazy evaluation, meaning database queries are only executed when the results are explicitly requested. Developers can improve performance by leveraging QuerySet caching with the 'with' template tag, using 'select_related()' and 'prefetch_related()' to minimise redundant database hits, and accessing foreign key values directly rather than fetching entire related objects. The '@cached_property' decorator is recommended for expensive model computations to prevent repeated database lookups. Additionally, using 'queryset.exists()' is advised when only checking for the presence of results, though it should be avoided if the full queryset will be needed later anyway.

0
ProgrammingDEV Community ·

Essential Ubuntu Terminal Commands: A Quick Reference Guide

A developer shared a concise reference guide for commonly used Ubuntu terminal commands, originally written on March 6, 2020. The guide covers key operations including uninstalling packages with full dependency removal using apt-get purge --auto-remove. It also includes commands for listing installed packages, switching users, and searching for files by name. Additional tips cover listing all files including hidden ones and checking the system's configured timezone. The reference serves as a handy cheat sheet for Linux users working in Ubuntu environments.

0
ProgrammingHacker News ·

Flock Safety sought to access rideshare dashcam footage for surveillance network

Surveillance technology company Flock Safety reportedly explored plans to tap into dashcams installed in rideshare vehicles to expand its data collection network. The move would have integrated footage from privately operated ride-hailing cars into Flock's broader surveillance infrastructure. Flock is already known for operating a wide network of license plate readers used by law enforcement agencies across the United States. The proposal raised concerns about the scope of private surveillance and the use of commercial vehicles as data-gathering tools without passengers' explicit knowledge.

0
ProgrammingHacker News ·

OpenAI's Head of Ethics Chloé Bakalar Departs, Raising Questions

Chloé Bakalar, who served as OpenAI's Head of Ethics, has left the company, prompting discussion about the circumstances of her departure. Her exit has drawn attention given the critical nature of her role overseeing ethical standards at one of the world's most prominent AI organizations. The departure raises broader questions about OpenAI's commitment to ethics leadership amid rapid product development. Details surrounding the exact reasons for her leaving have not been fully disclosed publicly.

0
ProgrammingDEV Community ·

Limen library enables multi-tenant auth with org roles and scoped data in Go

A new developer guide demonstrates how to build multi-tenant authentication in Go using the open-source Limen library and its Organization plugin. The setup allows a single user to belong to multiple organizations, each acting as an isolated tenant with its own members, roles, invitations, and project data. Developers can define tenant-scoped roles such as owner, admin, and member, alongside app-specific permissions like project:create. The guide uses Go 1.25+ and PostgreSQL, with optional Node 20+ support for frontend integration. A protected API endpoint is built to enforce permission checks before allowing tenant-scoped actions such as creating a project.

0
ProgrammingDEV Community ·

Solo Maintenance Tech Builds Custom Tool to Manage Seven Sites and Service Trucks

A single maintenance technician responsible for seven business locations — including a dealership, body shop, parts warehouse, and five auto parts stores — built his own digital management system after commercial work order software failed to meet his needs. Work requests previously arrived through informal channels like personal texts and verbal mentions, with no central record for tracking or follow-up. The custom tool allows anyone at any location to submit a problem report without an account, while all requests funnel into one dashboard for the technician. It also tracks scheduled maintenance and manages parts inventory separately for each physical site and each service truck, preventing the technician from arriving at a job without needed supplies. A key design choice was keeping truck inventory visible only on the back end, so public report forms show only the seven physical locations, reducing confusion for staff submitting requests.

← NewerPage 217 of 1342Older →