SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer Builds Postgres-Backed Rate Limiter to Protect Public Netlify Function

Kaleb, a web developer in Pompano Beach, Florida, added a public chat widget to his business website, which runs on a stateless Netlify serverless function. Shortly after deployment, he noticed automated script traffic repeatedly targeting the endpoint. Because in-memory caching fails across scaling container instances, he chose to use his existing PostgreSQL database as a shared store for request counts rather than adding Redis or an edge key-value service. The approach tracks requests per client IP within a rolling window, rejecting clients that exceed ten requests per minute with a 429 status code. The article includes the table schema and JavaScript code, and Kaleb argues the small added latency is acceptable for a low-traffic site.

0
ProgrammingDEV Community ·

Chatbots Answer Questions, While AI Agents Complete Defined Jobs

The article distinguishes a chatbot, which replies to questions with text, from an AI agent, which carries out a specific task step by step and returns a finished, usable result. It describes specialized agents as built for one kind of work and performing it consistently, in contrast to general-purpose chatbots. The author introduces Enterprise AI, a single console offering 42 such agents across categories like marketing, customer support, finance, and procurement. The pitch centers on replacing scattered subscriptions with one login, one usage view, and predictable pricing, with failed runs not charged. The project is described as being built openly from Sahiwal, Pakistan.

0
ProgrammingDEV Community ·

AI Assistant Misspelled Customer Names Despite Correct Data, Dash Developers Report

The developers of Dash, an AI assistant inside a bookkeeping app for small shops, found that the assistant often retrieved correct data but then misspelled names when writing its replies. Because users write in Arabic, Kurdish and English, where names often differ by only a letter, errors like "Karim" becoming "Kiram" produced plausible-looking but wrong names. The mistakes persisted across turns because the model reread and trusted its own earlier wrong replies. Simply asking the model to regenerate answers did not reliably fix the problem and added cost and delay. The team therefore built a narrow post-processing check that swaps a single near-miss word for the correct name from the conversation's data and logs the change.

0
ProgrammingDEV Community ·

GreenBuddy AI: Open-Source Gardening Assistant Runs Locally on Qwen via Ollama

A developer has released GreenBuddy AI, an open-source gardening assistant built with Python, Flask, and JavaScript for a Hacktoberfest challenge. The tool suggests location-aware gardening tasks, such as checking soil moisture and inspecting leaves, and lets users assign due dates and track completion. It runs locally using the Qwen 2.5 3B model through Ollama, so it does not depend on a paid hosted AI API. Checklists are saved in the browser so they persist after a page refresh. The project is not yet publicly deployed, and the developer has invited feedback and contributions on GitHub.

0
ProgrammingDEV Community ·

Sloth Sorter: a local AI tool that tidies cluttered folders

Sloth Sorter is a Python script that reads messy folders, such as a cluttered Downloads directory, and proposes a category and descriptive filename for each file. Users review a dry-run plan and approve it with a single flag before anything is moved. The tool was built as a submission to the Hacktoberfest Open-Source AI Challenge and runs an open-weight model locally through Ollama, with llama3.2:3b as the default. Its author chose local processing so sensitive files like tax forms and IDs are never sent to a hosted API. Safeguards include an undo log, no overwriting of existing files, and skipping recently modified files.

0
ProgrammingDEV Community ·

Non-Custodial Status in Crypto Wallets Exists on a Spectrum of User Control

A DEV Community article argues that calling a wallet 'non-custodial' is too coarse a label, and that engineers should ask who can move assets, under what conditions, and who must cooperate to end that access. The piece presents a spectrum ordered by the user's unilateral control, starting with plain externally owned accounts, where a single private key governs everything and compromised access cannot be selectively revoked. It then contrasts smart accounts, which allow scoped delegated permissions that the owner can revoke on-chain without operator cooperation, though this introduces contract-level risk. The article also examines embedded wallets with application-controlled secondary signers, where revocation may depend on the operator removing the signer. Overall, the author stresses that the relevant evidence is the actual contract or revocation path rather than the label or a settings toggle.

0
ProgrammingDEV Community ·

Seven data traps in job postings, found while counting 61,600 open roles

On October 21, the authors tallied every open job at 2,871 tech companies using career pages hosted on Greenhouse, Lever, Ashby and SmartRecruiters. They found that raw posting data is misleading, with duplicate listings for the same role across cities, boards that behave like recruiters, and batch-published or evergreen postings. Snapshot timing also distorts results, since weekend counts make hiring appear frozen. Location labels and remote flags are inconsistent, and salary data varies in format, currency and period. The authors recommend specific counting rules and separate storage of salary fields to avoid these errors.

0
ProgrammingHacker News ·

Student Builds Hedra, a 3D Open World Game From Scratch in High School

A developer has shared Hedra, a 3D open world game that they wrote entirely from scratch while still attending high school. The project is hosted on GitHub, with the linked repository reflecting a pre-AI version of the codebase. The post appeared on Hacker News, where it gathered a small amount of attention with 6 points and one comment. The source material provides few additional details about the game's features or development timeline.

0
ProgrammingHacker News ·

New app lets users build a world on their phone and explore it in XR headsets

A developer has released a project on Hacker News called Show HN that lets people construct a world using a phone. The creations can then be explored in extended reality on Apple's Vision Pro and Meta's Quest headsets. The post linked to a web page for the project, which received three points and no comments at the time it was listed. The source material provides limited detail beyond the project's core concept and platforms.

0
ProgrammingHacker News ·

Show HN: New Set of Prompts Aimed at Generating UI Micro-Interactions with AI

A developer has shared a project on Hacker News presenting prompts designed to help AI tools produce UI micro-interactions. The project is hosted on the typeui.sh website under a dedicated micro-interactions page. The post, submitted as a 'Show HN' item, had gathered 5 points and no comments at the time of the listing. The available information is limited to the project's link and engagement metrics, so details about its specific features or methodology are not provided.

0
ProgrammingHacker News ·

Award-Winning AI Literature Spotlighted in Hacker News Discussion

A post on Hacker News links to an article titled "Award-Winning AI Literature" hosted on jamesyu.org. The item has earned 7 points and has not yet drawn any comments. The available material includes only the headline, source links, and engagement figures, without the article's full text. Because the body of the piece is not provided, its specific claims about AI-generated literature and any awards cited cannot be confirmed here.

0
ProgrammingHacker News ·

Paper Examines How AI May Enclose the Scientific Commons

A new arXiv paper titled "AI and the Enclosure of the Scientific Commons" has been shared on Hacker News, drawing a small amount of attention. The item links to the paper's abstract page rather than providing its full text. Based on the title, the work appears to address concerns that artificial intelligence could restrict open access to shared scientific knowledge. The available source material does not include the paper's specific findings or arguments. The Hacker News discussion had received seven points and no comments at the time of the listing.

0
ProgrammingHacker News ·

AI analysis of heart CT scans flags coronary inflammation in 42.9% of asymptomatic patients

Biograph has completed what it describes as the first U.S. study using Caristo Diagnostics' AI-powered coronary inflammation detection. The analysis of CT scans identified coronary inflammation in roughly 42.9% of patients who showed no symptoms. The findings suggest that a substantial share of people without obvious heart disease symptoms may still carry elevated cardiovascular risk. The technology aims to detect this inflammation from imaging that is already routinely acquired. The source information available is limited, and details on the study's sample size and clinical follow-up are not provided.

0
ProgrammingHacker News ·

Show HN: agent-usage-guard, a Claude Code mod for protecting your usage window

A developer has shared agent-usage-guard, a modification for Claude Code, on Hacker News under the Show HN label. The tool is designed to protect a user's usage window, the limit period governing how much Claude Code can be used. The project is hosted on GitHub and drew 7 points and 3 comments on Hacker News. The source material provides only the project link and basic engagement metrics, so details on its specific mechanisms are not available.

0
ProgrammingDEV Community ·

Turning Mexico's FONE Pay Calendar PDF into Structured, Verifiable Data

Mexico's DGSANEF publishes the FONE education payroll calendar as an annex, a document written for human reading rather than machine use. Because hundreds of thousands of federalized teachers rely on these dates, the independent site PortalFone converted the annex into a structured, quincena-by-quincena calendar page. The project separated ordinary and extraordinary payroll dispersion from check delivery and bank deposit, since merging them into one payday field can spread confusion. Each entry keeps its source trail to the official annex, and a client-side CURP/RFC validator checks identifiers without sending data off the device. The result is one canonical, regularly updated page in place of recurring screenshots of the PDF.

0
ProgrammingDEV Community ·

Authtics Host Adds Built-In Developer Panel for Debugging Apps From a Phone

A developer built Authtics Host, also called HostJS, a TypeScript web framework inspired by Next.js that supports SSR, SSG, CSR, and a beta SRTWS mode. The framework includes a built-in Developer Panel, created because the author often develops on a phone and wanted to avoid switching between separate debugging tools. The panel offers eight tabs covering logs, route and page info, network requests, client details, the framework version, and server metrics such as heap and CPU usage. It also lets developers restart or shut down the running app and pause or resume incoming users, depending on access configuration. The author describes the setup steps, which require Node.js 22 and an npm install, and notes the framework is still under development.

0
ProgrammingDEV Community ·

Port 514 dominates ZoomEye syslog results, complicating FortiAnalyzer exposure measurement

ZoomEye queries run on 23 October 2026 returned 14,860 hosts fingerprinted as FortiAnalyzer, but none of them showed a matching TLS service. The port 514 query returned 994,157 results, a count inflated by the many syslog-emitting devices on the internet, while port 6514 returned just one. The analysis argues that the port-based count is the least meaningful of the four queries and the one most likely to be misquoted. Because FortiAnalyzer aggregates security logs and configuration records, the article stresses checking whether a specific firmware build appears in Fortinet's advisory affected lists, citing PSIRT advisories FG-IR-26-178 and FG-IR-25-246. It also recommends comparing log retention windows against organisational detection latency.

0
ProgrammingDEV Community ·

Bing Adds Topics Portfolio Beta to Show Gaps in AI Search Citations

Microsoft has launched Topics Portfolio, a beta feature in Bing Webmaster Tools that shows publishers where their content is cited in AI-generated search responses and where it is missing. The tool sits within AI Performance reports and groups grounding queries, the search terms Bing's AI uses for Copilot, Bing AI summaries and partner integrations, into broader themes. For each topic it shows approximate citation volume, the number of sites cited and the number of queries, while flagging high-potential queries where competitors are cited but the user's site is not. Microsoft presents the feature as a planning aid rather than an exact measurement system, and citation figures are shown as ranges. Users can start by opening the AI Performance report, selecting the Topics tab and choosing a one- to three-month window.

0
ProgrammingDEV Community ·

Why Deep Work on a Hard CI Bug Went Wrong and How a Clearer Approach Fixed It

A developer spent a long day and night chasing an elusive bug in a CI pipeline, losing track of their own exhaustion and pressure from their supervisor. The root cause turned out to be a backwards-incompatible update in a dependency of a dependency, which was resolved by pinning an older version. On a later occasion, the developer set expectations with their supervisor upfront and debugged by entering the Docker container interactively, which allowed faster testing of fixes. The author argues that the difference between the two experiences lay not in concentration but in awareness of their own state and situation. The account is presented as a reflection on deep work, especially relevant when coding agents parallelize tasks but cannot replace focused human attention.

0
ProgrammingDEV Community ·

PHP Releases Fixes for Two Critical Remote Code Execution Flaws

PHP published patches on October 21 addressing CVE-2026-109618 and CVE-2026-109619, two critical vulnerabilities that could allow unauthenticated remote code execution. The fixed versions are 8.2.35, 8.3.36, 8.4.27 and 8.5.12, or vendor packages carrying equivalent fixes. PHP-FPM users are also required to apply the update. The article advises administrators to confirm the PHP runtime actually serving web requests, not just the command-line version, and to check every deployed instance, including containers, staging servers, and forgotten applications. It also warns that vendors may backport fixes without changing version numbers, and that updating Composer dependencies does not install runtime patches.

← NewerPage 22 of 2837Older →