SShortSingh.

Programming

0
ProgrammingHacker News ·

GitHub Reports Another Service Incident, Per Its Status Page

GitHub has logged a new incident on its public status page, as referenced by a Hacker News post. The item links directly to the incident report hosted on githubstatus.com. The post drew modest attention on Hacker News, with 8 points and one comment at the time of capture. The source material provides no details on the affected services, the duration of the disruption, or its root cause. Readers seeking specifics should consult the linked GitHub status incident page.

0
ProgrammingDEV Community ·

Detecting Website Technologies: Why Reliable Domain Analysis Is Hard

A developer building SalesData.in, a domain-intelligence platform, explains the difficulties of identifying the technologies behind a website. Detection is complicated because sites may conceal fingerprints, serve assets through CDNs, customize installations, or run several technologies at once. Relying on one signal risks false positives and false negatives, so the approach combines evidence such as HTML patterns, asset paths, HTTP headers, DNS records, and SSL data. Engineering challenges include handling incomplete responses, keeping records consistent across rescans, validating detection rules against real sites, and distinguishing missing signals from failed scans. The author notes that technology detection is only one part of broader domain analysis.

0
ProgrammingDEV Community ·

UE5 Devlog Details Blueprint Sprint and Stamina System Linked to Hydration and Health

A developer's devlog describes a Blueprint-based sprint and stamina system built in Unreal Engine 5 and tied to the player's health and thirst. Hydration drains at a steady rate while walking, and sprinting uses stamina while speeding up that loss. When stamina runs out, the added sprint drain stops, but the normal drain continues. Reaching zero hydration causes the player to start losing health, so resource management becomes part of movement. Drinks restore hydration, medkits recover health, and the UI highlights critical levels as resources drop.

0
ProgrammingDEV Community ·

Student Builds Offline App That Turns Lectures and PDFs into Summaries and Flashcards

A developer has released Lazy Student AI, a free desktop application that runs entirely offline to help students study. Users drop in a lecture video, audio file, or PDF, and the app extracts the text, then generates bullet-point summaries and interactive flashcards. The tool uses Google's open-weight Gemma 2B model via Ollama for summarization, with OpenAI's Whisper and FFmpeg handling speech transcription, all orchestrated by a Spring Boot backend. The developer emphasized zero running costs and privacy, since lecture content never leaves the user's machine. The project was submitted to a Hacktoberfest open-source AI challenge.

0
ProgrammingDEV Community ·

DuckDB 2.0 LTS Brings In-Process Analytics to Android and iOS Apps

DuckDB 2.0 LTS, a stable long-term-support release, enables embedded OLAP analytics directly inside Android and iOS applications. The article describes integrating it on Android via a JVM artifact in Gradle and on iOS through the Swift Package Manager. It highlights querying local Parquet files on-device, which avoids network round trips and keeps working offline. According to the author's benchmark on a Pixel 7 with 1 million rows, DuckDB ran common aggregations and window functions several times faster than SQLite. The piece also advises on memory budgeting and background execution for mobile constraints.

0
ProgrammingDEV Community ·

Connector Lets AI Agents Query Basque Government Open Data via Filters and SPARQL

A developer describes an MCP connector that gives AI agents access to Open Data Euskadi, the Basque Government's public data portal. It offers two tools: search_euskadi_content, which supports strict metadata filters such as language and date ranges for targeted catalog lookups, and execute_sparql_query, which enables graph traversal over linked open data. The article argues that semantic, relationship-aware querying lets researchers uncover connections between grants, contracts, and environmental data without manual CSV exports. The connector is built on the author's MCPFusion framework, which is designed for consistent error handling and reliability under load. The piece also raises questions about how much trust to place in agents with read or write access to public registries.

0
ProgrammingDEV Community ·

Two-model review gate to stop AI coding agents from falsely declaring tasks done

An engineer describes a review process for AI coding agents, in which a separate model checks completion claims against a locked acceptance contract. The contract defines binary 'done' criteria and conditions that count as not done even when the agent reports success. A second, read-only reviewer must cite specific files and lines for each verdict and repeat until it approves or a round cap triggers human escalation. The author says the reviewer's independence matters more than its raw capability. The approach was tested on a small Node browser-automation toolkit over four review rounds, including one where the gate caught a claimed fix that had not actually been applied.

0
ProgrammingDEV Community ·

Omostrich 0.3 adds QR code login for Nostr apps

Omostrich, a tool that keeps a Nostr key encrypted on the user's own computer, has released version 0.3.0. The update lets users connect phone apps such as Amethyst by scanning a QR code instead of copying long connection strings. It also supports scanning codes shown by other apps using the laptop camera, or pasting a copied code, with the camera switching off once a code is read or after two minutes. Users can now approve or deny multiple pending signing requests in one click, and saved relay settings are no longer overwritten. The QR features require three additional packages, and users updating an existing install must restart the signer service.

0
ProgrammingDEV Community ·

Fractional DevRel: What Part-Time Developer Relations Costs and Who Benefits

Fractional DevRel lets companies hire a senior developer relations leader part-time on a monthly retainer rather than a full-time salary. Typical deals run about $4,000 to $15,000 per month, compared with $180,000 to $250,000 or more annually for a full-time senior hire once benefits and taxes are included. The arrangement suits devtool and SaaS teams that need strategic direction, a first program, or a low-risk trial before committing to a permanent role. It is less suitable for teams requiring constant daily output, such as frequent events or always-on community management. The article cites the 2025 Stack Overflow Developer Survey to explain why documentation and developer-to-developer resources remain central to adoption.

0
ProgrammingDEV Community ·

How to verify webhook signatures correctly: raw body, timing-safe comparison, replay window

FlightByte, a flight status API, sends signed webhooks, and its guide explains how receivers should verify them. Each delivery carries a signature header containing a Unix timestamp and an HMAC-SHA256 value computed over the timestamp and the raw request body. The timestamp is included in the signed material so that captured deliveries cannot be replayed with a fresh time. The signature covers exact bytes, so verifiers must read the unparsed raw body, since re-serialising parsed JSON produces different bytes and causes verification to fail. The guide shows framework-specific approaches for Express, Fastify, and Next.js to preserve the raw payload.

0
ProgrammingDEV Community ·

What AI Automation Means and How It Differs From Traditional Automation and AI Agents

An introductory guide explains that workplace terms like automation, AI, AI automation, and AI agents form a hierarchy of increasingly capable technologies. Traditional automation follows strict rule-based logic, while AI handles pattern recognition and unstructured data such as text and language. AI automation combines the two, allowing workflows to interpret messy inputs like invoices and route them dynamically. A comparison table outlines what each technology can and cannot do, with business examples such as sentiment categorization and invoice extraction. The article concludes that the most practical starting point is identifying repetitive weekly tasks, such as customer support triage, that are suited to automation.

0
ProgrammingDEV Community ·

Life of Alex Devlog Shows Interaction Awareness System with Icons and Depth Highlights

A developer has shared a progress update on an interaction awareness system for the early-stage game Life of Alex, built in Unreal Engine 5. The system uses icon widgets to signal which objects can be interacted with. A custom depth effect makes those objects stand out from their surroundings. The developer says the goal is to keep exploration intuitive without cluttering the screen or breaking immersion. Since the project is still in early development, the features shown may change as work continues.

0
ProgrammingHacker News ·

Cloudflare Rolls Out WAF Protections Against php2shell PHP Vulnerability

Cloudflare has deployed web application firewall protections targeting a vulnerability known as php2shell. The company published a blog post detailing the protective measures it has put in place for its customers. The announcement drew attention on Hacker News, where it gathered 24 points and two comments. The source material provides limited technical detail about the flaw's exact nature and impact.

0
ProgrammingHacker News ·

OpenAI Calls for Coordinated Global Patching as AI Uncovers PHP Vulnerabilities

OpenAI has published a post on coordinated disclosure of critical vulnerabilities, linked to AI-driven discovery of flaws in PHP. The company frames the issue as a global challenge requiring a unified response to patch affected systems. The post is titled 'Patch the Planet' and points to the growing role of AI in finding security weaknesses. The article has drawn attention on Hacker News, where it gathered 38 points and 9 comments. Details beyond the headline and linked post were not included in the source material.

0
ProgrammingHacker News ·

Meta's No Kings Takedown Raises Questions About Relying on Platforms for Reach

A Techdirt article examines a reported takedown of content related to the No Kings protest movement on Meta's platforms. The piece argues that the incident illustrates the risks of depending on a single company's platform to reach an audience. It questions whether the removal was accidental or deliberate, a point the headline itself raises. The author uses the episode to make a broader case against entrusting public speech to privately controlled services. The discussion was also picked up on Hacker News, where it drew modest attention.

0
ProgrammingHacker News ·

DuckDB Releases Version 2.0.0 LTS, Codenamed "Cinnamon Teal"

DuckDB, the open-source analytical database engine, has announced version 2.0.0, a long-term support (LTS) release codenamed "Cinnamon Teal." The announcement was published on the project's website on October 21, 2026. The LTS designation signals that this version is intended to receive extended maintenance and support for users who need stability. The news drew moderate attention on Hacker News, where it gathered 20 points and 3 comments. Further details about the release's specific features are available in the full announcement on the DuckDB website.

0
ProgrammingHacker News ·

Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer and Backdoor

A malicious version, LiteLLM 1.107.0, was published to the Python Package Index (PyPI) repository. According to the linked SafeDep report, installing this compromised release deploys a credential-stealing program and a backdoor on affected systems. The source material provided is limited to the headline and link, so further technical details such as timing, scope, and remediation steps could not be confirmed here. Developers who use LiteLLM are advised to review the original report for specifics and check whether they have installed version 1.107.0.

0
ProgrammingDEV Community ·

AI画像判定ツール4種を100枚で検証、正解率以外に重要な点

SNSで拡散する画像がAI生成かを見分けるツールは多いが、各社は正解率の測定方法を公開していないため比較が難しい。筆者は小規模な自作検証として、本物の写真50枚とAI生成画像50枚の計100枚を用意し、複数の判定エンジンにかけた。結果、Sightengineは99%、Hiveは95%の正解率を示し、どちらも本物の写真をAIと誤判定しなかった。一方でサンプル数が少ないエンジンもあり、単純な順位付けはできないと筆者は強調している。さらに、正解率の内訳では本物をAIと誤認する誤りの方が実害が大きい点や、判定しきい値の選び方で結果が大きく変わる点が指摘された。

0
ProgrammingHacker News ·

PHP2Shell: New Project Page Describes a PHP-Related Shell Technique

A website titled PHP2Shell was shared on Hacker News, drawing 21 points and 2 comments. The linked page appears to describe a technique or tool related to PHP and shell access. The submission provides only a title, link, and discussion metrics, with no detailed article text available. Further specifics about its purpose or scope could not be confirmed from the available material.

← NewerPage 236 of 3030Older →