SShortSingh.

Programming

0
ProgrammingHacker News ·

OpenAI Calls for Coordinated Global Patching as AI Uncovers PHP Vulnerabilities

OpenAI has published a post on coordinated disclosure of critical vulnerabilities, linked to AI-driven discovery of flaws in PHP. The company frames the issue as a global challenge requiring a unified response to patch affected systems. The post is titled 'Patch the Planet' and points to the growing role of AI in finding security weaknesses. The article has drawn attention on Hacker News, where it gathered 38 points and 9 comments. Details beyond the headline and linked post were not included in the source material.

0
ProgrammingHacker News ·

Meta's No Kings Takedown Raises Questions About Relying on Platforms for Reach

A Techdirt article examines a reported takedown of content related to the No Kings protest movement on Meta's platforms. The piece argues that the incident illustrates the risks of depending on a single company's platform to reach an audience. It questions whether the removal was accidental or deliberate, a point the headline itself raises. The author uses the episode to make a broader case against entrusting public speech to privately controlled services. The discussion was also picked up on Hacker News, where it drew modest attention.

0
ProgrammingHacker News ·

DuckDB Releases Version 2.0.0 LTS, Codenamed "Cinnamon Teal"

DuckDB, the open-source analytical database engine, has announced version 2.0.0, a long-term support (LTS) release codenamed "Cinnamon Teal." The announcement was published on the project's website on October 21, 2026. The LTS designation signals that this version is intended to receive extended maintenance and support for users who need stability. The news drew moderate attention on Hacker News, where it gathered 20 points and 3 comments. Further details about the release's specific features are available in the full announcement on the DuckDB website.

0
ProgrammingHacker News ·

Compromised LiteLLM 1.107.0 on PyPI Installs Credential Stealer and Backdoor

A malicious version, LiteLLM 1.107.0, was published to the Python Package Index (PyPI) repository. According to the linked SafeDep report, installing this compromised release deploys a credential-stealing program and a backdoor on affected systems. The source material provided is limited to the headline and link, so further technical details such as timing, scope, and remediation steps could not be confirmed here. Developers who use LiteLLM are advised to review the original report for specifics and check whether they have installed version 1.107.0.

0
ProgrammingDEV Community ·

AI画像判定ツール4種を100枚で検証、正解率以外に重要な点

SNSで拡散する画像がAI生成かを見分けるツールは多いが、各社は正解率の測定方法を公開していないため比較が難しい。筆者は小規模な自作検証として、本物の写真50枚とAI生成画像50枚の計100枚を用意し、複数の判定エンジンにかけた。結果、Sightengineは99%、Hiveは95%の正解率を示し、どちらも本物の写真をAIと誤判定しなかった。一方でサンプル数が少ないエンジンもあり、単純な順位付けはできないと筆者は強調している。さらに、正解率の内訳では本物をAIと誤認する誤りの方が実害が大きい点や、判定しきい値の選び方で結果が大きく変わる点が指摘された。

0
ProgrammingHacker News ·

PHP2Shell: New Project Page Describes a PHP-Related Shell Technique

A website titled PHP2Shell was shared on Hacker News, drawing 21 points and 2 comments. The linked page appears to describe a technique or tool related to PHP and shell access. The submission provides only a title, link, and discussion metrics, with no detailed article text available. Further specifics about its purpose or scope could not be confirmed from the available material.

0
ProgrammingDEV Community ·

Later-Sloth: A Browser-Based Tool That Sorts Digital Clutter Using an Open Model

A developer has built Later-Sloth, a small website that helps users organize messy digital material such as unread group chats, unopened inboxes, and poorly named files. The tool runs the open-weight Flan-T5 model directly in the browser using Transformers.js, so pasted text stays on the user's device after the initial model download. Given the input, it returns a short morning brief, a suggested folder plan, and a wind-down summary. The project's code is hosted on GitHub, and its front end is served through a minimal Express app on Render, with no closed-vendor API or server-side prompt logging involved. The developer argues that a smaller open model running locally offers privacy and offline use without per-token costs, compared with a larger closed service.

0
ProgrammingDEV Community ·

Seven Firefox Settings and Extensions That Noticeably Improve Browsing

Many people stick with default browser settings for years, missing easy improvements. This guide shares a practical Firefox setup that takes about 15 minutes to implement. It recommends replacing the default new tab with a dashboard extension showing weather and world clocks, and installing uBlock Origin to block ads and trackers. It also suggests Firefox Multi-Account Containers to isolate sites like social media from other browsing, choosing a more privacy-focused search engine, and enabling HTTPS-Only Mode. Finally, it advises reviewing installed extensions for unused or risky ones and using Firefox Sync across devices.

0
ProgrammingDEV Community ·

Guide Explains Translating Magento 2 Product Descriptions for Multilingual Stores

A DEV Community article outlines how online merchants running multilingual stores can manage translations of Magento 2 product content. It notes that translated descriptions help customers in international markets understand products and make informed purchases. The piece identifies common obstacles, including handling large catalogs, preserving meaning and technical accuracy, keeping terminology consistent, and reviewing machine or AI-generated output. It then proposes a step-by-step workflow covering identifying content, choosing among manual, machine, or AI-assisted translation, reviewing the output, and validating it before publication.

0
ProgrammingDEV Community ·

Test: Vier KI-Bilderkennungstools prüfen 100 Fotos auf Echtheit

Ein Entwickler testete vier KI-Bilderkennungs-Engines mit 100 Bildern, darunter 50 echte Fotos und 50 KI-generierte Bilder aus sechs Generator-Familien. Die Tests fanden am 13. Oktober 2026 statt, wobei auch bearbeitete, nachkomprimierte und als Screenshot gespeicherte Bilder einbezogen wurden. Sightengine erreichte 99 Prozent und Hive 95 Prozent Genauigkeit, während AI or Not und WasItAI nur auf kleinen Stichproben getestet wurden, da sie kostenlose Testkontingente hatten. Der Autor betont, dass die Stichproben zu klein sind für eine Rangliste und dass falsch-positive Ergebnisse, bei denen echte Fotos als KI markiert werden, anders zu gewichten sind als übersehene KI-Bilder.

0
ProgrammingDEV Community ·

Four Core OOP Ideas in Python Explained with Simple Examples

This tutorial introduces object-oriented programming, which organizes code around objects built from classes, comparing a class to a blueprint and an object to what it produces. It walks through a basic Dog class to show how the constructor sets up initial data and how methods act on that data. The four core principles are then covered: encapsulation, which keeps data and behavior together and guards access, and inheritance, which lets a child class reuse a parent's code. Polymorphism is shown through different classes responding to the same method name in their own way, while abstraction hides internal complexity behind a simple interface. The article closes with a recap table and notes that future posts will cover abstract base classes and name mangling.

0
ProgrammingDEV Community ·

Bitcoin peut être acheté en fractions, grâce à sa divisibilité jusqu'au satoshi

Le Bitcoin est divisible jusqu'à un centième de millionième d'unité, appelée satoshi, ce qui permet d'en acquérir une portion sans payer le prix d'un bitcoin entier. Un investisseur peut par exemple placer 500 euros pour détenir 1 % d'un bitcoin valant 50 000 euros. Le guide explique la démarche : choisir une plateforme d'échange fiable prenant en charge les fractions, créer un compte sécurisé, déposer des fonds puis passer un ordre d'achat en euros ou en quantité de bitcoins. Il recommande ensuite de transférer ses avoirs vers un portefeuille personnel, idéalement matériel, pour renforcer la sécurité. Ces informations s'appuient sur un scénario fictif illustrant le principe.

0
ProgrammingDEV Community ·

Browser-based manga text erasure without an inpainting model

imgtranslator.com translates text inside images and redraws the translation in place, with OCR and translation handled on a server. The erasing step runs on a canvas in the browser, and the author deliberately avoided generative inpainting because it can silently alter non-text content such as prices or faces. The first hand-written pixel-rule eraser assumed text colour could be inferred from contrast with the strips above and below each box, which failed badly on manga. A second approach instead treats text as the colour that is common inside an OCR box but rare in a ring just outside it. Failures across 166 real uploads and 2,115 boxes were analysed, with the author noting that vertical manga columns were especially problematic.

0
ProgrammingDEV Community ·

Developer Builds Zero-Dependency Firefox New Tab Extension in Vanilla JavaScript

A developer documented building Weather & Clock Dashboard, a Firefox extension, using only HTML, CSS, and JavaScript with no frameworks, build tools, or dependencies. The author chose this approach to keep the extension under 100KB, avoid breakage from dependency updates, and make it easier for web developers to contribute. The write-up explains the basic extension structure, including a manifest.json file that overrides the new tab page. It also shows how the extension uses OpenWeatherMap's free API, native time zone handling, system dark mode detection, and localStorage caching to keep loading fast.

0
ProgrammingDEV Community ·

Audit finds AI memory store gave every entry top confidence, then downgraded 2,439 records

A developer auditing the memory store of a personal AI system found 2,466 active memories, all assigned the highest trust score of 1.0. Most of the inflated scores came from two bulk import batches that bypassed the normal source-based review process. Twenty-seven of the entries were summaries the system had generated from other memories, yet they carried the same verified-grade marker as firsthand records. The author argues this created a form of trust laundering, where provenance was lost with each pipeline pass. The team downgraded 2,439 memories in a single night, reasoning that false certainty is more dangerous than acknowledged ignorance in systems that act on their stored knowledge.

0
ProgrammingDEV Community ·

Solo developer releases three free browser games: NFL clock puzzle, daily Pokémon challenge, party guessing

An independent developer has launched three free games that run entirely in a web browser without downloads or sign-ups. 2 Minute Drill places players in the final two minutes of an NFL game, where they manage the clock, timeouts, and play calls. Daily Red offers a single daily Pokémon battle against a fixed team that is identical for every player worldwide, allowing strategy comparisons. Noillirk is a party word-guessing game in which players aim to match the majority answer across seven 15-second questions, with optional multiplayer rooms. The creator says short sessions and browser-only access helped keep players engaged, and is asking for feedback on confusing and overly easy elements.

0
ProgrammingDEV Community ·

Esports Odds APIs Offer Match Odds and Data Feeds for CS2, LoL, Dota 2 and Valorant

Esports odds APIs give developers programmatic access to real-time betting lines from multiple sportsbooks for competitive gaming tournaments. Coverage typically spans titles such as League of Legends, Counter-Strike 2, Dota 2, Valorant and Call of Duty, though providers differ in which games they include. Common markets include match winners, map totals, map handicaps, first kills, round-by-round live betting and tournament futures. Esports data APIs are separate: they supply match results, live scores, player statistics, rosters and patch versions but carry no prices, so betting products usually pair them with an odds feed. Official data typically comes from publishers or tournament organizers through a single licensed distributor per title or league.

0
ProgrammingHacker News ·

PHP releases updated versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35

The PHP project has published new maintenance releases across four of its supported branches, numbered 8.5.12, 8.4.27, 8.3.36 and 8.2.35. The updates were announced on the official php.net website and drew attention on Hacker News, where the post gathered 208 points and 63 comments. The source material provided does not describe the specific fixes or changes included in these releases. Developers running any of these branches can find the release details and download links on the official PHP site.

0
ProgrammingHacker News ·

PHP 8.2.35 Released on GitHub

A new maintenance release of PHP, version 8.2.35, has been published on the php-src GitHub repository. The release was shared on Hacker News, where it gathered 251 points and 88 comments. The source material provides only the release link and discussion metrics, without detailing the specific fixes or changes included. Readers interested in the update can find the release notes and download details on the official GitHub release page.

← NewerPage 238 of 3032Older →