SShortSingh.

Programming

0
ProgrammingDEV Community ·

Gemini Tops Structured Document Extraction Benchmark Against Claude and OpenAI

A team of engineers benchmarked Gemini, Claude, and OpenAI models on extracting structured data from ten handwritten forms using LangSmith and LangGraph. Models were evaluated on three metrics: partial field accuracy, exact full-record match, and cost efficiency per correct field. Gemini 2.5 Pro and Claude Opus tied on field accuracy at 93.4%, but Gemini produced more perfectly extracted records, completing 7 out of 11 correctly. Among budget-tier models, Gemini Flash Lite outperformed OpenAI's flagship GPT model on field accuracy while costing significantly less. The benchmark highlights that no single model leads across all metrics, and the best choice depends on whether a use case prioritises accuracy, full-record precision, or cost.

0
ProgrammingDEV Community ·

JavaScript at 30: From Netscape Side Project to Web Development Backbone

JavaScript is a programming language created in 1995 by Brendan Eich at Netscape, originally named Mocha before being renamed LiveScript and finally JavaScript. Despite sharing a similar name, JavaScript and Java are entirely separate programming languages with distinct purposes. To ensure consistency across platforms, ECMA International introduced the ECMAScript standard in 1997, with the landmark ES6 release in 2015 adding major features like arrow functions, classes, and promises. Beyond its original role of adding interactivity to web pages, JavaScript now powers backend systems via Node.js, as well as mobile and desktop applications. This broad versatility has established JavaScript as one of the most widely used and influential programming languages in modern software development.

0
ProgrammingHacker News ·

US Government Ran Surveillance Campaign Targeting Anti-ICE and Leftwing Protesters

The US government conducted a mass surveillance operation directed at left-wing activists and protesters opposing Immigration and Customs Enforcement (ICE). The campaign was reported by The Guardian on August 13, 2026, based on findings about federal monitoring activities. The spying targeted individuals involved in anti-ICE demonstrations across the country. The revelations have raised significant concerns about civil liberties and the scope of government surveillance of political dissent.

0
ProgrammingDEV Community ·

How JD Logistics Uses AI and Robotics to Power Its Supply Chain

JD Logistics, the supply chain arm of Chinese e-commerce giant JD.com, has expanded well beyond parcel delivery into a technology-driven platform covering warehousing, cold-chain, cross-border fulfillment, and last-mile delivery. The company embeds artificial intelligence throughout its operations, using demand forecasting models that draw on historical sales, seasonal trends, and regional data to position inventory before orders are placed. Automated warehouse systems, such as its LangzuTech Goods-to-Person technology, use robotics to move products to picking stations, reducing reliance on manual labor while coordinating thousands of tasks simultaneously. Sophisticated software manages robot coordination, task scheduling, and real-time inventory decisions across a geographically distributed network of warehouses and delivery stations. Together, these technologies represent a shift in logistics from reactive order fulfillment to proactive, data-driven supply chain optimization.

0
ProgrammingDEV Community ·

Developer argues AI coding tools should follow, not replace, mastering the basics

A developer and author argues that the rise of AI coding assistants like Copilot, Claude, and Cursor has created a widening gap between generating code and truly understanding it. He warns that AI-produced code can appear functional while hiding subtle flaws — such as missing database indexes or faulty authorization logic — that only developers with solid fundamentals will catch. In response, he wrote a two-part book series covering frontend and backend development, deliberately withholding AI tools until readers have hand-built and debugged projects themselves. The capstone project involves building the same Recipe Box app three times — in vanilla HTML/CSS/JS, React, and Next.js — to make the differences between approaches concrete. His core argument is that developers should use AI to accelerate their work, not to outsource their judgment.

0
ProgrammingDEV Community ·

Seven Architectural Reasons AI Agents Fail in Production — And How to Fix Them

A software engineer who has debugged AI agent deployments for a fintech, a logistics firm, and a SaaS vendor argues that most production failures stem from flawed architecture, not the underlying language model. The core problem, they contend, is that agent frameworks rarely answer two critical questions clearly: what information enters the context, and when should the loop stop. Among the most common failures identified is the absence of a defined terminal state, which can cause agents to declare tasks complete in unintended or harmful ways. A second major vulnerability involves prompt injection, where untrusted content retrieved by tools manipulates the agent into taking unauthorized actions. The author concludes that as AI agents scale, the greater risk is not insufficient intelligence but a lack of explicit design around stopping conditions and trust boundaries.

0
ProgrammingDEV Community ·

NocoBase blocks .doc and .xls uploads due to content-based MIME detection flaw

NocoBase's file manager rejects legacy Word and Excel uploads even when their MIME types are correctly listed in the allowlist, as discovered during testing on version 2.1.23. The platform inspects file contents rather than relying on browser-declared Content-Type or file extensions to determine MIME types. Legacy .doc and .xls files are identified as application/x-cfb due to their shared OLE2 Compound File Binary format, while modern .docx and .xlsx files register as application/zip — neither matching the standard Office MIME types users typically configure. To successfully permit these uploads, administrators must add application/x-cfb and application/zip to the allowlist instead of the conventional MIME type strings. This behavior particularly affects Japanese and Chinese enterprises that still rely heavily on legacy Office file formats.

0
ProgrammingDEV Community ·

Developer Builds Battery-Efficient Offline Geofencing App to Auto-Silence Phones

A developer created Muffle, an Android app that automatically adjusts phone sound settings based on the user's location, after an embarrassing library incident sparked the idea. The app uses Google's Geofencing API with a hybrid location accuracy approach to detect when a user enters or exits defined zones such as libraries, clinics, or mosques. To avoid excessive battery drain, the developer opted for balanced power accuracy mode instead of high-precision GPS, reducing unnecessary radio wake-ups. A loitering delay parameter was added to filter out false triggers caused by brief proximity to a geofenced area. The biggest challenge proved to be OEM-specific battery management on devices like Xiaomi and Samsung, which aggressively killed background services regardless of correct implementation.

0
ProgrammingDEV Community ·

Developer finds two-thirds of architecture rules unenforceable by automated tools

A developer maintaining a plain-English architecture document for a platform they built with an AI coding agent wanted to test how much of it could be automatically verified. After analysing all 24 documented decisions, only 8 turned out to be checkable with deterministic tooling, while 8 were unverifiable process rules and the rest were contextual knowledge statements. The developer built a custom checker that caught 13 real violations on its first run, including frontend components bypassing the service layer for months undetected. Three invariants failed to translate into checks for distinct reasons: missing structural boundaries in the code, the need for cross-file comparison logic, and semantic understanding beyond pattern matching. The exercise revealed that architecture documents often describe systems that do not yet structurally exist in the codebase, making enforcement impossible until the code catches up.

0
ProgrammingDEV Community ·

Key security principles every payment system must have built in from day one

Payment systems face security threats from the moment they handle real money, with most breaches stemming not from sophisticated attacks but from missing authorization checks on money-moving endpoints. A core principle is that account identities must be derived from server-side sessions, never from client-supplied fields, to prevent unauthorized fund transfers. Sensitive credentials such as API keys should be stored in dedicated secrets managers, scoped to only the services that need them, and must be rotatable within minutes. Additional safeguards include idempotency controls to prevent replay attacks, velocity monitoring to detect fraud patterns, and immutable audit logs covering every financial action. Data minimization, field-level access controls, and separation of duties between payment initiators and approvers further reduce the risk of both external breaches and insider threats.

0
ProgrammingDEV Community ·

Why Agent Memory Write Policies Matter More Than Retrieval

Most agent memory tutorials focus on retrieval while ignoring the more complex write-path, which determines what information actually gets stored long-term. Without a deliberate write policy, vector stores quickly fill with low-value, transient data that degrades memory quality over time. Simple approaches like storing everything or keeping only recent observations both fail because they lack a judgment layer before writing. The recommended approach treats long-term memory like a production codebase, where observations sit in a temporary scratchpad and only pass to permanent storage through an explicit, gated promotion pipeline. Security concerns compound the problem, as misconfigured network policies or access controls can silently prevent agents from reaching their own memory stores.

0
ProgrammingDEV Community ·

Developer Launches Free Online Toolset With No Signup Required

A developer has launched a free web-based toolkit aimed at simplifying common developer tasks. The site, hosted on Netlify, offers four core utilities: a JSON Formatter and Validator, a QR Code Generator, a Password Generator, and a Base64 Encoder/Decoder. All tools are freely accessible without any account registration. The creator shared the project on DEV Community and is actively seeking feedback from fellow developers.

0
ProgrammingDEV Community ·

What Is the System Namespace in .NET and Why Does It Matter?

The System namespace is the foundational layer of .NET, introduced with .NET Framework 1.0 in 2002 and continuously updated ever since. It is not a single class or file but a logical grouping that organizes core types such as String, Console, and DateTime across multiple levels separated by dots. The hierarchy spans from the root System level down to deeply nested namespaces like System.Threading.Tasks.Dataflow, each serving as an independent unit requiring its own using directive. Importantly, the logical namespace structure does not always match the physical assembly layout, meaning a namespace like System.Linq can reside in its own separate DLL. Understanding this distinction between namespaces and assemblies helps developers better navigate the architecture that underpins all C# development.

0
ProgrammingDEV Community ·

OpenAI Foundation Launches $50M Fund and New Leadership for Civil Society AI

The OpenAI Foundation is scaling up its engagement with nonprofits, NGOs and philanthropic institutions through a $50 million People-First AI Fund announced in September 2025. The fund targets mission-driven organizations working at the intersection of AI and public good, with an initial wave of grants already distributed and further rounds planned. In April 2026, Anna Makanju was appointed Head of AI for Civil Society and Philanthropy to lead the Foundation's dedicated outreach to the sector. The initiative is designed as a sustained grantmaking effort rather than a one-time donation, with community-based processes intended to align funding decisions with local needs. Together, the financial commitment and new leadership signal a broader Foundation strategy linking AI access, sector relationships and governance for public-interest organizations.

0
ProgrammingDEV Community ·

DEV Weekend Challenge Invites Developers to Build Dog-Themed Projects for $1,000

DEV Community has launched its latest Weekend Challenge, themed around dogs ahead of International Dog Day on August 26. Developers are invited to build anything dog-related — from breed identifiers to games — with submissions open from August 14 and due by August 17 at 6:59 AM UTC. Five winners will each receive $200, a DEV++ membership, and an exclusive badge, totalling $1,000 in prizes. Four bonus prize categories reward the best use of specific technologies: Snowflake, Solana, ElevenLabs, and Google AI. Projects will be judged on theme relevance, creativity, technical execution, and writing quality, with only new work built during the challenge window accepted.

0
ProgrammingDEV Community ·

Why Git Remains an Essential Skill for Developers Across All Disciplines

Git is a distributed version control system created by Linus Torvalds that has become the industry standard for managing code in modern software development. It allows developers to track changes, revert mistakes, work on isolated feature branches, and collaborate simultaneously without overwriting each other's work. The tool is relevant across virtually every development role, including backend, frontend, DevOps, cloud, and AI engineering, making it a baseline expectation for most hiring teams. Platforms like GitHub and GitLab are built on top of Git, but the underlying system itself is what powers workflows such as CI/CD pipelines, GitOps, and infrastructure as code. Mastering core Git commands and adopting structured workflows — such as feature branching and pull requests — helps developers avoid common pitfalls and contribute more effectively to team projects.

0
ProgrammingDEV Community ·

16 Cyber Attack Tools Explained: What They Do and the Warning Signs to Spot

Most cybercrime relies not on sophisticated custom code but on widely available tools, stolen credentials, and rented infrastructure assembled into a coordinated attack chain. The modern cybercrime ecosystem resembles a divided economy, where specialists handle distinct roles such as collecting data, building phishing pages, selling access, deploying ransomware, and laundering proceeds. Ready-made phishing kits, malware subscriptions, and stolen password marketplaces have lowered the barrier to entry, enabling even low-skilled criminals to run effective campaigns. Phishing remains one of the most prevalent attack methods, with kits that mimic banks, tech platforms, and delivery services, sometimes offered as a subscription service with customer support. A key vulnerability exploited across many attacks is password reuse, as credentials stolen in old breaches are routinely tested against multiple platforms to gain unauthorised access.

0
ProgrammingDEV Community ·

LLM Cost Trackers Often Miss the True Invoice Total, Developers Warned

Teams using large language models in production frequently find that their internal cost-tracking figures do not match the actual invoices from providers like OpenAI and Anthropic. Key reasons include inconsistent handling of cached tokens across providers, reliance on community-maintained pricing registries that openly admit to inaccuracies, and uninstrumented API calls that never appear in tracking tools at all. Popular tools such as Langfuse and LiteLLM have documented bugs related to cache token double-counting, and LiteLLM's own troubleshooting guide treats discrepancies of up to roughly 10% as normal rounding effects. Unlike cloud platforms such as Azure and AWS, the direct APIs from OpenAI, Anthropic, and Google do not publish pricing in a reliable machine-readable format, forcing developers to depend on estimated data. A developer building a reconciliation tool highlighted the gap, noting that trackers show only the calls they observed, while the provider invoice reflects everything charged.

0
ProgrammingDEV Community ·

DeviceTrust: Open-Source Android Library Turns Device Signals Into Fraud Risk Scores

A developer has released DeviceTrust, an open-source Android library built with Kotlin and C++ that collects low-level device integrity signals to assess fraud risk. Rather than relying on a simple rooted-or-not boolean check, the library assigns weighted scores to multiple signals such as detected hooking frameworks, unlocked bootloaders, and suspicious mounts. These scores are combined into a risk level that guides how an app should respond — from allowing normal access to flagging a session for server-side review. The approach addresses a key weakness in traditional root detection, where a single check can be easily bypassed using tools like Frida. DeviceTrust is available via a public dependency and is intended to complement broader fraud-prevention strategies rather than act as a standalone security gate.

0
ProgrammingDEV Community ·

My Virtual World v1.0.61 adds lifelike traffic, birds, and building details

My Virtual World has released version 1.0.61, a visual overhaul focused on making the simulated environment feel more realistic and coherent. Buildings now feature transparent windows, detailed facades, and dynamic sliding doors, while natural elements like trees, flowers, and grass are placed more organically around roads and infrastructure. Traffic has been improved with varied vehicle types, lane-aware movement, curved intersection turns, and proper collision spacing. Ambient birds now exhibit behavioral variety, including perching, walking, taking off, and reacting to nearby agents. The update is available on GitHub and maintains smooth performance despite the significant visual improvements.

← NewerPage 25 of 1212Older →