SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Cómo aplicar DDD y arquitectura hexagonal en NestJS con un ejemplo práctico

Un servicio NestJS que empieza con controladores y llamadas directas a Prisma se vuelve difícil de cambiar cuando aparecen reglas de negocio como asignación de técnicos o tareas obligatorias. El artículo propone usar Domain-Driven Design para expresar ese comportamiento y la arquitectura hexagonal para controlar las dependencias. Como ejemplo, desarrolla una API de gestión de servicios con TypeScript, NestJS, Prisma y PostgreSQL, organizada en dos módulos: órdenes de servicio y visitas. Las reglas incluyen prioridades según el nivel de servicio, finalización condicionada a actividades completadas y programación de visitas sin solapamientos. El código completo está disponible en GitHub como implementación educativa.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Python Tutorial Validates Email Lists Using Syntax, DNS and Disposable Checks

A DEV Community how-to explains how to validate an email list in Python without connecting to recipients' mail servers. The method relies on an Apify actor that checks syntax, DNS/MX records, disposable domains and role addresses, avoiding slow SMTP connections that can get a sender's IP flagged. The author notes the tool discloses its own authorship and was built with AI assistance, and that it is a how-to rather than a benchmark. The guide includes sample API code and output, along with statuses such as deliverable_domain, disposable and invalid_domain. It cautions that the tool cannot confirm whether a specific mailbox exists, and that pricing is per validated email.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Applying DDD and Hexagonal Architecture to a NestJS API: A Practical Guide

The guide addresses a common problem in NestJS applications, where services grow to handle business rules, HTTP concerns, and database work together, making changes and testing harder. It uses a service-management API built with TypeScript, NestJS, Prisma, and PostgreSQL as its example, organized into two modules: service-orders and visits. Domain-Driven Design is used to express business behavior as named operations, while Hexagonal Architecture controls dependencies between the business logic and external technologies. The author presents the example as an educational implementation, acknowledging its concrete limitations alongside its benefits. The complete code is published in a GitHub repository called nest-ddd-hexagonal.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Scan Finds 8.16 Million WordPress Sites, 5.16 Million Resolving to the US

A measurement session on 20 October 2026 counted about 8.16 million internet-facing WordPress assets, with roughly 5.16 million located in the United States. The analysis notes that US geography largely reflects where cloud hosting regions sit, not where site owners are based. The author argues that the real security risk lies in third-party plugins and themes, whose versions are often invisible to external scanning. Web server totals for Apache httpd and nginx are presented as context for scale rather than as direct security indicators. The piece recommends organizations inventory WordPress installations and track plugin versions internally, using external counts only for completeness checks.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

ServiceNow Updates CAD Exam Blueprint With Six Domains and Study Guidance

ServiceNow revised its Certified Application Developer exam blueprint in January 2026, listing six domains, with four carrying equal 20% weights and two at 10%. The article suggests a 40-hour study split that mirrors these weights and recommends extra practice on scripting. It advises building a small scoped app on a free Personal Developer Instance to cover the blueprint's sub-topics, while noting such instances are reclaimed after 10 days of inactivity. The exam consists of 60 questions in 90 minutes, delivered via Pearson VUE, priced at 300 learning credits or by credit card. No prerequisite is listed, though six months of hands-on experience is recommended, and ServiceNow does not publish the pass mark.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Choosing the Right Minecraft Export Format for Image Builds

Picking the correct file format depends mainly on your Minecraft edition and the tools you plan to use. For Java Edition players using Litematica, the .litematic format offers an in-game hologram to guide manual placement. WorldEdit or Axiom users are better served by .schem files, while .nbt suits vanilla structure-block workflows within size limits. Commands or datapacks call for .mcfunction files, and Bedrock or manual builders can rely on a labelled PNG blueprint paired with a CSV material list. The article also notes that the format is a handoff between block layout and construction, not a quality setting, so the build's palette and material counts still need checking.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Audit Flags High-Severity Reentrancy and Access Control Issues in Gate Protocol

A security audit conducted from October 1 to October 18, 2024, reviewed reentrancy and access-control mechanisms in Gate, a cross-chain liquidity platform reportedly holding over $7 billion in user assets. The review identified six access-control issues and four reentrancy issues, with several rated high severity. Auditors warned that these flaws could enable unbounded fund extraction or allow attackers to seize privileged functions such as pausing or upgrading the protocol. The protocol received an aggregate risk score of 8.2 out of 10, and the auditors recommended remediating the high-severity findings before any further capital inflows.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Long Context Windows Don't Make RAG Obsolete, Argues Developer

A DEV Community author contends that larger model context windows change how much material gets retrieved but do not eliminate the need for retrieval. Anthropic's guidance suggests that knowledge bases under roughly 200,000 tokens can be placed directly into a prompt, especially with caching, though it notes larger bases need scalable solutions. The author cites Google's documentation on per-query token costs and latency, and research such as "Lost in the Middle" and Chroma's "Context Rot" report showing that models struggle to use information buried in long inputs. The piece also argues that retrieval enables document-level updates and per-user access controls that a static stuffed prompt cannot easily provide.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Android Hardware VP9 Accepts Spatial SVC Mode but Drops the Layers

Android hardware VP9 encoders accept a three-spatial-layer SVC configuration such as L3T3 without error. The bitstream they return is a single flat stream, typically at top resolution with the lower spatial layers missing. Servers expecting multiple layers then treat the stream as broken, even when the network is fine. The behavior has been observed across Samsung, Pixel, Qualcomm, and Tensor devices, and hardware VP9 on Android supports temporal SVC only. Software VP9 (libvpx) produces real spatial layers but costs more CPU and battery, and MediaCodec offers no way to query spatial layering support in advance, so developers must inspect the bitstream to confirm.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Guide Explains IDOR/BOLA, the Top API Security Flaw, and How to Prove It Safely

Broken Object Level Authorization, commonly called IDOR, ranks first on the OWASP API Security Top 10 (2023) and is a frequent serious flaw in modern APIs. The vulnerability arises when an application verifies that a user is logged in but fails to confirm that the specific object requested belongs to that user. A tutorial walks through how the flaw works, using an example of changing an invoice ID in a request, and describes where object references can appear in requests. It also covers how to test for the bug using two accounts the tester controls, so that no real user data is exposed. The guide emphasizes writing clear reports so that findings are taken seriously rather than dismissed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

breakcheck: a zero-dependency CLI that flags deprecated dependencies, risky CI workflows and removed APIs

A new open-source tool called breakcheck scans projects locally for signs of future breakage before platforms and vendors remove the features they rely on. It checks package.json, requirements.txt, pyproject.toml, GitHub Actions workflows, Dockerfiles and source code for deprecated packages, unpinned or over-privileged automation, unpinned base images, and APIs being removed. The developers motivating the tool point to recent removals, such as Chrome and Edge dropping XSLT and Python 3.12 removing imp and distutils, along with a wave of GitHub account hijacks that mostly exploited over-privileged automation. Running on Node.js 18+ with no network access or telemetry, it reports findings with suggested fixes and can exit with an error code for use in CI, and it does not yet offer automatic fixes. The project is MIT-licensed and available on GitHub.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Guide Explains Using Touch ID to Secure SSH Keys on macOS

A blog post published on nmattia.com walks readers through configuring SSH keys on macOS that are unlocked with Touch ID. The article is shared on Hacker News, where it has gathered 10 points and 3 comments. The setup aims to replace typing passphrases with biometric authentication when connecting to remote servers. The source material provided is limited to the link and discussion metadata, so the specific technical steps are not detailed here.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Anthropic Explores Using Claude to Shrink the Attack Surface of Software Code

Anthropic has published research on applying its Claude AI model to reduce the attack surface of software code. The work examines how the model might help identify and remove code that could be exploited by attackers. The post is shared on Hacker News, where it has drawn modest early attention. The source material available does not provide details on specific methods, results, or benchmarks.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

C# Compiled to WebAssembly Now Produces Smaller Binaries Than Rust

A GitHub project called NetWasm reports that C# code compiled to WebAssembly now yields smaller output than comparable Rust builds. The claim was shared on Hacker News, where the post gathered 25 points and 3 comments. The available material includes only the project link and discussion metadata, so the specific benchmark methodology and size figures are not detailed here. The result suggests progress in .NET's WebAssembly tooling relative to Rust's typical output sizes. Readers should consult the repository for the underlying measurements.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Daily app budgets and a visible override counter outperformed blocking for one writer's phone habits

A developer who struggled with full blocks, accountability partners, and cold-turkey attempts over 2024 found each method removed access without addressing the underlying reasons for phone use. Their approach instead assigns per-app daily time budgets, with messaging and maps left unlimited, and prompts once at the limit to either continue or do an intended task first. Each override is recorded in a visible counter without punishment or streaks. Logging from 1 to 21 October reportedly cut late-night phone use from 90 to 12 minutes per night, daily opens from 41 to 19, and weekly overrides from 23 to 6. The writer has released the tool, ChoiceField, as a free iOS app and suggests a week of manual logging as a starting point.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

LLM API 장애에도 서비스가 멈추지 않도록 하는 6가지 설계 원칙

LLM API를 제품에 연결하는 일은 개발 단계보다 운영 단계에서 훨씬 까다로운데, 응답 지연, 네트워크 오류, Rate Limit, 서버 오류 등 다양한 실패가 언제든 발생할 수 있다. 이 글은 이런 실패를 전제로 한 호출 구조를 위해 여섯 가지 원칙을 제시한다. 핵심은 요청 목적에 맞는 타임아웃 설정, 오류 유형에 따른 선별적 재시도, 지수 백오프를 통한 부하 분산이다. 또한 주 모델이 실패할 때 보조 모델이나 규칙 기반 로직으로 전환하는 폴백, 반복 요청에 대한 캐시, 장애 중인 API에 대한 반복 호출을 막는 서킷 브레이커도 함께 다룬다. 마지막으로 응답 시간, 모델별 오류, 재시도 횟수 등을 기록하고 모니터링해야 안정적으로 운영할 수 있다고 강조한다.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Guía paso a paso para instalar Tailscale en un homelab Linux

Este procedimiento explica cómo instalar el cliente de Tailscale en un equipo Linux de un homelab, autenticarlo en la tailnet y verificar su funcionamiento. Como referencia se usa la release v1.104.1, aunque las fuentes no detallan cómo instalar esa versión concreta, por lo que los pasos deben tomarse como el procedimiento general de la documentación. Se requiere un gestor de paquetes compatible, acceso con sudo y el módulo de kernel tun, que puede cargarse manualmente o al arrancar. La instalación se realiza con el script oficial de una línea, copiado de la web de Tailscale, y se autentica con tailscale up, comprobando luego el dispositivo en la consola de administración. Finalmente, la guía recoge opciones como SSH, la gestión de caducidad de claves y las herramientas tailscale ip y tailscale status para revisar el estado.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

d3-turbo: 26B-parameter model answers many questions from one read, outpacing larger rivals on throughput

The vLLM Semantic Router team released d3-turbo on Hugging Face on 19 October 2026, a 26-billion-parameter model with a 460-million-parameter image encoder under an Apache 2.0 license. Rather than generating free-form text, it returns probability distributions over options the user predefines, such as routing a customer ticket or flagging urgency. Its sibling d3-flash re-reads the input for every question, while d3-turbo reads once and answers many, which the author's benchmarks on a single AMD MI325X show becomes faster beyond about four questions. At 255 questions, the reported median latency was 2.12 seconds for d3-turbo versus 32.94 seconds for d3-flash, though d3-flash was quicker for a single question. The model supports choice, yes/no, score, box, and tracking tasks, and accepts up to 131,072 tokens of context when long-context mode is enabled.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI Acquires Orchestra Bio to Help Trace Drug Development Delays

OpenAI announced its October 20 acquisition of Orchestra Bio, describing a use case for coordinating drug development. In its example, a failed manufacturing batch could delay a clinical trial, and Orchestra's agents would help identify affected activities and timelines while scientists and program leaders make the decisions. OpenAI also said it plans to combine Orchestra with its Rosalind product to link scientific findings with studies, decisions and next steps. The company has not published a controlled evaluation or quantified time savings for this workflow. The article also offers a proposed developer design for recording impact claims as inspectable, correctable and withdrawable records, though it is not Orchestra's actual architecture.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Phishing and BEC Attacks Bypass Code Defenses by Targeting Employees

Attackers can defeat strong technical security by manipulating staff rather than systems, using impersonation and urgency to trick people into acting. Business Email Compromise is a targeted form of this, where criminals study a company's payment workflows and pose as executives or suppliers to request wire transfers or bank detail changes. The FBI's Internet Crime Complaint Center reported more than $50 billion in exposed losses from BEC between late 2013 and the end of 2022. The article argues that the main defenses are procedural rather than technical, including verifying requests through independently known contact numbers, enabling multi-factor authentication, requiring dual approval for payments, and configuring SPF, DKIM, and DMARC email authentication.

0 comments Read more at DEV Community
← NewerPage 256 of 3042Older →