SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

OWASP BLT Moves Dozens of Repositories After GitHub Organization Goes Offline

Over 50 repositories under the OWASP BLT GitHub organization became inaccessible during Google Summer of Code, coinciding with a GitHub outage. The project applied an organization-wide ruleset for security consistency, but the team could not determine whether it or the outage caused the disruption. Repeated support requests to GitHub produced no clear explanation over several months. To keep contributors working, the team moved its code to GitLab, and later adopted ForkMesh, a self-hosted Git forge built by a community member, as its official source of truth.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Chatbot-to-human handoffs: how to transfer customers without making them repeat themselves

A common support chat shows a customer asking for a person several times while the bot keeps answering, then a long wait and an agent with no context. The article argues the fixes are written rules for when the bot hands off, a brief that travels with the customer, and a first human reply that shows someone read the chat. It recommends routing on the customer's first request for a human, using phrasings drawn from the company's own transcripts. It also sets out triggers such as counting failed tries per problem, noticing a shift in the customer's mood, and sending certain sensitive topics to a person immediately. Example scripts for the bot's handoff messages are provided, with company names and people in the examples being fictional.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Reverse-engineering a login password's RSA encryption in a JS case study

A sanitized educational write-up examines how an enterprise office platform encrypts login passwords on the client side. The site routes logins through a third-party identity-as-a-service provider, and captured traffic shows the account sent in plaintext while the password appears as a variable-length hex string, consistent with RSA. The analysis notes that the core difficulty lies not in the standard algorithm but in a big-integer RSA implementation, a choice among three hard-coded public keys, and a single webpack bundle that must be environment-shimmed before running. It also highlights that the plaintext is URI-encoded before encryption and that a separate captcha verification ticket is needed alongside the password. The author describes locating the relevant function by searching for keywords like RSA and encryptedString in the bundle. All domains and site-specific constants are replaced with placeholders, and the piece frames itself as an explanation of the technique rather than a guide to abusing any service.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

MCP servers can now connect via OAuth 2.1, removing the need for manual API keys

Panth, who leads software at Oizom, describes an open-source ticket tracker that lets users add its MCP server to Claude with one URL and a consent click. The design uses OAuth 2.1 with PKCE, dynamic client registration, and protected-resource metadata, as the MCP authorization spec expects. Users can review and revoke access in their account settings, and API keys remain available for headless setups without a person present. The flow relies on discovery documents so a client can follow a 401 response through to a working token. Access tokens last one hour and refresh tokens 30 days, with tokens stored only as hashes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Case study: reconstructing custom request-header signatures on a government procurement site

A DEV Community write-up, part of a 30-case JavaScript reverse-engineering series, walks through how the author reconstructed custom request headers used by a provincial government procurement e-marketplace. The target endpoint for its announcement list required four non-standard headers, one produced by RSA encryption and another by a nested md5(sha1(...)) hash. The author located the header-generating logic by setting XHR breakpoints and searching for encryption-related identifiers in obfuscated JavaScript. The article presents the approach as an educational explanation of the technique, with real domains and site-specific constants replaced by placeholders.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developers Explore Running Local AI Coding Agents with Ollama and Claude Code

A DEV Community author describes a method for running an AI coding agent on a personal Windows machine without a monthly AI subscription, pairing the Ollama tool with Claude Code. Ollama hosts a local model, such as qwen3.5:0.8b, while Claude Code supplies the agent interface that can read project files, edit code, and run commands. The guide walks through installing and testing Ollama, installing Claude Code, and configuring the two through Ollama's documented integration. The author stresses that this setup does not run Anthropic's Claude model locally and that results depend on whether the chosen model supports tool calling. The write-up is aimed mainly at students and beginners interested in AI-assisted coding.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Efforts to Quit Benzodiazepines Highlight a Largely Overlooked Epidemic

An article in The Believer examines the difficulties people face when trying to stop taking benzodiazepines. It frames dependence on these drugs as a public health problem that receives less attention than other drug crises. The piece draws attention to the challenges of tapering off the medication. The source material provided only the headline, link, and basic engagement metrics from Hacker News, so the full details of the article's arguments and examples could not be verified here.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

AWS Releases ExtendDB, a DynamoDB-Compatible Server That Stores Items in PostgreSQL

On May 20, 2026, two members of the DynamoDB team published ExtendDB, an Apache 2.0 server that implements the DynamoDB wire protocol. Applications using standard DynamoDB SDKs connect to it, while items are actually kept in ordinary PostgreSQL tables that can be inspected directly. The project is written in Rust and is described by its maintainers as a clean-room implementation, currently at the 0.1 development stage. The author walks through a Docker Compose setup, user and access-key creation, and pointing the AWS CLI at a local endpoint. The release is explicitly labeled not a replacement for DynamoDB.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Japan Sees Record Data Breaches in 2026; Experts Urge Individuals to Limit Leak Spread

Listed Japanese companies have already announced ten breaches exceeding one million records each in 2026, the worst pace on record. Ransomware incidents reached 123 in the first half of the year, the highest for any half-year period. Over 90% of solved unauthorized-access cases involved stolen IDs and passwords, showing attackers often log in rather than break defenses. The article argues individuals cannot prevent breaches but can limit how far a leak spreads, such as by changing reused passwords and watching card statements. It also introduces a free, browser-based tool that records leak notices and generates timed action checklists.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Solo Developer Shares Backup Strategy for a 2 GB Server Running 39 Stock Products

After a nightly snapshot that retained only seven days failed to recover an eleven-day-old upload CSV, the author rebuilt their backup approach. Their catalogue of 39 products totals 856 MB, but the underlying pipeline code and research notes would be lost without separate protection. The author splits data into three tiers: small, irreplaceable metadata synced daily; regenerable product archives synced weekly off-server; and large raw assets rebuilt rather than duplicated. Because the server has a single vCPU, backup jobs are run sequentially to avoid memory exhaustion and corrupted archives. The author also emphasizes monthly restore tests over simply confirming that backups exist.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

DentaNote turns dental visit audio into structured clinical notes entirely on a local machine

The author built DentaNote, a tool that converts dictated dental visit audio into a structured clinical note without sending any data off the device. The pipeline combines local Whisper transcription with Gemma running through Ollama, followed by schema validation and a deterministic template for rendering. In the author's test, a 30-second clip produced a complete note in 11.2 seconds, and the author estimates it saves roughly nine minutes per appointment compared with typing notes manually. Benchmarks on 12 synthetic cases compared two Gemma models, with gemma4:e4b outperforming gemma3:4b on precision, recall, and hallucination rate. The design flags ambiguous items for clinician review and is presented as a way to meet Brazil's LGPD data protection requirements through architecture rather than policy.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Oizom stores coding agent prompts in tickets so teams can review them like pull requests

Oizom's software team keeps every prompt sent to its coding agent in the ticket that requested the work, since the ticket thread is the only channel for developer-agent communication. Developers write requests in plain English and move tickets through approval, preview testing, and deployment stages without opening an IDE or terminal. The thread records each exchange, including the preview links, feedback, per-turn cost, and final PR and commit links. Because the prompts are stored alongside their outputs, the team lead can review how people phrase requests and coach them accordingly. The company says this has proven more practical than general prompting guides.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Citrix NetScaler Exposure Skews to US and Germany, but Geolocation Reflects Hosting, Not Operators

On 20 October 2026, queries in a single session counted 239,739 exposed Citrix NetScaler assets globally, with 72,548 registered to the United States, 20,655 to Germany, and 14,157 to China. Together those three countries account for about 45 percent of the global total. The figures rely on IP-based geolocation, which records where address blocks are registered rather than where the operating organization is based, so cloud deployments can distort national totals. For comparison, WordPress showed 63 percent of its assets in the United States against 30 percent for NetScaler, a difference the author attributes to hosting patterns rather than measured security posture. One F5 BIG-IP query failed with an internal error and was logged as an error rather than a zero, so it could be retried. The piece argues that exposure data should be read as infrastructure placement, not as a national security assessment.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Autonomous LLM Agents Placed Inside Temporal Sagas for Core Banking Decisions

Core banking platforms are beginning to use generative AI and large language model agents for complex tasks such as reviewing unstructured trade finance documents, triaging fraud cases, and handling cross-border exceptions. This creates a conflict, because Temporal workflows require deterministic replay to stay fault tolerant, while LLM outputs vary with temperature, hardware, and model versions. The proposed Xenon Architecture Standards resolve this by isolating LLM agents within Temporal Activities governed by strict JSON schemas, validation guardrails, and deterministic fallbacks. The paper also maps which banking domains suit varying levels of AI autonomy, keeping payments and ledger posting fully deterministic, and examines reliability models and compensation patterns.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Composing Order Messages From Service Data in Transmitly

This article continues a series on building a message pipeline where an order is created and a buyer is notified. The Ordering service dispatches an OrderCreated intent, and the Communications service then assembles the final content. The first pipeline produced only a minimal confirmation email, which proved the flow but offered little value to customers. The author now focuses on enriching the message with recipient details and order information, with Ordering supplying the facts it owns. The Ordering service projects its order aggregate into a communication model containing order identifiers, date, items, and total. The article distinguishes this transactional model from the content model that evolves during composition and rendering.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

FirstHour: a camera-free bathroom box that alerts family when an older adult falls

Three student developers built FirstHour in 24 hours at LA Hacks 2026, a camera-free device for bathrooms that detects falls and then manages the first hour of response. An ESP32-S3-BOX-3 and a Raspberry Pi 5 running QNX detect a fall and sound an alarm, then a voice check-in asks the person whether they are okay and treats any reply other than an explicit cancellation as a reason to escalate. The answers feed a short triage record, refined by a StepFun model with a rule-based fallback, and sent to family members by text. The author, who led communications, focused on reliable reply handling, ensuring only one caregiver claims the incident, and keeping the messaging layer from being used to open the door improperly. The project earned second place in two sponsor challenges.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Small Diffs and Fast Turnarounds Make Code Reviews Effective, Engineering Guides Say

Many code reviews are rubber stamps, with large pull requests sitting unread for days and then merging on superficial approvals. Google's engineering documentation and peer-review research indicate that reviews only catch defects when changes are small and feedback arrives quickly. Reviewers reportedly should cover under 400 lines per session and limit sittings to about an hour, while authors should split large changes into smaller, independently testable pieces. Google also suggests reviewing within one business day, approving changes that clearly improve code health even if imperfect, and framing feedback as questions rather than directives. The guidance emphasizes time-to-first-response as the key metric over comment counts.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Guardrails for AI agents scheduling social posts: length checks, approvals and idempotency keys

The article argues that the main risk of letting an AI agent post to social accounts is duplicate or badly sized posts caused by retries, not the writing itself. GPTpost, a social media scheduler for small teams, checks post length when a post is queued, refusing overlong text with HTTP 422 so the agent can shorten it. Agent-created posts still pass through the workspace's approval requirements and plan limits, with 409 and 402 errors returned when those rules block a post. Every write accepts an Idempotency-Key header so that resending the same request returns the original result rather than creating a second post, and the author recommends deriving keys from campaign, slot and account. The product also scopes API keys with limited rights and expiry, and marks posts as published only after network confirmation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Single Operator Used AI Agents to Breach Over 100 Companies at About $50 Each

Security researcher Snorre Fagerland of NorForge reported that one Chinese-speaking operator directed AI agents on the open-source Cairn platform to probe and breach websites, mainly e-commerce and payment-related sites in the US, Canada, Australia, and Japan. Reuters identified more than 100 breached companies among over 1,200 sites attempted, with the campaign starting around 25 September 2026. Researchers estimate total token spending near $5,000, or roughly $50 per successful breach at a success rate of about 10%. The agents were reportedly aimed at code execution and planting web shells for persistent access, and the activity became visible largely because many Cairn control panels were left publicly exposed. Reuters named John Deere, SharkNinja, and Cummins among affected parties, and the cost figures remain researcher estimates not confirmed by exact billing.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

PingCap TiDB Data Leak Reported by Fulcrum Security

A report has surfaced alleging a data leak involving PingCap's TiDB database platform. The details were published by security firm Fulcrum Security on its website. The item gained traction on Hacker News, where it received 32 points and 3 comments. The source text provided is limited to the headline, link, and engagement metrics, so the specific scope, affected data, and timeline of the leak cannot be confirmed from this material.

0 comments Read more at Hacker News
← NewerPage 265 of 3048Older →