SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingHacker News ·

Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site

U.S. federal investigators reportedly suspect that a ransom negotiator operated the extortion website used by the ShinyHunters hacking group. The allegation was reported by Krebs on Security and shared widely on Hacker News. The provided source material contains only the headline, link, and engagement metrics, so details about the individual, timing, and evidence cannot be confirmed. Further specifics would need to be drawn from the original article.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Why One AI Agent Is Designed Never to Touch a Life Insurance Database

A developer building an AI agent for a life insurance agent platform describes why the model is kept away from direct database access. Instead of a generic query tool, the agent can only call narrow, predefined functions, and the data layer attaches the authenticated user's identity and filters results accordingly. Sensitive client fields are tagged so the model never receives them, and unknown columns default to being withheld. The approach is part of a broader review of OWASP's top risks for LLM applications, and the author notes the design still needs testing and does not yet address write capabilities or model provider data terms.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Preventing duplicate refunds in AI agent integrations with signatures, idempotency and limits

AI assistants are beginning to call business systems on users' behalf, such as requesting a return or rescheduling an appointment. Reading order data is low-risk, but refunds move money and require careful engineering. The author outlines four key failure modes to design for, with TypeScript examples using the open-source allowfy package, which applies to any webhook-based integration. Requests are verified against a signed timestamp over the raw body with a constant-time comparison to block replays from the internet-facing endpoint. Agent actions are split into a quote step, where terms are computed without changes and approved by the customer, and an execute step, so that changed terms invalidate prior approval. Stable operation IDs and idempotency keys, passed down to the payment provider, ensure a retry after a dropped connection does not refund twice.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Marks Birthday Reflecting on a Year of Coding Lessons

A software developer posted on DEV Community to mark their birthday. They reflected on a year spent learning, debugging, and repairing code, comparing life to a changelog with hopes for fewer bugs and better decisions. The author also said they are working on a new engineering article to be published soon. The post was lighthearted in tone and invited fellow developers to send birthday wishes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Hobbyist Builds Brotato-Style Game on 2013 Laptop Using AI Assistant and No Coding Background

A 35-year-old gamer with no programming experience decided to make his own game after years of playing titles from childhood onward. Unable to run heavier engines like Unity or Unreal on his aging 2013 laptop, he chose the free Godot engine, which powers Brotato. He relied on tutorials and Google's Gemini AI to write code, a process he says produced many hallucinated fixes and over 1,400 debugging errors. The result ended up closely resembling Brotato, so he added active abilities and permanent upgrades to differentiate it. The account, shared on DEV Community, presents the project as a humorous illustration of how accessible AI-assisted game development has become.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Kubuntu 26.04 users advised to install emacs-pgtk for Wayland compatibility

Kubuntu's 26.04 release uses a Wayland-based desktop, though most X11 applications still run, with xmag being a notable exception. Users running Emacs should install the emacs-pgtk package rather than the standard emacs package. The standard package causes problems such as preventing the Emacs window from being resized freely. The 'pgtk' name stands for 'pure GTK,' meaning Emacs uses only GTK calls instead of a mix of GTK and X11.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SlothSync: Open-Source Local-First File Sync Tool Uses On-Device AI for Backups

SlothSync is a lightweight file synchronization and backup tool that keeps documents in sync across devices without uploading data to the cloud. It runs all AI inference locally using an open-weight model such as gemma2:2b through Ollama, so no data leaves the user's machine and there are no per-request API fees. The tool watches directories for file changes, summarizes them with the local model, and stores those summaries in a hidden log. It then copies changed files to a user-specified destination such as a USB drive or external disk, and offers both a command-line interface and an optional text interface. The project was presented as a Hacktoberfest entry.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

fm-cli and Autonomix CLI launch dedicated product websites

Two terminal tools, fm-cli and Autonomix CLI, now each have a standalone website, replacing the GitHub README as the main introduction. The fm-cli site covers Fastmail access from the terminal, including its full-screen mail app, JSON-output commands, live mailbox watching, offline mode, and keyring-based sign-in. The Autonomix CLI site explains how the tool installs and updates apps from GitHub Releases, including supported package formats, JSON output for scripts, and its integration with Omarchy. Both sites provide installation instructions for various systems and link to the latest release, while the full command reference remains in the README. The developers say the sites make the tools easier to share and read, and no changes were made to the software itself.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Retrieval Recovery Playbook for Healthcare Appointment Assistants Under Load

The article argues that when a healthcare appointment assistant's retrieval fails, the system should return a verified disposition rather than a plausible-sounding guess. Every passage should carry source identity and revision time, with retries limited to idempotent reads inside a fixed deadline. If evidence is empty, stale, or contradictory, the assistant should ask a clarifying question or hand off to a human. The author treats retrieval as an evidence pipeline with a stop condition, where a language model is only the final consumer rather than a repair mechanism. Recovery steps are kept deliberately simple, with a policy layer deciding which retrieved passages are admissible.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Netflix Q3 2026 margin beats guidance as full-year ad revenue and free cash flow forecasts are trimmed

Netflix reported third-quarter 2026 results on October 20, with revenue of $12.87 billion, up 11.8%, in line with its July guidance of 12% growth. Its operating margin came in at 34.6%, above the 33.2% it had forecast, which the company attributed mainly to the timing of expenses rather than a lasting change. Management lowered its full-year advertising revenue outlook to about $2.7 billion from roughly $3 billion, citing a slower-than-expected rollout of some ad product capabilities. The company also reduced its 2026 free cash flow estimate to about $12.0 billion from $12.5 billion, due mainly to a real estate transaction expected to close in the fourth quarter, while full-year revenue and margin targets were largely unchanged. Netflix additionally repurchased 63.9 million shares for $4.8 billion in the quarter, its largest buyback quarter to date.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SlothFinance: Open-Source AI Tool Flags Forgotten Subscriptions and Price Hikes

A developer has released SlothFinance, an open-source web app that analyzes bank transaction CSVs to surface unwanted charges. It uses Prior Labs' TabPFN-3.5 model for zero-shot detection of recurring payments, forgotten subscriptions, and silent price increases. A Google Gemma 2 agent then produces a financial audit with a scorecard and a humorous critique of the user's spending. The tool also drafts cancellation and refund letters that reference FTC Click-to-Cancel rules and California auto-renewal law, and projects three-year cash losses from unaddressed charges. The project was submitted to a Hacktoberfest open-source AI challenge and is available on GitHub Pages and Vercel.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Clean-Looking Next.js Repo Hid Malware Triggered by npm run dev

A developer who received a Next.js invoice app from a Fiverr seller found that it concealed malicious code that would execute each time the dev server started. The project's .npmrc contained an npm auth token that gave access to a private package holding about 180 KB of obfuscated JavaScript, pulled in through a lookalike Tailwind plugin named tailwind-animationlab. Several suspicious config files had been modified on a different date from the rest of the project, and the plugin's registry metadata suggested it was created recently to match an existing version constraint. Standard code search found nothing suspicious, since the payload was not stored in the repository itself. The developer examined the package without running it and reported the findings.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Ubuntu and Kubuntu 26.04 SSH setup for older virtual machine clients

A user with several old and new virtual machines needs each VM to connect via SSH to the host. They install the openssh-server package on Ubuntu or Kubuntu 26.04 to enable this. To allow connections from older clients, they add a configuration file under sshd_config.d. The file re-enables legacy options such as CBC ciphers, diffie-hellman-group1-sha1 key exchange, and ssh-rsa host keys. The author suggests checking the sshd service status log when a client login fails and consulting the sshd_config manual to find which options need values.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Kapitan generator releases published to kadet-hub, 12 to 18 October 2026

Between 12 and 18 October 2026, new versions of numerous Kapitan generators were published to kadet-hub, each passing through the gate and signed. Each generator page now shows the output diff against the prior version, its SBOM, and the command used to verify it. Several generators are new to the hub, including cloudnative-pg, crossplane, flux, kind, and talos, while many existing ones such as argocd, calico, cilium, and kubernetes received incremental updates. Most releases note that rendered output is unchanged, and several add CRD schemas so the gate can dry-run them against a kube-apiserver. Some changes also alter behaviour, such as Calico namespace handling and a new compile-time check rejecting metadata names longer than 63 characters.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Corami keeps a synced project copy on laptop and server so coding agents can work remotely

The author describes a workflow where a coding agent runs on a server while the developer edits and reviews on a laptop. Corami maintains a normal project directory on both machines, synchronized in both directions with Mutagen over Tailscale SSH, so local builds, editors and caches work without a network filesystem. Uncommitted work travels between the machines, and the agent's edits return to the same folder for review with git diff. Developers can run a dev server on the server with a stable HTTPS address reachable within their tailnet, and commands run on the server require an approval dialog. The article also lists limitations, including conflicts with concurrent git operations, unsuitability for large binaries, and sync stopping on unsafe merges.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Isolating Rule Panics with catch_unwind to Keep Cloud Scans Running

A cloud cost analyzer runs 92 independent rules during each scan, and each rule depends on third-party libraries that could panic on unexpected input. The author argues that Result handles anticipated failures, but panics from unforeseen bugs in dependencies need a separate safeguard. Using std::panic::catch_unwind, each rule's evaluation is wrapped so a panic is logged with its rule and resource IDs and yields no finding, while the scan continues. The approach requires AssertUnwindSafe, justified because the partial state after a panic is discarded rather than read. The technique also depends on panics unwinding, which is disabled under panic = "abort" in release profiles.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

EEPROM Flasher Brings TL866 and T48/T56 Chip Programming to Android Without Root

An open-source Android app called EEPROM Flasher lets users program chips with TL866, T48, and T56 universal programmers over USB-OTG without root access. It uses a custom JNI bridge that passes the USB file descriptor from the Android USB Host API to a native libusb layer running the minipro engine. Features include automatic chip detection, a pinout viewer for multiple socket types, a hex viewer with binary diff comparison, and Storage Access Framework support for saving and loading dumps. The developer has published the code on GitHub, where feedback and chip testing on T48 and T56 hardware are requested.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

DeepLook Open-Sourced: Browser Tool Turns Web Pages into Text for AI Agents

The developer has released DeepLook, an Apache-2.0 licensed open-source tool that renders public web pages in real Chrome and returns their visible text along with the title, final URL, HTTP status, and browser observations. It can be used through a local command-line interface, a self-hosted HTTP API, or a coding agent via the MCP protocol. Local use requires Node.js 22.14 or later and Google Chrome, with no account or API key needed. The HTTP API adds authentication, quotas, and concurrency limits, and the operator manages their own credentials. The tool treats page content as untrusted input, so agents should not follow instructions embedded in pages.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Guide to Handling Amazon Bedrock Throttling in Production LLM Workloads

Throttling is a routine condition for teams running large-scale LLM traffic on Amazon Bedrock, signaled by ThrottlingException or TooManyRequestsException when request or token rates exceed model-specific regional quotas. The article argues that resolving it requires a layered strategy rather than a single configuration change. Key steps include checking Service Quotas to distinguish adjustable soft limits from fixed hard limits, applying exponential backoff with full jitter to retries, and capping concurrency. It also recommends circuit breakers, separate handling for model and client timeouts, and cross-region inference profiles, with provisioned throughput reserved as a last resort. The author further notes that setting realistic maxTokens values avoids over-reserving token quota that can trigger early throttling.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Making Node.js background job workers safe for healthtech cleanup with idempotent retries

The article argues that a scheduled cron trigger should only start cleanup work, while a durable queue carries the actual request. Because queues usually deliver at least once, a worker can crash after performing a deletion but before acknowledging the message, so the system must tolerate duplicates. The author recommends a failure drill that kills a worker mid-run and redelivers the message to confirm that no second business decision occurs. Eligibility should come from a repeatable policy decision, with malformed or unknown-policy items routed to a dead-letter queue. Acknowledgement should happen only after the idempotent effect and its outcome are recorded, and retries should use bounded or delayed handling.

0 comments Read more at DEV Community
← NewerPage 266 of 3048Older →