SShortSingh.

Programming

0
ProgrammingDEV Community ·

Reward shaping cuts reasoning trace length by 65% in hybrid language models

Researchers found that tailored reinforcement-learning rewards can reactivate a dormant reasoning pathway in hybrid language models, shortening chain-of-thought traces by roughly two-thirds. The reshaped reward signal reportedly restores an internal reasoning mode the models already possessed, rather than teaching entirely new behavior. At the 9B scale, trace termination rose from 45.9% to 93.9% and mean length fell from 2,494 to 868 tokens, while answer accuracy was largely preserved. The results were demonstrated only on specific Qwen3 and StartLux-Decision architectures and their benchmarks, so transfer to other models and domains remains unclear. Publicly released LoRA adapters for the Qwen3 models reportedly implement the approach without retraining the base model.

0
ProgrammingDEV Community ·

LazyFlow AI: An Open-Source Productivity Tool Built Around Making Tasks Easier

Developer Anshika Singh has released LazyFlow AI, a lightweight productivity assistant created for a Hacktoberfest Open-Source AI Challenge. The app offers a smart to-do planner, a Lazy Mode that breaks tasks into smaller steps, a text summarizer, and an evening wind-down planner. Its generative AI features are optional and rely on an open-weight model such as Gemma 3 1B run locally through Ollama, with simpler browser-based fallbacks when no model is available. The frontend is built with HTML, CSS, and JavaScript and is hosted as a static site on GitHub Pages, with the source code publicly available on GitHub. The project's stated aim is to reduce the effort involved in organizing work rather than to avoid it.

0
ProgrammingDEV Community ·

OpenCode Console breach exposes API keys of 1.4% of users

OpenCode, an open source AI coding agent, said attackers breached an older system overnight, affecting 1.4% of users of its online Console platform where some keep API keys for AI services. Affected users were emailed, and only Console workspaces were exposed, while the open source app and command-line tool were reportedly unaffected. Developers reported unexpected spend alerts from OpenAI, Anthropic and Google, with some charges reaching hundreds or over $1,000, and providers blocked suspected keys, with OpenAI pledging refunds for attack-related credits. OpenCode linked the incident to a large-scale distillation attack, a framing some skeptics dispute, and has not disclosed how the intrusion occurred, how keys were stored, or the extent of misuse. Affected users have been advised to revoke and replace their keys with each provider.

0
ProgrammingDEV Community ·

Building Serverless Backends with API Gateway, Lambda and DynamoDB

A developer explains how a backend can be built without manually managing servers by combining three AWS services. Amazon API Gateway receives and routes incoming API requests, AWS Lambda runs the backend logic in response, and Amazon DynamoDB stores and retrieves the data. The article uses a task management app as an example, with routes for creating, reading, updating and deleting tasks. It clarifies that serverless does not mean no servers, only that AWS handles much of the infrastructure. It also notes that API Gateway does not automatically secure an API, so authentication, authorization and validation must still be configured.

0
ProgrammingDEV Community ·

Robinhood Flash-Loan Attack Risks Flagged in Security Audit

A security researcher has published a technical audit of Robinhood, a cross-chain liquidity platform reported to hold about $14.7 billion in total value locked across Ethereum and several layer-2 networks. The report warns that the protocol's reliance on real-time price feeds, margin trading, and dynamic fee rebalancing leaves it open to flash-loan-driven manipulation. It identifies six possible attack vectors, three direct and three indirect, and assigns the overall flash-loan exposure a risk score of 7 out of 10. Among the risks described are oracle price manipulation, exploitation of fee-rebalancing logic, and forced liquidations of leveraged positions. The authors recommend prompt remediation of the most critical issues while noting that other vectors are partly mitigated by existing design choices and operational controls.

0
ProgrammingHacker News ·

Americans Pay More for Cars That Are Not Improving

A Hacker News-linked article from The Atlantic argues that U.S. car buyers are spending more money while getting vehicles that many consider less desirable. The piece examines the trend in the context of electric vehicle adoption, which has not expanded as some had anticipated. The source material provided is limited to the article link and discussion metadata, so the specific data and causes cited in the full report are not reflected here. The story was posted on Hacker News, where it drew 12 points and 3 comments.

0
ProgrammingHacker News ·

Solo Developer Releases Open-Source Dead Man's Switch for Business Succession

Graphics and web technology veteran Peter Bishop has released Death Plan Switch, a self-hosted dead man's switch designed to keep a solo developer's business running if the owner goes missing or dies. The tool notifies designated people so that client operations can continue without interruption. Bishop says the project was inspired by a 2012 hospitalisation that cost him his business after he could not hand over data to his technical deputy in time. The software is free to use and study under the MIT license, and was built with help from Claude Code and passed 42 unit tests. Bishop reports that clients see the feature as a selling point when entrusting him with their hosting and technology accounts.

0
ProgrammingHacker News ·

U.S. Supreme Court agrees to review 1868 federal ban on home distilling

The U.S. Supreme Court has agreed to hear a case challenging a federal law from 1868 that prohibits home distilling of liquor. The statute has remained on the books for more than 150 years and restricts individuals from producing distilled spirits at home. The justices' decision to take up the matter means the high court will examine the law's validity. The source material available for this item is brief and does not detail the parties involved or the specific arguments being raised.

0
ProgrammingDEV Community ·

Seeded inbox test clears spam placement; signup flow overhauled with free credits

A team that sent 106 cold emails with zero replies ran a seeded deliverability test after community feedback, sending the same message through two paths. Both copies reached the inbox within two minutes, with no spam-folder placements observed. The team notes that a seed test cannot show how every outside filter would score the message. Having ruled out deliverability, they turned to the signup page, which had led with a form and offered nothing free. The revised flow adds one-click Google signup, gives new accounts 1,000 credits with no card required, and keeps those credits valid for 365 days. The team plans to measure whether these changes affect reply rates on a new, separately counted outreach batch.

0
ProgrammingDEV Community ·

Stanford's Hazy Research Proposes Next-Concept Modeling as Alternative to Token-by-Token AI Generation

Researchers at Stanford University's Hazy Research group have introduced Next-Concept Modeling, a new language modeling architecture released in October 2026. Unlike traditional autoregressive LLMs, which generate text one token at a time, the approach first builds a global representation of the response and then refines it in parallel. It uses a multiscale hierarchy of discrete codes, predicting all codes at each level simultaneously and conditioning each subsequent level on prior outputs. The reported results include 10 to 31 times faster inference than evaluated diffusion baselines and roughly 4 to 5 times fewer training tokens than certain baselines. The researchers note these results do not establish performance advantages over widely used models such as GPT, Qwen, or Llama.

0
ProgrammingDEV Community ·

One Spot-Checked Listing Undermined an AI-Built List of 261 'No Website' Businesses

A developer offering one-page websites to small Turkish businesses used an AI agent to compile 261 candidates with good ratings and no real website. A random verification check, run in a separate session, found that a vet clinic marked 'no website' actually had a WhatsApp link in its Google Maps website field. The developer concluded that the status column likely reflected only the data the agent read, not what a visitor sees. Since a single sample cannot measure the error rate, the developer decided the whole column could not be trusted without further verification. The post describes a standing rule of spot-checking one random claim per delivery before accepting the rest.

0
ProgrammingDEV Community ·

Unintended Details in a Locked Reference Image Carry Into Every Output

A recent test found that a reference image preserves everything visible in it, not just the traits a creator deliberately specified. A character generated from a brief with few details unexpectedly included a small hair clip that was never requested and appeared in only one variant. That image was chosen as the master reference for later work, and the stray clip persisted in a downstream layout tool whose prompt never mentioned it. The author argues creators should check master images for incidental details and fix unwanted ones before locking the reference, and should document any accidents worth keeping in written handoff notes. The author also notes the test is a single observation, not a guarantee, since small details can drift.

0
ProgrammingDEV Community ·

FirstPR AI: A Local AI Mentor to Help Beginners Make Their First Open-Source Contribution

FirstPR AI is a local AI tool created to help newcomers prepare their first open-source pull request without feeling overwhelmed. It offers five focused skills, including an Issue Analyzer, a Codebase Explorer, a Test Planner, a PR Mentor, and a Contribution Safety Checker. The project is built with Python, Gradio, and Ollama, and runs the Gemma 3 4B model on the user's own computer rather than through a cloud AI service. Its designers stress that the AI's guidance is only a starting point, so contributors must still verify suggestions, inspect real code, and follow each repository's guidelines. The project was submitted as part of the Hacktoberfest Open-Source AI Challenge.

0
ProgrammingDEV Community ·

Voice Agents Need a Conversation-Level Latency SLO, Not Component Speed Claims

A fast model or detector does not guarantee a fast phone conversation, because the caller experiences the full chain of call setup, speech detection, turn-end judgment, tool calls, generation, and audio delivery. The article argues that teams should measure several distinct clocks, since reporting only one of them tends to optimise the wrong part of the system. Silence is ambiguous, so aggressive endpoint detection can interrupt callers while conservative detection creates dead air. Filler speech can mask delays but must not hide unbounded waits or imply that an action has completed. The author proposes defining a conversation SLO covering listening, turn-end timing, first intelligible audio, interruption handling, and recovery when dependencies slow or fail.

0
ProgrammingDEV Community ·

Security enthusiast launches DEV Community blog on network and web application security

A self-described security enthusiast focused on network and web application security has begun publishing on DEV Community after reading the platform for some time. The author says security knowledge is often paywalled, scattered, or assumes too much prior expertise, and plans to share practical, plain-language explanations with real examples. Planned topics include penetration testing, OWASP Top 10 and authentication issues, network security basics, CTF lessons, and candid write-ups of past mistakes. The author states all content will be for educational purposes and authorized testing only, with no exploit code against live systems and a focus on defense and responsible disclosure.

0
ProgrammingDEV Community ·

LLM API Prices Vary Widely Across Providers for Many Models, Study Finds

A market analysis comparing 375 models offered by at least two of 137 providers found that the median input price difference is zero, meaning most providers charge identical rates for a typical model. However, a sizable minority of models show extreme divergence, with 42 models, about 11% of the sample, exceeding a 200% price spread. The largest gap cited involves openai/gpt-oss-120b, where input pricing ranged from $0.03 to $0.80 per million tokens across providers. The authors caution that the figures reflect short-context, point-in-time list prices that may change frequently, and that identically named models may differ in quantization or serving quality. They conclude that relying on a single provider's quote can lead to substantially overpaying.

0
ProgrammingDEV Community ·

Start AI in Sales by Automating Simple, Clearly Defined Tasks

The author argues that AI adds the most value in sales where inputs and outputs are clearly defined and tasks are easy to measure. Handing all sales and customer conversations to AI would likely fail, since real interactions can unfold in too many unpredictable ways. Instead, the recommendation is to automate gradually, beginning with the simplest work. The suggested first step is recording every incoming inquiry and tracking its handling progress, without yet responding to customers. This stage is verifiable, since one can check whether each inquiry was recorded and what happened to it next, and it keeps inquiries from going missing.

0
ProgrammingDEV Community ·

Peringatan Dini Dropout Mahasiswa: Tinjauan Tiga Jurnal dan Panduan Analisis Data dengan Python

Tulisan ini membahas bagaimana data akademik kampus, seperti nilai, kehadiran, dan status pembayaran, dapat dimanfaatkan untuk mendeteksi mahasiswa yang berisiko putus kuliah sejak dini. Penulis meninjau tiga artikel jurnal terbaru tentang prediksi dropout dan menyoroti kendala seperti keberagaman tipe data, kualitas data yang tidak konsisten, serta ketimpangan jumlah mahasiswa yang dropout. Salah satu temuan yang dibahas, dengan kombinasi teknik penyeimbang kelas dan CatBoost, menunjukkan performa sangat tinggi, namun penulis mengingatkan perlunya memeriksa potensi kebocoran data saat resampling. Bagian kedua berisi tutorial langkah demi langkah menggunakan Python untuk mengeksplorasi, memvisualisasikan, dan memodelkan data dropout. Penulis juga menekankan bahwa alur kerja pada dataset kecil dapat diterapkan pada data berskala besar.

0
ProgrammingDEV Community ·

Wholesale Bakery Builds Its Own App After Losing Its Paper Ledger

A small wholesale bakery owner lost the notebook holding her shelf counts, delivery figures, and billing records, which prompted her spouse to build a replacement app. The app, called Cuenta, lets her count stock at each cafe, record deliveries, and generate branded invoices. It also tracks who owes money and which payments are overdue, replacing paper forms and mental bookkeeping. The app was created for a Devpost hackathon using a guided skill pack that helped plan the project from interview answers. The author notes the planning caught several issues early, though one incorrect assumption persisted until real use exposed it.

0
ProgrammingDEV Community ·

Security analysis flags re-entrancy, upgrade, and oracle risks in Rocket Pool

A DeFi security research team has published a vulnerability surface analysis of Rocket Pool, the largest decentralized Ethereum staking protocol, which holds roughly $1.23 billion in total value locked. The report examines the protocol's smart contract layer on Ethereum L1 and L2, covering deposits, minipool management, the rETH token, DAO governance, and reward distribution. It identifies several attack vectors, including a potential re-entrancy issue in rETH minting, the absence of a time-lock on proxy upgrades, and reliance on a Beacon Chain oracle that could be altered without delay. The authors assign the protocol an overall risk rating of 7 out of 10, citing its mature audit history and DAO-controlled upgrade process alongside the scale of locked ETH and upgradeable contracts. The analysis is dated 20 October 2026.

← NewerPage 291 of 3060Older →