Programming

ProgrammingDEV Community ·

Virtual Memory Explained: Address Spaces, Paging, and How malloc Gets Memory

A new post in the Operating Systems Explained series covers virtual memory, the mechanism that gives each process its own address space. It explains paging and page tables, the translation lookaside buffer (TLB), and how page faults and swap are handled. The article also describes how system calls such as mmap and brk, along with malloc, obtain memory from the operating system. It connects back to an earlier post in the Computers Explained series, showing how identical addresses in two processes map to different physical frames under hardware enforcement.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

GitHub Actions pull_request_target policy changes take effect November 2, 2026

GitHub has introduced a new default Actions event policy for eligible public repositories, which begins enforcement on November 2, 2026 for affected repos that used the default before general availability. The policy is initially running in evaluate mode, meaning workflows still execute while potential blocks are identified. The change does not stop all public repositories from building, nor does it mean every use of pull_request_target is unsafe. Maintainers are advised to review which workflows depend on the event, which policy applies, and whether those jobs need privileged access. Developers are generally encouraged to use the lower-privilege pull_request event for building and testing proposed changes.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Two-Phase Slot Holds with Human Confirmation for Bridal Jewellery Visits

Bridal jewellery buying in India typically involves planned, weekend family visits that need a salesperson's undivided attention, so double-booking is a serious concern. The author describes a booking pattern for WhatsApp-based appointments in which the system first places a 30-minute hold on a slot and staff then confirm it. Confirmation involves checking salesperson availability, whether the space suits the family size, and any requested collections, with a salesperson assigned rather than just a time. Customers receive a hold message asking about the occasion and date so pieces can be prepared, plus an automatic reminder the day before with the store location and no prices. The author argues that fully automatic booking suits a salon, but for high-value, emotional visits human confirmation is part of the service.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Five Ways a Side Project Can Use Cloudflare's Free Tier

A developer describes five ways they rely on Cloudflare's free tier for side projects, requiring no credit card. Their first tip is Email Routing, which lets a registered domain forward addresses like shop@ or support@ to a single existing inbox for the cost of the domain. They also praise Cloudflare DNS for its speed and scoped API tokens, plus an audit log for tracking changes. The article highlights Workers for lightweight JavaScript endpoints with 100,000 requests per day, and cloudflared tunnels for exposing localhost over HTTPS. The author notes limits: Email Routing is forwarding-only, and Workers has per-request CPU caps.

0 comments Read more at DEV Community

ProgrammingHacker News ·

OpenBSD 8.0 Released

The OpenBSD project has announced version 8.0 of its open-source Unix-like operating system, as shown on its official release page. The source material provided is limited to the headline, the article link, and community engagement figures from Hacker News, which reports 15 points and 3 comments on the post. Specific details about the release's new features, changes, or improvements are not included in the available text. Readers seeking those details would need to consult the official OpenBSD announcement directly.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

Coding agents copy your worst test files, so cleaning them up matters

A developer argues that the existing tests in a codebase act as a prompt, since coding agents imitate their patterns closely. Simon Willison has observed that agent-written tests tend to match the quality of a project's clean baseline tests. A common flaw he points to is heavily duplicated test setup, which he addresses by asking the agent to refactor with parametrize or shared fixtures. He notes that even a few well-written examples can steer an agent toward a preferred testing style. The author also notes that Anthropic and OpenAI docs recommend keeping instruction files short and letting conventions live in the code itself.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Four Laravel Query Fixes That Make Slow Database Code Much Faster

A Laravel developer explains that slow pages and jobs usually stem from everyday query habits rather than complex issues. Common culprits include wrapping columns in functions that block index use, computing totals in PHP instead of the database, and loading large row sets into memory just to aggregate them. Benchmarks on a one-million-row MariaDB table show dramatic gains, such as sums dropping from 5.8 seconds to 0.15 seconds and grouping falling from 25.8 seconds to 1.1 seconds. The author also recommends wrapping bulk inserts in a single transaction to avoid paying the commit cost on every row. The fixes center on letting the database do the heavy lifting and returning only the results that are actually needed.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Estonia's September 2026 Incidents Prompt Call for Repeatable Public-Sector Exposure Baselines

Estonia's Information System Authority (RIA) reported several security failures in September 2026, including DDoS attacks on multiple public-service sectors and over 86 million requests against the national authentication service. A health-data breach at a dental IT processor and an e-bookstore intrusion through an unpatched flaw were also recorded. An analysis argues that organisations should maintain a documented, re-runnable exposure baseline with defined scope, verbatim queries, units, time windows and interpretation limits. The analysis measured Estonian exposure externally in mid-October 2026, counting 263 government-sector assets, 21,335 HTTPS domain assets, 135,740 hosts on port 443 and 98,788 SSH matches. It cautions that visibility does not equal compromise and that counts from overlapping layers should not be summed.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

A Ten-Second Formatting Habit That Speeds Up Code Reviews

A developer describes how they now normalize code formatting before reviewing any pull request, after noticing that formatting noise had slowed them down and made their reviews worse. They paste code into a browser-based formatter, run it, and copy the result back, which takes roughly ten to fifteen seconds and leaves a diff showing only real changes. The author applies the same step before submitting their own pull requests, finding that reviewers respond faster and comment more on design. Because they often work on machines that aren't their own, they prefer a no-install web tool over a configured formatter, while still recommending CI linting for repositories they control. The piece argues that removing formatting noise lets reviewers focus attention on logic and design.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Judged passage labels, not clicks, should gate RAG retrieval releases

The author argues that a RAG retrieval evaluator for a documentation-monitoring alert system should rely on judged relevance labels rather than click proxies as its release gate. Recall@K is computed against a versioned set of question-to-passage labels, and builds fail when agreed slices regress, while clicks serve as a separate online signal. Averaging across all queries can hide complete misses on high-risk cases such as removed configuration constraints, so per-slice reporting by change type, template, language, and freshness is recommended. Labels should be defined at the same granularity the retriever returns, and the corpus should be frozen during evaluation. The approach does not by itself measure ranking quality, citation correctness, or answer faithfulness.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer's Hackathon AI File Organizer Sparks Naming Debate With ChatGPT

In October 2026, during Week 3 of the DEV Community Hacktoberfest AI Challenge, a developer asked ChatGPT for practical project ideas and received a list. One proposal was a local, open-weight AI app that reads documents, suggests meaningful filenames, and sorts files into subfolders after user approval, avoiding cloud uploads of personal data. The developer objected to the name FileJanitor AI, and a suggested rename was later revised after the AI component was dropped from the domain. The developer describes the exchange with humor, recounting how ChatGPT's changes led to back-and-forth over the final domain name.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Orphaned Dev Subdomains Can Expose Client Data After Projects End

Agencies and contractors often create staging and preview subdomains for client projects that outlive their usefulness. When the project ends, the underlying cloud resource may be deleted or its IP released, while the DNS record pointing to it remains active. Such dangling records can be claimed by others, letting them serve content under the client's trusted domain. Security researchers classify this as subdomain takeover, a known and still common vulnerability. The article warns that the resulting risks include phishing and data exposure, and it highlights the gap between contract termination and DNS cleanup.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

AI Coding Assistants Shift Software Engineers Toward Architecture and Problem Solving

An opinion piece on DEV Community argues that AI coding assistants are changing how software is written by taking over repetitive tasks. Tools such as GitHub Copilot, Cursor, and ChatGPT, built on large language models trained on vast code repositories, now analyze entire codebases and generate boilerplate, tests, and server scaffolding within seconds. The author says these tools also help translate legacy code, such as Python 2, into modern frameworks. Engineers' value is therefore moving from memorizing syntax toward system design, reviewing generated code, and meeting business needs. The piece also suggests non-programmers can now build prototypes, though it contends AI will not replace skilled engineers.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Media archive reranking: limit chunk versions and candidates before model calls

The guide recommends retrieving around 20 candidate chunks and reranking them against the original query, sending only the top few into the prompt. It argues that storage costs, driven by records, chunks per record, retained versions, and retention days, usually matter more than tuning the final result set. Using illustrative figures for a publisher handling 100,000 records daily, it shows that keeping every version for 180 days could raise live chunks from 12 million to 72 million. It recommends tracking four counters and keeping compact decision traces, with full candidate text sampled for diagnostics. It also advises chunking along existing semantic boundaries and applying retention rules before reranking so obsolete revisions do not win on wording alone.

0 comments Read more at DEV Community

ProgrammingHacker News ·

OpenBSD 8.0 Scheduled for Release on October 20, 2026

The OpenBSD project has announced that version 8.0 of its Unix-like operating system is set to be released on October 20, 2026. The announcement was shared on the openbsd-misc mailing list and drew modest attention on Hacker News. The source material provides only the release date and does not detail the new features or changes included in this version. Readers seeking specifics on OpenBSD 8.0 will need to consult the original mailing list post or official project resources.

0 comments Read more at Hacker News

ProgrammingDEV Community ·

textbee Turns Android Phones Into an Open-Source SMS Gateway for Developers

The team behind textbee, an open-source SMS gateway, has described how the project lets developers send and receive texts through Android phones they already own. Messages are sent via a single HTTP request, travel through the phone's SIM and number, and replies are delivered to developers' servers as webhooks. The post says more than 40,000 developers have signed up and that the project is MIT licensed. The authors also outline practical challenges such as battery-saving restrictions on Android devices, the distinction between accepted and delivered messages, and a limit of roughly 10 to 15 messages per minute per phone.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Cross-model review of seven articles: what the second reviewer caught and how often it failed

A series of articles on ShortSingh's sibling project requires each draft to be checked by a different AI model before publication. The author analyzed the review records for seven articles published October 13–18, 2026, coding all forty comments by problem type and outcome. Of these, 29 came from the model reviewer and 11 from a human fallback used when the model did not respond. The model reviewed five of seven articles, and most of its comments led to changes, concentrated on numerical inconsistencies, overreaching causal claims, and unqualified conclusions. Reliability was a problem: most API calls failed with server-overload or quota errors, requiring many retries. To measure recall, the author also tested the reviewer on a short passage with six planted defects whose true count was known.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

SerpApi's Markdown Output Lets Local LLMs Fit More Web Search Data

A local model can only read the search results that fit within its context window, and early SerpApi responses often exceeded that limit, so the JSON Restrictor was used to trim them before they reached the model. SerpApi's new Markdown output represents the same data in fewer tokens than JSON, allowing the restrictor to keep more information and often letting the full response fit without trimming. The author demonstrates applying the JSON Restrictor to Markdown output in an open-source app that connects a model running in LM Studio to web search. The benchmark compares Markdown and JSON outputs across several search tools, using four local models on a 32K context window. Token sizes were estimated with OpenAI's tiktoken library, and the models were tested end to end on thirteen questions.

0 comments Read more at DEV Community

ProgrammingHacker News ·

Novo Nordisk and Eli Lilly Report Early GLP-1 Signals of Slowed Biological Aging

Novo Nordisk and Eli Lilly presented findings at the ARDD aging research conference suggesting that GLP-1 drugs may slow biological aging. The reported signals come from company-backed research shared at the event. The source material provided is limited to a link and metadata, so the specific study design, sample size, and measured outcomes cannot be confirmed here. The results are preliminary and have not been established as definitive evidence of anti-aging effects. Further peer-reviewed research would be needed to assess the claims.

0 comments Read more at Hacker News

ProgrammingHacker News ·

Developing Taste: An Essay on Cultivating Design Judgment

The original item is a Hacker News post linking to an essay titled "Developing Taste" on emilkowal.ski. The post has 7 points and 5 comments at the time of capture. The available text contains only the link and engagement metrics, not the essay's content. Because the article body was not provided, its specific arguments and claims cannot be summarized here. Readers can consult the linked essay and its Hacker News discussion for the full material.

0 comments Read more at Hacker News

← NewerPage 294 of 3061Older →