SShortSingh.

Programming

0
ProgrammingDEV Community ·

Randal Schwartz to Speak on Giving AI Agents Senior-Engineer-Style Memory

Perl Weekly issue 795 announces an upcoming talk by Randal Schwartz, author of Learning Perl and Programming Perl, titled 'Synthetic Scars: Giving Autonomous AI Agents the Battle-Tested Memory of a Senior Engineer.' The newsletter also highlights Modern Perl Tips, a series aimed at helping programmers discover newer language features, and a project on real-time MIDI in Perl. Several CPAN releases are noted, including URI::PackageURL 2.26 for supply-chain identifiers and a NetAddr::IP trial release seeking testing. The edition's editor encourages readers to offer presentations on Perl, AI, or other topics.

0
ProgrammingDEV Community ·

LDAPS Failures on a Domain Controller: Certificate Checks and LDAP Signing Triage

A helpdesk team reports that a directory sync fails with 'Strong Authentication Required' after a new Windows Server 2025 domain controller was added, and that LDAPS connections to another controller fail since its certificate renewed. The guidance argues these are distinct problems, since LDAPS failures stem from certificate availability, serving, trust, or name matching, while signing and channel binding rejections are deliberate DC enforcement. It cautions against disabling signing domain-wide, deleting certificates, or setting channel binding to Never, because these remove diagnostic evidence and can reopen security risks. It recommends a step-by-step chain of checks covering port reachability, certificate presence, trust, name matching, and unsigned binds, using tools such as Test-NetConnection, certutil, and Get-WinEvent. The article also points to related guides for certificate enrollment and revocation issues.

0
ProgrammingDEV Community ·

MOVEit Transfer Patches Twelve CVEs, Including Authentication Bypass in OIDC Module

Progress has released fixes for MOVEit Transfer addressing twelve CVEs, among them CVE-2026-89070, a 7.5 CVSS authentication bypass via capture-replay in the OIDC module. The CVE record confirms the affected versions as those before 2025.1.6 and from 2026.0.0 through 2026.0.3, with 2025.1.6 and 2026.0.4 as the remediated releases. The record does not specify which freshness control failed, what attacker access is required, or what privileges a replayed session would gain. Initial reporting indicated no confirmed exploitation and no public proof-of-concept code at publication. The analysis stresses reading the official CVE records and vendor advisory rather than secondary summaries that may overstate details.

0
ProgrammingHacker News ·

Superlite Proposed as a Faster Alternative to Superpowers

A blog post on contextfirst.blog introduces Superlite, presented as a faster alternative to Superpowers. The article is linked from a Hacker News submission that has so far received 7 points and 2 comments. The source material provides only the title, link, and engagement figures, so the specific technical differences between the two tools are not described here. Readers would need to consult the original post for details on how Superlite works and how its performance compares.

0
ProgrammingDEV Community ·

Local AI model reads parking ticket photos to draft appeal letters

TicketBack is an open-source tool that turns two phone photos, one of a parking ticket and one of the sign it was parked under, into an appeal letter. A locally run open-weight model, Gemma 3 4B via Ollama, reads the images, while fixed rules rather than the model determine whether the driver has valid grounds to appeal. The model only drafts the letter after the user confirms the extracted facts, and if no ground exists the tool says so instead of writing a weak appeal. Everything runs on the user's computer, so photos and plate data are not sent elsewhere. The developer built it because small fines are often paid rather than contested, and the project targets individual drivers and small fleets.

0
ProgrammingDEV Community ·

GBase Database Typical Install: Fixing Connection Failures and Chinese Encoding Problems

After a typical GBase Database installation, users may encounter connection failures and garbled Chinese text during initial testing. Connection problems can be diagnosed by checking the instance name in the environment script, the port mapped in /etc/services, and whether the instance is online using onstat. The /etc/services entry only maps a service name to a port and does not confirm that the server is actually listening there. Garbled Chinese text often stems from the default en_US.8859-1 locale, which is designed for Western European encodings and may conflict with application requirements. The article advises resolving these issues by verifying configuration before modifying parameters or reinstalling.

0
ProgrammingDEV Community ·

An Up-to-Date CAD Revision Doesn't Guarantee Current Project Information

A drawing can carry the latest revision number while still containing outdated details, such as an old appliance model or a superseded finish. Project information is typically spread across CAD models, material schedules, hardware specs, product data sheets, and approval comments, and updating one file does not update the others. The author argues that approved materials, hardware models, verified dimensions, open comments, and production release status all need to be tracked alongside the drawing revision. A simple status record linking these decisions to the correct product or drawing can reduce confusion, especially when several teams work on different parts of a project. The article closes by asking how software, CAD, and manufacturing professionals keep decisions synchronized across files and teams.

0
ProgrammingDEV Community ·

How ExamParser Turns Messy Word, PDF, and Google Docs Into Quiz Question Banks

The author built ExamParser, a tool that converts Word, PDF, and Google Docs files into Canvas-ready quizzes without requiring a login. The core challenge is that documents have no native concept of questions, so the parser must infer questions, types, and answers from layout, styling, and authoring conventions. The pipeline extracts format-specific blocks, normalizes them into a shared schema, segments them into questions, classifies question types, and emits QTI or spreadsheet output. For Word files, paragraph styles and list markers provide cues, while PDFs rely on character coordinates to detect columns and option labels, and scanned PDFs require OCR. The post also explains how a tolerant regular expression detects numbered question starts across inconsistent formats.

0
ProgrammingDEV Community ·

Open-Source AI Assistant Built to Answer Mall Members' Questions On-Premises

A backend engineer at a shopping-mall company has released Member Assistant, an open-source AI helper for mall mini-programs that answers member questions about points, parking, and coupons. It retrieves answers from the mall's own knowledge base using local multilingual embeddings and a FAISS index, streaming cited responses. Member data is accessed through read-only, preset tools, with identity taken only from the auth header. The project avoids closed model APIs so sensitive member information stays on the company's own machines, and it was submitted to the Hacktoberfest x Open Source AI Challenge. The author says the assistant has been tested against the mall's actual parking and points rules.

0
ProgrammingHacker News ·

Footage Surfaces of Flock Camera Search Ruled Unconstitutional by Judge

A court has ruled that a search carried out using Flock license-plate reader data was unconstitutional. 404 Media has published footage related to that search. The source material provided is limited to the article link and discussion metadata, so the full details of the case, the parties involved, and the court's reasoning are not available here. The footage is presented as a means of showing how the search was conducted. Readers can consult the original 404 Media report for complete information.

0
ProgrammingDEV Community ·

Aptología publica 42 estudios de vivienda 2026 sobre Colombia y Latinoamérica con datos abiertos

Aptología publicó 42 nuevos estudios de vivienda con datos abiertos bajo licencia CC BY 4.0, elaborados a partir de exportaciones de su base de datos del 18 de octubre de 2026. Los trabajos incluyen perfiles de 14 ciudades colombianas fuera de Bogotá, con precios por metro cuadrado, arriendo, rentabilidad, estrato y administración. También abarcan rankings de barrios para arrendar y comprar en Colombia, comparaciones en dólares y perfiles de once ciudades latinoamericanas. Cada estudio incluye metodología, CSV, gráficas y PDF, y cada cifra se basa en al menos 30 avisos. La serie de tendencias semanales de agosto a octubre no se incluyó porque cambió de fuentes en ese periodo y no es comparable.

0
ProgrammingDEV Community ·

Calculating Exact Age in Years, Months and Days from a Birth Date

A developer building an age gate for a lending product found that dividing day counts by 365 misstated age, letting a 17-year-old pass an 18+ check one day early. Because years and months vary in length, calendar arithmetic must subtract year, month and day components and borrow from the previous month when days go negative. The article shares a Python implementation using calendar.monthrange and a matching Node.js approach. It also notes that leap-day birthdays raise a policy question about the legal birthday that the software cannot settle. The author advises using borrow-based logic and a documented rule for February 29 in any system with legal consequences.

0
ProgrammingDEV Community ·

Insurance Claims Retrieval Needs Access Rules and Freshness Checks Before Search

The article argues that insurance claims systems must only return facts that the claimant, adjuster, and model are permitted to see at the moment of retrieval. It draws on a stale-cache incident in an e-commerce change watcher, where outdated data stayed in circulation for 17 minutes, to show how derived records can silently become invalid. The author recommends enforcing authorization before retrieval, using small revocable chunks with provenance fields, and failing closed when policy context is missing. Freshness is framed as policy lag, measured as the time between a source update or revocation and the last retrieval that could return the outdated version.

0
ProgrammingDEV Community ·

Connecting ChatGPT to Live Amazon Data via MCP: Setup, Plan Requirements, and Verification

ChatGPT has supported MCP clients since DevDay 2025, but users on Free or Go plans may not see the setup option because Developer Mode, which hosts custom connectors, is limited to paid plans. The guide walks through enabling Developer Mode and adding an Amazon data connector with an authentication token. It includes a Python pre-flight script that checks the endpoint, session handling, and tool availability before connecting. A three-prompt protocol is provided to confirm that ChatGPT's answers are grounded in the returned data, using reference figures from a sample run.

0
ProgrammingDEV Community ·

SellerBoost AI Generates Bulk Product Listings from CSV Uploads

A developer has built SellerBoost AI, a tool that helps online sellers and small businesses create product listings in bulk. Users upload a CSV file listing product names, categories, and target marketplaces, then generate titles, descriptions, and selling points that can be previewed before use. The application uses a React and Vite frontend with a FastAPI backend, and relies on Meta's Llama 3.1 8B Instruct model accessed through Backboard AI. The project was submitted to the Hacktoberfest Open-Source AI Challenge, and its creator frames it as an example of practical applications built on open-weight AI models.

0
ProgrammingDEV Community ·

Security review flags governance risks in Venus Core Pool, including upgrade and timelock weaknesses

A governance attack surface review of the Venus Core Pool, a cross-chain lending protocol with about $1.25 billion in total value locked, was published on 19 October 2026. The assessment examined pathways by which attackers could manipulate proposals, bypass safeguards, or stall decision-making. It identified nine issues, with the most severe being a single-signer upgrade admin lacking a multi-signature guard and a potential timelock bypass via re-entrancy. The reviewers assigned the governance layer an aggregate risk score of 7.4 out of 10, citing quorum and voting-power concentration as additional concerns.

0
ProgrammingDEV Community ·

Five AI Prompts for Email Triage That Draft Replies Without Sending Anything

Support and customer success leads often struggle to separate urgent customer messages from newsletters and notifications, and important emails can get missed on busy days. The article presents AI email triage as a practical starting point, with the key safeguard being strict rules that the agent only drafts and never sends, deletes, archives, or labels messages. It recommends setting up a short list of your manager, key accounts or domains, and team responsibilities so the agent knows whom to delegate to. The five prompts cover daily sorting into Needs me today, Can delegate, and FYI groups, re-checking low-priority mail for hidden urgency, finding unfinished promises in recent threads, and preparing holding replies and handover notes for time away. The author advises tuning the first prompt most closely and reviewing the FYI pile for two weeks before trusting it, and limiting access to read-only plus drafts with company approval.

0
ProgrammingHacker News ·

Starcraft: Ashfall Shooter Project Surfaces on Hacker News

A web page titled Starcraft: Ashfall has been shared on Hacker News, linking to a project hosted at a Cloudflare Pages address. The post has drawn 21 points and 13 comments from the community. The source material provides only the title, link, and engagement figures, so details about the game's gameplay, development, or connection to Blizzard's StarCraft franchise cannot be confirmed. Readers interested in the project would need to visit the linked page or discussion thread for further information.

0
ProgrammingDEV Community ·

Automating Approval Flows in Node.js and Postgres with State Machines

Business approvals often stall in email inboxes, leaving no clear record of status, ownership, or deadlines. This guide proposes storing each request in Postgres with a single explicit state, enforced by a CHECK constraint. Every state change is recorded in an append-only event log that supports later audits. Transition rules are kept as plain data in the codebase so the process is easy to review. A scheduled job can then find requests past their deadline and escalate them to the next approver.

0
ProgrammingDEV Community ·

sitetoolsbox.com Combines Browser Tools and Server Checks in One Directory Architecture

A DEV Community article describes how the sitetoolsbox.com platform pairs a navigation directory with browser-based and server-assisted tools. Its client-side JSON formatter runs locally without uploading data and loads only when a user opens it. For bulk domain checks, the server uses RDAP, a JSON-based protocol, with parallel requests via PHP's curl_multi, falling back to WHOIS when needed. The directory is built with static-style HTML, structured data, and internal linking across categories, and empty category pages are excluded from the sitemap. The author argues that keeping the directory's JavaScript lightweight and loading each tool's code only on demand is essential to good performance.

← NewerPage 351 of 3100Older →