SShortSingh.

Programming

0
ProgrammingDEV Community ·

Un dashboard de ventas en español con Python, Streamlit y Plotly, desplegado en la nube

Un desarrollador describe la creación de un dashboard de ventas interactivo en español, construido con Python, Streamlit y Plotly. Todos los datos son ficticios: se generan 2.400 pedidos de 2025 con una semilla fija, y los importes se guardan en céntimos enteros para evitar errores de redondeo. La aplicación ofrece indicadores de ventas, ganancias simuladas, pedidos y ticket promedio, además de filtros por fecha, categoría y región. Incluye tres gráficos, una tabla de detalle y la opción de exportar la selección a CSV con importes en soles peruanos. El proyecto se publicó en Streamlit Community Cloud y su código está disponible en GitHub.

0
ProgrammingDEV Community ·

Rainbone Hackathon Project Runs 3D Femur Stress Tests and Has AI Explain the Results

At Hack the Valley 11, a four-person team built Rainbone, a 3D bone stress-testing prototype that simulates a real femur CT scan using finite-element physics. The tool shows where strain concentrates in the bone and uses Gemini to translate those results into plain language for senior-care staff. It was developed for PointClickCare's Catch It Early challenge and draws on public, de-identified research data from the University of Bologna's HFValid dataset covering 101 women. The creators stress that Rainbone is a research prototype rather than a medical device and does not predict whether or when a fracture will occur. The article's author, a full-stack and AI engineer on the team, describes a design rule in which code performs all calculations and the AI only converts verified results into words.

0
ProgrammingDEV Community ·

Local AI app helps solo yoga teachers plan classes and follow-ups without cloud uploads

Side Hustle Saathi is a desktop app built for solo yoga teachers to handle class preparation, post-class notes, and newsletters. It runs Google's Gemma model locally through Ollama, so student health information such as injuries and surgeries stays on the teacher's computer. Before class, the app drafts a bilingual Sanskrit and English sequence with safety callouts tailored to each student's condition. After class, it turns quick notes into progress logs and follow-up email drafts, and it never sends anything on its own. The developer built the Tauri-based Mac app for a teacher who runs six weekly online classes, and the code is available on GitHub.

0
ProgrammingHacker News ·

William Gibson and the trademarking of cyberspace

The item is a Hacker News link to an external article about William Gibson and the trademarking of the term 'cyberspace'. The post itself contains only a URL, a discussion link, and a score of 14 points with no comments. No article text was included, so the specific details of the trademark claim cannot be confirmed here. Readers would need to visit the linked page for the full account of the story.

0
ProgrammingHacker News ·

Analysis Examines How Fast the Pentagon Can Rebuild Its Munitions Industrial Base

A CSIS analysis asks how quickly the Department of Defense can rebuild and recast its munitions industrial base. The piece is published on the think tank's website and was shared on Hacker News, where it drew modest attention. The provided source material contains only the article link and discussion metadata, so the specific timelines and findings cannot be confirmed here. Readers are directed to the full CSIS analysis for the details of the assessment.

0
ProgrammingDEV Community ·

Wrong CSV Headers Cause Stock Photo Uploads to Be Rejected Before Review

A contributor to stock asset marketplaces found that batches of files were bounced within a minute because of errors in their CSV metadata headers, before any content review occurred. Platforms including Adobe Stock, Vecteezy, and Dreamstime run an automated check that verifies column count and order, and each requires a different number of columns: five for Adobe Stock, four for Vecteezy, and fifteen for Dreamstime. Common errors such as trailing commas, incorrect keyword separators, and mismatched filename extensions can cause the entire batch to fail. The contributor responded by writing a Python script that generates the correct header for each platform and a separate tracker to prevent duplicate submissions, which can trigger account flags.

0
ProgrammingDEV Community ·

ZoomEye Finds Over 5 Million Internet-Reachable Elasticsearch Services on Port 9200

A ZoomEye search for port 9200, the default HTTP interface of Elasticsearch, returned 5,079,738 matches as of 2026-09-24. The analysis notes that Elasticsearch often underpins log pipelines and internal search, where sensitive data such as credentials and personal information can be indexed. Older Elasticsearch defaults left security features unconfigured, and such deployments persist in environments built earlier or copied from outdated documentation. The article cautions that the count reflects scale rather than confirmed vulnerability, since other services also use high ports. It recommends restricting network access, enabling authentication and transport layer security, and ensuring inter-node transport ports are never exposed to the internet.

0
ProgrammingDEV Community ·

Why Communications Deserve Their Own Service in Larger Applications

Most applications send notifications such as order confirmations, password resets, and shipping updates, usually starting with a simple email client call. For small systems this approach is often sufficient, but larger applications with separate business contexts need more deliberate design. Microsoft's .NET eShop reference application, split into Ordering, Identity, and Payment services that communicate through contracts, is used as the example. A new series adds a dedicated communications service to eShop, starting with an analysis of where that service's boundary should lie. The article argues that a message often needs data spanning several bounded contexts, so no single existing service naturally owns it.

0
ProgrammingDEV Community ·

A public web page reveals 20 test case categories before any automation begins

The article argues that a public page already exposes many testable traits, such as HTTPS support, links, form labels, headers, and load time, before any test code is written. It presents a list of 20 test categories, including functional, accessibility, security, performance, and privacy checks, each illustrated with a sample case ID. The author recommends reading the public response first and following visible same-host links a couple of levels deep. Only the test kinds a team will actually run should be kept, and each case should be paired with a named tool such as Playwright, axe-core, or Lighthouse. The piece cautions that missing security headers are signals for the owner to examine rather than proof of a breach, and that reading a public page is not a penetration test or a substitute for plans covering logged-in or high-traffic systems.

0
ProgrammingDEV Community ·

BatchZero Uses FalkorDB Graph Traversal to Resolve a Tied Outbreak Source

An investigation into an outbreak of eleven illnesses found two ingredients shared by every case and two suppliers tied on exposure counts, so case data alone could not identify the source. The developers built BatchZero, a graph-based investigator using FalkorDB, to link cases, exposures, menu items, ingredients, lots, suppliers, and shipments. Genomic isolate matching provided independent evidence that favored one lot, MG-4417, while refuting the competing lettuce lot. The system also flagged an exposure record dated after symptom onset and excluded it as outside the incubation window. The project, which uses fictional outbreak data for demonstration, separates four agent roles through MCP servers to enforce workflow limits.

0
ProgrammingDEV Community ·

Developer Builds Free Local-AI Tool to Turn Shopify Reviews Into Business Insights

A developer has created the E-Commerce Review Insight Engine, a standalone dashboard that lets online store owners upload CSV files of customer reviews. The tool uses open-weight AI models such as Llama 3.2 and Gemma 2, run locally through Ollama, to surface top praises, main complaints, and an actionable business plan. The project was built in Python with Streamlit and Pandas and was submitted to a Hacktoberfest open-source AI challenge. The developer argues that running models locally avoids recurring API token costs and keeps sensitive customer data off third-party cloud servers.

0
ProgrammingDEV Community ·

Running a Remote MCP Server on Cloudflare Workers for Free: A Practical Guide

A Vietnamese developer guide describes moving MCP servers from local stdio setups onto Cloudflare Workers, where they can be reached over HTTP and shared across a team. The author argues that local setups require per-machine installation, scatter secrets across config files, and cannot serve cloud-hosted agents. The remote approach uses the Streamable HTTP transport from the MCP spec, letting clients connect with just a URL and token while secrets stay on the server. The walkthrough covers project setup with wrangler and the agents and MCP SDK packages, configuring Durable Objects and KV bindings, and a sample server exposing note-saving and note-search tools. It also flags a common pitfall: free-plan Durable Objects require the new_sqlite_classes migration rather than the legacy option.

0
ProgrammingDEV Community ·

AI bots are slipping into survey forms, and here's how to catch them

AI agents can now write fluent open-ended answers and pass simple attention checks, making fake responses harder to detect than the crude bots of the past. The article, written by a B2B market research practitioner, argues that client-side checks such as honeypot fields must be backed by server-side validation, since bots can post directly to an endpoint. It recommends examining response patterns across a whole submission, such as uniform answer length, generic specificity, and implausible job claims. Other suggested measures include niche knowledge questions and scrutiny of metadata like duplicate devices, disposable email domains, and bursts of submissions. The author cautions that no single signal is conclusive and that honest users can be wrongly flagged, so signals should be combined and every rejection logged for review.

0
ProgrammingDEV Community ·

New tool scans company job boards to flag visa sponsorship and citizenship requirements

A developer has built a scraper that pulls listings from Greenhouse, Lever, Workday and other applicant tracking systems and reads each posting for work-authorization language. The tool tags every job with whether sponsorship is offered, whether U.S. citizenship or ITAR-style U.S.-person status is required, and whether a security clearance applies, quoting the exact sentences behind each tag. Users can switch on filters that drop listings lacking sponsorship or requiring citizenship or clearance, and dropped jobs are not charged. In the author's test run on October 18, 2026, the tool saved 19 jobs and excluded 11, with SpaceX returning none because all of its software roles checked required U.S.-person status. The Apify-hosted Actor is offered with a free plan that includes $5 of monthly usage credit, which the author estimates covers about 5,000 jobs at $0.001 per job.

0
ProgrammingDEV Community ·

Cross-modal knowledge distillation aims to unify deep-sea habitat design across languages and disciplines

A developer working on multimodal AI describes how a question from a marine engineering colleague led to exploring knowledge distillation for designing deep-sea habitats. The core challenge is that engineers, biologists, and safety auditors describe the same physical reality through different data types, languages, and professional vocabularies. Standard cross-modal distillation methods struggle with this heterogeneity, often failing when technical terms and standards cross linguistic boundaries. The author proposes a layered architecture in which a high-capacity multimodal teacher distills knowledge into modality- and language-specific student agents that coordinate through a shared latent semantic space. The article shares the architectural patterns and pitfalls encountered while building and testing such a system.

0
ProgrammingDEV Community ·

Self-hosted apps that publish packages to registries have far fewer advisories invisible to scanners

A follow-up study found that about half of self-hosted applications' own security advisories name no package in OSV, leaving them invisible to tools like Dependabot, npm audit and pip-audit. The researchers tested whether publishing an official package to a registry that OSV indexes predicts visibility, using a pre-registered rule and a fresh set of apps. Apps without a registry package had a median of 100% of their advisories blind, while registry-publishing apps had a median of about 27%, a difference that held on the new sample. The authors caution that this is an association, since registry publishing overlaps with ecosystem, age and security-process maturity, and that publishing alone is not enough unless advisories name the published package. Maintainers are advised to publish to their ecosystem's registry and name the package in GHSA advisories to make them reachable by scanners.

0
ProgrammingDEV Community ·

Locally Uncensored 3.0.6 adds beta computer control for local AI models

Locally Uncensored 3.0.6, an open source desktop app for running AI models locally, now lets a model use the mouse and keyboard in applications the user approves. The feature is off by default and must be enabled in settings, and it works with local models so screenshots and clicks stay on the user's machine. The app asks permission at several points, including at the start of each chat, on first use of an app, for sensitive actions, and for unnamed buttons, and some areas such as terminals and password managers are blocked entirely. Users can pause or stop the agent with keyboard shortcuts, and screen tasks end after at most 25 steps or 8 minutes. The developers describe the feature as beta and note that a dedicated screen model performed weakly in their testing.

0
ProgrammingDEV Community ·

AI Reshapes Job Titles and Work Methods, Shifting Value Toward Engineering Judgment

An opinion piece argues that artificial intelligence is changing both job titles and the way work gets done across industries. It contends that AI tools are now widely accessible, so the key differentiator is how users apply them, including their methodology and ability to steer the tools toward useful results. In software development, the author says writing code is becoming a cheap, routine step, with value moving toward engineers who understand the broader discipline and can guide AI toward real-world solutions. The piece notes that AI also creates new roles, citing examples such as prompt engineering, RAG engineering, agentic AI engineering, Chief AI Officer, and AI business translator. It concludes that people who resist adaptation risk falling behind, and that thoughtful, moderate adoption of AI can strengthen skills and professional capabilities.

0
ProgrammingDEV Community ·

Why coding agents turn CRLF files into whole-file diffs, and what Codex 0.162 changed

Coding agents that rewrite a Windows file with LF line endings can make git report every line as changed, even when only one word was edited. This happens because git stores the committed CRLF bytes, and the rewrite adds an invisible difference to each line. Developers have reported the problem with Claude Code, and Codex CLI's 0.162.0 release now preserves existing CRLF endings in its patch updates. The article includes a reproducible git demo showing that one changed word produces three deletions and three insertions. It explains how core.autocrlf and text attributes in .gitattributes decide where conversion occurs, and why files already committed with CRLF can escape normalization.

← NewerPage 353 of 3100Older →