SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Why Communications Deserve Their Own Service in Larger Applications

Most applications send notifications such as order confirmations, password resets, and shipping updates, usually starting with a simple email client call. For small systems this approach is often sufficient, but larger applications with separate business contexts need more deliberate design. Microsoft's .NET eShop reference application, split into Ordering, Identity, and Payment services that communicate through contracts, is used as the example. A new series adds a dedicated communications service to eShop, starting with an analysis of where that service's boundary should lie. The article argues that a message often needs data spanning several bounded contexts, so no single existing service naturally owns it.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

A public web page reveals 20 test case categories before any automation begins

The article argues that a public page already exposes many testable traits, such as HTTPS support, links, form labels, headers, and load time, before any test code is written. It presents a list of 20 test categories, including functional, accessibility, security, performance, and privacy checks, each illustrated with a sample case ID. The author recommends reading the public response first and following visible same-host links a couple of levels deep. Only the test kinds a team will actually run should be kept, and each case should be paired with a named tool such as Playwright, axe-core, or Lighthouse. The piece cautions that missing security headers are signals for the owner to examine rather than proof of a breach, and that reading a public page is not a penetration test or a substitute for plans covering logged-in or high-traffic systems.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

BatchZero Uses FalkorDB Graph Traversal to Resolve a Tied Outbreak Source

An investigation into an outbreak of eleven illnesses found two ingredients shared by every case and two suppliers tied on exposure counts, so case data alone could not identify the source. The developers built BatchZero, a graph-based investigator using FalkorDB, to link cases, exposures, menu items, ingredients, lots, suppliers, and shipments. Genomic isolate matching provided independent evidence that favored one lot, MG-4417, while refuting the competing lettuce lot. The system also flagged an exposure record dated after symptom onset and excluded it as outside the incubation window. The project, which uses fictional outbreak data for demonstration, separates four agent roles through MCP servers to enforce workflow limits.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Free Local-AI Tool to Turn Shopify Reviews Into Business Insights

A developer has created the E-Commerce Review Insight Engine, a standalone dashboard that lets online store owners upload CSV files of customer reviews. The tool uses open-weight AI models such as Llama 3.2 and Gemma 2, run locally through Ollama, to surface top praises, main complaints, and an actionable business plan. The project was built in Python with Streamlit and Pandas and was submitted to a Hacktoberfest open-source AI challenge. The developer argues that running models locally avoids recurring API token costs and keeps sensitive customer data off third-party cloud servers.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Running a Remote MCP Server on Cloudflare Workers for Free: A Practical Guide

A Vietnamese developer guide describes moving MCP servers from local stdio setups onto Cloudflare Workers, where they can be reached over HTTP and shared across a team. The author argues that local setups require per-machine installation, scatter secrets across config files, and cannot serve cloud-hosted agents. The remote approach uses the Streamable HTTP transport from the MCP spec, letting clients connect with just a URL and token while secrets stay on the server. The walkthrough covers project setup with wrangler and the agents and MCP SDK packages, configuring Durable Objects and KV bindings, and a sample server exposing note-saving and note-search tools. It also flags a common pitfall: free-plan Durable Objects require the new_sqlite_classes migration rather than the legacy option.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI bots are slipping into survey forms, and here's how to catch them

AI agents can now write fluent open-ended answers and pass simple attention checks, making fake responses harder to detect than the crude bots of the past. The article, written by a B2B market research practitioner, argues that client-side checks such as honeypot fields must be backed by server-side validation, since bots can post directly to an endpoint. It recommends examining response patterns across a whole submission, such as uniform answer length, generic specificity, and implausible job claims. Other suggested measures include niche knowledge questions and scrutiny of metadata like duplicate devices, disposable email domains, and bursts of submissions. The author cautions that no single signal is conclusive and that honest users can be wrongly flagged, so signals should be combined and every rejection logged for review.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

New tool scans company job boards to flag visa sponsorship and citizenship requirements

A developer has built a scraper that pulls listings from Greenhouse, Lever, Workday and other applicant tracking systems and reads each posting for work-authorization language. The tool tags every job with whether sponsorship is offered, whether U.S. citizenship or ITAR-style U.S.-person status is required, and whether a security clearance applies, quoting the exact sentences behind each tag. Users can switch on filters that drop listings lacking sponsorship or requiring citizenship or clearance, and dropped jobs are not charged. In the author's test run on October 18, 2026, the tool saved 19 jobs and excluded 11, with SpaceX returning none because all of its software roles checked required U.S.-person status. The Apify-hosted Actor is offered with a free plan that includes $5 of monthly usage credit, which the author estimates covers about 5,000 jobs at $0.001 per job.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Cross-modal knowledge distillation aims to unify deep-sea habitat design across languages and disciplines

A developer working on multimodal AI describes how a question from a marine engineering colleague led to exploring knowledge distillation for designing deep-sea habitats. The core challenge is that engineers, biologists, and safety auditors describe the same physical reality through different data types, languages, and professional vocabularies. Standard cross-modal distillation methods struggle with this heterogeneity, often failing when technical terms and standards cross linguistic boundaries. The author proposes a layered architecture in which a high-capacity multimodal teacher distills knowledge into modality- and language-specific student agents that coordinate through a shared latent semantic space. The article shares the architectural patterns and pitfalls encountered while building and testing such a system.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Self-hosted apps that publish packages to registries have far fewer advisories invisible to scanners

A follow-up study found that about half of self-hosted applications' own security advisories name no package in OSV, leaving them invisible to tools like Dependabot, npm audit and pip-audit. The researchers tested whether publishing an official package to a registry that OSV indexes predicts visibility, using a pre-registered rule and a fresh set of apps. Apps without a registry package had a median of 100% of their advisories blind, while registry-publishing apps had a median of about 27%, a difference that held on the new sample. The authors caution that this is an association, since registry publishing overlaps with ecosystem, age and security-process maturity, and that publishing alone is not enough unless advisories name the published package. Maintainers are advised to publish to their ecosystem's registry and name the package in GHSA advisories to make them reachable by scanners.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Locally Uncensored 3.0.6 adds beta computer control for local AI models

Locally Uncensored 3.0.6, an open source desktop app for running AI models locally, now lets a model use the mouse and keyboard in applications the user approves. The feature is off by default and must be enabled in settings, and it works with local models so screenshots and clicks stay on the user's machine. The app asks permission at several points, including at the start of each chat, on first use of an app, for sensitive actions, and for unnamed buttons, and some areas such as terminals and password managers are blocked entirely. Users can pause or stop the agent with keyboard shortcuts, and screen tasks end after at most 25 steps or 8 minutes. The developers describe the feature as beta and note that a dedicated screen model performed weakly in their testing.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Reshapes Job Titles and Work Methods, Shifting Value Toward Engineering Judgment

An opinion piece argues that artificial intelligence is changing both job titles and the way work gets done across industries. It contends that AI tools are now widely accessible, so the key differentiator is how users apply them, including their methodology and ability to steer the tools toward useful results. In software development, the author says writing code is becoming a cheap, routine step, with value moving toward engineers who understand the broader discipline and can guide AI toward real-world solutions. The piece notes that AI also creates new roles, citing examples such as prompt engineering, RAG engineering, agentic AI engineering, Chief AI Officer, and AI business translator. It concludes that people who resist adaptation risk falling behind, and that thoughtful, moderate adoption of AI can strengthen skills and professional capabilities.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why coding agents turn CRLF files into whole-file diffs, and what Codex 0.162 changed

Coding agents that rewrite a Windows file with LF line endings can make git report every line as changed, even when only one word was edited. This happens because git stores the committed CRLF bytes, and the rewrite adds an invisible difference to each line. Developers have reported the problem with Claude Code, and Codex CLI's 0.162.0 release now preserves existing CRLF endings in its patch updates. The article includes a reproducible git demo showing that one changed word produces three deletions and three insertions. It explains how core.autocrlf and text attributes in .gitattributes decide where conversion occurs, and why files already committed with CRLF can escape normalization.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GraphGuard Uses a Graph Database to Link Security Alerts Into Attack Stories

Security teams often face alert fatigue because tools display each alert as an isolated record that hides its connections to other events. The author argues that security data is naturally a graph, so the context needed to spot attacks lies in relationships between users, devices, IP addresses, and incidents. GraphGuard uses FalkorDB, a graph-native database, as the backbone for an AI investigation agent that traverses these connections quickly. The system stores investigations and evidence as persistent nodes, allowing the agent to recall past cases across sessions. The model is built from eight node types and ten relationship types, seeded with three realistic attack scenarios.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Remote-support session logs must leave the appliance to survive a rebuild, experts say

Remote-support sessions are recorded mainly to document changes made during maintenance, but appliance-local logs sit on an encrypted partition and are not centralised unless forwarding is configured. CISA advises forwarding appliance syslog and session events to a SIEM immediately, along with web application firewall, reverse proxy and perimeter firewall logs covering the exposure window. The article stresses that usable records must leave the appliance, be time-synchronised with other systems, and be retained beyond the appliance's lifecycle. It also highlights that missing sessions can signal altered logging, not just inactivity. Mandiant warns that intervals between intrusion and discovery in the BeyondTrust case were measured in weeks, and additional organisations may have been compromised before disclosure.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

BMP Image Format: Origins, Features, and Why It Fell Out of Web Use

The BMP (Bitmap) format, introduced in 1980, stored images without compression, making them simple to read and process. It gained popularity in the 1990s, particularly during the Windows 95 and Windows 98 era, thanks to its native Windows support and flexible color depths. However, its uncompressed files were very large, and it lacks transparency and animation support. As a result, it was largely replaced by more efficient formats such as JPEG, PNG, and WebP. Today BMP is mainly used for archiving, scientific data storage, and technical testing rather than on the web.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Making JavaScript-rendered pages crawlable with build-time pre-rendering and auto-noindex for thin pages

A Korean information site generated as static HTML had sections drawn by JavaScript from a JSON file, leaving crawlers with almost no readable text. The author pre-renders that same JSON into the HTML at build time, so crawlers and users see equivalent content. Two further fixes followed: a lastmod date that changes only when page content actually changes, and a pass that marks thin generated pages noindex while keeping their links followable. The write-up includes the relevant build-script code and notes known weaknesses, such as the date-hashing approach ignoring fraction changes. Some interactive sections remain thin because their output depends on user input.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Debugging Lost Chat Notifications for Offline Users with Durable Cursors

Lost notifications for offline users in a financial chat should be investigated by first examining the durable record and cursor rather than the live connection. The recommended design commits each notification to an ordered room log before attempting best-effort delivery, so clients can replay events after their last acknowledged cursor on reconnect. Ephemeral publishing suits transient states like typing or presence, where loss is acceptable, while messages and payment notices need durable storage. A root-cause checklist starts with confirming the business event was committed, then the record append, the subscriber's cursor and token claims, and only finally the live socket. A worked example shows how a gap in sequence numbers lets the client stop and surface a fault instead of silently advancing.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenMedCheck: open-source AI tool flags prescriptions that conflict with patient notes

OpenMedCheck is an open-source prescribing check designed for emergency-department doctors, presented as a concept demonstrator and not a clinical or medical device. It reviews a proposed medication order against the patient's record, including free-text notes that standard coded-data alerts often miss. The system returns a decision card marked NO_ISSUE, WARNING, or BLOCKED, along with the reasoning, the relevant quoted text, and where possible a re-checked alternative. Its creator argues that most drug alerts fail because they lack patient context rather than because there are too many of them. The project uses only invented patients for its demonstrations, and the business model it proposes, which has not yet been tested with buyers, would charge hospitals for maintained rule tables, system integration, and support.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Reclaim: an on-device AI screen-time coach for Android with app-freeze windows

Reclaim is a new Android app that reads the usage log the phone already keeps and turns it into a weekly digest covering total time, pickups, late-night use, and long scrolling sessions. A small open model, Gemma 3 1B, runs locally on the phone to write a coaching plan, while the app itself handles all the calculations. Users can schedule app freezes that display a full-screen blocker, with a 5-minute emergency unlock that gets logged. The developer positions the app as privacy-first, since no usage data leaves the device, and says the open-weight model keeps per-user costs at zero. The project is open source under the MIT license and is available on GitHub.

0 comments Read more at DEV Community
← NewerPage 354 of 3101Older →