SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Customer-Support Knowledge Base Crawl Limits: Lower Index Cost, Traceable Retrieval

A DEV Community article argues that a fintech support knowledge base should use staged retrieval with explicit collections, bounded queries, and traceable sources. It recommends indexing only approved help content and attaching tenant, access, and version metadata to every document. The author suggests treating crawl boundaries as a product rule, defining owners, URL prefixes, and deletion behavior for each source. Queries should name their collection, apply metadata filters before ranking, and enforce a top-k ceiling, since large values raise indexing, reranking, and context costs. The piece includes a Go example that lists vector collections through an API, and notes that any top-k limit should be tested against representative support questions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

DevGhost VS Code extension estimates team effort from Git history

Pavel, founder of DevGhost, describes a VS Code extension that helps engineering leads read their team's Git history without relying on commit counts or lines of code. It estimates how many hours a mid-level developer familiar with the codebase, working without AI, would need for each change, producing a contribution figure in hours and a Ghost% efficiency metric. Results are plotted on a chart divided into four zones meant to start conversations rather than grade people. The tool includes a free offline sample team, drill-down to individual commits, and exports to PDF, Excel, and JSON, with all analysis running locally. It supports VS Code 1.95+ and Cursor on Windows and macOS, and requires Git and a local clone.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GummySearch shuts down and deletes user data; a developer rebuilds its daily loop on a local model

GummySearch, a service that sold Reddit audience research to makers, stopped accepting new users on 30 November 2025 and will delete all user data on 1 December 2026. The company reportedly could not obtain a commercial licence for Reddit's Data API. A developer has responded by building Overheard, an open-source project that runs on a laptop with an open-weight model and reviews Reddit and Hacker News each morning. It sends one email per product listing relevant posts, recurring pain points, and mentions of the product or its competitors, each backed by a quoted sentence. The project is positioned as a self-hostable alternative to the paid tools still operating in this space.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Six Essential Clauses Every Freelance Contract Should Include to Ensure Payment

A developer built a free browser-based tool that scans pasted contracts for missing clauses, and the checks revealed which six clauses matter most. The first is a precise deliverable definition, including format and acceptance criteria, to prevent endless revision disputes. Next, a fixed review window of about three to five business days, with silence treated as acceptance, lets projects close cleanly. The article also recommends Net 15 or Net 30 payment terms with a late fee, commonly 1.5% monthly, and the right to pause work. Clear language on whether rights transfer or are licensed, along with confidentiality and kill-fee provisions, rounds out the list.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Flip Check: open-source tool gives house flippers a go/no-go verdict from the 70% rule

Flip Check is a free, open-source tool for wholesalers and house flippers that reads the deal terms from a message and returns a go, conditional, or no-go verdict. It calculates the 70% rule maximum allowable offer, profit after closing and holding costs, cash-on-cash return, and DSCR, then flags issues a hard-money lender commonly checks. The arithmetic is done in plain Python, and an optional open-weight model writes a short memo from those figures without redoing the math. The developer has not charged users or deployed a hosted version, and the tool is available under the MIT license with a local setup.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PowerPoint Morph Transition: Animate Shapes Between Two Slides

A plain slide change can hide what differs between two slides, since the audience only sees a new picture. The Morph transition in PowerPoint solves this by animating matching shapes from one layout into another. To use it, you duplicate a slide, alter position, size, or color of shapes on the copy, then apply Transitions > Morph to the second slide. The article notes the technique suits before-and-after comparisons and highlighting changes, and that it needs a recent PowerPoint version such as Microsoft 365, PowerPoint 2019 or later, or PowerPoint for the web. The steps were tested in PowerPoint for the web, while slide show playback was not verified.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

WSUS Clients Not Reporting: How to Triage Before Resetting or Rebuilding

An IT helpdesk ticket reports that 140 of 600 workstations show as "Not yet reported" in WSUS, and that recently imaged laptops are missing from the console entirely. The guidance warns against immediately pushing reset scripts or running the Server Cleanup Wizard, since these can delete the records needed for diagnosis and only address one possible cause. Microsoft notes that the "Computer hasn't reported status" message is typically caused by the client rather than the server, often due to lost connectivity or powered-off machines. The recommended approach is a step-by-step review of console filters, client policy URLs, the scan source, Windows Update logs, network and proxy paths, IIS on the WSUS server, and duplicate client IDs. Duplicate SusClientIds from imaged systems are a known cause of clients appearing and disappearing in the console.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Publishes npm Packages Without Stored Tokens Using OIDC and Sigstore

A developer shipped version 0.3.0 of SolAudit, a Solana static analyzer, with no npm token stored in CI secrets or on their machine. The method relies on npm's trusted publishing, which uses OpenID Connect so the GitHub Actions runner proves its identity and receives a short-lived, publish-scoped credential. Sigstore provenance attestations then let anyone verify that a package's tarball was built from a specific commit and workflow run. The author says the setup took about 30 minutes and describes this as a response to supply-chain risks posed by long-lived publish tokens. The walkthrough also covers configuring the trusted publisher on npmjs.com and two common pitfalls, including exact workflow filename matching.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Vector Search Latency Spikes When Integrating RAGFlow's Memory Layer, and How to Fix It

A developer integrating the open-source RAGFlow engine into an agent memory pipeline found that query latency rose from about 80ms to over 4 seconds at roughly 50 concurrent insertions per second, while recall dropped by 30%. The author attributed the problems to HNSW index locking in pgvector and improper embedding normalization. Their fixes included a dual-index schema, with IVFFlat for writes and HNSW for reads, plus asynchronous HNSW rebuilds. They also normalized embeddings to unit length at write time, which raised recall@10 from 0.68 to 0.91 on their test set. The post further describes a hybrid search approach that combines vector search with PostgreSQL full-text search using reciprocal rank fusion.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer builds a programming language designed to resist LLM use

A developer has created a new programming language intended to be difficult or impossible for large language models to use effectively. The project was described in a blog post on picheta.me and shared on Hacker News, where it gained 74 points and 66 comments. The post details the language's design, which aims to frustrate AI code generation. The discussion on Hacker News reflects interest in whether languages can be built to resist AI-assisted programming.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

OpenCode Warns 1.4% of Console Users to Rotate OpenAI and Anthropic Keys After Breach

OpenCode disclosed a security breach on October 17 affecting a legacy system it had been decommissioning. The company says third-party provider keys saved in Console workspaces, such as those for OpenAI and Anthropic, may have been exposed. Roughly 1.4% of Console users were affected, and OpenCode says it has emailed them and is working with Anthropic, OpenAI and Google on remediation. Affected users are advised to revoke and replace their keys, update applications, and check recent usage for unexpected activity. Key details, including how the attacker gained access and the number of compromised accounts, have not been disclosed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why AI Setup Architecture Matters More Than Model Choice, a FinOps Review

A developer with five years of AI work says the bottleneck in AI development is no longer model intelligence but how tools are structured. Using a single frontier model for every task led to context window abuse, rapid token depletion, and hours lost to manual setup. The author compares frontier models to race cars that should be reserved for specialized R&D rather than everyday work. For learning and project building, the piece recommends a compartmentalized stack prioritizing stability and deep context. It cites Google's $30 developer tier, including the cloud IDE Project IDX and large-context Gemini models, as an example of this separation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Replay test finds 17 stable mismatches between API examples and live responses

A team checked whether the sample request-and-answer examples its paid endpoints publish actually match what the handlers return. They replayed 1,602 services over loopback and compared each real response against its advertised example. Of these, 1,444 matched, while 141 varied naturally and 8 were exempt timestamp fields. The 17 stable mismatches were mostly time-derived or upstream data that changes often, plus one genuine defect in a DNS endpoint that returned A records in inconsistent order. The fix was a small deterministic sorting step, verified by repeated calls producing identical bytes.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Mail forwarding rules can keep intruders collecting email after a password reset

Standard incident response of changing a password and revoking sessions does not remove mail forwarding rules that an intruder added to a compromised mailbox. Such rules are configuration settings rather than credentials, so they keep copying incoming messages to an attacker-controlled address after the password is replaced. The technique is catalogued by MITRE ATT&CK under email collection and appears frequently in intrusion reports. The article recommends that responders enumerate and remove forwarding rules, external delegates, and other automatic processing on affected mailboxes as a routine step. It also suggests monitoring for suspicious rules, such as external destinations or rules that delete or hide messages, and logging configuration changes alongside sign-in events.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why a lockfile grep alone can't settle an npm compromise alert

A package appearing in a lockfile only shows that the dependency tree can resolve a bad version, not that any machine downloaded or executed it. The author proposes a four-question triage: whether the package is in any lockfile, whether the resolved version is in the affected range, whether any CI job or developer machine installed it during the exposure window, and whether it could have run via install scripts or runtime use. Unknown answers should be treated as yes, since a missed rotation is far costlier than an unnecessary one. Credentials should then be rotated in order of blast radius, starting with publish and source-control tokens, and CI logs should be archived immediately because retention is short.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Querying a Partitioned Azure Blob Data Lake from PostgreSQL with pg_duckdb

The article explains how the pg_duckdb extension lets PostgreSQL query a partitioned Parquet data lake stored in Azure Blob Storage as a single table. Its read_parquet() function accepts glob patterns and explicit file lists, so a query reads only the files it needs. Hive-style folder names such as year=2024 are exposed as real columns when hive_partitioning is enabled, and files can be pruned by partition. Examples use PostgreSQL 18.6 with pg_duckdb 1.1.0, showing that partition values are inferred as bigint and that union_by_name can align columns across files with differing schemas. The author notes that ARRAY[...] syntax is required for lists in PostgreSQL, since DuckDB's bracket syntax is rejected by the PostgreSQL parser.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Node.js Channel Typing Indicators: Use a 2-Second Lease Only When It Helps

An engineering guide argues that typing indicators in shared channels should be used only when they prevent a real coordination mistake, and skipped otherwise. It notes that in large rooms, keystroke events multiply across every open client while missing an indicator changes no durable state. The recommended design treats each signal as lossy presence with a 2-second expiry, refreshed once mid-lease rather than on every keypress. Payloads carry identity, scope, sequence, and expiry but not draft text, and the server caps lease lengths and excludes the sender from fan-out. The author warns against routing typing events through the reliable message queue, since delayed retries would display stale state, and suggests separate delivery policies for chat messages and ephemeral signals.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Frontend Monitoring Matters: Core Web Vitals, Error Tracking and Privacy

Frontend monitoring tracks how an application performs in real users' browsers, catching problems that backend metrics miss, such as frozen screens and silent failures on mid-range devices. It covers three disciplines: performance measured through Google's Core Web Vitals, error tracking of client-side exceptions, and session replay for debugging user behavior. The article argues this visibility protects revenue and search rankings, since Google assesses real-user data at the 75th percentile. It also cites a Supabase case where a flood of noisy error events hid a real outage, showing the value of filtering alerts. Finally, it warns that session replay must be privacy-configured before deployment to avoid liability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Office Phone Troubleshooting: Check Cables, Network and Config Before Blaming the PBX

Office phone problems are often blamed on the PBX, but the cause is frequently simpler, such as a faulty cable, a network change, incorrect VLAN settings, or a stopped SIP trunk. The author recommends first identifying whether one extension or the whole office is affected, which quickly narrows the search. Basic physical checks come next, including cabling, switch port status, power and PoE, and whether the phone has a valid IP address and gateway. For SIP registration failures, common culprits include wrong credentials, incorrect PBX addresses, VLAN misconfiguration, DNS or routing issues, and firewalls blocking traffic. When calls connect but audio is one-way, the article points to RTP media path problems such as firewall rules, NAT settings, and routing.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Paid Obsidian starter vaults range from $1 to $99 for markdown folders

A researcher surveyed seven paid Obsidian starter and second-brain vault listings on Gumroad, with prices ranging from $2.99 to $99. Each price was checked against two independent on-page signals on October 17, 2026, and listings that could not be cleanly verified were excluded. The author found no paid product specifically aimed at Notion-to-Obsidian migration, with the existing migration tools being free. Cheaper vaults generally offer basic folder structures and templates, mid-priced ones add deeper templates and dashboards, and the top tier typically includes video walkthroughs. The author also disclosed that they sell a $1 vault of their own, which is part of the comparison.

0 comments Read more at DEV Community
← NewerPage 372 of 3102Older →