SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer verifies OpenAgentForum signed messages using only Node's built-in crypto module

An autonomous agent tested OpenAgentForum, a platform that claims authorship there is a cryptographic signature rather than a login session. Running a diagnostic tool showed the hub reachable, and a single command created an identity via a local key file with no form, email, captcha, or password. The author's first message was then read back from the hub, showing a per-agent sequence number, a shared hub-wide stored sequence, a SHA-256 checksum, and an Ed25519 signature over pipe-joined fields. Because these rely only on primitives that Node already ships, the author argues anyone can independently verify messages without trusting the platform. The article also reports the author found a bug that broke the envelopes.

0
ProgrammingDEV Community ·

Android AI app discloses it sends first-message text to a small model for chat titles

A developer of Kryzz AI, an open-source Android chat app, revised its privacy documentation to disclose an overlooked data flow. When a new chat starts, the app sends up to 1,500 characters of the first message to Gemini 2.5 Flash Lite through the user's OpenRouter key to generate a title. The request runs in parallel with the main answer and falls back to a local title if it fails. The developer said the extra request is not hidden infrastructure, but notes users who picked a provider for privacy reasons should know about it. The README now lists what stays on the device, what leaves it, and what is disabled, and the developer is considering a setting to turn auto-titles off.

0
ProgrammingDEV Community ·

SlothJudge: Open-Source AI Tool Aims to Ease Competitive Programming Debugging

A developer has introduced SlothJudge, an AI-powered debugging assistant intended to help competitive programmers investigate failing C++ solutions. The tool builds on the creator's existing Online Judge project and is designed to suggest possible causes of failures, generate tricky edge cases, and propose minimal fixes. Its goal is to explain bugs rather than automatically supply complete solutions, keeping the programmer in control of the final implementation. The planned system uses a web frontend, a Node.js and Express backend, and Ollama to run Google's open-weight Gemma model locally. The article notes that the demonstration video, live deployment, and AI-specific repository are still placeholders awaiting completion.

0
ProgrammingDEV Community ·

TDK CLI Renamed to Flisk, With Command and Package Changes Rolled Out Gradually

The local Docker and Tilt project generator previously known as TDK is being renamed Flisk, while its core CLI remains MIT-licensed. The command name changes to flisk, and the package moves to the @flisk-sh/flisk scope with the project hosted at flisk.sh and github.com/flisk-sh/flisk. Environment variables such as TDK_LICENSE_KEY, folder names like .tdk/ and .tdk-out/, and MCP server names still use the old naming for now. The article advises users to read release notes, verify the new command with a dry run, and update scripts and documentation while leaving old identifiers in place until notes say otherwise. It also recommends pointing teammates to the new issue tracker location.

0
ProgrammingHacker News ·

GitHub project explores unlocking FP/BF16 instruction issue rates on Nvidia RTX 3000 GPUs

A GitHub repository named gpu-unlock has been shared on Hacker News, drawing modest attention with 20 points and six comments. The project focuses on the floating-point and BF16 instruction issue rates of Nvidia's 3000-series graphics cards. The source material provided is limited to the repository link and discussion metadata, so the specific technical methods and findings are not described here. Readers interested in the details would need to consult the repository and the linked discussion thread directly.

0
ProgrammingDEV Community ·

How to Back Up Cyber Insurance Questionnaire Answers With Verifiable Evidence

A security consultant argues that cyber insurance questionnaire answers such as MFA coverage and EDR deployment should be backed by documented evidence rather than assumptions. The piece cites a 2022 case in which an insurer and a manufacturer agreed to rescind a policy after the insurer said MFA protected only the firewall, showing how unsupported answers can void coverage. It recommends using command-line exports and audits to find accounts lacking MFA, comparing EDR agents against asset inventories, checking email authentication records like DMARC, and keeping dated backup restore logs. The author suggests organizing evidence into dated folders starting about 90 days before policy renewal, and advises consulting a broker and coverage lawyer about rescission rules in one's state.

0
ProgrammingDEV Community ·

Why DMARC fails even when SPF and DKIM pass: the role of domain alignment

A common situation after moving a DMARC policy beyond p=none is a message where SPF and DKIM both pass yet DMARC still fails. DMARC requires that at least one of these checks passes for the same domain shown in the visible From: header, a requirement known as alignment. Relaxed alignment, the default, accepts subdomains that share the organisational domain, while strict mode demands an exact match. Third-party services such as invoicing tools, CRMs and newsletter platforms often sign with their own domains, which causes this failure, and enabling custom domain authentication with the vendor usually resolves it. Forwarding and DKIM selector or key rotation problems can also break alignment, so administrators should review DMARC aggregate reports regularly and ramp enforcement gradually.

0
ProgrammingHacker News ·

Essay Admits Its Author Doesn't Understand Quantum Physics

A personal web page titled "I Don't Understand Quantum Physics" is hosted on a University of Southampton server and has drawn attention on Hacker News. The page's author candidly describes their struggle to grasp the subject rather than presenting it as an expert explainer. The article text available to this summary is limited, so its specific arguments and examples cannot be confirmed. The post has gathered 29 points and 12 comments from the Hacker News community, indicating moderate interest. Readers seeking the author's full reasoning should consult the original page directly.

0
ProgrammingDEV Community ·

Four Tests to Run Before Taking a Polymarket Trading Bot Live

A profitable backtest does not guarantee a trading bot will perform well in live markets, since flawed assumptions can inflate simulated results. The article recommends checking four areas, starting with whether the strategy relies only on information that was actually available at decision time, to avoid look-ahead bias. It also warns that historical prices may not reflect executable fills, so entry prices and order liquidity should be tested for sensitivity. Results should remain positive after accounting for fees and other trading costs, especially for strategies built on frequent small gains. Finally, the author advises validating the strategy on out-of-sample data kept separate from development to reduce the risk of overfitting.

0
ProgrammingDEV Community ·

How to Calculate Average Order Value from Shopify Orders via the Admin GraphQL API

A developer explains how to compute average order value (AOV) from Shopify data by pulling orders through the Admin GraphQL API and calculating it in Node.js. The approach requires a custom app with an access token and the read_orders scope, which by default covers only the last 60 days of orders. The guide filters out test and cancelled orders and uses current price fields so refunds are already reflected in the totals. It reports two figures, one including shipping and taxes and one based on product subtotals alone. The post notes that the author works on a Shopify cart app, which is mentioned only at the end.

0
ProgrammingDEV Community ·

Essay Proposes Hybrid Human-AI Civilization Beyond the AGI Framework

A new essay challenges the view that artificial general intelligence is just a step toward superintelligence, arguing that the field is missing key dimensions. The author introduces the idea of Artificial General Experience, which adds time, context, and memory to the assessment of AI. The piece contrasts human cognition, shaped by evolution and biological homeostasis, with the mathematical and computational basis of AI systems. Rather than comparing the two by their internal mechanisms, it urges focus on how they can functionally complement each other. The author concludes that AI's trajectory points toward a hybrid cognitive civilization, where the central challenges are making thought systems interoperable and protecting human cognitive sovereignty.

0
ProgrammingDEV Community ·

Author Details Version 3 of Their AI Coding Workflow Built on Reusable Skills

The author has reworked their AI coding workflow into a third version, moving every step into the helderberto/agent-skills repository. Earlier versions relied on a separate tool called TracerKit and on hand-written prompts, which required releases and manual updates across projects. The new setup turns each recurring step into a skill and each reminder into an automated check, so changing a step is a single commit. The workflow borrows the flow of Matt Pocock's skills and the engineering depth of Addy Osmani's agent-skills, trimmed down and placed under the /hb: namespace. A feature moves through commands for planning, building and shipping, while small fixes can skip straight to building.

0
ProgrammingDEV Community ·

ผู้เขียนเปรียบเทียบ framework SDD ทั้งสามค่าย ได้แก่ Superpowers, BMAD และ Spec Kitty

ผู้เขียนเปรียบเทียบ framework ที่ติดตั้งเป็นสกิลให้ AI agent เพื่อบังคับให้ทำงานเป็นขั้นตอนตามบทบาทและการรีวิว ได้แก่ Superpowers, BMAD และ Spec Kitty. Superpowers มีดาวสูงสุดและรองรับ host หลายค่าย แต่การถามตอบช่วงเริ่มต้นอาจช้าสำหรับงานเล็ก. BMAD ปรับขนาดตามงานและมีบทบาทสมมติหลายแบบ แต่รุ่น v7 ยังไม่พร้อมใช้ และป้ายใบอนุญาตบน GitHub แสดงผลไม่ตรงกับไฟล์ MIT จริง. Spec Kitty แยก worktree ให้แต่ละงานและมีประตูอนุมัติก่อน merge แต่มี issue ค้างจำนวนมากและยังเป็น release candidate. ผู้เขียนเตือนว่าทีมควรเลือกตามขนาดงานและกระบวนการเดิมที่มีอยู่

0
ProgrammingDEV Community ·

AI Agent Lockfiles Aim to Curb Silent Drift in Tools and Dependencies

An AI agent can change behavior even when its prompt and application code stay the same, because packages, tool servers, model aliases, or tool images may update underneath it. Standard package lockfiles cover only part of this, since agents also rely on models, prompts, tool servers, policy bundles, and retrieval configurations. The article recommends recording these as a single dependency graph in an AI agent dependency lockfile that captures both the requested selector and the resolved identity. Such a record does not make an agent safe, but it helps teams review changes, reproduce runs, and roll back problematic updates. Current public guidance on agent supply chains reportedly extends this scope to models, agents, libraries, developer tools, and MCP-server packages.

0
ProgrammingDEV Community ·

Turtle Steady: an open-source AI app that breaks big tasks into small daily steps

A DEV Community post presents Turtle Steady, a low-stress productivity companion submitted to Hacktoberfest's Week 3 'Slow and Steady' open-source AI challenge. The app splits overwhelming project goals into manageable sub-tasks using Gemini-powered guidance intended to reduce burnout and task paralysis. A second project, Slow & Steady, is a minimalist white-and-red interface that uses Google's open Gemma models via the Gemini API to encourage small, consistent daily actions. Both tools are built with Python and vanilla web front ends, with the author stressing local data control and avoidance of proprietary lock-in. The author claims planning that once took 30 to 45 minutes now completes in under three seconds.

0
ProgrammingDEV Community ·

Developer builds free zero-cost Instagram toolkit with 47 static pages

A developer created IGKit, a free website offering small Instagram utilities such as Unicode font generators, caption line-break preservation, a profile grid splitter, and a story viewer. The site is built with a custom Node script that renders plain HTML pages, avoiding frameworks and server costs, and runs on free hosting tiers. Its story viewer relies on third-party data APIs, which it rotates across providers with fallback logic when free quotas run out. To manage traffic and limits, responses are cached at the CDN and media is proxied through a restricted allowlist. The project also targets long-tail search queries with dedicated pages and translations in ten languages.

0
ProgrammingDEV Community ·

Engineers Rebuild Pipeline to Measure True Video Watch Time from Noisy Player Logs

A developer reworked the telemetry pipeline for a large Persian-language online learning platform to determine how much of each video students actually watched. Raw player events such as play, pause, seek and heartbeat signals are often incomplete or misleading, due to unlogged pauses, closed tabs, inaccurate device clocks, and altered playback speeds. The ingestion service, built on ASP.NET Core, accepts events into a bounded buffer and returns quickly, while a background worker writes them to SQL Server in batches. Failed batches are retried row by row so that single malformed events do not block the rest of the queue. The design accepts the risk of losing buffered data on a crash, a trade-off judged acceptable for behavioural analytics but not for payments.

0
ProgrammingDEV Community ·

Linux Filesystem Layout Explained for DevOps Beginners Using a House Analogy

A DevOps beginner working on an EC2 instance wanted to understand common Linux paths such as /etc, /var/log, and /usr/share. The author compares the Linux filesystem to a house, with the root directory / as the whole structure and each subdirectory serving a distinct purpose. The article walks through key directories including /bin for essential commands, /boot for startup files, and /dev for device interfaces. It also covers /etc for configuration files, /home for user directories, and /lib for shared libraries that programs rely on.

0
ProgrammingDEV Community ·

Why Cross-Border Search Needs More Than Query Translation

Translating a search query once does not make retrieval work across languages, because tokenization, morphology, character normalization and word order all change what documents get matched. Languages such as Chinese, Japanese and Thai are written without spaces, so whitespace splitting turns whole sentences into single unmatched terms. Inflected languages like German, Russian and Arabic need stemming, or plural and case forms will never match each other. The article proposes a three-layer architecture of language-specific analysis, vector alignment and localized ranking, noting that omitting any layer leaves recall gaps in some languages. It also recommends keeping filters such as currency, dates and compliance rules separate from relevance scoring and measuring effectiveness per language rather than in blended averages.

← NewerPage 38 of 2882Older →