SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Stored procedures em PL/SQL: como implementar regras de negócio no banco de dados

O artigo explica o que são stored procedures, blocos de código armazenados no banco que podem ser chamados por nome e receber parâmetros. Usando como exemplo uma procedure de transferência bancária em PL/SQL da Oracle, o texto mostra a estrutura básica de criação. Entre as vantagens citadas estão menos tráfego de rede, reutilização de código, consistência das regras críticas e maior segurança no acesso às tabelas. O autor também aponta desvantagens, como maior dependência do SGBD, dificuldade de testes e lógica dividida entre banco e aplicação. Ao final, promete mostrar como chamar a procedure a partir de uma aplicação Spring Boot.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Butlerian Jihad: Hacker News Discussion Links to Dune Wiki Entry

A Hacker News post shared a link to the Dune Fandom wiki page on the Butlerian Jihad, a fictional holy war from Frank Herbert's Dune universe. The post received 18 points and 7 comments from readers. The wiki entry describes the conflict in which humanity rebelled against thinking machines and banned them, shaping the setting's future. The source material offers only a link and engagement metrics, with no further details about the discussion's content.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

How to Write an ATS-Friendly Resume in 2026: Layout, Bullets and Tailoring

A guide from DEV Community explains how to build a resume that passes applicant tracking software before a recruiter reads it. It recommends a plain single-column layout with standard headings, a short summary aimed at one specific role, and experience bullets that open with an action verb and state a real result. The author cautions against invented figures and against duty-only descriptions, and advises tailoring skills and wording to each job posting. The piece also suggests checking the exported file as plain text to catch parsing problems before submitting.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Living Specs in SpecKit: Keeping One Current Spec Per Feature

The author, nine months into building a VS Code extension with spec-driven development, found that per-change specs grew into an unread archive. Their SpecKit Companion tool introduces a living spec: a single document per feature, such as billing or auth, describing what it must do today. Each run that touches a feature reads that document before drafting and updates it once the work is complete. This avoids agents re-deriving the same understanding from code every time and makes it easy to see a feature's current behavior. The piece argues that frozen, numbered spec folders become a hard-to-navigate history rather than usable documentation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Forminator WordPress Plugin Flaw CVE-2026-15748 Allows Unauthenticated Code Execution

A critical vulnerability, tracked as CVE-2026-15748, affects the Forminator Forms WordPress plugin in version 1.56.1 and earlier, and was fixed in 1.56.2. Reported through Wordfence's bug bounty program, it carries a CVSS score of 9.8 and requires no authentication to exploit. The plugin, installed on more than 600,000 WordPress sites, fails to properly restrict file uploads: it trusts upload settings supplied in the request rather than those saved by the admin, and its extension blocklist compares MIME types without normalization. Combined, these weaknesses let an attacker bypass the filter with a crafted value and upload a PHP file, enabling remote code execution. The exploit requires a targeted form containing both a file upload field and a select field.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why a script passed locally but failed remotely: eight environment facts to diff

A developer's script ran cleanly on a laptop but failed on a remote host with only a generic exit code. The cause was not the code but differences between the two machines in timezone, file-descriptor limits, and default encoding. Instead of adding more logs, the developer now compares structured snapshots of host facts side by side. The author lists eight environment properties that have changed job behaviour, including interpreter version, encodings, timezone, locale, CPU count, and filesystem details. A small script captures these facts as JSON and prints only the fields that differ between hosts.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to export Aqar.fm property listings to Google Sheets without coding

Aqar.fm, Saudi Arabia's largest property platform, offers no built-in export option, which makes comparing rents across districts tedious. The article describes using a no-code scraper on Apify to pull listings for cities such as Riyadh and Jeddah, with filters for category, district, price, area and bedrooms. Results can be exported as CSV or Excel and imported into Google Sheets, with an optional schedule for automatic refreshes. The write-up highlights a price-per-square-metre comparison column against district medians, using a Riyadh example listed 40.6% below its district median. The scraper is billed per listing with no subscription, and a separate monitoring tool is mentioned for alerts on new listings and price drops.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Four AI workflows that draft and suggest but leave the final decision to humans

An article for DEV Community describes four ways to use AI agents while keeping a person in control of every outcome. The examples cover drafting customer support email replies in Gmail, turning meeting transcripts into action items, generating daily Slack channel summaries, and suggesting bookkeeping categories in QuickBooks. In each case the AI produces a draft, summary, or suggestion, and a human reviews and approves before anything is sent, booked, or filed. The piece is promoted through Roar Workflows, a free guide that lists problems, tools, steps, and cost estimates for these workflows.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Green Test Suites Can Miss Agent Patches: Gating on Diff Coverage

A passing test suite after an AI agent's patch only shows that nothing crashed, not that the changed lines actually ran. File-level coverage percentages are averages and can hide a newly added, entirely unexecuted branch. The article proposes a diff-coverage gate that intersects each patch hunk's changed lines with the lines the suite executed, verdicting each hunk rather than relying on percentages. It provides a Python script that extracts changed line ranges from git diff against the merge base, along with coverage commands that enable branch tracking and scope measurement to source files. The approach also addresses the case where a quarantined flaky test can make the signal misleading.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Sealing Clocks, Seeds and UUIDs Before Refactoring a Messy Python Repo

Golden-file tests often fail not because of code changes but because of nondeterministic inputs such as clocks, random seeds, UUIDs and hash ordering. The article recommends first auditing the codebase with a grep to count these entropy sources, then freezing them in a pytest fixture. It stresses reseeding per test and setting PYTHONHASHSEED in the runner rather than the fixture. To verify stability, the author suggests running the characterization suite twenty times and confirming that only one unique digest of the snapshots appears before recording any baseline.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Панель показывала два разных остатка бюджета: причина в смешении источников учёта

Статус-панель плагина для Claude Code показывала остаток $189.20, а консоль провайдера в соседней вкладке — $291.77, хотя оба значения были неверны. Панель сравнивала расход с заглушкой budgetUsd по умолчанию 200, которую никто не измерял, поэтому её значение выглядело как достоверные данные. Расход брался из OpenAI-совместимого billing-эндпоинта, а остаток и использование — из консоли провайдера new-api, и цифры между ними расходились. Единицы квоты в консоли переводились в доллары через коэффициент 500 000 единиц на доллар, который удалось вычислить по круглой сумме $325.00 на странице консоли. Чтобы две системы учёта не смешивались молча, автор предлагает помечать каждую цифру источником и не объединять их в одно число.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Budget pane showed $189 left while provider console showed $291; both were wrong

A developer's status pane for an AI coding agent displayed $189.20 remaining from a $200 budget, while the provider's console showed $291.77 left on the same account. The pane's $200 figure was an unmeasured placeholder default, and its spend number came from a billing endpoint that disagrees with the console's own usage data. The console reports balances in quota units that require a conversion ratio, which the developer confirmed by noticing the totals summed to a round $325. The fix is to treat each data source as its own authority, tagging every figure with its origin so the two accountings are never blended.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Multi-device push rollout incomplete as old logout behavior still removes all device tokens

A server can now store several push tokens per user, but an older app version's logout still deletes every device's registration. Testing paired old and new API routers with old and new logout methods against a local database using synthetic test strings. Results showed that only the new server plus device-specific deletion preserves the other device's token, while the old server or an all-device deletion call removes both. The server change does not restore previously deleted rows, so registration must run again on each device. The investigation did not measure how many real user devices have updated or re-registered, so completion of the rollout remains unconfirmed.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Tool converts any web page into typed JSON for AI agents, with source quotes for each value

A new tool called Webpage to JSON for AI Agents turns a URL and a plain-English field description into typed JSON, avoiding the need for custom per-site scrapers that break when sites change. Each extracted value is accompanied by a quote from the page so users can verify it. Options include a JSON schema for exact output shapes, a list mode for pulling many records from one page such as product grids, and a strict evidence setting that flags unsupported values. The tool can be called from code via a Python client or used as an MCP tool by AI agents. It costs $0.03 per page that yields data, with no charge for pages where nothing is found.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Flexport Seeks Business Operations Leader for CEO's Office

Flexport, a freight forwarding and logistics company, is recruiting a business operations leader to work within the office of its chief executive. The job listing is posted on the company's careers page. The source material provided contains only the headline and a link, with no further details on responsibilities, compensation, or location. The posting appeared as a discussion item on Hacker News with no comments or points at the time of collection.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Azure AI Foundry Adds Model Marketplace and Governance Tools for Developers

Microsoft's Azure AI Foundry has introduced a dedicated marketplace where developers can find and integrate third-party AI models, aiming to cut development time. The platform also added an AI Governance Dashboard to help teams monitor compliance and security as AI regulations evolve. Separately, GitHub Copilot Studio now offers AI-driven code refactoring suggestions intended to improve performance and readability. Azure has further upgraded Container Apps and AKS with enhanced autoscaling and security features, and Azure AI Foundry now supports custom model training with distributed training and automated hyperparameter tuning. The roundup, compiled from community sources, provides step-by-step guidance for trying each tool.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Public-Sector Logins Secured via Low-Cost SMS OTP API in Node.js 2FA Setup

A developer guide describes using a dedicated SMS one-time-password API for two-factor login in a Node.js public-sector appointment application, keeping the provider from storing or matching codes. The application still handles expiry, resend timers, attempt lockouts, consent, and monitoring. The article argues that SMS costs scale with message sends, so reducing unnecessary resends and abuse matters more than the per-message rate. It recommends keeping a separate append-only audit record of each access decision, without storing codes, message bodies, or bearer tokens. A Go example shows how to check the provider's live API schema while handling rate limits with backoff.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Three single-file HTML tools replace IT spreadsheets for racks, IPs and inventory

A developer built three IT documentation tools to replace the spreadsheets small teams typically use for server racks, IP addresses and equipment inventory. Each tool is a single index.html file that runs in any browser without a server, database or account. The rack tool maps devices and ports with cable details, the IP tool tracks address states, VLANs and subnets, and the inventory tool flags expiring warranties and support contracts. Data is stored in a user-controlled JSON file that can sit on a network share, and the tools are open source under AGPL-3.0 with English and Spanish support.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Staged Retrieval Design for Privacy-Focused Logistics Knowledge Search at Scale

A logistics knowledge manager can keep near-duplicate detection explainable and index costs under control by adopting a staged retrieval design with explicit collections, bounded queries, and traceable source context. The approach begins by defining the retrieval unit, mandatory metadata filters, and freshness requirements before choosing any endpoint. The article compares FAISS, pgvector, Qdrant, Pinecone, and managed REST vector APIs, noting that each trades off operational responsibility, database coupling, and data residency concerns. Evaluation relies on small, hand-inspectable test sets with failure cases, such as a delayed-delivery note that gets re-entered with a changed tracking number. Because cross-owner matches are treated as more serious than slightly lower top-k scores, the guidance favors a two-pass query that applies owner and document-type filters before scoring candidates.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Rollback-Safe Metrics: Choosing Pull Over Push for a Small SaaS Notification Dashboard

A small SaaS team tracking logistics notification failures should, in most cases, start with a pull-based collector feeding a thin custom dashboard, since a faulty metric release can be rolled back alongside the application. A push API is only preferable when jobs are too short-lived or unreachable to be scraped reliably. The author stresses keeping event definitions precise, such as separating retry attempts from final failures so failure-rate charts are not misleading. High-cardinality identifiers like customer IDs and phone numbers should stay out of metric labels and go to logs or traces instead. A schema version label is useful during rollouts to expose mixed populations but should be removed afterward to avoid series multiplication.

0 comments Read more at DEV Community
← NewerPage 388 of 3104Older →