SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

How VerifDoc accepts USDT on Tron without a payment processor

VerifDoc added crypto top-ups after many South Asian customers asked for USDT on the Tron (TRC-20) network, which is cheap to transact on. The company uses a pool of Tron wallets, scanning TronGrid for incoming transfers and confirming each one on a solidity node before crediting an account. To avoid fake tokens, it matches the official USDT contract address rather than the token symbol, and checks the receipt and Transfer event. Wallet addresses are checksum-verified, and each transfer is recorded only once in the database, preventing double credits. The team tested the full flow against a real mainnet transfer and reported that the first customer deposit arrived the day after launch.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Crypter Anti-Analysis Techniques and Exposed Hypervisor Interfaces Raise Inventory Concerns

An Australian Cyber Security Centre advisory dated 7 September 2026 describes how crypter services detect virtual machines and debuggers and alter behaviour or terminate when they do. The advisory lists advertised capabilities including multi-architecture support, process hollowing, DLL side-loading, UAC bypass, and counter-antivirus verification before delivery. Search data from ZoomEye, run on 26 September 2026, showed hundreds of thousands of VMware ESXi assets and millions of devices on common management ports exposed to the internet. Because hypervisor management interfaces often hold credentials for the workloads they host, the article recommends reconciling exposed interfaces against internal inventories and restricting them to administrative networks. It also suggests weekly scoped queries with newly observed management ports treated as priority review items.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Telegram Bots Must Use Stars for Digital Goods, Developer Guide Explains

A developer guide explains that Telegram requires bots selling digital goods or services to accept payment in Telegram Stars (currency code XTR) rather than card providers, which are reserved for physical items. It describes the payment flow, from sending an invoice to answering a pre-checkout query within 10 seconds and then delivering the product only after a successful payment. The walkthrough includes a sample bot script using long polling and warns against common mistakes such as delivering before payment is confirmed or failing to deduplicate transactions. It also covers refunds via the refundStarPayment method, support requirements, and monthly subscriptions set with a 30-day period.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Bleached corals recover within days after contact with healthy neighbours

Researchers have found that corals which have lost their color from bleaching can recover rapidly when they make physical contact with healthy coral. The recovery reportedly occurs within a matter of days. The source material provided is limited to a headline and a link, so the specific species, study details, and mechanism behind the effect could not be confirmed. Further details are available in the linked article.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Tracking UK public tenders after Brexit: Find a Tender vs Contracts Finder

Since early 2021, UK tender notices no longer appear on the EU's TED database and are instead published on two government services. Find a Tender generally carries higher-value contracts, while Contracts Finder covers lower-value opportunities, mostly in England, plus award notices and early market engagement. Both publish data as OCDS JSON under the Open Government Licence v3.0, which permits commercial reuse with attribution and requires no API key. The author notes rate-limit responses (HTTP 429 and 403) that require waiting, and found that Contracts Finder's search feed sometimes shows deadlines a few hours off, so per-notice endpoints should be used for deadlines. Because weekly volumes are small, the author suggests pulling all new notices and filtering locally, and mentions a paid Apify actor that automates this for $0.004 per tender.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

WordPress CVE-2026-87902 Exploited Within a Day of Patch, Honeypots Log Webshell Attempts

A WordPress core vulnerability, CVE-2026-87902, was patched in version 7.1.2 and began seeing active attack traffic within roughly a day of disclosure. The flaw uses double-encoded directory traversal in the pagename parameter to include readable local PHP files without authentication, and can lead to remote code execution under certain theme and PHP configurations. Honeypot sensors in the Previdian network recorded 64 attempts from a single New Jersey host, which appeared to be an effort to install a web shell hosted on GitHub. Affected are WordPress releases below 7.1.2, and the campaign probed broadly rather than targeting a specific sector, so small and mid-sized sites are also at risk. Administrators are urged to update immediately and check for traversal requests, outbound fetches to code-hosting domains, and newly written PHP files.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Study finds 22.4% of AI Overview traffic lands in GA4 Direct, not Organic

A nine-month first-party analysis of one transportation-industry brand found that nearly a quarter of tracked Google AI Overview traffic was classified as Direct in Google Analytics 4 rather than Organic. The study covered September 2025 through June 2026 and recorded 51,200 referral events across 1,661 cited snippets. AI Overviews made up 7.53% of organic sessions overall, though their share swung from peaks of about 16% to 17% down to roughly 2% to 4% in recent months. Researchers suggest Google's text-fragment URL parameter may cause these visits to be misclassified, though the same pattern can appear in other Google features. The authors caution that the results reflect a single brand and should not be treated as a universal benchmark.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why a Self-Hosted Qdrant Memory System Returned Grocery Lists for Project Queries

A developer built a personal AI memory system using Qdrant, a local embedding model, and automatically generated session notes. When asked about recent project follow-ups, the system returned a grocery list because its wording shared similar vocabulary, producing a high cosine similarity score despite being irrelevant. The author explains that vector search is a nearest-neighbor method that finds mathematically similar text rather than truly remembering information. The experience led to adding domain filters to improve retrieval relevance. The article argues that the perceived memory is only as good as the retrieval quality.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Prompt Injection: How to Protect Your AI Automations

A DEV Community guide explains prompt injection, where text written by third parties tricks a language model into following hidden instructions. It distinguishes direct injection, where the user is the attacker, from indirect injection, where malicious instructions sit inside emails, web pages or documents the assistant reads. The author cites Simon Willison's "lethal trifecta" as a warning sign: access to private data, exposure to untrusted content, and the ability to communicate externally. Since no complete fix exists, the guide recommends designing automations so that a fooled model cannot cause serious harm. It demonstrates this with a hypothetical shop inbox assistant and a deliberately gullible stand-in model used for testing.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Teaching a RAG App to Admit When Its Documents Lack an Answer

A developer starting a 90-day AI challenge is tackling a basic reliability problem in retrieval-augmented generation: getting the app to decline questions its sources cannot support. Retrieval tends to return the closest-matching passage even when that passage doesn't contain the needed information, so a language model can produce a confident but unsupported answer. The first version is deliberately small, covering document chunking, passage retrieval, answering only from retrieved text, requiring citations, and returning a clear fallback when evidence is missing. Test questions fall into three groups: directly answerable, related but unsupported, and unrelated, with the middle group considered the most revealing. The author stresses that a valid citation ID alone does not prove correctness, and that any retrieval-score cutoff must be tested on the actual documents.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Pexels Pauses New API Keys; Developers Turn to Pexafy as an Alternative

Since September 30, Pexels has stopped issuing new API keys and raising rate limits, with no reopening date given. Keys already issued keep the default limits of 200 requests per hour and 20,000 per month. Some developers have switched to other providers, such as Pixabay, in the weeks since. The article, written by the developer of Pexafy, presents that service as an alternative that issues keys immediately on a free plan, indexes Pexels photos alongside other free image libraries, and includes photographer credit in each result. The author discloses that they build the service and that the post is a migration guide for it.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

New Routing Model Cuts LLM Calls 84% in Telecom Contact Center Tests

A developer published benchmarks of a confidence-gated routing system for telecom customer support, which sends most subscriber tickets to a fast local classifier and falls back to an LLM only when uncertain. Tested on 200 real consumer complaints from the Comcast Consumer Complaints Dataset, the system eliminated 84% of LLM routing calls while reaching 92% accuracy, slightly above a 90% LLM-only baseline. Average decision latency dropped to 56-167 milliseconds, compared with a simulated 307 milliseconds for the baseline and over 25 seconds under API queueing. The author argues the approach also avoids rate-limit failures during surges in tickets, such as those caused by outages. The research was published in a series on the LangGraph framework and is based on the author's own benchmarks rather than independent evaluation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Blast-Radius Triage for Model-Drafted Docs: Reviewing Changes by Impact

The source article is a DEV Community post titled 'Blast-Radius Triage for Model-Drafted Docs: Order Review by What Breaks'. The article body did not load and instead displays a Liquid template error ('Unknown tag endraw'), so its actual content cannot be confirmed. Based only on the title, the piece appears to discuss prioritizing the review of documentation drafted by AI models according to how much a change could break. Further details about its arguments, methods, or conclusions are unavailable from the text provided. Readers should consult the original post for the full content.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Benchmarking a cold endpoint: why splitting latency into phases matters

A developer found that a single averaged latency figure hid two distinct behaviors: a tight median and a much slower tail that changed with the time of day. Recording each request's wall time as one number mixed name resolution, TCP connect, TLS handshake, and server response, making it impossible to tell network delay from application slowness. The author instead tracked connect, TLS, send, time-to-first-byte, and total durations separately, which distinguishes a slow server from an idle connection that needed waking up. A curl command with timing format flags was used to confirm the breakdown quickly, and a standard-library Python probe was written to log each phase per attempt. The key lesson is to identify which phase is being measured before optimizing, since a profiler cannot diagnose network delays.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Free AI Model Access Shifts Costs Rather Than Eliminating Them, Author Argues

A DEV Community post argues that switching to a free AI model endpoint moves costs elsewhere instead of removing them. The author lists hidden costs including retries, waiting time in queues, human rework, and reduced tuning effort. Free endpoints may also be served differently from paid ones, even under the same model name, so their behavior should be probed rather than assumed equal. The piece warns that parallel fan-out can multiply attempts and duplicate work, and that reproducible setup scripts matter more than tribal knowledge. It also shares a bash script that logs every request attempt to measure real work per successful task.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer shares six silent bugs behind TIER EVERYTHING, a community tier-ranking site

The developer built TIER EVERYTHING, a site where users drag items into ranked tiers from GOATED to Cooked and discuss each in threads, with about 80 boards and roughly 830 items. Their most time-consuming problems were silent failures that produced no errors, starting with board pages whose social preview images were declared as 1200×630 but were actually small, cross-origin WebP files that major platforms fail to render. Routing mismatches on Cloudflare Workers, where path-matching rules missed certain routes, were another hidden issue. They also found that some tests passed vacuously, such as an animation check that could never fail, which led them to rewrite assertions to verify actual file bytes and rendered state. The write-up also covers their policy of allowing anonymous votes while requiring accounts for content, plus guardrails for anonymous comments.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Giant African Snails Are Invading Florida, Spreading Across the State

An Atlantic feature examines the invasion of giant African land snails in Florida, a species that has become a serious pest in the state. The article looks at how the snails spread and the threats they pose to local agriculture and ecosystems. It also discusses the challenges officials face in controlling the population. The piece draws on the experiences of residents and researchers dealing with the infestation.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Guide Explains Audio Formats and Quality Settings Behind Voice AI Output

Voice AI tools such as text-to-speech engines, voice cloning, and speech-to-text APIs are spreading into everyday apps, making audio fidelity more important. The guide outlines common formats including WAV, MP3, OGG, Opus, and FLAC, comparing their compression approaches and typical uses. It also explains key quality parameters like sample rate, bit depth, codec, and channel count, along with their trade-offs for file size and sound quality. Using ElevenLabs as an example, it shows how developers can request specific audio settings through the API. Recommendations suggest Opus for real-time voice and higher sample rates for podcasts or video.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

LLM reranker silently did nothing: token limit cut off replies, fallback hid the failure

A developer's text-to-SQL table selector included an optional LLM reranker that appeared to have no effect on results. Logging showed the model was being called but returned no answer, because newer Claude models spend tokens on internal reasoning and exhausted a 120-token limit before producing output. The reranker's error handling caught the failure and silently returned the original order, so existing tests passed while the feature was broken. The fix raised the token limit to 1024, added a test that fails below 512 tokens, and logged whether the model answered on each question. On public Spider and BIRD benchmarks, the reranked version placed the correct tables in the top five for substantially more questions than the baseline, though results reflect one model and measure table retrieval rather than final SQL accuracy.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Where the 400-line pull request rule came from, and what the newer data says

A common online rule says pull requests should stay under 400 lines, but tracing it leads to a 2006 study by SmartBear, a code review tool vendor, run with a Cisco team. That study reviewed about 2,500 reviews covering 3.2 million lines of code, finding defect density dropped once reviews exceeded roughly 200 lines. The original research measured reviewer effectiveness rather than how risky a change was, and it reflects a single team, product, and pre-commit tooling setup. Newer vendor benchmarks from LinearB and Graphite offer different size guidance, with Graphite suggesting a median of about 50 lines, and the two sets of figures measure different parts of the same distribution. Both sources sell tools that track these metrics, so the numbers are best treated as a starting point rather than a fixed rule.

0 comments Read more at DEV Community
← NewerPage 390 of 3104Older →