SShortSingh.

Programming

0
ProgrammingDEV Community ·

AWS Data Engineer Roadmap for 2026: Key Skills, Services, and DEA-C01 Prep

Modern AWS data engineers are now expected to do more than just move data, including building reliable pipelines, selecting storage, transforming large datasets, and ensuring quality and security. The guide outlines a learning path covering core concepts like ETL, ELT, batch, and streaming processing. It highlights foundational skills in SQL and Python, along with essential services such as Amazon S3, AWS Glue, and Amazon Redshift. It also explains how this practical learning can support preparation for the AWS Certified Data Engineer – Associate (DEA-C01) exam.

0
ProgrammingDEV Community ·

How to Set Google Preferred Sources to Shape AI Answers and News Results

Google's October 15 update lets users choose preferred publishers that appear higher in AI Mode and AI Overviews answers. Preferred sources also gain prominence in the News carousel within AI Mode, according to the company. Google reports that usage of the feature has grown sevenfold as people curate their results. Users can set their sources by searching a topic, opening the customize icon beside Top stories, and adding trusted publications, then refreshing results. The guide argues that choosing outlets you actually read yields more in-depth answers.

0
ProgrammingDEV Community ·

Pujo Atlas: Open Map Helps Plan Durga Puja Pandal Visits in Kolkata

Pujo Atlas is a free, browser-based map and itinerary planner for finding Durga Puja pandals in Kolkata and across West Bengal. It combines a Kolkata puja guide with a government puja directory, allowing users to search by pandal, locality, coordinates, or DIGIPIN. Users can browse nearby results on a clustered map and save pandals to a hopping list to plan their route. The project currently has no paying users or revenue, and its creator has stated it does not yet use open-source AI despite being submitted to a related challenge.

0
ProgrammingDEV Community ·

What a pentest closure record should contain for auditors and customers

A pentest report lists vulnerabilities, but auditors and enterprise customers want a record showing what was fixed, what changed, and proof the fix worked. The article proposes six fields per finding: a stable ID and weakness with location, scope agreement, the change and its rationale, who authored and reviewed it, a rescan confirming the fix, and the merge date. It illustrates this with a rehearsal Fix Sprint on the deliberately vulnerable OWASP NodeGoat app, where 15 of 16 in-scope findings were fixed across five pull requests. One finding, a committed TLS private key, was explained rather than changed, since deleting the file would not remove it from git history. The article also warns against closing findings by deleting evidence, merging without rescanning, and bundling many fixes into one pull request.

0
ProgrammingDEV Community ·

ETF Bitcoin Spot ou Futures : quelles différences pour l'investisseur ?

Les ETF Bitcoin Spot et Futures sont deux fonds cotés en bourse donnant accès au Bitcoin, mais selon des mécanismes différents. L'ETF Spot détient directement les bitcoins et suit de près le cours réel de l'actif, tandis que l'ETF Futures s'appuie sur des contrats à terme qui fixent un prix pour une livraison future. Le second est influencé par les primes ou décotes de ces contrats, ce qui peut créer un écart avec le spot. Les frais et la liquidité diffèrent également : l'ETF Spot est généralement moins coûteux et plus liquide, alors que l'ETF Futures peut supporter des frais de financement. Le choix dépend donc de la recherche d'une exposition simple et directe ou d'une stratégie plus complexe liée aux contrats à terme.

0
ProgrammingDEV Community ·

Remote NT Housing Repair Triage System Ranks Fault Urgency, Not Tenant Identity

A student team built ReachNT, a prototype system for triaging repair requests in remote Northern Territory public housing, where jobs often wait weeks because of trip costs. The system ranks repairs by urgency, groups nearby communities into shared weekly trips, and explains to tenants why their repair waited. Because no public NT repair dataset exists, the team generated synthetic requests, while geography, house counts and response-time data come from real sources and are labeled accordingly in the demo. The urgency model reaches a ROC-AUC of 0.84 on unseen wording and catches 99.3% of dangerous reports only when combined with human review. Its confidence scores proved poorly calibrated, so the team chose not to show confidence percentages to tenants.

0
ProgrammingDEV Community ·

Railo Benchmark on 11 Public Repos Finds Most Proposed Security Fixes Were Wrong

Railo is a GitHub Action that flags security issues in pull requests and proposes rule-based code fixes. Its authors had previously measured fix quality only on examples they wrote themselves, which they now see as an easy test. They ran the same pipeline on eleven public repositories they did not write, six deliberately vulnerable apps and five well-maintained projects, and reviewed every proposed fix by hand. Across 923 findings they proposed 162 fixes, and 95 of those were judged incorrect, mostly edits to vendored libraries, test data and seed data, though none broke file syntax. After adjustments the proposed fixes dropped to 67, and some cases are now flagged for human review instead of being patched.

0
ProgrammingDEV Community ·

Extracting Text from PowerPoint Slides and Tables in Java

A DEV Community tutorial explains how Java developers can pull text out of PowerPoint files instead of copying it manually. It covers three cases: reading every slide in a presentation, targeting one specific slide, and extracting content from tables. The examples rely on the Spire.Presentation library, which is added to a Maven project through a pom.xml dependency. Each sample is a standalone program that writes its output to a UTF-8 text file. The guide also notes that slide indexes begin at zero, so slide numbers must be adjusted when accessing collections.

0
ProgrammingDEV Community ·

Optimizing a Browser Game's Pages for AI Search Engines as Well as Google

Search is increasingly happening in AI assistants like ChatGPT, Perplexity, Gemini and Copilot, which extract and cite pages rather than rank them. The author applied these changes to AgentSlash, a free instant-play HTML5 game, which already had standard technical SEO such as canonical tags, social cards, and VideoGame, FAQPage and BreadcrumbList schema. Schema markup was noted as carrying over well to AI crawlers, while the copy was rewritten to open each section with a direct one-sentence answer and use question-format headings. The author also added an /llms.txt file and explicitly allowed AI crawlers such as GPTBot, ClaudeBot and PerplexityBot in robots.txt, since default setups sometimes block them unintentionally. The article links to the game's page as a live example of these changes.

0
ProgrammingDEV Community ·

How to Freeze Your Credit at All Three Major US Bureaus

A credit freeze is presented as a free and effective way to guard against identity theft by blocking lenders from accessing your credit report. Under federal law the freeze costs nothing, does not affect your credit score, and can be lifted whenever you need to apply for credit. Because each bureau operates separately, a freeze must be placed individually with Equifax, Experian, and TransUnion, using their online portals or phone lines. The freeze typically takes effect within minutes online, though phone and mail requests take longer, and the article advises creating a PIN or password and keeping confirmations safe. The piece also notes that a freeze does not stop misuse of existing cards or block every type of prescreened offer, so continued account monitoring remains advisable.

0
ProgrammingDEV Community ·

KiranaSetu Pro: Open-Source Offline Retail Platform for India's Kirana Stores

KiranaSetu Pro is an open-source, offline-resilient retail management platform designed for India's 13-plus million neighborhood Kirana grocery stores. It addresses error-prone paper ledgers and costly subscription software that fails when connectivity drops, offering a privacy-first alternative. Its features include live stock indicators, a POS that applies GST and round-offs automatically, and dynamic UPI QR codes paired with a payment soundbox alert. The platform also supports advance pickup tokens, a delivery hub, a credit ledger with AI-drafted WhatsApp reminders, and AI-assisted parsing of handwritten shopping lists. The project was submitted to the Hacktoberfest Open-Source AI Challenge.

0
ProgrammingDEV Community ·

Self-hosting FastGPT for an AI support bot: three install pitfalls to avoid

A developer documented installing FastGPT v4.15, an open-source knowledge-base chatbot, on a fresh Linux server using Docker. The MinIO image failed to pull from Docker Hub because its public images are no longer available, and the workaround was to use the matching version from FastGPT's own mirror. The CSV FAQ import also requires a third indexes column, and an embedding model is needed in addition to a chat model. The author further warns that Docker can bypass ufw firewall rules, recommending binding ports to 127.0.0.1 behind a reverse proxy, and estimates about 2.1 GB of idle memory, so 4 GB of RAM is advisable.

0
ProgrammingDEV Community ·

Unpaid invoices need a clear next step, not guilt, experts argue

An overdue invoice can quickly become an emotionally fraught task, with worries about seeming pushy or about client dissatisfaction. The piece advises first checking facts such as whether the invoice reached the correct person, whether the due date is clear, whether a dispute exists, and whether payment has already arrived. It recommends sending a factual, prewritten reminder that names the invoice, amount, and due date, attaches the document, and invites the client to flag any problems. It also stresses assigning someone to monitor replies, pausing reminders when disputes arise, and recording any promised payment dates. The author suggests testing the process on a single invoice to identify where ownership and status tracking break down.

0
ProgrammingHacker News ·

Gentoo Linux to end maintenance of its Chromium package

The Gentoo Linux distribution has reportedly announced the end of support for its Chromium browser package. The news was shared through a Linux Weekly News (LWN) article, which has drawn attention on Hacker News. The source material available provides only limited detail beyond the headline, so the specific reasons and timeline remain unclear from the provided text. Readers interested in the full context should consult the original LWN report.

0
ProgrammingHacker News ·

The Folders: An Esoteric Programming Language Built Around Directories

A Hacker News post links to a page describing The Folders, an esoteric programming language. The linked article is presented as an overview of the language's design and concept. The submission received 8 points and no comments at the time it was captured. The source text provided contains only the link and metadata, so the language's specific mechanics cannot be confirmed from this item alone.

0
ProgrammingDEV Community ·

Map a Messy Module's Behavior Before Refactoring It

A billing module with a 900-line invoice function and no working tests shows how a small rule change can balloon into weeks of regression debugging. The article proposes recording what the code actually does on real inputs before touching it, instead of relying on reading the code. It describes wrapping chosen function seams in a decorator that logs arguments, results, status, and latency to a JSON Lines file. The recorded calls are then grouped by structural fingerprints, ignoring values, to reveal which outputs and branches matter. Customer identifiers should be redacted before any ledger leaves the machine.

0
ProgrammingDEV Community ·

AI Agent Reportedly Runs a Tiny Business Solo; Analysis Splits Which Functions It Can Own

Alex Finn reported in mid-October that his consumer Grok Bot built a use-case website, chose sponsors as a revenue model, shipped updates unprompted, and closed a first sponsor deal, with Finn left to manage social media. The account comes from a single source with a promotional stake, and the earnings are small, so it is best treated as an anecdote rather than proof. The piece distinguishes task delegation, where a human reviews each output, from function ownership, where an agent runs a whole loop and humans audit results periodically. Functions that held up as agent-owned tended to have fast, external feedback that exposes errors quickly, such as website traffic and email replies. Functions that stayed human-run, like public brand voice, key client relationships, and high-stakes judgment calls, tend to have slow or costly feedback.

0
ProgrammingDEV Community ·

UAE Firms Need Lightweight AI Governance, Not Lengthy Policies, Experts Argue

Many UAE organisations run AI systems in production without a named accountable owner, a formal intake process, or evidence of how models access sensitive data. The article contends that a lengthy governance policy is ineffective because staff rarely read it and it offers little protection when failures occur. Instead, it proposes four practical artefacts: a use-case intake form with risk scoring, a named owner with a monthly review, an enforcement layer for model traffic, and a live register of models and agents. The author says this approach can be set up in about six weeks and aligns with ISO/IEC 42001 and the UAE AI Charter. The piece also notes that regional enterprises are adopting AI platforms widely, but day-to-day accountability often lags behind.

0
ProgrammingDEV Community ·

Shadow AI at work: two-thirds of staff use tools against policy, study finds

A PagerDuty survey from June 2026 found that 66% of office professionals use AI tools at work even when they believe their employer prohibits it. Most respondents admitted sharing work information with public AI services, including emails, meeting notes, customer data and financial documents. The article argues that blanket bans fail because staff shift confidential data onto personal devices and unmonitored networks. It instead recommends a short acceptable use policy, company-managed AI accounts and a private gateway for sensitive workloads, aimed at firms of 20 to 200 people.

0
ProgrammingDEV Community ·

Rubric Graders Need Canary Tests to Catch Silent Scoring Failures

An automated pipeline that scores C++ patches with a model-backed rubric can keep producing plausible numbers even after it stops telling good patches from bad ones. A prompt change or model swap might cause every patch to receive the same high score, and nothing would crash to flag the problem. The author recommends treating the grader like any other program with dependencies, using golden cases, canary sets, a hard gate, and a ledger. The proposed setup is a simple standard-library Python harness with JSON canary files and a scheduled run. Grading is split into a deterministic layer that gates builds and a rubric layer that assesses defensible qualities such as naming and contract adherence, and each layer gets its own canaries.

← NewerPage 405 of 3106Older →