SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Travel Itinerary Planners Can Budget 200 ms for Retrieval With Live Validation

A design guide for travel itinerary planners that aggregate carrier, lodging, and transfer listings proposes a 200 ms retrieval budget. It recommends separating static descriptive retrieval from volatile availability checks and rejecting stale offers before generation. The article argues that the budget must be validated against replayed real traffic rather than treated as a proven benchmark. It also advises identifying the dominant cost drivers, such as embedding repeated descriptions, before optimizing latency. Each pipeline stage is assigned a time allocation, and teams are urged to measure tail latency across varied itinerary types.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Users Voice Frustration Over Siri's Performance Across Tasks

A Reddit post in the r/apple community criticizes Apple's voice assistant Siri for poor performance across a wide range of everyday tasks. The post was shared on Hacker News, where it gained 63 points and 41 comments. The source material provides only a brief description of the discussion, without specific examples or details of the reported failures. Apple has not been quoted in the available material responding to these criticisms.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Updated SSL certificate still served by Alibaba Cloud CLB or ALB? Check the listener binding

A new certificate uploaded to Certificate Management Service may not reach visitors if the load balancer's HTTPS listener still points to the old one. Certificates can be bound separately to a default domain and to extended or additional domains, so updating only one binding can leave others serving the expired certificate. For multiple listeners sharing a certificate, the Replace Certificate option can update them together, and changes should be checked per region, instance, and port. The article also notes that paid certificates can be hosted with automatic renewal, while free test certificates last about three months and require manual replacement. It suggests LapseZero as a tool to automate Let's Encrypt renewals and deployment to CLB, ALB, CDN, and Nginx targets.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Building a Streaming OpenAI Example in JavaScript, With Mocked Tests and Docs

A developer added a streaming command to an OpenAI SDK practice project using JavaScript and the Responses API, so text appears in fragments as it arrives rather than after the full reply. The core function validates its inputs, enables streaming, and forwards only text-delta events to a callback that writes to the terminal. Tests use a mocked client to check fragment handling, ignored non-text events, input validation, and error propagation, with 19 passing and 0 failing. The author notes that no live API stream has been tested yet because no API key was available, so the tests only confirm behavior against simulated events. A cookbook document accompanies the project, covering setup, execution, troubleshooting, and what has and has not been verified.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Refurbished vs new enterprise hardware: how to run a real total cost of ownership comparison

The debate over buying refurbished or new enterprise hardware is often framed as a moral choice, but it is fundamentally a cost calculation. A proper total cost of ownership model goes beyond purchase price to include deployment, power, cooling, failure and downtime costs, support contracts, resale value, and obsolescence risk. New hardware offers real advantages such as day-one warranty coverage, newer efficiency generations, compliance requirements, and longer software support windows. Refurbished gear, often two to four generations old, can cost 40-70% less while remaining capable for workloads like virtualization hosts and file servers, and is typically available immediately rather than after long backorder lead times.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Blog post explores using AI tools to reverse engineer hardware

A post on the GNOME project's blog discusses the use of artificial intelligence to help reverse engineer hardware. The article was shared on Hacker News, where it drew 10 points and 2 comments. The source text provides only the link and engagement metrics, so the specific methods, tools, and findings described in the post are not detailed here. Readers interested in the technical approach are directed to the original blog for the full discussion.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Sparse federated learning aims to monitor soft robot wear without sharing raw sensor data

The article describes a method called Sparse Federated Representation Learning for maintaining bio-inspired soft robots, such as octopus-like tentacle grippers. The author was motivated by a personal project where a local anomaly detector produced false alarms because it had only seen one actuator under specific conditions. Soft robots pose unique challenges, including distributed nonlinear deformation, gradual material degradation, manufacturing variance, and sparse sensing. The approach trains models locally on each robot, shares only model updates, and learns compact shared representations of degradation patterns. Inverse simulation is then used to check whether the learned representations match known continuum mechanics.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why custom post type URLs return 404 until permalinks are re-saved, and how to automate the fix

Custom post type URLs often return 404 errors after registration because WordPress stores its compiled rewrite rules in the database and does not rebuild them when code changes. Only a flush, such as re-saving Settings → Permalinks, refreshes those rules. Flushing on every request is wasteful, and flushing only on plugin activation misses theme switches, deploys, and other changes. The author's approach is to hash the registered rewrite data on the wp_loaded hook and perform a soft flush only when that fingerprint changes. This keeps the per-request cost to one option read and one hash. The article also notes a complication with plugins that register post types only in the admin area.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a State Machine Using AASM Fixed Recurring Payment Failures in Rails

A developer working on a Rails platform that handled recurring renewal payments across several regions found that payment statuses were being updated from controllers, background jobs, and webhook handlers without any shared rules. This allowed impossible transitions, such as moving from failed straight to paid, and let out-of-order or duplicate provider events overwrite newer state. The fix was to model the payment lifecycle as an explicit state machine using the AASM gem, so invalid transitions become visible, loggable errors. The approach was further hardened with row-level locking during transitions, idempotent webhook handling backed by a unique database constraint, and keeping side effects like emails out of the transition itself.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Android apps with native code must support 16 KB memory pages by February 2027

Google Play now requires apps to support 16 KB memory page sizes on 64-bit Android devices, a shift from the long-standing 4 KB default. The requirement applies to apps targeting Android 15 and above, and from February 1, 2027, non-compliant apps will be blocked from releasing updates. Even apps not written in C++ can be affected, since libraries for machine learning, video, audio, databases, and analytics often ship native .so files. Developers can check their release APK in Android Studio's Build > Analyze APK tool, and CI pipelines can verify library segment alignment and zip alignment with command-line tools. Testing on a 16 KB page-size emulator or device is recommended to confirm native code loads and runs correctly.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Live Index Tracks Who Leads Hugging Face's Official AI Benchmarks

A new live index aggregates the leaderboards from Hugging Face's official benchmark datasets into a single view. It recomputes rankings from the Hugging Face API on each visit, showing first-place counts by organization and country, a field-by-field heatmap, and the margin between first and second place. The leaderboards are built automatically from model repositories' published evaluation results, so new leaders appear only after those results are indexed. As of early October 2026, the index covered about 49 benchmarks and roughly a thousand entries, with FINAL-Bench holding the most first-place spots at eleven.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security Analysis Flags Flash-Loan Attack Vectors in HashKey Exchange

A technical security review of HashKey Exchange, a decentralized exchange with a reported $1.547 billion TVL, identifies four possible flash-loan attack vectors against its settlement contract. The platform's core trust point is a single settlement contract that processes batched trades, which makes it the main target for such manipulation. The vectors include oracle price skewing through large spot swaps, batch reordering and front-running, and state injection via crafted calldata in the batch execution function. The authors caution that none of the vectors works alone without breaking an existing safeguard, but a combined multi-step attack could extract losses of up to about 5% of TVL, and they rate the overall risk 7 out of 10. The report recommends immediate fixes for the most critical findings followed by a phased hardening plan.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI-built storefronts passed self-review but a browser QA gate caught four bugs

A team had an AI agent build two fictional storefronts, a Warsaw watch maker and a small type foundry, then graded the output with a fixed pass/fail browser checklist run at three screen sizes. The agent had already approved its own work, but the gate flagged four problems: a hero section that omitted a needed spec table, a purchase bar that broke on mobile, a reduced-motion fallback that froze mid-animation, and signage text that overflowed with real names. The authors argue the issues are structural rather than aesthetic, since AI self-review tends to grade intentions instead of the actual rendered artifacts. They describe recurring patterns in AI-built interfaces and propose a short generation-time constraint prompt paired with a browser acceptance gate. The write-up also promotes a paid guide from the authors' shop.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

CISA Flags Five Exploited Flaws in Common Server Software, Sets 11 October Deadline

The US cybersecurity agency CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog on 8 October 2026, requiring federal agencies to act by 11 October. The flaws affect widely used server software, including the BIND DNS server, ProFTPD FTP server, Apache Struts framework, ONLYOFFICE Documents, and Strapi content system. Most of the flaws were disclosed between 2015 and 2021, and vendor fixes have existed for years. The impact ranges from denial of service to unauthenticated file access and code execution. Four of the entries were also flagged for forensic checks to detect whether systems were already compromised.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why WordPress backup restore tests must prove recovery works

A WordPress backup restore test should end with a working isolated copy, a timed recovery log, and a pass/fail record for key business tasks. Recovery requires both the database and site files, treated as one consistent backup set taken around the same time. Restored copies can carry live payment gateway keys and mail credentials stored in database options or wp-config.php, so those secrets must be removed or replaced before testing. Teams should define acceptance criteria before restoring, record which external dependencies such as DNS or hosting access are missing, and rerun the drill after changes to tools, hosts, or site architecture. The restore target should have its own credentials and file path and must not be reachable by normal visitors until safety checks are complete.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Xbox 360 reset glitch hack finished with a £5 Pico after nine years

A writeup describes how a hobbyist finally completed the Reset Glitch Hack on an Xbox 360 by using a £5 Raspberry Pi Pico. The attack delivers a roughly 100-nanosecond pulse during the console's reset window, causing a verification instruction to produce zero so that the signature check passes. The author's 2017 attempt stalled on a slow, DIY NAND programmer, while the same job took an evening in 2026 thanks to cheaper, better tooling. The project was also overtaken by a software-only exploit released shortly before the hardware path was completed. The piece uses the case to argue that client-side verification is vulnerable when attackers can physically disturb the hardware running it.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

On Japanese Teams, Flagging a Blocker Early Is Expected, Not a Weakness

Many engineers joining Japanese teams assume that admitting they are stuck signals incompetence, so they stay silent and lose time. The author, who has worked on Japanese software teams for about twenty years, argues this view is mistaken. Standard Japanese stand-ups follow a three-part template that includes a dedicated slot for reporting blockers, making it an expected part of the routine. The piece offers phrasing for raising a blocker and requesting help, with variations for colleagues, seniors, and clients, plus softening expressions for written chat. It also warns against both staying quiet and over-explaining, advising people to state the blocker first and add background afterward.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Write an AI Automation Brief That Avoids Overpriced Chatbot Pitches

A clear written brief, roughly one page long, is presented as the key step between wanting to automate a process and getting a working system. Vague goals like improving customer service should be replaced with a step-by-step description of the actual task, including its trigger, the systems involved, and how often it runs. The guidance also stresses listing the decisions the automation must never make alone, such as anything touching money or binding promises, and naming who can grant system access. Teams are advised to define a testable success standard, for example handling a set share of real past emails without human help. Finally, the article recommends assigning an owner for the exceptions the automation cannot handle, and notes that a good supplier may sometimes advise against building the tool at all.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Derek Thompson essay explores why mathematicians weep over their work

An essay by Derek Thompson, published on his Substack, examines the emotional response mathematicians sometimes have to their field. The piece is titled 'I Know Why the Mathematicians Weep' and was shared on Hacker News, where it drew 36 points and 14 comments. The available source material provides only the link, discussion metadata, and title, so the specific arguments and reasons the author gives cannot be confirmed from this item alone. Readers interested in the full explanation would need to consult the original article directly.

0 comments Read more at Hacker News
← NewerPage 418 of 3107Older →