SShortSingh.

Programming

0
ProgrammingDEV Community ·

Amazon ECS introduces non-critical daemons, allowing failure without instance replacement.

Amazon ECS introduced a 'non-critical' setting for its Managed Daemons feature on September 3, 2026. This new parameter allows operators to designate agents, like metrics exporters, as non-critical. If a non-critical daemon fails, the host EC2 instance will not be automatically drained and replaced, unlike with critical daemons like security agents. The change addresses prior rigid coupling, offering more flexibility in cluster management. However, the core startup guarantee, ensuring daemons run before application tasks, remains intact for both types.

0
ProgrammingDEV Community ·

Study finds legacy network monitoring platforms often exposed with security risks

A study using ZoomEye data from September 2026 identified thousands of exposed instances of monitoring platforms Cacti and LibreNMS. These systems accumulate over time, often managed by departed engineers and excluded from asset inventories. They typically store credentials granting broad access to the devices they monitor, creating significant security risks. Cacti specifically has a history of vulnerabilities exploitable by authenticated users. Security recommendations include restricting interfaces to management networks, auditing credentials, and maintaining regular patch cycles.

0
ProgrammingDEV Community ·

Dev platform launches 27 free, client-side web calculators for developers

The DEV Community has released a suite of 27 free web-based calculators designed for developers and founders. These tools require no user authentication, accounts, or payments to operate. All calculations are performed client-side in JavaScript and WebAssembly, ensuring no user data is sent to remote servers. The utilities are hosted on Cloudflare's edge network for global speed and cover topics from AI model sizing to tax and database cost estimations. This initiative addresses concerns over ad-ridden, data-collecting calculators commonly found online.

0
ProgrammingDEV Community ·

AWS EC2 to let AMI owners specify compatible instance types starting September 2026

Starting September 4, 2026, Amazon EC2 will allow AMI owners to explicitly declare supported or unsupported instance types. This new InstanceTypeSpecification feature will block incompatible launches at the RunInstances API call. The change aims to prevent launch failures where instances boot but later crash due to hardware or software incompatibility. It centralizes compatibility enforcement at the AMI level, eliminating the need for duplicate IAM or SCP rules across accounts. The feature will be available at no extra cost across all AWS regions.

0
ProgrammingDEV Community ·

AWS Bedrock Managed KB user setup lacks SharePoint access controls, warns developer

AWS released a user-managed setup option for its Bedrock Knowledge Base on September 4, 2026, enabling easy connection to SharePoint, OneDrive, and Confluence. The developer notes this method does not enforce document-level access controls from the source systems. Anyone able to query the knowledge base can access all indexed content, as permissions are not carried over. This design trade-off prioritizes quick setup over security, requiring a full re-ingestion to implement access controls later. The article advises assessing what data was already indexed before considering a more secure, application-permission based setup.

0
ProgrammingDEV Community ·

New Tool 'always-pnpm' Prevents AI Agents From Cluttering Disks With NPM Duplicates

A developer has created a tool called 'always-pnpm' to address a storage issue caused by AI coding agents. These agents frequently use standard npm commands, which create duplicate, space-consuming 'node_modules' directories for each project. The tool automatically intercepts and rewrites npm commands to use pnpm instead, which stores packages in a single, shared location on disk. This prevents AI agents from wasting gigabytes of storage on duplicate JavaScript packages during development. The tool is available as an open-source project on GitHub.

0
ProgrammingDEV Community ·

Notify Roles, Not People, to Improve Workflow Reliability and Delegation

A technical article on DEV Community advocates designing notification systems to target roles rather than specific individuals. It argues that using roles ensures notifications reach the correct person even when staff change positions or leave the organization. This approach also simplifies adding temporary delegates, as only role assignments need updating. Additionally, auditing past notifications becomes more reliable by consulting role history instead of outdated personal inboxes. The author, who works on Power Platform architecture, concludes that hardcoding personal identifiers like emails leads to broken workflows.

0
ProgrammingDEV Community ·

Open-source Photoshop alternative passes early tests, but blends match due to PSD answer key

A developer tested PhotoCraft, a new open-source reimplementation of Photoshop written in Rust. They created custom photoshop files to check how accurately it renders blend modes like Soft Light. The tool passed tests by closely matching Photoshop's outputs, often within a 2/255 pixel difference. This accuracy was found to rely partly on the merged image data that Photoshop itself saves within .PSD files. The project's code implements specific, observed Photoshop behaviors that differ from public specifications.

0
ProgrammingDEV Community ·

Amazon Bedrock's ServiceNow connector may bypass document access restrictions

A pilot implementation of Amazon Bedrock's ServiceNow connector revealed potential security implications. The documentation instructs administrators to assign roles that bypass per-knowledge-base user criteria restrictions. During testing on September 4, 2026, a service account configured exactly as documented successfully retrieved documents restricted to specific user groups. This allowed an internal IT assistant to return sensitive information to unauthorized users during a staging environment test. The configuration followed AWS guidelines precisely, highlighting the described system behavior.

0
ProgrammingDEV Community ·

Amazon ECS introduces early success criteria for faster rollouts, limits automatic rollback

Amazon ECS has introduced a new feature called earlySuccessCriteria for its rolling deployment strategy. Available in all commercial regions and GovCloud (US) since September 2026, this feature allows a deployment to be marked as successful once a specified percentage of new tasks are healthy. By setting a 'healthyPercent' threshold, developers can complete deployments faster, particularly for services using specialized hardware like GPUs or those with long-lived connections. However, once this success threshold is met, the circuit breaker and alarm-based automatic rollback mechanisms are no longer available for the service.

0
ProgrammingDEV Community ·

AWS Bedrock's Fable 5.1 requires new data retention setting, changes security model

Anthropic's Claude Fable 5.1 model on AWS Bedrock introduces a new, mandatory data retention architecture. For the first time, enabling this model requires an account-level configuration to allow traffic to be retained for up to 30 days for AWS abuse detection. This setting must be changed via API, as there is no console interface, making it a broader infrastructure decision rather than a simple product-team choice. While AWS states content is not shared with Anthropic and older Claude models remain unaffected, the necessary permissions reside at a scope many operational teams cannot control. If the required setting is not correctly configured, the model will simply appear as unavailable in the catalog.

0
ProgrammingDEV Community ·

GPT-6 Astra launches on Amazon Bedrock with dual endpoints dictating audit and caching features

OpenAI's GPT-6 Astra model became generally available on Amazon Bedrock on September 8, 2026. The model features a large 1,050,000-token context window and is served via two distinct endpoints, bedrock-runtime and bedrock-mantle. These endpoints offer different functionality, forcing users to choose between features like explicit prompt caching or invocation logging, as they are not available together. The model supports text and image input but only generates text output, with a guaranteed support period until at least September 2027. Pricing and performance depend on the chosen endpoint and geographic region, with no reserved throughput or flexible tier options available.

0
ProgrammingHacker News ·

New website Theranos.world appears, sparks discussion on Hacker News

A new website named Theranos.world recently appeared online. This development was noted and discussed by users on the technology forum Hacker News. The original post garnered limited initial engagement, receiving seven points and no comments at the time of reporting. The site's emergence has renewed attention on the legacy of the defunct health technology company Theranos.

0
ProgrammingHacker News ·

Blog post critiques impersonal tactics in personalized recruiter emails

A blog post on the Pentlander site criticizes the common practice of using automated personalization in recruiter outreach emails. The author argues these messages, despite using names and details, often feel generic and insincere. The piece was shared on Hacker News, sparking community discussion. It highlights a growing frustration among tech professionals with recruitment spam.

0
ProgrammingHacker News ·

Open Benchmark Launched for AI SRE Agents on Kubernetes

A new open benchmark titled AI SRE Arena has been introduced for evaluating AI Site Reliability Engineering agents. The project is hosted on GitHub and was recently showcased on Hacker News. It provides a standardized environment for testing AI agents that manage Kubernetes infrastructure. The initiative aims to establish performance comparisons between different AI-driven operations tools. It has garnered initial community discussion with several comments and votes on the platform.

0
ProgrammingGitHub Blog ·

GitHub bug bounty researcher's methodology spotlighted for Cybersecurity Month

GitHub's Bug Bounty team is featuring researcher Vaibhav Singh during Cybersecurity Awareness Month. The blog post examines his specific approach to selecting which platform features to investigate for vulnerabilities. It details his methodology, techniques, and personal experiences while conducting security research on GitHub. This spotlight aims to share insights into the bug bounty hunting process as part of a security awareness initiative.

0
ProgrammingDEV Community ·

Qwen3.8 Flash Outperforms More Expensive Max Prime in Atlassian Forge Benchmark

In benchmark tests, the smaller Qwen3.8 Flash model unexpectedly outperformed the larger Max Prime model on an Atlassian Forge application. The cheaper Flash model scored 0.7961 while Max Prime scored 0.6953 on the Forge benchmark, though Max Prime later outperformed Flash on a separate payments application test. Max Prime's lower Forge score resulted from a single rule violation involving storage index attributes, which incurred a scoring penalty. Both models demonstrated they could follow the correct rule when explicitly prompted but did not inherently know it. The tests were conducted using the same agent framework with a 150-call budget and no internet access.

0
ProgrammingDEV Community ·

OpenAI releases GPT-6 Astra, targeting corporate and high-stakes AI tasks.

OpenAI has officially launched its top-tier GPT-6 Astra model. It is designed to move beyond static prediction to become a dynamic, autonomous system for complex corporate and technical operations. The model aims to directly compete with leading AI systems from Anthropic, Google DeepMind, and DeepSeek. It features new architectural innovations like dynamic computational allocation and native computer interface interaction.

← NewerPage 574 of 3142Older →