SShortSingh.

Programming

0
ProgrammingDEV Community ·

Opus 5.5 and Sonnet 5.5 tie on coding-agent tests, but Opus costs about 2.5x more

A test of Claude Opus 5.5 against Claude Sonnet 5.5 on six small Python coding tasks found both models passed every hidden test in every run. The evaluation ran Claude Code with identical settings, changing only the model, across 24 runs on 2026-10-20. Opus was consistently slower and, per task, cost roughly two and a half times as much as Sonnet at QuickSilver Pro prices. The tasks covered bug fixing, spec implementation, refactoring, input validation, a config parser and a Mustache renderer. The author's conclusion is that, for these tasks, Opus did not justify its higher price.

0
ProgrammingDEV Community ·

78% of Thai PHP hosts on 8.1 or older may miss tonight's security patch

Mallory's Shodan scan counted 14,619 of 18,701 Thai hosts advertising a PHP version at 8.1 or older, roughly 78 percent, which will not receive the patch. PHP is set to release fixes at 21:00 Thai time for two vulnerabilities rated CVSS v4.0 9.2. The figure reflects banner-declared versions rather than confirmed exposure to the flaws. Reports circulating online cited a 10.0 score and disclosure dates that conflict with PHP's official advisory, and the CVE identifiers in the leak could not be found in the NVD. The author argues the bigger issue is legacy versions on low-cost hosting, not the patch timing alone.

0
ProgrammingDEV Community ·

Node.js Message Queues: Publishing and Running Background Tasks Reliably

The article explains how to set up a durable message queue in Node.js to publish and process background tasks, using renewal reminders as the example. It recommends a worker that claims jobs before their deadline, an idempotency key, and a visibility timeout longer than typical processing time. Alerting should track queue delay against eligible jobs rather than raw queue depth, since planned future work and an empty queue can each mislead. Jobs should carry durable intent such as identifiers and an eligibility timestamp, leaving the worker to resolve current account state before acting. The author notes that queues add operational overhead, so simpler approaches may suit low-volume workloads.

0
ProgrammingDEV Community ·

AI Models Found PHP Zero-Day Days Before Disclosure, Patches Released

On October 21, 2026, the PHP project released emergency patches for two critical remote code execution vulnerabilities, CVE-2026-109618 and CVE-2026-109619, collectively called PHP2Shell. The flaws, rated 9.2 on CVSS v4.0, affect PHP versions back to 5.4 and sit in PHP's core engine, so applications like WordPress, Drupal and Joomla are vulnerable unless PHP itself is patched. Security firms Calif and Wiz Research independently used AI models, including OpenAI's GPT-5.6 Sol, to identify the bugs in August, weeks before public disclosure. A proof-of-concept exploit appeared on GitHub within hours of disclosure, making exploitation a low barrier for attackers.

0
ProgrammingDEV Community ·

Why CTOs Should Model the Economics of Open Source Instead of Relying on Gut Feel

The article argues that deciding whether to open-source software is a complex capital allocation problem, not a simple binary choice. It notes that intuition-driven decisions often overlook maintainer burden and erosion of proprietary advantages. The author describes an economics connector with tools for calculating net return, community leverage, IP risk, and maintenance burden. The piece also promotes Vinkius, a unified gateway for accessing these tools from AI assistants, emphasizing its security sandbox and policies.

0
ProgrammingDEV Community ·

Tencent releases open-source Hy Memory 2.0, a dedicated model for AI agent memory

Tencent Hunyuan released Hy Memory 2.0 on October 15, 2026, built around a model whose sole task is writing and updating memories for AI agents. The centerpiece, Hy-Memory-30B-A3B, is a mixture-of-experts model with about 30 billion total parameters, of which roughly 3 billion are active per token. The company says it was trained to decide what to retain and how to update stored facts, addressing the frequent failure of existing systems to return current information after facts change. Alongside the model weights, released under Apache 2.0, Tencent published a Python SDK and a local desktop app called MemHub, and reports benchmark results that are vendor-run and not independently replicated. Developers can test it as a drop-in replacement in frameworks such as Mem0 and MemOS, though the full-precision weights are about 60 GB.

0
ProgrammingDEV Community ·

Low Chilled Water Delta-T Halved Chiller Capacity in One Building

A chilled water system's delta-T, the gap between warm return water and cold supply water, determines how much cooling a chiller delivers, and a drop in that gap can sharply reduce output even at full compressor speed. In one example, a 300-ton chiller running at 600 GPM fell from a 12°F design delta-T to 5°F, cutting its capacity to about 125 tons. Causes included three-way bypass valves on air handling coils, fouled coil surfaces, and pump speeds set too high, which forced a second chiller to run on peak days. Converting to two-way valves and chemically cleaning the coils restored the delta-T to 10°F, letting one chiller handle the load and saving an estimated $47,000 a year. The article advises measuring supply and return temperatures and comparing the result to design values to diagnose similar problems.

0
ProgrammingDEV Community ·

Analyst's '5% for chatbots' compute figure may obscure how workloads are classified

A Nomura estimate suggesting chatbots consume about 5% of global AI compute has circulated among Chinese AI developers as a humbling corrective. The author argues the figure is rough and lacks a public methodology, so its bucket boundaries, especially where tool-using agent sessions fall, are unclear. Because agentic workloads are largely chatbot-style sessions with tool calls added, assigning them to a separate category could understate conversational inference. The piece also contends that chatbot inference is synchronous and latency-sensitive, making it costlier per unit than batched recommendation workloads. Therefore, a small percentage of total compute may not imply that chatbot infrastructure is unimportant to future planning.

0
ProgrammingDEV Community ·

Four Python scripts that packaged 39 stock products and cut out tedious upload errors

A developer describes an evening of repeated CSV rejections from stock platforms, which pushed them to write small tools instead of relying on manual spreadsheet fixes. The package includes a metadata generator that builds platform-specific upload files, an upload tracker that prevents duplicate submissions, and utilities for converting Markdown to PDF and bundling products with covers and thumbnails. The author recommends running one process at a time on limited hardware and measuring peak memory usage. Only two of the four scripts need third-party libraries, so some users can skip installing them entirely.

0
ProgrammingDEV Community ·

Developer's Upload Pipeline Uses Ledger Script to Prevent Duplicate Stock Asset Posts

After accidentally re-posting 14 vectors to a marketplace, which drew a complaint email, a developer built a small upload pipeline to stop duplicate submissions. The kit includes four scripts: a metadata builder that outputs the exact CSV header each platform requires, a standard-library ledger that tracks completed uploads, a Markdown-to-PDF converter, and a packager that creates zips with cover images and thumbnails. The developer reports the workflow handled 39 products totaling 856 MB on a single-core server with 2 GB of RAM and no GPU. The project relies on only two third-party packages, Pillow and reportlab, while the metadata and tracker scripts use the standard library alone.

0
ProgrammingDEV Community ·

How an MCP payment gateway prevents AI agents from paying twice on retried API calls

When an AI agent's paid API call succeeds on payment but the response is lost, a naive retry can charge the agent again for the same work. The gateway's first layer relies on x402 on Base, where each signed USDC authorization carries a nonce the token contract accepts only once, so a resent payment fails on chain. For order payments, agents can attach a payment identifier that returns the stored result for repeated requests for 24 hours, while mismatched details trigger a conflict error. Payments whose settlement status is unclear are treated as unknown rather than failed, and a background job checks the chain to resolve them without ever re-settling. Tool calls are charged only when a response is delivered, so provider failures are not billed.

0
ProgrammingDEV Community ·

Retry Strategy for Failed Email Delivery Using Delayed Queues and Dead-Letter Handling

A developer guide argues that the most effective approach to retrying failed email delivery in a Node.js background job system is a queue with delayed retries combined with a dead-letter queue. The recommended design acknowledges a job only after the email provider accepts it, moves permanently failing messages aside for inspection, and makes the sender idempotent because standard queues deliver at least once. For monitoring, the article suggests alerting on the age of the oldest unacknowledged job, the failed-delivery rate, and retry concentration rather than raw queue depth, which can rise during healthy traffic peaks. It also recommends setting service-level objectives around report delivery deadlines instead of promising exactly-once delivery, and draining workers deliberately during shutdown.

0
ProgrammingDEV Community ·

Token generation speed is capped by memory bandwidth, not compute, a DDR3 test shows

A comparison of a 40B model running at 125 tokens per second on a laptop with a 7B model at 1.5 tokens per second on a 2011 CPU, with similar RAM, highlights that common explanations for the gap are often wrong. The author argues that generating each token from a dense model requires reading all weights from memory, so memory bandwidth sets the speed ceiling. Using a read-only benchmark on an old i5-2520M NAS with a single DDR3-1600 DIMM, the author measured about 9.0 GB/s, roughly 70% of theoretical peak. Adding threads plateaued near 10.5 GB/s, indicating the single memory channel is the limit rather than core count. Estimated ceilings and expected real-world speeds for 7B, 13B and 40B models are provided, with swapping identified as a common cause of very slow results.

0
ProgrammingDEV Community ·

Why design reviews must question necessity, not just whether code works

The author approved a pull request in minutes after automated checks passed, only to find weeks later that it had produced copy-pasted validation logic. They argue that design reviews should ask whether an abstraction is needed, not merely whether an implementation functions. In building a React form validation engine, they adopted a rule that a new named rule preset is added only once the same logic is needed in at least two places. The author notes that generality without present need leads to bloated, hard-to-maintain configuration. They acknowledge this policy can slow teams slightly but judge the tradeoff worthwhile, since duplicated code is easy to promote later while unnecessary presets are hard to remove.

0
ProgrammingDEV Community ·

AI-Run Music Label's Bio Link Broke in a Splice, Caught by a Second Reader

Persona500 LLC, a music label and merch store run largely by AI agents under founder Aldrin Payopay, launched a small test placing a product link in two author bios. An agent appended the offer sentence at an unseen cursor position, which spliced the text and fused the URL into a dead link. The agent's own check sampled only the start and end of the sentence and recorded the placement as verified. A second reader caught the splice and the 404, and the field was rewritten in full and the link reopened and confirmed working within about ten minutes. The agent drew lessons from the miss: verify the whole rendered unit, open links rather than reading their text, and rewrite fields whole rather than appending.

0
ProgrammingDEV Community ·

Why Diesel Engine Duty Cycles Determine How Long an Engine Lasts

Diesel engines often wear out sooner than their spec sheets suggest, and the reason frequently lies in how they are actually operated. The article argues that a duty cycle, a time-based profile of power, speed, and thermal load, reveals far more than a simple average load factor does. It contrasts short, peak-driven demands with sustained steady-state operation, comparing them to a sprinter versus a marathon runner. The author proposes using operational data rather than guesswork to match an engine to its application. The piece also introduces standardized duty cycle classifications used by international bodies and equipment makers.

0
ProgrammingDEV Community ·

Why B2B Inquiry Forms Lose Leads and How to Route Them Reliably

A shared-inbox inquiry form can cause duplicate replies, unowned contacts, and lost submissions when the CRM is unavailable. The article argues for a process that persists each submission before anything else happens, so a CRM outage does not erase the lead. It recommends splitting form fields into routing, context, and free-text groups, and never routing on free text. The author proposes using the local database as the source of truth, with the CRM acting as a downstream copy synced through an outbox. Deduplication via a keyed unique index on email and company within a rolling window is presented as a way to prevent double-submissions and race conditions.

0
ProgrammingDEV Community ·

How Exporters Can Build an SEO-Friendly B2B Website That Ranks on Google

Many export companies launch professional websites yet receive few inquiries because search engines rarely surface them to overseas buyers. The article attributes this mainly to sites built without search intent, clear structure, and core technical fundamentals rather than to product or pricing. It recommends mapping commercial keywords that buyers actually type, assigning one primary keyword family per page, and organizing pages in a flat hierarchy within three clicks of the homepage. Practical on-page elements such as title tags, meta descriptions, headings, optimized images, internal links, and structured data are highlighted as commonly overlooked basics. The guide also warns that thin pages with minimal content and only a contact form are unlikely to rank in competitive niches.

0
ProgrammingHacker News ·

Median SaaS product lifespan on SaaSHub's graveyard drops from about 4 years to 1.5

SaaSHub's product graveyard, which tracks the status and lifespan of hundreds of thousands of products, showed median lifespan holding near four years for a long period. A sharp decline in 2026 has reportedly brought that median down to roughly 1.5 years. The author attributes the drop to cheap, AI-assisted software creation, which lets many people release products quickly and abandon them when they prove unviable or fail to attract customers. The author argues that distribution and marketing now matter far more, and speculates the trend may continue or that users may eventually build their own tools, leaving a few large platforms dominant.

0
ProgrammingDEV Community ·

PDF merge keeps mixed page sizes; verify the downloaded file, not thumbnails

A merged PDF containing an A4 cover and a Letter-sized report can be correct even if a viewer displays every page at the same width. Viewer previews therefore cannot confirm that the downloaded file preserved each page's dimensions. The article's test used synthetic fixtures and an actual browser download, then checked the output with pypdf and Poppler's pdfinfo. Results matched the intended order, with the Letter page remaining Letter-sized in the middle. The author notes this is a narrow acceptance check, not proof for arbitrary PDFs, and that boxes, rotation and UserUnit must also be compared.

← NewerPage 6 of 2828Older →