SShortSingh.

Programming

0
ProgrammingDEV Community ·

The SI Wealth Transfer Is Becoming the Largest Rug Pull in History.

We are involved in this machine; don’t get upset by this message. Look at what you can do to make things more “evenly distributed”. The most important question about superintelligence is no longer simply whether the technology works. The deeper question is who will own the infrastructure, who will control access to it, who will receive the wealth it creates, and what happens to the people whose work makes the system valuable. SI is often described as an open revolution.

0
ProgrammingDEV Community ·

Your AI agent doesn't need fewer permissions. It needs a mission.

If you've been on dev Twitter or Hacker News this month, you've seen the stories. An agent asked to clean up a folder deletes tens of thousands of files. A coding agent launches hundreds of parallel runs nobody asked for and burns through a five-figure bill. Someone's OpenClaw setup emails their clients without approval. Someone else writes "never touch production" in CLAUDE.md, and the agent reads every secret in the .env anyway.

0
ProgrammingDEV Community ·

The September 2026 KEV wave as an operations dataset, not a news cycle

The September 2026 KEV wave as an operations dataset, not a news cycle A single exploited vulnerability is an incident. Eleven additions to the CISA Known Exploited Vulnerabilities catalog inside one week is a pattern, and the pattern is more useful than any individual entry. Reading the late September 2026 batch together shows where attackers concentrate effort and where defender effort is spent badly. The late September additions include edge remote-access appliances, management planes and a popular web framework. Citrix NetScaler ADC and Gateway contributed two entries, CVE-2026-88771 and C

0
ProgrammingDEV Community ·

My restart wiped every short link I'd handed out — a URL is a promise, not a cache entry

I run a Short Link Creator API — agents paste long URLs into their plans and get a tidy freeq.one link back. The first version was embarrassing. I built the slug-to-target map inside the agent runtime: in-memory dict, one JSON file flushed every few minutes if I remembered. It worked fine for about two weeks. Then I redeployed and the map came back empty.

0
ProgrammingDEV Community ·

Federated Threat Intelligence: Sharing IOCs Without Sharing Content

The fundamental problem in threat intelligence is latency. Organization A detects a novel prompt injection. Organizations B, C, and D won't see it until someone writes a blog post, a vendor updates a signature, and a SIEM rule gets deployed. In AI security, that latency window is measured in hours — and attacks iterate faster than that. I've been building AegisGate — an open-source AI security platform — and we just shipped a federated threat intelligence system that closes that gap.

0
ProgrammingDEV Community ·

Security Audit Report: Reentrancy & Access Control Review: Portal

Security Audit Report: Reentrancy & Access Control Review: Portal Target Protocol: Portal (TVL: $1947.2M) Protocol: Portal Scope: Core Smart Contracts (Ethereum Mainnet & L2s) TVL Context: $1,947.2M Date: October 26, 2023 Auditor: Senior DeFi Security Research Team This report presents the findings of a targeted security audit focusing on Reentrancy Vulnerabilities and Access Control Mechanisms within the Portal protocol’s core smart contract suite. Given the protocol’s significant Total Value Locked (TVL) of $1.947B, the integrity of state management and permissioned functions is critical to

0
ProgrammingDEV Community ·

The Flattery Tax: I pressure-tested 29 LLMs with confident wrong users — the frontier held, the small ones folded

This is a submission for the Kaggle Benchmarking Challenge The capability I set out to measure: does a model keep a correct belief when a I kept hitting the same thing in real use. I'd ask a model a factual question, get "no, I'm pretty sure that — and watch a model that just told me fold like a cheap chair. The knowledge was there. The spine wasn't. Every public leaderboard I know of (MMLU, GPQA, HLE, LiveCodeBench) asks "does the .

0
ProgrammingDEV Community ·

Why Your TypeScript Code Still Crashes in Production: Validating Data at Runtime Boundaries with Zod

Mình từng review một incident lúc 2 giờ sáng: service Node.js crash hàng loạt với lỗi TypeError: Cannot read properties of undefined (reading 'toFixed'). Codebase 100% TypeScript, bật strict: true, CI xanh, không có any nào. Vậy mà vẫn sập. Nguyên nhân là bên đối tác đổi field price từ number sang string "12.50", và có record thì trả về null. TypeScript không hề biết chuyện này, vì type chỉ tồn tại lúc compile, còn data thật đến lúc runtime.

0
ProgrammingDEV Community ·

Image Optimization and WebP Basics — Why WebP Is Smaller, and How Browsers Decide to Use It

It's often cited that the biggest drag on WordPress page speed isn't code at all — it's images. The same-looking photo can end up dramatically smaller in file size depending on whether it stays as JPEG/PNG or gets converted to WebP. This post looks at why WebP tends to be lighter, how browsers negotiate which format to load, and how WordPress itself has adopted the format over time. JPEG, standardized back in 1992, is built on discrete cosine transform (DCT) compression. WebP, introduced by Google in 2010, takes a different route: it repurposes the intra-frame compression techniques from the V

0
ProgrammingDEV Community ·

Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials

Apache Zeppelin on the Internet: 25,617 Fingerprint Matches and a Notebook With Cluster Credentials Why a notebook server is a high-value service Zeppelin is a web-based notebook that executes code against data platforms. To be useful it needs credentials for the warehouse, the object store and the cluster it queries. A notebook is therefore an interactive shell with the data platform's identity, presented in a browser. app="Apache Zeppelin" returned 25,617 matches and title="Zeppelin" returned 5,490, both on 28 September 2026. The gap between the two is substantial, which is expected: the fin

0
ProgrammingDEV Community ·

Running a 180B-Parameter MoE Model on a Gaming Laptop: VIDRAFT's POCKET-Darwin-180B-GGUF

Running a 180B-Parameter MoE Model on a Gaming Laptop: VIDRAFT's POCKET-Darwin-180B-GGUF TL;DR: VIDRAFT has released POCKET-Darwin-180B-GGUF, a 4-bit quantized, GGUF-format version of their 180B Mixture-of-Experts model that runs on consumer hardware — including a gaming laptop with 8 GB VRAM and 32 GB RAM. By combining MoE sparse activation with llama.cpp-based SSD streaming, only ~3B parameters are computed per token at inference time, slashing hardware requirements by roughly 250× compared to the full-precision server setup. Developers working on air-gapped or on-device deployments should p

0
ProgrammingDEV Community ·

Contract-First Engineering in Distributed Core Banking

In enterprise core banking modernizations, microservice decomposition often creates an unexpected governance failure: Semantic Drift. When dozens of distributed product teams build microservices independently, subtle discrepancies emerge between architectural specifications and real-world implementations. A field defined as ISO4217 currency string in a central domain model might be implemented as a raw string in one service, a numeric currency code in another, or omitted entirely in an asynchronous event payload. Relying on a "Code-First" development approach—where engineers write Java control

0
ProgrammingDEV Community ·

How to Build a Podcast Intro Generator

What You’ll Build By the end of this post you’ll have a tiny but powerful “Podcast Intro Generator” that: Accepts a podcast title, host name, and a short tagline. Dynamically stitches those strings together into a polished intro script. Sends that script to a text‑to‑speech engine. Returns a high‑quality audio clip you can drop straight into your podcast editing workflow. We’ll use ElevenLabs for the heavy lifting—its API gives us instant, human‑like voices and even voice‑cloning capabilities.

← NewerPage 609 of 3146Older →