SShortSingh.

Programming

0
ProgrammingDEV Community ·

rag-critic: Open-Source Tool Flags Ungrounded Claims in LangGraph RAG Pipelines

The developer released rag-critic on PyPI, a lightweight auditor that checks LLM-generated drafts against retrieved source chunks to catch hallucinations in retrieval-augmented generation systems. The author argues that silent, unsupported claims are a bigger production risk than retrieval latency, and that holistic LLM-as-a-judge scoring is too coarse and slow. Unlike paragraph-level evaluation, rag-critic assesses individual claims, labeling each as supported or ungrounded and producing a grounding score and hallucination index. It is designed to plug into LangGraph as a checkpoint node, with conditional routing that approves grounded output, requests a rewrite for minor gaps, or triggers re-retrieval for heavy hallucination. The project's code and installation instructions are available on GitHub and PyPI.

0
ProgrammingDEV Community ·

Why grading an AI agent's final answer misleads teams, and how to evaluate it properly

A practical guide argues that judging an AI agent only by its final message hides failures, since an agent can reach a correct outcome through faulty tool use. It proposes a layered set of eight metrics that move from outcomes inward, including tool selection and parameter accuracy. The guide stresses consistency across repeated runs, noting that an agent succeeding 75% of the time clears three consecutive runs only about 42% of the time. It also recommends calibrating LLM-as-a-judge graders against human-labeled examples, mitigating known judge biases such as position and length preference, and converting real production failures into regression tests.

0
ProgrammingDEV Community ·

Nine Checks for Reviewing a Machine-Shop Quote Spreadsheet Before Sending

A quote spreadsheet can be simple yet dependable, with the main risks being hidden assumptions, mixed units, or prices that cannot be explained later. The article recommends a nine-point review, including separating setup and tooling costs from per-part costs, labeling time units, and clarifying whether a rate is break-even, fully burdened, or a sell rate that already includes profit. It explains how to calculate expected starts when scrap is expected, and why margin and markup must be applied with distinct formulas and labeled clearly. It also advises listing each process cost separately, comparing results against minimum charges, and recording quote details so the spreadsheet serves as an audit record. The author, who works on ShopQuote Flow, notes that their free template is a starting point rather than a replacement for a shop's own costing policy.

0
ProgrammingDEV Community ·

Planning a Small Business VoIP Phone System with Asterisk and FreePBX: A Checklist

A VoIP phone system's success depends more on upfront planning than on the software itself, according to a Karachi-based development team that deploys Asterisk and FreePBX systems. The guide advises mapping call flows first, including business-hours routing, IVR menus, ring groups, queues, and voicemail fallback. It recommends sizing capacity by peak concurrent calls rather than total headcount, which determines SIP trunk channels, bandwidth, and server needs. FreePBX is presented as a balanced choice for most small offices, offering a web interface for routine changes while retaining Asterisk's full flexibility. Buyers are also urged to evaluate SIP trunk providers on number availability, channel counts, rates, number porting, and support, and to obtain carrier quotes separately from PBX setup costs.

0
ProgrammingDEV Community ·

Job board scraper bug: Greenhouse ages reset by edit dates, not posting dates

A developer found that a scraper showed zero Greenhouse job postings older than six months, which is implausible for a live job board. The cause was reading an edit timestamp (updated_at) rather than the first-published date, so every recruiter edit reset a listing's apparent age. Switching to the first_published field changed the share of listings older than 180 days from 0.0% to 14.5% across 259 companies. Measured across Greenhouse, Ashby, and Lever boards, the median open role had been posted about 51 days earlier, with roughly 14% older than six months. The author notes that long-running open listings are not necessarily fake, since some teams keep rolling requisitions open for ongoing hiring.

0
ProgrammingDEV Community ·

How to Check SPF, DKIM and DMARC Records and Fix Common Email Authentication Errors

A common deliverability problem occurs when a business's invoices suddenly stop reaching recipients because the domain cannot prove its emails are legitimate. The author, who built the free PixelValut DNS and email tools, explains that SPF, DKIM and DMARC are TXT records that together verify a message really came from the sender's domain. The guide recommends first listing every service that sends mail on the domain, such as mailbox providers, transactional senders and marketing tools. It then walks readers through locating the SPF record in DNS lookups and checking for duplicates, excessive DNS lookups, and risky settings like +all. Readers are also shown how to find the DKIM selector in message headers so the public key can be verified.

0
ProgrammingHacker News ·

No Source Code? No Problem: ACM Queue Article on Working Without Source

An article on ACM Queue, the Association for Computing Machinery's practitioner magazine, is drawing attention on Hacker News, where it has received 10 points and one comment. The piece is titled "No Source Code? No Problem" and is available at the ACM Queue site under its published DOI. The available material does not include the article's full text, so its specific arguments cannot be summarized here. The item was surfaced on Hacker News, a technology discussion forum run by Y Combinator.

0
ProgrammingHacker News ·

A Whirlwind Tour of systemd-nspawn Containers

A blog post on quantum5.ca offers a brief introduction to systemd-nspawn, the lightweight container tool bundled with systemd. The article walks readers through the basics of setting up and running containers with it. The piece is shared on Hacker News, where it has gained a few points and a single comment. The source text provided contains only the link and discussion metadata, so the specific technical details covered in the post are not described here.

0
ProgrammingDEV Community ·

SnapTicket Turns Client-Side Crashes Into Engineering Tickets Automatically

SnapTicket is a tool designed to close the gap between vague user crash reports and the structured issue trackers engineering teams rely on. It combines macOS diagnostic crash logs (.ips files) with screenshots of on-screen errors, using the Gemma 4 model to correlate the two and identify the likely cause. Users can choose to attach visual evidence or send a text-only report for privacy reasons. The resulting tickets are dispatched either directly through the GitHub REST API or staged for submission through a browser-based assistant.

0
ProgrammingDEV Community ·

Critical FortiSIEM flaw CVE-2026-106173 enables privileged file overwrite via gRPC

Fortinet has disclosed CVE-2026-106173, a critical path traversal vulnerability in the phQueryMaster service of its FortiSIEM security information and event management platform. The flaw lies in a gRPC interface on TCP port 27918, which builds file paths from caller-supplied query identifiers without adequate validation. Attackers could exploit it to overwrite a script that cron runs every minute with elevated privileges, granting code execution. Horizon3.ai has published a technical analysis and proof-of-concept, and Fortinet recommends upgrading to version 7.5.1 or later, or restricting access to the affected port in the interim. This is the third FortiSIEM vulnerability Horizon3 has reported, following two earlier flaws in a different service.

0
ProgrammingDEV Community ·

KubeSilicon Lets Developers Run Linux VMs on Apple Silicon Macs via Kubernetes

KubeVirt cannot run on Apple Silicon Macs because it depends on KVM, which macOS lacks. The author, who maintains the private cloud operator VirtFoundry, built KubeSilicon to fill that gap for local development. Users declare a SiliconVM object in a local cluster, and a daemon running on the Mac boots a Linux ARM64 guest using Apple's Virtualization.framework. Pods in the cluster can then reach the VM by IP or DNS name, and the author reports VMs reaching Running in about six seconds once the image is cached. The project is validated only on kind with Docker Desktop and is a separate API from KubeVirt, aimed at laptop use rather than production Linux servers.

0
ProgrammingDEV Community ·

12 Free Browser-Based PDF Tools for Developers, No Upload or Sign-Up Needed

A developer who runs DonePDF, a free site offering over 90 PDF utilities, has highlighted a dozen tools suited to developer workflows. Most of these tools run entirely in the browser, so files never leave the user's machine and no account is required. The featured tools cover conversions between PDF and formats such as Markdown, JSON, HTML, and Base64, plus diffing, validation, analysis, sanitizing, and repair. The browser tools rely on open-source libraries including pdf.js, pdf-lib, Fabric.js, and Tesseract.js, while a few heavier tasks still run on the server and are labeled as such. The author invited readers to suggest further PDF tasks they handle manually or by script.

0
ProgrammingDEV Community ·

Pairing Cron Triggers with Worker Queues for Long-Running Healthtech Reports

A developer guide describes using a nightly cron job to publish a single idempotent reconciliation request, rather than running long reports directly inside the scheduler. A worker queue consumer then handles the slow report generation, retries, completion tracking, and email delivery. The article explains that standard queues are at-least-once, so consumers must be idempotent, and recommends keeping trigger messages small with a deterministic job key. It notes cron's 900-second execution limit and that missed triggers are not backfilled, making deliberate replay procedures necessary. The piece also includes a TypeScript snippet for discovering a queue capability schema before implementing the publish call.

0
ProgrammingDEV Community ·

Building an Event Recommendation Engine with Ahnlich and PostGIS

A developer describes how they built the recommendation system for Eventa, a distributed event ticketing platform for organizers and attendees. The platform runs eight backend services across NestJS and Go, communicating via gRPC, HTTP, Kafka, and RabbitMQ, with each service maintaining its own PostgreSQL database. The article focuses on the Discovery Service, which indexes published events and uses Ahnlich, a vector database for semantic search, to match events with attendee interests. Geographic searches and distance calculations are handled separately using PostGIS, a PostgreSQL extension. The developer explains that the project moved from a local Docker Compose setup to a VPS because their PC could no longer handle the containers.

0
ProgrammingDEV Community ·

Guide Outlines Criteria for Choosing an AI Text-to-Speech Voice

A developer guide explains that the voice is the first point of contact for users in voice-enabled products such as navigation apps, e-learning platforms, and chatbots. It notes that modern neural text-to-speech models can closely mimic human prosody and accents, but the number of options can be overwhelming. The article recommends first defining the voice persona, covering tone, accent, language, and expressiveness. It then compares providers including ElevenLabs, Google Cloud, Amazon Polly, and Microsoft Azure on naturalness, cost, and integration, and highlights voice cloning and licensing terms as further considerations.

0
ProgrammingDEV Community ·

Blueprint Outlines Modular Micro-SaaS Stack Using FlutterFlow, Supabase and Celery

A DEV Community article presents an implementation blueprint for a micro-SaaS built with FlutterFlow on the client, Supabase for authentication and PostgreSQL, and Celery for background jobs. A server-side API sits between the client and privileged job creation, validating ownership, quotas, and idempotency keys before committing a job and outbox event in one database transaction. A dispatcher then publishes events to a broker, where Celery workers execute tasks and store results for the client to read with authorized access. The author stresses that the design is not a measured throughput benchmark, since capacity depends on workload, connections, broker setup, and worker concurrency. The included database migration has not been run and must be validated in staging, and the article discloses AI assistance and related products from its publisher.

0
ProgrammingDEV Community ·

How to Spot Phishing Messages Before You Click on Them

Phishing messages are a common way attackers compromise accounts, usually by tricking people into clicking links or entering passwords on fake pages rather than through technical hacking. Warning signs include sender addresses that differ from the displayed name, misspelled or lookalike domains, and urgent demands such as account closures or failed payments. Requests for passwords, one-time codes, card numbers, or remote device access are strong indicators of fraud, since legitimate banks and major services generally do not ask for them via message. Experts recommend previewing links before opening them, navigating directly to official sites, and enabling two-factor authentication so a stolen password alone is insufficient. If a phishing attempt succeeds, changing the affected password, ending other sessions, and contacting the bank when financial data is involved are advised, along with reporting the message to the impersonated service.

0
ProgrammingDEV Community ·

Tool Lets One Laptop Keep Multiple GitHub Accounts From Impersonating Each Other

A developer describes how Git and the gh CLI assume a single identity per machine, causing commits authored under the wrong email, pushes made through an unintended account, and confusing permission errors. The problem spans four layers: commit author settings, SSH key selection, the gh CLI's single active account, and HTTPS credential storage. The article notes that common workarounds such as SSH host aliases fix only one layer and leave others broken. It introduces ghidmgt, a tool designed to keep several already-authorized accounts on the same machine separate. The author also cautions that whether a device may legitimately hold a given account is a matter for contracts and employer policy rather than configuration.

0
ProgrammingHacker News ·

Sony Discontinues Its Last Standalone 4K Blu-ray Player in Japan

Sony has reportedly ended sales of its final standalone 4K Blu-ray player in Japan. With that model gone, the PlayStation 5 remains the only 4K Blu-ray option Sony offers there. The move reflects the continued decline of dedicated disc players as streaming gains ground. The source article on TechPowerUp covers the discontinuation, while the available text provides few additional details.

← NewerPage 63 of 2897Older →