SShortSingh.

Programming

0
ProgrammingDEV Community ·

Why Human vs. AI Sample Efficiency Comparisons Are Misleading

Debates over how much data AI models need compared to children hinge entirely on what researchers choose to count, making any single ratio more a reflection of methodology than reality. A child's learning input extends far beyond words to include objects, faces, actions, and causally structured experiences, meaning word-count comparisons capture only a fraction of human input. The comparison is further complicated by the lack of a fixed benchmark, since a child and a language model do not demonstrate competence in the same ways or on the same tasks. Whether evolutionary optimization should be counted as a form of pretraining for humans is a genuinely unresolved question that can shift the result by orders of magnitude. Researchers have identified at least five distinct ways to frame the comparison, each measuring a different quantity, and conflating them is the primary source of confusion in the field.

0
ProgrammingDEV Community ·

Google Gemini Integrates OpenTable to Book Restaurant Reservations via Chat

Google Gemini Apps has added direct integration with OpenTable, allowing users to search for restaurant availability and make reservations through plain-language requests. The feature supports checking availability, making new bookings, looking up existing reservations, and cancellations, though modifying a booking redirects users to the OpenTable app. It is currently limited to US residents aged 18 and older who are signed into a personal Google account with English as the supported language. The integration is accessible via both the Gemini mobile app and the web interface at gemini.google.com. Notably, Gemini cannot process payments, display menus, or show reviews within the reservation flow, making it a streamlined booking tool rather than a full replacement for OpenTable.

0
ProgrammingDEV Community ·

Meteor 3.5 introduces pluggable DDP transport with uWebSockets.js support

Meteor 3.5 replaces its long-standing, tightly integrated SockJS WebSocket transport with a pluggable architecture, allowing developers to swap transport implementations. SockJS remains the default, meaning existing applications are unaffected unless a change is explicitly requested. Developers can opt into uWebSockets.js — a high-performance C/C++ WebSocket server — by setting a single environment variable: DDP_TRANSPORT=uws. Switching to uWebSockets.js also eliminates the SockJS browser shim, enabling clients to connect via native WebSocket instead. The new transport registry is available in Meteor 3.5, which can be enabled for new or existing apps via the Meteor CLI.

0
ProgrammingDEV Community ·

The Real Cost of Deploying a Robot: Every Factor That Drives the Payback Formula

A detailed breakdown of industrial robot deployment costs reveals that the hardware purchase price is just one of over a dozen cost components, and rarely the largest. Key capital expenditures include tooling, fixturing, safety equipment, facility changes, and integration engineering — the last of which typically constitutes the single biggest line item. Ongoing costs such as downtime, software licensing, maintenance, and residual human supervision can significantly erode projected savings. A widely cited industry rule of thumb suggests total installed cost runs two to three times the arm price alone. The true payback period is calculated by dividing total CapEx by the net annual benefit, which must account for availability, utilization, and all recurring costs.

0
ProgrammingDEV Community ·

What Is XSS? How Cross-Site Scripting Attacks Work and How to Stop Them

Cross-site scripting (XSS) is a web security vulnerability that allows attackers to inject malicious code into trusted websites, where it executes inside visitors' browsers without their knowledge. The attack does not require server access — it exploits any site feature that displays user-submitted input, such as comment boxes or search fields, without properly sanitizing it first. XSS comes in three main forms: stored, reflected, and DOM-based, with stored XSS considered the most dangerous because a single malicious submission can affect every subsequent visitor to that page. Once executed, such scripts can steal session cookies, hijack admin accounts, inject fake payment forms, or redirect users to phishing pages. OWASP, the leading web security nonprofit, classifies XSS under its Top 10 critical risks, making it a priority concern for any site owner running forms or user-generated content.

0
ProgrammingDEV Community ·

How Random Forests Cut Variance: The Math Behind Bagging and Tree Averaging

Random forests reduce prediction variance by averaging many deep, unpruned decision trees, each trained on a different bootstrap sample of the data. Random feature selection at every split ensures trees remain diverse, preventing a single dominant feature from making all trees look alike. A mathematical identity shows that the mean squared error of an ensemble always equals the average individual tree error minus the spread among trees, explaining why diversity directly drives accuracy gains. Each tree leaves out roughly 37% of training rows, enabling out-of-bag error estimation as a free, honest validation method without a separate holdout set. Unlike boosting, adding more trees to a random forest converges to an error floor and cannot overfit, making the two methods fundamentally different in how they use depth, data, and sequential dependence.

0
ProgrammingHacker News ·

Grok 4.6 Scores 61 on Artificial Analysis Intelligence Index

xAI's Grok 4.6 has been evaluated on the Artificial Analysis Intelligence Index, achieving a score of 61. The benchmark results and analysis were published by Artificial Analysis, a platform that tracks and compares AI model performance. The score positions Grok 4.6 within the broader landscape of competing large language models. The release attracted discussion in the AI community, with the findings shared on Hacker News.

0
ProgrammingDEV Community ·

OpenClaw vs Hermes Agent: Two Rival Open Source AI Frameworks Compared

OpenClaw and Hermes Agent have emerged as two of the most discussed open source autonomous agent frameworks in 2026, each taking a fundamentally different approach to AI task automation. OpenClaw treats agents as a team of workers, using Markdown-based identity files to define each agent's role, memory, and behavior, making it suited for structured, multi-agent workflows. Hermes Agent, released by Nous Research in February 2026, focuses on a single self-improving agent that automatically distills complex tasks into reusable skills and refines them over time. Hermes gained over 215,000 GitHub stars within weeks of launch, making it one of the fastest-growing agent projects of the year. Developers are advised to choose OpenClaw for team-oriented, deterministic setups and Hermes for a continuously learning, solo agent experience.

0
ProgrammingHacker News ·

HTML over WebSockets enables real-time SPAs with minimal JavaScript

A developer has published a blog post exploring an approach to building real-time single-page applications using HTML delivered over WebSockets instead of relying heavily on JavaScript. The technique aims to simplify front-end development by pushing HTML updates directly from the server to the client. This reduces the amount of client-side JavaScript needed to manage dynamic UI changes. The article was shared on Hacker News, where it received early attention from the developer community.

0
ProgrammingDEV Community ·

Rust API Design: How to Manage Type Changes Without Breaking User Code

A technical guide on advanced Rust API design warns developers to think carefully before making interface changes visible to users, as frequent backward-incompatible updates frustrate downstream consumers. The article explains that even subtle modifications—like adding a field to a public struct—can silently break existing user code that previously compiled without issue. To minimize this risk, developers are advised to use Rust's visibility modifiers such as pub(crate) and pub(in path) to limit how much of an API is publicly exposed. The fewer public types an API surfaces, the greater the freedom a developer retains to make internal changes later. The guide also introduces the non_exhaustive attribute as a tool to signal that types may grow over time, helping users write more future-proof code.

0
ProgrammingDEV Community ·

Five Strategies for Handling AI Prompts That Exceed Context Window Limits

As AI-powered chat applications grow longer, developers face the challenge of deciding what conversation history to drop when prompts exceed a model's context window. Engineers must preserve certain elements at all costs, including the system prompt, the latest user message, and paired tool calls, since losing these causes functional failures rather than mere quality dips. Five truncation approaches exist, ranging from crude hard string cuts to sophisticated retrieval-based systems, ranked by how much useful information they retain per token. Most production applications are advised to use the middle-out strategy, which drops mid-conversation content while preserving the opening context and recent exchanges. Developers are also urged to handle truncation themselves rather than delegating it to the AI provider, ensuring they can log dropped content, notify users, and apply different strategies across product features.

0
ProgrammingDEV Community ·

Researcher Demonstrates C2-Style Control Over ChatGPT Sandbox at Black Hat 2026

A security researcher at Black Hat USA 2026 claimed to have achieved command-and-control-style access over ChatGPT's code execution sandbox, reportedly by combining prompt manipulation with abuse of the model's own tool-use capabilities. Unlike traditional sandbox escapes that exploit memory bugs or kernel vulnerabilities, this attack allegedly leveraged the language model's reasoning behavior as an attack primitive to break isolation assumptions. The finding drew little public attention online, which the author argues reflects a broader numbness to AI security disclosures rather than a lack of severity. Security experts note that the AI safety conversation has focused heavily on conversational-layer prompt injection while the underlying execution environments have received comparatively little scrutiny. No detailed technical writeup has been published yet, making it difficult to fully assess the scope and reproducibility of the claimed capability.

0
ProgrammingDEV Community ·

How a Simple YAML File Can Make AI Prompts Maintainable and Operational

A developer on DEV Community argues that storing AI prompts as plain string constants makes them difficult to maintain over time, especially as team ownership changes. The proposed solution is a structured YAML metadata file kept alongside each prompt in the same code repository, capturing details such as inputs, output schemas, model parameters, costs, and dependencies. A key component of this approach is a 'fails_when' section, where the original prompt author documents specific measurable signals, numeric thresholds, and first-response actions to guide on-call engineers during incidents. The author emphasizes that this institutional knowledge — such as which metric degrades first or whether a failure stems from a model change rather than the prompt itself — typically decays within weeks if not recorded. The article estimates the setup takes roughly twenty minutes per prompt and frames the recipe file as an operational artefact rather than mere documentation.

0
ProgrammingDEV Community ·

Prompt Engineering in 2026: What Actually Works and Why Most Tricks Faded

A technical analysis published on DEV Community argues that most early prompt engineering tricks failed because they added no real information to the model's context, only attempted to nudge its behavior. The author divides prompting techniques into two categories: 'information,' which supplies facts the model cannot infer, and 'elicitation,' which tries to coax better behavior from knowledge the model already has. Elicitation phrases like 'be thorough' or 'you are an expert' were useful against older models but have become redundant as instruction tuning improved and careful responses became the default. Techniques that still hold up include providing specific contextual facts, using a single well-formed output example, stating constraints in checkable terms, and decomposing complex tasks into verifiable steps. The article also notes that chain-of-thought prompting is now largely obsolete for reasoning models, with OpenAI itself advising against adding such instructions to its reasoning-focused model series.

0
ProgrammingDEV Community ·

How to Build a Private Local AI Server Using Ollama on Debian or Fedora

A developer guide published on DEV Community walks through setting up a fully private, self-hosted AI server using Ollama on a Debian-based machine, eliminating reliance on cloud services and recurring subscription fees. The setup requires a capable NVIDIA GPU with at least 8GB VRAM, 16GB of RAM, and an NVMe SSD, with NVIDIA hardware preferred due to its CUDA core advantage. Ollama, an open-source tool, handles model downloads and execution while exposing a local API on port 11434, and Open WebUI can be layered on top via Docker to provide a ChatGPT-like browser interface. Supported models include Meta's Llama 3, Mistral, DeepSeek Coder, and Microsoft's Phi-3, each suited to different use cases such as general tasks, coding, or low-power hardware. Advanced features like RAG — feeding the AI private PDFs or contracts — and VS Code integration via Continue.dev are highlighted as key benefits of keeping AI processing entirely on a local network.

0
ProgrammingDEV Community ·

Why 'Prompt Engineer' Splintered Into Other Roles Rather Than Disappearing

The title 'prompt engineer' never described a single job but rather four distinct activities: discovery, craft, systematisation, and evaluation, which emerged simultaneously when working with AI models was still largely experimental. As the field matured, each activity migrated into existing roles — craft merged into application engineering, systematisation became standard software practice, and evaluation grew into its own discipline on larger teams. Discovery, the most prominent early activity, had the shortest lifespan since documented techniques quickly replaced the need for individual experimentation. A structural problem also hastened the role's fragmentation: prompt authors who did not own the surrounding system had no way to measure whether their changes worked, making the standalone role untenable. The broader pattern mirrors how every new technical skill eventually gets absorbed into the roles that control the systems it depends on.

0
ProgrammingDEV Community ·

Developer warns: reading a client's repo, not running it, exposed a likely crypto scam

A software developer received a request from a prospective client to clone their repository, run it locally, and share a screenshot of the landing page ahead of a call. Recognising that executing unknown code risked exposing wallet keys, API tokens, and active browser sessions via malicious install hooks, the developer chose to read the codebase remotely instead. A forty-minute manual review revealed serious red flags: smart contracts that either burned user deposits or allowed anyone to drain unlimited rewards, a frontend containing assets from an unrelated real product, and a generic e-commerce backend with no connection to the claimed decentralised exchange. The repository had a single commit with no development history, and a tracked .env file ready to capture credentials. The developer identified the approach as a well-documented fake-recruiter attack pattern and advised others to read unfamiliar repositories rather than execute them.

0
ProgrammingDEV Community ·

Why a Green CI/CD Pipeline Does Not Guarantee a Safe Production Deploy

Engineering teams commonly equate a passing CI/CD pipeline with a safe deployment, but this assumption breaks down in predictable ways. Pipelines verify that code behaves correctly in test conditions yet rarely confirm whether the target production environment still matches what was tested against. Database migrations that run instantly on small test datasets can cause prolonged table locks and outages when applied to production tables with tens of millions of rows. Rollback procedures are another blind spot, often untested until an actual incident reveals missing images or schema incompatibilities. Over time, staging environments also drift from production through accumulated shortcuts, meaning a green pipeline may be validating code against conditions that no longer reflect reality.

0
ProgrammingDEV Community ·

8 Linux Myths That Still Trap Experienced Engineers in Production

A DevOps engineer writing for DEV Community outlines eight persistent Linux misconceptions that continue to affect even seasoned sysadmins and systems engineers. The article draws on a real 2021 incident where a 15-year veteran dropped the filesystem cache in production, causing a five-minute application outage as the kernel scrambled to reload data from disk. Key myths addressed include misreading the 'free' memory column instead of 'available', and blindly setting vm.swappiness=0, a practice whose behavior changed significantly after Linux kernel version 3.5. The author argues that Linux internals around memory management, process scheduling, and container isolation have evolved substantially over two decades, making outdated assumptions genuinely dangerous. The piece urges engineers to validate their understanding against current kernel mechanics rather than relying solely on years of accumulated experience.

← NewerPage 64 of 1218Older →