SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Detection and verification limits for CVE-2026-96364 on a live Drupal estate

Detection and verification limits for CVE-2026-96364 on a live Drupal estate Vulnerability overview CVE-2026-96364 is listed in CERT-BUND WID-SEC-2026-3554, published 23 September 2026, covering 36 identifiers and 16 contributed Drupal projects. The advisory is rated high, flagged remotely exploitable, and carries CVSS version 3.1 base score 98 with temporal score 85. Patch availability is confirmed by the advisory's patch field. The batch record does not publish a trigger for CVE-2026-96364, which constrains detection. A network signature needs a request pattern, and a file integrity signatur

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

레고 CAD를 AI가 만든다 – 1인 개발자가 저예산으로 바로 써볼 수 있을까

프로젝트가 뭔데? 야, ChatGPT가 레고 조립 코드를 만든다고? 원문에 따르면 LDraw라는 레고 조립 전용 언어(.ldr, .mpd)를 GPT‑6 Astra와 Opus 5.5가 자동 생성하도록 만든 파이썬 툴셋을 Docker 이미지로 배포했대. 웹 UI가 포함돼서 OpenAI, Claude, OpenRouter 등 여러 모델을 선택해 LDraw 파일을 만들 수 있다. 결과물은 LDView·LeoCAD·Studio 같은 뷰어에서 바로 열어볼 수 있지.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Two ways a simple LLM token counter goes wrong (with a demo you can run)

A common first version of an LLM spending limit looks like this: let used = 0; async function call(prompt: string) { if (used + ESTIMATE > LIMIT) throw new Error("quota exceeded"); // check const res = await provider.complete(prompt); // call used += res.usage.totalTokens; // add return res; } It reads correctly. It has two defects, and both show up only under load or failure, which is when a spending limit matters. Everything below is reproducible without an API key. The "provider" in the demo is a 5 ms timer. The code is in llm-quota-guard (MIT).

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Resizing a photo to 1200x630 without stretching: why the result can be 840x630

A photo that looks stretched usually has a width-to-height ratio that differs from its original. Resizing a 4:3 photo into a 16:9 rectangle by changing both dimensions independently makes the objects in it wider or narrower. Keeping the aspect ratio avoids that distortion. It doesn't mean the result will fill every box you give it, though. That distinction matters when a website asks for an image at a specific size.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Visa Open-Sourced Its AI Cyber Defence — and Quietly Let Agents Spend

On September 29, 2026, Visa's President of Technology Rajat Taneja told Reuters the company open-sourced part of its AI-powered cyber defence after "humbling" AI-model vulnerabilities — and confirmed Visa has started allowing certain AI agents to use Visa. Today's Reuters story has two halves and only one got the headline. Open-sourced part of its AI cyber defence. The trigger: weaknesses exposed by Anthropic's Mythos AI model earlier in 2026, and an AI-agent attack on the Hugging Face platform where models escaped a testing sandbox. Taneja: "we have seen the trailer...

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Logistics Control Room: 4 Internal Admin Dashboard CRUD Signals for Feature Flags

Short answer: page on a missed business result, not on a flag changing. For a logistics import, the least complex useful design is an internal control page backed by a small service that can set, list, toggle, and retire flags, while the scheduled worker emits four separate signals: run started, run completed, records accepted, and records rejected. Show the flag revision beside those signals. The on-call can then decide whether to retry an import, revert a flag, or investigate the upstream feed. The alert arrives at 04:20: manifest_import_results_absent for depot north-17.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Artifactory Is Under Active Attack: 3 Checks in 30 Minutes

A research report published Thursday describes four weeks of active exploitation of JFrog Artifactory, the artifact registry that sits in front of most Java and DevOps build pipelines. Attackers chain two patched CVEs to turn a single unauthenticated request into an admin-scoped token, and the tell is uncomfortable: every request they make afterward shows up in your logs as token:anonymous, an actor name that looks exactly like background noise. CISA has all three CVEs on the Known Exploited Vulnerabilities catalog, and the federal remediation deadline for two of them is September 25. I write

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Set Spending Limits for AI Agents: enforce at the payment layer, not the prompt

Never put the limit in the agent's prompt — enforce it outside the agent, at the payment layer. A per-payment cap the agent cannot raise, a daily ceiling with a kill switch, and a scored confidence gate that auto-approves cheap high-confidence spends, holds medium ones for review, and blocks everything else. Every decision logged. This is the week the question went from theoretical to personal. Between Sept 22–26, 2026, four independent signals landed: Sept 24 — WIRED (Zoë Schiffer): her AI agent "saved me $550, booked my restaurant reservations, and warned me about a phishing scam.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why I built a spaced-repetition app for coding drills

I used to read a solution, nod, and move on. A week later I could not write the same thing from scratch. Understanding something while it is on the screen and being able to produce it yourself are different skills, and only the second one helps in an interview or on a real project. That is why I built Daily Coding, a free web app of short drills for JavaScript/TypeScript, SQL and page building. Each drill is small enough to finish in a minute or two.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GTM Skills: เมื่อทักษะขายกลายเป็นไฟล์ที่ AI agent ติดตั้งได้เอง

GTM Skills: เมื่อทักษะขายกลายเป็นไฟล์ที่ AI agent ติดตั้งได้เอง โดย Nokka (นก-กา) | 3 ตุลาคม 2569 ถ้าคุณเคยรู้สึกว่าทำงานหาลูกค้าแล้วต้องเปิดเครื่องมือใหม่ทุกครั้งที่งานเปลี่ยนโหมด วันนี้มีของที่อาจทำให้คุณต้องคิดใหม่ [4] GTM Skills คือชุดทักษะสำเร็จรูปสำหรับงานขายและหาลูกค้าแบบ B2B ที่แพ็กมาเป็นไฟล์ข้อความธรรมดา แล้วให้ AI agent ของคุณเรียกใช้ได้เลย ไม่ต้องต่อ API เอง ไม่ต้องจ้างเอเจนซี [1] ผมอ่านทั้ง repo ทั้งหน้าคู่มือ แล้วพบว่าของจริงน่าสนใจกว่าที่คำโปรยบอก แต่ก็มีข้อควรระวังที่คนเขียนคำโปรยไม่ได้เล่า ภาพแนวคิด คือเครื่องมือที่จัดเป็นชุดพร้อมหยิบใช้ตามงาน แทนการต้องหาซื้อใหม่ทุกครั้งที่งาน

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Sprint & Stamina | UE5 Devlog

This devlog showcases my Blueprint-based sprint and stamina system and its integration with the player’s health and thirst. Hydration decreases at a normal rate while walking. Sprinting consumes stamina and accelerates hydration loss, giving faster movement an additional resource cost. Once stamina is depleted, the extra hydration drain from sprinting stops, while the normal drain continues. If hydration reaches zero, the player begins losing health.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

x402 Foundation Members: The Full 40-Member Roster (And the Honest Caveat)

The x402 Foundation — the Linux Foundation body stewarding the x402 machine-payment protocol — has 40 member organizations as of its July 14, 2026 operational launch. Every article covers the announcement; nobody published the full roster as infrastructure intelligence. So here it is: all 40, by tier, with what each heavy hitter structurally adds. April 2, 2026: intent to launch at the MCP Dev Summit ("4/02 Day"). Coinbase contributes x402 to the Linux Foundation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

A SwiftUI search adapter needs its own request ownership

Robin Winters · October 3, 2026 · Native iOS engineering and fitness technology This standalone teaching example and article were prepared with coding-assistant support. The events are synthetic. The code is separate from ShowFlex, whose shipped iPhone product is available on the App Store. A search controller can correctly reject stale requests while its view adapter still publishes the wrong state. The useful question is not only whether the controller owns its result: it is whether the task waiting for that result still owns the screen.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Jev Decides, x402 Pays: The Decision-Only Model and Its Missing Payment Layer

Jev is a week old and already the most interesting model launch of September 2026. TypeSafe AI — founder Diogo Almeida (ex-OpenAI, ChatGPT research), two years in stealth, $40M seed led by DCVC — shipped a model that refuses to generate text. You send it state (text or JSON) plus questions with predefined answers. It returns typed decisions: Choice (one of up to 255 options), Score (numeric rating), Noul (yes/no with probability) — each with calibrated confidence. All questions evaluate in one forward pass.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

What BlackRock's 'The Machine-Native Economy' Actually Says About x402 (With Receipts)

BlackRock's Digital Assets Research team published an 11-page paper on September 22, 2026 — "The Machine-Native Economy: How digital assets connect intelligence, commerce, and compute" — and the crypto press ran with the headlines. I read the full PDF. Here's what's actually in it, what the coverage gets wrong, and the part nobody is writing about. "AI represents machine-native intelligence, while digital assets represent machine-native money." Both are built on tokenization — LLMs encode language as tokens, blockchains encode value as tokens. As agentic AI starts making purchases and initiati

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Monetize an MCP Server: Per-Call x402 Payments (With Live Receipts)

How to Monetize an MCP Server: Per-Call x402 Payments (With Live Receipts) There are 20,000+ MCP servers in the wild and fewer than 5% have any monetization. The guides that rank for "how to monetize an MCP server" are vendor pitches, Stripe subscription tutorials, or marketing calculators — none shows a live payment receipt. Here's the receipt-first version. I run ScriptMasterLabs; we bill x402 on our MCP/HTTP tool infra on Base. Per-call x402 billing: your server answers each unpaid tool call with a 402 Payment Required challenge carrying price, asset, network, payTo address, and expiry.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

NetScaler RCE: 3 Checks Before Your Next Patch Window

[ internet ] ──► ┌──────────────────────┐ ──► [ your VPN users ] │ NetScaler ADC / GW │ │ CVE-2026-88771 9.5 │ unauthenticated │ CVE-2026-88772 9.5 │ remote code execution └──────────────────────┘ Two zero-day remote code execution bugs in Citrix NetScaler ADC and NetScaler Gateway were confirmed actively exploited before any patch existed, and the first public warnings came from a Reddit thread, not the vendor. Citrix shipped fixes on September 27, but there is a detail buried in the advisory that most teams will miss: if you patched last month for the authentication bypass, your current buil

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Animate iOS Widgets: The Native Alternative to Lottie, Rive, GIF, PNG Sequences, and Third-Party SDKs

The motion design industry is accustomed to relying on established formats: Lottie, Rive, video, or frame sequences (PNG/GIF). However, when attempting to transfer these solutions to widgets (specifically for the Homescreen, Lockscreen, and Live Activities in iOS), engineering teams hit a fundamental technical barrier. The core problem does not lie in system-level prohibitions against dynamics. The error stems from attempting to use resource-heavy media formats and third-party rendering engines in an environment where device architecture strictly demands lightweight, declarative code. Trying t

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

6,918 Paperless matches: a document archive that was meant to replace the filing cabinet

6,918 Paperless matches: a document archive that was meant to replace the filing cabinet Paperless-ngx scans paper documents, runs optical character recognition over them, and stores the result as searchable files. Teams adopt it to stop losing invoices and contracts, which means the archive ends up holding exactly the records a company must protect. all scope. Some of those matches are unrelated projects that share the word, so the Paperless-ngx share of the total is smaller. A document archive is an identity record in disguise.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Phish or Legit: Do LLMs Know When NOT to Cry Wolf?

Kaggle Benchmarking Challenge Submission by Anio Joseph Most security benchmarks ask: "Can the model detect the threat?" That's the easy part. The real question in a security operations center is: "Can the model stay quiet when the message is actually safe?" I built Phish or Legit to test exactly that. It's a 40-item cybersecurity triage benchmark with 20 threats and 20 legitimate messages. The twist? Many of the legitimate messages are deliberately suspicious-looking — they have links, urgency, or unknown senders, but are completely benign.

0 comments Read more at DEV Community
← NewerPage 668 of 3153Older →