0
ProgrammingHacker News ·
US killer's sentence quashed because of AI video of victim shown in court
Article URL: https://www.bbc.com/news/articles/cwgkvygg5nzvo Comments URL: https://news.ycombinator.com/item?id=49944127 Points: 18 # Comments: 1
Programming
0
ProgrammingHacker News ·
French Bond Risk Hits Euro-Crisis Levels [video]
Article URL: https://www.youtube.com/watch?v=bam3uxilEJo Comments URL: https://news.ycombinator.com/item?id=49943974 Points: 5 # Comments: 0
0
ProgrammingDEV Community ·
See Your LangGraph Agent Execute in Real Time
This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend NOTE ON TIMING: LangGraphics isn't a weekend project. Its first commit is from January 2026. This year's rules ask for new projects built within the challenge window, so I'm not presenting this as a prize entry. I'm sharing it because the challenge asks the question this project was built to answer: who did you build it for? I built it for a group of people building an agent system on LangGraph.
0
ProgrammingDEV Community ·
Why your webhook signature check fails (and the bugs that pass it)
In July I wrote about why I built verihook: every provider signs webhooks differently, and I was tired of maintaining five slightly different HMAC functions. Since then verihook has grown to 40+ providers, adapters for ten frameworks, testing helpers and a docs site. Supporting that many providers taught me where webhook verification actually goes wrong. It's rarely the HMAC. It's everything around it: the body, the secret, the URL, retries and tests.
0
ProgrammingDEV Community ·
Making My Platform API Reconcile Application Updates
In the previous post, I built the first real behavior for Platform Lab. A developer could create: apiVersion: platform.shubforge.dev/v1alpha1 kind: Application metadata: name: greeting-service spec: image: greeting-service:1.0.0 replicas: 1 port: containerPort: 8080 and the Platform Operator would create: Application | v Platform Operator | +------ Deployment | +------ Service That was the first point where the Application API actually resulted in real Kubernetes resources. But there was another important question. What happens when the Application changes? Creating resources once is useful, b
0
ProgrammingDEV Community ·
GoodFirst : I built my friend a way into open source.
This is a submission for the Hacktoberfest Weekend Challenge: Build for a Friend My friend Shivin wanted to get into open source this October. He could code. What stopped him was everything around the code. He'd open a real project, see a long README and a hundred open issues, and the questions piled up before he wrote a single line: Which of these files actually matter? So I built him GoodFirst.
0
ProgrammingDEV Community ·
What each task in a plan is handed, and what it is not
A plan runs several coding-agent sessions, one after another or several at once. None of them shares memory with the others. Each one starts with an empty context window, so the only thing that carries knowledge forward is what the orchestrator decides to hand over. That decision is worth reading, because it is the difference between a task that continues the work and a task that rediscovers it. Disclosure: I build Ordewell, so what follows is how it does this rather than a survey.
0
ProgrammingDEV Community ·
Launched on Product Hunt today: an AI-powered I Ching app that explains readings in plain language
Hey DEV! Quick launch announcement — my side project BU: I Ching & Daily Fortune is live on Product Hunt today. 🔮 What it is: An Android app that casts I Ching hexagrams the traditional way, then uses AI to interpret them in plain language — no classical Chinese required. It also includes a daily fortune (work, love, wealth), love & career readings, Chinese zodiac insights, and a traditional tongshu almanac. Fully bilingual EN/CN, free, no ads.
0
ProgrammingDEV Community ·
52 commands, 3 doors: the app, REST and MCP share one write path
My ticket tracker has three ways in: the web app, a REST API and an MCP server. Every write from all three goes through the same 52 commands, and the Firestore rules deny everything else. It costs 150 to 400 ms a write where a direct client write takes about 50 ms. I'm Panth, and I lead the software team at Oizom. The tracker is ticket-tracker, my open-source board where coding agents work tickets next to people.
0
ProgrammingDEV Community ·
Enhancing Software Development Efficiency: Secure Read-Only Access in GitHub Enterprise
Secure Read-Only Access for Scanners: A Blueprint for Enterprise GitHub In large organizations, the delicate balance between stringent security policies and the imperative for seamless cross-departmental collaboration often presents a unique set of challenges. A recent discussion within a state government department on GitHub perfectly encapsulates this dilemma: how to grant read-only access to an IT department for vital vulnerability scanning without violating internal rules requiring all GitHub accounts to be tied to a specific domain email. This isn't just about security; it's about maintai
0
ProgrammingDEV Community ·
Sua aplicação entrou em produção. Quem cuida dela agora?
O deploy terminou, o domínio está funcionando e os primeiros usuários começaram a acessar. Parece que o projeto está concluído. Mas algumas perguntas continuam abertas: quem acompanha os erros? Quem atualiza o ambiente? Quem verifica os backups?
0
ProgrammingDEV Community ·
CRM Automation That Does Not Break at Scale
TL;DR: Zapier is genuinely good for simple connections and genuinely wrong for business logic your revenue depends on. The dividing line is not volume, it is what happens when step four of seven fails at 2am. Build routing on Make or n8n, put a real enrichment layer in front of it, and design the failure path before the happy path. Most CRM automation stories go the same way. Someone builds it in Zapier over a weekend and it works.
0
ProgrammingDEV Community ·
Confluence Data Classification Without Guard
Sentinel Vault is a Confluence Cloud app that seals files and page sections, and version 6 gives every page a data classification level whether or not you pay for Atlassian Guard Premium. In January 2025 an admin called Adam asked the Atlassian Community a very reasonable question. He'd found Atlassian's article on setting a default classification level for a space, gone to his space settings, and the setting simply wasn't there. The answer he accepted: Confluence data classification requires an Atlassian Guard Premium subscription. Guard Premium was $8.18 per user per month when I checked Atl
0
ProgrammingDEV Community ·
Configuration Drift Is a Production Incident With a Long Fuse
The checkout pods came back up after a routine node rotation and started returning 502s on every request that touched the payments path. Same image tag, same application version, same deploy log as the week before. The pods were healthy. The CPU was flat. The payment client was timing out against a provider that answered every health check we threw at it.
0
ProgrammingDEV Community ·
Fetch Multilingual Daily Reflections in Node.js with aa-daily-reflections
Fetch Multilingual Daily Reflections in Node.js with aa-daily-reflections TL;DR If you need a small Node.js integration for dated Daily Reflections from Alcoholics Anonymous, the aa-daily-reflections package provides both a JavaScript API and the aa-daily command-line tool. This tutorial uses the published npm package to fetch a date in English, Spanish, or French, then adds input validation and a responsible failure path. The important boundary is that this package retrieves content from the public AA.org service. It is an unofficial client, not an archive or a license to republish the return
0
ProgrammingDEV Community ·
A reverse-proxy auth plugin is not application authorization
Quick check: call the same handler with a valid token for user A and a resource id belonging to user B. If the proxy plugin alone is what you relied on, that request often succeeds. Edge auth proves who showed up. Application authorization decides what they may touch. (Full disclosure, I work with Permit.io — useful when you want the PEP/PDP split spelled out beyond a proxy plugin.)
0
ProgrammingDEV Community ·
The IAB's own VAST sample tags pass XSD validation, and two of them still break the spec
If you build a video player, an ad server, or anything that touches VAST, the IAB Tech Lab VAST_Samples repo is probably where you got your test fixtures. I ran every file in it through two checks: xmllint against the official IAB XSD for each file's declared version. vastlint, an open-source linter with 235 rules taken from the XSDs and from the normative text of the spec (the RFC 2119 "must" and "required" sentences). The short version: 75 files, 4 with spec errors, 72 with at least one warning, and 2 files that pass the XSD while breaking the VAST 4.1 spec text. The full write-up, including
0
ProgrammingDEV Community ·
WordPress SEO Plugins Compared: Yoast to Local AI
WordPress SEO plugins add the metadata, sitemaps, schema, and AI layer above WordPress core, and in 2026 that layer includes plugins that run inference on your own hardware. The market is no longer a choice between Yoast and a few competitors. It now contains commercial SEO suites, lightweight open-source plugins, AI assistants that call hosted APIs, and newer plugins that talk to local models through Ollama, llama.cpp, or any OpenAI-compatible endpoint. The answer to "which WordPress SEO plugin should I use" depends on what you need: a complete marketing suite, a quiet technical SEO layer, or
0
ProgrammingDEV Community ·
Flash Loan Attack Vector Analysis: Uniswap V3
Flash Loan Attack Vector Analysis: Uniswap V3 Target Protocol: Uniswap V3 (TVL: $1711.6M) Flash Loan Attack Vector Analysis – Uniswap V3 Protocol: Uniswap V3 (TVL ≈ $1.71 B across Ethereum & L2s) Date: 3 Oct 2026 Prepared by: Senior DeFi Security Researcher – Smart‑Contract Auditing Team Uniswap V3 is the flagship AMM on Ethereum, introducing concentrated liquidity, multiple fee tiers, and custom price ranges per position. These innovations dramatically improve capital efficiency but also expand the surface area for flash‑loan‑driven attacks. Our analysis focuses on how an adversary can exploi
0
ProgrammingDEV Community ·
Building a macOS Dev Workstation Toolkit in Bash: 187 Tests, Pinned CI, and Verified Backups
Every workstation setup starts the same way: a setup.sh that works. Then it accretes. Someone adds a second script. The logging block gets copy-pasted. Config lives in three places and nobody can say which one wins.