SShortSingh.

Programming

0
ProgrammingDEV Community ·

Codename One Launches App Shield to Move Security Decisions Server-Side

Codename One, an open-source framework for building cross-platform apps in Java or Kotlin, has introduced App Shield, an enterprise-grade application-attestation layer. The feature uses Apple App Attest or Google Play Integrity to generate hardware-backed statements, which are verified by the Codename One service and converted into short-lived ES256 tokens. These tokens are then validated by a developer's backend server before any sensitive operation is executed, ensuring that a tampered client app cannot bypass security checks locally. The approach addresses a core vulnerability where security logic running solely on a device can be patched or reverse-engineered by attackers. Codename One says the feature is already in use by several banking customers with high-security requirements.

0
ProgrammingDEV Community ·

What LLM Observability Means and Why It Matters for AI in Production

LLM observability refers to runtime visibility into a large language model or agent system, capturing traces, metrics, and logs to make production failures diagnosable rather than mysterious. A trace records every model call, tool call, and retrieval within a single request, along with inputs, outputs, token usage, latency, and cost. Unlike evaluation, which measures output quality across a dataset, observability focuses on documenting exactly what the system did during a specific run. The discipline exists largely because LLMs are non-deterministic — the same input can produce different outputs, tools, or execution paths, making local reproduction of production failures unreliable. Capturing what happened in real time is therefore the only reliable way to debug agent systems operating at scale.

0
ProgrammingHacker News ·

Australia's Home Battery Surge Drives Wholesale Power Prices Down 50%

Australia is experiencing a significant boom in residential battery storage installations, which has contributed to a dramatic reduction in wholesale electricity prices. The widespread adoption of home batteries has allowed households to store solar energy and feed it back into the grid during peak demand periods. This increased supply of stored energy during high-demand windows has helped cut wholesale power prices by approximately half. The trend highlights how distributed energy resources at the consumer level can have a measurable impact on broader electricity market dynamics.

0
ProgrammingDEV Community ·

Developer uses Ed25519 public-key signing to enable offline licence checks in browser tool

A developer built a browser-based Bates-numbering tool for litigation PDFs that processes all files locally, never uploading documents to a server, to comply with legal confidentiality requirements. Because privileged legal documents may be subject to court protective orders restricting where they can travel, a traditional server-side licence validation system was not viable. Instead, the developer ships an Ed25519 public key directly in the JavaScript bundle and uses the browser's built-in WebCrypto API to verify licences entirely offline. Licence keys follow a custom format containing a base64url-encoded payload and signature, which are validated with a single crypto.subtle.verify call requiring no third-party cryptography library. The signing private key never leaves the developer's machine, meaning the scheme is secure even if the verification logic and public key are fully visible in the client-side bundle.

0
ProgrammingDEV Community ·

Student builds offline telemetry system to monitor harvesters in areas without connectivity

A Brazilian technical school student has developed FieldNode, an offline telemetry system designed to monitor harvesters operating in rural areas with no mobile signal. The project uses two ESP32 microcontrollers communicating via ESP-NOW protocol to collect real-time data on temperature, vibration, and RPM without requiring internet access. A local dashboard is served directly from the gateway device over its own Wi-Fi, allowing field supervisors to monitor machine health on their phones. When connectivity is restored, all collected data automatically syncs to a Django and MySQL backend API, using UUID-based deduplication to prevent data loss or duplication. The student has shared the project on GitHub and is seeking community feedback on the API structure and data models as part of his final technical course assignment.

0
ProgrammingDEV Community ·

No-Code AI Test Automation Combines RAG, Playwright MCP for Smarter QA

A new architectural approach enables AI-powered test automation agents that can plan, execute, and analyze browser tests without testers writing every line of code manually. The system integrates four core components: a large language model for reasoning, Retrieval-Augmented Generation (RAG) for accessing project-specific QA knowledge, Playwright MCP for browser interaction, and a vector database for searchable documentation. RAG addresses a key limitation of standard AI models by supplying application-specific context such as business rules, existing test cases, known bugs, and API documentation. The Model Context Protocol (MCP) layer connects the AI agent to external tools including Playwright, Jira, Git, and test runners, enabling end-to-end automation. Test execution results, including screenshots, logs, and failure data, are fed back into the workflow to support continuous improvement.

0
ProgrammingDEV Community ·

Fanless MacBook Air Caused 54% Benchmark Error Due to Thermal Throttling

A developer benchmarking a search engine's multi-thread performance on an Apple M4 MacBook Air discovered that thermal throttling silently corrupted an entire dataset. Because the fanless laptop heats up under sustained load, running tests sequentially from 1 to 11 threads meant later thread counts always executed on a hotter, slower chip — a systematic bias, not random noise. A result showing 11 threads completing in 5.2 seconds turned out to be a one-off cold-chip reading, later reproducing at 8.0 seconds under warmer conditions. The developer resolved the issue by switching to a round-robin measurement protocol — cycling through all thread counts across multiple full sweeps and taking the per-thread median — which fairly distributed thermal states across every configuration. The corrected 128-measurement run produced a reproducible performance plateau at 8 threads with a 3.0x speedup, and the anomalous record disappeared entirely.

0
ProgrammingDEV Community ·

Java AI Integration Patterns for Enterprises: Key Concepts Explained

A technical paper by Surya Rao Rayarao and Naga Donikena outlines practical patterns for integrating artificial intelligence into Java-based enterprise applications. The paper addresses the challenge of modernizing legacy Java systems with machine learning and natural language processing while maintaining reliability, scalability, and security. It covers core stages including data preparation, model training, evaluation, and deployment using formats such as ONNX, PMML, and TensorFlow. Native JVM libraries like Deeplearning4j, DJL, and Weka are highlighted as key tools for building AI models within the Java ecosystem. The overview focuses on foundational concepts, with architectural patterns set to be covered in subsequent sections of the work.

0
ProgrammingDEV Community ·

PostgreSQL's information_schema: A Standard Way to Query Database Metadata

PostgreSQL includes a built-in, read-only schema called information_schema that provides metadata about database objects such as tables, columns, constraints, and privileges. It follows ANSI/ISO SQL standards, meaning queries written against it are largely portable across other databases like MySQL, SQL Server, and MariaDB. The schema is permission-aware, automatically showing only the objects accessible to the current user, and its structure remains stable across PostgreSQL versions. Developers can use it to inspect table definitions, column data types, primary keys, and more using standard SQL SELECT statements. For deeper PostgreSQL-specific details — such as indexes or custom types — the native pg_catalog schema is recommended instead.

0
ProgrammingDEV Community ·

AWS DynamoDB Vector Search vs S3 Vectors: Two Tools for Different AI Workloads

AWS recently launched DynamoDB Vector Search, its latest addition to a growing list of at least seven services with vector storage capabilities, prompting questions about overlap with S3 Vectors, which became generally available earlier this year. The key distinction lies not in the services themselves but in the type of data they are designed to handle. DynamoDB Vector Search is built for operational data — such as user profiles, product catalogs, and fraud detection signals — that changes frequently, requires low-latency access, and already lives within transactional databases. S3 Vectors, by contrast, targets knowledge assets like PDFs, documentation, and support articles used in retrieval-augmented generation (RAG) pipelines, with AWS claiming up to 90% cost savings over specialized vector databases for such workloads. Rather than competing, the two services address fundamentally different use cases within the broader AI application stack.

0
ProgrammingDEV Community ·

How to enable LDAPS on AWS Managed Microsoft AD for FortiGate authentication

A technical guide details how to migrate FortiGate LDAP authentication from plaintext port 389 to encrypted LDAPS on port 636 using AWS Managed Microsoft AD. Because AWS does not grant direct access to managed domain controllers, certificates cannot be installed manually — instead, Active Directory autoenrollment is required, meaning a Microsoft Enterprise CA joined to the domain must be deployed on a management EC2 instance. The Domain Controllers automatically begin listening on port 636 once they receive a valid certificate through autoenrollment, with no configuration needed in the AWS Directory Service console. Only the CA's public certificate needs to be exported and imported into FortiGate so it can validate the DC's TLS certificate during the LDAPS handshake. The VPN tunnel and LDAPS operate as independent layers: the VPN delivers traffic to the VPC while LDAPS encrypts the LDAP session within it.

0
ProgrammingDEV Community ·

How to Integrate Cashfree Payments Into a Flutter App the Right Way

A developer guide on DEV Community outlines the correct step-by-step process for integrating Cashfree Payments into a Flutter application using the official cashfree_pg SDK. The integration follows a secure backend-first flow where the order and amount are created server-side via the Cashfree API, and only the payment_session_id is passed to the Flutter app. The guide warns against hardcoding client secrets in the app, since Flutter binaries can be decompiled, exposing sensitive credentials to anyone with the APK. Two common integration pitfalls are highlighted: sending the order amount as a decimal (e.g., 149.0 INR) rather than in paise, and including the required customer_details field, which became mandatory in the 2025 API version. Payment verification is handled server-side after checkout, with webhooks recommended for reconciliation.

0
ProgrammingDEV Community ·

TinocLang v0.1.0 Released: A New C11-Transpiling Systems Language

TinocLang, a new programming language that transpiles to C11, has released its first public version, v0.1.0, on August 5, 2026. The language ships with a command-line interface supporting build, run, and check subcommands, and covers core features including variables, constants, functions, structs, pointers, and control flow. It also offers C interoperability through header imports parsed via Clang's JSON AST, enabling type-safe calls to existing C libraries. The release includes 14 sample programs demonstrating the supported feature set, along with build scripts for multiple platforms and a GitHub Actions workflow for automated binary releases. The project is open-source under the Apache-2.0 license and is hosted at github.com/tinoc-lang/tinoc.

0
ProgrammingDEV Community ·

Could SQL Access Replace Endless API Endpoints for AI Agents?

As AI agents grow more capable, traditional REST API architectures are struggling to keep up with complex, relational data queries from users. Building a financial platform API, for example, quickly balloons from a handful of endpoints into hundreds of hyper-specific routes, each requiring its own OpenAPI specification, error handling, and maintenance overhead. Every new user query pattern — such as filtering transactions by card expiry or linking accounts to documents — demands yet another bespoke endpoint. This proliferation creates long-term maintenance nightmares and forces clients to stitch together multiple API responses to answer simple questions. The article explores whether allowing AI agents to run SQL-style queries directly on user data could offer a more scalable and flexible alternative to the endpoint-per-question model.

0
ProgrammingDEV Community ·

Engineering Team Cuts SQLite Database Size by 54% With Zero Downtime

A development team reduced their OpenCode session database from 8.7GB to 3.8GB after it accumulated 1.26 million event rows, mostly redundant state updates that were causing sessions to freeze and queries to exceed two seconds. An initial deletion attempt using 250,000-row chunks caused lock collisions due to checkpoint contention, prompting a revised approach with smaller 25,000-row chunks and no intermediate checkpoints. The team also identified and fixed a bug where rowid reuse caused the deletion loop to exit prematurely, requiring six full passes to stabilize the table. Three AI agents — Scout, Spec Critic, and Verifier — were used to map the codebase, define acceptance criteria, and independently validate results against a pre-prune backup. The final outcome saw event rows drop by 65% and WAL size shrink by 96%, with zero loss of session, message, or part data.

0
ProgrammingHacker News ·

France Tax Authority Suffers Data Breach Affecting 680,000 Taxpayers

France's tax authority has experienced a significant data breach compromising the personal information of approximately 680,000 taxpayers. The stolen data originated from French government tax systems, exposing a large number of citizens to potential privacy risks. The breach highlights ongoing cybersecurity vulnerabilities within public sector institutions. Authorities are believed to be investigating the incident to determine its scope and origin.

0
ProgrammingDEV Community ·

Civil Engineer Builds AI-Queryable Portfolio Using MCP Server Without Writing Code

Mikhail, a civil engineer with no coding background, has built a portfolio that functions as a Model Context Protocol (MCP) server, allowing AI tools like Claude and GPT to directly query his skills and project history. Rather than a static document, the portfolio responds to live questions such as skill-to-job-description matching and commit history lookups. The system is built on a single data source that powers three interfaces: a public website, an AI-accessible server, and a local development version. A live architecture simulator lets visitors stress-test real project models under failure scenarios, with measurable latency changes displayed in real time. The portfolio also includes a documented log of past mistakes, offering verifiable evidence of lessons learned rather than polished self-promotion.

0
ProgrammingDEV Community ·

Developer builds TypeScript formatting tool to tackle AI-generated code readability

As AI-assisted programming grows, maintaining code readability has become a significant challenge for development teams. A developer on DEV Community is working on a project called 'sfmt', a formatting ruleset designed specifically to improve TypeScript code readability. The project draws inspiration from established tools such as Prettier, ESLint, Biome, Oxfmt, and dprint. The developer argues that good readability requires a combination of deterministic auto-formatters, code linters, and experienced human reviewers. The project is currently open for community feedback and contributions on GitHub.

0
ProgrammingDEV Community ·

Developer Builds AI-Powered Astrology Discord Bot Used by 800+ People Daily

A developer named Harsh built AstroScope, a Discord bot offering horoscopes, birth charts, and compatibility reports, after a friend challenged him to create something astrology-focused for a Western audience. The bot combines AstrologyAPI for raw planetary data with OpenAI's ChatGPT to generate personalized, conversational astrological responses. Discord.js was used to manage the bot interface, slash commands, and user sessions. The project grew to serve over 800 daily active users. Notably, a friend who is a practicing astrologer praised the bot's accuracy, validating the quality of its data output.

← NewerPage 74 of 1272Older →