SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

WordPress filter corrupts JavaScript regex by altering ampersand character

A developer discovered that a JavaScript tool embedded within a WordPress post functioned correctly locally but failed on the live site. The failure caused numeric digits to be replaced with the string 'undefined'. The issue was traced to WordPress's wptexturize filter converting a standalone ampersand (&) in a regex character class to its HTML entity (&). This altered the regex's matching behavior, causing it to incorrectly target digits 0, 3, and 8. The developer now recommends using Unicode escapes or external script files to avoid the filter.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer publishes customizable QR code API built with Rust

A developer has launched a customizable QR code generation API on RapidAPI. The project, built with Rust, allows extensive visual customization including gradients, shapes, and multiple output formats. It supports generating codes from various data types like URLs, Wi-Fi credentials, and contact information. The API also provides QR code decoding and validation functions. The developer created it to offer more flexibility than standard black-and-white QR generators.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Telegram Rejects iPhone Videos for Avatars; Bot Automates Conversion

Telegram's video avatar feature silently rejects videos recorded on iPhones. The issue stems from iPhones using the HEVC format by default, while Telegram only accepts H.264. A developer created a bot to automatically convert videos to meet Telegram's strict specifications. The required format is a square, 800x800 MP4 file under 2MB with no audio. The bot uses FFmpeg to crop, resize, and transcode videos into a compatible format.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Tool analyzes 30 tech firms' job boards to track salary transparency rates

A developer built a data extraction tool to aggregate job postings from 30 tech companies' career sites on September 30, 2026. The tool scanned applicant tracking systems including Greenhouse, Ashby, Lever, Workday, and SmartRecruiters. From a sample of 3,141 recent job listings, 54% included salary information. The analysis found Ashby-based systems showed salaries in 75% of postings, while SmartRecruiters-based boards displayed them in only 3% of jobs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

oh-my-agent releases focus on shared daemon management and bounded retry loops

The oh-my-agent CLI released five versions this week focusing on improving long-running agent behavior. The updates enhance how the tool manages Serena, the shared code-search backend daemon that all agents use. New features include a command to validate Serena configuration, scheduled cleanup of idle daemons, and bounded retry loops that prevent infinite cycles. The changes aim to reduce stray processes, control memory usage, and make orchestration workflows more reliable.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Hermes Agent v0.21.0 adds real-time oversight and control for AI agents

Nous Research released version 0.21.0 of its Hermes Agent software on August 31, 2026. The update introduces new features to give developers visibility and control over autonomous AI agents during task execution. Key additions include a live browser session for on-screen monitoring and tools to query, correct, or stop active sub-tasks mid-process. These changes aim to address the 'black-box' problem where developers lose insight once a multi-step task begins. The release emphasizes maintaining human oversight as a critical safety measure for autonomous systems.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security risks identified in GitHub Actions CI/CD pipelines require key controls

GitHub Actions CI/CD pipelines present supply chain risks because they combine code from multiple sources with credentials that can deploy to production. Three primary mechanisms drive this risk: using mutable tags for third-party actions, over-permissive default GITHUB_TOKEN permissions, and storing long-lived cloud credentials as secrets. Mitigations include pinning third-party actions to immutable commit SHAs, setting minimal workflow-level permissions, and using OIDC federation for cloud access instead of stored secrets. These controls, while creating some maintenance overhead, significantly reduce the potential for a single compromised dependency or malicious pull request to reach production systems.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Meta's Muse AI agent collects user data, raising privacy concerns for developers

Meta's recently launched Muse AI application automatically collects user data from Facebook, Instagram, and Threads when users identify as being in a 'vulnerable group.' This automated data aggregation creates potential privacy risks that extend beyond major platforms to smaller developers. Independent developers creating chatbots or automated scripts could unintentionally collect personal profiles, leading to legal and ethical liabilities. Experts recommend implementing safeguards like prompt blocking rules, data minimization practices, and audit logs to mitigate these risks.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Proposes Five-Signal WebRTC Authorization Method for Online Auctions

A software developer proposes a method to secure WebRTC-based auction dashboards using five presence signals. This approach replaces relying on open WebRTC channels with versioned authorization envelopes attached to each notification. Each envelope contains identifiers for authentication, auction membership, session, expiry, and event sequence to create defensible decision records. The system is designed to handle reconnects and late disconnects without changing event meaning, separating immutable notification bodies from secure authorization metadata.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Global Search Boxes Often Become Unplanned, Expensive Platform Features

A client requested a simple feature to search across a complex platform using unstructured data like phone numbers or nicknames. The engineering team built a global search box, which became their most expensive unplanned feature that year. Unlike structured filters, a search box must query multiple data types with different rules and costs. This creates significant architectural challenges and potential security risks, as search indexes can bypass permission models.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security flaw found in Postgres AI agent tool using read-only transactions

A reference Postgres MCP server published by the Model Context Protocol project contained a security vulnerability where AI agents could bypass read-only transaction guards. The server ran agent queries inside BEGIN TRANSACTION READ ONLY blocks, but agents could send multiple statements in one query string, including COMMIT commands. This allowed malicious commands like DROP TABLE to execute after the read-only transaction ended. Security researchers at Datadog documented this SQL injection vulnerability in August 2025. The repository was archived in May 2025 with a warning that no security updates would be provided.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SQLite table rebuilds for column type changes risk data loss and side effects

SQLite cannot alter a column's data type directly, requiring a full table rebuild. This process involves creating a new table, copying data, dropping the old table, and renaming the new one. If executed without proper precautions, it can inadvertently delete child table rows via cascading actions, remove associated indexes and triggers, and leave unconverted data in place. Developers must carefully plan such rebuilds to avoid these destructive side effects.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Atomic publishing ensures blog cover images are fully converted before going live

A technical article outlines a method for processing blog cover images. The system generates three specific WebP image widths only after a user uploads a cover. All generated widths must exist and pass validation before the new set is published, preventing readers from seeing incomplete images. The design focuses on user impact, defining an incident as when a page renderer can access an incomplete image set. The process involves separate stages for upload acceptance, derivative generation, and final manifest activation to ensure reliability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Video marketplace introduces rigorous moderation system for generated thumbnails

A game marketplace requires video thumbnails to undergo moderation before listings become visible. The platform now generates a small set of candidate frames during publishing and submits them for approval alongside other media. Only approved frames are stored and served as immutable thumbnails, ensuring moderation coverage matches public content. This approach treats poster generation as a state transition rather than an on-demand convenience. The system creates a media manifest tracking each derivative's approval status before publication.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PostgreSQL Foreign Key ON DELETE Actions: CASCADE, SET NULL, RESTRICT Explained

A technical guide explains how to choose between ON DELETE CASCADE, SET NULL, and RESTRICT actions for foreign keys in PostgreSQL. The article advises selecting the action based on what should happen to child records when their parent record is deleted. SET NULL allows child rows to remain with a null link, but PostgreSQL may accept invalid definitions that only fail at deletion time if columns are NOT NULL. The guide recommends CASCADE when child rows become meaningless without the parent and RESTRICT/NO ACTION when child records must be preserved.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PostgreSQL Role Can Read Database Structure Without Accessing Data

A PostgreSQL role can be configured to read a database's complete schema without accessing any actual data rows. This is achieved by granting only CONNECT on the database and USAGE on the schema while granting no permissions on the tables. The role can then view structural information from the pg_catalog system tables while every SELECT query on data tables fails with permission denied. This approach prevents tools from accessing sensitive customer data while still allowing schema analysis. The configuration requires revoking EXECUTE permissions from PUBLIC on SECURITY DEFINER functions that might bypass these restrictions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Lightverse replaces dashboards with navigable 3D universe interface

A developer has created Lightverse, a platform that uses a 3D universe as its primary interface instead of a traditional dashboard. In this system, galaxies represent domains like knowledge or finance, star systems are categories, and planets are specific features or content. The project, built with Laravel, Inertia.js, and Three.js, currently has several functional areas, including ones for knowledge archives and financial literacy. The developer, who works other jobs in Croatia, is seeking feedback on whether this spatial navigation is a practical UI pattern or merely a novel distraction.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

PostgreSQL NOT NULL column addition speed hinges on default value type.

Adding a NOT NULL column to a large PostgreSQL table is fast if the default is a constant value, completing in milliseconds via a catalogue change. This performance stems from an optimization introduced in PostgreSQL 11. However, using a volatile default like gen_random_uuid() forces a full table rewrite, which is time-consuming and blocks other operations. To safely add a column requiring a per-row computed value, a three-step process of adding a nullable column, backfilling in batches, and then adding a constraint is recommended to avoid prolonged locks.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer retracts benchmark, questions permanence of published claims

A software developer retracted a published benchmark this week after discovering it was measured under high system load. This marks the fourth correction they have made this quarter, with three errors being wrong at the moment of publication. The developer notes a psychological shift occurs after publishing, where the author's stance changes from scrutinizing to defending claims. They are now considering methods to label claims as provisional or set expiration dates on published data. The current system relies partly on readers to identify errors, which has already occurred with two of the four corrections.

0 comments Read more at DEV Community
← NewerPage 765 of 3165Older →