SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Check URLs for personal data before sharing publicly, developer guide advises

A technical draft from the 주소나와 team outlines a JavaScript function to inspect URLs before adding them to public link collections. The function parses URL strings without making external requests to check for potentially sensitive data like email addresses, tokens, or user-specific parameters. This is a pre-sharing review step, distinct from checking link accessibility or page content, focusing on data that might be exposed in browser history or logs. The guide emphasizes that automated checks are not a safety guarantee and must be followed by human review for final sharing decisions.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Kubernetes probes and experiment signals require distinct monitoring approach

Node.js applications on Kubernetes require separate monitoring of startup, liveness, and readiness probes alongside experimental cohort outcomes. Platform teams should manage container lifecycle probes while experiment owners define rollback thresholds based on user experience metrics. Container health does not guarantee experiment success, as instances can pass probes while users in specific cohorts encounter failures. Effective monitoring should distinguish between temporary dependency issues requiring patience and actual treatment breaches requiring intervention. This separation prevents unnecessary rollbacks and restart storms while maintaining service reliability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Palantir's 'Forward Deployed Engineer' term now describes multiple distinct roles and products

The term 'Forward Deployed Engineer' has evolved to describe different positions and products across the tech industry. Palantir originally created the role to combine on-site environment learning with software development. The company has now released an AI-powered product called 'AI FDE' designed to operate its Foundry platform through conversational commands. This expansion of the term creates potential confusion and scoping problems for projects. The AI product currently handles platform operations but does not replace the core human functions of the original role.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI researchers find Claude's performance declines as conversation context grows

Developers have observed that Anthropic's Claude AI shows declining performance as conversation context expands over time. The model operates most effectively at the start of interactions when context is minimal and condensed. Unlike humans, Claude has no memory between requests and must re-process the entire conversation history with each new message. This leads to attention dilution, especially when context contains corrections or stale information. Researchers recommend starting new sessions for distinct topics to maintain optimal performance.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Open-source gateway enables secure AI database queries with audit logging

A new open-source tool called db-mcp-gateway allows AI agents to securely query production databases. The self-hosted gateway sits between the AI and the database, storing credentials and enforcing identity checks through SSO providers like Okta and Google. It logs every query with user details for compliance and supports controlled access via YAML-based permissions. The software is available as a Docker container and currently supports PostgreSQL and MongoDB databases.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer outlines methodical process for building secured inventory system from scratch

A developer describes their process for building software, starting with diagrams rather than code. They recently applied this method to a secured inventory system integrating face recognition and physical lockers. The workflow begins by defining functional and non-functional requirements before sketching entities and APIs. This approach aims to clarify the system's design and interactions, especially with external hardware, before any coding begins.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Turns Burnout Experience Into AI-Assisted Song

A developer on DEV Community created a song titled 'Bleeding Knuckles' to express feelings of burnout. The lyrics describe stress and a search for recognition in demanding work environments. The accompanying sound and images were generated using artificial intelligence. The creator stated the artistic process helped them cope with difficult emotions. The post was shared to connect with others experiencing similar feelings of exhaustion.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Rehabilitation System Turns Noisy Pose Data into Reliable Movement Metrics

A team developed Mendly, an AI-powered stroke rehabilitation platform, during the HopHacks hackathon. The project placed among the top 11 finalists out of 87 entries and won the Best Use of DigitalOcean award. The system uses MediaPipe Pose to track a patient's joint positions and calculate movement angles for rehabilitation exercises. A key challenge was converting imperfect camera data into trustworthy metrics by implementing reliability checks for occlusions or tracking failures. The team established that failed pose detection results in an 'invalid observation' rather than incorrect assumed values to ensure data integrity for adaptive AI planning.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

ERC-4626 vault vulnerability exposes first depositor to inflation attack

A security vulnerability known as the first-depositor inflation attack threatens ERC-4626 token vaults. The exploit occurs when a vault starts with zero assets and shares, allowing attackers to manipulate share pricing. An attacker can deposit a minimal amount, inflate the vault's asset balance through direct token transfer, then extract funds from subsequent legitimate depositors. This vulnerability stems from using raw token balances for accounting and integer rounding logic. OpenZeppelin's implementation includes mitigation through virtual shares and assets, while other implementations require additional safeguards.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security expert details five common reentrancy vulnerabilities in small DeFi vaults

A security reviewer states that many small DeFi vaults incorrectly rely on a single nonReentrant guard on the withdraw function. The analysis identifies five recurring vulnerability patterns that exist elsewhere in contract code. These include state inconsistencies during external calls, exploitable view functions, token transfer callbacks, and issues with shared state across multiple contracts. The root cause is often a failure to follow the Checks-Effects-Interactions pattern, updating state only after making external calls.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

High-risk vulnerabilities found in Drupal extensions, patch required

CERT-BUND released a high-risk advisory (WID-SEC-2026-3554) on September 23, 2026, concerning multiple vulnerabilities in Drupal extensions. The advisory aggregates 36 CVE identifiers, including CVE-2026-96355, which could allow attackers to execute arbitrary code, escalate privileges, bypass security, or manipulate data. These vulnerabilities exist in the contributed modules layer of the open-source CMS, not in Drupal's core installation. Site administrators must manually inventory and update all affected extensions, as patches are not delivered through the core update channel. Compensating controls like restricting administrative access are recommended where immediate patching is not possible.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security scanner tested on top 10 audited Web3 codebases, finds minimal flags

The developer of OpenClaw Audit, a free Solidity security scanner, tested it against ten heavily audited Web3 codebases. The scanner analyzed 608 source files across libraries including OpenZeppelin Contracts and Uniswap versions. It generated only 14 flags total, with 4 of the 10 codebases producing zero findings. Most flags were explainable false positives or known design choices rather than true vulnerabilities. The tool aims to minimize noise by remaining silent on sound code while highlighting areas requiring human review.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Creating Function Key Tester Reveals Browser and OS Inconsistencies

A developer building a web-based tool to test keyboard function keys encountered significant cross-platform inconsistencies. Laptop firmware often remaps the F1-F12 row to media controls, requiring users to hold an Fn key, a state JavaScript cannot detect. Browsers preemptively intercept keys like F1, F5, F11, and F12 for their own functions, preventing reliable detection. The solution involved using lower-level key codes and adding clear UI guidance rather than attempting an impossible technical fix.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Verax AI system defaults to denying requests with no explicit rules

Verax, an AI security system, operates on a default-deny policy for any request without a specific rule. Its initial policy explicitly permits only four named tools, blocking all others including those on connected servers. Refused attempts are cryptographically signed and logged locally, providing a clear audit trail of blocked actions. The system is designed so unauthorized attempts cannot bypass rules by using different tool names. However, the logging and signing mechanism has not yet undergone an independent security audit.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer releases experimental TypeScript compiler with pipeline operator

A developer has released a proof-of-concept TypeScript compiler that implements a pipeline operator syntax. The experimental package, available via npm, allows developers to write code where data flows through functions in left-to-right order rather than nested function calls. This approach aims to improve code readability, particularly in frameworks like React, by making data transformations more linear. The compiler supports both TypeScript and TSX files but requires using its own command-line tool for compilation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Engineer argues for logs over external polling for production health checks.

A developer critiques reliance on basic health endpoints for monitoring scheduled tasks like media imports. They propose a three-layer system using liveness, readiness, and structured completion logs. This approach aims to capture not just immediate failures but also silent job failures missed by simple probes. The method provides a detailed event timeline to aid incident investigation and reconstruction.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Reader identifies flaw in software fix, proposes durable task tracking system

A reader responded to a developer's technical note by pointing out a fundamental flaw in their proposed fix for a task delegation system. The original fix removed time limits for waiting tasks rather than creating explicit, machine-owned records with deadlines. The reader proposed that durable waits require system-owned records containing task IDs, explicit deadlines, and next actions for reconciliation. The developer confirmed the reader's analysis was correct and implemented their suggestion as a project ticket. The incident highlighted the difference between agent promises and system-enforced durability in distributed task management.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI launches AI training and research initiative for small businesses

OpenAI is connecting its research on AI in the workplace with a new training program for small businesses. The company partnered with America's Small Business Development Centers to provide hands-on workshops, local guidance, and access to ChatGPT Plus. This initiative is based on findings from OpenAI's report, which shows AI can help small teams manage tasks across functions like customer service and product development. The program aims to help businesses identify practical, task-specific uses for AI rather than requiring a broad strategy first. Over 1,000 small businesses are expected to participate in the national pilot.

0 comments Read more at DEV Community
← NewerPage 770 of 3166Older →