SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Power BI Data Modelling Explained: Star Schema, Flat Tables, and Relationships

Power BI, Microsoft's business intelligence platform, relies heavily on well-structured data models to deliver accurate reports and efficient calculations. Data modelling involves organizing tables and defining relationships so that information can be analyzed correctly across different business areas. A flat table stores all data in a single structure, which suits small or one-off datasets but becomes inefficient as data grows. The star schema, Power BI's recommended modelling pattern, places a central fact table surrounded by dimension tables, enabling faster queries and easier DAX calculations. The snowflake schema extends this further by normalizing dimension tables into additional related tables, offering greater structure for complex data environments.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Dev Shares How Learning Java Changed His View of Programming Languages

A developer recounts his transition from Python to Java, crediting YouTube educator Bro Code as a key influence in his learning journey. Initially tempted to quit, he pushed through and found Java approachable once he grasped the fundamentals of object-oriented programming. The experience reshaped his understanding of programming languages, leading him to see them not as mere translators but as tools built to solve specific industry problems. He notes Python's strength lies in its low barrier to entry and readability, while Java was designed for stability, backward compatibility, and cross-platform execution via the JVM. The developer says he studied Java up to method overriding before pausing, and plans to cover his project experience in a future post.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Easy SSH extension brings Ctrl+click file downloads to VS Code and Cursor

A solo developer has released Easy SSH, a free, MIT-licensed VS Code and Cursor extension that embeds an SSH terminal directly inside the editor. The tool is designed for lightweight server sessions — logging in, inspecting files, and transferring them — without requiring any software installed on the remote server. Users can download files by Ctrl-clicking or Cmd-clicking their names in the terminal, upload files via drag-and-drop, and navigate directories with the same click gestures. The extension supports password, private key, and SSH agent authentication, as well as multi-hop connections through jump hosts, with SSH config import available. Released as version 0.1.3, it is available on the VS Code Marketplace, Open VSX, and GitHub, where the developer is actively seeking bug reports.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI Token Costs Vary Sharply by Language: Czech 2x, Chinese Near English Parity

A solo developer in Korea tested the same customer-support prompt across 27 languages using OpenAI's tokenizers and found significant cost differences between languages. Simplified Chinese tokenized at nearly the same cost as English (1.03x), while Czech proved the most expensive at 2.0x English token count. The newer o200k_base tokenizer, used since GPT-4o, dramatically reduced costs for Indic, Arabic, and Thai scripts compared to the older cl100k_base encoder — Bengali dropped from 6.1x to 1.68x English tokens. Heavily inflected Latin and Cyrillic-script languages like Polish and Ukrainian now rank among the costlier options due to diacritics splitting into multiple tokens. The developer recommends writing system prompts in English and reserving non-English text only for user-facing content to reduce compounding token costs at scale.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Solo Dev Runs 100-URL Batch Test on Local AI Agent Framework Built in 6 Months

A 43-year-old Vietnamese developer has completed the first real batch test of VNML Agent Framework, processing 100 URLs using a multi-agent AI system. The framework runs entirely on a local GTX 3050 Ti laptop with just 4GB VRAM, requiring no cloud infrastructure or team support. The project took six months to build, with the developer noting that the Vietnamese IT market often views professionals his age as too old. He emphasized that sharing transparent, real-world metrics is more valuable than presenting polished results. The full source code and a detailed metrics report have been made publicly available.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a $49/month website care plan uses Python scripts and audit logs to back every promise

A small Santa Barbara company called Weio, Inc. has published the technical method behind its $49/month website maintenance plan, which uses roughly 250 lines of Python and four JSONL log files to verify every claim made on its sales page. The plan makes five core promises — including 5-minute uptime checks, daily backups via git commits, up to four monthly content changes, and a monthly report — each tied to an automated mechanism that generates verifiable evidence. Rather than relying on a simple HTTP 200 response, the uptime checker compares the live page against a stored hash of the deployed file to catch DNS hijacks and accidental preview deployments. Alerts are rate-limited to one per site every six hours to prevent alert fatigue during extended outages. The company also states that customers who cancel receive a full zip of their site files, a policy it frames as the foundation of trust for all other promises.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Modern scroll-driven animations: separating entry/exit with robust CSS fallbacks

A modern approach to scroll-driven web animations recommends splitting entry and exit effects into two separate animations rather than combining them in a single keyframe block. This separation allows independent control of easing, timing, and transforms, reducing layout bugs across different screen sizes and dynamic content. The technique leverages native CSS properties like animation-timeline: view() and animation-range, anchoring animations to semantic scroll ranges instead of fragile manual percentage calculations. Because browser support for scroll-driven animations is not universal, developers are advised to implement feature detection and fall back gracefully to the Intersection Observer API where needed. The overall approach prioritizes resilience, accessibility, and declarative CSS intent over geometry-dependent workarounds.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Wrium is a lightweight reactive JavaScript library that needs no build tools

A developer has released Wrium, a small open-source JavaScript library designed to bring reactivity to web interfaces without requiring a bundler or compiler. Users simply add a script tag to an HTML file and use Vue-inspired directives such as v-if, v-for, and v-model to bind data to the page. When data changes, Wrium automatically updates the relevant parts of the UI, eliminating the need to manually query and modify DOM elements. The library weighs approximately 10.9 KB minified, has zero dependencies, and ships with TypeScript declarations under the MIT license. Wrium is positioned not as a replacement for large frameworks but as a lightweight alternative for projects where full-scale tooling is unnecessary.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

NVIDIA Launches OpenShell to Sandbox AI Agents and Enforce Access Policies

NVIDIA has released an open-source project called OpenShell, designed to provide a secure, isolated runtime environment for autonomous AI agents. The tool addresses risks such as credential leaks, prompt injection, and unintended system commands by running each agent inside its own sandbox with kernel-level controls. A built-in policy system lets developers define exactly which files, network hosts, and system calls an agent may access, with a gateway enforcing those rules at runtime. OpenShell supports Linux, macOS on Apple Silicon, and Windows via WSL 2, and requires Docker, Podman, or host virtualization to operate. SDKs are available for Python, TypeScript, Go, and Rust, allowing developers to integrate OpenShell into their own applications.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Flask Coupon Calculator to Solve Real Cashier Math Challenges

A developer and cashier created a lightweight Flask web app called Coupon Calculator to simplify discount calculations at checkout. The project was motivated by the creator's personal struggle with dyscalculia, which makes mental math difficult during busy retail shifts. The app allows users to enter an original price and apply either a percentage or fixed discount, then instantly view the savings and final price. It includes input validation, protection against negative values, and currency-safe rounding to two decimal places. The tool was built as a practical, everyday solution and is available as a live web app.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Security Audit Flags 9 Vulnerabilities in $3.4B USDT0 Stablecoin Contracts

A DeFi security research team conducted a surface-level audit of USDT0, a cross-chain stablecoin with $3.45 billion in total value locked across Ethereum and Layer-2 networks including Arbitrum, Optimism, and zkSync. The audit, dated September 30, 2026, identified nine distinct attack vectors and assigned the protocol an overall risk score of 7.4 out of 10, categorized as High. The most critical findings include overly centralized admin privileges, an upgradeable proxy with an unprotected admin slot, and mint/burn functions whose access controls can be modified by the contract owner. Reviewers also flagged a governance timelock that can be bypassed via an executeImmediate() function, and cross-chain bridge signature handling vulnerable to replay attacks. While the codebase relies on audited OpenZeppelin libraries, researchers concluded that centralization of authority and bridge signature management represent the most exploitable weaknesses in the current deployment.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds AI-Readable Next.js Site Using Markdown Mirrors and Content Negotiation

A developer behind AskedTheAI, a shopping guide powered by multiple AI models, has shared a technical approach to making web pages more accessible to AI agents and crawlers. Before launching the site, they implemented a system that generates a Markdown copy of every page directly from Next.js build output, avoiding the need to maintain separate renderers. The same URL can return either HTML or Markdown depending on the Accept header sent by the requesting client, enabling seamless content negotiation. Supporting files llms.txt and llms-full.txt act as a structured map of the site's content for AI systems, while IndexNow pings notify Bing and Yandex of updates immediately. The developer published the full implementation code, framing the setup as a practical standard for sites that expect significant AI-agent traffic.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Rust crate arrayref poisoned with malware that ran at compile time, deleted in 86 minutes

On August 20, 2026, a malicious version of the popular Rust crate arrayref (0.3.10) was published to crates.io, carrying a typosquatted dependency called proc-macro1 whose build script downloaded and executed a binary on developers' machines during compilation. The attacker, operating from an account named dtolney — one letter off from trusted maintainer dtolnay — staged a clean decoy crate before adding the malicious build script, and also yanked legitimate arrayref versions to steer users toward the infected release. The Rust security response team deleted the malicious crate 86 minutes after publication, locking the compromised account and restoring clean versions; two other affected crates, internment and append-only-vec, were removed within two hours. According to RUSTSEC-2026-0260, the poisoned version was downloaded 2,285 times, with the maintainer's account believed to have been compromised rather than acting maliciously. The incident highlights a fundamental aspect of Rust's build system: Cargo runs dependency build scripts with full developer permissions and no sandbox, meaning a single added dependency line is sufficient to execute arbitrary code at compile time.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

React Challenge: Build a Virtualized List That Renders Only Visible Rows

A new coding challenge on ReactChallenges.com tasks developers with building a virtualized list that efficiently renders 10,000 contacts without mounting all DOM nodes at once. The exercise requires rendering only the rows visible within the scroll viewport, plus a small overscan buffer above and below, using fixed row heights and windowing calculations. Participants must implement the logic in App.tsx, tracking scrollTop and clientHeight to dynamically compute which rows to mount and unmount as the user scrolls. The scrollable container should reflect the full dataset height so the scrollbar behaves naturally across all 10,000 entries. The challenge is designed to teach core virtualization concepts — including useLayoutEffect and derived rendering — that underpin popular long-list libraries.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Warns: AI Writes Code Fast, But Human Oversight Remains Essential

A software developer who regularly builds AI-powered applications, including LLM agents and RAG systems, argues that generating code with AI is straightforward, but verifying its quality is the real challenge. AI-produced code can appear functional while hiding serious problems such as weak error handling, security flaws, duplicated logic, and incorrect assumptions not visible from the interface. The developer notes that AI lacks awareness of a project's full context and intentions, meaning incomplete requirements often lead to flawed gap-filling by the model. They advocate treating AI as a tool for boilerplate, refactoring, and exploration, while reserving critical architectural decisions for human judgment. The core lesson drawn is that a working prototype does not equal a well-built system, and developers must still understand the important decisions in any code they ship.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SuperAGI Evolves from Open-Source Tool to AI-Native CRM After Series A

Founded in 2020 by Ishaan Bhola and Mukunda NS, Palo Alto-based SuperAGI has grown from an open-source autonomous AI agent framework into a full AI-native CRM platform targeting sales, marketing, and customer support teams. The company recently closed a Series A funding round, reflecting investor confidence in its dual strategy of serving developers and enterprise go-to-market teams. Its core products include an open-source agent framework, a consolidated GTM platform, and an AI Sales Agent designed to automate prospect outreach around the clock. SuperAGI's technology stack is built on Python, FastAPI, OpenAI, LangChain, and vector databases, positioning it as an enterprise-ready alternative to fragmented toolsets. The company faces growing competition in 2026, notably from TypeScript-based OpenClaw, but maintains a strong foothold among Python-focused developers and enterprise users.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to manage AI prompts like production code — and the tradeoffs involved

A software engineering post on DEV Community outlines the infrastructure gap between AI demos and production-ready AI products, focusing on prompt management, usage tracking, and safety guardrails. The author proposes storing prompts in a database using a structured schema that tracks variables, language, versioning, and category, rather than scattering them across source files. A key tradeoff highlighted is that database-stored prompts lose git-style history, meaning version numbers indicate how many revisions exist but not what earlier versions contained. The system also includes per-request token usage tracking and a character-based budget estimator to prevent runaway API spending, though the latter is acknowledged as an approximation rather than a precise measure. Safety guardrails covering PII detection, toxicity scoring, and prompt-injection checks are included, but the author notes these rely on regex and keyword patterns, limiting their effectiveness to specific formats and languages.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Apache Cassandra's real exposure risk lies in JMX and internode ports, not CQL

A security analysis of Apache Cassandra deployments found that port 9042, the native CQL query interface, is rarely exposed to the internet, as administrators typically bind it to loopback. A ZoomEye scan conducted on September 26, 2026 identified over 5,000 Cassandra instances by app fingerprint, but returned near-zero results for publicly accessible port 9042. The greater risk comes from internode ports (7000/7001) and JMX management interfaces, which can leak cluster topology details or allow administrative operations if left reachable. By default, Cassandra's permissive authenticator accepts CQL connections without credentials from any host that can reach port 9042, making authentication configuration critical. Security best practices recommend auditing all listening sockets, verifying authenticator settings across every node, and restricting JMX access to dedicated management hosts only.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Understanding What Databases Actually Do Under the Hood

A developer reflecting on system design realized they lacked a foundational understanding of how databases work internally, beyond just writing SQL queries. The article explores how databases handle large-scale data retrieval, explaining why full table scans become impractical at millions of rows. Indexes, such as those on a user_id column, allow databases like PostgreSQL to locate relevant rows efficiently without scanning entire tables. The piece also distinguishes between index types — including B-trees, Hash indexes, and LSM Trees — noting each suits different read and write workloads. The author concludes that a system designer's role is not to implement these structures manually, but to understand access patterns well enough to choose the right database features.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Review of 19 Jev AI Trading Projects Finds No Clear Evidence of Profit

A trading tools developer reviewed all 19 publicly available Jev-based finance projects during the week of 24 September 2026, finding that most were demos or paper-trading experiments with no live profitable results. Jev is a structured AI model by TypeSafe AI that takes JSON state inputs and returns probability outputs, a format that superficially suits algorithmic trading. Of the 12 projects that touched actual trading or price prediction, only one was live-capable by default, while the rest ran on testnets, backtests, or synthetic data. Four projects directly compared Jev against simpler rule-based alternatives, and in none of those did Jev clearly outperform — in one stock prediction test, Jev scored 45% accuracy while a naive always-down strategy scored 51.7%. The most substantial project, QuantDinger, was flagged for deeper investigation in a follow-up series.

0 comments Read more at DEV Community
← NewerPage 782 of 3167Older →