SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Developer releases two free open-source starter templates built with Next.js and Astro

Developer Yethikrishna R has open-sourced two production-ready website starter templates, both available on GitHub under the MIT license. The first is a Next.js 14 portfolio template featuring TypeScript, Tailwind CSS, Framer Motion, an MDX blog, a command palette, and full SEO support. The second, called Varsha, is an Astro 5-based site starter designed for marketing sites, documentation portals, and blogs, offering 18-plus color palettes, a built-in design system, multilingual docs, and a perfect Lighthouse score. Both templates have live demos hosted on their own domains and are free to fork, modify, and deploy. Contributions and issue reports are welcome on both repositories.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer launches free, ad-free morning quote and greeting card generator

A developer has launched Morning Quote, a free web tool designed to help users create daily motivational greeting cards without ads, paywalls, or sign-ups. The tool runs entirely client-side, meaning it processes everything in the browser with no user tracking. It supports high-resolution card generation with customizable typography and two aspect ratios — square and vertical story format — suited for platforms like WhatsApp and Instagram. The generator is available in three languages: English, Spanish, and Portuguese. The tool is accessible at morning-quote.com, and the developer is actively seeking user feedback.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Writing Team Crafts Satirical Tech CEO Scripts Through Iterative Client Feedback

A content creator used a 12-role AI production team to write scripts for a satirical video series poking fun at tech executives including Mark Zuckerberg, Bill Gates, and Satya Nadella. Client feedback pushed each script from mild workplace humor toward increasingly absurd scenarios, such as Zuckerberg testing whether a boiling kettle is hot and Gates obsessing over a mismatched font on page 42. The AI team notably removed a line implying large-scale unauthorized user experimentation, keeping the Zuckerberg sketch grounded within a boardroom setting. The Gates episode evolved to show a character ignoring the main text of a document entirely in favor of minute typographic details. The Nadella sketch concluded with his instinct to 'connect' extending beyond competitors to a mosquito, visualized as a collaboration diagram update.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

BGP-based threat blackhole service promises quick setup to block brute-force attacks

A developer has launched a BGP blackhole service that aggregates threat intelligence from sources like Spamhaus, fail2ban feeds, and proprietary attack data into a community network peers can join via GRE tunneling. The system, built around AS23026, allows users to sign up, configure a private ASN, and receive a ready-to-use router configuration within minutes. The creator reports that running the service on their own edge router (AS54380) has significantly reduced SSH brute-force attacks. Threat data is stored on a blockchain and distributed across a network of nodes the developer has been building since 2019. The service is available with a two-week free trial, after which it costs $59 per month with the option to cancel anytime.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

How to Build a Custom EEPROM Programmer Using Arduino and Python

A beginner-focused tutorial published on DEV Community walks through building a custom EEPROM programmer using an Arduino board as the hardware platform. EEPROM, or Electrically Erasable Programmable Read-Only Memory, is a type of non-volatile memory that can be electrically erased and rewritten. The project requires an Arduino board, a compatible EEPROM chip, and basic wiring connecting the two via I2C pins. Arduino's built-in EEPROM and Serial libraries handle data read/write operations and serial communication respectively. On the software side, Python's pyserial library is used to send commands to the Arduino over a serial port, enabling full control of the programmer from a computer.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Native PDF vs OCR Text Extraction: How Template Ownership Should Drive Your Choice

A technical guide published on DEV Community outlines a framework for choosing between native PDF text extraction and OCR in Node.js pipelines, with document template ownership as the deciding factor. Teams that control their own PDF templates should use native extraction, as it allows pre-release testing and reliable page-boundary preservation. When customers upload files or scans are valid inputs, OCR becomes necessary since visual correctness does not guarantee an extractable text layer. The guide emphasizes treating page numbers as provenance data, carrying them through redaction, chunking, and retrieval to ensure citations remain accurate and auditable. It also warns against logging raw document text, recommending pseudonymous identifiers and count-based telemetry in line with OWASP data-handling guidance.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Researchers Adapt Decision Transformers to Help Revive Endangered Heritage Languages

A researcher exploring offline reinforcement learning techniques discovered a potential application for Decision Transformers in heritage language preservation after a colleague working with the Cherokee Nation raised challenges around building tutoring systems for critically endangered languages. The core problem, termed 'extreme data sparsity,' involves languages with fewer than 2,000 fluent speakers, minimal digitized corpora, inconsistent orthography, and only a handful of elder speakers. Standard NLP approaches requiring 10,000-plus parallel sentences are impractical for languages like Ainu or Livonian, which have fewer than 30 fluent speakers worldwide. The proposed solution reframes language learning as a sequential decision-making problem, using Decision Transformers — originally developed by Chen et al. at UC Berkeley — to condition pedagogical decisions on target proficiency outcomes rather than relying on large training datasets. The research highlights both the technical and ethical complexities of deploying AI in culturally sensitive, resource-scarce linguistic communities.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Engineer Builds Metrics-First AI Resume System That Demands Numbers Before Rewriting

A software engineer published a technical framework on DEV Community showing why generic AI resume prompts produce vague, buzzword-heavy output. The core insight is that language models need quantitative data — before/after metrics, timeframes, and impact ratios — to generate meaningful resume improvements. The author built a structured Python pipeline using dataclasses to score every resume bullet across four dimensions: quantification strength, action verb specificity, temporal precision, and scale of impact. Only bullets that pass a deterministic scoring threshold are then passed to a large language model like GPT-4o for rewriting. The framework argues that the act of extracting real numbers from your own work history is itself more valuable than any AI-generated paraphrase.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI Launches Agents API in Public Beta, Replacing the Assistants API

OpenAI unveiled its Agents API at DevDay 2026, now available in public beta, which manages the core agent loop — including sessions, orchestration, context compaction, and error recovery — so developers no longer need to build it themselves. The API is built on the same managed infrastructure that powers Dots, OpenAI's own always-on agents announced at the event. It replaces the Assistants API, which was shut down in August, and becomes the primary stateful development path on OpenAI's platform. Developers can supply custom tools, choose from three execution environments, and build multi-turn agents using the Python SDK version 3.13.0 or later. During the beta period, there are no additional API fees beyond standard model and container usage rates, though data residency is currently limited to the US and Zero Data Retention is not supported.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Meta Ad Prices Fell for Seven Quarters Then Rose for Eleven, Earnings Data Shows

An analysis of Meta's quarterly earnings releases from Q4 2021 to Q2 2026 tracks year-over-year changes in average ad prices and impression volumes across Facebook, Instagram, Messenger, and WhatsApp. Ad prices declined every quarter from Q1 2022 through Q3 2023, hitting a low of minus 22% in Q4 2022, before recovering and rising consistently from Q4 2023 onward. By Q1 and Q2 2026, average price per ad was up 12% year over year, while ad impressions also grew in all 19 quarters without exception. Regional data available from Q1 2023 shows Asia-Pacific consistently recorded the fastest impression growth but the weakest price growth, while the US & Canada and Rest of World led on price gains in Q2 2026. Meta does not publish absolute CPM figures; these percentages, drawn directly from its investor relations materials, represent company-wide averages across all ad formats and objectives.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

NVIDIA's OpenShell Puts Security Guardrails Around Autonomous AI Agents

NVIDIA has released OpenShell (version 0.1.1, currently in alpha), a runtime designed to contain autonomous AI agents that have shell access. Unlike chatbots that merely suggest commands, AI agents can execute them directly, creating a far larger security risk if compromised through prompt injection or model failure. OpenShell addresses this with a three-layer model: a containerized sandbox, a declarative YAML-based policy engine that allows, denies, or escalates commands for human approval, and a blast-radius tracker that logs file reads, writes, network calls, and subprocess activity. Crucially, the agent itself does not enforce its own limits — the external runtime does, removing reliance on the agent's own judgment. The project is described as an emerging architectural approach rather than a production-ready solution.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

FinAutoRubric Uses Multi-Agent Loop to Auto-Generate Financial Evaluation Rubrics

FinAutoRubric is a new framework designed to automate the creation of evaluation rubrics for financial research AI agents, addressing the high cost and inflexibility of manually written benchmarks. The system allows domain experts to write reusable guidance once, which is then applied across queries through a multi-agent pipeline consisting of a writer agent and a reviewer agent. The writer agent researches and drafts expected values for a given query, while the reviewer agent validates those values against sources and expert criteria. If the reviewer's confidence falls below a set threshold, the case is escalated to a human analyst for resolution. By separating reusable expert guidance from query-specific rubric generation, FinAutoRubric aims to encode institution-specific standards — such as compliance rules and data-source preferences — without embedding proprietary information into model training data.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Webhook Signature Checks Break After Deploy and How to Fix Them

Webhook signature verification failures after deployment are commonly caused by JSON middleware parsing the request body before the signature check runs, meaning the server compares a different byte sequence than what the sender originally signed. Frameworks like Express replace the raw request stream with a JavaScript object, and re-serializing that object does not reliably reproduce the original bytes due to differences in whitespace, escaping, or number formatting. The fix is to preserve the raw request buffer and run signature verification before any JSON middleware processes the body, since middleware order effectively functions as executable security policy. A robust implementation should also assign each signing secret a key ID, accept both old and new secrets only during a time-bounded rotation window, and log which key validated each event. For sensitive operations such as updating a payment ledger, an unverified signature should result in no action taken and no response that leaks details about which key nearly matched.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Opens Forum for Community Connection and Project Sharing

A developer on DEV Community has put out an open invitation for fellow tech professionals to connect and engage. The post acknowledges that working in technology can sometimes feel isolating despite being a highly networked field. The author encourages others to share what they are currently building or learning. The informal call-out aims to foster a sense of community among developers who may feel disconnected.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why AI Agents Are Wasting Money on Tasks Simple Code Could Handle

A growing anti-pattern in LLM-based applications involves using AI models to perform tasks that are fundamentally deterministic, such as routing queries or formatting responses, when straightforward code would suffice. This practice, described as running 'if-statements with a GPU bill,' inflates costs by charging for unnecessary inference calls, added latency, and hallucination risk. In a typical over-engineered support agent, an LLM may be invoked multiple times for decisions a developer could hard-code in a few lines. Engineers are advised to audit their agent workflows and distinguish between tasks that genuinely require semantic reasoning and those that can be handled by templates, boolean logic, or direct API calls. Refactoring these workflows into explicit control flow can significantly reduce operational costs and improve system reliability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Digital Sovereignty Matters More Than Choosing a European Data Center

European businesses storing data with US-based cloud providers remain exposed to American government access under the CLOUD Act, regardless of where the physical servers are located. Selecting an AWS Frankfurt region, for example, does not shield data if the parent company is subject to US jurisdiction. Experts argue that true digital sovereignty requires vendor independence, transparent data governance, and portable infrastructure — not just regulatory compliance. Tools like Terraform enable multi-cloud deployments across providers such as AWS, Hetzner, and local hosts, giving businesses the flexibility to migrate workloads without costly lock-in. With European regulations tightening and penalties rising, companies that proactively build sovereign infrastructure today may avoid expensive retrofits and legal exposure tomorrow.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Malicious Cloudflare Worker Hit Brevo for 4 Hours, Affecting 100,000+ Sites

On September 14, 2026, attackers used a hardcoded Cloudflare API key found in Brevo's source code to deploy a malicious Cloudflare Worker that silently altered HTTP responses at the network edge for approximately four hours. Because the attack modified responses in transit rather than touching origin files, standard integrity checks and file hash monitoring failed to detect it, and security firm Sansec estimated over 100,000 websites loaded the tampered scripts. The Worker stripped security headers and injected a fake browser-verification overlay mimicking a Cloudflare challenge, tricking visitors into running a PowerShell command via a ClickFix technique that moved code execution onto their own machines. The incident came just four days after Brevo disclosed a separate SAML single sign-on vulnerability that had exposed 138 customer accounts and led to phishing emails and data exports, though Brevo has not confirmed any link between the two events. Brevo revoked the compromised key, removed the hardcoded credential, deleted attacker-created DNS records, and purged the edge cache; both Brevo and Cloudflare confirmed the malicious content was fully removed by September 15, 2026.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a pytest Run Can Show All Tests Passing While Still Returning Exit Code 1

A developer encountered a paradox during a regression check on 2026-09-27 where all 1,269 collected test cases eventually showed passing results, yet the pytest command consistently returned exit code 1. The discrepancy arose because process exit codes and individual test outcomes answer different questions, and retries can cause these two measures to diverge. Initial runs revealed failures and errors tied to a missing browser-runtime setting and a localhost binding issue, not a fundamental code problem. After carefully isolating the 69 affected test nodes by their exact IDs and authorizing only the necessary browser launch and local bind operations, a targeted retry resolved the outstanding failures. The key takeaway is that a completion report should preserve both the command result and the test roster result, rather than collapsing them into a single green or red verdict.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Ledge.sh lets users run shell commands and code directly inside Markdown notes

A developer has released Ledge.sh, an open-source Markdown notebook that allows users to execute shell commands, code, SQL, and API calls from within their notes. The tool was created to eliminate the repetitive process of copying commands from notes into a terminal. Ledge runs a real shell environment and can be hosted locally or accessed remotely via SSH through a companion ledge-server component. It supports Mac, Windows (via WSL), Linux, iOS, and Android, with Android support currently in beta. Built on Bun and Electrobun, the project is freely available on GitHub and actively seeking community feedback and contributors.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

How AI Agents Should Handle Test Results After a Dependency Version Upgrade

When a software dependency upgrades to a new version, a previous PASS result from an AI agent remains valid only for the version it was tested against, not the newer one. The article argues that deleting old results loses useful history, while silently applying them to new versions misrepresents what was actually proven. Instead, the recommended approach is to preserve historical observations with their original scope and mark the new version's status as 'not established' until a fresh check is run. A new observation should be created for each distinct version, environment, or configuration being tested, keeping outcomes tightly bound to their specific context. If two runs produce conflicting results under apparently identical conditions, the disagreement should be recorded and investigated rather than resolved by defaulting to the most recent result.

0 comments Read more at DEV Community
← NewerPage 796 of 3168Older →