SShortSingh.

Programming

0
ProgrammingHacker News ·

LiveNerf Tool Tracks Real-Time Performance Changes in Claude Opus Models

A developer has published an open-source tool called LiveNerf on GitHub to monitor whether Anthropic's Claude Opus models have been quietly degraded over time. The project addresses a concern common among AI users that model capabilities may be silently reduced, or 'nerfed,' after initial release. The repository gained traction on Hacker News, accumulating 38 points and sparking community discussion. The tool appears designed to run ongoing benchmarks or comparisons to detect any shifts in model output quality. It reflects broader user interest in holding AI providers accountable for undisclosed changes to their deployed models.

0
ProgrammingDEV Community ·

How to Build a Reversible PII Redaction Layer to Protect Data Sent to LLM APIs

As AI agents increasingly process emails, tickets, and databases, sensitive personal data such as ID numbers and phone numbers routinely gets embedded in prompts and sent to third-party LLM APIs without deliberate intent. A developer reviewed multiple Vietnamese codebases and found a recurring pattern where raw ticket content containing customer PII was passed directly to API calls. To address this, they built a reversible redaction layer using Python and Microsoft Presidio, an open-source PII detection library, extended with custom recognizers for Vietnamese national ID numbers and mobile phone formats. The system replaces sensitive values with placeholder tokens before sending data to the LLM, stores the mappings in a local session vault, and restores real values only after the response is returned. The approach is framed as a compliance necessity given Vietnam's Decree 13/2023 and the Personal Data Protection Law taking effect on January 1, 2026, which impose real legal risk on uncontrolled cross-border data transfers.

0
ProgrammingDEV Community ·

Learn Python Collections by Building a Personal Expense Tracker

A new tutorial on DEV Community teaches Python developers how to manage collections of data by building a personal expense tracker. The project uses Python lists, dictionaries, and loops to record and display multiple expense entries. Users learn to store structured records by bundling item names and costs into dictionaries, then appending them to a list. A while loop keeps the program running, allowing continuous input until the user chooses to view a summary. The tutorial is aimed at beginners who already understand basic Python variables and the input() function.

0
ProgrammingDEV Community ·

EF Core vs Marten and Polecat: Choosing the Right .NET Data Tool

In .NET development, EF Core remains the default ORM for genuinely relational data — such as tables queried independently or schemas shared across services — but it adds complexity when used to model aggregates like orders with nested items and addresses. Tools like Marten (for PostgreSQL) and Polecat (for SQL Server) store entire domain objects as JSON documents in the same database already in use, eliminating the need for a separate document database. The common pain points of EF Core overuse include growing Include chains, AsSplitQuery workarounds, and frequent migrations for unsettled schemas — symptoms that suggest a document model may be more appropriate. With a document session, an aggregate is loaded by ID, modified, and saved in a single commit, avoiding the mapping overhead EF Core requires to reassemble a unified domain object from relational tables. The core guidance is to use EF Core where data is truly relational and reach for Marten or Polecat where the domain naturally treats an object as one cohesive unit.

0
ProgrammingDEV Community ·

Azure DocumentDB 0.109 Uses Native PostgreSQL Indexes to Match MongoDB Query Performance

Azure DocumentDB, a PostgreSQL extension, has demonstrated in version 0.109 that it can handle MongoDB-style queries involving filtering, sorting, and pagination using a single compound index scan. The test replicated an earlier MongoDB benchmark that highlighted the performance advantage of document models over normalized relational databases for one-to-many relationships. DocumentDB achieves this by leveraging PostgreSQL's extensibility to define native Extended RUM indexes suited for non-relational data schemas, rather than relying on standard RDBMS indexes. The execution plan confirmed that a single index scan covered all four query stages — $match, $sort, $limit, and $project — with no additional sort or filter operations required. This positions DocumentDB as a performance-compatible alternative to MongoDB for document-model workloads built on PostgreSQL.

0
ProgrammingDEV Community ·

Developer Builds Local AI Tool That Converts Manhwa Chapters into Recap Videos

A developer has released an open-source tool called Aniflow that automates the creation of narrated recap videos from manhwa chapters, mimicking a popular YouTube format. The pipeline uses YOLOv8 for panel detection, OCR for dialogue extraction, a local LLM for narration scripting, and FFmpeg for final video rendering. The tool supports two modes: a dialogue recap that preserves speech bubbles and a narrated recap that removes and inpaints them for a cleaner look. The entire stack runs locally by default using Ollama and Edge TTS, with no API keys or subscriptions required, though cloud models like Gemini and ElevenLabs are optional. The project is available on GitHub under an MIT license, with a web UI and batch mode capable of processing over 50 chapters unattended.

0
ProgrammingDEV Community ·

Why Animated Icons Need Embedded Motion Metadata to Work Properly

Animated icons carry behavioral properties — such as triggers, duration, looping, and easing — that static metadata fields like name, size, or viewBox cannot capture. A single icon design can serve entirely different purposes depending on whether it plays once on click, loops during a pending state, or responds to keyboard focus, making those distinctions critical for correct integration. Without structured motion contracts, developers importing icons from libraries or APIs must manually reconstruct intended behavior in every implementation. Proposed metadata fields like trigger events, loop conditions, and intended duration would allow assets to communicate their design intent directly. This becomes especially important for accessibility, where animation must not be the sole means of conveying application state to users.

0
ProgrammingDEV Community ·

GEO Experiments Show Third-Party Sources Drive 85% of AI Engine Citations

Two Generative Engine Optimization experiments conducted by Zeeshan Yaseen and reported by Search Engine Land reveal that roughly 85–86% of AI citations come from earned third-party sources such as reviews, editorial roundups, and partner pages, not branded owned content. The second experiment ran for 30 days across six AI engines — including ChatGPT, Claude, Gemini, Perplexity, Google AI Mode, and Grok — tracking 15 commercial-intent SaaS buyer queries. Researchers found that simply counting brand mentions in AI responses is an insufficient metric, as it does not indicate which buyer questions triggered visibility, which sources supported it, or whether it drove commercial results. The findings do not suggest companies should abandon their own websites, but warn that GEO strategies built primarily around self-published content may overlook the broader source ecosystem AI systems actually retrieve. Experts conclude that meaningful AI visibility measurement must be tied to specific buyer questions on specific engines, backed by identifiable third-party source surfaces.

0
ProgrammingDEV Community ·

PrismGit: Open-Source AI-Powered Git Client Built on Electron and React

A developer has released PrismGit, a free open-source Git client that integrates an autonomous AI agent capable of reading repository state, running diffs, and executing Git actions like staging, committing, and pushing on the user's behalf. Built with Electron, React, TypeScript, and Vite, the app separates UI and backend processes to maintain responsiveness even during heavy operations. Beyond AI, PrismGit includes advanced features such as a drag-and-drop interactive rebase editor, a three-pane merge conflict resolver, and native support for Git Worktrees, Submodules, and LFS. The client supports four languages, ships with a Vitest and Playwright testing pipeline, and is licensed under the MIT License. The project is publicly available on GitHub for developers looking for a visually rich alternative to existing Git clients.

0
ProgrammingDEV Community ·

Developer Builds Suite of AI Agents Spanning Finance, Healthcare, and Research

A software developer has publicly documented the creation of several AI-powered applications designed to explore what large language models can do beyond simple prompt-response interactions. The projects include a Deep Research Agent that generates structured reports through multi-stage workflows, and an Autonomous Financial Research Agent that uses ReAct-style reasoning alongside memory systems and SEC EDGAR data. A dental appointment bot demonstrates AI integration with real business workflows, supporting booking via web, SMS, WhatsApp, and voice channels. An enterprise RAG system called NexusBase focuses on query routing, vector search, and structured response evaluation using a containerized architecture. All projects are available on GitHub with live demos, and collectively highlight practical patterns in agentic AI, retrieval-augmented generation, and production-grade application design.

0
ProgrammingDEV Community ·

How Developers Are Building 30-Day Automated Video Queues Using Shadow Studio

A technical walkthrough published on DEV Community outlines a method for building a 30-day automated video publishing queue using a browser-based platform called Shadow. The approach addresses a common bottleneck in content creator workflows, where ideation, rendering, and scheduling are typically managed across disconnected tools requiring manual intervention. Shadow consolidates these steps into a single pipeline backed by PostgreSQL, using row-level locking to assign render jobs only when slots are available, avoiding idle background processes. A priority-weighted scheduling formula balances render fidelity, persona consistency, and editorial cadence, while a perceptual colour-difference standard called CIEDE2000 ensures visual consistency of virtual personas across all queued videos. Real-time progress updates are delivered to the browser via Server-Sent Events, eliminating the need for manual polling during the render process.

0
ProgrammingDEV Community ·

How One Developer Built a 6-Case Test Harness to Safely Swap AI Providers in a Hiring SaaS

A solo SaaS developer building an AI-powered candidate scoring tool argues that sharing a common API interface across OpenAI, Claude, and Gemini does not guarantee consistent scoring behavior. To manage this, they designed a versioned scoring contract backed by six acceptance test cases that any provider-model pair must pass before being promoted to production. The system uses a domain-specific scoreCandidate() abstraction rather than a generic chat method, preserving a clear boundary between untrusted resume input and downstream hiring decisions. Key design choices include local computation of weighted scores, strict schema validation on every response, and treating missing evidence as null rather than zero to avoid false precision. The developer also separates batch processing from interactive calls, and routes failed responses to manual review rather than silently defaulting them to a passing score.

0
ProgrammingHacker News ·

Developer Proposes Deser as a Fresh Approach to Rust Serialization

A developer has published a proposal called Deser, aimed at rethinking how serialization works in the Rust programming language. The article, posted on September 29, 2026, outlines potential improvements or alternatives to existing serialization frameworks in Rust. The piece was shared on Hacker News, where it attracted modest early engagement with 8 points and 2 comments. Serialization is a critical aspect of Rust development, commonly handled by libraries such as Serde, making any proposed rethink a topic of interest to the community.

0
ProgrammingDEV Community ·

How to Build Lean, Privacy-Safe Error Tracking for React and FastAPI E-Commerce Apps

A practical guide outlines how e-commerce teams using React storefronts with FastAPI or Node.js backends can implement lightweight exception tracking focused on answering narrow incident questions. The approach recommends capturing only essential fields — such as exception type, scrubbed message, service, route template, and a shared request ID — while explicitly excluding payment tokens, cart contents, emails, cookies, and authorization headers. Engineers are advised to validate an allowlist of safe fields against representative fixtures before selecting any tracking backend or SDK. Full-featured platforms like Sentry, Bugsnag, or Datadog remain the better choice when distributed tracing, session replay, or source-map processing is required. The guide also stresses that data minimization alone does not satisfy GDPR deletion or export obligations, which must be addressed as separate compliance requirements.

0
ProgrammingDEV Community ·

Engineers Argue AI Vibe Coding Needs a Design Spec Before the Build Begins

A software engineering debate has emerged around 'vibe coding,' the practice of using AI agents to build software driven largely by intuition and rapid iteration. Developer Don Johnson proposed a loop — Vibe, Build, Break, Understand, Stabilize, Perfect — arguing that intuition alone is not the flaw, but stopping there is. A responding engineer contends that this loop, while valuable, still allows AI agents to generate sprawling codebases before any human-defined boundaries or specifications are in place. The critic proposes inserting a lightweight spec and design-review phase before the build step, shifting the division of labor so humans define intent and constraints first, then verify AI output rather than reverse-engineer it. Drawing on experience testing a cardiovascular device, the author warns that validating an implementation is meaningless if the underlying model of the problem is wrong — a risk amplified when AI can produce dozens of files and dependencies in a single build step.

0
ProgrammingDEV Community ·

Critical RCE Flaw in HashiCorp Vault Unpatched as OpenBao Releases Fix

A critical remote code execution vulnerability has been discovered in both HashiCorp Vault and OpenBao, allowing unauthenticated attackers to fully compromise affected servers by chaining four distinct flaws. OpenBao has already addressed the issue by releasing patched versions 2.6.3 and 2.7.0, but HashiCorp Vault remains unpatched due to a breakdown in coordinated disclosure between IBM and HashiCorp. The exploit requires only unauthenticated access and a misconfigured Raft snapshot policy to trigger a complete server takeover. Organizations still running HashiCorp Vault are advised to apply temporary mitigations such as network segmentation, access restrictions, and enhanced monitoring while awaiting an official patch. The situation highlights wider industry challenges around vendor coordination and the risks posed by delayed patch deployment in enterprise environments.

0
ProgrammingDEV Community ·

Developer fixes DKMS error message that sent millions of Linux users to forums

A Linux user on EndeavourOS encountered a cryptic DKMS error after a kernel update that read 'Manual intervention is required!' but gave no actionable path or guidance. Searching online revealed that countless users on Arch, Manjaro, and EndeavourOS forums had faced the same message and resorted to guesswork, including wiping DKMS directories or reinstalling drivers. The developer traced the root cause to the DKMS source code, finding that the tool already knew the broken module path internally but never included it in the error output. A small patch was submitted to the open-source dkms-project on GitHub to append the specific broken path directly to the error message, turning a vague warning into an actionable one. The fix highlights how a single-line change in widely deployed infrastructure software can save significant troubleshooting time across millions of Linux systems worldwide.

0
ProgrammingDEV Community ·

15 Free Resources to Study Computer Science at University Level

A curated list of 15 free resources has been compiled for anyone looking to learn computer science at a university standard without paying tuition. The collection includes offerings from MIT OpenCourseWare, Stanford Online, Carnegie Mellon, Coursera, and edX, all accessible without mandatory sign-in. Standout picks include OSSU Computer Science, which assembles a full CS degree from free courses, and MIT's OpenCourseWare, covering over 2,500 real courses with lecture notes, videos, and exams. The list also features specialized topics such as coding interview prep via NeetCode, Linux kernel observability with eBPF, and reproducible development environments using Nix. The full, regularly updated directory is maintained at brianpfeil.com/learn, organized by learning goals including cloud, AI, and coding paths.

0
ProgrammingDEV Community ·

Best Practices for Capturing Node.js Express API Errors With Request Context

A technical guide outlines how developers should handle error tracking in Node.js Express-based notification services by attaching stable delivery IDs and selective request metadata to error events. It warns that storage costs are driven primarily by event volume, retained bytes, and retention duration — not stack-trace length — making a strict field policy more effective than blind sampling. The guide recommends excluding sensitive personal data such as email addresses, phone numbers, and authorization headers from error events, citing GDPR obligations around data minimisation even in debugging contexts. Developers are advised to separate short-lived raw error events from compact audit ledgers, using the delivery ID as the common join key between the two. The piece also cautions that a basic error-capture service cannot replace distributed tracing, alerting systems, or source-map processing in a production observability stack.

← NewerPage 799 of 3169Older →