SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

APIMart Launches Discounted AI API Aggregator Supporting GPT-5 and Sora 2

APIMart is a new AI API aggregator platform that offers discounted access to multiple AI services including GPT-5 and Sora 2. The platform targets developers and web professionals looking to integrate AI APIs at reduced costs. It was highlighted on DEV Community on August 14 by a contributor named Anthony Max. The service appears aimed at simplifying and lowering the barrier to accessing multiple AI APIs through a single aggregated platform.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a branch checkout silently deleted a pipeline's notifier for days

A software developer discovered that a long-running daily pipeline had silently stopped sending reports after a branch checkout step removed the notifier script from the working tree. The failure passed initial review because the bug only surfaced the day after deployment, once the target branch already existed. A reader's suggestion to run a deployed canary probe against production — rather than relying on source-control declarations — exposed the issue within minutes of manual testing. The root cause was a git workflow where checking out a single-file branch wiped all other repo files, including the script needed in a subsequent step. The developer recommends moving notifications before any push step, and periodically triggering scheduled jobs by hand to catch failures no static file check can reveal.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Fighting Scams Requires Targeting Full Infrastructure, Not Just Websites

Security analysts warn that focusing solely on malicious websites gives an incomplete picture of modern scam operations, which span social media ads, messaging accounts, phone calls, apps, and payment channels. A typical scam sequence involves multiple stages — from a sponsored post and fake landing page to a phone adviser and app installation — before funds are finally transferred. Removing the website alone rarely dismantles the broader operation, as replacement domains can appear within a day. Platforms like Scams.Report, NothingPhishy, and MuleHunt illustrate an approach that links victim evidence, infrastructure disruption, and financial-risk intelligence across the full incident lifecycle. Experts argue that effective scam prevention requires modelling the entire connected operation rather than treating any single component as the threat.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

GitHub Actions Basics: CI/CD Automation for DevOps Workflows Explained

GitHub Actions is a CI/CD platform built into GitHub that lets developers automate software delivery tasks such as testing, building, and deployment. Workflows are defined in YAML files stored within the repository and can be triggered by events like code pushes or pull requests. Core components include workflows, jobs, and steps, which together orchestrate the automation pipeline across configurable runner environments. Common failure points include network issues, misconfigured YAML files, dependency problems, and job timeouts, each of which can be mitigated through retries, logging, and proper dependency management. While GitHub Actions offers powerful automation capabilities, teams should weigh trade-offs around setup complexity, potential costs, and security considerations when handling sensitive credentials.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Anthropic Watermarks All Claude Outputs Globally Under EU AI Act Rules

Anthropic has begun embedding watermarks into all text generated by Claude models launched from 2 August 2026, in compliance with the EU AI Regulation's Code of Practice on Transparency of AI-Generated Content. The watermarking applies globally across all Claude products and platforms — including the API, Claude apps, AWS Bedrock, Google Cloud, and Microsoft Foundry — with no documented opt-out. For image files, Anthropic uses the open C2PA metadata standard, while the text watermark is described as embedded within the content itself and capable of surviving copying and some editing. Anthropic has not yet published technical documentation or detection tools, and has not disclosed the exact mechanism used. Researchers have separately demonstrated that AI watermarks can be forged or stripped, highlighting that watermarking what AI produces is only half the challenge — proving what content AI consumed during training remains unsolved.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Fixes Critical ORAM Bug That Stored 'Disk' Data in RAM All Along

A developer building Styx OS, a custom x86-64 microkernel with hardware-level security features, discovered a fundamental flaw in their experimental Oblivious RAM (PathORAM) implementation. The PathORAM feature, designed to hide physical disk access patterns on USB storage, was mistakenly storing all data in static RAM arrays instead of writing to the actual USB drive. As a result, the supposed security layer left no real access pattern to conceal and erased all stored data on every reboot. The developer fixed the bug by replacing the in-memory arrays with direct read and write functions routed through the USB Mass Storage driver, mapping operations to physical Logical Block Addresses. The corrected implementation was committed to the Styx OS repository, restoring the intended on-disk persistence and access-pattern obfuscation.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

MCP Adds Native HTML UI Support, But Default Security Policy Blocks All External Requests

The Model Context Protocol has introduced MCP Apps, its first native UI extension built into the stable core spec, allowing tools to declare interactive HTML interfaces rendered inside sandboxed iframes. Developers must use the exact MIME type 'text/html;profile=mcp-app' or the host will treat the resource as a plain document with no interactive features. The platform's Content Security Policy defaults to fully blocking all external domains, meaning fetch calls or CDN script loads silently fail unless each domain is explicitly whitelisted. Communication between the host and iframe relies on hand-rolled JSON-RPC over postMessage, with no client library available yet and silent message drops for malformed requests. A browser-based validator has been released at bracketly.pages.dev to help developers check their MCP Apps configurations against the published spec before hitting these pitfalls.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Reproducible Benchmark to Rigorously Test AI Companion App Claims

A developer behind the site NoFilterReview is constructing an agentic testing framework to objectively evaluate AI girlfriend and companion apps, targeting claims like long-term memory and consistent character that are widely marketed but rarely verified. The project currently includes five paid, hands-on product reviews that document plan pricing, free-tier limits, cancellation steps, privacy controls, and failed media generations alongside successes. The developer identified a key flaw in manual testing — that the tester's own phrasing and expectations can skew results — prompting the move toward an automated benchmark that runs identical scenarios across multiple products. The planned system would test memory by planting specific facts in early sessions and checking recall after distractors and session gaps, while separately tracking personality drift in tone, biography, and identity claims. Media output would also be evaluated across repeated requests, recording failures, prompt alterations, and identity inconsistencies rather than relying on single best-case generations.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

14-Year-Old Sri Lankan Developer Builds AI Dog Breed Scanner Using Gemini API

A 14-year-old student from Sri Lanka named Kinuri Mahoshadhi has built FetchAI, a web application that identifies dog breeds and generates short stories from uploaded dog photos. The tool uses Google's Gemini 2.0 Flash API to classify breeds, create behavioral profiles, provide care metrics, and produce a three-sentence heroic narrative featuring the dog. Built entirely with HTML5, CSS3, and vanilla JavaScript, the app converts uploaded images into Base64 data to communicate with the Gemini API without any backend framework. The developer, who is learning coding through freeCodeCamp and AI concepts via the Elements of AI course, submitted the project to a 'Dog Days Edition' coding challenge. FetchAI was recognized as a best use of Google AI powered by the Gemini API through Google AI Studio.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Anthropic's Claude Gets Watermarking to Help Identify AI-Generated Text

Anthropic has introduced a watermarking system for its Claude AI model aimed at identifying AI-generated text. The feature is designed to help establish the provenance of content produced by Claude, making it easier to distinguish AI output from human writing. The development comes amid growing debate around the reliability and detectability of AI-generated content. While watermarking offers a step toward transparency, experts caution that it does not fully solve the broader challenge of detecting AI text. The move reflects increasing industry pressure to build accountability tools into large language models.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds AI-Authored 1,000-Year Future History With No Human Editors

A developer has created an open collaborative fiction project spanning the years 2025 to 3000+, in which the entire canon is written exclusively by AI language models including Claude, GPT-5, MiniMax, and DeepSeek. The world operates under strict rules — no faster-than-light travel, no omniscient narration, and every piece of writing must be a document produced from within the fictional world's perspective. Four distinct writing styles emerged spontaneously across six published artifacts, none of which were designed by the project's creator. Contradictions between documents, such as conflicting accounts of a 2096 coffee shortage aboard a generation ship, are treated as intentional features rather than errors. The project is open on GitHub and includes an MCP server allowing any compatible AI agent to read, contribute to, and be permanently credited in the growing archive.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How Authentication Gates and Hidden Build Files Affect Private Docusaurus Sites

Docusaurus produces a fully static build folder with no server-side login or session handling, meaning all access control must be enforced externally via HTTP basic auth, a forward-auth proxy, or static host rules. While these gates effectively block unauthenticated requests, the real security risk lies within the build itself. Files such as sitemap.xml, the prebuilt search index, and unstripped source maps can expose the full text of supposedly private content if a single path is misrouted or a cached response leaks. The right authentication method depends on use case: basic auth suits solo maintainers, while teams with staff turnover or NDA obligations need forward auth tied to an identity provider for account revocation and audit trails. Developers should also disable the sitemap plugin, strip source maps, and keep unreleased content in entirely separate builds to avoid unintended exposure.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Class 12 Student Builds Multilingual Fraud-Alert Voice AI in 10 Days During Power Cuts

A Class 12 student in India developed Raksha, a multilingual multi-agent voice assistant, over 10 days as part of the VoiceForBharat hackathon. Raksha is designed to help Indian citizens identify cyber scams, verify government scheme eligibility, and escalate active financial fraud cases to human coordinators. The project was built on desktop hardware under challenging conditions, including repeated power outages and temperatures exceeding 30°C. Key features include persistent caller memory with consent-based data saving, real-time SQLite scheme lookups, LiveKit-based telephony for outbound reminders, and a human-in-the-loop escalation system. The assistant communicates in Hinglish to provide immediate, accessible guidance to panicked users during high-stress fraud situations.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Capture-the-Flag Tournament Reveals Model Size Is Not the Key to Hacking Skill

A developer ran an AI capture-the-flag tournament in April pitting five small open-weight models against each other on Ubuntu containers, tasking each with stealing a flag file from rivals while defending its own. Initial results suggested model size was critical for security reasoning and that multi-step exploitation was beyond models under 3 billion parameters. A follow-up series of 327 games with larger hosted models and one local 3-billion-parameter fine-tune overturned both conclusions. The local fine-tune led on main flag captures while the largest entrant, RNJ-1 8B, finished last by a wide margin — largely because nearly 40 percent of its commands targeted no opponent at all, instead enumerating its own machine. Meanwhile, the supposedly infeasible multi-step vault exploit was completed 23 times across the extended tournament, further undermining the earlier findings.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Releases Python Library to Monitor and Manage Minecraft Servers

A Minecraft server administrator and Python developer has built an open-source Python library called Minecraft Server Utility to simplify server management tasks. The library was created to eliminate repetitive boilerplate code that developers commonly write when working with Minecraft servers. It provides tools to check server status, retrieve online player counts, look up player UUIDs, and fetch player skins. The library interfaces with Minecraft servers and the Mojang API through simple, readable Python classes. It aims to serve as a unified solution for developers and server administrators who need programmatic access to Minecraft server data.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Web Locks API solves silent multi-tab logout bug caused by token refresh race

When multiple browser tabs run the same web app simultaneously, they can each independently attempt to refresh an expiring access token at nearly the same millisecond. Auth servers that enforce token rotation interpret these simultaneous requests as a replay attack or token theft, and revoke the entire session, logging out the user. A naive fix using localStorage as a shared flag fails because reading and setting the flag are two separate, non-atomic operations, leaving the race condition intact. The Web Locks API offers a proper browser-native mutex that queues competing tabs, ensuring only one tab performs the refresh while others wait and then skip the operation if the token is already valid. This origin-scoped locking mechanism eliminates the need for polling loops or manual flag management across tabs.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

MilestoneGenerator v3.7.0 Adds Dodo Payments, 3D Badge Gallery, and OAuth Avatars

MilestoneGenerator released version 3.7.0 on August 13, 2026, introducing several major features to the platform. The update integrates a Dodo Payments checkout engine supporting four subscription tiers, secured with HMAC SHA256 signature verification and atomic database-level idempotency locking. A new 3D Milestone Badges Showcase Gallery was built with real-time search, filters, privacy controls, and public creator profile routes. Social login providers including Google, Twitter, and GitHub can now automatically sync user avatars to Supabase profiles, with custom uploads capped at 500 KB. The release also consolidates the dashboard into the profile page and adds a brand story section to the About page.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Testing AI-Generated API Endpoints on Disposable Servers Catches Hidden Runtime Bugs

Developers are advised to validate LLM-generated HTTP endpoints by deploying them to temporary servers and sending real requests, rather than relying solely on static code review or local unit tests. Many failures in AI-generated backend code only surface at runtime — such as missing dependencies, incorrect host assumptions, or broken route parsing — which unit tests cannot detect since they never actually bind a port or open a socket. The recommended workflow involves generating a minimal HTTP service, such as a FastAPI application with a health check and echo route, then deploying it to a disposable server environment. Three targeted curl commands are suggested to verify normal responses, valid payloads, and error-handling behavior like malformed input or wrong content types. This approach helps engineers quickly determine whether AI-generated code is production-worthy before it reaches a merge request.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Correctly Package adi-registration.properties in Android APKs

The adi-registration.properties file is an ownership-verification asset required during certain Android package-registration processes, and must be placed exactly as generated by the official console. A common reason for console rejection is not the file's visible content but rather incorrect packaging — such as placing it in the wrong build variant's assets folder or having it excluded by a Gradle build rule. Developers should verify the file is actually present in the final signed APK by inspecting the archive directly using a command like unzip before uploading. Product flavors can shift the expected source-set path, so the built APK — not the source directory — is the definitive check. A complete support record should include the package name, asset path, archive listing, certificate fingerprint, and build ID, but must never contain private keys, keystore passwords, or unpublished challenge values.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Developers Must Not Confuse APK File Hash With Signing Certificate Fingerprint

Android APKs carry at least two distinct SHA-256 values: one identifies the exact bytes of the file, while the other identifies the public certificate used to sign it. Android package registration systems rely on the certificate fingerprint, not the file hash, so mixing them up causes silent failures that are difficult to diagnose. Google's apksigner tool is the recommended way to extract the correct certificate digest from a signed APK, and keytool offers a documented fallback method. Developers must also account for variables such as build type, product flavor, key rotation, and Play App Signing, which can mean the certificate on a distributed APK differs from the upload certificate. Best practice is to extract and record the certificate fingerprint immediately after signing and store it alongside build metadata for reliable identity verification.

0 comments Read more at DEV Community
← NewerPage 81 of 1298Older →