SShortSingh.

Programming

0
ProgrammingDEV Community ·

x402, MPP, AP2, ACP: A Developer Guide to Agent Payment Protocols in 2026

Multiple competing protocols have emerged in 2026 to handle payments made by AI agents, each addressing a different layer of the transaction process. x402 and MPP both operate at the HTTP 402 settlement layer, enabling per-API-call or per-data payments, with x402 focused on on-chain stablecoin rails and MPP adding fiat and card support via Stripe. ACP, co-developed by Stripe and OpenAI, targets the checkout experience within chat interfaces, allowing buyers to approve purchases conversationally while merchants retain control over fulfillment. AP2 addresses a separate concern — verifying that a human actually authorized a payment before funds move — making it relevant for trust and compliance use cases. Developers are advised not to treat these as competing standards but to combine them based on whether their system needs to handle settlement, authorization, or checkout.

0
ProgrammingDEV Community ·

Nearly 1M FortiGate Instances Exposed Amid Actively Exploited CVE-2025-25249

A ZoomEye fingerprint scan conducted on 23 September 2026 identified 983,992 publicly indexed FortiGate instances, highlighting the scale of potential exposure to CVE-2025-25249. The vulnerability, affecting FortiOS, FortiSwitchManager, and FortiSASE, is a heap-based buffer overflow flaw that allows attackers to execute unauthorized code via specially crafted packets without prior authentication. CISA added the flaw to its Known Exploited Vulnerabilities catalog on 9 September 2026, with the underlying vendor advisory FG-IR-25-084 assigned roughly a year earlier. Security analysts warn that with nearly a million visible instances, automated scanning can locate vulnerable hosts with minimal effort, making opportunistic exploitation highly feasible. The indexed count does not distinguish between genuinely exposed and internally isolated devices, but serves as a meaningful proxy for how rapidly attackers could identify candidate targets at scale.

0
ProgrammingDEV Community ·

Why 'Module Internals Don't Matter' Is Only Conditionally True in the AI Era

A software engineering essay argues that the principle of delegating module internals to AI is valid but must not be treated as an unconditional rule. The author contends that human attention should focus on higher-level concerns such as business logic, domain boundaries, data ownership, and module contracts. When teams hand internal implementation entirely to AI without first hardening boundaries, modules can become silently coupled — for example, by sharing database tables — leading to data inconsistency and failed rollbacks. The author proposes that core interface schemas, acceptance criteria, and data ownership should be defined upfront in a rules file before AI-generated code fills in the internals. Even with high delegation, readability, testability, and performance and security baselines must still serve as a minimum standard inside any module.

0
ProgrammingHacker News ·

UK Station Facial Recognition Trial: 500K Scans, Zero Arrests, One False Match

A live facial recognition trial conducted at UK railway stations scanned approximately 500,000 faces without resulting in a single arrest. The trial, reported on September 29, 2026, produced only one false positive, raising questions about the technology's practical effectiveness. The cameras were deployed in London stations as part of an evaluation of real-time biometric surveillance in public spaces. Critics and observers have noted that the low yield challenges the justification for mass biometric scanning of the public. The results are likely to fuel ongoing debate around privacy, civil liberties, and the proportionality of deploying such technology in high-footfall public areas.

0
ProgrammingHacker News ·

PostHog Releases Jeeves: A Reasoning-Enhanced Decision Model Tool

PostHog has open-sourced a tool called Jeeves, hosted on GitHub, designed to improve decision-making models inspired by Jev-like frameworks. The project aims to enhance reasoning capabilities within such models. It was shared on Hacker News, where it garnered 33 upvotes and 5 comments. The repository is publicly available, allowing developers to explore and contribute to the project.

0
ProgrammingDEV Community ·

Developer Builds AI Incident Response Agent That Learns From Past Outages

A developer has built MemoryOps, an AI-powered incident response agent designed to retain and recall lessons from past production incidents. The system uses a memory layer called Hindsight to match current incidents with historically similar events and surface what previously resolved them. Unlike traditional incident tools, MemoryOps combines live system data — logs, metrics, and deployment info — with retrieved historical experience before generating a recommended fix. The agent's workflow creates a continuous learning loop: once an incident is resolved, the outcome is stored and becomes available for future investigations. The project aims to eliminate the common problem of teams repeatedly investigating the same class of incidents from scratch.

0
ProgrammingDEV Community ·

How to Correctly Model Relationships in NoSQL Databases Like MongoDB

Developers migrating from SQL to NoSQL databases like MongoDB often mistakenly replicate relational patterns, splitting data across multiple collections and manually writing joins in application code. Unlike SQL, NoSQL document databases have no foreign key constraints, no cascade deletes, and limited native join support, requiring a fundamentally different design approach. The core decision in NoSQL modeling is whether to embed related data directly inside a parent document or reference it via a stored ID in a separate collection. Data should be shaped around known query patterns rather than normalized into isolated tables, as a single well-structured document can return all needed data in one read. Key relationship patterns — one-to-one, one-to-many, and many-to-many — each have distinct embedding or referencing strategies that apply across MongoDB, DynamoDB, Cassandra, and Cosmos DB.

0
ProgrammingDEV Community ·

Developer builds open-source AI companion with persistent memory, mood, and skill learning

A developer named Pavel has created PaulusAI, a custom open-source AI agent framework designed to behave more like a human companion than a conventional task-based utility. Unlike existing frameworks such as OpenClaw and Hermes Agent, PaulusAI incorporates a mood system that modulates the agent's tone based on its current emotional state. The framework also features long-term semantic memory, allowing the agent to consciously store and retrieve facts over time, as well as a skill-acquisition mechanism that lets it save solutions to new problems for future reuse. The agent can execute system commands and interact with external platforms like Telegram, but is designed to pause and seek human approval before taking high-impact actions. Pavel has deployed the agent on a personal server and is inviting contributors to help refine its memory retrieval, emotional logic, and autonomous tooling.

0
ProgrammingDEV Community ·

Dev builds secure government portal, nearly loses project over compliance rules

A software developer shared their experience building an internal information portal for law enforcement agencies, intended to aggregate regulations, orders, and personal document management. The project initially used a standard React, Node.js, and PostgreSQL stack, but hit a major roadblock in the third week when the client's security team revealed strict on-premise requirements and a restricted list of approved software. This forced the developer to abandon automated CI/CD pipelines in favor of manually packaged update archives controlled entirely by the client's system administrators. Additional constraints included banning tokens from localStorage, eliminating personal data from logs, and simplifying the UI for infrequent users who needed to find documents in two clicks or fewer. A last-minute terminology audit — replacing words like 'user' with 'employee' across the codebase — was resolved quickly thanks to an early decision to centralize all UI text in a single localization file.

0
ProgrammingHacker News ·

Evolution of Text Classification: From Bag-of-Words to Modern Language Models

A technical article published on Sebastian Raschka's magazine traces the history of text classification in machine learning. The piece covers the progression from early bag-of-words approaches to contemporary language model-based methods. It provides an educational overview of how natural language processing techniques for classification have evolved over time. The article was shared on Hacker News, where it received 16 points at the time of posting.

0
ProgrammingDEV Community ·

Developer Builds PowerShell Tool That Emails Alerts and Records Webcam After Failed Logins

A developer has created a Windows security monitoring tool built entirely in PowerShell, requiring no third-party software. The tool triggers two automated responses after three failed login attempts: an instant email alert sent to two configured addresses and a silent webcam recording via FFmpeg. It monitors Windows Security Event Log entries in real time using a rolling 30-second window to avoid duplicate triggers. Key technical hurdles included fixing a DirectShow webcam failure caused by incorrect process window settings and ensuring a global hotkey registered only after its window handle was fully initialized. The project was inspired by a years-old video showing how an unattended PC was compromised by someone who had studied the owner's login patterns.

0
ProgrammingDEV Community ·

Developer Builds Email-to-Agent Memory Pipeline for Sales Deal Continuity

A developer built Waada, a deal-continuity system designed to convert messy account histories from sources like Slack exports and call transcripts into structured, queryable memory for AI agents. The core pipeline normalizes all inputs into a single schema, uses idempotent ingestion with stable source IDs, and scopes memory to individual accounts. To measure effectiveness, Waada compares three context sources: raw CRM data, a chronological summary baseline, and its own memory-aware retrieval system. The evaluation results are deliberately mixed, with the developer noting the architecture creates a different context path rather than guaranteeing superior accuracy. Key engineering takeaways include treating model output as an external dependency, separating retrieval from generation, and designing prompt budgets as a core architectural concern.

0
ProgrammingDEV Community ·

Seven-Step, 30-Day Playbook Helps Indie Developers Land Their First 100 Users

A practical guide published on DEV Community outlines a seven-step, 30-day strategy for indie developers to acquire their first 100 users without an existing audience, budget, or spam tactics. The approach begins with optimizing a landing page to clearly communicate the product's purpose within five seconds, followed by submitting the product to over 30 online directories to build backlinks and visibility. Developers are advised to publish problem-solving content rather than promotional posts, cross-posting to platforms like Dev.to and Hashnode while keeping the canonical URL on their own site. Outreach should target newsletter authors, bloggers, and podcast hosts with brief, relevant pitches rather than cold-emailing potential customers. The guide explicitly warns against launching on Product Hunt too early, positioning it as an amplifier that only works once the earlier foundational steps are complete.

0
ProgrammingDEV Community ·

Developer Builds AI Sales Agent With Persistent Deal Memory to Cut Call Prep Time

A developer has created a Deal Intelligence Agent designed to help sales representatives retain context across long deal cycles involving multiple touchpoints. Unlike traditional retrieval-augmented generation systems that treat each query independently, this agent uses Hindsight AI's episodic memory to store and recall objections, competitor mentions, stakeholder concerns, and pricing discussions tied to specific deals. The system processes call or email transcripts, tags them with metadata, and builds a deal memory graph that evolves over time. When a rep requests a briefing, the agent surfaces relevant history and suggests objection-handling tactics based on past interactions. The project, built with Python, OpenAI API, and Streamlit, is open-source, with planned features including CRM integration, deal health scoring, and automated email drafting.

0
ProgrammingDEV Community ·

Monest Builds Open-Source BullMQ Dashboard Bullpane After Outgrowing Existing Tools

Monest, a company processing over 100 million BullMQ jobs daily, developed Bullpane after finding existing dashboards like bull-board and Taskforce insufficient for their team's needs. The core issues were a lack of role-based access control, no audit logging, and performance concerns when monitoring high-throughput Redis queues. Bullpane offers features such as role enforcement per API call, an append-only audit log, SSO support, and queue-level alerts, with a paid Pro tier at $39 per month per installation. On the performance side, the tool avoids blocking Redis commands, uses Lua scripts for efficient reads, and can search 1,000 jobs in roughly 8 milliseconds. The core version is free and MIT-licensed, available on GitHub, while a live read-only demo is accessible at demo.bullpane.com.

0
ProgrammingDEV Community ·

Sector Rotation Data Shows 100-Point Gap Between Best and Worst in Same Year

An analysis of the eleven SPDR sector ETFs from 2021 to 2026 reveals that broad market summaries can mask dramatic performance differences between individual sectors. In 2022, the best-performing sector, Energy, gained 64.3% while the worst, Communication Services, lost 37.6% — a spread exceeding 100 percentage points within the same calendar year. The data also shows that last year's top sector frequently fails to repeat, with Energy falling from first place in 2022 to ninth in 2023. Conversely, the previous year's worst sector sometimes rebounds sharply, as Communication Services did in 2023 with a 52.8% gain after finishing last in 2022. The findings, based on only five year-to-year handoffs, are too limited to establish a reliable pattern but clearly illustrate how quickly sector rankings can shift.

0
ProgrammingDEV Community ·

ProofSec Benchmark Tests Whether LLMs Can Tell Security Indicators from Real Evidence

A new benchmark called ProofSec has been developed to evaluate how well large language models reason about cybersecurity vulnerabilities using actual evidence rather than surface-level pattern recognition. The benchmark addresses a core weakness in current LLMs: their tendency to flag a vulnerability based on semantic cues, such as predictable identifiers or familiar attack terminology, even when the available evidence does not conclusively prove one exists. ProofSec requires models to classify each scenario into one of three states — Vulnerable, Not Vulnerable, or Insufficient Evidence — making uncertainty a first-class outcome rather than a forced binary choice. The benchmark tests capabilities including evidentiary sufficiency, contradiction resolution, resistance to authority bias, and the ability to incorporate falsifying information. It was submitted as part of the Kaggle Benchmarking Challenge and aims to shift security-focused AI evaluation toward epistemic rigor rather than mere pattern matching.

0
ProgrammingDEV Community ·

Why Java File Uploads Crash Servers and How to Stream Them Safely

A technical deep-dive published on DEV Community warns that standard Java tutorials for handling file uploads rely on full in-memory or disk buffering, which can crash production servers when large files arrive. Spring's MultipartFile buffers the entire request body before a controller method is even called, meaning a 2GB upload consumes 2GB of heap or temp disk per concurrent request. The WebFlux alternative using @RequestPart is flagged as equally problematic, as it shifts the buffering rather than eliminating it. The article identifies a specific WebFlux API that enables genuine streaming and outlines the correct approach to use it. This is the first part of a series, with subsequent parts covering S3 storage, file-type detection, and antivirus scanning without loading entire files into memory.

0
ProgrammingDEV Community ·

Developer finds 100% AI code alignment can still mean zero problems solved

A developer running six PDCA cycles with Claude Code on a color extraction tool discovered that high alignment rates between design documents and implementation do not guarantee real-world effectiveness. In one cycle, the AI achieved 100% alignment with its design document yet fixed none of the actual bugs, because the design itself was flawed. The experiment led to tracking two separate metrics: how well the implementation matched the design, and whether the underlying plan hypothesis actually worked. Additional lessons included the danger of synthetic test data that lacks real-world noise, and the pitfall of fixing downstream filters when the root cause lies in an upstream process. The developer concluded that PDCA is most valuable as a framework for forcing objective judgment, not merely for ensuring the AI follows its own instructions.

← NewerPage 814 of 3170Older →