SShortSingh.

Programming

0
ProgrammingHacker News ·

Google's Android developer verification rules could restrict sideloading on phones within 70 days

A campaign site called Keep Android Open warns that Google is about to tighten control over Android phones. Under new developer verification requirements, apps may need to come from verified developers before they can be installed. Critics argue this would limit users' ability to install software from outside official app stores, a practice known as sideloading. The post gained attention on Hacker News, where it drew a modest discussion. The source material provides only a brief link and summary, so the exact rollout details and timeline remain limited to the campaign's claims.

0
ProgrammingHacker News ·

Shitter: New Nitter Fork Released on Codeberg

A new project called Shitter, described as a fork of the Nitter front-end for Twitter, has been shared on Codeberg. Nitter is an alternative interface that lets users view the platform without JavaScript or an account. The announcement appeared on Hacker News, where it gathered 10 points and 5 comments. The source material provides little detail beyond the project link and discussion metrics, so its specific features and goals are not described here.

0
ProgrammingDEV Community ·

DREX: Brazil's central bank digital currency faces privacy questions

The Central Bank of Brazil is developing DREX, a digital currency built on a permissioned Ethereum-based network called Hyperledger Besu. Unlike decentralized cryptocurrencies, it is run by authorized banks and institutions, with the central bank retaining oversight of the system. Pilot tests revealed that, without extra safeguards, transactions could be visible to network participants, and researchers reportedly exposed balances and transfers during one trial. The bank is evaluating privacy technologies such as zero-knowledge proofs and anonymous transfer protocols, though full privacy is seen as incompatible with anti-money-laundering rules. Implementation is underway, with expansion expected through 2025 and 2026.

0
ProgrammingDEV Community ·

OpenClaw's heartbeat feature: cheap local checks first, LLMs only when needed

OpenClaw, formerly known as Moltbot and Clawdbot, has gained traction for its local automation that monitors a machine, spots drift, and acts early. Its heartbeat feature runs periodic ticks through a layered pipeline, starting with inexpensive deterministic checks such as process status, file state, queue depth, and API health. Model escalation happens only when those checks leave real ambiguity, which reduces cost and unpredictability. The article presents the heartbeat as a control-plane primitive for agent infrastructure, organized as a five-stage loop with strict probe schemas, TTL-based caching, and a health state machine using hysteresis. The guidance is aimed at developers building their own agent systems who want predictable behavior and fewer unnecessary model calls.

0
ProgrammingDEV Community ·

Origin Data Lab Examines Stereo Camera Calibration Limits for Physical AI Data

Origin Data Lab has been evaluating the geometric consistency and calibration limitations of its stereo capture workflow, which is used for Physical AI and robotics data. The company's Technical Field Note #04 argues that a single average error value cannot fully describe calibration quality, and that the distribution of epipolar errors can reveal residual misalignment. It also highlights that calibration parameters must match the actual capture setup, since changes in resolution, cropping, or camera mode can affect their validity. Further points include evaluating errors across field angles and using appropriate projection models for wide-angle and fisheye lenses. The note concludes that reliable real-world datasets must be measured, verified, and documented rather than simply collected.

0
ProgrammingDEV Community ·

Armory Castle exploits BeyondTrust Remote Support flaw CVE-2026-102764 in appliances

Google's threat intelligence group and Mandiant report that a suspected China-nexus actor tracked as Armory Castle has exploited CVE-2026-102764 in BeyondTrust Remote Support appliances since late August 2026. BeyondTrust rates the authentication bypass 9.3 and says it affects Remote Support 26.2.3 and earlier versions. The vendor patched SaaS customers on 8 October 2026 and disclosed the flaw on 15 October, while self-hosted appliances require manual patching unless automatic updates are enabled. According to Mandiant, the attacker used the flaw for initial access, escalated to root, deployed a webshell, and extracted stored credentials to reach downstream systems. Researchers also note that search-engine fingerprint coverage for the product is incomplete, so exposure counts can be misleading in either direction.

0
ProgrammingDEV Community ·

Oizom Open-Sources On-Prem Manager to Simplify Deploying Air Quality Software on Client Servers

Oizom, an IoT company behind the Envizom air quality monitoring platform, found that many government clients require on-premise installs for data security reasons. Its small team struggled to scale Docker Compose-based deployments, since every client needed different configurations, integrations and high-availability or disaster recovery setups. To address this, the company built On-Prem Manager, a tool with a cloud console for managing images, templates, variables and secrets, and a per-server agent that applies configuration changes, handles backups and rollbacks. The project has been released as open source under the Apache-2.0 license.

0
ProgrammingDEV Community ·

OnyxPDF Offers 50 PDF and Image Tools That Run Entirely in the Browser

A developer has built OnyxPDF, a collection of 50 tools, 32 for PDFs and 18 for images, that process files locally without uploading them to any server. The author argues that cloud uploads in typical online PDF services are unnecessary, since modern browsers using WebAssembly and Web Workers have enough capability to handle these tasks. Features include merging, splitting, compressing, OCR in seven languages, true redaction, document signing, and AES-256 encryption, with heavy processing kept off the main thread to avoid UI freezes. Image background removal is also performed on-device using a bundled segmentation model rather than a remote API. The tools are free and require no account.

0
ProgrammingDEV Community ·

Temporal, BullMQ, or AWS Step Functions: Choosing a Durable Workflow Tool in 2026

Durable workflow problems such as refunds that never finish or jobs that restart after a crash are handled by three main tool families in 2026. Temporal is a language-agnostic engine that builds retries, timeouts, and crash recovery into its model, making it suited to serious services. BullMQ is a lightweight Redis-backed queue for Node that works well for basic background jobs, but leaves durability and exactly-once guarantees to the developer. AWS Step Functions offers a managed, JSON-defined state machine with no servers to run, though it brings higher costs and AWS vendor lock-in. The article's comparison favors Temporal for long-running, crash-sensitive processes and BullMQ for simple job queues, while Step Functions suits teams already committed to AWS.

0
ProgrammingDEV Community ·

15 CCNA 200-301 Exam Traps That Trip Up Candidates in 2026

A guide outlines 15 common misconceptions that Cisco's CCNA 200-301 exam uses to catch unprepared candidates across all six domains. It covers Layer 2 topics such as spanning tree root bridge election, where the lowest Bridge ID wins rather than the highest priority. It also explains the difference between CDP and LLDP, port roles versus port states, and why EtherChannel fails when member interface settings do not match. Routing traps include OSPF's default reference bandwidth making Gigabit and Fast Ethernet links appear equal, and DR/BDR election favoring the highest priority. The guide stresses that understanding why wrong answers are wrong matters as much as knowing the correct ones.

0
ProgrammingDEV Community ·

GitHub Actions max-parallel setting queues all matrix jobs upfront, triggering wasteful runner launches

A GitHub Community discussion (#209687) reported that GitHub Actions creates and queues every matrix job at run start when strategy.max-parallel is set, even though the limit means only some can execute at once. Each queued event prompts autoscalers such as terraform-aws-github-runner or Actions Runner Controller to launch a runner, so many runners sit idle until scale-down terminates them. The payload does not distinguish jobs waiting for capacity from jobs blocked by max-parallel, so autoscalers cannot tell the difference. The discussion also found that matrix jobs calling reusable workflows are created and queued one at a time, which avoids the problem. This suggests sequential queuing is possible, though it is unclear whether the difference is intentional.

0
ProgrammingDEV Community ·

GitHub Adds Option to Count Draft Pull Requests Toward Repository PR Limits

GitHub has introduced an optional setting letting maintainers count draft pull requests toward their repository's pull request limits. The change responds to a loophole where contributors opened many drafts to get around limits introduced in June 2026. Drafts were found to trigger notifications, consume CI/CD resources, and add to review backlogs even though they were not ready for review. The setting is found under Repository settings, then Moderation, then Interaction Limits, and is off by default so projects that rely on drafts can keep their current workflow. Early adopters also noted that GitHub's official documentation lagged behind the feature, still stating that drafts do not count toward limits.

0
ProgrammingDEV Community ·

Anthropic's Claude 5.5 lineup and Fable 5.1: which model to pick and what it costs

Anthropic now offers four current Claude models: Fable 5.1, Opus 5.5, Sonnet 5.5 and Haiku 5.5, all sharing a 1M-token context window and up to 128K output tokens. Per-token prices differ enormously, with the most expensive model costing about 100 times more on input than the cheapest. Fable 5.1 targets the hardest reasoning and long autonomous agent tasks, while the author suggests Opus 5.5 as the default for most workloads. Sonnet 5.5 is positioned as a faster, cheaper option for high-volume work needing real intelligence, and Haiku 5.5 for classification, extraction and routing. The guide notes pricing can change and advises checking Anthropic's pricing page before budgeting large jobs.

0
ProgrammingDEV Community ·

Why Graceful Shutdowns Still Drop In-Flight Requests and Cause Deploy 502s

A service saw about a dozen 502 errors per deploy, clustered in a two-second window and affecting only requests lasting longer than five seconds. Its shutdown handler stopped accepting connections, slept for five seconds, and then called sys.exit, which does not wait for in-flight work and so killed long-running requests, including open database transactions. The author recommends failing readiness before stopping traffic so the load balancer can react, draining in-flight requests by tracking a counter rather than relying on a fixed sleep, and closing the database pool last so transactions are not interrupted. The app's own shutdown deadline must also fall well inside the orchestrator's grace period, since the orchestrator force-kills at its end. After these changes, the 502s reportedly dropped to zero.

0
ProgrammingHacker News ·

Hacker leaks 281 GB of data allegedly from Germany's far-right AfD party

A hacker has publicly released roughly 281 gigabytes of data reportedly taken from Germany's far-right Alternative for Germany (AfD) party. The article linked from Hacker News, published by security firm Bitdefender, covers the leak as reported by its HotForSecurity blog. The source text available here is limited to the link and discussion metadata, so details on the exact contents, timing, and method of the breach could not be confirmed. Readers should treat the specifics of the leak as unverified until further reporting is consulted.

0
ProgrammingHacker News ·

OpenSSL 4.1.0 Released on GitHub

The OpenSSL project has published version 4.1.0, made available as a tagged release on its GitHub repository. The announcement was shared on Hacker News, where it gathered 31 points and 6 comments. The source material provides only the release link and discussion metadata, without a detailed changelog. Readers seeking specifics on new features or security fixes should consult the official release page.

0
ProgrammingHacker News ·

AI Builds Citation-Backed Wiki From 45,000 Enron Emails

A team has used AI to generate a wiki drawn from roughly 45,000 emails associated with Enron. Each fact in the wiki is linked to a source citation, allowing readers to trace claims back to the original messages. The project is presented as a Show HN post on Hacker News, where it gained modest attention with 9 points and 2 comments. The source material provided includes only the project link and discussion metadata, so the specific findings and methodology are not described in detail.

0
ProgrammingDEV Community ·

Frameworks or Libraries? How Solo Developers Can Choose the Right JavaScript Tool

Solo tech founders often struggle with scalability and resource limits, making the choice between JavaScript frameworks and libraries a critical early decision. Frameworks such as React, Angular, and Vue.js provide built-in structure and speed up launches, but they carry a steeper learning curve and risk lock-in. Libraries offer greater architectural freedom and lighter footprints, though they require more upfront planning and integration effort. The article illustrates trade-offs through examples like real-time financial dashboards and social analytics tools, noting where Angular's data binding or React's component model may fit. It concludes that the right choice depends on how well the tool's philosophy aligns with the project's operational strategy.

0
ProgrammingDEV Community ·

Developer builds tool that logs bug fixes and flags repeated mistakes before commit

The author notes that the same credential-leak bug in the Python requests library was fixed in 2014 and again in 2023, because the lesson was buried in git history. Similar redirect-credential bugs have been fixed at least 47 times across 22 projects since 2014. To counter this, the author built Bug Diary, a local tool that automatically writes post-mortems for fix commits using Gemma 4 and checks new changes against past lessons. It runs entirely on a laptop with Ollama and a SQLite file, and a demo shows it catching a repeated race condition in a separate project's token refresh code.

← NewerPage 83 of 2911Older →