SShortSingh.

Programming

0
ProgrammingDEV Community ·

Developer Builds Immersive Indian Restaurant Landing Page Using Pure Vanilla Web Tech

A developer named ShortSingh created 'Angaar', a cinematic landing page for a fictional high-end Indian comfort food restaurant, as a submission for the Frontend Challenge Comfort Food Edition. The project, whose name means 'ember' in Hindi, aims to evoke the sensory experience of Indian home cooking rather than simply showcasing food. The page features an animated oil lamp, a theatre-curtain preloader, horizontal menu scroll, custom dual-layer cursor, floating spice particles, and temple-inspired visual motifs drawn from Dravidian and Hindu-Aryan architecture. Notably, the entire build was completed using pure vanilla HTML, CSS, and JavaScript, with no external animation libraries. The developer deliberately avoided common Mughal-themed design tropes, opting instead for South and North Indian temple aesthetics to give the site a more grounded, culturally specific identity.

0
ProgrammingDEV Community ·

Developer Builds Voice-First Learning Companion for Students in 10-Day Challenge

A developer participated in the '10 Days of Voice Agents — VoiceForBharat Edition' challenge, building a voice-first learning companion aimed at school-level students. The tool allows students to ask questions aloud rather than typing, lowering barriers for younger or less text-comfortable learners. Built using Murf Falcon's text-to-speech API and a LiveKit-based architecture, the agent handles general learning topics, routes math queries to a specialist sub-agent, and escalates unresolved issues to a human via email. Key technical hurdles included configuring outbound SIP calls for testing and managing API token rate limits by rotating across multiple LLM providers. The project's source code has been made publicly available on GitHub for others to replicate or build upon.

0
ProgrammingDEV Community ·

Z.ai's GLM-5.3 Rivals Anthropic's Mythos 5 in AI Cybersecurity Benchmarks

Chinese AI startup Z.ai has released GLM-5.3, an open-source coding model that scored 84.5% on vulnerability discovery benchmarks, marginally edging out Anthropic's restricted Mythos 5 model at 83.8%. GLM-5.3 was not purpose-built for cybersecurity but evolved from the earlier GLM-5.2 base through extended post-training, suggesting general-purpose coding models can develop strong security capabilities without dedicated architectures. However, Anthropic's Mythos 5 retained a significant lead in the harder task of converting discovered vulnerabilities into working exploits. Mythos 5 is a modified version of Claude with certain safeguards removed, available only to vetted organizations due to the dual-use risks of advanced cybersecurity AI. The development highlights a broader shift toward AI-assisted continuous security monitoring, while also raising concerns about the potential misuse of increasingly capable open-source models.

0
ProgrammingDEV Community ·

How to Design a Flutter App to Pass Apple App Store Review First Time

Most App Store rejections stem from a predictable set of guideline violations that developers can avoid by making the right design choices before submission. Apple requires that all in-app digital purchases route through StoreKit, not third-party payment providers or external web checkouts, and apps must not steer users toward outside purchases even subtly. Any app offering account creation must also include a fully functional in-app account deletion flow that permanently removes user data server-side, not merely deactivates it. Subscription paywalls must clearly display pricing, billing frequency, trial terms, and links to terms and privacy policy directly on the purchase screen. Flutter studios are particularly susceptible to Guideline 4.3 duplicate-app rejections when reusing codebases across multiple apps that serve essentially the same purpose with only cosmetic differences.

0
ProgrammingDEV Community ·

Developer Builds INAB Eatery Landing Page for Frontend Comfort Food Challenge

A developer created a project called INAB Eatery as part of the DEV Community Frontend Challenge themed around Comfort Food. The submission falls under the 'Perfect Landing' category, focusing on building an effective landing page. The project was shared on the DEV Community platform as a challenge entry. The submission showcases frontend development skills through a food-themed web experience.

0
ProgrammingDEV Community ·

Beacon Protocol Tutorial: Build a Coordinated AI Agent in 8 Steps

The Beacon Protocol is an open-source Python framework designed to help developers build coordinated AI agents with identity, heartbeat, and recovery capabilities. Using the beacon-skill library, developers can generate cryptographic agent identities, register agents in an Atlas directory, and exchange signed envelopes over HTTP or UDP. The framework also includes goal, values, and journal managers that feed into a Mayday recovery bundle for fault-tolerant agent state preservation. A step-by-step tutorial walks through installation, identity creation, heartbeat monitoring, envelope encoding, and emergency state packaging. Beacon positions itself as an alternative to agent communication protocols like Anthropic's MCP and Google's A2A, though it does not natively support tool access.

0
ProgrammingDEV Community ·

Building a Kids Typing Game Revealed Key Lessons in Web Interaction Design

A digital marketer building GamesMom, a free typing games platform for children, gained unexpected insights into frontend interaction design. Unlike typical websites where clicks dominate, typing games make the keyboard the sole interface, meaning every keystroke delay or incorrect state change is immediately noticeable to users. The project highlighted that continuous keyboard input demands near-instant visual feedback, especially for children learning key positions and finger placement. Designing multiple games — including Falling Words, Key Hunt, and Alphabet Race — showed how the same keyboard event can power vastly different experiences depending on how the interface responds. The core takeaway applies broadly: clear, immediate feedback after any user action reduces cognitive load and makes interfaces easier to use across forms, editors, and dashboards alike.

0
ProgrammingDEV Community ·

One hardcoded enum list broke a new feature across an entire production app

A software team added a seventh theme, 'birthday,' to a picture-book generator, updating types, forms, sitemaps, and content — but missed a hand-written Zod enum inside the API route that still listed only six themes. Every user request through the front-end returned a 400 error all day, while internal scripts and unit tests bypassed the route entirely, keeping the test suite green. Multiple copies of the same stale six-theme list were scattered across seed files, admin filters, SEO catalogs, and even a test file that defined its own 'valid' themes — meaning the test passed precisely because it never encountered the new value. The fix was to derive a single source-of-truth constant from the existing metadata map and import it everywhere, eliminating the possibility of the API gate drifting from the create form. A lint-style test was also added to flag any file containing three or more hardcoded theme literals in a row, enforcing the pattern going forward.

0
ProgrammingDEV Community ·

Developer Builds Multilingual Voice Health Assistant for Underserved Communities in India

A developer built Sehat Sathi, a Hindi-English voice assistant designed to help people in smaller Indian towns access basic health guidance without needing smartphones or English proficiency. The project was completed over 10 days as part of the VoiceForBharat Edition challenge run by Murf AI. The system uses Deepgram for speech recognition, Google Gemini as its reasoning engine, and Murf Falcon's Anisha voice for low-latency, natural-sounding Indian English responses, all connected via LiveKit for real-time audio. Sehat Sathi can identify nearby government hospitals by district, remember returning callers with their consent, and escalate serious symptoms to human support — while explicitly refusing to diagnose conditions or recommend specific medicines. The assistant is designed to give honest, safe guidance on whether a caller should rest at home or seek in-person care, and defaults to directing users to local health workers or emergency services when its own data falls short.

0
ProgrammingDEV Community ·

Developer Builds Hindi-English Voice AI for Indian Small Businesses in 10 Days

A developer built Vyapar AI, an AI-powered voice assistant tailored for Indian small business owners, over a 10-day sprint. The system allows users to interact in Hindi, English, or Hinglish through natural speech instead of navigating traditional app interfaces. It uses Deepgram for speech-to-text, a large language model for reasoning, and Murf Falcon's text-to-speech API to deliver a natural-sounding Indian voice. The assistant can remember users, use business tools, make outbound calls, and hand off conversations to specialist agents. The developer encountered several technical hurdles along the way, including API rate limits, telephony configuration issues, and integration challenges.

0
ProgrammingDEV Community ·

Duplicate Python Function Silently Ignored Trim Parameters in Solo Developer's Flask App

A solo developer running an AI video editing platform called snipforge.video discovered a bug where GIF trimming failed to respect user-selected start and end times, always converting the entire video instead. The root cause was a duplicate function definition in a 16,000-line single-file Flask app — Python silently overwrites a function name when it is defined twice, and the second, older version accepted the trim parameters but never used them. Because both definitions had identical signatures and the app produced no errors or exceptions, the bug went undetected for some time. The fix was straightforward: delete the shadowing duplicate and retain only the complete implementation that correctly passes trim values to FFmpeg. After the fix, a requested five-second clip dropped from a 48 MB, 74-second job to a 1.9 MB output completed in just six seconds.

0
ProgrammingDEV Community ·

Why the 'cheapest' AI model may cost more depending on your workload

Choosing the most cost-effective AI model depends not on leaderboard rankings but on the ratio of input to output tokens a specific workload generates. Models price input and output tokens differently, and that gap varies significantly — for example, Grok 4.3 charges only twice as much for output as input, while others charge five to six times more. A document classification task heavily skewed toward input tokens favors Claude Haiku 4.5 by 17%, whereas a code generation task with far more output tokens makes Grok 4.3 42% cheaper. Reliability also affects true cost: a model with a 20% failure rate that reroutes failed calls to a pricier fallback can erase its apparent savings entirely. Developers are advised to measure their own token ratios across real requests before comparing model prices.

0
ProgrammingDEV Community ·

Developer Builds Voice-Based Finance Tutor After Losing Money on a ₹6 Share Trade

A developer built FinEd Saathi, a voice-first financial literacy tutor, after personally losing around ₹50 on a ₹6 share trade due to a poor understanding of brokerage fees and taxes. The project was created in 10 days as part of the VoiceForBharat Edition hackathon under the Financial Services track. FinEd Saathi is designed for Indian market beginners and can explain topics such as stocks, mutual funds, ETFs, IPOs, and bonds through patient, conversational voice lessons. The app supports English, Hindi, and code-mixed speech using Deepgram Nova-3 for transcription, Gemini for teaching logic, LiveKit for real-time audio, and Murf Falcon 2 for low-latency text-to-speech. The project aims to bridge the gap between access to financial information and genuine understanding before users risk real money.

0
ProgrammingHacker News ·

ThoughtDAG Lets Users Build Editable Context Graphs for LLM Chats

A developer has released ThoughtDAG, an open tool that allows users to visualize and edit the context structure of large language model conversations as a directed acyclic graph (DAG). The project was shared on Hacker News as a community showcase submission. ThoughtDAG aims to give users greater control over how context is organized and passed during LLM interactions. The tool is accessible via a GitHub Pages site, suggesting it is an independent, likely open-source project. At the time of posting, the submission had minimal community engagement with only a few points and no comments.

0
ProgrammingHacker News ·

Open-source tool backtests rent vs. buy decisions across 241 US metros

A developer has released an open-source tool called RunTheNumbers that backtests the rent-versus-buy decision across 241 US metropolitan areas. The project uses pinned historical data to ensure reproducible and consistent results over time. It is hosted on GitHub and allows users to compare the financial outcomes of renting against buying in specific local markets. The tool aims to provide data-driven clarity on a question that is often debated with conflicting anecdotal evidence. It was shared on Hacker News, where it attracted early community attention.

0
ProgrammingDEV Community ·

How Data Types Control Memory, Meaning, and Math in Programming

Data types are fundamental instructions that tell a computer how to interpret binary data, how much memory to allocate, and which operations are valid for a given value. Without a data type, the same sequence of bits — such as 01000001 — could mean the integer 65 or the character 'A' depending on context. Java defines eight primitive types, ranging from 8-bit bytes to 64-bit doubles, each suited for different kinds of values and memory requirements. Choosing the wrong integer type can lead to overflow bugs, as seen when adding 1 to Java's maximum integer value wraps around to the most negative number. Floating-point types like float and double use the IEEE 754 standard to represent decimals across a wide range, but introduce precision trade-offs that programmers must account for.

0
ProgrammingDEV Community ·

Game Developer Shares Passion for Unity, Godot, and Indie Game Design

A game developer has introduced themselves on DEV Community, highlighting their work across Unity, Godot, and C++ for performance-focused projects. They describe their approach as iterative and prototype-driven, focusing on refining systems that prove effective. Their areas of deep interest include shaders, procedural generation, and the nuanced quality known as 'game feel.' Outside of building games, they actively play indie titles and study the design decisions behind them. They expressed openness to connecting with others in the game development community to discuss tools, engines, and mechanics.

0
ProgrammingDEV Community ·

macOS Screen Sharing Flaw CVE-2026-65400 Lets Attackers Gain Root, Install Crypto Miner

A critical authentication bypass vulnerability, CVE-2026-65400, has been discovered in macOS Screen Sharing, affecting macOS Tahoe before 26.6.1, Sequoia before 15.7.9, and Sonoma before 14.8.9. Attackers can connect remotely via TCP port 5900 and exploit an authentication state management flaw to establish a session without valid credentials, requiring no user interaction. In multiple incidents reported to NCSC-NL, threat actors leveraged this access to gain root privileges and install a Monero cryptocurrency miner. Apple has released patched versions of all three affected macOS branches to address the vulnerability. Users and administrators are advised to apply updates immediately, disable unnecessary Screen Sharing, and block TCP/5900 from public internet access.

0
ProgrammingDEV Community ·

GeoServer Zero-Day SQL Injection Draws Mass Probes Within Hours of Disclosure

A critical SQL injection vulnerability in GeoServer's jsonArrayContains filter was publicly disclosed on August 14, 2026, allowing attackers to inject malicious arguments into backend database queries on PostGIS, Oracle JDBC, and H2 data stores. Security firm WatchTowr observed hundreds of exploit attempts from a small number of source IPs within hours of the public disclosure. The flaw can potentially escalate to remote code execution depending on the server's database configuration, though RCE has not been confirmed across all affected deployments. No patches were available at the time of publication, and no successful compromises have been publicly confirmed despite the volume of probing activity. Administrators are advised to isolate GeoServer from public internet access, apply WAF rules to block malformed filter inputs, and enforce database least-privilege principles until an official fix is released.

0
ProgrammingDEV Community ·

AmnesiaStealer Malware Uses Fake GitHub Pages to Hijack macOS Browser Sessions

Jamf Threat Labs has identified AmnesiaStealer, a multi-stage Rust-based infostealer targeting macOS users, published in a report dated August 13, 2026. The malware spreads through a fake GitHub ClickFix page that tricks users into pasting a Terminal command, which downloads and executes a malicious shell script. Once installed, it steals login passwords, Keychain data, Apple Notes, Telegram content, Chromium browser profiles, and cryptocurrency wallet information, sending it all to a remote command-and-control server. A secondary module called stream_module uses Chrome DevTools Protocol to silently take over live browser sessions, enabling remote control of tabs, cookies, mouse, and keyboard input. The malware also attempts to establish persistence by creating a root LaunchDaemon, though its exploit of CVE-2020-9771 for TCC bypass was found to fail on current macOS 26 without Full Disk Access.

← NewerPage 84 of 1299Older →