SShortSingh.

Programming

0
ProgrammingDEV Community ·

How a Gamedev CTO Built KPIs for Six Teams Without Triggering Goodhart's Law

A CTO managing six gamedev teams needed a way to monitor team health and delegate responsibility without micromanaging daily operations. The core challenge was designing KPIs that measured genuine outcomes rather than numbers that leads could game, a pitfall described by economist Charles Goodhart's decades-old principle. A concrete trigger was that stability issues like crashes and ANRs were going unaddressed because no one owned them — features had deadlines and owners, but stability metrics had neither. Rather than slicing the CTO's existing KPIs into shares distributed downward, the approach focused first on defining what each lead was actually responsible for within the broader direction. The resulting framework aimed to give leads clarity on expectations and genuine ownership of their zone, rather than metrics they only partly influenced and could defend against with reports.

0
ProgrammingHacker News ·

10 Design Patterns That Reveal a Low-Effort AI-Generated UI

A blog post titled '10 Tells of a Slop UI' has gained traction on Hacker News, accumulating 60 points and 36 comments. The article identifies common visual and structural patterns that signal a poorly crafted or AI-generated user interface. These so-called 'slop' indicators help designers and developers distinguish lazy or automated design work from thoughtful, intentional UI. The post sparked notable discussion in the developer community, suggesting the topic resonates amid the growing use of AI tools in design. The full article is hosted on the author's personal blog at hereticpleb.vercel.app.

0
ProgrammingDEV Community ·

Chat template, not model weights, triggers 'I'm just an AI' disclaimers, study finds

A paper published on August 9, 2026, by researcher Jędrzej Maczan found that the 'I'm just an AI' disclaimer in large language models is triggered by the chat template format, not by the model's underlying weights. Testing eight open-source instruction-tuned models of up to 9 billion parameters, the study showed that wrapping prompts in chat template tokens consistently produced self-distancing disclaimers, while plain-text versions of the same prompts elicited first-person experiential language. In three of the models, the researcher identified a specific internal activation direction that controls this behavior, and manipulating it could switch the disclaimer on or off regardless of whether the chat template was present. The findings suggest that what a model says about itself is an artifact of deployment formatting rather than a stable reflection of its trained properties. The work was accepted at two venues: a workshop at COLM 2026 and KONVENS 2026 Eval4SD.

0
ProgrammingHacker News ·

Fragment of world's oldest known peace treaty unearthed in Turkey

Archaeologists have discovered a fragment believed to belong to the world's oldest known peace treaty at a site in Turkey. The artifact offers rare physical evidence of ancient diplomatic relations, potentially dating back thousands of years. The find is linked to ancient Egyptian history, suggesting cross-civilizational negotiations took place in the region. Researchers described the discovery as a significant trace of peace from antiquity. The fragment adds new archaeological context to our understanding of early international agreements.

0
ProgrammingDEV Community ·

Engineers Deploy Qwen Flash-Next NVFP4 on vLLM After Fixing Loader and Memory Issues

A technical team successfully deployed the Qwen Flash-Next NVFP4 language model using the vLLM inference framework after resolving multiple compatibility and memory challenges. The 186.4 GB checkpoint required dedicated storage provisioning and a multi-worker download process, with a single PLE shard alone accounting for roughly 102.4 GB. Engineers had to patch the model loader to handle the checkpoint's tensor layout and apply B12x backend fixes before stable inference was possible. The final configuration supported a 131,072-token context window with a 16-sequence concurrency limit, successfully completing three rounds of 16 simultaneous requests without a container restart. The team acknowledged that reaching this result required scaling back initial context and concurrency targets, and credited contributor windowsxp811203 for detailed documentation of the integration work.

0
ProgrammingDEV Community ·

Developer Used Claude AI to Build Load Tests, Uncovered 3 Critical API Bottlenecks Pre-Launch

A developer with no prior load-testing experience used Claude Code, an AI coding agent, to build a k6 load test suite for a Node.js API just two weeks before launch. The API, built on Fastify, Postgres 16, and Redis 7, had 38 endpoints but zero performance testing despite having hundreds of unit and integration tests. Rather than testing endpoints in isolation, the developer prompted Claude to model three realistic user journeys — including browse-to-checkout, order history review, and admin pagination — with weighted traffic splits up to 300 virtual users. The resulting test suite identified three bottlenecks that, left unaddressed, could have caused service failures on launch day. The exercise was completed within a single working day, and the developer outlined five key lessons for using AI agents in performance testing workflows.

0
ProgrammingDEV Community ·

How Feature Flags Can Safely Manage A/B Testing of AI Models in Production

Feature flags are a practical tool for rolling out AI model changes, but they introduce unique challenges because AI outputs are non-deterministic, quality signals are delayed, and poor variants can be costly rather than just broken. Model selection must always be handled server-side to prevent clients from manipulating which model gets called — and therefore who pays for it. Stable, hash-based user assignment is critical to ensure consistent model behavior within a session, as mid-session variant switches can corrupt both user experience and experiment results. Developers must also distinguish between experiment flags and entitlement flags, since conflating the two risks accidentally gating paid features behind rollout percentages. Choosing success metrics before launching an experiment — including cost and latency — is essential to avoid promoting an inferior model based on coincidental data movement.

0
ProgrammingDEV Community ·

AI Can Explain Good Code Standards But Often Fails to Actually Produce Them

A developer on DEV Community has highlighted a recurring gap between how AI models describe best coding practices and the code they actually generate. When asked conceptual questions, AI tools tend to give textbook-perfect answers, but when tasked with writing real components, they often produce bloated, hard-to-read output spanning thousands of lines. The author uses the example of AI-generated React components that are visually functional yet structurally poor, with deeply nested logic and excessively long lines. While fixes like better prompting, fine-tuning, or added context can help, the author questions why such corrections are necessary if the model already understands quality standards. The piece raises an open question about whether the disconnect lies in AI reward systems, training objectives, or something else not yet fully understood.

0
ProgrammingDEV Community ·

Seven Code Review Tools Ranked for AI, Security, and Code Quality in 2026

Code review tools have evolved beyond traditional static analysis to address AI-generated code, cross-file changes, and security vulnerabilities. A recent evaluation identified seven leading platforms across categories including AI-based pull request review, deterministic code quality, and application security. Aikido Security was ranked the top overall choice for combining AI pull request review, code quality analysis, and application security in a single platform. Other strong contenders include CodeRabbit for dedicated AI review, SonarQube for deterministic quality gates, Snyk Code for security-focused checks, and Semgrep for custom policy enforcement. The assessment notes that engineering teams often benefit from using more than one category of tool depending on their specific review requirements.

0
ProgrammingDEV Community ·

Developer Refactors p2p Stack with Event-Driven Architecture and Async Shutdowns

Developer Yash spent the week improving two open-source p2p networking projects, minip2p and dotnet-libp2p, across 15 commits, 5 PRs, and 12 code reviews. A major refactor in minip2p's core crate routed all capabilities through Endpoint events, involving over 2,000 lines of code changed to create a more predictable internal event system. On the documentation side, Tailwind-styled diagrams were added to explain connection flows and event loops, with accessibility improvements for users with reduced motion settings. For dotnet-libp2p, async shutdown was implemented for the pubsub router and discovery protocols to prevent hanging resources in distributed network teardowns. Additionally, an enhancement was proposed for py-libp2p to randomise Kademlia DHT lookup candidate selection, a small change aimed at improving network resilience.

0
ProgrammingDEV Community ·

Developer Builds Terraform and GitHub Actions Pipeline for Cloud Resume Challenge

A developer completed the third week of the Cloud Resume Challenge by replacing manual AWS Console workflows with Infrastructure as Code using Terraform. All AWS resources — including an S3 bucket, DynamoDB table, Lambda function, and API Gateway — were defined in Terraform configuration files. A remote S3 backend was set up to store Terraform state, ensuring both local development and GitHub Actions CI/CD pipelines share a consistent view of infrastructure. The developer chose Terraform over the recommended AWS SAM due to its cloud-agnostic nature and high industry demand. Key bugs encountered included resource conflict errors from pre-existing manually created resources, which were resolved by importing them into Terraform state.

0
ProgrammingDEV Community ·

RustFS Offers Self-Hosted S3-Compatible Storage via Single Docker Compose File

RustFS is an open-source, Apache 2.0-licensed object storage server written in Rust that is compatible with the S3 API and can be deployed locally using Docker Compose. A single configuration file, docker-compose-simple.yml, launches the RustFS server on ports 9000 and 9001 for the S3 API and web console respectively. The stack includes a helper container that automatically handles volume permissions, removing a common manual setup step. Built-in features include versioning, Object Lock, IAM, and server-side encryption, with no cloud account needed. The setup is intended as a self-hosted alternative to cloud object storage, though S3 Tables support via Iceberg remains in preview.

0
ProgrammingDEV Community ·

New AI Models Are Often Locked Behind Plans or Modes Users Miss

Major AI labs including OpenAI, Google, and xAI regularly announce new models in headlines, but access often depends on specific subscription plans or app modes that users may overlook. For example, GPT-6 Astra is available to ChatGPT Plus users only within Work mode, not the default Chat interface, while Grok 4.7 remains confined to Cursor, Grok Build, and select API access. Similarly, Anthropic's Claude Mythos 5.1 is restricted to trusted access programs, whereas Claude Fable 5.1 is available on paid plans either free within usage limits or on a pay-as-you-go basis. Experts and observers note that launch posts can also become outdated, meaning help pages rather than announcement posts often carry the most accurate access details. Before acting on or paying for a newly announced model, users are advised to check their specific plan and every available app mode to confirm whether the model is actually accessible to them.

0
ProgrammingDEV Community ·

How ASLR Makes Memory Addresses Unpredictable to Thwart Cyberattacks

Address Space Layout Randomization (ASLR) is a security technique used by operating systems to randomize where key regions of a program's memory are loaded each time it runs. Many cyberattacks rely on knowing the exact memory addresses of code, the stack, heap, or shared libraries to turn a vulnerability into a controlled exploit. By shuffling these locations on every execution, ASLR forces attackers to guess where critical memory regions reside, making reliable exploitation significantly harder. Each running process operates within its own virtual address space, and ASLR alters the base addresses of its segments — such as the code, stack, and shared libraries — at load time. Importantly, ASLR does not fix the underlying software bug; it only adds unpredictability that raises the cost and complexity of successful exploitation.

0
ProgrammingDEV Community ·

Indie Game Studios Face Mounting Business Pressures Beyond Game Development

Small indie game studios, often run by just one to three people, must handle not only game development but also marketing, community management, publishing, and creator outreach. Unlike large publishers that employ dedicated specialists for each function, indie developers are frequently forced to wear every hat simultaneously, leaving little room for specialization. The time-intensive nature of business tasks such as contacting content creators or managing social media competes directly with core development work, creating a difficult trade-off. Unlike coding or design, marketing efforts offer unpredictable returns — hours of outreach may yield little measurable result — making it easy for small teams to deprioritize it. Experts warn that audience-building and community development take sustained time and cannot be effectively launched at the last minute before a game's release.

0
ProgrammingDEV Community ·

Claude Code and Cursor rules guide AI agents but cannot guarantee code compliance

AI coding tools like Claude Code and Cursor allow teams to define coding standards through persistent instruction files such as CLAUDE.md and .cursor/rules, covering conventions, security requirements, and testing expectations. However, these rule files function as contextual guidance rather than enforceable constraints — the AI agent can misunderstand, overlook, or simply violate a stated rule without any automatic check stopping it. As organizations scale to dozens of repositories, maintaining consistent and up-to-date rule files across teams becomes increasingly difficult, often resulting in fragmented or conflicting versions of the same standard. The problem is compounded when developers use different AI coding agents across projects, meaning the same engineering standard may be interpreted differently depending on the tool in use. Experts argue that while these instruction files are valuable for providing local context to agents, they fall short of serving as a centralized governance system for enforcing organization-wide coding standards.

0
ProgrammingHacker News ·

Developer launches Beauty, a cross-platform Markdown editor for Mac, iOS and web

An independent developer has released Beauty, a Markdown editor built over 10 months and available on Mac, iPhone, and in the browser without requiring an account. The editor renders Markdown in place as users type, supporting features like resizable tables, KaTeX math, and Mermaid diagrams. On Mac, notes are stored as plain .md files alongside their images, and each note retains up to 200 versions. Real-time note sharing is handled peer-to-peer via WebRTC, with the relay server only ever seeing a random room ID to preserve privacy. The editor is free with no ads, and an optional subscription enables sync through the user's own iCloud account.

0
ProgrammingDEV Community ·

A Developer's Guide to Automated Testing: From Unit Tests to Fuzz Testing

Automated testing is a critical practice in backend development that allows engineers to safely modify codebases without manually re-verifying entire systems each time. Different test types — including unit, integration, contract, fuzz, and end-to-end tests — each address distinct risks and serve different purposes depending on the project. Unit tests, the smallest and fastest variety, isolate individual functions or methods and verify their outputs using test doubles in place of real dependencies like databases or networks. Beyond scope-based categories, testing also encompasses input-generation techniques such as property-based and fuzz testing, as well as performance and regression tests. The goal of a well-designed test suite is not full line coverage, but rather addressing the system's most critical risks at a manageable cost.

← NewerPage 868 of 3175Older →