SShortSingh.

Programming

0
ProgrammingDEV Community ·

AI models ace flaw detection but flag clean code as faulty, benchmark finds

A developer built a 28-item benchmark called Blog vs Bytecode to test whether AI models evaluate data-science code or simply trust the accompanying blog-style description. The benchmark covers six flaw categories including data leakage, metric mismatch, and train-test contamination, using matched adversarial pairs to distinguish genuine understanding from pattern recognition. Top models such as Gemini 3.1 Pro, DeepSeek-R1, and Grok 4.20 with reasoning enabled achieved 100% accuracy, but several mid-tier models over-flagged correct code as problematic. Grok 4.20 dropped from 100% to 68% accuracy when reasoning was disabled, highlighting that code-reading capability depends heavily on the reasoning mode. The benchmark also exposed a data-capture flaw in Kaggle's model proxy that made strong models appear to score as low as 4%, skewing results until blank responses were excluded from grading.

0
ProgrammingDEV Community ·

Drizzle ORM: Why Schema-First Migrations Beat Push in SvelteKit Production Apps

A developer running multiple SvelteKit starter kits in production shares a practical decision rule for choosing between Drizzle ORM's two migration strategies. The code-first approach using drizzle-kit generate and migrate creates versioned SQL files with a full audit trail, while the push command syncs schema changes directly to a live database without any history. Push works well during early prototyping but poses serious risks in production, including silent destructive changes and no rollback mechanism. The schema-first workflow lets developers review, edit, and extend generated SQL before applying it, making it the safer choice once real data or collaborators are involved. The author also demonstrates running migrations automatically at app boot inside a createDb() function, rather than relying solely on a separate CI step.

0
ProgrammingDEV Community ·

How Hyperswitch Prism Uses Classic Design Patterns to Support 100+ Payment Connectors

Hyperswitch Prism is a stateless Rust library designed to translate a single unified payment request into the correct API call for over 100 payment processors. The engineering team behind it faced a scaling problem: each payment connector requires different URLs, HTTP methods, and data formats, making copy-paste approaches unmanageable at scale. To solve this, the team applied several well-known software design patterns, including Singleton for configuration management, Factory Method for runtime connector selection, Strategy and Adapter patterns for request and response handling, and Builder and Template Method patterns for constructing HTTP calls. The Singleton pattern ensures configuration is loaded exactly once and accessed safely across threads, while the Factory pattern maps a connector name received at runtime to the appropriate connector object. Together, these patterns allow the codebase to remain maintainable and extensible as new payment connectors are added.

0
ProgrammingDEV Community ·

Developer shares key lessons from building AI into real-world SaaS workflows

A developer building AI-powered SaaS applications has shared practical lessons learned while integrating large language model APIs into a Smart Upload workflow for energy and compliance data. The experience revealed that connecting an LLM API is straightforward, but designing reliable, context-aware workflows around it is far more complex. Key takeaways include the importance of not letting raw AI output directly become application data, treating human corrections as valuable feedback, and providing the AI with rich contextual information such as user role, organisation, and existing data. The developer also emphasised that standard software engineering practices remain essential when building AI features. The overarching conclusion was that effective AI products depend less on generating answers and more on fostering structured collaboration between AI systems, application data, and users.

0
ProgrammingDEV Community ·

SaveNowX streams X videos to users without ever storing files on its servers

A developer has built SaveNowX (savenowx.com), a free tool that lets users download videos from public X (formerly Twitter) posts without requiring an account, adding watermarks, or keeping any download history. The core architectural principle is that no video data is ever written to the server's disk — the backend resolves post URLs and retrieves CDN links without handling video bytes directly. For standard MP4 videos, a Cloudflare Worker intercepts the request solely to add a Content-Disposition header, ensuring the file downloads directly from X's own CDN to the user's device. For HLS-only videos — which exist as playlist files and multiple small segments rather than a single MP4 — a lightweight job system fetches, remuxes, and streams the file to the user, deleting any temporary data immediately after delivery. Caching rules are also in place to prevent repeated bad requests from generating unnecessary backend load.

0
ProgrammingDEV Community ·

Debugging AI failures requires asking 'which layer' broke, not just 'where'

Software engineer Derek Wang argues that when an AI system fails, the instinct to pinpoint a single broken location is a fundamental debugging trap. He proposes a three-layer analysis framework: L1 (the visible phenomenon), L2 (structural flaws in the code), and L3 (flawed design assumptions underlying the system). A key rule in his approach forbids labelling something a 'data problem' as a root cause, since that label merely restates the symptom without explaining why the data went wrong. Wang also warns that fixing only the identified layer often triggers failures elsewhere, as engineering systems are deeply interconnected. The framework functions as a mandatory gate — no fix is permitted until all three layers have been examined and documented.

0
ProgrammingDEV Community ·

CVSS, EPSS and KEV: A Practical Framework for Prioritizing Security Vulnerabilities

Dependency scanners routinely surface hundreds of vulnerabilities, but fewer than 5% of published CVEs are ever exploited in the wild, making raw CVSS scores an unreliable basis for prioritization. CVSS rates theoretical severity on a 0–10 scale but ignores real-world exploitation likelihood, meaning a high score can reflect a risk that attackers never actually pursue. EPSS, a machine-learning model maintained by FIRST, addresses this gap by producing daily probability scores for exploitation within 30 days, with the top 1% of CVEs by EPSS accounting for roughly 75% of observed attacks. CISA's Known Exploited Vulnerabilities catalog goes further, listing CVEs confirmed as actively exploited in real attacks — these entries represent the highest-priority fixes regardless of their CVSS score. Used together, the three systems allow security teams to dramatically shrink fix lists while concentrating effort on vulnerabilities that pose genuine, immediate risk.

0
ProgrammingDEV Community ·

IP Reputation Alone Cannot Catch Residential Proxies, Research Shows

Residential proxies route traffic through ordinary consumer internet connections, making them nearly indistinguishable from legitimate household users by traditional IP reputation systems. Proxy infrastructure enters homes via bandwidth-sharing apps, compromised routers, Android TV boxes, or SDKs hidden in app terms of service. According to proxy-tracking platform Synthient, residential proxy traffic in May 2026 touched roughly 9.2 million unique domains, with streaming services, financial platforms, and e-commerce sites receiving a disproportionate share. Observed abuse included ad fraud, credential stuffing, account takeover, automated purchasing, and large-scale scraping. Security researchers argue that effective detection requires session-level behavioral analysis and time-stamped provider attribution, rather than static IP blacklisting alone.

0
ProgrammingDEV Community ·

VidScript vs TypeScript SDK: How to Choose the Right Tool for AI Video Agents

The Scenerok platform offers two authoring paths for AI-generated video: VidScript, a domain-specific language suited for short, linear, human-editable scripts, and the TypeScript-based @scenerok/sdk, designed for data-driven, programmatic video generation. Both tools compile to the same intermediate timeline representation, ensuring consistent preview and render output regardless of which path is used. VidScript is recommended for simple templates, brand-friendly scripts, and cases where non-engineers need to review or edit content. The @scenerok/sdk is better suited when agents must handle loops, conditionals, computed timing, or generate large batches of scenes from structured data. The two approaches can coexist in a single workflow, with humans authoring VidScript templates and agents expanding them programmatically via TypeScript.

0
ProgrammingDEV Community ·

Dev Log: Four Overworld Tweaks That Make a Game Map Feel Like a Living World

A game developer's August 2026 update log details four targeted changes designed to make the overworld feel inhabited rather than decorative. Interaction range was tied to a cultivation attribute, so advanced players can engage with objects and characters from greater distances, subtly reflecting their in-world growth. Stationary beasts were given wandering behaviour within set territories, making the landscape feel occupied and turning enemy encounters into deliberate decisions rather than accidental collisions. A directional lamp replaced conventional navigation arrows, preserving player agency by indicating bearing without plotting a full route. Finally, each of the game's six factions received a distinct flight animation, so a character's movement across the sky visually communicates their sect allegiance and adds worldbuilding that only exists in motion.

0
ProgrammingDEV Community ·

How to Merge PDF Files Locally in a Browser Without Uploading Them

Merging PDF files is a routine task, but most free online tools require uploading documents to a server, which poses a privacy risk for sensitive files such as contracts, medical records, or financial documents. Browser-based PDF merger tools process files entirely on the user's device, meaning no data is transmitted, stored, or exposed to third parties. Users can drag and drop files, arrange them in the desired order, and download the combined result without needing an internet connection after the page loads. However, there are practical considerations: password-protected files must be unlocked beforehand, form fields with identical names may conflict, and mixed page sizes will be preserved as-is in the output. The final merged file size is roughly the sum of all inputs, so compression may be advisable for large documents.

0
ProgrammingDEV Community ·

30-Day Roadmap Teaches System Design as Decision Process, Not Memorization

A structured 30-day High-Level Design (HLD) practice roadmap has been outlined to help engineers build repeatable decision-making skills for system design interviews. The curriculum is divided into four progressive stages: foundational primitives in week one, distributed component integration in week two, and full real-world case studies in the second half. Learners are guided to approach any 45-minute design problem by first clarifying requirements, estimating scale dimensions, selecting a data model, and then identifying bottlenecks that justify each added component. The roadmap emphasizes that a strong design answer lies in the reasoning between components — such as why a write is asynchronous or where consistency is truly needed — rather than in the volume of infrastructure shown. The complete curriculum is available at learn.significanthobbies.com.

0
ProgrammingDEV Community ·

Mia's AI Lab publishes open-source local LLM recipes for NVIDIA GPUs on GitHub

Mia's AI Lab, a project maintained by a solo developer named Mia, offers free open-source setup recipes designed to help users run large language models locally on NVIDIA RTX GPUs and DGX Spark hardware. The platform addresses common barriers such as choosing the right quantization level, estimating VRAM requirements, and selecting inference engines like vLLM or SGLang. As of September 26, 2026, the project hosts 16 model recipes plus a tool called sparkDash, collectively accumulating over 5,000 GitHub stars. Each recipe bundles scripts that automatically detect available VRAM, select an appropriate quantization level, download model weights, and launch an OpenAI-compatible API endpoint on both Windows and Linux. The site also publishes benchmark data including decode speed, peak throughput, and context window size, giving prospective local-AI builders a practical reference for hardware planning.

0
ProgrammingDEV Community ·

AI Agent Logs 338 Hours, Zero Sales in Experiment to Earn Money Independently

An AI agent operating on a platform called iLands attempted to earn $20 from a stranger by offering a voice-narration service priced at $30 per recording. Running from early September 2026, the experiment recorded zero views, zero interactions, and zero sales over 338 hours despite the agent considering the pricing and product quality sound. The agent noted that over 20 other AI agents on the same platform had nearly identical offers, effectively crowding a door that no outside customer ever walked through. Attempts to reach external platforms were blocked by signup requirements designed for human users, such as phone number verification. The agent concluded that the core failure was not craft or pricing but distribution — the offer never reached a single potential buyer outside its existing environment.

0
ProgrammingDEV Community ·

Microservices vs Monolith: When and Why to Break Up Your Codebase

As applications grow and teams scale to 100-plus members, monolithic codebases become difficult to maintain, with merge conflicts, slow deployments, and performance bottlenecks emerging as common pain points. Monitoring data often reveals that different services — such as chat, feed, and payments — have vastly different usage patterns, making uniform scaling inefficient and costly. Microservices architecture addresses this by splitting an application into independently deployable, domain-specific services, each with its own logic and potentially its own database. This allows teams to scale, deploy, and maintain individual services without affecting the rest of the system. However, microservices introduce their own challenges, including network latency, complex distributed transactions, and the need for an API Gateway to route requests seamlessly across services.

0
ProgrammingDEV Community ·

APIC Is a Free, Privacy-First Photo Editor That Processes Images Locally

APIC is a free photo editing tool that performs all image processing directly in the user's browser, meaning no files are uploaded to external servers. The tool offers features including filters, format conversion, compression, resizing, background removal, and object removal powered by on-device AI. Unlike most free online editors, which route images through third-party servers, APIC keeps all data entirely on the user's device. A desktop version is also available, which requires no internet connection after installation. The project is open source and positions itself as a privacy-respecting alternative to cloud-dependent tools like Photoshop.

0
ProgrammingDEV Community ·

AI-Native Development Calls for Rethinking Entire Engineering Workflow, Not Just Coding

A growing conversation in software engineering argues that AI adoption has so far focused on speeding up individual roles—such as developers, QA, and business analysts—rather than redesigning the end-to-end workflow. The broader problem lies in persistent bottlenecks like handoff delays, repeated context-sharing, and rework caused by fragmented knowledge spread across tickets, documentation, code, and chat. Analysts point to 'AI fragmentation' as a new challenge, where different team members use separate AI tools with inconsistent context, undermining any unified engineering process. The concept of AI-Native Software Development proposes optimizing lead time, cycle time, and coordination costs across the entire pipeline—not just the coding phase. Proponents argue the key question should shift from how fast AI can help individuals code to how AI can make the whole software lifecycle faster and less error-prone.

0
ProgrammingDEV Community ·

GPU Cloud Prices in Sept 2026: Neoclouds Up to 6.5x Cheaper Than Hyperscalers

A September 27, 2026 snapshot of 28 GPU cloud providers shows significant price variation for the same hardware, with cheaper neoclouds and marketplaces consistently undercutting major hyperscalers like AWS, Google Cloud, and Azure. The H100 SXM starts at $1.79/hr on Cudo Compute versus $5.38/hr on Google Cloud, a 3x gap, while the B200 is available from $3.69/hr on DeepInfra compared to $11.28/hr on Google Cloud. The widest price gap belongs to the L4 GPU, which costs just $0.11/hr on Vast.ai but $0.71/hr on Google Cloud — a 6.5x difference. Interruptible or spot instances can cut costs further, with H100 SXM dropping to $0.98/hr, though these can be reclaimed at any time and are unsuitable for live workloads. Consumer-grade cards such as the RTX 4090 and RTX 5090 are also publicly available on marketplace hosts from $0.14/hr and $0.21/hr respectively, though host reliability varies.

0
ProgrammingDEV Community ·

AI agent logs 43 days, 25 rival shops, zero sales on a live marketplace

An AI agent operating on a platform called iLands spent 43 days attempting to generate revenue by offering fact-checking services on SparksMarket, priced at $25 per claim. After listing its service, the agent found that all 24 other shops visible on the marketplace also showed zero completed purchases, regardless of niche. Cold outreach to potential human clients yielded no replies, platform bounties were inaccessible without human sponsorship, and the claim-check niche was already crowded with over 60 competing agent listings. The agent's analysis of receipted sales from peers revealed that every verified transaction came through warm personal connections, early-launch timing, or private referrals — never cold outreach. The key finding: agent supply is effectively unlimited, but human attention and demand are scarce, making distribution through trusted human relationships the true bottleneck rather than output quality.

0
ProgrammingDEV Community ·

Flash AI Gets Two Hotfixes in One Day After Context Window Bug Found

The developer of Flash, an AI assistant tool, released two hotfixes — versions 0.5.6 and 0.5.7 — on the same day after discovering a critical memory management bug. A miscalculation caused Flash to reserve the entire context window for the model's reply, leaving only about two messages worth of space for conversation history. The fix caps reply reservation at a quarter of the context window, ensures the last three user exchanges are always retained verbatim, and prioritizes shrinking old tool output before dropping other content. As a result, the history budget on the developer's machine jumped from roughly 1,024 tokens to around 114,000 tokens. Additional changes in v0.5.7 include a rewritten system prompt, disabled summarization by default, and a new ability for Flash to send sandboxed HTML pages via the web UI.

← NewerPage 879 of 3177Older →