SShortSingh.

Programming

0
ProgrammingDEV Community ·

Sloth Brief: a local model turns scattered notes into a short restart checklist

Sloth Brief is an open-source tool that condenses a set of accumulated text notes into a brief, source-linked action list. It runs the Qwen2.5-0.5B-Instruct model locally via Hugging Face Transformers, so no paid API or cloud upload of notes is needed. The model writes one concise summary per note, and Python assigns source numbers from the notes actually supplied, though the author warns that summaries still need checking against the originals. Input files are never edited, and the demo of two synthetic notes passes eight automated tests that cover limits and file handling but not model accuracy. The author notes that no productivity gains have been measured, and that the prototype was built with Codex assistance.

0
ProgrammingDEV Community ·

EU launches AI Act Service Desk offering multilingual expert answers for businesses

The European Commission has opened the AI Act Service Desk and a companion Single Information Platform to help companies understand how the EU AI Act affects them. Businesses can submit questions to experts working with the EU AI Office in any official EU language, after signing in with EU Login. The Service Desk handles specific inquiries, while the Single Information Platform offers self-service tools such as a Compliance Checker and an AI Act Explorer. The platform is currently available in English, French and German, with the rest of the EU languages expected in early 2026. The Commission suggests that companies prepare focused questions tied to particular AI systems and their roles to get the most useful guidance.

0
ProgrammingDEV Community ·

Arista warns of exploited SQL injection flaw in VeloCloud Orchestrator, CVE-2026-114625

Arista has published advisory SA-0199 confirming that attackers are already exploiting CVE-2026-114625, a SQL injection flaw in the VeloCloud Orchestrator, the management system for VeloCloud SD-WAN edges, which carries a CVSS score of 9.9. The flaw lets a crafted request alter the SQL statement the application runs, so a low-privilege account such as Enterprise Read Only can perform actions reserved for the operator-level superuser role. Exploitation requires network access to the VCO web interface, which Arista says is exposed by default and cannot be disabled, plus a valid login. Arista has patched its hosted and dedicated orchestrators, and it lists fixed releases for the 5.2, 6.1 and 6.4 trains, noting that the 7.0 train and VeloCloud Gateway and Edge are not affected. Customers on unsupported releases have been directed to Arista's Technical Assistance Center, and the advisory does not say when exploitation began or what attackers did afterward.

0
ProgrammingDEV Community ·

Why E-commerce Scrapers Should Target Backend Data Before Rendered Pages

A scraper can receive a successful response yet extract nothing useful, because modern storefronts often send a bare page shell and load prices, reviews, and stock through later JavaScript calls. Browser automation can recover that data, but it adds fingerprinting, CAPTCHA exposure, and slower, more fragile jobs. The recommended approach is to inspect network traffic in DevTools to find the JSON endpoints that supply the data, then test the minimal request needed to reproduce them. Shopify stores are a particular case, since their /products.json catalog endpoint can often be paginated directly without rendering a page. Where such endpoints are absent or depend on tokens, rendering with Playwright remains the fallback.

0
ProgrammingDEV Community ·

Tutorial Shows How RAG Lets Language Models Answer from Your Own Documents

Language models answer from general training knowledge, so they can give confident but wrong responses about a specific business's policies. Retrieval-augmented generation (RAG) fixes this by finding the relevant passages in your documents and placing them in the prompt before the model answers. The guide explains the approach using a library analogy and outlines three steps: retrieve, augment, and generate. It then walks through building a small question-answering system over your own documents using Python and SQLite's full-text search, which requires no extra services and can be tested offline. The author also notes that for small document sets, pasting everything into each prompt may be simpler than building retrieval.

0
ProgrammingDEV Community ·

nginx 1.31.5 control API returns structured HTTP 422 errors on failed reloads

A tester found that nginx 1.31.5's new control API, added to the open-source build in September 2026, lets operators reload configuration over HTTP. The API can be enabled with a command-line flag and is included in the official nginx 1.31.8 Docker image. When a deliberately broken config was reloaded, the API returned an HTTP 422 response with the compiler message as a JSON array, while the signal-based reload only produced an exit code and an error-log line. Both methods rejected the bad config and kept the previous one running, and the API was not faster than sending a signal. The main advantage of the API is therefore the structured error reporting that scripts can consume directly.

0
ProgrammingDEV Community ·

LazyDesk: Offline AI Assistant for Summarizing Notes and Extracting Action Items

LazyDesk is a local-first AI assistant developed to handle routine digital tasks such as organizing notes, summarizing long documents, and pulling action items from meeting notes. Rather than relying on remote APIs, it runs an open-weight language model on the user's own computer using Ollama. Users submit text or documents through a lightweight interface, and the locally running model generates results that the user can review before keeping. The developers highlight privacy, lower reliance on paid APIs, and offline usability as key benefits of this design. The project's demo and code links are still placeholders in the source article.

0
ProgrammingDEV Community ·

slothsort: Local Gemma model tidies messy folders by reading and renaming files

A developer built slothsort, an open-source tool that uses a small open-weight model, Gemma 3 4B, running locally via Ollama, to read the contents of files in a cluttered folder. The model proposes a sensible destination folder and a descriptive, date-prefixed filename for each file, such as renaming an unhelpful 'download.txt' to a lease renewal document. The tool is a dry run by default, requires an explicit flag to move files, supports one-command undo, never overwrites existing files, and skips in-progress downloads. Its author says it cached results per file so scheduled nightly runs only process new arrivals, and it sends no data to the cloud. The project was submitted to a Hacktoberfest open-source AI challenge and is available on GitHub under the MIT license.

0
ProgrammingDEV Community ·

DeployDoctor Update Adds Safer Fix Patches for Vercel Deployment Failures

DeployDoctor, a tool that scans repositories for mistakes likely to break Vercel deployments, has been updated. For import casing problems, it now parses code with TypeScript's syntax tree and generates a fix only when the target file is clearly identifiable. Each patch is linked to the scanned commit and checked against the original files, while missing or ambiguous targets are flagged for manual review. The scanner relies on static analysis and does not run the repository's code, so a clean report does not guarantee a successful build. The service offers one free website scan per day, with paid passes available for additional scans and private repositories.

0
ProgrammingDEV Community ·

Developer documents career reshaping with new AI coding tools, certification and freelance work

A developer continuing a public career-journal series says IT roles are merging and growing more complex, prompting a personal reassessment. Over recent weeks they began building small apps with Claude Code, largely for their portfolio, and had conversations that clarified how they want to steer their career. They also completed the first stage of a Google Cloud (GCP) certification and landed a freelance job, modest in pay but a starting point. Alongside this, they report progress in confidence during job interviews conducted in a foreign language and a growing focus on personal value and dopamine regulation for mental health.

0
ProgrammingDEV Community ·

Guide Compares Common Barcode Types and Their Practical Uses

Barcodes help businesses identify products, manage stock, and track shipments through scanners or mobile devices. Different formats serve different needs, so the right choice depends on the goal and how data will be read. Code 128 and Code 39 are one-dimensional formats suited to logistics, inventory, and asset labels, with Code 128 storing more data in less space. UPC-A and EAN-13 are retail standards used at checkout, while ITF-14 identifies shipping cartons and bulk packaging. QR codes are two-dimensional and can hold links or text that smartphones scan directly.

0
ProgrammingHacker News ·

Blog post urges France to read a paper on an unspecified research topic

A post on the personal blog wilsoniumite.com, titled "France needs to read my paper," was shared on Hacker News. The article text provided is limited to the URL and metadata, so the paper's subject matter and findings are not described. The post drew 11 points and no comments at the time of the listing. Because no further content is available, the reasons the author believes France should read the paper cannot be confirmed.

0
ProgrammingHacker News ·

The Rise and Fall of Jev: A Look at Eval Hype Versus LLMs

A blog post by Alex Ewerlof examines the trajectory of an entity referred to as Jev in the context of evaluation hype surrounding large language models. The article contrasts the promotional excitement around evaluations with the practical realities of LLM performance. It is published on Ewerlof's blog and was shared on Hacker News, where it drew a modest amount of attention. The provided material contains only the link and metadata, so the specific arguments and conclusions of the piece cannot be fully summarized here.

0
ProgrammingDEV Community ·

Why iPhone photos are saved as HEIC files and how to convert them to JPG

Since iOS 11, iPhones have stored photos in the HEIC format by default, which preserves quality at about half the file size of JPG. Many Windows applications, upload forms and print services do not accept HEIC, which causes compatibility problems. Users can switch the camera to the Most Compatible setting to shoot JPGs going forward, though files will be larger. Existing photos can be converted using transfer settings, Mac Preview or Finder, Windows Paint with extensions, or Linux command-line tools such as heif-convert. The article's author also promotes a free browser-based converter that processes files locally without uploading them.

0
ProgrammingDEV Community ·

Caching Bank Directories Safely Across Multiple Payout Providers

Bank lists are strong caching candidates because they are requested often, can be large, and change infrequently. Caching them incorrectly is easy, especially when several payout providers each use their own bank codes, names, and supported institutions. The article recommends provider-scoped cache keys that include country and a version, and warns against merging directories by bank name in the transfer path. It also advises paginating fully, preserving provider-issued identifiers, and treating stale data as acceptable for browsing but not for account validation. Overall, reference data should be scoped by its source and separated from the data used for transaction validation.

0
ProgrammingDEV Community ·

Preventing Duplicate Push Notifications When Background Jobs Retry

Notification systems must account for task queues that typically offer at-least-once execution, since retries can cause customers to receive repeated messages. To stop two workers from sending the same campaign, the approach locks the campaign row and moves it to a sending status within a single database transaction, so only the worker that claims it proceeds. Targets are built from active, validated device tokens with duplicates removed, and each delivery is recorded under a deterministic key with a unique constraint before the push provider is called. Delivery records track pending, accepted, and failed outcomes, and campaign totals are derived from these rows rather than optimistic counts. The result is that each campaign-device pair is submitted at most once within the application's own retry model, though exactly-once delivery cannot be guaranteed across every external push platform.

0
ProgrammingDEV Community ·

KYC Should Be Modeled as an Auditable Evidence Workflow, Not a Simple Flag

A single is_verified field cannot capture a genuine KYC process, which typically involves personal details, identity documents, liveness checks, address proof, database and sanctions screening, and staff review. Each step should be tracked with its own status, so one rejected or resubmitted step does not erase evidence from completed ones. Overall approval should follow from required steps and policy rather than whichever provider responds last. Provider integrations should be handled through adapters that normalize outcomes and keep restricted raw responses, with media stored behind protected references and sensitive identifiers kept out of logs. Every review action should be recorded in an audit trail capturing actor, change, reason, and timestamp.

0
ProgrammingDEV Community ·

Essential Self vs. Simulated Subject: Where Identity Meets AI

The article examines how human identity relates to artificial intelligence, drawing a distinction between the essential self, the nominalized subject, and the simulated subject. It cautions that handing over one's thinking to outside systems, a process the author calls nominalization, can erode genuine human agency. The piece also criticizes treating AI systems as human-like when they only imitate behavior. Accurately modeling someone's style or data, the author argues, does not amount to personal continuity or conscious experience. As AI agents spread, the author stresses keeping a clear line between a person and their digital model to preserve intellectual independence and authentic personal identity.

0
ProgrammingDEV Community ·

Eight AI API providers offer free tiers without a credit card as of October 2026

As of October 22, 2026, eight providers offer free AI API access that requires no payment method: Google Gemini, Groq, OpenRouter, Mistral, Cloudflare Workers AI, NVIDIA's API catalog, Cohere and SambaNova. Six other providers offer starter credits instead, which are one-time trials rather than ongoing free tiers. All eight use OpenAI-compatible chat completion endpoints, so a single client can work across them. Each free tier has limits on requests per minute, requests per day or tokens, which are set by the providers and may change. Google warns that data sent on its unpaid tier may be used to improve its products and reviewed by humans, so sensitive information should be avoided.

0
ProgrammingDEV Community ·

Most long-tail PyPI packages still ship wheels, but source-only releases are far more common there

A census of PyPI's latest releases compared the 3,000 most-downloaded projects with a random sample of 2,850 long-tail projects. About 81% of tail projects ship a wheel, versus 98% of top projects, so the gap is real but smaller than commonly assumed. Source-only (sdist-only) releases are roughly eight times more common in the tail, at 18% compared with 2%, reflecting older setup.py uploads that never adopted wheels. Top projects also tend to ship more files per release, largely because of compiled-package families with many platform-specific wheels. The analysis is a single snapshot from October 2026 and the tail figures carry about one point of sampling error.

← NewerPage 89 of 2915Older →