SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingHacker News ·

TiddlyInstall Offers a Universal and Reusable Software Install System

TiddlyInstall is a newly introduced tool designed to serve as a universal and reusable installation system for software. The project was shared on Hacker News, where it attracted modest early attention with 3 points and 1 comment. The system is documented and accessible via a static page hosted on the developer's personal GitHub site. It aims to simplify and standardize the software installation process across different environments. Details on supported platforms and use cases are outlined in the project's documentation page.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

College Student Builds AI-Powered Study Platform Nosey as Quizlet Alternative

A college student has developed Nosey, an AI-powered study platform intended as an alternative to the popular learning tool Quizlet. The project has been in development for several months and is now available for public use at nosey.lol. The developer has open-sourced the project, with the source code accessible on GitHub. Because the platform is hosted on a free service tier, users may experience limited resources and inconsistent uptime. The creator is actively seeking user feedback on both product improvements and marketing strategies.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Exponential Backoff Is Not Always the Best Retry Strategy, Developers Find

Exponential backoff is a retry technique where wait times between attempts double progressively, helping prevent 'thundering herd' problems when many clients simultaneously hit an overloaded server. However, a technical analysis of a real codebase shows that fixed-interval retries were deliberately chosen in several scenarios instead. In one case, an HTTP status checker used a single flat 3-second retry because the function is called dozens of times per maintenance run, making unpredictable cumulative delays a practical concern. The key distinction is that exponential backoff only provides meaningful benefit when multiple independent clients are competing for the same shared resource. Where that condition does not apply, fixed intervals offer simpler, more predictable behavior without sacrificing reliability.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Oizom team ships code via ticket threads alone, no laptops or IDEs required

The software team at Oizom, an environmental monitoring company, has built a pipeline that lets developers ship code entirely through a ticket-tracking interface, without opening an IDE or terminal. Each developer is paired with an AI coding agent that picks up approved tickets and provisions a fully isolated workspace — including dedicated branches, a cloned database, and a live preview URL — for every task. Developers communicate with their agent solely through ticket thread replies, and all prompts and outputs are stored alongside the work for review and coaching. The system was designed to let developers hand off tasks asynchronously, run multiple tickets in parallel without conflicts, and preserve standard engineering practices such as branches, pull requests, and CI. Most of the pipeline is built on scripts rather than AI, with automation deliberately limited to keep the engineering process auditable and controlled.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a Developer Built a Battery-Efficient Geofencing Engine to Auto-Mute Android Phones

A developer created an Android app called Muffle that automatically switches sound profiles based on a user's physical location, inspired by an embarrassing phone notification during a job interview. The app uses Google Play Services' GeofencingClient instead of continuous GPS polling, offloading location monitoring to the device's hardware so the app can stay dormant until a boundary is crossed. This approach relies on a PendingIntent and BroadcastReceiver to wake the app only when needed, keeping battery consumption minimal. The developer found that the biggest technical challenge was not GPS precision or geofence jitter, but manufacturer-specific battery optimization settings on certain Android devices that prevented the BroadcastReceiver from firing reliably. The project highlights how leveraging system-level APIs rather than custom location listeners can produce efficient, low-footprint background services on Android.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Agents Ignore Company Security Policies Unless Rules Are Hard-Coded

Most organizations store security and data-handling policies in documents that AI agents never read, leaving those agents unaware of rules around data exports, refund approvals, or regional data restrictions. Simply pasting policy text into an AI agent's system prompt is an inadequate fix, as such instructions can be overridden by prompt injection attacks and are requests rather than enforced controls. A stronger approach converts policy statements into programmatic checks the agent must pass before executing actions — for example, requiring a function call to verify manager approval before processing large refunds. A tool called AgentPolicy aims to automate this conversion, translating policy text into agent-callable compliance checks and mapping them to relevant EU AI Act obligations. The author cautions that generated rules are a starting point requiring human review, and that vague source policies will produce correspondingly vague rules.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Over 72,000 Samba File Servers Exposed to Public Internet, Security Audit Warns

Cybersecurity researchers using the ZoomEye scanning platform identified 72,819 Samba servers openly reachable from the public internet as of September 24, 2026. Samba implements the SMB protocol on Unix and Linux systems, enabling file sharing with Windows clients, and is widely used within corporate networks for document exchange. Experts warn that public internet exposure of SMB services typically signals a misconfigured firewall, an improperly placed file server, or an assumed-private hosting environment, rather than intentional design. Unlike management consoles that can be restricted behind a VPN, file servers are often accessible to a broad user base, making network-level restrictions harder to enforce. Security recommendations include disabling SMB1, enforcing signing, auditing anonymous access permissions, and using tools like ZoomEye to compare publicly visible services against internal inventories.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer builds automated red-team tool after finding prompt injection flaw in own AI agent

A developer discovered a critical security gap while building an AI agent capable of calling external tools, finding that a prompt injection attack disguised as a fake tool error message could sometimes leak records. Prompt injection has ranked as OWASP's top vulnerability for LLM applications since the organization's first such list, yet the developer noted a wide gap between theoretical awareness and actual resistance testing. Manual red-teaming proved informative but unreliable, as test cases were skipped and no records were kept, making it impossible to verify whether fixes held. To address this, the developer created AgentRedTeam, a tool that takes an agent's description and tool list, then runs adversarial simulations covering prompt injection, tool abuse, and data exfiltration, producing a prioritized, rule-based hardening report. The developer cautions that the tool is meant as a structured first pass to complement human testing, not as a security certificate or substitute for dedicated manual review.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

SEO Automation Works Best as a Hybrid of Rules, AI, and Human Oversight

SEO automation is increasingly viewed as a workflow design challenge rather than a binary choice between manual effort and full AI control. Industry signals suggest a tiered model: rule-based automation handles repetitive, condition-driven tasks like crawl checks and rank alerts, while AI assists with drafting, research, and pattern recognition. Human approval remains essential for high-stakes decisions such as publishing content, altering site-wide metadata, or responding to unusual performance shifts. Relying solely on AI is cautioned against, as it cannot reliably assess commercial priorities, quality thresholds, or the broader consequences of site changes. The recommended approach is to automate predictable work first, apply AI where language or interpretation adds value, and reserve human judgment for actions with material consequences.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Build a Reliable Node.js Text Summarization API for Game Moderation

Developers building game moderation pipelines can use Node.js chat completion APIs to generate compact summaries, policy categories, and confidence signals for human reviewers. The recommended approach places API calls behind an idempotent queue consumer to prevent duplicate classifications and missed jobs from disrupting review order. Token limits should be checked before sending reports, and oversized inputs must be split at message boundaries using current provider documentation rather than hardcoded values. Live moderation requests should run on a bounded worker pool, while bulk backfills and policy migrations are better handled via batch submission to protect reviewer-facing latency. The core design principle is that quality over latency matters most — silently misclassifying a credible threat as routine spam is treated as a release-blocking failure, not an acceptable trade-off.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

pgvector HNSW Index Silently Returns Fewer Results for Restricted Users in AI Search

AI search systems built on PostgreSQL with pgvector can quietly return far fewer results to users with limited document permissions when an HNSW vector index is enabled. The index scans a fixed candidate list — 40 rows by default — and applies permission filters afterward, meaning users who can read only 10% of documents may receive as few as 1 result instead of the expected 20. Because no error is thrown and no data leaks, the issue goes undetected, especially since developers typically test with broad-access accounts that always return full results. This can cause AI assistants to give incomplete or misleading answers to restricted users, such as incorrectly stating a policy does not exist. pgvector 0.8.0 introduced iterative index scans, which resolved the recall gap in testing but increased median query time from 1.7 ms to roughly 18–28 ms depending on the mode used.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Trail of Bits built custom AI tooling to audit Miden zkVM before reviewing a single line

Security firm Trail of Bits spent six months before the Miden zkVM audit building an LSP server, decompiler, static analysis engine, and a Lean formal model — all using AI agents — rather than relying on human reviewers alone. The challenge stemmed from Miden assembly's stack-based architecture, which has no function signatures or calling conventions, making manual code review extremely difficult to scale. Using the Lean formal model, the team generated 95 machine-checked correctness proofs and uncovered a critical vulnerability: an unvalidated prover-supplied input that could allow a malicious actor to forge Falcon signatures and steal user funds. Trail of Bits argues that as AI-generated code volumes grow, the solution is not faster or stronger reviewers but better tooling that reduces the reviewable surface area. The firm also noted that the decompiler's intermediate analysis frameworks proved more valuable than its final output, suggesting that tooling artifacts built during audits can have broad reuse value.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer Builds Wordle-Style Game to Teach Media Literacy

An independent developer has created a browser-based game designed to improve media literacy skills around fake news and memes. The project draws inspiration from Wordle, applying a similar daily-challenge format to spotting misinformation. The creator shared the game on Hacker News, openly seeking honest feedback from the community. The post received modest early engagement, with 3 points and 1 comment at the time of publication. The developer stated a serious intent to improve the game based on user responses.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Brazil's Lula Signs Ban on Online Betting Operations

Brazilian President Luiz Inácio Lula da Silva has signed a ban on online betting operations in the country. The move comes as the 2026 reelection race begins to tighten, adding a political dimension to the regulatory decision. Online betting had grown rapidly in Brazil, raising concerns about its social and economic impact on citizens. The ban marks a significant shift in Brazil's approach to regulating the digital gambling industry.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

ContextForge Drafts AI Agent Instruction Files by Parsing Your Repo Directly

Developers adopting AI coding agents like Cursor, Claude Code, or Codex often find the tools misread project conventions within the first two weeks of use, producing code that does not match the existing repo structure. Most AI agents can read dedicated instruction files such as CLAUDE.md or AGENTS.md, but writing accurate ones manually takes 30 to 90 minutes per repository and tends to go stale. ContextForge addresses this by parsing a repo's file tree and package.json to extract verifiable facts — including the package manager, framework, test runner, and CI system — before any AI model is involved. Each extracted fact is tagged as detected, inferred, or unknown, and uncertain details are surfaced as open questions rather than fabricated conventions. The tool also returns a Context Score out of 100 reflecting how much it could reliably determine, and stores no repository data, requiring only a pasted file tree to operate.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

JavaScript Trick Lets Non-Async Functions Silently Pass Promises Without TypeScript Knowing

A developer has demonstrated a four-line JavaScript function, MaybePromise, that can transparently handle both synchronous values and Promises without using async or await keywords. The function exploits the fact that await is only an operator inside explicitly marked async functions, meaning a Promise passed through a plain function as an opaque argument is never intercepted or wrapped by the engine. The only conditional check used is against undefined, which serves as the sole sentinel for a deferred value, while every other falsy value is treated as a present, synchronous result. The function was tested across 80 scenarios covering all major value types and usage patterns, passing every case across four variants. When placed in a TypeScript file with strict mode enabled, the function triggers implicit-any warnings, highlighting that TypeScript's type system flags the pattern even though the JavaScript runtime executes it correctly.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

NavBoost SEO Claims Lack Verified Proof; Focus on Page Intent Instead

A circulating SEO claim links a term called NavBoost to how search engines may interpret user return-to-results behavior as a negative signal. However, no verified technical documentation, official announcement, or credible source has confirmed what NavBoost is, who owns it, or whether it directly influences rankings. Businesses are advised not to treat it as a confirmed ranking factor or purchasable service. Regardless of any unverified system, website owners can improve search performance by ensuring their pages genuinely match visitor intent, offer clear information, and provide a logical next step. Any meaningful update on NavBoost would require a primary source or well-supported technical documentation before informing SEO strategy.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Watermarking 180,000 PDFs: Why Stamping Beats Re-Rendering by 45x in CPU Cost

A technical analysis highlights the steep computational difference between regenerating PDFs from source markup versus stamping watermarks onto already-rendered files. For a batch of 30,000 documents shared with six recipients each, re-rendering via headless browser consumes roughly 90 CPU-hours monthly, while overlay stamping cuts that to about 2 CPU-hours. Beyond compute, the approach also determines long-term storage obligations: 180,000 watermarked copies at 1.4 MB each accumulate to approximately 21 TB over a seven-year records retention period. The core engineering insight is that print layout — converting markup into paginated pages — is the expensive operation, whereas drawing a watermark on an existing PDF is comparatively trivial. Choosing the right method matters not just for performance but for the quiet, compounding cost of storage that grows automatically with every sharing cycle.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Current AI Agent Evaluation Frameworks Are Failing to Catch Critical Threats

The rapid growth of agentic AI systems has outpaced the safety and evaluation controls designed to govern them, leaving critical vulnerabilities largely undetected. Unlike traditional LLM applications tested on static question-answer benchmarks, autonomous agents interact with external tools, maintain memory, and execute real-world actions — meaning failures can result in security breaches or irreversible data damage. A key threat highlighted is prompt injection via tool metadata, where malicious content returned by external sources like compromised APIs or datasets can hijack an agent's behavior mid-task. Engineers have identified at least seven failure modes — including goal drift over long conversations, hallucinated tool calls, and unauthorized scope expansion — that standard evaluation suites consistently miss. Experts argue that effective agent evaluation must shift from single-turn output checks to dynamic, stateful, and adversarial simulation environments.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Google Sheets Pipelines Break at the Sharing Step — and How to Fix It

Google Sheets often functions as an unofficial database across company departments, but syncing it to a data warehouse consistently fails at one overlooked step. To connect Sheets to a warehouse via a tool like Datanika, users must create a Google Cloud service account with no IAM roles and download its JSON key. The critical step is manually sharing each individual spreadsheet with the service account's email address, just as one would share it with a colleague, since folder-level permissions do not apply. When testing the connection, the tool intentionally returns a neutral status rather than a green tick, because credential validity and per-spreadsheet sharing permissions are checked separately. Skipping the explicit share step or expecting a successful connection test to confirm full access are the two most common points of failure in this workflow.

0 comments Read more at DEV Community
← NewerPage 913 of 3181Older →