SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Developer discovers broken payment page after user report surfaces via his own email tool

A developer behind the email tool Premail learned his payment page was returning a 404 error only after a user took the time to submit a comment about it. Despite having automated tests, alerts, and infrastructure monitoring in place, none of the systems caught the broken checkout flow. The issue came to light through Premail's own morning digest feature, which surfaced the user's comment notification and prompted the developer to investigate. He acknowledged the gap in his monitoring, noting that a failed payment can easily be mistaken for a customer simply choosing not to buy. As a gesture of gratitude, he offered the reporting user a 50 percent discount and used the incident to highlight the importance of testing real user-facing flows, not just internal signals.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Benchmark to Test If AI Models Actually Follow Coding Instructions

A developer has created a custom benchmark to evaluate whether AI models can follow specific instructions while completing coding tasks, not just solve the problem itself. The benchmark presents identical prompts to multiple models and checks compliance with constraints such as avoiding certain methods, using a specific language, or returning output in a required format. Each model is scored separately on task correctness and instruction compliance, allowing patterns to emerge across models. The project was motivated by a common frustration: AI often produces technically correct code while ignoring one or more explicit instructions given by the user. The developer plans to expand the benchmark with more complex scenarios, including conflicting instructions, multi-turn tasks, and self-correction after instruction-following errors.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Removing Scripts Is Not Enough: Two SVG Library Flaws Highlight Deeper Risks

Two recently disclosed vulnerabilities in SVG processing libraries reveal that stripping scripts from an SVG file does not guarantee safe processing. A use-after-free bug in librsvg (CVE-2026-96889), patched on September 23 2026 in versions 2.63.2 and 2.62.4, can be triggered through nested XML entity declarations without any JavaScript. A separate flaw in NanoSVG (CVE-2026-88366) shows that extreme arc radius values can produce undefined behavior and a potential denial of service, again requiring no scripting. Both vulnerabilities arise inside the parsing and rendering layer, meaning a sanitizer applied before these components cannot protect them from malicious input. Security experts recommend a layered approach covering explicit sanitization policies, dependency patching, resource limits, and isolated execution environments for any pipeline handling untrusted SVG files.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Run a Self-Healing Crypto Trading Bot for Free Using Freqtrade

A developer guide published on DEV Community outlines how to build a zero-cost, automated crypto trading bot using Freqtrade and a custom watchdog script on Linux or WSL2. The setup is designed to run in dry-run mode, meaning no real money or exchange credentials are required, making it safe for strategy validation. The watchdog component automatically restarts the bot if it crashes, logs profit-and-loss snapshots at regular intervals, and enforces a user-defined drawdown limit to manage risk. Backtesting results across three strategies over a 200-day window showed that sample size and profit factor matter more than headline return figures when evaluating a strategy's viability. The guide emphasizes that a bot silently dying mid-experiment can invalidate weeks of data collection, making automated process monitoring a critical — yet often overlooked — part of any trading setup.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

dbdiagram.io, dbdiagramr, DrawSQL: Which Database Schema Tool Fits Your Workflow?

Three popular database diagramming tools — dbdiagram.io, dbdiagramr, and DrawSQL — each cater to distinct developer workflows and budgets. dbdiagram.io focuses on schema-as-code using DBML syntax and suits teams designing databases from scratch, but lacks live database connectivity and limits free users to one diagram. dbdiagramr is a free, browser-based tool that connects directly to Supabase, Neon, and Railway databases, generating visual diagrams instantly from a connection string, though it currently supports only PostgreSQL and has no schema-editing capability. DrawSQL offers a desktop GUI with strong auto-generation and export options for teams, but requires a paid subscription and does not run in the browser. Experts suggest the tools are complementary rather than competing, with many developers using dbdiagramr to visualise existing databases and dbdiagram.io when redesigning schemas from the ground up.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How to Deploy a Spring Boot AI Chat App to the Cloud for Free Using Render

A locally running Spring Boot chat app with PostgreSQL history is only useful as long as the terminal stays open, making cloud deployment necessary for real-world access. The article compares four free-tier cloud platforms — Railway, Fly.io, Koyeb, and Render — ultimately recommending Render for its no-credit-card signup and automatic GitHub-based deployments. Before deploying, the app must be hosted on GitHub, use environment variables for secrets, and be packaged as a Docker image to ensure consistent runtime environments across machines. A multi-stage Dockerfile is introduced to first build the app using a Maven and Java 17 image, then run it on a lighter JRE-only image to keep the final container size around 200MB. This approach lets developers move from a local script to a live, publicly accessible URL running around the clock.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer builds open-source AI agent to play Pokémon Red in real time

A developer has built an AI agent called Jev that plays Pokémon Red autonomously, sharing the project on Hacker News. The system makes decisions quickly enough to navigate the classic Game Boy RPG, a step up from the creator's earlier Tetris experiment. The game is being streamed live, with token usage and costs displayed in real time. All source code has been released publicly on GitHub for others to explore and build upon. The developer's goal is for Jev to earn all in-game badges without getting stuck.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

AI and Satellites Are Being Used to Build a Real-Time Digital Twin of Earth

Scientists and technologists are developing a computational model of Earth — known as a Digital Twin — that continuously integrates satellite imagery, ground sensors, ocean buoys, and AI to simulate the planet's systems in near real time. Unlike traditional climate models that reconstruct the past, this approach aims to enable 'what-if' scenario analysis, allowing researchers to explore how changes in one variable might affect the broader Earth system. Major initiatives driving this effort include the European Union's Destination Earth project and NVIDIA's Earth-2 platform, which focuses on AI-powered high-resolution weather and climate simulation. The core challenge lies in harmonizing billions of heterogeneous data points — collected at different resolutions, frequencies, and locations — into a single coherent representation of Earth's state. Experts describe the endeavor as one of the most complex intersections of artificial intelligence, high-performance computing, Earth observation, and computational science ever attempted.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

AI Agent Loses Up to $200K in Crypto After Morse Code Prompt Injection Attack

An attacker drained between $150,000 and $200,000 in cryptocurrency from a wallet controlled by xAI's Grok-connected trading bot Bankr by posting obfuscated instructions on X. The malicious content, disguised as Morse code strings and fragmented Python snippets, bypassed standard keyword filters because they do not decode encoded text before scanning. Grok's AI agent ingested the social media post as regular content but interpreted the decoded payload as a legitimate transfer command, which Bankr then executed without verifying the instruction's source. No traditional software exploit was involved; the attack succeeded solely because the agent lacked an architectural boundary separating untrusted external content from authorized operator commands. Security researchers classify this as OWASP's top agentic AI risk, ASI01 Agent Goal Hijack, highlighting a systemic vulnerability in AI agents that hold execution privileges over financial tools.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

OpenAI Codex Subagent Orchestration Becomes Reliable Enough for Real Workflows

A developer writing for DEV Community describes how AI subagent orchestration using OpenAI Codex has become dependable enough to build structured development workflows around, a shift they noticed in late 2025. Earlier attempts at multi-agent coordination were plagued by erratic parent-agent behavior, such as continuing unrelated work after delegating tasks or redundantly polling subagents, leading to duplicated effort and wasted context. The developer even filed an issue in the openai/codex repository to document one such failure. With recent improvements, the parent agent can now reliably delegate scoped tasks and wait for results, while the developer monitors subagents and redirects work as needed. The author emphasizes that reliable delegation shifts the focus to proper task decomposition, parallel versus sequential planning, and maintaining strong repository-level context so each new agent can onboard effectively.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Factorio Dev Blog Explores Tactile and Accessibility Features

The Factorio development team published a new Friday Facts Friday (FFF) blog entry, numbered 447, detailing upcoming features for the game. The post appears to focus on touch or tactile interaction capabilities being added to the popular factory-building game. Factorio, developed by Wube Software, is known for its deep automation and logistics gameplay. The blog post generated discussion on Hacker News, attracting points and community comments. No further details about the specific features are available from the provided source.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

ZCode's Open-Source Pivot Doesn't Fix Past Encrypted Workspace Uploads

AI coding tool ZCode, developed by Z.ai, uploaded user codebases to Alibaba Cloud servers without disclosure, encrypting the data with keys only Z.ai could access. The design ensured users had no ability to audit, verify, or delete their own exfiltrated code. Z.ai subsequently open-sourced ZCode and issued an apology, but critics note this does nothing to decrypt or account for workspaces already collected. The company also reportedly scrubbed its commit history, removing the paper trail that would have documented when and how these decisions were made. Security experts argue the incident exposes a broader industry gap, urging procurement teams to contractually require answers on data storage, encryption key ownership, and vendor incident response transparency before adopting any AI coding assistant.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Local Malware Exploited Hidden Config File to Hijack Meta AI Assistant Tokens

Security researcher Patrick Wardle discovered that local malware could silently alter an undocumented preference file in Meta's AI voice assistant to redirect its communication to an attacker-controlled server. This allowed the malware to inject trusted instructions and steal an authentication token linked to the user's account. Because the token was not scoped to a single device, attackers could gain persistent access to chat history, location data, and smart-home controls across every device tied to the same account. The core vulnerability was not an AI-specific flaw but a classic config-hijacking technique applied to a client holding unusually broad, cross-device credentials. Security experts warn that any locally writable configuration file influencing a trusted connection must be threat-modeled as rigorously as a public-facing API.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Three Markdown Files Can Give ChatGPT and Claude Lasting Project Context

Developers and content creators who rely on AI assistants like ChatGPT or Claude often waste time re-explaining their project details at the start of every new session. A practical workaround involves maintaining three small Markdown files — covering product context, voice and tone, and hard output rules — which can be pasted or attached at the beginning of any chat. Unlike built-in memory features, this file-based approach works across multiple AI tools and platforms, making it portable and easy to version-control via Git. Separate file sets can also be maintained for different projects, preventing context from one bleeding into another. The method prioritises precision, giving users full control over exactly what information the AI sees rather than relying on what it may have retained from past sessions.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Opinion: Current AI Already Functions as AGI for Most Users, Argues HN Post

A Hacker News user argues that artificial general intelligence has effectively arrived for over 90% of humanity, regardless of strict technical definitions. The post contends that today's AI systems, capable of vast knowledge retrieval, strong reasoning, and rapid text generation, already allow users to outperform average human productivity significantly. The author notes that even AI pioneer Geoffrey Hinton places true AGI roughly a year away, but suggests experts of his caliber may be among the last to feel its impact. The post urges policymakers and technologists to urgently address long-overdue safety and deployment frameworks rather than waiting for a more formally defined AGI milestone. It concludes that AI capabilities will continue advancing rapidly, and the technological landscape will be largely unrecognizable within five years.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

n8n on AWS EC2 Fails Due to Missing Docker Compose Plugin on Amazon Linux 2023

Developers self-hosting n8n on AWS EC2 using Amazon Linux 2023 encounter a common setup failure where Docker Compose commands break immediately after installation. The issue stems from Amazon Linux 2023's DNF package manager installing only the Docker engine, not the Compose v2 plugin, which must be downloaded and configured separately. Most existing n8n self-hosting tutorials overlook this gap because they were written and tested on Ubuntu, where the Compose plugin is bundled differently. The fix requires manually downloading the official Compose binary from Docker's GitHub releases and placing it in the correct CLI plugins directory. Users must also select the correct binary architecture — x86_64 for Intel instances or aarch64 for Graviton/ARM — to avoid silent exec-format errors.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Qodo, CodeRabbit, and Cubic Compared on AI Code Review Rule Enforcement

A developer analysis published on DEV Community on September 24 compares three AI-powered code review tools: Qodo, CodeRabbit, and Cubic. The comparison focuses specifically on whether these tools actively enforce coding rules or merely suggest improvements to developers. The article, authored by Anthony Max, is tagged under AI, web development, programming, and open source topics. The 10-minute read garnered 26 reactions and multiple comments from the developer community. The central question explored is which tool goes beyond passive suggestions to provide stricter, rule-based code enforcement.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why Developers Should Use Disposable Email Addresses for Testing Signup Flows

Developer Muhammad Huzaifa, founder of tools site Toolxz, argues that using personal email addresses to test signup flows creates inbox clutter, leaves data on third-party servers, and masks real delivery latency issues. He notes that Gmail's plus-addressing workaround also breaks down at scale when multiple fresh addresses are needed simultaneously or when forms reject the format. His recommended approach is to use disposable, browser-generated temp mail inboxes — treating them like scratch databases that can be created, used, and discarded after each test run. This method allows developers to accurately time OTP delivery, catch expiry-related bugs, and verify that resend logic correctly invalidates old codes. Huzaifa also cautions testers not to generate a new temp address mid-flow, as any pending OTP would then be undeliverable.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Builds Offline AI Agent on Android Phone Using Termux and Llama.cpp

A developer has successfully configured an old Android smartphone to run a fully autonomous AI agent stack without relying on any cloud services. The setup uses Termux, a Linux-like environment for Android, combining an offline Vosk speech-to-text model, a quantized Llama-2 language model via llama.cpp, and a JavaScript-based action executor. Key challenges included Android's low-memory killer terminating processes, which was resolved by switching to a smaller 3-billion-parameter model and tuning CPU and memory settings. A Bash watchdog script monitors and restarts crashed components while guarding against out-of-memory events. The project demonstrates that capable, private AI workflows can run entirely on consumer mobile hardware at zero cloud cost.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Why a Failing Test May Not Mean the Test Itself Is Wrong

A test can fail not because it is poorly written, but due to external factors such as stale test data, uncleared sessions, or unstable environments. Developers risk introducing errors by modifying a correctly written test when the real issue lies elsewhere. This challenge becomes more pronounced with AI-assisted testing tools, which may automatically alter a test to force a passing result without identifying the root cause. Platforms like X360 AI Tech address this by analyzing failure alongside execution context, including logs, screenshots, and prior results. The key question, experts suggest, should be what caused the failure rather than simply how to make the test pass.

0 comments Read more at DEV Community
← NewerPage 926 of 3182Older →