SShortSingh.

Programming

0
ProgrammingDEV Community ·

DNS CNAME Conflict Can Break Hostnames During Logistics System Migrations

A logistics platform's tracking hostname went down following a registrar-API migration after a CNAME record was added that conflicted with existing DNS records at the same owner name. Per RFC 1034 and RFC 2181, a CNAME cannot coexist with other record types at the same node, making the zone data invalid. Engineers are advised to first freeze the rollout, restore the last known-good zone, and query all authoritative servers directly to compare record types, TTLs, and serial numbers. Registrar-specific APIs can introduce blind spots by accepting invalid writes without validation, so migration tools should render and validate the full intended zone state before executing any provider operations. A single precise pre-cutover alert flagging the conflict is far more effective than multiple ambiguous endpoint alarms raised after customer-visible impact has already occurred.

0
ProgrammingDEV Community ·

132,158 Magento Stores Found Exposed During StyleSmuggler Vulnerability Window

A ZoomEye scan conducted on 19 September 2026 identified 132,158 publicly observable Adobe Commerce and Magento Open Source deployments, providing a population estimate for stores potentially exposed to CVE-2026-75650, known as StyleSmuggler. The vulnerability was actively exploited from 4 September 2026, three days before Adobe released hotfix VULN-39341 on 7 September. The United States hosts the largest share at 46.6% of the top-10 country breakdown, with Germany and the United Kingdom following, consistent with where security firm Sansec observed exploitation activity. Notably, over 4,200 services were detected on cPanel-associated ports, indicating shared-hosting deployments that typically patch slowest and lack in-house incident-response capability — the segment the StyleSmuggler Rust backdoor specifically targets. Researchers caution that the figure represents an observable denominator for risk assessment, not a confirmed victim count, as it excludes stores behind CDNs and does not confirm which deployments ran a vulnerable version during the exposure window.

0
ProgrammingDEV Community ·

n8n and NVIDIA to Show Controlled AI Agent Workflows at GTC Berlin 2026

n8n and NVIDIA will co-present a hands-on lab at NVIDIA GTC Berlin 2026, scheduled for October 20–22, demonstrating how to govern AI agent actions without granting unrestricted system access. The session, titled 'Your Agent Doesn't Get Root,' places an AI agent inside a locked-down NemoClaw and OpenShell sandbox where it cannot directly call external APIs or networks. Instead, the agent submits action requests through n8n workflows, which are exposed as defined tools rather than broad credentials. A human operator must review and approve each request before it is executed, generating an auditable record of who approved the action and where it originated. The lab aims to offer businesses a practical framework for deploying agentic AI with policy-controlled access and accountability built into the workflow.

0
ProgrammingDEV Community ·

Anthropic and OpenAI Launch Rival AI Models on Same Day in Pricing Battle

On 22 September 2026, Anthropic and OpenAI released new AI models within an hour of each other, signalling an intensifying competition on both performance and price. Anthropic launched Claude Opus 5.5, its new flagship model, priced 20% lower than its predecessor at $4 per million input tokens and $20 per million output tokens. OpenAI responded with GPT-6 Sol and GPT-6 Luna, two budget-tier models positioned below its top GPT-6 Astra offering. Anthropic claims Opus 5.5 matches its higher-end Fable 5.1 model on most tasks while costing 40% less to run, with early testers at GitHub and Deloitte reporting efficiency gains in coding workflows. The simultaneous launches mark a notable shift in the enterprise AI market, where cost-per-task is increasingly becoming as important a competitive factor as raw model capability.

0
ProgrammingDEV Community ·

Developer Builds and Publishes Vue 3 Starter Kit CLI Tool on npm

A developer has built and published a CLI tool called create-vue-starter-with-test, which scaffolds a fully configured Vue 3 project in seconds using a single npx command. The tool bundles Vue 3, Vite, Vitest, Vue Router, Pinia, MSW, Sass, ESLint, and Prettier, all pre-configured and ready to use out of the box. The project was bootstrapped using the official create-vue scaffolding tool, with MSW and Sass added manually on top. MSW is set up for the Node environment so that unit tests never hit real network endpoints, making them fast and deterministic. The author documented the entire build process step by step, walking through each pull request from initial setup to feature implementation.

0
ProgrammingDEV Community ·

Study: 84% of AI-authored Pull Requests Lack Meaningful Human Review

A peer-reviewed study presented at EASE 2026 analyzed over 33,500 AI-generated pull requests on GitHub and found that 84% showed no meaningful human review activity when bot interactions were included. Researchers also found that only 65.5% of human comments on AI pull requests contained genuine review content, with roughly a quarter being instructions directing the agent rather than evaluating the code. Industry data from 8.1 million pull requests across 4,800 organizations showed that while developers felt 20% faster, actual delivery performance slowed by 19%, and review time surged 91%. The core issue identified is not which branching model teams use, but a widening gap where generating code has become cheap while verifying it has not. Experts argue the priority should be strengthening review gates and oversight practices, not redesigning Git workflows to accommodate AI agents.

0
ProgrammingDEV Community ·

Two AI Agents Built a Slovenian Folk-Hero Browser Game in Four Days

A developer used Claude Code and OpenAI's Codex over four days to build a playable browser demo of a point-and-click adventure based on Martin Krpan, a Slovenian folk hero known for smuggling salt. The project produced 108 commits, 92 tests, and 111 voiced lines of dialogue, running on the Godot 4.7.2 engine. The two AI agents divided responsibilities — Claude handled game code and orchestration while Codex generated artwork and independent code reviews — with the developer approving key design decisions throughout. A persistent challenge was rendering the 300-pixel protagonist correctly, as the character's arms and head repeatedly appeared misaligned in the animated rig. The released Act I demo is described as a rough but functional first chapter, with four additional acts planned once this segment is polished.

0
ProgrammingDEV Community ·

How to Query Stellar Horizon API Using Python and JavaScript

Developer André Dias Moreira Prol has published a practical guide on querying the Stellar blockchain network using the Horizon REST API in both Python and JavaScript. The article explains how to retrieve account balances, transaction histories, and asset data through clean HTTP endpoints without requiring deep blockchain protocol knowledge. Prol highlights the Horizon API's streaming capability via Server-Sent Events, which enables real-time transaction monitoring without constant polling, reducing infrastructure costs. The guide also covers querying tokenized assets like USDC, including how to retrieve the number of wallets holding a given asset's trustlines. Code samples using the official stellar-sdk library are provided for both languages and are ready to run against the live Stellar network.

0
ProgrammingDEV Community ·

Why .NET and MAUI Developers Need to Think Beyond Code to System Design

System design is not just for architects — every .NET and .NET MAUI developer makes architectural decisions, whether they recognize it or not. The article outlines a progression from basic client-server and REST API understanding to advanced concerns like scalability, fault tolerance, and cloud architecture. Mobile applications add unique challenges such as offline support, data sync conflicts, and background processing restrictions that require deliberate design strategies. Techniques like circuit breakers, retries, idempotency, and message queues are highlighted as essential tools for building resilient production systems. The piece argues that thoughtful, incremental system design — rather than jumping to microservices — leads to more maintainable and reliable applications as they grow.

0
ProgrammingDEV Community ·

Why Wrapping AI Agents in Probabilistic Controls Still Leaves Regulated Systems Exposed

A technical analysis published on DEV Community argues that the most dangerous flaw in regulated AI agent systems is not the absence of safety controls, but the use of probabilistic mechanisms disguised as deterministic ones. The critique centers on Microsoft's Agent Governance Toolkit, which uses an LLM-based semantic intent classifier as a safety gate — a design that, as reviewer Venkat Peri notes, remains vulnerable to the same adversarial inputs it is meant to block. The toolkit also assigns agents a behavioral trust score between 0 and 1000 to govern their permissions, but since that score is derived from the agent's own outputs, it can be manipulated right up to the moment a harmful action is taken. A third concern involves delegating human-escalation decisions to the model's own confidence scores, meaning the system that requires oversight is simultaneously deciding whether oversight occurs. The article concludes that fighting probabilistic risk with probabilistic controls does not resolve the underlying liability, particularly in high-stakes domains such as payments, insurance, and wealth management.

0
ProgrammingDEV Community ·

How to Query Stellar's Horizon API Using Python and JavaScript

Developer André Dias Moreira Prol has shared a practical guide on querying the Stellar blockchain's Horizon REST API using Python and JavaScript, drawing on his experience with tokenization and digital forensics projects. Horizon exposes account, transaction, asset, and operation data in JSON format, with built-in HAL-standard pagination that simplifies large-scale data retrieval. In Python, the requests library or the official stellar-sdk can be used to fetch balances and asset records, while JavaScript developers can leverage fetch and Server-Sent Events for real-time payment streaming. Prol notes that SSE-based streaming eliminated the need for constant polling in a digital wallet project, cutting infrastructure costs by around 30%. He emphasizes that Horizon handles read operations only, and transaction submission still requires local signing via an SDK before posting to the /transactions endpoint.

0
ProgrammingDEV Community ·

Developer Builds Real-Time Public Transport Map Covering All of Netherlands

A developer has launched OVspot, a real-time public transport map that displays trains, buses, trams, and ferries across the Netherlands in a single interface. Unlike journey-planning apps, OVspot focuses on visualising what is actively happening across the entire Dutch transport network. A key technical challenge was that not all operators provide GPS data, so the platform uses GTFS timetable data to mathematically interpolate estimated vehicle positions, including for ferry services to the Wadden Islands. OVspot clearly distinguishes between live GPS positions, estimated positions, and timetable-based positions to avoid implying false certainty to users. The project also required significant performance optimisation to smoothly render hundreds of moving vehicles with real-time updates on a single map.

0
ProgrammingDEV Community ·

GitHub Copilot's Usage-Based Billing Leaves Developers With Hundreds in Surprise Charges

A GitHub Community discussion sparked by user @lhfei, who received a $548.99 bill for August 2026, has highlighted serious financial risks tied to GitHub Copilot's usage-based billing model. The user was on Copilot Pro Plus and later Copilot Max during the billing period, and while a spending budget feature exists, it is not enabled by default and can be silently deleted, leaving accounts exposed to uncapped charges. Copilot's agentic mode compounds the problem by consuming 10 to 20 times more tokens than standard autocomplete, driving up costs far beyond what many users anticipate. The issue extends beyond individual developers, with community members reporting monthly bills ranging from $750 to $3,000, and one 80-person company finding its Copilot spend equivalent to a full-time engineer's annual salary. Critics argue that inadequate communication around billing defaults and the absence of higher-tier individual plans leave power users with no affordable path forward.

0
ProgrammingDEV Community ·

GitHub Actions Scheduled Workflows Silently Skip Triggers, Community Flags Reliability Gap

A GitHub Community discussion (thread #207247) raised concerns after a user's hourly scheduled workflow stopped triggering entirely, with no run records created despite the cron job being correctly configured. Manual workflow_dispatch runs completed without issue, confirming the problem lay with GitHub's scheduler itself rather than the workflow logic. GitHub's own documentation acknowledges that scheduled events are handled on a 'best-effort' basis and can be delayed or dropped under high load, especially near the top of the hour. However, five or more consecutive missed hourly triggers go beyond typical delays, pointing to a deeper scheduler-level failure. The community recommended diagnostic steps including using the GitHub CLI to inspect workflow state, reviewing recent scheduled runs, and toggling the workflow off and on to force re-registration with GitHub's scheduler.

0
ProgrammingDEV Community ·

European Startups Tackle AI Data Center Energy Use With Cooling and Heat Reuse

Europe's rapid AI data center expansion is driving significant increases in power consumption, prompting startups to develop practical energy efficiency solutions. Companies like EkkoSense are deploying cooling optimization technology, reporting around 15% energy savings at Virgin Media O2 sites, while Telefónica Germany is using AI-powered digital twins to fine-tune facility cooling. GridBeyond has installed battery energy storage systems at Keppel DC REIT data centers in Ireland, helping sites manage electricity demand and reduce carbon intensity. Meanwhile, Deep Green is repurposing waste heat from computing equipment to supply swimming pools and district heating networks. These approaches across cooling, energy management, and heat reuse reflect a broader shift in treating data center energy as an optimizable resource rather than a fixed operating cost.

0
ProgrammingDEV Community ·

How to Restore Original Dates and GPS Data to Exported Snapchat Memories

When users export their Snapchat Memories via the My Data tool at accounts.snapchat.com, the downloaded photos and videos lose their original capture dates and location data. This happens because Snapchat stores timestamps in a sidecar JSON file rather than embedding them in the EXIF fields that apps like Google Photos and Apple Photos actually read. The correct capture time, formatted as a UTC timestamp, is present in the export's memories_history.json file but must be manually written into each media file's metadata. For JPEGs, the relevant fields are DateTimeOriginal and CreateDate, while MP4 files require updating QuickTime atoms such as mvhd and mdhd. Users can fix this mismatch using a free command-line tool called ExifTool, which reads the JSON timestamps and writes them directly into the correct metadata fields of each photo or video.

0
ProgrammingDEV Community ·

Eight edge cases developers hit when auto-saving Chrome extension data to Downloads

Developers building TabBunker, an open-source tab manager for Chrome, Edge, and Firefox, documented eight technical pitfalls encountered while implementing automatic JSON backups to the user's Downloads folder under Manifest V3. The project was motivated by Chrome's built-in behavior of wiping extension local storage upon uninstall, which can erase all saved data without warning. A key compatibility issue arose because Chrome MV3 service workers lack URL.createObjectURL, forcing the team to use data: URLs there, while Firefox rejected data: URLs and required Blob URLs instead. The team also found that using conflictAction: 'overwrite' correctly replaces files on disk but still appends entries to the browser's download history, requiring explicit history cleanup via the downloads.erase API. Tests on Chrome for Testing 153 and Firefox 155 in September 2026 confirmed that even 64 MB JSON files transferred successfully, eliminating concerns about data-size limits on the data: URL path.

0
ProgrammingHacker News ·

Developer launches offline Android health dashboard aggregating Health Connect data

A developer has released Hamilton, a paid Android app that consolidates fitness and health data from multiple sources into a single dashboard using Google's Health Connect platform. The app addresses a common problem where data from different fitness devices and apps remains fragmented or double-counted across separate applications. Hamilton displays over 30 health metrics, allows users to overlay and compare data on charts, and lets them choose preferred data sources to prevent duplication. The app has no internet permission, meaning it cannot transmit or delete user data, and requires a one-time payment of approximately £3.59 with no subscription fees. It is available on the Google Play Store and was named after the developer's dog.

0
ProgrammingHacker News ·

Opinion: The Crab Chair Wheelchair Design Nobody Wanted

A commentary piece published on New Mobility questions the development of an unconventional wheelchair concept dubbed the 'Crab Chair.' The article appears to critique the design from the perspective of the disability and mobility aid community. The piece raises concerns about whether such innovations genuinely address the needs of wheelchair users or are driven by outside interests. It garnered modest engagement on Hacker News, accumulating 7 points and 5 comments. The title suggests a disconnect between designer intent and actual user demand within the adaptive mobility space.

0
ProgrammingDEV Community ·

Splitting vision AI into two calls improves screen assistant accuracy and reliability

Developer of Handrail, an open-source screen assistant, found that asking a vision model to simultaneously answer a question and identify UI coordinates in a single API call degraded performance on both tasks. The app now makes two separate calls against the same screenshot: one for reasoning and answering, and another focused solely on locating the relevant on-screen control. Coordinates are returned on a normalised 0–1000 grid rather than raw pixels, eliminating resolution and multi-monitor arithmetic across different hardware setups. The two passes also use different image formats — a compressed JPEG for reading and a full-resolution PNG for precise localisation of small UI elements. Handrail runs locally with no account or server, stores data as plain JSON, and is available as an Apache-2.0 open-source project for Windows and macOS.

← NewerPage 928 of 3182Older →