0
ProgrammingHacker News ·
Does Georgism work? Five years later
Article URL: https://www.astralcodexten.com/p/does-georgism-work-five-years-later Comments URL: https://news.ycombinator.com/item?id=49844657 Points: 98 # Comments: 55
Programming
0
ProgrammingHacker News ·
Analyst Applies CIA Intelligence Methods to College Football Team Analysis
A writer at Cultivate Labs explored what happens when structured analytic techniques used by the CIA are applied to college football. The experiment involved using intelligence community frameworks to assess team performance and outcomes. The piece was shared on Hacker News, where it attracted modest engagement with a small number of points and comments. The approach highlights how analytical methodologies from national security contexts can be adapted for unconventional use cases like sports forecasting.
0
ProgrammingHacker News ·
Developer Launches Hacker Atlas to Visualize Hacker News Topic Trends
A developer has released Hacker Atlas, a tool designed to map and explore the topics discussed on Hacker News over time. The project currently covers data from 2024 to the present, offering users a visual way to track how conversations on the platform shift. The tool was shared on Hacker News itself as a community project seeking feedback. The creator is actively asking users whether the tool is useful and what features or data may be missing.
0
ProgrammingDEV Community ·
Passing Tests Don't Guarantee Correct Code, Developers Warned
A green test suite only confirms that an implementation satisfies the tests written for it, not that the underlying logic is truly correct. Developers are cautioned that a small code change could still pass all tests while introducing faulty behaviour. The concern centres on tests that are too closely tailored to a specific implementation, leaving gaps in coverage. This highlights a broader software quality issue where test suites can produce false confidence if they lack robustness against behavioural variations.
0
ProgrammingDEV Community ·
How to Enable Broadcom BCM58200 Fingerprint Reader on Debian 13 with TOD Driver
Dell Latitude and Precision laptops equipped with the Broadcom BCM58200 ControlVault 3 fingerprint reader (USB ID 0a5c:5843) do not work out of the box on Linux, as the chip lacks support in the open-source libfprint library. The only functional solution relies on a proprietary driver blob distributed by Canonical for Ubuntu OEM images, loaded via a libfprint extension called TOD (Touch OEM Drivers), which Debian does not ship by default. A developer documented the full workaround on a Dell Latitude 5431 running Debian 13 (Trixie), which involves building a TOD-enabled version of libfprint matched exactly to the system's installed package version and replacing the system library. A known firmware quirk causes the driver to fail once on first launch after flashing new firmware into the ControlVault, but restarting the fprintd service resolves the issue. The guide notes the procedure should work across multiple Dell Latitude 5xxx/7xxx and Precision 3xxx/5xxx/7xxx models on any Debian release, provided the libfprint version is correctly matched.
0
ProgrammingDEV Community ·
How Bilingual Transcript Tools Can Better Pair Source Text With Translations
Speech translation interfaces face a core design challenge: users are often still listening when translated text begins to appear, making trust and accuracy difficult to maintain. Platforms like Translate Now address this by displaying source and translated lines side by side — for example, keeping English text immediately above its Chinese equivalent — so readers can verify wording without switching views. Each transcript segment is treated as a structured unit containing an original line, a translation, a timestamp, and a speaker label, which reshapes how search and navigation should work. Rather than simply highlighting a keyword match, search results should surface surrounding context and link directly to the corresponding audio moment to prevent misinterpretation. Speaker attribution and live revision handling remain areas where hands-on testing is needed, as public demos illustrate the workflow but do not fully demonstrate real-world accuracy or latency.
0
ProgrammingDEV Community ·
Automated Accessibility Tools Have Limits — Here's What Developers Must Test Manually
Automated accessibility scanners can quickly flag missing labels, contrast issues, and ARIA errors, but they cannot verify every aspect of a website's accessibility, according to W3C guidance. Developers often mistakenly equate a clean automated scan with a fully accessible interface, which can leave real usability gaps unaddressed. Tools can confirm that attributes like alt text or form labels technically exist, but cannot judge whether their content is meaningful or contextually appropriate. Custom interactive controls, error messaging workflows, and ambiguous button labels all require human review to ensure they work correctly for assistive technology users. The practical guidance for developers is to automate deterministic checks while reserving manual testing for behavior, context, and real user interaction scenarios.
0
ProgrammingDEV Community ·
Mautic Docs Maintainer Builds Custom PR Tracker to Manage 90+ Open Reviews
The sole maintainer of Mautic's documentation built a custom tracking system after the AI tool Promptless generated over 90 open pull requests simultaneously, each requiring distinct actions such as reviews, reminders, escalations, or branch fixes. Mautic supports seven active version branches spanning versions 5 through 8, meaning a single documentation change often needs to be copied across multiple branches through a process called backporting. With up to three different contributors potentially responsible for the same PR, and branch targeting dependent on details from the linked code PR rather than the docs PR itself, manual tracking became unmanageable. The workflow involves several sequential steps — from Promptless drafting a PR while code is still in review, to author sign-off, style guide checks by the Education Team, and final merge — each with its own follow-up and escalation timelines. The tracker was developed to prevent updates from being missed across branches and to keep every PR moving through the pipeline without relying on memory alone.
0
ProgrammingDEV Community ·
Raku Knowledge Base adds MCP server, letting AI agents cite verifiable sources
The Raku Knowledge Base, an independent aggregator of Raku language docs, module documentation, and code examples, added an MCP server on 22 September 2026, enabling AI agents to query the base directly rather than rely on memory. The platform, built with Podlite and running since January 2023, provides a single URL scheme and search index across sources maintained by different contributors. A key design goal is verifiability: the server returns not just an answer but the specific page, section, and passage the agent drew from, so each can be independently checked. The underlying index covers a tree of over 60,000 files, of which roughly 20,000 are in a page-renderable format, with the rest being test files, build assets, and metadata. Starting this month, each data release also includes an ecosystem report tracking module changes and version movements.
0
ProgrammingDEV Community ·
Why AI Agents Need Both Episodic and Semantic Memory to Avoid Costly Mistakes
AI agents used in scheduled automations can fail in two distinct ways: by knowing the rules but forgetting past events, or by recalling every incident without ever extracting useful lessons from them. This distinction maps to cognitive science concepts formalized by Tulving in 1972 and later applied to AI agents in the 2023 CoALA framework, which separates episodic memory (timestamped event logs) from semantic memory (general facts and rules). A practical example is an agent that correctly applies a refund policy but re-issues a refund already processed in a prior run, simply because it has no record of that earlier action. Most DIY agent setups rely on only one memory type — either a vector database of facts or a chat-history log — leaving them vulnerable to the failure mode of whichever type is missing. Effective scheduled automation requires both memory systems working together, along with procedural memory for learned routines, to ensure agents can reason accurately across runs.
0
ProgrammingDEV Community ·
DNS CNAME Conflict Can Break Hostnames During Logistics System Migrations
A logistics platform's tracking hostname went down following a registrar-API migration after a CNAME record was added that conflicted with existing DNS records at the same owner name. Per RFC 1034 and RFC 2181, a CNAME cannot coexist with other record types at the same node, making the zone data invalid. Engineers are advised to first freeze the rollout, restore the last known-good zone, and query all authoritative servers directly to compare record types, TTLs, and serial numbers. Registrar-specific APIs can introduce blind spots by accepting invalid writes without validation, so migration tools should render and validate the full intended zone state before executing any provider operations. A single precise pre-cutover alert flagging the conflict is far more effective than multiple ambiguous endpoint alarms raised after customer-visible impact has already occurred.
0
ProgrammingDEV Community ·
132,158 Magento Stores Found Exposed During StyleSmuggler Vulnerability Window
A ZoomEye scan conducted on 19 September 2026 identified 132,158 publicly observable Adobe Commerce and Magento Open Source deployments, providing a population estimate for stores potentially exposed to CVE-2026-75650, known as StyleSmuggler. The vulnerability was actively exploited from 4 September 2026, three days before Adobe released hotfix VULN-39341 on 7 September. The United States hosts the largest share at 46.6% of the top-10 country breakdown, with Germany and the United Kingdom following, consistent with where security firm Sansec observed exploitation activity. Notably, over 4,200 services were detected on cPanel-associated ports, indicating shared-hosting deployments that typically patch slowest and lack in-house incident-response capability — the segment the StyleSmuggler Rust backdoor specifically targets. Researchers caution that the figure represents an observable denominator for risk assessment, not a confirmed victim count, as it excludes stores behind CDNs and does not confirm which deployments ran a vulnerable version during the exposure window.
0
ProgrammingDEV Community ·
n8n and NVIDIA to Show Controlled AI Agent Workflows at GTC Berlin 2026
n8n and NVIDIA will co-present a hands-on lab at NVIDIA GTC Berlin 2026, scheduled for October 20–22, demonstrating how to govern AI agent actions without granting unrestricted system access. The session, titled 'Your Agent Doesn't Get Root,' places an AI agent inside a locked-down NemoClaw and OpenShell sandbox where it cannot directly call external APIs or networks. Instead, the agent submits action requests through n8n workflows, which are exposed as defined tools rather than broad credentials. A human operator must review and approve each request before it is executed, generating an auditable record of who approved the action and where it originated. The lab aims to offer businesses a practical framework for deploying agentic AI with policy-controlled access and accountability built into the workflow.
0
ProgrammingDEV Community ·
Anthropic and OpenAI Launch Rival AI Models on Same Day in Pricing Battle
On 22 September 2026, Anthropic and OpenAI released new AI models within an hour of each other, signalling an intensifying competition on both performance and price. Anthropic launched Claude Opus 5.5, its new flagship model, priced 20% lower than its predecessor at $4 per million input tokens and $20 per million output tokens. OpenAI responded with GPT-6 Sol and GPT-6 Luna, two budget-tier models positioned below its top GPT-6 Astra offering. Anthropic claims Opus 5.5 matches its higher-end Fable 5.1 model on most tasks while costing 40% less to run, with early testers at GitHub and Deloitte reporting efficiency gains in coding workflows. The simultaneous launches mark a notable shift in the enterprise AI market, where cost-per-task is increasingly becoming as important a competitive factor as raw model capability.
0
ProgrammingDEV Community ·
Developer Builds and Publishes Vue 3 Starter Kit CLI Tool on npm
A developer has built and published a CLI tool called create-vue-starter-with-test, which scaffolds a fully configured Vue 3 project in seconds using a single npx command. The tool bundles Vue 3, Vite, Vitest, Vue Router, Pinia, MSW, Sass, ESLint, and Prettier, all pre-configured and ready to use out of the box. The project was bootstrapped using the official create-vue scaffolding tool, with MSW and Sass added manually on top. MSW is set up for the Node environment so that unit tests never hit real network endpoints, making them fast and deterministic. The author documented the entire build process step by step, walking through each pull request from initial setup to feature implementation.
0
ProgrammingDEV Community ·
Study: 84% of AI-authored Pull Requests Lack Meaningful Human Review
A peer-reviewed study presented at EASE 2026 analyzed over 33,500 AI-generated pull requests on GitHub and found that 84% showed no meaningful human review activity when bot interactions were included. Researchers also found that only 65.5% of human comments on AI pull requests contained genuine review content, with roughly a quarter being instructions directing the agent rather than evaluating the code. Industry data from 8.1 million pull requests across 4,800 organizations showed that while developers felt 20% faster, actual delivery performance slowed by 19%, and review time surged 91%. The core issue identified is not which branching model teams use, but a widening gap where generating code has become cheap while verifying it has not. Experts argue the priority should be strengthening review gates and oversight practices, not redesigning Git workflows to accommodate AI agents.
0
ProgrammingDEV Community ·
Two AI Agents Built a Slovenian Folk-Hero Browser Game in Four Days
A developer used Claude Code and OpenAI's Codex over four days to build a playable browser demo of a point-and-click adventure based on Martin Krpan, a Slovenian folk hero known for smuggling salt. The project produced 108 commits, 92 tests, and 111 voiced lines of dialogue, running on the Godot 4.7.2 engine. The two AI agents divided responsibilities — Claude handled game code and orchestration while Codex generated artwork and independent code reviews — with the developer approving key design decisions throughout. A persistent challenge was rendering the 300-pixel protagonist correctly, as the character's arms and head repeatedly appeared misaligned in the animated rig. The released Act I demo is described as a rough but functional first chapter, with four additional acts planned once this segment is polished.
0
ProgrammingDEV Community ·
How to Query Stellar Horizon API Using Python and JavaScript
Developer André Dias Moreira Prol has published a practical guide on querying the Stellar blockchain network using the Horizon REST API in both Python and JavaScript. The article explains how to retrieve account balances, transaction histories, and asset data through clean HTTP endpoints without requiring deep blockchain protocol knowledge. Prol highlights the Horizon API's streaming capability via Server-Sent Events, which enables real-time transaction monitoring without constant polling, reducing infrastructure costs. The guide also covers querying tokenized assets like USDC, including how to retrieve the number of wallets holding a given asset's trustlines. Code samples using the official stellar-sdk library are provided for both languages and are ready to run against the live Stellar network.
0
ProgrammingDEV Community ·
Why .NET and MAUI Developers Need to Think Beyond Code to System Design
System design is not just for architects — every .NET and .NET MAUI developer makes architectural decisions, whether they recognize it or not. The article outlines a progression from basic client-server and REST API understanding to advanced concerns like scalability, fault tolerance, and cloud architecture. Mobile applications add unique challenges such as offline support, data sync conflicts, and background processing restrictions that require deliberate design strategies. Techniques like circuit breakers, retries, idempotency, and message queues are highlighted as essential tools for building resilient production systems. The piece argues that thoughtful, incremental system design — rather than jumping to microservices — leads to more maintainable and reliable applications as they grow.
0
ProgrammingDEV Community ·
Why Wrapping AI Agents in Probabilistic Controls Still Leaves Regulated Systems Exposed
A technical analysis published on DEV Community argues that the most dangerous flaw in regulated AI agent systems is not the absence of safety controls, but the use of probabilistic mechanisms disguised as deterministic ones. The critique centers on Microsoft's Agent Governance Toolkit, which uses an LLM-based semantic intent classifier as a safety gate — a design that, as reviewer Venkat Peri notes, remains vulnerable to the same adversarial inputs it is meant to block. The toolkit also assigns agents a behavioral trust score between 0 and 1000 to govern their permissions, but since that score is derived from the agent's own outputs, it can be manipulated right up to the moment a harmful action is taken. A third concern involves delegating human-escalation decisions to the model's own confidence scores, meaning the system that requires oversight is simultaneously deciding whether oversight occurs. The article concludes that fighting probabilistic risk with probabilistic controls does not resolve the underlying liability, particularly in high-stakes domains such as payments, insurance, and wealth management.