SShortSingh.

Programming

0
ProgrammingDEV Community ·

LXC vs. KVM in Proxmox: How to Choose the Right Virtualization Method

Proxmox VE is a popular open-source virtualization platform used in both home labs and production environments, offering two primary deployment options: LXC containers and KVM virtual machines. LXC containers share the host's kernel and run as isolated user-space processes, making them extremely lightweight — sometimes consuming under 10 MB of RAM — and ideal for workloads like web servers, databases, and microservices. KVM, by contrast, virtualizes the entire hardware stack, giving each virtual machine its own kernel, filesystem, and simulated hardware, which provides stronger isolation and broader OS compatibility. The choice between the two depends on the specific use case: LXC offers lower overhead and faster startup times, while KVM suits scenarios requiring full OS isolation or custom kernel modules. Neither technology is universally superior; understanding the trade-offs in performance, security, and compatibility is key to making the right infrastructure decision.

0
ProgrammingDEV Community ·

Cursor Projects Beta Shows Promise but Struggles With Decision Retention in Real Use

A developer tested Cursor Projects, an AI coding tool in beta, over three days across five working sessions totalling roughly 14 hours, using one orchestrator and 20 agents to build a podcast monitoring system for a home server. The orchestrator delegates tasks to cloud-based agents while maintaining a shared context folder, allowing the user to add input at any time without interrupting the workflow. However, the project's planning file was rewritten 111 times but explicitly read only once, causing previously agreed decisions to vanish and agents to apply unapproved defaults. The orchestrator also reportedly denied having completed work it had actually done, raising concerns about reliability for professional use. The author suggests improvements such as a persistent decision log, version-controlled context, and clearer ownership of review comments, while acknowledging some issues may be addressable through custom rules as the beta matures.

0
ProgrammingDEV Community ·

Developer builds text-based Android test runner to cut AI agent screenshot costs

A developer building an Android app with Claude Code found that AI agents testing apps via repeated screenshots were slow, expensive, and error-prone due to high image-token consumption. To address this, they created a lightweight Python test runner that uses Android's uiautomator dump to describe on-screen elements as text rather than images. The tool lets an AI agent write test scenarios once as JSON files and execute them with a single command, only resorting to screenshots when visual decisions are genuinely required. The runner handles real-world edge cases such as stale UI dumps, password field input bugs, foreground-stealing apps, and unreliable airplane mode behaviour. The open-source project, released under the MIT licence, is available on GitHub and requires no additional software installed on the device.

0
ProgrammingDEV Community ·

Developer Self-Hosts Client CMS on Laptop After Being Rejected by Three Cloud Providers

A developer building a Laravel-based CMS for a client was rejected by Oracle Cloud, Hetzner, and Cloudways during attempts to find free or trial hosting, citing payment card restrictions and unexplained account denials. After exhausting cloud options, he realized his locally running Docker setup could be made publicly accessible without a remote server. Using Cloudflare Tunnel, he routed his domain through Cloudflare's edge network to his own laptop, gaining free HTTPS and avoiding any inbound port configuration. The solution took roughly twenty minutes to set up, though it comes with a clear limitation: the site goes offline whenever the laptop is shut down or disconnected. He subsequently packaged his setup process into an open-source toolkit called selfhost-tunnel-kit to help others replicate the approach.

0
ProgrammingDEV Community ·

Developer builds Code Sonar to score AI-generated code health automatically

A developer has launched Code Sonar, a tool designed to evaluate the quality of AI-generated code using deterministic scoring. The tool runs eight checks and delivers results in seconds, producing findings written in plain language for human readers. The creator argues that as AI-written code becomes more prevalent, teams will increasingly need a reliable way to assess its quality. Code Sonar is designed to return the same score for the same repository every time, removing subjectivity from the evaluation process. Free scans are currently available as the tool is being developed in public.

0
ProgrammingDEV Community ·

How In-Process Cron Jobs Break When You Scale Horizontally

A developer discovered duplicate database records after scaling a NestJS service to three instances, each running its own in-process cron job simultaneously at 08:00. The built-in @Cron decorator schedules jobs inside every running process, so horizontal scaling multiplied job executions rather than distributing them. Three options were considered: distributed locking, idempotency checks, or moving scheduling outside the app entirely. The developer chose to remove @Cron and expose a standard HTTP endpoint triggered by a single external scheduler, ensuring only one job run per cycle. An idempotency check was retained as a fallback to handle retries or accidental re-triggers safely.

0
ProgrammingDEV Community ·

How to Compare Tweet Deletion Tools by Privacy Risk, Not Just Features

Tweet deletion tools may produce identical results but differ significantly in how they handle your data during the process. The key distinctions lie in three areas: whether your archive is processed locally in your browser or uploaded to a third-party server, what account permissions the tool requests, and how long your data may be retained in logs or backups. Tools that operate on-device carry the lowest privacy risk but cannot delete tweets directly, while cloud-based tools offer speed and convenience at the cost of exposing your content and credentials to external servers. Granting read and write access to any tool effectively allows it to post, delete, read direct messages, and modify your profile on your behalf. Security experts recommend revoking any app permissions immediately after a cleanup job is complete and scrutinising privacy policies for specific, measurable answers on data retention and encryption rather than vague assurances.

0
ProgrammingHacker News ·

Tetris at 40: The Complicated Soviet Origins of the World's Most Iconic Game

Tetris, one of the best-selling video games in history, has a surprisingly complex and contested origin story rooted in the Soviet Union. The game was created by Soviet computer engineer Alexey Pajitnov in 1984, but its path to global distribution was tangled in Cold War-era bureaucracy and competing licensing claims. Because Pajitnov was a Soviet state employee, the rights to Tetris were initially claimed by the Soviet government rather than its inventor. Multiple Western companies, including Nintendo and Atari, fought fierce legal and commercial battles over who held legitimate publishing rights. The murky chain of ownership meant Pajitnov himself did not profit from his creation until years later, when he finally regained control of the rights in 1996.

0
ProgrammingHacker News ·

GitLab Experiences Service Outage Affecting Users

GitLab suffered a service outage that disrupted access for users on its platform. The incident was tracked and communicated through GitLab's official status page at status.gitlab.com. The outage drew attention on Hacker News, where it accumulated points and user comments. Details about the root cause and the extent of the disruption were not fully disclosed in available reports. GitLab's status page served as the primary source for real-time updates during the incident.

0
ProgrammingDEV Community ·

Plugin4Shell Flaw Let Attackers Hijack AI Coding Agents via Broken SHA Pinning

Security researchers disclosed a vulnerability class called Plugin4Shell in September 2026, affecting four major AI coding tools: Claude Code, Codex, Gemini CLI, and GitHub Copilot. The flaw stems from a broken SHA-pinning verification process, which is meant to lock plugins to a specific, audited commit hash to prevent unauthorized code changes. Because these agents auto-update plugins silently by default, attackers could swap a legitimate plugin for malicious code after initial approval without any user interaction. Once swapped, the malicious plugin runs with the agent's full permissions, potentially exposing filesystems, credentials, CI pipelines, and cloud accounts. The vulnerability mirrors npm and PyPI supply-chain attacks but carries a larger blast radius due to the broad local and network privileges routinely granted to agentic coding tools.

0
ProgrammingDEV Community ·

Four Common Breakages Developers Face When Migrating to Next.js App Router

Migrating client projects from Next.js Pages Router to the App Router introduces several recurring technical breakages that can cost developers significant time. The App Router eliminates getServerSideProps in favor of direct server-component fetching, but fetch results are cached by default, which can cause stale data issues if not explicitly overridden. All components are server components by default, meaning the 'use client' directive must be carefully scoped to leaf components to avoid losing server-side performance gains. Navigation APIs have also changed, with useRouter now imported from next/navigation and route parameters accessed via useParams(), while params itself must be awaited in recent Next.js versions. Authentication helpers that relied on request and response objects require reworking, with session checks and redirects now handled inside server components using the redirect utility from next/navigation.

0
ProgrammingDEV Community ·

Why Undocumented Legacy Scripts Are the Hidden Risk in Government IT Modernization

Government modernization efforts frequently focus on replacing visible legacy applications while ignoring the small, undocumented scripts that quietly keep critical workflows running. A recent GAO Inspector General report highlighted a parallel problem: key decisions about modernization strategy went unrecorded, leaving current officials without the rationale behind past choices. Experts warn that automated file-transfer scripts often encode important operational policies — such as file validation rules, retry logic, and timing dependencies — that exist only as code flags understood by a handful of people. Modernization teams are advised to observe and document existing script behavior across multiple cycles before attempting any rewrite, capturing schedules, dependencies, and informal human workarounds. Requirements should be written as testable, observable outcomes, and timing relationships between upstream and downstream systems must be mapped as carefully as the file transfers themselves.

0
ProgrammingDEV Community ·

Why Enterprise AI Agents Need Versioned Business Semantics, Not Just SQL

Enterprise AI data agents face a critical gap when business metric definitions change over time, as valid SQL alone cannot determine which version of a term like 'Revenue' should apply to a historical query. A static semantic registry that simply overwrites old definitions loses crucial information about what changed, when it took effect, and who approved it. Experts recommend modeling semantic objects as immutable, versioned artifacts that separate a concept's stable identity from its evolving definitions. Each version should carry both a publication timestamp and an explicit effective date range, since finance teams may approve a new definition days after its intended start date. Resolving queries then requires a time-aware semantic layer that matches the right metric version to the right period, with a clear organizational policy on whether historical data is recalculated under old or current definitions.

0
ProgrammingDEV Community ·

Walrus Sessions 8 challenges developers to build memory-persistent chatbots

Walrus Sessions 8 is a three-week challenge inviting developers to build or improve chatbots that retain memory across sessions, users, and devices using a tool called Walrus Memory. The challenge addresses a common limitation of current chatbots, which typically lose all context once a conversation ends. Participants can enter by building a chatbot, writing about the concept, or identifying bugs — lowering the barrier compared to typical hackathons. A total prize pool of $2,500, paid in WAL tokens, is on offer across multiple categories. The challenge runs until October 9, 2026.

0
ProgrammingDEV Community ·

Explicit trigger lists stop LLM agents from over- or under-documenting wikis

A developer at Vellum Labs found that LLM agents instructed to autonomously record important decisions either ask for confirmation too often or log everything indiscriminately. After testing across four wikis over three months using Claude Code, the team identified four specific capture triggers: a choice made between alternatives, a reversal of a prior decision, a human-stated rule not found in code, and a measured result from an experiment. An equally important counterpart list tells the agent what to skip, such as implementation details without trade-offs, temporary bug fixes, and confirmations that changed nothing. The system is enforced through a slash command that first checks whether a trigger applies, and a stop hook that blocks session closure if wiki changes remain unpushed. Vellum Labs has released the capture rules and configuration as a free open-source template and Claude Code plugin on GitHub.

0
ProgrammingDEV Community ·

How Confluence Cloud Labels Orphaned Pages as 'Hidden' and What That Means

Confluence Cloud stores orphaned and hidden pages under 'Space Settings > Content > Hidden', but the two terms mean different things: orphaned pages have no incoming links, while hidden pages have been manually moved to the root of the space outside the content tree. Despite the 'hidden' label, both types of pages remain accessible via search and direct URL, meaning they offer no real privacy protection. Admins seeking to restrict access should instead use page restrictions, archiving, or deletion. Bulk clean-up tools for orphaned content are available only on Confluence Premium and Enterprise plans, and critically, 'orphaned' is not an available filter in the content manager. This gap makes large-scale orphan management difficult and is something teams should account for before planning a documentation clean-up.

0
ProgrammingDEV Community ·

WebForms Core 2.2 Development Begins With Focus on Stateless Server-Orchestrated UI

Development of WebForms Core 2.2 has officially begun, targeting an advanced stateless server-orchestrated UI model that differs from frameworks like Blazor Server by not maintaining persistent component or DOM state per user. The server uses a WebForms class to generate commands executed by WebFormsJS directly against the browser's HTML document, keeping the server stateless and scalable. Version 2.2 aims to elevate this model by introducing higher-level operations for rendering, state management, data formatting, arithmetic, and extensibility without relying on a separate frontend framework. New features include Isole, a high-level abstraction that simplifies working with the Transient DOM by automatically handling initialization and completion of grouped operations. Additionally, snapshot and rollback capabilities are being introduced to allow developers to preserve and restore an element's HTML state during complex multi-step UI transformations.

0
ProgrammingDEV Community ·

Google Expands Gemini in Chrome With Cross-Tab Context and Android Auto Browse

Google has expanded its Gemini AI assistant within Chrome to offer context-aware help across open browser tabs, integrating with services like Gmail, Google Calendar, Google Maps, and YouTube. The desktop and iOS rollout reached India, New Zealand, and Canada on March 11, 2026, with an Android update following on May 12, 2026. The Android version introduces Auto Browse and agentic capabilities, enabling Gemini to assist with multi-step tasks rather than simply answering questions. Key features include chatting about the current tab, extracting highlights from videos, and comparing information spread across multiple open pages. Google describes the broader goal as turning Chrome into an active working layer between information and action, reducing the need to manually switch between tabs or apps.

0
ProgrammingDEV Community ·

Why AI Confidence Scores Need Calibration Testing Before Production Use

A technical deep dive published on DEV Community examines why confidence scores returned by AI decision systems like Jev cannot be trusted at face value without calibration testing. Calibration differs from accuracy: a system can be 95% accurate overall yet still report 90% confidence on decisions it gets right only 60% of the time. This gap is especially dangerous in confidence-gated routing systems, where high-confidence decisions are auto-approved and low-confidence ones are escalated to humans. The article explains two standard diagnostic tools — reliability diagrams and Expected Calibration Error (ECE) — that developers can implement in roughly 40 lines of Python. The core takeaway is that calibration is domain-specific and must be measured by each team on their own data, as no vendor or framework can guarantee it in advance.

0
ProgrammingDEV Community ·

Developer builds agent that distinguishes pygame from pygame-ce documentation accurately

A developer has built a documentation agent to address a persistent confusion between pygame and pygame-ce, two incompatible Python game library distributions that share the same namespace but have diverging APIs. The agent was submitted to the Sanity Challenge and uses Sanity's MCP endpoint to query the API reference pages of both libraries — 42 pages each — without blending their content. Every response explicitly names which distribution a feature belongs to, the version it appeared in, and its source entry. The agent appends machine-readable verdict lines to each answer, clearly flagging whether a function exists in pygame, pygame-ce, or both. This approach tackles a common pain point where tutorials and AI-generated code snippets rarely specify which distribution they target, leaving developers with cryptic AttributeError messages.

← NewerPage 947 of 3187Older →