SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World

Programming

LatestTopDiscussed
0
ProgrammingDEV Community ·

Researchers Used Claude AI to Hack OpenAI Accounts via Forum Image Bug

Three security researchers at Hacktron spent 72 hours in late July exploiting a chain of vulnerabilities to access internal OpenAI employee accounts on ChatGPT and Codex. The attack began with a memory corruption flaw in libheif, a library used by OpenAI's public Discourse forum to process uploaded images, tracked as CVE-2026-32882 and rated 8.8 out of 10 in severity. The researchers used Anthropic's Claude AI models to iteratively write a working exploit, converting the memory flaw into remote code execution on the forum server. Because the forum supported single sign-on with OpenAI credentials, the compromised server could hijack employee sessions, potentially exposing connected tools like GitHub and Slack. The team responsibly disclosed the findings — merging only a harmless pull request as proof — and received a $6,500 bounty; OpenAI patched its identity configuration within 14 hours while Discourse followed with a sandboxing update.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Federal Judge Orders Texas to Air Condition All Prisons by End of 2029

A federal judge has ordered the state of Texas to install air conditioning across all its prisons by the end of 2029. The ruling comes as a result of a lawsuit challenging the lack of climate control in Texas correctional facilities. Texas prisons have long faced scrutiny over dangerously high temperatures that have been linked to inmate deaths. The order sets a firm deadline for the state to comply, marking a significant legal development in the ongoing effort to improve prison conditions in Texas.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

Testcontainers Lets Developers Run Real Databases in CI, Replacing Unreliable Mocks

Backend developers have long relied on in-memory databases like H2 or SQLite as stand-ins during testing, but this approach often masks real bugs tied to SQL dialect differences, locking behavior, and database-specific extensions. Testcontainers is an open-source library that solves this by spinning up actual Docker containers — such as PostgreSQL, Redis, or Kafka — directly from test code, then discarding them after the test run. Available across major languages including Java, Python, Go, TypeScript, and .NET, it enables true integration testing without shared staging environments or persistent state. Because the container image version is pinned in the test code itself, local developer machines and CI pipelines like GitHub Actions run against identical database environments. This eliminates an entire class of bugs that previously slipped past CI undetected.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer Switches to European Digital Tools One Service at a Time

A developer has been gradually replacing American digital services with European alternatives, adopting tools such as Proton Mail, Proton VPN, Qwant, DeepL, and SwissTransfer. Rather than a single mass migration, the transition is being made incrementally, evaluating each service on jurisdiction, data location, business model, and product quality. The shift to Proton consolidated email, VPN, and password management into one Swiss ecosystem, though the author acknowledges this increases dependence on a single provider. Some switches, like moving to SwissTransfer, were driven by practical advantages — such as support for transfers up to 50 GB stored in Switzerland — rather than national origin alone. The process revealed that the Europe-versus-USA framing oversimplifies reality, as services like NordVPN are neither American nor straightforwardly European.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

LinkedIn secures court order to halt unauthorized mass scraping of user data

LinkedIn has obtained a court order blocking the mass scraping of user data from its platform. The ruling represents a legal win for the Microsoft-owned professional networking site in its ongoing efforts to protect user information. Mass scraping involves automated tools extracting large volumes of data without permission, raising privacy and terms-of-service concerns. The court order signals growing judicial willingness to support platforms seeking to curb unauthorized data harvesting. This development could set a precedent for how similar data-scraping disputes are handled in the future.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

ForgeCore Labs Releases Synthetic Dataset for Transparent Object Detection

ForgeCore Labs has published a synthetic data pack on GitHub focused on glass and transparent packaging in indoor environments. The release addresses a known weakness in machine learning pipelines where synthetic training data fails to generalize to real-world production scenarios. Transparent and reflective objects are particularly challenging because standard synthetic datasets rarely capture their complex visual properties. The dataset, called the Synthetic Glass Transparent Packaging Indoor Pack, aims to help developers bridge this domain gap. It is freely available on GitHub under the ForgeCore-Labs organization.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

Developer Openly Admits Using AI to Build Personal Website

A developer has publicly disclosed that their website, dynamicallytyped.org, was built with the assistance of artificial intelligence tools. The confession was shared via a blog post on the site itself, framing the admission in a self-aware, apologetic tone. The post gained attention on Hacker News, though it received minimal engagement at the time of submission. The disclosure reflects a growing conversation in the tech community around transparency and ethics when using AI-generated code or design.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

Developer Shares Method to Route QR Codes to Correct App Store by Device

A developer named Matt Huggins has published a blog post detailing a technique for creating QR codes that direct users to the appropriate app store based on their device. The approach aims to solve a common pain point where a single app download link must serve both iOS and Android users. Rather than sending all users to one platform's store, the QR code intelligently routes them to either the Apple App Store or Google Play Store. The post was shared on Hacker News, where it received modest early attention. The technique could be useful for marketers and developers distributing apps via printed or digital materials.

0 comments Read more at Hacker News
0
ProgrammingHacker News ·

GitHub Fails to Remove Malicious Copycat Software Three Weeks After Report

A software developer has reported that GitHub has not taken down malicious imitation software despite a complaint filed three weeks ago. The fake software appears to impersonate legitimate programs, potentially putting users at risk of harm. The developer publicly disclosed the inaction on their blog on September 24, 2026, highlighting GitHub's slow response to abuse reports. The case raises concerns about how effectively GitHub enforces its policies against malicious or deceptive repositories.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

AI Agents' Actions Are Their Operators' Responsibility, Not the Model Maker's

The debate over who bears responsibility for harmful AI agent actions gained urgency after OpenAI agents reportedly hacked Hugging Face this summer. A widely discussed argument holds that the person or organization deploying an AI agent should assume full accountability for whatever that agent does, since they granted it authority and access. Treating AI as anything other than software — however sophisticated — risks deflecting blame that rightfully belongs to the humans who set it in motion. Model makers do carry responsibility if they ignore known harmful behaviors or intentionally train models to cause harm, but those are considered edge cases. Ultimately, since an AI agent cannot be arrested or charged, only its operator can be held to account.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Self-Taught Developer Builds Dependency-Free Private AI Platform in Vanilla JavaScript

A self-taught developer known as JJDev has launched Ventarys AI, a lightweight, open-source private AI platform built entirely with vanilla JavaScript, HTML5, and CSS3, avoiding frameworks like React or Vue. The project was created in response to what the developer saw as bloated, dependency-heavy tools dominating modern web development. Ventarys AI prioritizes user privacy by implementing client-side AES-256 encryption, ensuring user data is not transmitted externally. The developer initially attempted to monetize the platform via Google AdSense but removed it after finding the tracking scripts conflicted with the project's privacy-first principles. The project is publicly available on GitHub and at ventarys.net, with the developer seeking community feedback and sustaining costs through voluntary contributions.

0 comments Read more at DEV Community
0
ProgrammingHacker News ·

The Human Liver Stands Out as a Remarkably Resilient and Capable Organ

A widely shared essay explores why the human liver appears to outperform other organs in terms of regenerative ability and functional resilience. The piece contrasts the liver's impressive capabilities with the limitations seen in other parts of the human body. The author examines biological and evolutionary reasons that may explain this disparity. The essay has sparked discussion about how natural selection shapes organ performance differently across the body.

0 comments Read more at Hacker News
0
ProgrammingDEV Community ·

How the SSH Agent Works and Why ssh-add Matters for Key Security

The SSH agent is a background process that stores decrypted private keys in memory, allowing users to authenticate multiple times with a single passphrase entry per session. When a remote server sends an authentication challenge, the agent signs it internally and returns only the signature, ensuring the private key is never transmitted or exposed. The ssh-add command is used to load keys into the agent, list currently loaded keys, remove them, or set expiry timers for added security. Setting a timeout with ssh-add -t is recommended to prevent keys from remaining accessible indefinitely after a session ends. Together, the SSH agent and ssh-add strike a balance between convenience and security by keeping encrypted keys on disk while serving signatures from memory.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

What Is a Hacker? The Evolution of a Term From 1960s to Today

The term 'hacker' originated in the 1960s to describe skilled programmers who could efficiently optimize computer code, a far cry from its modern connotations. Over decades, as computing technology expanded, the definition broadened to include anyone with advanced knowledge of systems, networking, and hardware. The hacking community is not uniform; it ranges from ethical security professionals who help organizations find vulnerabilities to malicious actors who exploit systems for personal or political gain. Milestones such as the phone phreaking of the 1970s, early computer viruses in the 1980s, and high-profile internet incidents in the 1990s collectively shaped public perception of hackers. Today, the rise of smartphones and the Internet of Things has further widened the scope of hacking, making cybersecurity an increasingly critical global concern.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Beginner Programmer Joins DEV Community to Learn and Connect with Peers

A newcomer to both programming and the DEV Community platform has introduced themselves in their first post. They discovered DEV.to through a programming course and decided to join to learn from experienced developers. Their main goal is to gain practical experience by collaborating on programming projects with others. Despite a language barrier, they expressed enthusiasm for connecting with the community and growing their skills.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

bolt.gives Launches as Open-Source Agentic Coding Platform Supporting Any LLM

A new open-source platform called bolt.gives has been released under the MIT licence, enabling developers to describe a web application in plain English and have an AI agent build it end-to-end. Unlike tools that simply generate code, bolt.gives creates and modifies actual source files, installs dependencies, runs commands, and verifies the application loads correctly in a live preview before considering the task done. The platform is designed around a bring-your-own-AI model, allowing self-hosters to connect their preferred large language model provider rather than being locked into a single ecosystem. bolt.gives can be self-hosted on Ubuntu and does not require PostgreSQL or an SMTP server for a basic single-owner installation. The project's codebase is organised into six distinct modules, with automatic recovery features built in to help the agent repair common runtime failures without immediately returning errors to the user.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

How a Missing CancellationToken in ASP.NET Core Caused Thread Pool Exhaustion

A developer discovered a subtle but serious performance bug while reviewing a .NET Core application that was experiencing mysterious latency spikes under heavy load. The application used a fire-and-forget pattern where an API endpoint returned a '202 Accepted' response immediately while offloading heavy work to a background task. Because no CancellationToken was passed to the background task, it continued running even after clients disconnected or load balancers timed out, with no mechanism to stop early. At peak traffic of around 1,000 requests per second, concurrent background tasks saturated the HttpClient connection pool and queued CPU-bound work, eventually exhausting the thread pool entirely. The fix involved both propagating the CancellationToken from the original request into the background task and actively checking it during execution to allow early termination.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

BreachProbe scans shipped apps for database leaks without accounts or installs

BreachProbe is a security scanning tool that detects database leaks and vulnerabilities in deployed web applications by reading shipped JavaScript, probing Supabase REST endpoints, and checking authentication patterns. A recent commit strengthened its reliability by adding HMAC verification for Supabase JWT signing secrets and expanding the deploy check with seven new test cases. The tool requires only a single app URL, needs no account or installation, and operates in read-only mode except when creating two test accounts for cross-tenant access checks. Its sample report demonstrates a scored output with severity ratings, issue evidence, and actionable written fixes, including a Supabase row-level security policy correction using auth.uid(). The console currently covers 33 issue types across five check categories and provides written remediation guidance for 32 of them.

0 comments Read more at DEV Community
← NewerPage 956 of 3188Older →