SShortSingh.

Programming

0
ProgrammingDEV Community ·

Engineer Traces Silent JVM Crash to Single PostgreSQL Config Parameter via Bytecode

A software engineer debugging a High Availability failover cluster discovered that a secondary server was silently shutting down exactly 6-7 seconds after every startup attempt, with no stack trace or useful error message. The setup used a lean three-VM topology where the PostgreSQL database and shared filesystem were hosted on the same machine, deviating from the vendor's standard four-VM recommendation. Despite identifying and fixing four separate configuration issues — including missing directories, credential mismatches, absent database rows, and incorrect startup script order — the server continued to crash at the same interval. After exhausting vendor documentation, community forums, and database-level fixes, the engineer determined the root cause lay deeper than logs or config files could reveal. With no other options, they turned to decompiling the vendor's Java bytecode, ultimately tracing the crash to a single PostgreSQL configuration parameter.

0
ProgrammingHacker News ·

Developer Builds Financial Planning Tool to Model Work and Retirement Timelines

A developer shared a self-built financial planning tool on Hacker News under the 'Show HN' category. The tool was created in just a few hours and is designed to help users model different life stages financially. It aims to assist with decisions around job searching, career timelines, and retirement planning. Users can input their salary details to estimate how long they need to work before reaching financial independence or retirement. The post has received 4 points and no comments so far.

0
ProgrammingDEV Community ·

JavaScript Basics: Variables, Functions, and Events for Web Beginners

JavaScript is a programming language that adds interactivity to websites, bridging the gap between visual design and functional behaviour. Unlike HTML and CSS, which handle structure and styling, JavaScript enables pages to respond to user actions such as button clicks. Core concepts for beginners include variables for storing data, functions for reusing code, and event listeners for reacting to user input. Learning these fundamentals provides a foundation for more advanced topics like DOM manipulation and working with APIs. Web development educators recommend starting with these basics before progressing to more complex JavaScript concepts.

0
ProgrammingDEV Community ·

JEV Framework Offers Structured, Inspectable Errors to Fix Runtime Validation Gaps

Production systems handling structured data like API payloads and config files often fail at runtime despite passing compile-time type checks, because real-world inputs can be unpredictable and hard to debug. Most validation tools reduce outcomes to a simple pass-or-fail boolean, leaving developers without clear information about which field failed, why, or what was expected. JEV, a validation framework, addresses this by treating every validation outcome as a typed, structured decision object rather than a boolean, making errors fully inspectable and loggable. Instead of throwing a generic exception, JEV returns a result containing the specific field, reason, and expected value, enabling better logging, alerting, and long-term maintainability. The approach is designed to become increasingly valuable as data models grow more complex and more external integrations are added to a system.

0
ProgrammingDEV Community ·

Claude Opus 5.5 cuts costs 40%, delivers faster output with no API changes

Anthropic released Claude Opus 5.5 this week with a 40% price reduction and 30% faster output generation compared to its predecessor, while matching Fable 5.1 benchmark performance. The most significant saving is in cache reads, which drop from $0.50 to $0.20 per million tokens — a 60% reduction that benefits agentic and retrieval-heavy workflows. No API or prompt changes are required; developers can migrate simply by updating the model string or staying on the latest alias. Separately, Vercel's AI Gateway expanded support to include four new models — GLM-5.3 Flash, DeepSeek V4.1 Flash, Qwen 3.8 Flash, and Grok 4.7 — consolidating provider access under a single integration layer. Google's Gemini 3.5 Transcribe also joined the Gateway, offering WebSocket-based live transcription across 85+ languages without requiring a separate Google Speech-to-Text credential setup.

0
ProgrammingDEV Community ·

Over 1,500 AWS, Azure, and GCP Architecture Icons Now Available Free as SVGs

A developer has catalogued and made accessible 1,579 free SVG architecture icons spanning AWS (739), Microsoft Azure (626), Google Cloud (214), and Kubernetes (38) through a single platform called thesvg.org. The icons are sourced from each provider's official sets and carry their respective licenses — CC-BY-ND-2.0 for AWS, MIT for Azure, and Apache-2.0 for Google Cloud. A queryable JSON registry allows users to search icons by slug, title, or category without needing an API key, solving the common pain point of hunting across multiple zip archives. AWS icons follow a non-intuitive double-prefix naming convention — for example, the Lambda icon is 'aws-aws-lambda' rather than 'aws-lambda' — making the registry filter essential for accurate lookups. Notably, AWS icons carry a No Derivatives (ND) license, meaning modifications such as recoloring are not permitted under the terms of use.

0
ProgrammingDEV Community ·

ChatGPT Sites, Claude, Gemini: A Practical Guide to Hosting AI-Built Websites

As of late September 2026, major AI platforms including ChatGPT, Claude, and Gemini now offer distinct ways to publish websites built through their tools, each with different trade-offs around cost, custom domains, and server-side capabilities. ChatGPT Sites, currently in public beta, provides integrated hosting with storage and database support, but is restricted to paid plans and unavailable in the EEA, UK, and Switzerland. Claude offers three separate publishing paths — artifact sharing, a Netlify connector, and Claude Code — while Gemini Canvas provides shareable links without custom domain support. Other options such as GitHub Pages, Netlify Drop, Google AI Studio, and independent platforms like Lovable and DashPloy round out the hosting landscape with varying free tiers and feature sets. The author notes these products change frequently and recommends verifying current terms before committing to any platform.

0
ProgrammingDEV Community ·

SAGA Pattern: Managing Distributed Transactions in Microservices Without 2PC

The SAGA design pattern breaks large distributed transactions into smaller, independent local transactions executed across multiple microservices. Each service handles its own transaction and, if a step fails, compensating actions are triggered to reverse previously completed operations. SAGA avoids the pitfalls of Two-Phase Commit (2PC), which is known for blocking resource locks and creating performance bottlenecks in high-throughput systems. The pattern supports two coordination models: orchestration, where a central coordinator directs each service, and choreography, where services communicate autonomously via events. While SAGA improves fault tolerance, scalability, and eliminates single points of failure, it introduces added system complexity and embraces eventual rather than immediate consistency.

0
ProgrammingDEV Community ·

AI Agents vs Agentic AI: Why Orchestration Is an Engineering Commitment

A growing body of research and industry guidance draws a clear distinction between a single AI agent — a component handling one scoped, verifiable task — and agentic AI, which is an orchestrated system of specialised agents with planning, memory, and task handoffs. OpenAI and Anthropic define the term 'agent' differently, and a 2026 academic survey confirms no standard definition yet exists across the field. Experts recommend starting with a single agent, scoring its performance, and only moving to multi-agent orchestration when evaluation data shows the workflow genuinely requires task decomposition or persistent memory. Gartner's June 2025 analysis warned that governance and cost — not model quality — are the primary reasons agentic projects fail. The practical takeaway is that orchestration adds complexity and new failure modes, and should be treated as a deliberate engineering decision rather than a default product choice.

0
ProgrammingDEV Community ·

Ooor: 1.5MB Open-Source Windows App Turns llama.cpp Into a Local AI Workstation

Ooor is a MIT-licensed, open-source Windows desktop application that packages the llama.cpp ecosystem into a lightweight, click-to-run local AI workstation. Developed by a contributor known as oshine and available on GitHub, the app compiles to just 1.5MB using WinForms and .NET Framework 4.8, idling in single-digit megabytes of RAM. It bundles an engine manager, a GGUF model library, a Hugging Face model marketplace, a resumable downloader, a streaming chat console, and an agent tool-calling layer in a single executable. Unlike alternatives such as LM Studio, which exceeds 500MB and relies on Electron, Ooor requires no cloud services, no user accounts, and collects no telemetry. The app exposes an OpenAI-compatible HTTP endpoint at 127.0.0.1:6080, allowing direct integration with tools like Cursor, Continue, and Cherry Studio.

0
ProgrammingDEV Community ·

Developer releases Angular library to eliminate repetitive HttpClient boilerplate code

A developer has released version 3.0 of @arxis/api, an open-source Angular library designed to reduce repetitive HTTP service code in Angular 17+ applications. The library introduces a provideApi() configuration function that lets developers set a base API URL and global headers once at the app level, rather than repeating them across every service. An injectable ApiService then replaces direct HttpClient usage, exposing typed get, post, put, patch, and delete methods that handle URL construction and headers automatically. The wrapper does not create its own HTTP stack, meaning existing Angular features such as interceptors, server-side rendering, and HttpTestingController continue to work without modification. Multiple API backends can be supported by either extending ApiService with a custom subclass or by scoping a separate provideApi() call to a lazy-loaded route.

0
ProgrammingDEV Community ·

Rootless Docker Explained: How Running Containers Without Root Reduces Risk

In traditional Docker setups, the Docker daemon runs with root privileges on the host, creating a significant security risk if that access is compromised. Linux user namespaces allow a process to appear as root inside a container while being mapped to an unprivileged user ID on the host. Rootless Docker leverages this mechanism by running the Docker daemon itself without host-root privileges, shrinking the potential attack surface. A key vulnerability in standard setups is the Docker Unix socket, where granting container access to it can effectively hand over host-level control. Understanding the difference between root inside a container and root on the host is essential for reasoning clearly about Docker security.

0
ProgrammingDEV Community ·

12-Step Cloudflare Security Checklist You Can Run From the Terminal

A developer at guushu.com has published a 12-point Cloudflare zone security checklist after discovering an unexpected WAF rule blocking curl requests on one of their zones. Each check uses a single read-only API token and a curl command, replacing guesswork with verifiable terminal output. The checklist covers critical settings including minimum TLS version, HSTS, WAF managed rules, DNSSEC, email authentication records, and scoped API tokens. It also flags common oversights such as orphaned DNS records, unprotected admin paths, and non-expiring API keys. The author notes that manual checks take roughly ten minutes per zone, making automation worthwhile for anyone managing multiple zones.

0
ProgrammingDEV Community ·

FortiGate Exposure Counts Vary Widely Depending on How the Query Is Framed

Australia's Cyber Security Centre issued an alert on 18 June 2026 warning of a widespread credential-based attack campaign targeting Fortinet firewalls and VPN gateways, which could allow attackers remote access to devices and connected networks. The alert did not cite a specific CVE or disclose how many organisations were affected, and focused on operational mitigations such as rotating credentials, enforcing MFA, and reviewing access logs. When analysts attempted to quantify exposed FortiGate devices using the ZoomEye scanning platform on 23 September 2026, results ranged from roughly 40,000 to nearly one million depending on the search query used. Each query answered a different question — broad product identification versus specific port or service exposure — meaning the figures are not interchangeable. Importantly, none of these counts indicate how many devices are actually compromised or vulnerable, highlighting how query framing can significantly distort public perception of an incident's scale.

0
ProgrammingDEV Community ·

Ask AI to Sketch GUIs in ASCII Art Before Writing Any Code

A software developer writing for DEV Community argues that letting AI jump straight into coding a graphical interface often produces layouts that miss the mark entirely. The core problem is that describing visual designs in plain text is inherently ambiguous, leaving the developer and AI with very different mental images of the final result. The suggested fix is to prompt the AI to first produce an ASCII art mockup of the GUI during the planning phase, before a single line of code is written. The author illustrates this with a real example from building a session-transfer feature in a tool called Command Center, where early AI renderings were significantly off until an ASCII sketch clarified expectations. Catching layout mismatches at the diagram stage, the author contends, saves considerable time compared to correcting them after the code is already written.

0
ProgrammingDEV Community ·

Developer Documents Serverless Backend Build for Cloud Resume Challenge Week 2

A developer completed the second phase of the Cloud Resume Challenge, building a serverless visitor counter backend using AWS Lambda, DynamoDB, and API Gateway. The system stores and increments a visitor count in a DynamoDB NoSQL table each time the resume page is loaded, returning the updated count to the frontend via a Python Lambda function. API Gateway exposes the Lambda function through a public HTTPS endpoint, while JavaScript on the resume page calls the API to display the count. The developer encountered several real-world bugs during the build, including an IAM AccessDeniedException, an AWS region mismatch between Lambda and DynamoDB, and a data type conflict that caused duplicate database entries. The post emphasizes the debugging process as the most instructive part of the project, offering detailed fixes for each issue encountered.

0
ProgrammingDEV Community ·

How to Deploy SvelteKit on Cloudflare Pages With D1 or Postgres Databases

Cloudflare Pages offers free global edge hosting for SvelteKit apps with zero cold starts, but connecting a real database introduces several undocumented pitfalls. Developers can use Cloudflare's managed SQLite service D1 or connect to Postgres databases via Hyperdrive, a pooled connection layer for Workers. A key gotcha is that standard Node.js globals like process.env and built-in modules such as fs and node:crypto are unavailable by default in the Workers runtime, requiring use of platform.env and Web Crypto APIs instead. Postgres connections routed through poolers like Supabase or Neon must also disable prepared statements to avoid runtime errors. The article outlines configuration steps and five common mistakes developers encounter when moving beyond static deployments on Cloudflare Pages.

0
ProgrammingDEV Community ·

How Ionospheric Scintillation Disrupts GNSS Accuracy After Sunset Near the Equator

Ionospheric scintillation is a phenomenon where irregular fluctuations in electron density distort GNSS signal phase and amplitude, causing positioning accuracy to degrade significantly. It occurs most intensely near the geomagnetic equator — affecting regions such as Brazil, Nigeria, India, and Singapore — and is triggered daily by sunset, with disruptions lasting several hours into the night. The severity is measured by two indices, S4 for amplitude and sigma-phi for phase, with strong scintillation defined at S4 above 0.6 and sigma-phi above 0.3. Effects on receivers range from metre-level position drift in mild cases to complete loss of signal lock in extreme events, with RTK systems particularly vulnerable to cycle slips. Since the corruption originates in the signal itself rather than satellite geometry, simply adding more constellations does not resolve the issue, requiring instead specialised receiver technology designed to handle scintillation conditions.

0
ProgrammingDEV Community ·

DynamoDB Native Vector Search Gives Serverless AI Agents Durable Semantic Memory

Developers can add long-term semantic memory to serverless AI agents using DynamoDB's native vector search and Amazon Bedrock embeddings, eliminating the need for a dedicated vector database or sync pipeline. The approach stores embeddings alongside data items in a single DynamoDB table, so both a write and a vector index update happen in one PutItem call. Benchmarks run in AWS us-east-1 showed this native method was approximately 2.5x faster on writes and 1.4x faster on searches at p50 latency compared to S3 Vectors. The solution directly addresses a common AWS Lambda problem where container teardown between invocations causes each agent turn to start without any memory of prior conversations. The post also distinguishes three separate memory layers — state, session, and long-term memory — arguing that conflating them is a root cause of agents remembering the wrong things or forgetting the right ones.

0
ProgrammingDEV Community ·

Why AI Agents Need More Than API Marketplaces for Dynamic Service Discovery

Traditional API marketplaces like RapidAPI are designed for human developers who already know what capability they need, making them only partially suited for AI agent workflows. When an AI agent receives an open-ended task, it must autonomously discover, evaluate, and invoke the right external services — a process that goes beyond browsing a static API directory. This creates demand for a new runtime service layer that can interpret agent goals and recommend the appropriate capability in real time. Emerging platforms such as Anvita Flow represent early attempts to build this kind of agent-oriented service infrastructure. Developers working with AI agents are now exploring various approaches to service discovery, including hard-coded tools, the Model Context Protocol, and purpose-built agent service marketplaces.

← NewerPage 971 of 3189Older →