I Built a QR-Code File Transfer App with Spring Boot and Vanilla JavaScript
🌍 Dev.to

I Built a QR-Code File Transfer App with Spring Boot and Vanilla JavaScript

What if you could send a file from one device to another with no cable, no Bluetooth and no cloud upload, using only a screen and a camera? That was the idea behind QR File Transfer , a small project I built with Spring Boot, MySQL and plain JavaScript. The sender's screen plays a stream of QR codes, and the receiver's camera scans them and rebuilds the file. arshisabah / QR-File-Transfer-System ...
🌍 Dev.to

Laravel Route Model Binding: Implicit, Explicit & Scoped

Laravel route model binding is the reason a resource controller rarely contains a manual Post::findOrFail($id) call. Part 1 covered how Laravel routing works at a basic level, and ended on the {post} parameter in a resource route resolving straight to a Post model instead of a raw ID. This part covers how that actually happens, and the handful of places it stops working the way you'd expect: custom lookup columns, nested resources, and soft-deleted rows. Implicit binding: mat...
Grok 4.7 pricing: same $2/$6 per token, double the cost per task
🌍 Dev.to

Grok 4.7 pricing: same $2/$6 per token, double the cost per task

Grok 4.7 costs exactly what Grok 4.6 did per token: $2 per million input tokens and $6 per million output. Per task, it costs about double. Artificial Analysis measured xAI's new model writing roughly 2.5 times as many tokens as its predecessor, so its cost per task went from $1.86 to $3.74. If you pick LLMs by the price table, this is the week that table stopped telling you what you will pay. TL;DR Grok 4.7's list price is unchanged, $2 in and $6 out per million to...
🌍 Dev.to

Your AI chatbot isn't hallucinating. It's reading your outdated docs.

When a support chatbot gives a wrong answer, the first instinct is to blame the model. But when I looked at how these failures are described in support and operations communities, a different pattern kept showing up: the model was faithfully repeating the documents it was given. The documents were the problem. Typical examples: Two FAQ pages with different refund windows (7 days vs 14 days) Two different support email addresses, both "official" A policy last reviewed two years ago ...
🌍 Dev.to

De git push a producción sin sorpresas: SAST con Bandit en un pipeline de GitHub Actions

Cómo integramos análisis estático de seguridad en el despliegue continuo de una aplicación FastAPI + Oracle sobre Azure, y qué aprendimos al leer 467 hallazgos. 1. Introducción Qué construimos Somos dos estudiantes de Ingeniería de Sistemas de la Universidad Privada de Tacna y, para el curso de Calidad y Pruebas de Software, construimos un Framework de Pruebas de Base de Datos SQL : una aplicación web para definir, ejecutar y registrar pruebas SQL sobre bases de da...
🌍 Dev.to

Verify a Swift package’s minimum toolchain and CLI contract

Robin Winters · October 3, 2026 I’m an iOS / Full Stack Engineer at ShowFlex, a shipped iPhone fitness product . This article examines a separate, public Swift teaching package prepared with coding-assistant support. Its fixtures are synthetic; the results below are not a test report for ShowFlex. A package that passes on my current Mac has established something useful. It has not established that another person can build it on the oldest supported tools, on Linux, or with an unexpected c...
🌍 Dev.to

Understanding Elastic IP in AWS EC2

While working with Amazon EC2, I noticed something interesting about public IP addresses. I launched an EC2 instance and checked its public IP: Public IP: 13.x.x.x Then I stopped the instance and started it again. After restarting, I noticed that the public IP had changed: Old IP: 13.x.x.x New IP: 54.x.x.x This made me understand an important AWS concept: The default public IPv4 address of an EC2 instance is not persistent. 🔹 So, how can we keep the same public IP? AW...
I built a small kanban board that my coding agents update with curl
🌍 Dev.to

I built a small kanban board that my coding agents update with curl

When I work with coding agents I usually have a few things going at once, and after a couple of sessions I no longer know what's finished, what's half done and what's waiting on me. I tried a TODO.md , but I never looked at it. Jira or Linear felt silly for a one-person project. So I wrote KanbanEasy. It's a small desktop kanban board that I keep docked next to my editor. The part I actually wanted is that the agent can move its own cards. The code is on GitHub under the MIT licens...
🌍 Dev.to

TVL Trend Analysis & Liquidity Risk Assessment: Maple

TVL Trend Analysis & Liquidity Risk Assessment: Maple Target Protocol : Maple (TVL: $2991.3M) Maple Finance – TVL Trend Analysis & Liquidity Risk Assessment Prepared by: [Your Firm / Senior DeFi Security Research Team] Date: 4 October 2026 1. Executive Summary Maple Finance (the “Protocol”) is a decentralized credit‑risk marketplace that enables institutional borrowers to obtain on‑chain financing through a network of capital providers (LPs) and und...
🌍 Dev.to

Compress Image to 100KB Online — No Upload

Visa portals, exam forms, and job applications all ask for the same thing: a photo under 100KB. Most compressors hand you a quality slider and wish you luck — you export at 60%, check the size, re-export at 50%, check again. Five guesses later you land at 97KB with a photo that looks worse than it needed to. There's a better way: name the size, and let the tool find the best quality that fits it. Type 100 , get ≤100KB, done — with your file never leaving your device. Why 100KB ...
HackerNews

The ugly economics of consumer AI

Article URL: https://techcrunch.com/2026/09/30/the-ugly-economics-of-consumer-ai/ Comments URL: https://news.ycombinator.com/item?id=49949692 Points: 1 # Comments: 0
HackerNews

Poll: What do you use personal AI bots for?

From ChatGPT dots to Muse, personal AI bots are becoming mainstream, no longer shackled by need to have a dev environment (openclaw..). However outside the initial fancy and demo tests, I am really curious how people are using the personal AI bots. Comments URL: https://news.ycombinator.com/item?id=49949699 Points: 1 # Comments: 0
HackerNews

AI has Improved Lives: A collection

Article URL: https://aiimproveslives.com/ Comments URL: https://news.ycombinator.com/item?id=49949810 Points: 1 # Comments: 2
HackerNews

Chalkboard and Avatar for AI Agents

Article URL: https://github.com/zohayrslileh/more-space Comments URL: https://news.ycombinator.com/item?id=49950240 Points: 1 # Comments: 1
HackerNews

AI can clone your indie game, but not its soul

Article URL: https://twitter.com/robertvaradan/status/2106061989122334778 Comments URL: https://news.ycombinator.com/item?id=49950288 Points: 4 # Comments: 0
Weekly Website Highlight: A Social Network That Deletes Yesterday
🌍 Dev.to

Weekly Website Highlight: A Social Network That Deletes Yesterday

Every week, I want to highlight one website, tool, or project that made me stop scrolling and think: “Okay, that is actually a fun idea.” This week’s pick is Nychthemeron — an open-source social platform where posts, comments, and messages disappear after 24 hours. Yes, completely disappear. No endless archive of old opinions. No post from 2017 waiting patiently to ruin your afternoon. No carefully maintained feed of things you said when you were tired, overconfident, or had ju...
🌍 Dev.to

MCP Security in Practice: Prompt Injection, Least Privilege, and Audit Logs

Connecting an AI agent to internal tools is the first time most teams confront a security boundary that is not enforced by code alone. Traditional programs take instructions from developers and data from users; an LLM-driven agent takes instructions from both , and it cannot reliably tell them apart. A field value, an issue comment, a web page, or a tool description can all contain text that changes what the model does next. The Model Context Protocol does not solve this; it makes the boundary ...
🌍 Dev.to

Node.js Scheduled Job Alerts with Heartbeat Monitoring (for Safer Rollbacks)

TL;DR: A scheduled Node.js job needs two signals. Emit a structured completion or error event so operators can search what happened, and send a heartbeat to an independent monitor so it can notice when nothing happened. Logs alone can explain a crash, but they cannot prove that a scheduler ever launched the job. For a nightly media pipeline, I would keep those signals behind a tiny application-owned interface and deploy the monitor change before the job change. That makes rollback boring: the...
🌍 Dev.to

Smart Contract Vulnerability Surface Analysis: Deribit

Smart Contract Vulnerability Surface Analysis: Deribit Target Protocol : Deribit (TVL: $4232.3M) Deribit – Smart‑Contract Vulnerability Surface Analysis Prepared by: [Your Firm] – Senior DeFi Security Research & Auditing Team Date: 3 Oct 2026 1. Executive Summary Deribit is a leading crypto‑derivatives platform that has extended its on‑chain footprint to Ethereum L1 and multiple L2 roll‑ups (Optimism, Arbitrum, zkSync). The protocol manages a TVL of ≈ ...
Cross-Modal Knowledge Distillation for bio-inspired soft robotics maintenance in hybrid quantum-classical pipelines
🌍 Dev.to

Cross-Modal Knowledge Distillation for bio-inspired soft robotics maintenance in hybrid quantum-classical pipelines

Cross-Modal Knowledge Distillation for bio-inspired soft robotics maintenance in hybrid quantum-classical pipelines Introduction: A Detour That Changed How I Think About Robot Maintenance Six months ago, I was deep into a rabbit hole studying knowledge distillation for a completely different reason — I wanted to compress a large vision transformer into something that could run on a microcontroller for a home automation project. Somewhere around 2 AM, while reading a paper on cro...