🌍 Dev.to

Refuse an unentitled caller in a Forge resolver, and prove it with a test that goes red without the gate

Refuse an unentitled caller in a Forge resolver, and prove it with a test that goes red without the gate Key takeaways END STATE: a resolver that refuses an unentitled caller, proven by a test suite that scores 1/6 against the ungated version and 6/6 against the gated one. The happy path passes either way. That is why a positive-only test proves nothing about authorization. Fail CLOSED: a probe that throws, times out, or returns an unexpected shape must refuse, not allow. ...
🌍 Dev.to

Job-Hunting With a Resume That Doesn't Look Like a Resume

My last article did numbers I didn't expect. A lot of the comments landed on the same line: "okay but did it actually get you hired?" No. Not yet. And I'm going to be honest about how that's been sitting with me, because the polished "here's what I learned" version of this post was easier to write than the true one. Eight years managing a Trader Joe's floor. Two years before that answering phones and filing at a front desk. And now, at the bottom, two shipped Linux projects with real users...
🌍 Dev.to

Vendor Concentration Risk Explained Through Warm Second Provider Invoice Reconciliation Drills

TL;DR: Keep a second usage-metering supplier warm by sending it a small, bounded stream of synthetic and replay-safe events, then reconcile both suppliers against an internal ledger. Put a hard spend ceiling on the exercise and define the amount of traffic you will refuse when that ceiling is reached. A fallback that accepts a health check but cannot reproduce invoice totals is not warm. For a media account platform, the bill is made of metered events retained, processed, and queried across t...
🌍 Dev.to

The quiet DoS bug in Cisco's email gateway hardening release

The quiet DoS bug in Cisco's email gateway hardening release Cisco's September 2026 hardening release for its email security appliances covers five CVEs. Four of them are the kind of flaw that draws attention: directory escape, authorization bypass, injection. The fifth, CVE-2026-20353, is a resource lifetime control weakness, and it is the one most likely to be left unpatched because its impact looks like ordinary instability rather than a security event. Vulnerability overview ...
🌍 Dev.to

Senior Engineering is Not Making Code Work. It's Deciding How It Fails.

Senior engineers know a quiet truth that junior developers (and AI code generators) often miss: Writing code that works on the happy path is easy. Any LLM can scaffold a service in 5 seconds that passes local tests. The real engineering begins when things go wrong: What happens when the payment provider returns a timeout? Does that timeout exhaust the connection pool? Does that connection pool lock up the checkout API? Does that lock crash the entire product catalog? This is The Bl...
HackerNews

Your 401(k) Is Propping Up the AI Bubble

Article URL: https://www.promarket.org/2026/05/05/your-401k-is-propping-up-the-ai-bubble/ Comments URL: https://news.ycombinator.com/item?id=49760186 Points: 2 # Comments: 0
HackerNews

The White House Tussle to Sway Trump on AI

Article URL: https://www.wsj.com/tech/ai/inside-the-white-house-tussle-to-sway-trump-on-ai-0043d567 Comments URL: https://news.ycombinator.com/item?id=49760805 Points: 3 # Comments: 0
HackerNews

Compsci grads facing recession-like job prospects thanks to AI

Article URL: https://www.theregister.com/ai-and-ml/2026/09/18/compsci-grads-facing-recession-like-job-prospects-thanks-to-ai/5297537 Comments URL: https://news.ycombinator.com/item?id=49761529 Points: 2 # Comments: 0
HackerNews

The Other Way AI Impairs Our Thinking

Article URL: https://www.theatlantic.com/ideas/2026/09/ai-apocalypse-despair-focus/688689/ Comments URL: https://news.ycombinator.com/item?id=49761655 Points: 1 # Comments: 0
HackerNews

AI-based learning is a joke

Article URL: https://qlain.online/blog/ai-based-learning.html Comments URL: https://news.ycombinator.com/item?id=49761725 Points: 1 # Comments: 1