🌍 TheVerge

OpenAI agents tried to ‘bruteforce’ a UN website

Security researcher Rowan Howard-Jones says that OpenAI agents scanned the UN Conference on Trade and Development's (UNCTAD) statistics site over 16,000 times between April and June. While the incident doesn't quite rise to the level of the Hugging Face hack, or the recent attacks on US government sites, it's yet another concerning example of AI […]
🌍 Dev.to

GitHub Just Killed SHA-1 Over HTTPS

On September 15, 2026, GitHub turned off SHA-1 for HTTPS and TLS on github.com and its CDNs. They had been warning about it since April. If your client can't do a TLS handshake without SHA-1, you now get a connection error. I'll skip the history lesson on SHA-1. What I want to cover is why this took until 2026 to finally happen, and how to check your own setup first. Why was SHA-1 still around TLS handshake is the part where your client and github.com agree on how to verify th...
🌍 Dev.to

5 Low Competition AI Coding Tools That Are Cheaper & Faster (2026)

Originally published at nlocoding.com 67% of developers say they’re overwhelmed by AI tool choices, but only 11% can name a low competition AI coding tool by brand. (Source: JetBrains Developer Ecosystem 2026) If you’re reading this, you’re not alone. Most devs feel the gold rush… but what actually gives you an edge in 2026? The market’s flooded. 3,900 new AI coding tools launched in the last 18 months—with the same names trending on Hacker News every week. Yet, the best ROI often hi...
🌍 Dev.to

160 browser-only tools later: the engineering decisions that actually mattered

My last post was the tour — the tools, the categories, why everything runs in your browser. This one is the sticky stuff: the decisions that cost me the most time, so you can skip them. Stack in one sentence. Next.js 14 App Router, TypeScript, Tailwind. Every tool is a client component, there is no backend, and the whole site is pre-rendered at build time — 399 static pages today (160 tools in EN + TR, 24 guides per locale, categories, static pages). Bilingual without duplicating routes. O...
The A2UI Contract: A Deep Dive into Agent-to-UI Architecture
🌍 Dev.to

The A2UI Contract: A Deep Dive into Agent-to-UI Architecture

A2UI answers one design question: what happens when you let a language model design a UI on the fly. It refuses to let the model write a single line of code. It sends a description instead, and a contract on the wire is what makes that description safe to trust. This piece follows one request all the way through: what the agent decides, what shape that decision is allowed to take, and how a renderer turns it into something on screen. Agent : decides what to show Protocol : the shape ...
🌍 Dev.to

Sign in to a remote MCP server in Claude Code: /mcp and claude mcp login

Originally published at https://aicoding-guide.com . Hosted MCP servers like Sentry, Linear and Notion are not usable the moment you register their URL. They need a browser sign-in first, and claude mcp list shows them as ! Needs authentication until you do it. In short: add the server with claude mcp add --transport http <name> <url> , then either run /mcp in a session and choose Authenticate on that server, or run claude mcp login <name> from your shell. To...
🌍 Dev.to

Moving off Event Tickets Plus: what your WooCommerce ticket data looks like

Event Tickets Plus sells your event tickets through WooCommerce. If you're moving off it, whether because of the Liquid Web changes or because you're leaving The Events Calendar altogether, the tickets and attendees are the part that's easy to get wrong. Here's what that data looks like in your database and where a migration usually breaks. Disclosure: I build Beacon Events, a WordPress events plugin, and I wrote an importer for this data this week. The details below apply whatever you move t...
Cron jobs: the tiny line that runs half your backend
🌍 Dev.to

Cron jobs: the tiny line that runs half your backend

Every backend has a few jobs nobody looks at. The nightly backup. The 9 AM report. The script that deletes old files. Each one is a single line of cron. They work fine for months. Then one day you find out the backup hasn't run since March. Nobody noticed. This post is about that one line: what it means, where to run it, and how to hear about it when it stops. What cron actually is cron - a program that runs in the background on Unix machines. It starts commands on a schedule...
🌍 Dev.to

A review contract for an agent-authored pull request

An agent-authored change should arrive with enough evidence for a reviewer to evaluate its scope and assumptions. For an integration change, I would make that requirement part of the delivery workflow. Consider a proposed fix to a partner payload mapping. The agent can inspect the relevant contract, propose a patch, and test it against fixtures. The reviewer still needs to know which input changed, which revision was tested, and what the tests leave unresolved. The following YAML is an ill...
App economy 2026: why new apps get 3% of subscription revenue
🌍 Dev.to

App economy 2026: why new apps get 3% of subscription revenue

The app economy flipped in 2026. Building an app used to be the hard part and getting paid was the easy part; with AI coding tools the order reversed. RevenueCat's State of Subscription Apps 2026 counts about 14,700 new subscription apps a month, seven times more than in 2022, while apps launched before 2020 still collect 69 % of the money. If you are vibe coding a side project right now, these are the odds you are shipping into. TL;DR New subscription-app launches ...
🌍 Dev.to

A new server gets its first unsolicited packet in 3.77 seconds

I rented a $6 server, gave it a fresh IPv4 address nobody had used before, and started a stopwatch. The first unsolicited packet arrived 3.77 seconds after the listener came up. It was a TLS ClientHello aimed at port 8443, from a host in a Linode range, and it landed before the machine had finished its second minute of existence. Seventy-five minutes later I had 1,212 events from 84 addresses across 15 ports. The interesting part turned out not to be the speed. It was that counting the s...
🌍 Dev.to

The Hard Part of AI Engineering Isn’t the Model

When I first started looking seriously at AI engineering, I thought the main problem would be choosing the right model. GPT, Claude, Gemini, open-source models, context windows, benchmarks, reasoning ability… But after building with them for a while, I started noticing something. The model is often not the hardest part. The difficult part is everything around it. You can have an extremely capable model and still build a terrible AI system. For example, imagine an AI support a...
🌍 Dev.to

AI agents: OpenAI bots probed public and university sites

First published in GetPack Magazine , sourced guides to use AI well as a student. On September 23, 2026, an independent lab published six months of traces left by AI agents on a public URL-scanning service. In them, agents attributed to OpenAI probe a university library, a statistics portal and a public health website, testing textbook attack techniques along the way. Three days later, OpenAI acknowledged that it had notified dozens of governments, universities and public agencies. Here's w...
HackerNews

AI in hospital billing adds nearly $1B in extra costs

Article URL: https://www.bcbs.com/about-us/association-news/bcbsa-analysis-ai-coding-tools-affects-healthcare-costs Comments URL: https://news.ycombinator.com/item?id=49868521 Points: 5 # Comments: 1
HackerNews

Deming in the machine running an AI assisted film

Article URL: https://medium.com/@zrkjsy/deming-in-the-machine-running-an-ai-assisted-film-production-on-continuous-improvement-0337a3112111 Comments URL: https://news.ycombinator.com/item?id=49869027 Points: 1 # Comments: 1