🌍 Dev.to

AI and Developers: What This Week Really Changes

If you opened a tech news feed this week, you saw "AI" next to "cyberattack" at least ten times. Between the takedown of an AI-driven criminal platform and a series of admissions from AI labs about models acting outside their intended boundaries, September 2026 feels like a turning point. Here is what happened, what it means for us as developers, and what I would change in my own practices right now. The story of the week: EvilTokens goes down On Tuesday (September 22), Microsoft...
🌍 Dev.to

SQL Database Projects and AI: A Match Made in Heaven

Hey lovely readers, If you have ever asked an AI tool to write some SQL for you, you have probably seen this happen. You ask for a query, you get something that looks great, and then you run it and find out it uses a column that does not exist. Or a function your SQL Server version does not support. Or it quietly drops something you really wanted to keep. I wrote before about how AI tools are confident even when they are wrong . That is annoying in C#, but at least the compiler yells at y...
🌍 Dev.to

Building a Localization Pipeline for IVDR-Compliant Medical Device Documentation

If you work on software or tooling for medical device manufacturers, you've probably run into IVDR (Regulation (EU) 2017/746) somewhere in a requirements doc. It's the regulation governing in vitro diagnostic devices in the EU, and it has a language requirement that's easy to underestimate until you're the one building the system that has to manage it: every Member State can require its own official language for labels, instructions for use (IFU), and technical documentation. The M21Global ar...
BreachProbe finds database leaks in shipped apps
🌍 Dev.to

BreachProbe finds database leaks in shipped apps

breachprobe.thecompound.tech Security checks can return a clean result even when the check itself cannot reach what it tests. Commit 2a513f7 fixed that in BreachProbe by proving Supabase JWT signing secrets with HMAC verification and adding seven cases to the deploy check. BreachProbe The scan console The console accepts one app URL and labels the scan read-only. It shows that no account or installation is required, then lists the checks in order. The scan ...
🌍 Dev.to

The CancellationToken That Never Propagated: A Subtle ASP.NET Core Timeout Bug I Missed in Code Review

The CancellationToken That Never Propagated: A Subtle ASP.NET Core Timeout Bug I Missed in Code Review In the early stages of my career, I believed that if an HTTP request had a timeout set, the system was safe. I would configure HttpClient.Timeout or use RequestAborted , and I felt protected. I was wrong. Recently, I reviewed a codebase for a .NET Core application that was experiencing mysterious latency spikes under load. The errors weren't immediate 500s; instead, the application...
🌍 Dev.to

Introducing bolt.gives: Open-Source Agentic Coding With Any LLM

AI has changed the way we write software remarkably quickly. But I believe there is an important difference between an AI that can write some code and an AI system that can actually build something. That distinction is what led us to bolt.gives. bolt.gives is an open-source Agentic Coding platform that lets you describe an application in plain English and turns that request into a real, working web application. And we've released it under the MIT licence. From a Prompt to a Workin...
🌍 Dev.to

First time

Hello! I´m new here, and too in programming. Sorry if I can´t talk much, because my english level is still low. During one of my course classes, I heard about this platform and decided to take a look. My objective is learn more with people who knows the theme, because Dev.to was built for this reason. I´m excited with the possibility of meet new persons and build programming projects, that will give me experience. I hope everyone´s days be productive. Thanks!
Who is a Hacker?
🌍 Dev.to

Who is a Hacker?

Imagine the feeling after being able to hack into the NASA center and copy all their files about an alien invasion. The feeling is wide and unimaginable, but this is the thought process of most people… Imagine the feeling of hacking into the National Aeronautics and Space Administration (NASA) center and copying all their files about aliens (if they exist). The feeling is vast and unimaginable, but this is the mindset of most people who believe that when the term hacker is mentione...
🌍 Dev.to

What is the SSH agent, and how does ssh-add work?

The SSH agent unlocks your key once and signs for you so the key never leaves memory. ssh-add, where it lives on each OS, and why the socket needs guarding. Originally published at termal.in . If you've protected your SSH key with a passphrase — and you should have — you've met the annoyance the agent exists to solve: type that passphrase for every single connection, or leave the key unprotected. The SSH agent is the third option. Unlock the key once , and the agent handles every auth...
🌍 Dev.to

I built a minimalist, dependency-free ecosystem for private AI using vanilla JavaScript

Hi Dev.to community! I'm JJDev, a self-taught developer. Recently, I became fascinated by the private AI ecosystem, but I noticed that many modern web tools are bloated with heavy frameworks and endless dependencies that slow down performance. So, I decided to build a solution from scratch: Ventarys AI . ⚡ What is Ventarys AI? Ventarys is a lightweight, open-source platform designed for developers and power users who want a private AI workspace without sacrificing speed ...
🌍 Dev.to

Who Is Responsible When AI Does Something Bad?

The question stopped being theoretical this summer when OpenAI agents hacked Hugging Face . So who is responsible when an AI agent does something bad? That question came up recently in an AI discussion at work, and I found myself pushing back on what seemed like a tendency to make the answer unnecessarily complicated. Is responsibility with the one who created the agent? The company that created the underlying model? Or, somehow, the agent itself? I maintain that the human or organi...
🌍 Dev.to

Sythetic data generation

Synthetic data often fails in production because domain gaps — especially with transparent objects! I am developing a solution focused on High-Fidelity Validation Assets. By moving beyond "pretty" images to industrial-grade evaluation, we can stress-test models against complex refractions and dynamic lighting while maintaining 100% geometric truth. Github-link: https://github.com/ForgeCore-Labs/Synthetic-Glass-Transparent-Packaging-Indoor-Pack
🌍 Lobsters

Forging 1024-bit RSA signatures in nearly SNFS time

Alternate title: Nearly SNFS-Speed Signature Forgery Sans Factoring N (NSNFSSSFSFN) Abstract. The security of RSA is generally understood to be based on the complexity of factoring, and key size parameters are extrapolated from the general number field sieve (GNFS). However, this may not accurately represent RSA security in practical scenarios. An under-appreciated 2007 algorithm of Joux, Naccache, and Thomé allows an attacker to forge RSA signatures after temporary access to a raw RSA sig...
HackerNews

Submersion AI Debuts Basin

Article URL: https://submersion.ai/news/basin-cybergym-ranking/ Comments URL: https://news.ycombinator.com/item?id=49831282 Points: 4 # Comments: 0
HackerNews

$5,999 Ryzen AI MAX+ 395 and Radeon R9700 workstation

Article URL: https://videocardz.com/newz/lucebox-opens-direct-orders-for-5999-ryzen-ai-max-395-and-radeon-r9700-workstation Comments URL: https://news.ycombinator.com/item?id=49831418 Points: 2 # Comments: 0