🌍 Dev.to

BrunnerCTF : WordPressed to Root Writeup

Overview The box ships a mostly-stock WordPress 7.0.0 install on PHP 8.2 / Apache, running on a Debian Trixie base image, packaged as a Docker/Kubernetes challenge deployment. Initial access comes through a deliberately vulnerable plugin ( wp2shell ) that hands over a www-data shell. Privilege escalation is the real puzzle: the box is hardened against the usual container-escape and SUID tricks, and the intended path is a real, recent CVE in sudo itself. Recon The challeng...
🌍 Dev.to

Domux: a compact open model for smart-home command understanding at the edge

Voice and chat assistants for the home share a deceptively hard job: turning messy natural language into precise, structured commands. “Make it cozy in here” has to become a concrete intent plus the right slots — which device, which room, which value. Domux is an open model from iFlytek that focuses on exactly this problem: command understanding for smart-home assistants, framed as intent parsing and slot filling. What it is Task: smart-home command understanding — in...
🌍 Dev.to

From Local Folder to Github: Setting Up my First Project With Git and Github: A Guide

Introduction Managing files locally or manually in your own pc gets out of hand very fast. You might find that you have a file named project_final_1 and project_final_2 which are about the same project but named differently depending on the day the projects were updated or modified. Git Bash is a command line tool that records detailed history of your code as it changes over time GitHub is an online tool where the changes in your code are stored remotely. GitHub does not use folders inst...
I Built a Python Bot That Plays Blackjack on Discord's OwO Bot 🃏
🌍 Dev.to

I Built a Python Bot That Plays Blackjack on Discord's OwO Bot 🃏

I Built a Python Bot That Plays Blackjack on Discord's OwO Bot 🃏 An automation experiment in game logic, human-like timing, and why the house still wins. ⚠️ Disclaimer first: This project is for educational purposes only . It's a coding experiment about automation, pacing, and basic blackjack strategy. I'm not promoting gambling, I'm not responsible for any losses, and self-bots can violate Discord's Terms of Service — know the rules before running anything like this. ...
App-like UX in Next.js 16.3
🌍 Dev.to

App-like UX in Next.js 16.3

Building App-like Experiences with Next.js 16.3 A hands-on look at how Next.js 16.3 helps apps feel fast and smooth, more like a single-page app, without losing the benefits of server rendering. Using four demo apps, it shows how features like Instant Navigations, Cache Components, Partial Prefetching, optimistic updates, Suspense streaming, offline retry, and View Transitions work together in real apps ⚡️ Sponsor: Arcjet AI compliance controls Prote...
🌍 Dev.to

From Demo to Production: The Guardrails That Make an AI Agent Safe to Ship

From Demo to Production: The Guardrails That Make an AI Agent Safe to Ship Hook: Most "AI agents" you see on the internet are demos. Here's the single most common reason they never reach production — and a small, open-source harness that gets past it. We are past the phase where the hard part of building an AI agent was calling the model. The hard part now is the 10% nobody talks about: what stops the agent from doing something harmful? I've seen this from both sides — I b...
🌍 Dev.to

从 Demo 到生产:那些真正让 AI Agent 敢上线的护栏

从 Demo 到生产:那些真正让 AI Agent 敢上线的护栏 开场钩子: 你在网上看到的多数「AI Agent」都是 demo。它们之所以上不了生产,原因往往 只有一个 —— 而下面这个开源的小脚手架,专门解决它。 我们已经过了「能调通大模型」就算赢的阶段。现在真正难的是那没人讲的 10%: 是什么阻止 Agent 做出伤害性的事? 我在微软跑过一套约 25 个 Agent 的生产平台,现在也帮团队把 Agent 从笔记本推进到真实用户面前。两边的体会是一致的。 一个不太舒服的真相:能调 5 个工具的聊天机器人, 不是产品 。周末项目和你敢放到客户面前的 系统之间,差的只有三件事 —— 而且全都是不酷、不性感的工程: 你怎么给输出质量打分 (质量门)。 你怎么决定什么时候必须人签字 (审批门)。 你如何让整套东西模型无关 ,不被某个厂商锁死。 所以我写了一个很小的 harness,把这三件事摆在最显眼的位置。它故意做得很小 —— 一小时能 读完 —— 因为价值不在「框架」,在 模式 本身。 ...
🌍 Lobsters

A Friendly Introduction to Racket

The merit of this one compared to others of this kind (a legion) is its conciseness and fast pace. Comments
🌍 Lobsters

eh: a minimalist vi-like editor

eh is a minimalist vi-like editor written in C. It keeps the core vi editing model while adding UTF-8 support, regex search/replace, shell filters, and multi-level undo/redo. An earlier version was a winning entry in the 28th IOCCC (2024), receiving the “Nice accent eh-ward.” Comments
HackerNews

'AI refuser' quit her dream job, and hopes others follow

Article URL: https://www.smh.com.au/technology/this-ai-refuser-quit-her-dream-job-and-hopes-others-follow-20260818-p60pdu.html Comments URL: https://news.ycombinator.com/item?id=49407785 Points: 34 # Comments: 39
HackerNews

The search for consciousness inside AI

Article URL: https://www.economist.com/interactive/briefing/2026/08/20/the-search-for-consciousness-inside-llms Comments URL: https://news.ycombinator.com/item?id=49407858 Points: 2 # Comments: 3
HackerNews

Agentic AI in a Smolbox

Article URL: https://remyhax.xyz/posts/smolbox/ Comments URL: https://news.ycombinator.com/item?id=49407905 Points: 2 # Comments: 0
HackerNews

What do you think of AI website builders?

Article URL: https://blog.webround.com/en/i-built-an-ai-website-builder-and-killed-it Comments URL: https://news.ycombinator.com/item?id=49408013 Points: 1 # Comments: 1
HackerNews

Ask HN: Will AI trigger mass IP protectionism in software?

One of the reasons AI is so "good" at software development is that it is trained on a snapshot of a large corpus of already solved software problems. In the future, wouldn't that make anyone who produces original code become more cautious of sharing it, being aware that it will just be fed into the "hive mind" and they'll never get any attribution or financial gain out of it? Or has the value of code, tools and software become so cheap it doesn't really matter anymore? Comments URL: https:/...