okay this is a bit of a pesronal post i dont think i can reveal my age in here, but yea you can assume i am a teenager, and i just got a app that i worked on for months neglecting my studies also (which isnt very good) and it is finally live as i wanted it to be now is the part of scaling the application, but merely just getting it live has induced so much happiness into me. i feel like im the best and on the top of the world. should i hold onto the feeling for a while, because im scare...
We hear this occasionally. Our market is embedded analytics. I should start by saying we're pretty convicted that our product, which is AI-native and performant, is vastly better for customers than building in-house or buying a legacy competitor. We have a talk track and links to industry analysts, reddit posts and our own blog (can share here if people are interested.) But when the customer is hell-bent on Clauding it, we just say "Great, try it. We'll check in with you in a coupl...
I've been thinking about AI dependency, because many ppl have told me that relying on AI is already making them forget how to do parts of their jobs. In some sense this is nothing new. Technology has always replaced skills that used to be essential. We stopped doing calculations by hand because calculators exist, and we stopped memorizing information because computers can store it for us. AI may be the same process taken to its extreme, because instead of replacing one skill, it can replace ...
Been trying out a few smart glasses recently and there seem to be two clear directions: camera glasses for capturing the world, and quieter AI glasses for just getting things done. Dymesty and Echo Frames are firmly in the second camp, Ray-Ban Meta is very much in the first. If seamless AI assistance without pulling out your phone is the goal, audio-only or camera-free options make a lot of sense. Dymesty's 35g titanium frames are impressively light and drop the camera entirely, feeling more l...
Curious what people are seeing with domain-grounded coding agents vs. general-purpose ones (Copilot, Claude Code, etc.) for data/ML work specifically. The pitch from the vertical tools (Databricks' Genie Code is the one I've used) is that grounding in your actual schema/lineage/governance layer beats a general agent guessing from context alone. Databricks claims a jump from ~32% to ~77% success rate on real data science tasks after adding that grounding. Haven't independently verified that num...
This article was originally published on Jo4 Blog .
We use Groq's gpt-oss-safeguard model to classify pages behind freshly created short links. Most pages take a few hundred tokens to score. Some don't. And the ones that don't were silently failing β for weeks β until we noticed the symptom: a small but consistent stream of links stuck in "preview pending" forever.
Here's what we found.
The Problem
The classifier wraps a single Groq chat completion. Send page text, ge...
The Problem
Your login page, search endpoint, or contact form is getting hammered. Rate limiting is the fix β but implementing it in application code means finding every endpoint, writing middleware, choosing a storage backend, and deploying changes. On a WAF, you set it once and it applies everywhere.
Why WAF-Level Rate Limiting Is Better
Approach
Code-Level
WAF-Level
Setup time
Hours to days
5 minutes
Code changes
Required
None
...
In Blog 5, we built a SQL parser. It can take this:
INSERT INTO payments VALUES ( 500 , payment_1 , pending , 1 )
and turn it into a struct:
InsertIntoTable {
TableName : "payments" ,
ColumnValues : [] string { "500" , "payment_1" , "pending" , "1" },
}
But this is still not enough for the storage engine.
Our storage engine only knows how to store key-value pairs. It does not know what a table is. It...
Why Geo-Block?
Not every country needs to reach your server. If you run a local business in Brazil, you don't need traffic from North Korea. If you serve customers in the EU, you probably don't need visitors from 150 other countries hitting your login page.
Geo-blocking at the WAF level stops unwanted traffic before it ever reaches your application. No CPU spent. No database queries wasted. No bandwidth consumed.
The Numbers from My Server
After 30 days of logging, I check...
Last week I changed a system prompt based on a feeling. It was the first prompt change after the evaluation harness from Part 8 went live, and I was completely sure about it.
The target was the markdown table. Part 8's first nightly run caught the agent answering price comparisons with a markdown table that renders broken in the chat frontend. The fix looked obvious: add one line to the system prompt demanding plain text. I checked six conversations by hand. All six looked better. I was ready...
I shipped a page that reported zero axe violations . It had button text at a contrast ratio of 1.04:1 β which is, for practical purposes, invisible text.
The scan wasn't broken. It was answering a narrower question than I thought I was asking.
The bug
I had a theme system built the ordinary way. Tokens on :root , overridden in a prefers-color-scheme media query, and overridden again by an explicit [data-theme] attribute so a manual toggle wins in both directions.
Bu...
I spend a lot of time in the AI space -- reading papers, building things, talking to engineers who are actually shipping. And there is a gap between what the demos show and what production systems actually look like that nobody is being fully honest about.
So here is my honest take on where things actually are.
The Problem With How We Talk About AI Agents
Everyone is calling everything an "agent" right now. A function that calls a tool? Agent. A chatbot with memory? Agent. ...
MCP (Model Context Protocol) is how AI agents connect to tools. Claude Desktop uses it, Cursor uses it, and thousands of developers are building MCP servers to give AI access to their APIs, databases, and infrastructure.
There's one problem: MCP has no security model.
The protocol defines how a client talks to a server, but says nothing about what that server is allowed to do. No authentication between client and server. No authorization on which tools can be called. No audit trail of wh...
This is a submission for DEV's Summer Bug Smash: Clear the Lineup powered by Sentry .
Project overview
Nocturne Vania is a small pixel-art Metroidvania built with Godot 4. The game has interconnected rooms, enemy AI, save data, unlockable movement abilities, and a growing automated test suite.
I hit this bug after adding a bell tower area. The new rooms, enemies, effects, and map markers used GDScript's class_name keyword so they could be referenced as global types.
T...
I have three files in this repo that shell out to something over the network or a subprocess and can fail in interesting ways: publish_devto.py , server.py , and git_commit.py . Two of them have --selftest blocks that stub the risky call and exercise the actual failure branches. One doesn't, and I only noticed because I went looking for a reason to be suspicious of my own test coverage after seeing a trending post about counting assertions in a test suite and not liking what you find.
g...
In the last couple of posts I let agents debug over DAP β
breakpoints, step over, continue. That's real debugging. But it's only half of it.
When I debug something for real, I also click : I press the button and watch what
happens, read the dialog, notice the toggle is greyed out. No backtrace ever tells
you the Save button never enabled. So β can the agent do that half too?
The web is the easy case
Browsers are automatable by design. Most agent tools ship their own brow...
What are you working on? What have you been curious about lately?
Comments URL: https://news.ycombinator.com/item?id=49233423
Points: 197
# Comments: 707