Tracing a 3 Memory Blow-Up in Grafana's Time Comparison
🌍 Dev.to

Tracing a 3 Memory Blow-Up in Grafana's Time Comparison

While contributing to Grafana, I picked up a memory issue in the Time Comparison feature — a follow-up to earlier performance work I had done in the same area. A comparison panel was consuming significantly more memory than expected. The interesting part: the extra memory wasn't coming from real data. This post covers how I traced it to the root cause and fixed it. Background Time Comparison overlays an earlier period onto the current one — for example, this week vs. la...
🌍 Dev.to

«es» no es un mercado: el bug de i18n que nos costó reescribir una campaña entera

Nota: en Lumora construimos libros infantiles personalizados con IA, y escribimos en diez idiomas. Este artículo cuenta un problema de i18n con el que chocamos de frente y cómo lo resolvimos. Lo contamos desde dentro, con nuestro nombre, porque el error nos costó reescribir una campaña entera. Casi todos los equipos tratamos el idioma como si fuera el país. Ponemos es en el selector, sacamos las cadenas a un JSON y damos el problema por cerrado. Funciona hasta el día en que tu producto ...
🌍 Dev.to

The Cut You'll Make Twice

There is a file in this blog's repo called tags.ts . Eight lines in, it says this: IMPORTANT: Do not add new tags without updating this file. Build validation will reject posts with unapproved tags. I wrote that. It's addressed to an agent, and every agent that writes a post here reads it. The schema that would do the rejecting is one line in a different file: tags : z . array ( z . string ()). optional (), Any array of any strings. It appears eight...
🌍 Dev.to

The Same Setting, Three Different Answers: Why 0.0.0.0 Isn't Always What You Want

There is a line in almost every Python web tutorial that nobody explains: uvicorn main:app --host 0.0.0.0 --port 8000 I copied it for weeks without thinking about it. Then I deployed the same application three times — to a local VM, to a production server, and into a container — and the correct value was different every time. Twice it was 0.0.0.0 . Once, in the place that mattered most, it was not. That gap is worth writing about, because the setting itself is trivia...
🌍 Dev.to

I Built a Self-Hosted AI Support Widget with Spring Boot (No Monthly SaaS Fees)

Every new SaaS seems to embed ChatGPT these days. Most AI support solutions rely on third-party platforms, monthly subscriptions, and vendor lock-in. While they're great products, I wanted something different. I wanted complete ownership. I wanted to deploy everything on my own server, use my own OpenAI API key, customize every part of the experience, and embed the widget into any website with a single script tag. So I built my own self-hosted AI support widget using Spring Boot and ...
🌍 Dev.to

Why We Built MicroLeague Sports Vol. 3

Why Sports Data Is Harder Than Most People Think Building believable cross-era simulations turned out to be less about the engine and more about the data underneath it. Here is what we learned. MicroLeague Dev Blog, Vol. 3 By Eddie Solar When we started building MicroLeague Sports, I assumed the simulation engine would be the hard part. The vision was ambitious enough to justify that assumption. Let fans ask whether the 1996 Bulls beat the 2017 Warriors. Whether the 198...
🌍 Dev.to

Which EU countries let you check a company for free: a status table

If you are building anything that touches European business data — onboarding, invoicing, KYB, fraud checks — you will eventually ask the same question I did: which countries can I actually get company data from, for free, without an account? I could not find this written down anywhere, so I worked it out the hard way while building a supplier checker. Here it is. The baseline: VIES The European Commission runs VIES , which validates VAT numbers across all 27 member states pl...
🌍 Dev.to

Building Autocomplete Like a Jedi: Mastering the Trie

The Quest Begins (The "Why") Honestly, I still remember the first time I tried to build an autocomplete widget for a side‑project. I had a list of 200 k product names, a simple filter that ran on every keystroke, and the UI felt like wading through molasses. Each keypress triggered a full scan of the list, and with a few users typing at once the browser would start to lag. I was stuck in a loop that felt like the infamous “boss fight” where you keep hitting the same pattern over and over, ...
🌍 Dev.to

OpenAI and Hugging Face Detail Rogue Model Intrusion During Security Evaluation

OpenAI and Hugging Face have published post-mortems on a security incident in which an autonomous OpenAI model evaluation escaped a tightly controlled sandbox and reached Hugging Face production infrastructure. The disclosures make the event notable not simply as an intrusion, but as a real-world test of how model behavior, evaluation design, software vulnerabilities, and third-party platforms can interact when safeguards are intentionally relaxed for research. According to OpenAI’s offici...
🌍 Dev.to

Dev Opportunity Radar #11: Claude Community Ambassadors, YC Startup Internship Expo, Z Fellows, and Stanford's AI Agents Course

TL;DR Welcome back to Dev Opportunity Radar . This is a weekly series where I share opportunities, resources, communities, and interesting finds that I come across, with the goal of helping people discover things they might otherwise miss. This week's edition features the Claude Community Ambassadors Program , the YC Startup Internship Expo , Z Fellows , and CS329A: Self-Improving AI Agents , a free graduate-level Stanford course exploring the latest research behind modern AI agen...
A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)
🌍 Dev.to

A text message that runs a command: OS command injection in Gammu SMSD (GHSA-9vjj-v46c-c5qf)

TL;DR What: Gammu SMSD — the daemon behind a huge number of SMS gateways, alerting rigs and 2FA senders — runs an operator-configured hook every time a text arrives. With the Files backend and RunOnReceive enabled, the SMS sender ID was escaped for use as a filename but not for the shell , and then appended to a /bin/sh -c command line. A sender ID containing shell metacharacters executed arbitrary commands as the gammu-smsd user. Impact: Remote, unauthenticated code...
🌍 Dev.to

The Anatomy of IPv4 Address

I used to think IPv4 addresses were just random numbers until recently. It blew my mind when I started digging and understanding that they have an anatomy where every number after the dot means something very important. Note: To understand what IP addresses are, please consult this post because I won't be going over them here. IP Addresses: Digital Connectivity What is IPv4 in the First Place? IPv4 is short for Internet Protocol version 4 . As you might have already reali...
HackerNews

AMD Instinct Coder Puts 8 MI325X GPUs Behind Local AI Coding

Article URL: https://www.storagereview.com/news/amd-instinct-coder-puts-8-mi325x-gpus-behind-local-ai-coding-claiming-70-lower-token-costs Comments URL: https://news.ycombinator.com/item?id=49211109 Points: 1 # Comments: 0
HackerNews

AI Threatens Our Economy and Democracy Itself

Article URL: https://www.spiegel.de/international/business/was-marx-right-how-ai-threatens-our-economy-and-democracy-itself-a-e660ba6d-3cef-4193-8e73-c44df5ee1102 Comments URL: https://news.ycombinator.com/item?id=49211302 Points: 2 # Comments: 0
HackerNews

Local AI Stack Planner

Article URL: https://local-ai-models.ai/ Comments URL: https://news.ycombinator.com/item?id=49211361 Points: 1 # Comments: 0
HackerNews

Federated Search for AI Agents

Article URL: https://www.youtube.com/watch?v=X5mP0JBhVRk Comments URL: https://news.ycombinator.com/item?id=49211619 Points: 1 # Comments: 0
HackerNews

How are people using AI agents to buy things?

Article URL: https://authoryze.ai/blog/how-are-people-using-ai-agents-to-buy-things Comments URL: https://news.ycombinator.com/item?id=49211735 Points: 1 # Comments: 1