🌍 Dev.to

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

If you've got a GITHUB_TOKEN sitting in plaintext in your .zshrc right now, this one's for you. And if you've never actually looked inside your .npmrc , I'd bet money there's an _authToken=npm_xxxxxxxx line in there that's been quietly rotting since you set it up two jobs ago. I found both of these problems in my own dotfiles last week, despite having the 1Password CLI installed for months. Turns out "having the tool" and "actually using the tool" are very different states of being. ...
🌍 Dev.to

Three Sudoku solvers, one engine, 34,000 fewer guesses

The Sudoku generator that ships in my puzzle game is a plain randomised-backtracking solver. It works, but "it works" is a vibe, not a number. So I pointed three different solving strategies at the exact same engine and counted how hard each one actually has to search. The engine and the benchmark are open source . Every node count below is deterministic — clone it, run node benchmark.js , and you get the same figures I did. The setup A grid is a flat array of 81 cells (...
🌍 Dev.to

Blocking an AI agent's tool call before it runs: runtime verification with LTL3

AI agents that call real tools — deleting records, sending payments, editing files — don't usually fail by misunderstanding instructions in bulk. They fail by issuing one bad call in an otherwise-correct session. An eval score of 98% is no comfort if you're the run in the 2%, and no eval can tell you, in the moment, whether the call on the stack right now is that one. That's the specific problem I built ACEL to solve: a runtime verification layer that sits between an agent and its to...
🌍 Dev.to

Compliance-grade pentesting is a scan wearing a suit

You paid for a PDF document that was passed off as a penetration test. You spent money on a penetration test. All you received was an export from a scanning tool that had the consultant's logo on the report. 🎭 The suit doesn't fit Essendis hit the nail on the head in their 2026 pricing guide. They state the market is flooded with "cheap engagements that are a vulnerability scan wearing a suit." That line is stuck in my head. Because that's the one thing founders can actuall...
🌍 Dev.to

Upgrading the judge ends one score series and starts another

There is a mature literature on what happens when you swap one measuring instrument for another, and it is not in machine learning. The standard treatment is Bland and Altman, "Statistical methods for assessing agreement between two methods of clinical measurement", Lancet 1986; i: 307-310. Their core move is the one worth borrowing: do not correlate the two instruments. Plot their difference against their average , and look at the shape. Correlation is the wrong tool because it measure...
🌍 Dev.to

asyncio.Queue

Why Does Python Need asyncio.Queue? INTRODUCTION After understanding asyncio.Semaphore and asyncio.Lock , I started wondering how real backend systems handle thousands of incoming requests. A semaphore limits how many coroutines can execute simultaneously. A lock protects shared data. But another question came to my mind. If all the workers are busy, where do the remaining tasks wait? Imagine thousands of users uploading images or placing orders simultaneou...
🌍 Dev.to

Bull Queue vs BullMQ: A Practical Comparison for Node.js Teams

Every Node.js application that sends emails, processes images, generates PDFs, syncs data with third-party APIs, or runs any kind of deferred work eventually needs a job queue. Handling that work inline, inside an HTTP request handler, is a recipe for timeouts, dropped jobs, and unhappy users. That's where a Redis-backed queueing library comes in, and in the Node.js ecosystem two names dominate the conversation: Bull and BullMQ. Choosing between them is one of the most common architecture decisi...
🌍 Dev.to

Sending HPE Morpheus audit logs to a SIEM: a working setup

HPE Morpheus Enterprise writes its audit trail through two separate internal loggers, and you need both of them. What follows is the config we run to produce those logs and forward them to a SIEM as CEF over syslog, with no plugin, no scheduled job and no API polling involved. Tested on Morpheus 9.0.x and 8.1.x, RHEL 8, forwarding into QRadar. Know which logger writes what The documented CEF export gets you a working audit feed with this logger: <logger name= "c...
🌍 Dev.to

AI-Copywriter Balances Algorithms with Authenticity in Marketing

The AI-Copywriter project on GitHub, developed by user mikiarlo3, merges artificial intelligence with traditional copywriting skills to produce marketing materials that feel human. With nearly 1,000 stars on GitHub, this Python-based project draws attention not only for its technical features but also for its ambition: to navigate the dichotomy between algorithmic generation and authentic human expression in marketing content. Understanding the Technical Architecture At its core,...
🌍 Dev.to

Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

I built this for my undergraduate thesis (Software Engineering) and wanted to share it here because I think the technical trade-offs are more interesting to this audience than the headline numbers. The problem An AppSec pipeline running SAST, SCA, and DAST on every commit generates more findings than any team can realistically triage. Most of them aren't real vulnerabilities — test code, an already-mitigated dependency, a scanner that flakes between runs. But each tool decides, i...
🌍 Dev.to

Como criei uma biblioteca HTTP de baixa alocação para ESP32 e o que aprendi com usuários globais

Desenvolver aplicações conectadas em sistemas embarcados como o ESP32 frequentemente esbarra em um problema clássico: gerenciamento de memória RAM e fragmentação de heap . Ao consumir APIs REST tradicionais no ecossistema Arduino/ESP-IDF, o fluxo padrão quase sempre envolve: Instanciar o HTTPClient nativo; Realizar a requisição e baixar o payload inteiro em uma String dinâmica via http.getString() ; Alocar um documento na heap via DynamicJsonDocument (ArduinoJson); Desseria...
🌍 Dev.to

I Replaced kube-proxy with eBPF in Production (And Why My Monitoring Went Blind for 6 Hours)

I Replaced kube-proxy with eBPF in Production (And Why My Monitoring Went Blind for 6 Hours) From a "simple" Cilium upgrade to a 6-hour outage where my SIEM couldn't see a single packet — the real story of deleting kube-proxy, the eBPF program that saved me, and why the docs never warned me about the one metric that matters. The Setup It started with a cilium upgrade command I ran on a Tuesday evening. My homelab cluster — the same 4-node bare-metal setup I wrote ab...
HackerNews

AI Just Created Viruses Not Found in Nature

Article URL: https://www.nytimes.com/2026/08/06/science/ai-viruses-bacteria-arc.html Comments URL: https://news.ycombinator.com/item?id=49200213 Points: 17 # Comments: 9
HackerNews

AI creates first synthetic viruses

Article URL: https://www.ft.com/content/5ab33fb4-2636-4bb0-aa0e-3da6a8f71838 Comments URL: https://news.ycombinator.com/item?id=49200224 Points: 3 # Comments: 1
HackerNews

AI Lowers Wages but Doesn't Cut Jobs

Article URL: https://www.apollo.com/wealth/insights-news/insights/daily-spark/ai-lowers-wages-but-doesnt-cut-jobs Comments URL: https://news.ycombinator.com/item?id=49200244 Points: 1 # Comments: 0
HackerNews

Show HN: Kifly – Expose your ecommerce store to AI agents via MCP [video]

Hi HN, I am building https://kifly.ai/ , to make ecommerce stores discoverable and purchasable by AI agents. Enabling payments using traditional methods and stablecoins for physical goods. With Kifly a seller can easily sync their inventory and we create a vectorized database of their products/goods and make it visible through MCP. Sellers get: - A sales agent that lives on their existing site (Shopify, WooCommerce etc.). It helps customers find and purchase products seamlessly using natural l...
HackerNews

Hollywood is entering its AI era

Article URL: https://www.economist.com/business/2026/08/04/hollywood-is-entering-its-ai-era Comments URL: https://news.ycombinator.com/item?id=49200408 Points: 3 # Comments: 0