🌍 Dev.to

How to Detect Ransomware Activity on Linux with eBPF

The shape of a Linux ransomware hit Ransomware on Linux does not usually announce itself with a GUI. It looks like a normal process that, in a short window, opens a large number of files for writing, writes to them, and renames them to a new extension. The signatures are always new; the shape is stable. That shape is what eBPF is built to score. This is the same material I wrote up in ebpf-ransomware-monitor-lessons , but here I focus on the detection steps you can implement yo...
🌍 Dev.to

Our AI agent lives in team chat. These 4 guardrails keep it from running wild

Most AI agents live in their own window. You open it, explain the context, copy in the bug report, paste the answer back somewhere else. At Pachca we build a team chat app, so we tried the opposite: an agent that lives where the work is already being discussed. Someone @mentions it in a thread, and it reads the conversation, picks the tools it needs, does the work and replies in the same thread. Here's how it's put together, and the guardrails we added so that a program with tools and API ...
🌍 Dev.to

Fleet Monitoring for Linux: Managing 100+ Servers Without Kubernetes

The misconception "Fleet monitoring = Kubernetes monitoring." It is not. Kubernetes is a scheduling/orchestration control plane that some fleets happen to use. Most Linux fleets — edge, bare metal, on-prem, air gaps, mixed distros — are just hosts that need watching. You should not have to stand up a cluster to watch them. The right mental model: an agent per host (one static binary), a shared event sink , and one dashboard keyed to a per-host identity that survives re-imaging....
LLM - RAG - Implementation
🌍 Dev.to

LLM - RAG - Implementation

What you need first ? Load PDF Split PDF --> The output is Chunks. Build Vector DB ( Input will be CHUNKS ) --> Also need instance or object to Query. Retriever Augment or Build Prompt Generate_answer --> ask the LLM --> Groq RAQ Query Things Needed Embedding --> nomic-embed-text ( Model ) Install Ollama > llama --version ollama version is 0.40.6 > ollama li...
🌍 Dev.to

Linux Process Monitoring: From /proc to eBPF

Three generations Linux process monitoring moved through three generations, and most orgs are still on generation two while reading alerts from generation three. Generation Mechanism Strengths Weaknesses 1. /proc polling read /proc/<pid>/stat every N seconds trivially portable, no deps lossy, high overhead at scale, no events 2. ptrace + exec hooks strace -style attach precise, per-syscall stops the world on every syscall, no fleet...
🌍 Dev.to

n8n, Zapier or a Python script? How to choose for a small automation

The problem You have a repetitive task: copying form entries into a spreadsheet, sending a message when a row changes, or pulling data from one tool into another. You know it should be automated. Then you hit the first real decision: do you use Zapier, n8n, or write a Python script? All three can work. The wrong choice usually costs you time later, not on day one. Here is a simple way to pick. Start with four questions 1. How many steps, and how much branching? If the f...
🌍 Dev.to

Lessons Learned Building a Multi-Platform Publishing Tool with Fastify

I've been building a publishing tool , and I chose Fastify for the backend. The reasoning was simple: official plugins (jwt, cookie, cors) cover all the essentials, the performance reputation is solid, and TypeScript support is complete. Now that the P0 end-to-end flow is running, here are the pitfalls I hit along the way. 1. The second argument to register is not what you think The most subtle pitfall. I wanted to protect a whole group of business routes with authentication, s...
Exposing 11 public data sources to LLM agents through one MCP server
🌍 Dev.to

Exposing 11 public data sources to LLM agents through one MCP server

An open-source example of how to combine company context, financial disclosures, and source attribution in an AI application. AI agents are getting increasingly capable at reasoning about complex questions. But when those questions depend on external information, the challenge often isn't the model. It's the data. Consider a seemingly straightforward request: "Research this company, explain what it does, and summarize what its regulatory filings tell us." An AI agent needs to br...
🌍 Dev.to

Ping, traceroute and Path MTU on Android without root or the NDK

When I started porting my iPhone network tools to Android, I assumed ping, traceroute and Path MTU were off the table. ICMP needs a raw socket, a raw socket needs root, and without root the options I could see were shelling out to /system/bin/ping or timing TCP connects and calling it ping. Then a simple question stopped me: ping uses ICMP, which has no ports, so why was I planning around TCP ports for it? I had no good answer, so I went and checked: $ adb shell cat /proc/sys/ne...
🌍 Dev.to

How much VRAM do open LLMs really need? Real GGUF sizes for 35 models (October 2026)

"Parameters × bits ÷ 8" is the rule everyone quotes for how much GPU memory a model needs. It gets you in the right neighbourhood and then lets you down exactly where it matters: on the card that is 2 GB too small, or on the 32k-token chat that suddenly no longer fits. So I stopped estimating and pulled the numbers from the source for 35 current open models: Weights : the real size of the published file — GGUF builds by unsloth, ggml-org, bartowski and the model authors (Q4_K_M unless ...
🌍 Dev.to

What we learned building a paid inbox you can self-host (Go + Next.js + Postgres)

We built Hotly, an inbox where people pay to send someone a note and that person replies when they have time. It started as a product for one creator whose DMs had become unmanageable. This month we open-sourced it under Apache 2.0, so anyone can run their own. This isn't a launch post. It's the handful of decisions that shaped the code, and why we made them. 1. One person per install The obvious design is multi-tenant: one database, many creators, a creator_id on every row....
🌍 Dev.to

Rank Math PRO malware: puerta trasera en WordPress

El Rank Math PRO malware dejó una puerta trasera en WordPress en los sitios que actualizaron el complemento de pago entre la tarde del 15 de octubre y la madrugada del 16. La copia dañada llegó por el canal oficial de descarga, con el número de versión de siempre, y por eso el número solo no dice si un sitio quedó expuesto. Rank Math publicó su aviso de seguridad el 16 de octubre y acotó el problema: paquetes de la versión 3.0.123 servidos entre las 20:02 UTC del 15 de octubre y las 07:12 UTC ...