Caching Cognito M2M Tokens With Lambda, DynamoDB, and WAF
🌍 HackerNoon

Caching Cognito M2M Tokens With Lambda, DynamoDB, and WAF

A Lambda in front of Cognito's token endpoint caches tokens in DynamoDB, reducing the number of requests to Cognito and saving money. By adding AWS WAF to block direct requests to Cognito, the solution ensures that all requests go through the Lambda, further reducing costs.
HackerNews

The Bayeux Tapestry: Woven by the Victors

Article URL: https://www.historytoday.com/archive/out-margins/bayeux-tapestry-woven-victors Comments URL: https://news.ycombinator.com/item?id=49823113 Points: 16 # Comments: 0
🌍 TheVerge

Microsoft puts Brad Smith in charge of communications

Microsoft is moving its communications group out of marketing and into its Corporate, External, and Legal Affairs (CELA) organization. The surprise change will see Microsoft vice chair and president Brad Smith oversee communications, while the company searches for a replacement for Frank Shaw, chief communications officer, who is departing later this year. Microsoft CEO Satya […]
🌍 TheVerge

Qualcomm’s new ‘Elite’ sound chip might finally deliver the Wi-Fi earbud dream

What if your wireless earbuds - or audio glasses - could stream high-quality lossless audio that doesn't cut out when you leave your phone on the bedside charger or buried in the couch? Qualcomm's new Snapdragon Sound Elite Gen 2 is its first to integrate "micro-power Wi-Fi 6E" right into the chip, so they can […]
ersioning Business Semantics for Enterprise AI
🌍 Dev.to

ersioning Business Semantics for Enterprise AI

Your SQL can be perfectly reproducible while your business meaning is not. Suppose a user asks: What was revenue in Q1? Your data agent resolves Revenue , generates valid SQL, executes it successfully, and returns a number. Now suppose Finance changed the definition of Revenue in June. The old definition was: Revenue v3 = Recognized Revenue The new definition is: Revenue v4 = Recognized Revenue - Approved Adjustments When the same user ask...
🌍 Dev.to

The Last Script Standing: Why Government Modernization Fails When File Replication Depends on Institutional Memory

Consider a familiar modernization scenario: a script runs at 2:13 each morning, moves files between systems built in different eras, and sends an email only when something goes badly wrong. Its author has retired, and its comments describe servers that no longer exist. Yet an important workflow still depends on it. Government modernization programs often concentrate on the visible legacy application while overlooking these quiet connective mechanisms. The risk is not that scripting is inheren...
🌍 Dev.to

What Broke When I Moved Client Projects to the Next.js App Router

Moving client projects from the Pages Router to the Next.js App Router sounded like a routine upgrade — until it wasn't. Every migration I've done has surfaced the same handful of breakages. Here are the four that cost me real hours, and how I fix them now. 1. getServerSideProps doesn't exist anymore The first thing that breaks is data fetching. There is no getServerSideProps in the App Router — server components fetch directly: // app/dashboard/page.jsx export d...
🌍 Dev.to

Plugin4Shell: When Your AI Coding Agent Auto-Updates Straight Into RCE

Zero-click RCE. Four major AI coding agents. No user interaction required. Let's talk about Plugin4Shell. The Incident In September 2026, researchers disclosed a vulnerability class dubbed "Plugin4Shell" affecting Claude Code, Codex, Gemini CLI, and Copilot. The flaw lives in how these agents verify SHA-pinned plugin commits pulled from marketplaces. Here's the setup: you install a plugin, the agent pins it to a specific commit SHA, and in theory that SHA is your guarantee tha...
🌍 Dev.to

Tweet Deletion Tools Compared on Privacy: On-Device or Uploaded

-- title: "Tweet Deletion Tools Compared on Privacy: On-Device or Uploaded" description: "Two deleters can produce an identical result and treat your data in opposite ways. Three architectures compared by data flow, permission scope and retention promises, plus a checklist you can put to any vendor." tags: ["privacy", "security", "twitter", "tools"] canonical_url: https://digital-footprint-health.shop/blog/tweet-deletion-tool-privacy-compared Two tools can both remove 2,000 ...
🌍 Dev.to

@Cron fires on every replica. I found out the boring way

How an in-process scheduler turned one nightly job into N duplicate writes, and why I moved scheduling out of the app entirely. I was looking at staging data when I found two of something that should only ever exist once: two identical records for the same entity, same start date, created seconds apart. Not corrupted, not half-written. Just two, where there should have been one. The job that creates those records runs once a night. So why did it run twice? Because we run more than one ...
🌍 Dev.to

I'm building a credit score for code health — starting with vibe coders

The fastest-growing codebase in the world right now is code nobody fully read. AI writes it, humans ship it, users depend on it. I think "did the AI write good code?" is about to become a real question teams ask. Code Sonar is my answer: deterministic scoring (same repo, same score, every time — no vibes in the scoring), 8 checks, results in seconds, findings written for humans. Free scans coming while I build in public. If you've shipped AI-written code, I'd genuinely like to know what sc...