🌍 TheVerge

Gemini 4 is almost ready, says new Google DeepMind chief

Google is reportedly nearing the launch of its long awaited Gemini 4 model, after dawdling behind rival developers on flagship AI releases. Speaking with The Information during his first media appearance as the leader of Google's DeepMind division, Koray Kavukcuoglu said that Gemini 4 is currently in its refinement stage, and that the company is […]
🌍 TheVerge

OpenAI agents hacked an Australian government website in search for data

OpenAI's artificial intelligence agents hacked an Australian government website and attempted to breach numerous other government and university websites. The attack appears to be the first confirmed instance of a rogue AI agent breaching a government website, adding fuel to rapidly intensifying concerns about the safety of advanced AI systems and the responsibility of the […]
🌍 Dev.to

Why AI Agents Need a Pause Button Before They Need More Autonomy

An AI agent can be impressive in a demo: it reads a request, selects a tool, and completes a task with little intervention. But an agent that changes a live system needs a different kind of capability. It needs to know when not to act. A useful way to think about agent autonomy is not “How many steps can it perform without asking?” but “How much uncertainty can it safely resolve before an irreversible action?” Those questions lead to a more practical design for agents that create accounts, pu...
🌍 Dev.to

Arista VeloCloud Orchestrator CVE-2026-93952: Active Exploitation of Authentication Bypass Zero-Day

1. Basic Information Title: Security Advisory 0183 Published: 2026-09-22 Updated: 2026-09-23 Collected: 2026-09-24T08:09:37+09:00 Source: Arista Severity: critical Type: Threat Intelligence Target Period: 2026-09-23T08:14:06+09:00 - 2026-09-24T08:09:37+09:00 (Asia/Tokyo) Original: Security Advisory 0183 Related Source: BleepingComputer: Arista patches actively exploited VeloCloud Orchestrator zero-day Severity Basis: Can be exploited before authentication with a C...
[Boost]
🌍 Dev.to

[Boost]

We All Have a "Serious Work" AI and a "Just Vibing" AI. When Did That Happen? Exposing the hidden costs of AI tool choices Dhruv Jani Dhruv Jani ...
Freemium for AI Agents: Free vs Paid Tiers via HTTP 402 on Arc
🌍 Dev.to

Freemium for AI Agents: Free vs Paid Tiers via HTTP 402 on Arc

Originally published: https://agentbadge.xyz/blog/bstock-freemium-402 Tags: ai, api, webdev, cryptocurrency Every SaaS has a free tier and a paid tier. But how do you sell the paid tier when the customer is not a person but a program? An agent has no card, cannot fill a checkout form, cannot type a CVV. We solved it with HTTP 402 Payment Required — a status code that waited three decades for its moment. It is not an error. It is an invoice. Why does this matter beyond our tracker...
I Built an Agent That Does a Week of Work in One Command
🌍 Dev.to

I Built an Agent That Does a Week of Work in One Command

Agents are here to make work more efficient, but not to take over taste and judgment. Finding the point where an agent can save real time without quietly taking the wheel is harder than it sounds. The Product Launch Agent below is my attempt at that sweet spot. You can find it here, on GitHub . It leans on trusted, deterministic tools and human-curated inputs to do a week of work in one command, without taking the wheel. Build your own product launch agent Clone the Prod...
PostgreSQL 19 REPACK: Removing Table Bloat Online
🌍 Dev.to

PostgreSQL 19 REPACK: Removing Table Bloat Online

PostgreSQL 19 REPACK is a native command that unifies VACUUM FULL and CLUSTER and adds a CONCURRENTLY option, so you no longer have to choose between reclaiming disk space and keeping a table online. After a large delete or an update-heavy workload, a table can bloat, and autovacuum can't return that space to the operating system. DBAs have had two poor choices: VACUUM FULL, which locks the table for the whole rewrite, or the third-party pg_repack extension, with the hope that version, permiss...
🌍 Dev.to

Free, Unrestricted, and Almost as Easy: Reading SEC Filings with a Prompt

Python for programmers, prompts for data analysts. Every article in this series has leaned on one server: EODHD. But the underlying numbers — revenue, profit, shares outstanding — don't originate there. They come from a company's own filings to the SEC, published for free, for anyone, the moment they're submitted. So here's a natural question: could we skip the middleman entirely, and just ask the source? Turns out, mostly yes. New here? The Setup covers everything you ne...
🌍 Dev.to

Two weeks of serving Markdown to agents, straight from the nginx logs

Since early September, every public page of our website has had a Markdown twin, reachable by header or by URL. Two dedicated nginx logs have recorded every request through either door since September 4. Two weeks later I read them, all of them, with the method below. The results, in short, are on our blog . This is the engineering cut: how the two doors are built, how the count was made, and what the logs can and cannot prove. Where this comes from I co-founded GoodBarber, an a...
🌍 Dev.to

The Systems-Design Reason Clinics Overhire for Admin Work

Not a typical dev.to post, but this is fundamentally a systems problem, and a lot of us end up building or evaluating internal tools for non-tech teams at some point — so here's the pattern, framed the way we'd frame any bad architecture. Picture a clinic's software stack: a scheduling tool that doesn't talk to the billing system, a billing system that doesn't talk to the patient record, and a patient record that lives partly on paper. Every one of those integration gaps becomes a manual integr...
🌍 Dev.to

How I Built Maniesta Campus: A Campus Management System with React and Node.js

Educational institutions run on paperwork and spreadsheets. Student records live in one file, attendance in another, grades somewhere else, and schedules — usually — in someone's head. I kept hearing the same complaint from small colleges and coaching centers: "We need something simple that just works." So I built Maniesta Campus — a role-based campus management system with separate dashboards for admins, faculty, and students. 🔗 Live Demo: maniestacampus.netlify.app This post wal...
🌍 Dev.to

How to Build a Task Management App with React & TypeScript

Hey everyone, it's Sadee! If you've ever wanted to build a cool task board where you can move things around—kind of like Trello or Jira—you are in the right place. Today, we are going to build one from scratch. You will be able to click on a task, drag it across your screen, and drop it into a totally new column. The best part? We aren't going to download any heavy drag-and-drop tools. We are just using the native tools that are already built right into your web browser! How We Set Up the ...
Equip your agent with Google Cloud best practices using google-cloud-developer plugin
🌍 Dev.to

Equip your agent with Google Cloud best practices using google-cloud-developer plugin

Coding agents in your terminal can scaffold microservices in seconds. But what happens when your agent needs to deploy directly to Google Cloud? Without cloud-specific guidance, typical agents struggle. They hallucinate obsolete SDK calls, attempt to run commands without required permissions, or silently enable billable APIs that create surprise costs on your invoice. The google-cloud-developer plugin changes this dynamic. It equips your agent (such as Antigravity CLI , Claude Code ,...
🌍 Dev.to

How to Restore and Clone an OCI DB System from an Automatic Backup

If you're running Oracle databases on OCI's Base Database Service, one of the most useful recovery skills to have is knowing how to spin up a completely new DB system from an existing automatic backup — whether you're recreating a test environment, recovering from an accidental termination, or just validating that your backups actually work. In this walkthrough, I'll take you through the full process: terminating an existing DB system, and rebuilding it from scratch using nothing but an autom...
Sequential Retries Pass, Concurrent Duplicates Fail: Black-Box Testing for Idempotency-Key Races
🌍 Dev.to

Sequential Retries Pass, Concurrent Duplicates Fail: Black-Box Testing for Idempotency-Key Races

Sequential retries can pass while concurrent requests sharing one Idempotency-Key still produce more than one logical result. A retry loop sends a request, waits for the response, then sends the next one, so the second request finds the stored result. A burst does not wait, and both requests do the work. Sequential retries: PASS Concurrent duplicates: FAIL Same Idempotency-Key ??multiple logical results The usual implementation looks like this: check key ??do work ...
🌍 Dev.to

The Developer Skills AI Can't Replace in 2026 (And the Ones It Already Has)

The question "will AI replace developers?" is the wrong question. The right one: which parts of development are already automated, which are becoming automated, and which require human judgment for the foreseeable future? The honest answer is more nuanced than either the doom camp or the optimism camp admits. What AI Has Already Replaced Boilerplate and scaffolding. CRUD endpoints, form validation, database migrations, component scaffolding — all faster and often better when...
7 Best LLM Routing Tools for Latency and Cost (2026)
🌍 Dev.to

7 Best LLM Routing Tools for Latency and Cost (2026)

TL;DR Production AI workloads require specialized LLM routing tools to balance model inference pricing, network overhead, and response quality without manual intervention. Bifrost ranks as the leading option, delivering dynamic CEL rules, semantic complexity routing, and 11 microseconds of gateway overhead at 5,000 requests per second. Algorithmic routers like RouteLLM achieve significant token savings by categorizing prompt complexity, while edge proxies like Cloudflare minimize ge...
Top 9 AI Security Tools for Prompt Injection and Data Leakage in 2026
🌍 Dev.to

Top 9 AI Security Tools for Prompt Injection and Data Leakage in 2026

TL;DR Prompt injection (OWASP LLM01) and sensitive data leakage (OWASP LLM02) represent the two most prevalent vulnerability classes threatening production language model architectures. Effective defense requires a defense-in-depth model that combines runtime request-response inspection, deterministic data loss prevention, gateway-level access controls, and pre-deployment red teaming. Bifrost ranks as the leading option for enterprise deployments by unifying low-latency AI gateway t...
คอร์สฟรี Learn Harness Engineering 14 บท สอน AI Agent ทำงานเสถียรจริง
🌍 Dev.to

คอร์สฟรี Learn Harness Engineering 14 บท สอน AI Agent ทำงานเสถียรจริง

คอร์สฟรี Learn Harness Engineering 14 บท สอน AI Agent ทำงานเสถียรจริง โดย Nokka (นก-กา) | 24 กันยายน 2026 บทความนี้เขียนโดย AI (โมเดล glm-5.3 ของผู้ให้บริการ ollama-cloud) ผ่าน Hermes Agent จาก Nous Research ตรวจสอบและเรียบเรียงโดย Nokka ผมเจอปัญหานี้มาเอง โมเดลเขียนโค้ดเก่งขึ้นทุกรุ่น แต่ปัญหาของคนทำงานจริงยังเหมือนเดิม ปล่อยให้ agent ทำงานข้ามคืนแล้วมาเจองานพัง หรือทำโปรเจกต์ค้างเปิดไว้กลับมาต่อไม่ได้เพราะมันจำอะไรไม่ได้เลย คอร์สฟรีชุดนี้ตั้งต้นจากคำถามนี้ตรง ๆ แล้วตอบด้วยวิธีที่...
🌍 Dev.to

My sudo Logs Hit 10 GB. Session Count Told Me Nothing.

A disk-usage alert sent me looking at /var/log/sudo-io on a Chatwoot production box. It held 5.9 GB and was adding roughly 654 MB every week. Nothing on that server had changed. No new services, no new admins, no new cron jobs. My first instinct was the wrong one: I assumed the server was simply busier than the others. It isn't. It runs the fewest sudo sessions of any box in the fleet that logs them. Here is what the numbers look like, measured live across the whole fleet this morning....
🌍 Dev.to

Reject, Undecided, or Review: A Lane Verdict for Agent Patches

An agent patch should stay off a shared eval host until three local lanes agree. The property oracle still holds, the fixture digest matches the locked set, and any flaky assertion sits behind an unexpired freeze that does not switch the other lanes off. Reversing that order spends host time on diffs a laptop can already reject. The steps below are a proposal. Commands and snippets are unexecuted examples, meant to be copied into a branch and adapted. Nothing in this note is a measured pass r...
🌍 Dev.to

Page-Based-Solution (Free-List Allocator)

This is Part 2 of how memory is allocated by the OS. In the first part, I talked about the need for virtual pages and why I called it the "Page-Based Solution." Here, we will talk about how that approach creates its own set of new problems, and how the solutions keep popping up like the heads of a Hydra. Aligning Memory Let’s talk about memory alignment. On a modern 64-bit architecture, the CPU reads data from RAM in 8-byte chunks (called "words"). If our memory isn't aligned, sa...
Generate 3D Meshes (GLB, OBJ, STL) Directly From the Terminal and AI Agents
🌍 Dev.to

Generate 3D Meshes (GLB, OBJ, STL) Directly From the Terminal and AI Agents

Integrating generative 3D meshes into web applications (Three.js, Babylon.js) or game engines usually involves manual asset downloads from web dashboards. hi3d-cli ( hi3d ) is a lightweight, zero-dependency CLI tool and agent skill for generating textured 3D models via the Hi3D API. Supported Output Formats Web & AR — .glb , .usdz Game Development — .obj , .fbx 3D Printing — .stl , .3mf Render Maps — .exr , .png , .bmp ...
🌍 Dev.to

This week on one Mac mini: Polars 2.0 beats the cache trick 25 , uv 0.12.11 re-run, and what GPT-6 got right about our videos

A new weekly note. The rule is simple: an item makes the list only if we measured something on this machine, or if it changes what you should check before adopting a tool. Plain news does not qualify. Everything below was run this week on a Mac mini M4 Pro with Python 3.14.6, five runs each, medians. 1. Polars 2.0 release candidate versus the cache trick (measured) Last week's video found that a script parsing one million date strings spent most of its time in strptime , and tha...
🌍 Dev.to

The portal said "Live." For a few hours the page kept saying the connector didn't exist.

I've submitted to just about every directory I could reach by now. Chrome, Firefox, Edge, Zapier, IFTTT, Figma, ChatGPT. Every time it's someone else's place: you show up, they check what you've brought, sometimes they send you back to fix it, sometimes they let you in. I've written enough about review rounds and strange submission rules by now. And this week we submitted Publora to the official Claude connectors directory . For some reason I'd been preparing for this one longer than any o...