🌍 Dev.to

The GITHUB_TOKEN in Your .zshrc Is a Time Bomb (And So Is Your .npmrc)

If you've got a GITHUB_TOKEN sitting in plaintext in your .zshrc right now, this one's for you. And if you've never actually looked inside your .npmrc , I'd bet money there's an _authToken=npm_xxxxxxxx line in there that's been quietly rotting since you set it up two jobs ago. I found both of these problems in my own dotfiles last week, despite having the 1Password CLI installed for months. Turns out "having the tool" and "actually using the tool" are very different states of being. ...
🌍 Dev.to

Three Sudoku solvers, one engine, 34,000 fewer guesses

The Sudoku generator that ships in my puzzle game is a plain randomised-backtracking solver. It works, but "it works" is a vibe, not a number. So I pointed three different solving strategies at the exact same engine and counted how hard each one actually has to search. The engine and the benchmark are open source . Every node count below is deterministic — clone it, run node benchmark.js , and you get the same figures I did. The setup A grid is a flat array of 81 cells (...
🌍 Dev.to

Blocking an AI agent's tool call before it runs: runtime verification with LTL3

AI agents that call real tools — deleting records, sending payments, editing files — don't usually fail by misunderstanding instructions in bulk. They fail by issuing one bad call in an otherwise-correct session. An eval score of 98% is no comfort if you're the run in the 2%, and no eval can tell you, in the moment, whether the call on the stack right now is that one. That's the specific problem I built ACEL to solve: a runtime verification layer that sits between an agent and its to...
🌍 Dev.to

Compliance-grade pentesting is a scan wearing a suit

You paid for a PDF document that was passed off as a penetration test. You spent money on a penetration test. All you received was an export from a scanning tool that had the consultant's logo on the report. 🎭 The suit doesn't fit Essendis hit the nail on the head in their 2026 pricing guide. They state the market is flooded with "cheap engagements that are a vulnerability scan wearing a suit." That line is stuck in my head. Because that's the one thing founders can actuall...
🌍 Dev.to

Upgrading the judge ends one score series and starts another

There is a mature literature on what happens when you swap one measuring instrument for another, and it is not in machine learning. The standard treatment is Bland and Altman, "Statistical methods for assessing agreement between two methods of clinical measurement", Lancet 1986; i: 307-310. Their core move is the one worth borrowing: do not correlate the two instruments. Plot their difference against their average , and look at the shape. Correlation is the wrong tool because it measure...
🌍 Dev.to

asyncio.Queue

Why Does Python Need asyncio.Queue? INTRODUCTION After understanding asyncio.Semaphore and asyncio.Lock , I started wondering how real backend systems handle thousands of incoming requests. A semaphore limits how many coroutines can execute simultaneously. A lock protects shared data. But another question came to my mind. If all the workers are busy, where do the remaining tasks wait? Imagine thousands of users uploading images or placing orders simultaneou...
🌍 Dev.to

Bull Queue vs BullMQ: A Practical Comparison for Node.js Teams

Every Node.js application that sends emails, processes images, generates PDFs, syncs data with third-party APIs, or runs any kind of deferred work eventually needs a job queue. Handling that work inline, inside an HTTP request handler, is a recipe for timeouts, dropped jobs, and unhappy users. That's where a Redis-backed queueing library comes in, and in the Node.js ecosystem two names dominate the conversation: Bull and BullMQ. Choosing between them is one of the most common architecture decisi...
🌍 Dev.to

Sending HPE Morpheus audit logs to a SIEM: a working setup

HPE Morpheus Enterprise writes its audit trail through two separate internal loggers, and you need both of them. What follows is the config we run to produce those logs and forward them to a SIEM as CEF over syslog, with no plugin, no scheduled job and no API polling involved. Tested on Morpheus 9.0.x and 8.1.x, RHEL 8, forwarding into QRadar. Know which logger writes what The documented CEF export gets you a working audit feed with this logger: <logger name= "c...
🌍 Dev.to

AI-Copywriter Balances Algorithms with Authenticity in Marketing

The AI-Copywriter project on GitHub, developed by user mikiarlo3, merges artificial intelligence with traditional copywriting skills to produce marketing materials that feel human. With nearly 1,000 stars on GitHub, this Python-based project draws attention not only for its technical features but also for its ambition: to navigate the dichotomy between algorithmic generation and authentic human expression in marketing content. Understanding the Technical Architecture At its core,...
🌍 Dev.to

Reducing False Positives in AppSec Triage with Paraconsistent Logic (LPA2v)

I built this for my undergraduate thesis (Software Engineering) and wanted to share it here because I think the technical trade-offs are more interesting to this audience than the headline numbers. The problem An AppSec pipeline running SAST, SCA, and DAST on every commit generates more findings than any team can realistically triage. Most of them aren't real vulnerabilities — test code, an already-mitigated dependency, a scanner that flakes between runs. But each tool decides, i...
🌍 Dev.to

Como criei uma biblioteca HTTP de baixa alocação para ESP32 e o que aprendi com usuários globais

Desenvolver aplicações conectadas em sistemas embarcados como o ESP32 frequentemente esbarra em um problema clássico: gerenciamento de memória RAM e fragmentação de heap . Ao consumir APIs REST tradicionais no ecossistema Arduino/ESP-IDF, o fluxo padrão quase sempre envolve: Instanciar o HTTPClient nativo; Realizar a requisição e baixar o payload inteiro em uma String dinâmica via http.getString() ; Alocar um documento na heap via DynamicJsonDocument (ArduinoJson); Desseria...
🌍 Dev.to

I Replaced kube-proxy with eBPF in Production (And Why My Monitoring Went Blind for 6 Hours)

I Replaced kube-proxy with eBPF in Production (And Why My Monitoring Went Blind for 6 Hours) From a "simple" Cilium upgrade to a 6-hour outage where my SIEM couldn't see a single packet — the real story of deleting kube-proxy, the eBPF program that saved me, and why the docs never warned me about the one metric that matters. The Setup It started with a cilium upgrade command I ran on a Tuesday evening. My homelab cluster — the same 4-node bare-metal setup I wrote ab...
HackerNews

Launch HN: ProvenMetal (YC S26) delivers circuit boards in days instead of weeks

Hey HN, we’re Will & Johnny from ProvenMetal ( https://provenmetal.com ). You send us design files or specs and we give you assembled boards domestically in days. The US produced 30% of PCBs globally in 2000, now they produce 4%. Chinese manufacturers have completely dominated this space at 55% of global production. Now, the need for a domestic PCB supply chain is higher than ever before, yet the infrastructure has been dissolving over the last 2 decades. What is left is mostly small family run ...
HackerNews

Zapscape (CVE-2026-64561)

Article URL: https://github.com/V4bel/Zapscape Comments URL: https://news.ycombinator.com/item?id=49198843 Points: 44 # Comments: 6
HackerNews

GitHub Is Experiencing Difficulties

Article URL: https://www.githubstatus.com/?d=2026/08/06 Comments URL: https://news.ycombinator.com/item?id=49199094 Points: 77 # Comments: 49
HackerNews

Taste Is All That's Left

Article URL: https://notashelf.dev/posts/taste-is-all-thats-left Comments URL: https://news.ycombinator.com/item?id=49199346 Points: 28 # Comments: 20