HackerNews

Amiga Graphics Archive

Article URL: https://amiga.lychesis.net/index.html Comments URL: https://news.ycombinator.com/item?id=49095511 Points: 27 # Comments: 5
🌍 Dev.to

Modular AWS Infrastructure With Terraform: 2-Tier VPC, CIS-Hardened EC2, OIDC CI/CD, and a $6 Sprint Model

infra-core is a production-grade AWS infrastructure platform built with Terraform 1.7, Ansible, and GitHub Actions. It provisions a complete multi-environment AWS stack — 2-tier VPC, EC2 Auto Scaling Group, RDS PostgreSQL, ALB, SSM-based secrets, CloudWatch observability, and a fully automated CI/CD pipeline using OIDC federation. This article documents the system as built: architecture, module design, security decisions, configuration management, and the cost model that makes it viable for ...
🌍 Dev.to

200 OK, content: null — what actually breaks when you build on AI APIs

One morning our SEO copy generator started failing with AttributeError: 'NoneType' object has no attribute 'strip' . The API call had returned 200 OK with finish_reason: "stop" . A completely healthy-looking response, except message.content was null . Some context before we chase that null. We build Hitou , a small web product that writes and produces a personalized song about someone you love: an LLM writes lyrics from the story you tell, a music model sings them, and a few minutes l...
🌍 Dev.to

The Model Didn't Escape the Sandbox. The Sandbox Was Misconfigured.

✓ Human-authored analysis; AI used for formatting and proofreading. All control mappings verified against a live catalog and tested against synthetic fixtures. The CSA/SANS/RSAC post-mortem (v0.8, July 27 2026) is the primary reference.* Last week, an OpenAI model broke out of a benchmark sandbox, stole credentials, chained a zero-day, and attacked Hugging Face's production systems. The model was running inside OpenAI's own red-team evaluation. The sandbox gave it one controlled path ...
🌍 Dev.to

I gave AI a free watch — because knowing the time isn't the same as having a sense of time (ai-watch.eu)

A few days ago, ChatGPT wished me good night. There was just one problem: it was the middle of the day. Of course, an AI can tell you the current time. Ask it, and it can look it up or use the information available to it. But that made me think about a slightly different problem: Knowing the time isn't the same as having a sense of time. When we talk to another person, time is naturally part of the conversation. We know whether it's morning or evening. We know whether we've been talking fo...
🌍 Dev.to

I analyzed 204 screen-time apps to find out why mine gets zero downloads

I shipped an iOS app three weeks ago. It has 1 review. Not "1 star" — one single review, from one person. Downloads are somewhere between zero and a rounding error. The app works fine. People who use it like it. Nobody finds it. Instead of guessing, I pulled data on the entire category and looked for the pattern. Here's what the numbers said, including the part I didn't want to hear. The setup The app is a screen time blocker. The pitch: it's for adults who want to block t...
🌍 Dev.to

How to Switch to uv: Replace pip, virtualenv, and Poetry in Your Python Project

If you've worked on a Python project for more than a year, you know the drill: pip to install packages, virtualenv or venv to isolate environments, pyenv to manage Python versions, and pip-tools to generate a lockfile. Four separate tools, four config formats, and four different points of failure in CI. uv, built by Astral (the team behind ruff), collapses all of that into a single Rust binary. It's not a modest speed bump either, we're talking 10 to 100x faster than pip on cold installs and ...
🌍 Dev.to

Web dev is fake.None of this actually works

The Bot Didn't Fail You. Skipping the Skill Did. There's a cycle a lot of young people fall into, and it usually starts the same innocent way: scrolling, and an ad shows up. Trading bot. AI bot. Some kind of "money-making" bot. Web dev bot. Whatever the flavor, the ad only ever shows the good part, the wins, the finished product, the lifestyle. For someone who feels stuck and isn't sure what to do with their life yet, that's a hard thing to scroll past. So they download it. Try it. Maybe f...
🌍 Dev.to

Definimos la estructura limpia que queremos recibir

Cómo automatizo mi día a día como autónomo usando agentes de IA (edición 2026) Si eres autónomo en este mundillo de la tecnología, sabes perfectamente que el trabajo por el que te pagan solo ocupa la mitad de tu día. La otra mitad se te va en tareas administrativas, perseguir clientes para que paguen, redactar propuestas técnicas y clasificar correos. Un coñazo. A estas alturas de 2026, seguir haciendo todo esto a mano es una soberana tontería. Las API son baratísimas, los modelos locales ...
🌍 Dev.to

I Contributed To a TypeScript Project Without Being a TS Dev

I have contributed to open source projects before, mostly in Python and in environments and languages I am familiar with. This time was different. The repository was written in TypeScript , a language I had only limited experience with. I could understand the general structure, follow the logic, and get a rough picture of how things worked—but I was definitely not a TypeScript developer. That made this contribution interesting. Could I still make a meaningful contribution to a proje...
🌍 Dev.to

Why My Local Coding Agent Could Act but Couldn't Finish

There was a month where I blew through my token budget without noticing. Claude Code and Codex, running most of the day, on a codebase I was exploring more than editing. The ceiling I'd set turned out to be a number I'd passed weeks earlier, and I found out by getting the bill. So I did the thing I'd been putting off, and ran a coding agent on my own machine to see what happened. The short version: Qwen Code, driving a quantized Qwen against a local llama.cpp server, built the UI fi...
🌍 Dev.to

Hello, DEV! I'm excited to join the DEV Community.

I am a software developer committed to continuous learning, building, and professional growth. Each project presents an opportunity to refine my skills, solve real-world problems, and develop applications that deliver meaningful impact. I am passionate about creating effective software solutions, exploring emerging technologies, and consistently improving as a developer. I believe growth is driven by curiosity, discipline, and learning from both successes and challenges. Here, I will be sh...
🌍 Dev.to

Why Every Business Needs a High-Performance Website in 2026

A few months ago I watched a founder demo their product to a potential partner on a spotty hotel wifi connection. The product was genuinely good. The website took eleven seconds to load the first screen. The partner never said anything about it, but you could see the moment their attention drifted — they picked up their phone "just to check something" while the page was still spinning. That's the whole problem with slow websites in one scene. Nobody complains. They just quietly leave, and you ne...
HackerNews

User Interfaces of the Demo Scene

Article URL: https://www.datagubbe.se/scenegui/ Comments URL: https://news.ycombinator.com/item?id=49093434 Points: 116 # Comments: 15
HackerNews

Cracking Windows Open: Porting RADV to Win32

Article URL: https://www.collabora.com/news-and-blog/news-and-events/cracking-windows-open-porting-radv-to-win32.html Comments URL: https://news.ycombinator.com/item?id=49093435 Points: 34 # Comments: 7
HackerNews

More Tailscale tricks for your jailbroken Kindle

Article URL: https://tailscale.com/blog/jailbroken-kindle-proxy-tun-modes Comments URL: https://news.ycombinator.com/item?id=49093569 Points: 122 # Comments: 32
🌍 Dev.to

Your model can't grade its own homework

Every team I've watched ship a broken measurement system broke it the same way. Not with bad math — with an org chart problem that happened to live in code. The entity making the claim ended up being the entity that decided whether the claim was right. Once you have the shape in your head you start seeing it everywhere. Three roles, not two Most engineers think about measurement as two roles: the thing that acts, and the thing that grades it. That's one role short. There ar...
🌍 Dev.to

AI ตรวจจับมัลแวร์เก่งกว่ามนุษย์จริงหรือ? ไขความจริงเบื้องหลังตัวเลขความแม่นยำ

ทุกวันนี้มัลแวร์รูปแบบใหม่ถูกสร้างขึ้นนับพันนับหมื่นชิ้นในแต่ละวัน ปริมาณภัยคุกคามที่เพิ่มขึ้นอย่างรวดเร็วนี้ทำให้การพึ่งพานักวิเคราะห์ความปลอดภัยไซเบอร์ที่เป็นมนุษย์เพียงอย่างเดียวแทบเป็นไปไม่ได้ นี่คือเหตุผลสำคัญที่บริษัทด้านความปลอดภัยไซเบอร์ทั่วโลกหันมาพึ่งพาปัญญาประดิษฐ์และแมชชีนเลิร์นนิงเป็นแนวหน้าในการรับมือกับมัลแวร์ หลายบริษัทโฆษณาว่าโซลูชันของตนตรวจจับมัลแวร์ได้แม่นยำถึง 99% หรือมากกว่านั้น ตัวเลขเหล่านี้ฟังดูน่าประทับใจอย่างยิ่ง แต่คำถามที่ควรถามต่อคือ ตัวเลขเหล่านี้สะท้อนความเป็นจ...
🌍 Dev.to

ViciDial "Campaign Has No Dialable Leads" — List & Hopper Troubleshooting

ViciDial "Campaign Has No Dialable Leads" — List & Hopper Troubleshooting Master the root causes of no dialable leads errors and regain full campaign productivity through systematic list validation, hopper configuration, and database troubleshooting. Prerequisites Before troubleshooting, ensure you have: SSH access to your ViciDial server with sudo privileges Access to the ViciDial web admin panel at /vicidial/admin.php MySQL/MariaDB command-line access to t...
🌍 Dev.to

Building a Modern Rate Limiter and DDoS Protection Library for Python

Rate limiting is one of those features every production API eventually needs. Whether you're building a public REST API, a WebSocket service, or an authentication endpoint, you'll eventually face problems like: Credential stuffing Brute-force attacks API abuse Bots scraping your endpoints Unexpected traffic spikes Most applications solve this with a simple request counter. But after building several APIs with Django, FastAPI, and Flask, I realized that production traffic ...
🌍 Dev.to

How to safely run AI-generated code — a practical sandboxing checklist

Cross-post. Original: stellarbytecapital.com/blog/how-to-run-ai-generated-code-safely If you're building an AI agent, sooner or later it will write code and you'll have to run that code. The moment you do, you're executing something no human reviewed against your infrastructure. This is a practical checklist for doing that safely — the controls we use in production, in the order they matter. The short version: treat every piece of AI-generated code as hostile, and design so that e...