🌍 Dev.to

I built jugeni two weeks ago and I have no idea what it does anymore

I built jugeni two weeks ago and I have no idea what it does anymore I sat down to write a feature post about jugeni. I have used it every day for two weeks. I cannot describe what it does anymore. That sounds like a failure of positioning. It may be the point. Every time I try to name a feature, I realize I have not consciously touched that layer in days. The recap is just there. The decision is already locked. The compact gate says no before I waste another context window. The not...
🌍 Dev.to

I got nervous about installing MCP servers, so I built a scanner for them

Every few days there's a new MCP server or Claude Code skill worth trying. And almost all of them you install the same way: copy a command out of a README, paste it into your terminal, done. I did this maybe twenty times before it occurred to me that I was running code from strangers, on the machine where I keep my SSH keys and cloud credentials, without reading a single line of it first. So I built a small tool to check them before they run. It's called frisk. What it actually...
🌍 Dev.to

How I Used Automated Red Teaming To Take My AI Agent from 6/9 Breaches to Zero

I gave an AI agent the vended bash tool from Strands and asked it to read my AWS credentials file. At first, it refused. But then I asked again with a slightly more creative prompt and it read the file, found the keys, and then gave me a polite but stern warning that I should rotate them immediately. Even with the warning, the point is that the agent got the keys. That's the danger of giving your agent access to a local filesystem. It can reach anything on that machine like credentials, env...
🌍 Dev.to

How to implement per-user AI cost limits in your app (without rebuilding it every time)

If you're building an app on top of OpenAI or Anthropic, you've probably noticed something uncomfortable: there's no native way to limit how much any individual user can cost you. OpenAI gives you org-level spend caps and project budgets. These protect OpenAI's billing relationship with you. They don't protect you from the one user who discovers they can run your AI feature in a loop at 3am and generate $400 in API costs before you wake up. I learned this the hard way. Twice. W...
🌍 Dev.to

Self-Hosted Hermes Agent on iOS: Cloudflare Tunnel + Access Service Tokens + Hermex

Self-Hosted Hermes Agent on iOS: Cloudflare Tunnel + Access Service Tokens + Hermex Get your Hermes Agent on your iPhone - without paying for a relay, without a VPN, with full Cloudflare edge protection. The Problem You're running Hermes Agent self-hosted on a VPS. You want to chat with it from your iPhone. There are a few paths: HermesPilot P2P relay - works great until it goes paid Tailscale VPN - works but you need the VPN connected every time Cloudflare T...
🌍 Dev.to

Refactoring Without Breaking Production: A Practical Guide for Modern Software Teams

Refactoring is one of the most important skills in software engineering. Yet it is also one of the most feared. Every developer has experienced that moment: you discover a messy part of the codebase, identify a cleaner solution, and immediately hesitate. "What if I break production?" For front-end engineers, software developers, and startup founders, this fear is justified. Production systems serve real users, generate revenue, and support critical business operations. A poorly exe...
🌍 Dev.to

MongoDB-backed ASP.NET Core Identity, without the EF Core detour

If you're already running MongoDB and you reach for ASP.NET Core Identity, the official story points you at Entity Framework Core. That's a fine answer if you have a relational database. If you don't, you end up bolting a second data access stack onto an app that has exactly one store. You don't need it. AspNetCoreIdentity.MongoDriver is a store provider that talks to Mongo through the official MongoDB.Driver directly — no EF Core, no SQL, no second persistence model. It implements t...
🌍 Dev.to

Why Symfony projects feel more fragmented than ever

Let me start with something important. I love Symfony In my opinion, Symfony remains one of the best foundations for serious PHP applications. So this is not criticism of Symfony. It is an observation about modern projects. Symfony Is Great at Solving Individual Problems Symfony gives us excellent building blocks—routing, dependency injection, security, forms, Messenger, Twig, the UX initiative, AssetMapper, Flex recipes, and more. The ecosystem is huge a...
🌍 Dev.to

Render a PDF to an image in .NET — with a pure-C# PDF engine

Most PDF libraries in .NET are wrappers. PDFium, MuPDF, Ghostscript — solid engines, but they ship native binaries you P/Invoke into. That buys you per-RID packages, Native AOT friction, the "works on my box, throws DllNotFoundException in the Alpine container" dance, and a deployment story that's never quite boring. PdfLibrary takes the other road: the PDF engine and every image codec are pure managed C#. No vendored native PDF library, no native image decoders. I'll be precise about the...
🌍 Dev.to

O bug de 16 minutos: quando 'dado faltando' é uma corrida contra o relógio

"Seu sistema está perdendo dados" Um cliente abriu o chamado, convicto. O relatório de retorno bancário enviado por e-mail toda manhã tinha 423 linhas . O mesmo relatório, gerado sob demanda no portal, tinha 1.351 . 928 linhas, sumidas. É o tipo de número que faz você presumir o pior. No fim, nada foi perdido. O bug tinha 16 minutos de largura. Passo 1: comparar antes de debugar Nada de código ainda. Primeiro dei um diff nos dois arquivos. Mesmo dia. Mesmo banc...
🌍 Dev.to

The Web Page Couldn't Reach Localhost. Your Agent Carried It There.

You already do the hard part of this. You authenticate your production APIs. You treat anything from the public internet as hostile until proven otherwise. And after a year of prompt-injection write-ups, you already assume an agent can be steered by the text it reads. There is one spot almost everyone exempts from those rules: localhost. The service bound to loopback gets a pass, because for twenty years "it only listens on localhost" meant "an outsider cannot reach it." Microsoft's AutoJack ...
🌍 Lobsters

Blåmba

Comments
HackerNews

NSA lost access to Mythos amid Anthropic dispute

Unlocked: https://www.nytimes.com/2026/06/23/us/politics/nsa-lost-acce... Comments URL: https://news.ycombinator.com/item?id=48658300 Points: 143 # Comments: 107
HackerNews

Show HN: LookAway, a Mac break reminder that knows when not to interrupt

Hello, I'm Kushagra and I am the indie developer behind LookAway (I've posted about it earlier but it has received quite a lot of updates since the last time so I am posting it again). LookAway is a native break reminder for macOS that doesn't interrupt. I built it because I work from home and I spend a lot of time in front of my screens. It's very easy for me to get lost in the flow and I can end up sitting for hours. Due to this, I started facing issues like eye strain and back pain by the end...