DEV Community • 2026-04-04 00:10

CVE-2026-34544: CVE-2026-34544: Signed Integer Overflow and Out-of-Bounds Write in OpenEXRCore B44/B44A Compression

CVE-2026-34544: Signed Integer Overflow and Out-of-Bounds Write in OpenEXRCore B44/B44A Compression Vulnerability ID: CVE-2026-34544 CVSS Score: 8.4 Published: 2026-04-03 A high-severity signed integer overflow vulnerability in the OpenEXR library's B44 and B44A compression modules allows for out-of-bounds memory writes. This flaw can be triggered during the encoding or decoding of m...

DEV Community • 2026-04-04 00:08

I built a Claude Code plugin that blocks compromised packages before installation

Last week, axios@1.14.1 was hijacked on npm. A few days before that, litellm@1.82.8 on PyPI. Both were compromised versions published through hijacked maintainer accounts. Claude Code would have installed both of them as it doesn't ask any questions. AI coding agents run npm install and pip install on your behalf, and there's nothing checking whether the package is safe before it executes. By th...

DEV Community • 2026-04-04 00:08

Scaling Agentic Engineering Systems: Addressing Technical and Operational Debts for Real-World Deployment

Introduction: The Promise and Pitfall of Agentic Engineering Agentic engineering systems—AI-driven agents that autonomously write code, deploy applications, and resolve incidents—have captivated the tech world with their demo-ready brilliance. Every week, a new showcase emerges, promising to revolutionize engineering workflows. But here’s the paradox: what works flawlessly in a demo c...

DEV Community • 2026-04-04 00:06

Whole-Home Energy Monitoring Changed How I Think About Electricity (And My Wallet Agrees)

I used to pay my electricity bill the way most people do: wince at the number, mutter something about "probably the dryer," and move on with my life. I had no idea what was actually consuming power in my house. I just knew it cost too much. Then I installed a whole-home energy monitor, and within 72 hours, I had dismantled three assumptions I'd held for years. Within six months, I'd cut my electr...

DEV Community • 2026-04-04 00:00

Privacy-First AI: Building a Federated Health Tracker with Flower and Scikit-Learn

In the era of wearable tech, our devices know more about our health than we do. But here’s the billion-dollar dilemma: how do we train a high-performing Federated Learning model to predict sleep quality without compromising user privacy? Sending raw medical data to a central cloud is a massive security risk and a regulatory nightmare. Today, we are diving deep into Privacy-Preserving AI using the...

DEV Community • 2026-04-04 00:00

How I Design Reliable Backend Systems

I've been building backend systems for about five years now. Some handle 10,000+ messages per day. Others serve AI-powered responses in real-time. A few run on a single VPS for under $5/month. Over that time, I've settled on a set of principles that keep my systems predictable and boring in production. Boring is the goal. This post covers the patterns I return to on every project. S...

Hacker News: Front Page • 2026-04-03 23:56

The FAA "Temporary" Drone Restriction Blatant Attempt to Criminalize Filming ICE

Article URL: https://www.eff.org/deeplinks/2026/04/faas-temporary-flight-restriction-drones-blatant-attempt-criminalize-filming-ice Comments URL: https://news.ycombinator.com/item?id=47633947 Points: 12 # Comments: 0

DEV Community • 2026-04-03 23:56

I Left Medicine to Build Legal Tech — Here's What I Learned

Six months ago, I was an MD who couldn't practice in the US after moving from abroad. Instead of waiting years for recertification, I decided to build something. The Problem I Kept Hearing About Every agency owner, freelancer, and consultant I talked to had the same story: they'd share a strategy deck during a pitch, the prospect would disappear, and three months later they'd see their...

Lobsters • 2026-04-03 23:55

c89cc.sh - standalone C89/ELF64 compiler in pure portable shell

We have tags for all sorts of languages, but nothing for shell? :D Comments

DEV Community • 2026-04-03 23:53

I Renamed All 43 Tools in My MCP Server. Here's Why I Did It Now.

Charlotte has 111 stars. That's not a lot. But it's enough that a breaking change will annoy real people. I shipped one anyway. The naming problem When I started building Charlotte in February, I named every tool with a colon separator: charlotte:navigate, charlotte:observe, charlotte:click. It looked clean. It felt namespaced. Every tool call in every session used it. The problem: t...

DEV Community • 2026-04-03 23:43

I Started Building a Roguelike RPG — Powered by On-Device AI #2

Running On-Device LLM in Unity Android — Everything That Broke (and How I Fixed It) In my last post, I mentioned I was building a roguelike RPG powered by an on-device LLM. This time I'll cover exactly how I did it, what broke, and what the numbers look like. The short version: I got Phi-4-mini running in Unity on a real Android device in one day. It generated valid JSON. It took 8 min...

DEV Community • 2026-04-03 23:42

Generic Undo Manager for React - Part 1

It’s probably my third day writing here. I’m not trying to keep a daily streak, but I get genuinely excited when I come across good code, so I end up wanting to share it right away. Some background In a personal project I’ve been working on, I spent the past week trying to find a clean, generic way to implement undo/redo without ending up with a bunch of hardcoded states. I wanted some...

DEV Community • 2026-04-03 23:35

Supply Chain Security measures

DEV Community • 2026-04-03 23:30

7 Fatal Lighting Mistakes That Will Destroy Your Exhibition Stand

7 Fatal Lighting Mistakes That Will Destroy Your Exhibition Stand After designing 500+ exhibition stands, we can tell you one thing with certainty: lighting makes or breaks your booth. A €10,000 stand with great lighting can look like €150,000. A €200,000 stand with bad lighting looks like a garage sale. Here are the 7 most common—and most damaging—lighting mistakes we see at trade sho...

DEV Community • 2026-04-03 23:29

I Started Building a Roguelike RPG — Powered by On-Device AI #1

I've been getting into on-device AI lately. Not cloud AI. Not sending requests to a server somewhere. I mean a language model running entirely on the phone itself — no internet required, no API costs, no data leaving the device. When I learn something new, I have to build something. So I did. Why On-Device AI Is Interesting Right Now It's slow. It's limited. Compared to cloud LLMs...

Hacker News: Front Page • 2026-04-03 23:26

Extra usage credit for Claude to celebrate usage bundles launch (Pro, Max, Team)

Article URL: https://support.claude.com/en/articles/14246053-extra-usage-credit-for-pro-max-and-team-plans Comments URL: https://news.ycombinator.com/item?id=47633676 Points: 4 # Comments: 0

Experienced Devs • 2026-04-03 23:26

Are they blind?

How come managers don’t realize that firing and downsizing is bad for morale and as such the lifespan of their product? It’s insane that these people czn not reason themselves out of a paper bag submitted by /u/Aladinbs [link] [comments]

DEV Community • 2026-04-03 23:25

Eu achava que Node.js era o “Django do JavaScript”… até entender isso

Se você está começando no desenvolvimento web, deixa eu tentar adivinhar: Em algum momento você pensou algo como: “Se Django é o principal framework do Python… então Node.js deve ser tipo isso pro JavaScript, né?” Eu também pensei assim. E foi aí que começou a confusão. 🤯 O momento em que tudo não fez sentido Eu comecei a pesquisar sobre backend e vi coisas como: Node.js Exp...

Hacker News: Front Page • 2026-04-03 23:22

How to Write Unmaintainable Code (1999)

Article URL: https://www.doc.ic.ac.uk/%7Esusan/475/unmain.html Comments URL: https://news.ycombinator.com/item?id=47633640 Points: 3 # Comments: 1

DEV Community • 2026-04-03 23:19

01-VPC — AWS Private/Public Subnet Architecture

In this article, I'll walk through how I set up an AWS VPC with a public and private subnet, deployed two EC2 instances, and configured Nginx as a reverse proxy. This is part of my hands-on cloud learning journey. If you're just getting started with AWS networking, this is for you. Prerequisites You need to have an AWS account to be able to create the infrastructure A basic understand...