<![CDATA[tsecurity.de - Sichere Programmierung]]> de-DE Fri, 18 Sep 2026 07:10:19 +0200 Fri, 18 Sep 2026 07:10:19 +0200 15 2026 tsecurity.de - Sichere Programmierung contact@tsecurity.de (tsecurity.de) contact@tsecurity.de (tsecurity.de) https://tsecurity.de/templates/mydraft-basis-tsecurity.de/media/logo.png <![CDATA[tsecurity.de - Sichere Programmierung]]> <![CDATA[How OpenHiggsfield Scaled Next.js Server Actions: Request Coalescing, 38 AI Models, and Zero Queue Locks]]> https://tsecurity.de/de/4153516/sichere-programmierung/how-openhiggsfield-scaled-nextjs-server-actions-request-coalescing-38-ai-models-and-zero-queue-locks/ https://tsecurity.de/de/4153516/sichere-programmierung/how-openhiggsfield-scaled-nextjs-server-actions-request-coalescing-38-ai-models-and-zero-queue-locks/ Fri, 18 Sep 2026 07:07:20 +0200 When building production-grade Generative AI platforms, engineering teams face two core architectural hurdles: network execution bottlenecks caused by Next.js Server Action concurrency semantics, and schema fragmentation across dozens of heterogeneous AI provider APIs (e.g., Kling, ByteDance Seedance, Black Forest Labs Flux, Minimax). In this deep... Weiterlesen

]]> <![CDATA[Meta Reads More Than Everyone Else Combined. None of It Was a Question.]]> https://tsecurity.de/de/4153515/sichere-programmierung/meta-reads-more-than-everyone-else-combined-none-of-it-was-a-question/ https://tsecurity.de/de/4153515/sichere-programmierung/meta-reads-more-than-everyone-else-combined-none-of-it-was-a-question/ Fri, 18 Sep 2026 07:07:20 +0200 One company reads this site more than every other AI company put together. In thirty days, not one of those requests came from a person asking a question. I have been measuring a small WordPress site for a few months now, recording only AI crawlers and sorting each request by what the crawler is for. Over the thirty days ending September 11, it... Weiterlesen

]]> <![CDATA[CSS Position Property]]> https://tsecurity.de/de/4153514/sichere-programmierung/css-position-property/ https://tsecurity.de/de/4153514/sichere-programmierung/css-position-property/ Fri, 18 Sep 2026 07:07:19 +0200 The CSS position property controls how an element is positioned on a webpage. There are 5 types of Position in CSS: position: static; position: relative; position: absolute; position: fixed; position: sticky; 1. position: static : This is the default position of every HTML element. .box { position: static; } 2. position: relative : The element... Weiterlesen

]]> <![CDATA[Mouse Control "The Discovery Engine"]]> https://tsecurity.de/de/4153512/sichere-programmierung/mouse-control-the-discovery-engine/ https://tsecurity.de/de/4153512/sichere-programmierung/mouse-control-the-discovery-engine/ Fri, 18 Sep 2026 07:07:19 +0200 Honestly, I started building this as a basic Python script with a libratbag backend that could support my mouse DPI switches and button remaps without needing two separate programs—and without the dang notifications being broken for those DPI switches. After I started coding with AI more, mostly because some of this became very complicated and I... Weiterlesen

]]> <![CDATA[The Phantom That Wasn't There: How Unreliable grep Made Us Chase Ghosts]]> https://tsecurity.de/de/4153510/sichere-programmierung/the-phantom-that-wasnt-there-how-unreliable-grep-made-us-chase-ghosts/ https://tsecurity.de/de/4153510/sichere-programmierung/the-phantom-that-wasnt-there-how-unreliable-grep-made-us-chase-ghosts/ Fri, 18 Sep 2026 07:07:19 +0200 One of the hardest stages in developing a documentation generator is alignment with legacy tools. When you migrate from an old, decades-proven proprietary generator to your own custom pipeline, you are obligated to prove that you haven't lost a single class. We wrote an automated system that compared thousands of entities generated by the old tool... Weiterlesen

]]> <![CDATA[Wi-Fi Was Dead for 5 Hours While Chrome Kept Working: 4,960 DNS Failures and the 5-Minute Probe That Catches Them]]> https://tsecurity.de/de/4153509/sichere-programmierung/wi-fi-was-dead-for-5-hours-while-chrome-kept-working-4960-dns-failures-and-the-5-minute-probe-that-catches-them/ https://tsecurity.de/de/4153509/sichere-programmierung/wi-fi-was-dead-for-5-hours-while-chrome-kept-working-4960-dns-failures-and-the-5-minute-probe-that-catches-them/ Fri, 18 Sep 2026 07:07:19 +0200 Last time I wrote about how many jobs you should re-run the moment your quota comes back. This post goes back a few days earlier, to a quieter and far more annoying problem: the morning my home Wi-Fi was effectively dead for five hours — while the browser kept loading pages as if nothing were wrong. The problem: the browser works, but only the... Weiterlesen

]]> <![CDATA[MOQ Mobile: Building Real-Time iOS and Android Apps]]> https://tsecurity.de/de/4153508/sichere-programmierung/moq-mobile-building-real-time-ios-and-android-apps/ https://tsecurity.de/de/4153508/sichere-programmierung/moq-mobile-building-real-time-ios-and-android-apps/ Fri, 18 Sep 2026 07:07:19 +0200 MOQ mobile app development could make phones first-class endpoints for real-time media, not just screens for watching a stream. Native iOS and Android applications could publish camera, microphone, screen, and application data to a relay while also subscribing to live video, audio, and related data. That does not make MOQ a production-ready... Weiterlesen

]]> <![CDATA[Our AI agents' "verified success" claims: 10 out of 10 failed independent recompute — including ours]]> https://tsecurity.de/de/4153507/sichere-programmierung/our-ai-agents-verified-success-claims-10-out-of-10-failed-independent-recompute-including-ours/ https://tsecurity.de/de/4153507/sichere-programmierung/our-ai-agents-verified-success-claims-10-out-of-10-failed-independent-recompute-including-ours/ Fri, 18 Sep 2026 07:07:19 +0200 We run a five-agent organization that has been operating for 130+ days — agents claim tasks, produce fixes, and report success. Like everyone else, we used to read the reports. Then we stopped reading them and started recomputing them. The 10/10 finding We took 10 "verified" success verdicts from our own production logs and checked them against... Weiterlesen

]]> <![CDATA[Virtual sandbox from Swagger spec: build a working OpenAPI mock]]> https://tsecurity.de/de/4153447/programmierung/virtual-sandbox-from-swagger-spec-build-a-working-openapi-mock/ https://tsecurity.de/de/4153447/programmierung/virtual-sandbox-from-swagger-spec-build-a-working-openapi-mock/ Fri, 18 Sep 2026 06:38:39 +0200 You have an OpenAPI file. The frontend needs an API URL today. The backend is still being built. For this walkthrough, I uploaded a small product catalog spec to Beeceptor and called the generated routes. GET /products returned HTTP 200 with an items array and total. GET /products/demo-1 returned a product. Both requests appeared in the console as... Weiterlesen

]]> <![CDATA[YC Asked for It. I Built It. It Failed Completely.]]> https://tsecurity.de/de/4153446/programmierung/yc-asked-for-it-i-built-it-it-failed-completely/ https://tsecurity.de/de/4153446/programmierung/yc-asked-for-it-i-built-it-it-failed-completely/ Fri, 18 Sep 2026 06:38:39 +0200 I have around 50,000 startup ideas in my head all the time. But this time, I wanted to build something that had more "proven demand," and getting some external validation before my journey sounded good. I found this idea in the Request for Startups Fall 2026 edition. I had been playing with this idea in my mind, but seeing it so clearly on that... Weiterlesen

]]> <![CDATA[Permissions & Tool Allowlisting in Claude Code: A Beginner's Guide]]> https://tsecurity.de/de/4153445/programmierung/permissions-tool-allowlisting-in-claude-code-a-beginners-guide/ https://tsecurity.de/de/4153445/programmierung/permissions-tool-allowlisting-in-claude-code-a-beginners-guide/ Fri, 18 Sep 2026 06:38:39 +0200 The Scenario Remember the setup from the first article — a project with CLAUDE.md, an api-conventions skill, and a code-reviewer subagent, all working together to keep new API endpoints consistent? Same project. But Claude Code doesn't only touch files — it can also run terminal commands and, if you've connected one, query your actual database. So... Weiterlesen

]]> <![CDATA[Domain Retirement Guard: Log Intent Before a Destructive Automation Operation]]> https://tsecurity.de/de/4153444/programmierung/domain-retirement-guard-log-intent-before-a-destructive-automation-operation/ https://tsecurity.de/de/4153444/programmierung/domain-retirement-guard-log-intent-before-a-destructive-automation-operation/ Fri, 18 Sep 2026 06:38:39 +0200 An e-commerce migration changes the answer when one automation account can see both customer-owned and platform-owned zones. Short answer: permit deletion only for an exact customer-zone allowlist, require a separate approval flag, persist the operator's intent before the call, and deduplicate retries with an operation ID. Platform-owned zones... Weiterlesen

]]> <![CDATA[Day 12 - NoSQL Deep Dive - Document, Key-Value, Graph কোনটা কখন?]]> https://tsecurity.de/de/4153443/programmierung/day-12-nosql-deep-dive-document-key-value-graph/ https://tsecurity.de/de/4153443/programmierung/day-12-nosql-deep-dive-document-key-value-graph/ Fri, 18 Sep 2026 06:38:39 +0200 একটা জিনিস চিন্তা করুন, আপনি চাইলেই সবসময় organized way-তে থাকতে পারবেন না। এটা nearly impossible। আর যদি হয়ে যান, তাহলে আপনি মানুষ থেকে robot হয়ে গেছেন। কোনোভাবে আপনার অবস্থা কিছুটা হলেও একটু এলোমেলো হবেই, এটাই normal ব্যাপার। এবং মজার ব্যাপার হচ্ছে এই এলোমেলো হওয়ার tendency-টাই আপনাকে productive হতে help করে + নতুন idea generate করতে help করে।... Weiterlesen

]]> <![CDATA[I got tired of babysitting coding agents]]> https://tsecurity.de/de/4153442/programmierung/i-got-tired-of-babysitting-coding-agents/ https://tsecurity.de/de/4153442/programmierung/i-got-tired-of-babysitting-coding-agents/ Fri, 18 Sep 2026 06:38:39 +0200 I love coding agents. I also got tired of being their night-shift project manager. The loop looks familiar: prompt → wait → almost right → correct → wait → open a second agent → they step on the same files → exit 0 → you still will not merge. That last part is the one that broke me. Process finished. Tests maybe green in the agent's story. Diff... Weiterlesen

]]> <![CDATA[Your Company Is Adding AI Faster Than It Can Change How Work Gets Done]]> https://tsecurity.de/de/4153441/programmierung/your-company-is-adding-ai-faster-than-it-can-change-how-work-gets-done/ https://tsecurity.de/de/4153441/programmierung/your-company-is-adding-ai-faster-than-it-can-change-how-work-gets-done/ Fri, 18 Sep 2026 06:38:39 +0200 What a Fractional Integrator does when AI creates more tools but not better execution. AI adoption is moving faster than most companies can redesign the way work actually happens. That is the part I think technical leaders should pay more attention to. The conversation usually starts with capability. Can AI summarize this? Can it classify that?... Weiterlesen

]]> <![CDATA[Who Fixes ERP Integrations When the Implementation Partner Leaves?]]> https://tsecurity.de/de/4153440/programmierung/who-fixes-erp-integrations-when-the-implementation-partner-leaves/ https://tsecurity.de/de/4153440/programmierung/who-fixes-erp-integrations-when-the-implementation-partner-leaves/ Fri, 18 Sep 2026 06:38:39 +0200 An ERP integration does not stop needing an owner when implementation ends. The direct answer is: the company needs a named maintenance owner for every custom connection that sits outside the vendor's standard product. That owner might be the original implementation partner under a support agreement, an internal technical team, a platform provider... Weiterlesen

]]> <![CDATA[AI pair-programming became useful when every idea met a benchmark]]> https://tsecurity.de/de/4153439/programmierung/ai-pair-programming-became-useful-when-every-idea-met-a-benchmark/ https://tsecurity.de/de/4153439/programmierung/ai-pair-programming-became-useful-when-every-idea-met-a-benchmark/ Fri, 18 Sep 2026 06:38:39 +0200 The most confident optimization suggestions were not always the useful ones. An 8 by 8 register block sounded better than 4 by 4 because it offered more reuse. It ran slower. Packed f16 storage sounded additive with tiling. It was not. A vectorized kernel won its standalone benchmark and initially broke the real training loop. The productive... Weiterlesen

]]> <![CDATA["Forces Receipts" Is a Compliment I Haven't Earned Yet]]> https://tsecurity.de/de/4153437/programmierung/forces-receipts-is-a-compliment-i-havent-earned-yet/ https://tsecurity.de/de/4153437/programmierung/forces-receipts-is-a-compliment-i-havent-earned-yet/ Fri, 18 Sep 2026 06:38:39 +0200 Someone replied to a post today calling StareBrain something that "forces receipts." I liked the phrase enough to want it to be true, and honest enough to know it isn't, yet. Worth writing down exactly what's missing between the compliment and the actual system. What a receipt would even mean Spent the last couple weeks writing about states, not... Weiterlesen

]]> <![CDATA[CodeSOD: Vintage 2013]]> https://tsecurity.de/de/4153361/programmierung/codesod-vintage-2013/ https://tsecurity.de/de/4153361/programmierung/codesod-vintage-2013/ Fri, 18 Sep 2026 05:53:30 +0200 Today we have more of a representative comment, from Watson. This comes from some GPL licensed code published by everybody's favorite evil empire, Oracle. /* * Copyright (c) 2011, 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013 2013... Weiterlesen

]]> <![CDATA[Bonsai 2 27B Puts a 27B AI Model in 5.9GB - Can It Replace Your Paid Subscription?]]> https://tsecurity.de/de/4153360/programmierung/bonsai-2-27b-puts-a-27b-ai-model-in-59gb-can-it-replace-your-paid-subscription/ https://tsecurity.de/de/4153360/programmierung/bonsai-2-27b-puts-a-27b-ai-model-in-59gb-can-it-replace-your-paid-subscription/ Fri, 18 Sep 2026 05:53:29 +0200 A strange thing happened to local AI models this year. Every few months, someone released a "2-bit" build of a good open model, and every few months, people who actually stress-tested those builds found the same thing: the benchmark table looked fine, but the model fell apart the moment you asked it to reason through a hard problem for more than a... Weiterlesen

]]> <![CDATA[How to Choose an Android App Protector? DEX Encryption vs VMP]]> https://tsecurity.de/de/4153359/programmierung/how-to-choose-an-android-app-protector-dex-encryption-vs-vmp/ https://tsecurity.de/de/4153359/programmierung/how-to-choose-an-android-app-protector-dex-encryption-vs-vmp/ Fri, 18 Sep 2026 05:53:29 +0200 How to Choose an Android App Protector? DEX Encryption vs VMP There are many Android app protection solutions available today, but from a technical perspective, two important approaches are DEX protection and VMP virtualization. What Is the Difference Between DEX Encryption and VMP? DEX encryption mainly solves one problem: Making the code harder... Weiterlesen

]]> <![CDATA[What I Learned Quantizing DistilBERT to ONNX for Browser Inference]]> https://tsecurity.de/de/4153358/programmierung/what-i-learned-quantizing-distilbert-to-onnx-for-browser-inference/ https://tsecurity.de/de/4153358/programmierung/what-i-learned-quantizing-distilbert-to-onnx-for-browser-inference/ Fri, 18 Sep 2026 05:53:29 +0200 What I Learned Quantizing DistilBERT to ONNX for Browser Inference I built a support-ticket classifier — 77 banking intents, fine-tuned DistilBERT, Banking77 — and got it to 92.2% accuracy. Then I tried to ship it, and ran into the actual problem: the checkpoint was 256 MB and took ~9 ms per query on CPU. That's fine on a GPU server. It is not... Weiterlesen

]]> <![CDATA[How to build a RAG system from scratch in Python (chunk embed retrieve cite)( https://ai.studybydoing.in)]]> https://tsecurity.de/de/4153357/programmierung/how-to-build-a-rag-system-from-scratch-in-python-chunk-embed-retrieve-cite-httpsaistudybydoingin/ https://tsecurity.de/de/4153357/programmierung/how-to-build-a-rag-system-from-scratch-in-python-chunk-embed-retrieve-cite-httpsaistudybydoingin/ Fri, 18 Sep 2026 05:53:29 +0200 Most "RAG tutorials" hand you a framework and a .from_documents() one-liner, and you never actually see what happens inside. So I built one by hand — chunking, embeddings, a tiny vector store, hybrid retrieval, re-ranking, and cited generation — to understand each moving part. Here's the mental model and the two pieces that matter most. ## What... Weiterlesen

]]> <![CDATA[Slaying the N+1 Query Dragon: A Jedi’s Guide to Database Optimization]]> https://tsecurity.de/de/4153356/programmierung/slaying-the-n-1-query-dragon-a-jedis-guide-to-database-optimization/ https://tsecurity.de/de/4153356/programmierung/slaying-the-n-1-query-dragon-a-jedis-guide-to-database-optimization/ Fri, 18 Sep 2026 05:53:29 +0200 The Quest Begins (The “Why”) I still remember the first time I opened our analytics dashboard after a feature launch and saw the page load time creeping up to six seconds. The product team was thrilled—new filters, shiny UI—but the users were staring at a spinner like they were waiting for a bus that never arrived. I dug into the logs and there it... Weiterlesen

]]> <![CDATA[I Survived AWS SAA-C03 — Here’s What Actually Helped Me Pass]]> https://tsecurity.de/de/4153355/programmierung/i-survived-aws-saa-c03-heres-what-actually-helped-me-pass/ https://tsecurity.de/de/4153355/programmierung/i-survived-aws-saa-c03-heres-what-actually-helped-me-pass/ Fri, 18 Sep 2026 05:53:29 +0200 A few months ago, I passed the AWS Certified AI Practitioner exam. Naturally, I thought: “Okay… maybe I’m getting pretty good at AWS now.” Then I started preparing for the AWS Certified Solutions Architect – Associate (SAA-C03). AWS responded: “That’s cute.” 😂 SAA was a completely different experience. VPCs, NAT Gateways, Load Balancers, Route 53,... Weiterlesen

]]> <![CDATA[Open-source tool: Cross-database universal "field-level" data lineage analysis and visualization(Part 3 of 3)]]> https://tsecurity.de/de/4153353/programmierung/open-source-tool-cross-database-universal-field-level-data-lineage-analysis-and-visualizationpart-3-of-3/ https://tsecurity.de/de/4153353/programmierung/open-source-tool-cross-database-universal-field-level-data-lineage-analysis-and-visualizationpart-3-of-3/ Fri, 18 Sep 2026 05:53:29 +0200 This article is Part 3. The first two parts have already implemented the parsing and saving of script field-level data lineage information. Next, based on these lineage information, a web application for data lineage will be implemented. Of course, everyone can implement their own applications based on their own ideas. This is just a case... Weiterlesen

]]> <![CDATA[AWS Database Mini Projects - RDS, Aurora, DynamoDB & ElastiCache]]> https://tsecurity.de/de/4153352/programmierung/aws-database-mini-projects-rds-aurora-dynamodb-elasticache/ https://tsecurity.de/de/4153352/programmierung/aws-database-mini-projects-rds-aurora-dynamodb-elasticache/ Fri, 18 Sep 2026 05:53:29 +0200 Five Production-Style Builds Across RDS, Aurora, DynamoDB &amp; ElastiCache Part of my AWS learning journey. Instead of practicing RDS, Aurora, DynamoDB, and ElastiCache as isolated labs, I built five small connected projects instead, each one following the same production discipline: a dedicated environment, IAM least privilege, validation,... Weiterlesen

]]> <![CDATA[Social Sign-In JWT Verification: Surviving Key Rotation Without Authentication Outages]]> https://tsecurity.de/de/4153351/programmierung/social-sign-in-jwt-verification-surviving-key-rotation-without-authentication-outages/ https://tsecurity.de/de/4153351/programmierung/social-sign-in-jwt-verification-surviving-key-rotation-without-authentication-outages/ Fri, 18 Sep 2026 05:53:29 +0200 A media service that accepts Google and GitHub sign-in has a harder constraint than token parsing: an account must remain recoverable without letting a rotated signing key turn ordinary logins into an outage. Short answer: when JWT verification reports an unknown key ID (kid), refresh the issuer's JWKS once, under a rate limit, and retry... Weiterlesen

]]> <![CDATA[Indian IT's AI Productivity Boom? What 7 Years of Revenue-Per-Employee Data Actually Shows]]> https://tsecurity.de/de/4153350/programmierung/indian-its-ai-productivity-boom-what-7-years-of-revenue-per-employee-data-actually-shows/ https://tsecurity.de/de/4153350/programmierung/indian-its-ai-productivity-boom-what-7-years-of-revenue-per-employee-data-actually-shows/ Fri, 18 Sep 2026 05:53:29 +0200 Verdict: Is AI finally delinking Indian IT's revenue from its headcount? Partially — but much less than the earnings-call narrative suggests. In Q1 FY27 (April–June 2026), all five of India's IT majors — TCS, Infosys, HCLTech, Wipro and Tech Mahindra — reported higher dollar revenue per employee than a year ago, on a combined $25.6 billion in... Weiterlesen

]]> <![CDATA[They Put 7 Attention Mechanisms on a Latin Square. Then Removed Them One by One.]]> https://tsecurity.de/de/4153349/programmierung/they-put-7-attention-mechanisms-on-a-latin-square-then-removed-them-one-by-one/ https://tsecurity.de/de/4153349/programmierung/they-put-7-attention-mechanisms-on-a-latin-square-then-removed-them-one-by-one/ Fri, 18 Sep 2026 05:53:29 +0200 Since GPT, nearly every Transformer repeats the same attention mechanism at every layer. Forty-eight identical blocks, differing only in learned weights. Nobody tested that. It is a convention, not a conclusion. A paper out of VIDRAFT AI Research (arXiv:2609.20269, CC BY 4.0) tests it, and the interesting part is not the headline. The headline is... Weiterlesen

]]> <![CDATA[Cache API drops the fragment, so every chunk I stored was the same entry]]> https://tsecurity.de/de/4153300/programmierung/cache-api-drops-the-fragment-so-every-chunk-i-stored-was-the-same-entry/ https://tsecurity.de/de/4153300/programmierung/cache-api-drops-the-fragment-so-every-chunk-i-stored-was-the-same-entry/ Fri, 18 Sep 2026 05:09:11 +0200 Our highest-quality model tier never once worked in production. From the day it shipped, every attempt died with the same line: ERROR_CODE: 7, Failed to load model because protobuf parsing failed I read that as an out-of-memory symptom and went hunting for memory. The error had already ruled that out and I wasn't listening. Why memory was a... Weiterlesen

]]> <![CDATA[A style rule with no exit code: 68 days unenforced, then 11 violations in a 3-line draft]]> https://tsecurity.de/de/4153299/programmierung/a-style-rule-with-no-exit-code-68-days-unenforced-then-11-violations-in-a-3-line-draft/ https://tsecurity.de/de/4153299/programmierung/a-style-rule-with-no-exit-code-68-days-unenforced-then-11-violations-in-a-3-line-draft/ Fri, 18 Sep 2026 05:09:11 +0200 We wrote a writing rule for our agent in July. It read well, it was correct, and for sixty-eight days nothing in the repository could tell us whether a single report obeyed it. Today we replaced the rule with an exit code, pointed it at a three-line draft, and got eleven violations back. The rule Our shop is run by a Claude Code session that... Weiterlesen

]]> <![CDATA[The AI Ad Sold the Mood. It Forgot the Product.]]> https://tsecurity.de/de/4153298/programmierung/the-ai-ad-sold-the-mood-it-forgot-the-product/ https://tsecurity.de/de/4153298/programmierung/the-ai-ad-sold-the-mood-it-forgot-the-product/ Fri, 18 Sep 2026 05:09:11 +0200 The coffee ad looks lovely. Morning light falls across a kitchen. Someone makes a cup, pauses, and enjoys a quiet moment. Then the video ends and you realize you cannot name the coffee brand—or even remember seeing the bag clearly. That is an awkward result for an ad. The footage may be attractive enough to stop a scroll, yet leave the viewer with... Weiterlesen

]]> <![CDATA[I got tired of $20/mo screenshot APIs, so I built a free one on top of the browser I already had to run anyway]]> https://tsecurity.de/de/4153297/programmierung/i-got-tired-of-20mo-screenshot-apis-so-i-built-a-free-one-on-top-of-the-browser-i-already-had-to-run-anyway/ https://tsecurity.de/de/4153297/programmierung/i-got-tired-of-20mo-screenshot-apis-so-i-built-a-free-one-on-top-of-the-browser-i-already-had-to-run-anyway/ Fri, 18 Sep 2026 05:09:11 +0200 Every "HTML to image" API I priced out wanted $15–25/month before I'd rendered a single image. What they're actually doing under the hood is running headless Chrome and taking a screenshot — which is real infrastructure, but not $20/mo-per-seat real. So I built the free version I wanted to exist, and it's live now as part of a small suite of tools... Weiterlesen

]]> <![CDATA[330,000 free icons for video, and every one of them can draw itself on]]> https://tsecurity.de/de/4153296/programmierung/330000-free-icons-for-video-and-every-one-of-them-can-draw-itself-on/ https://tsecurity.de/de/4153296/programmierung/330000-free-icons-for-video-and-every-one-of-them-can-draw-itself-on/ Fri, 18 Sep 2026 05:09:11 +0200 AtomCut now ships an Icons panel: Lucide, Tabler, Phosphor, Material Symbols, Simple Icons, the emoji sets, the flag sets, 208 open-source icon sets and 337,000 icons, searchable from inside the editor and dropped onto the canvas as ordinary vector layers. Pick an ink, a size and an entrance in the panel's footer, drag an icon onto the stage or a... Weiterlesen

]]> <![CDATA[DNS Record Write Rejected Because Zone ID Is Not Domain Name — Validation Debug]]> https://tsecurity.de/de/4153294/programmierung/dns-record-write-rejected-because-zone-id-is-not-domain-name-validation-debug/ https://tsecurity.de/de/4153294/programmierung/dns-record-write-rejected-because-zone-id-is-not-domain-name-validation-debug/ Fri, 18 Sep 2026 05:09:11 +0200 Short answer: when a DNS record write is rejected because a zone ID is not a domain name, resolve the opaque reference first, canonicalize the returned name, and compare it with the owner before writing; retain the decision, not every payload. The bill for a failed write is rarely the rejected request itself. It is the retained verification... Weiterlesen

]]> <![CDATA[Your Team Has AI. Why Are You Still Chasing the Work?]]> https://tsecurity.de/de/4153293/programmierung/your-team-has-ai-why-are-you-still-chasing-the-work/ https://tsecurity.de/de/4153293/programmierung/your-team-has-ai-why-are-you-still-chasing-the-work/ Fri, 18 Sep 2026 05:09:11 +0200 Consider a hypothetical deal at a B2B software company. The buyer sends a security questionnaire with 180 questions. Your team uses AI to find previous answers and prepare a draft. By the afternoon, most of the document is filled in. Two days later, sales is still waiting to send it. One answer describes a control that has changed. Another needs... Weiterlesen

]]> <![CDATA[From Sending Raw TPM Commands to Parsing Responses with Windows TBS]]> https://tsecurity.de/de/4153290/programmierung/from-sending-raw-tpm-commands-to-parsing-responses-with-windows-tbs/ https://tsecurity.de/de/4153290/programmierung/from-sending-raw-tpm-commands-to-parsing-responses-with-windows-tbs/ Fri, 18 Sep 2026 05:09:11 +0200 I tried interacting with TPM 2.0 by sending raw commands through Windows TBS (TPM Base Services). The implementation is written in Rust. This article walks through the entire process, from creating a TBS context to sending a TPM command and parsing the response. Overall Flow The following is a simplified example of the complete TPM2_GetRandom... Weiterlesen

]]> <![CDATA[Building a Browser-Based Voxel Editor with React Three Fiber]]> https://tsecurity.de/de/4153272/programmierung/building-a-browser-based-voxel-editor-with-react-three-fiber/ https://tsecurity.de/de/4153272/programmierung/building-a-browser-based-voxel-editor-with-react-three-fiber/ Fri, 18 Sep 2026 04:09:08 +0200 I have been building VoxelDraft, a voxel editor that runs entirely in the browser without an account or installation. The editor supports block painting, layers, keyframe animation, GIF recording, local projects, and exports for OBJ/MTL, GLB, VOX, Minecraft Schematic, and Roblox RBXL. This post covers the architecture choices that kept those... Weiterlesen

]]> <![CDATA[Productionizing Agentic GenAI on AWS: What Actually Breaks When You Scale MCP]]> https://tsecurity.de/de/4153271/programmierung/productionizing-agentic-genai-on-aws-what-actually-breaks-when-you-scale-mcp/ https://tsecurity.de/de/4153271/programmierung/productionizing-agentic-genai-on-aws-what-actually-breaks-when-you-scale-mcp/ Fri, 18 Sep 2026 04:09:08 +0200 Every MCP demo looks the same. Someone spins up a local server, points a client at it, watches a tool call succeed once, and calls the architecture done. Then the business asks when it ships, and suddenly you're dealing with non-deterministic compute, IAM roles that need to be scoped per tool instead of per service, and a token bill that can move... Weiterlesen

]]> <![CDATA[The Bottleneck Moved From Writing Code to Proving It]]> https://tsecurity.de/de/4153270/programmierung/the-bottleneck-moved-from-writing-code-to-proving-it/ https://tsecurity.de/de/4153270/programmierung/the-bottleneck-moved-from-writing-code-to-proving-it/ Fri, 18 Sep 2026 04:09:07 +0200 The bottleneck moved, and most teams haven't noticed. It isn't writing anymore. It's proving. I keep hearing the same soft complaint from engineers: "I spend more time reviewing AI code than I ever spent writing code myself." We tend to hear that as a productivity problem, as if the tool isn't saving time. I think we're reading it wrong. AI didn't... Weiterlesen

]]> <![CDATA[Node.js 2026 Runbook for Environment-Scoped DNS Zone Startup Assertions]]> https://tsecurity.de/de/4153267/programmierung/nodejs-2026-runbook-for-environment-scoped-dns-zone-startup-assertions/ https://tsecurity.de/de/4153267/programmierung/nodejs-2026-runbook-for-environment-scoped-dns-zone-startup-assertions/ Fri, 18 Sep 2026 04:09:07 +0200 Create the tenant zone record before the application starts, then refuse to boot when the configured environment, zone identifier, or parent domain does not match an explicit allowlist. Short answer: treat an environment-scoped DNS zone identifier as startup configuration, not as a value to infer from a hostname. That rule matters for a media... Weiterlesen

]]> <![CDATA[Implementing Degraded Node.js Health Checks for API Credentials and Tiers]]> https://tsecurity.de/de/4153266/programmierung/implementing-degraded-nodejs-health-checks-for-api-credentials-and-tiers/ https://tsecurity.de/de/4153266/programmierung/implementing-degraded-nodejs-health-checks-for-api-credentials-and-tiers/ Fri, 18 Sep 2026 04:09:07 +0200 A readiness endpoint for a Node.js metering service should report the last verified capability state, not call the account API on every probe. Put credential validity and tier eligibility behind a short, bounded cache; return ready, degraded, or not_ready; and let a spend ceiling decide when stale evidence must stop traffic. For metered invoices,... Weiterlesen

]]> <![CDATA[A 200 response can still break your API integration]]> https://tsecurity.de/de/4153265/programmierung/a-200-response-can-still-break-your-api-integration/ https://tsecurity.de/de/4153265/programmierung/a-200-response-can-still-break-your-api-integration/ Fri, 18 Sep 2026 04:09:07 +0200 An API can be up, fast, and still break every client that depends on it. A field changes from an object to an array. An optional property disappears. A path is renamed in the OpenAPI document. The uptime check stays green because the server did exactly what it was asked to do: it returned 200 OK. That gap is what I wanted to monitor. Uptime... Weiterlesen

]]> <![CDATA[What Web Bot Auth deliberately leaves out]]> https://tsecurity.de/de/4153233/programmierung/what-web-bot-auth-deliberately-leaves-out/ https://tsecurity.de/de/4153233/programmierung/what-web-bot-auth-deliberately-leaves-out/ Fri, 18 Sep 2026 03:39:17 +0200 Your API doesn't need to know who's calling. It needs to know if a human is behind the call. The IETF Web Bot Auth working group just published its charter draft. I read it twice, because one line in the scope section wouldn't let me move past it: end-user authentication is explicitly out of scope. That's not an oversight. It's a design choice,... Weiterlesen

]]> <![CDATA[Whole notes, not fragments: the retrieval half]]> https://tsecurity.de/de/4153232/programmierung/whole-notes-not-fragments-the-retrieval-half/ https://tsecurity.de/de/4153232/programmierung/whole-notes-not-fragments-the-retrieval-half/ Fri, 18 Sep 2026 03:39:17 +0200 Whole notes, not fragments: the retrieval half Crystal memory, part 2 of 2. Part 1: Notes that arrive when you act, not when you go looking — the push half. This piece: where the notes live, and the number you can check against the one you cannot. The number that flatters us is the one you cannot re-run. That is the shape of almost every retrieval... Weiterlesen

]]> <![CDATA[The 'best AI code review tools' list you'll find is a GitHub list]]> https://tsecurity.de/de/4153231/programmierung/the-best-ai-code-review-tools-list-youll-find-is-a-github-list/ https://tsecurity.de/de/4153231/programmierung/the-best-ai-code-review-tools-list-youll-find-is-a-github-list/ Fri, 18 Sep 2026 03:39:16 +0200 Every few weeks someone asks which AI code review tools they should evaluate. The answers are easy to find. They are also, almost without exception, GitHub lists. Read the roundups and you get the same seven or eight names: GitHub Copilot, CodeRabbit, Qodo, Cursor. The tables show which GitHub features each one supports. The phrase "pull request"... Weiterlesen

]]> <![CDATA[Splitting a large image across multiple printed pages without alignment marks]]> https://tsecurity.de/de/4153230/programmierung/splitting-a-large-image-across-multiple-printed-pages-without-alignment-marks/ https://tsecurity.de/de/4153230/programmierung/splitting-a-large-image-across-multiple-printed-pages-without-alignment-marks/ Fri, 18 Sep 2026 03:39:16 +0200 I recently added tiled printing to a small static tool I run (ArtGrid) — the kind of "print a big image across several A4 sheets and tape them together" feature you've probably seen in poster-printing tools. The naive version is easy: slice the enlarged image into a grid of page-sized rectangles, export each as a PDF page. The annoying version is... Weiterlesen

]]> <![CDATA[Bypassing a WAF and a CSP with Google Tag Manager: An Attacker’s Perspective and Remediation Advice]]> https://tsecurity.de/de/4153229/programmierung/bypassing-a-waf-and-a-csp-with-google-tag-manager-an-attackers-perspective-and-remediation-advice/ https://tsecurity.de/de/4153229/programmierung/bypassing-a-waf-and-a-csp-with-google-tag-manager-an-attackers-perspective-and-remediation-advice/ Fri, 18 Sep 2026 03:39:16 +0200 This blog was originally published by Ryan Chaplin on the Raxis blog February 10, 2026 During several penetration tests last year, I observed clients often set unsafe directives for Google Tag Manager usually to supplement data collection via Google Analytics and third-party vendors. Aside from the obvious problem of using unsafe directives, this... Weiterlesen

]]> <![CDATA[Compliance Evidence Under Load: 500 Local or Hosted PDF API Jobs at Scale]]> https://tsecurity.de/de/4153228/programmierung/compliance-evidence-under-load-500-local-or-hosted-pdf-api-jobs-at-scale/ https://tsecurity.de/de/4153228/programmierung/compliance-evidence-under-load-500-local-or-hosted-pdf-api-jobs-at-scale/ Fri, 18 Sep 2026 03:39:16 +0200 Short answer: use a hosted PDF API when a small team needs repeatable form filling across bursty workers and can accept a measured network hop; keep a local PDF library when residency, offline operation, or a hard tail-latency budget makes that hop unacceptable. Decide with a load test on real evidence, not a quick demo. I run a one-person SaaS,... Weiterlesen

]]> <![CDATA[Why We Banned Hourly Retainers: 4 Engineering Rules That Changed How We Ship Software]]> https://tsecurity.de/de/4153227/programmierung/why-we-banned-hourly-retainers-4-engineering-rules-that-changed-how-we-ship-software/ https://tsecurity.de/de/4153227/programmierung/why-we-banned-hourly-retainers-4-engineering-rules-that-changed-how-we-ship-software/ Fri, 18 Sep 2026 03:39:16 +0200 Early in my career as a software architect and technology founder, I noticed a painful pattern recurring across our industry: A client hires a software agency or dev shop. The sales team promises the moon with an estimated "hourly bucket." Two months in, the client has spent 70% of their budget, attended dozens of Jira status calls, and has yet to... Weiterlesen

]]> <![CDATA[agent-usage 0.10.0: charts by agent, billing domain, and model]]> https://tsecurity.de/de/4153225/programmierung/agent-usage-0100-charts-by-agent-billing-domain-and-model/ https://tsecurity.de/de/4153225/programmierung/agent-usage-0100-charts-by-agent-billing-domain-and-model/ Fri, 18 Sep 2026 03:39:16 +0200 agent-usage 0.10.0 is live on npm — a local multi-agent usage dashboard with charts split by agent / billing domain / model. Honest local dashboard (vs glance-style menubar tools): see where quota and spend actually go across Codex, Claude Code, OpenCode, Grok, and more. Cursor connector is still experimental. Menubar remains roadmap (not... Weiterlesen

]]> <![CDATA[Stop Hardcoding Your Database Credentials in Lambda — Use IAM Authentication with RDS Proxy Instead]]> https://tsecurity.de/de/4153224/programmierung/stop-hardcoding-your-database-credentials-in-lambda-use-iam-authentication-with-rds-proxy-instead/ https://tsecurity.de/de/4153224/programmierung/stop-hardcoding-your-database-credentials-in-lambda-use-iam-authentication-with-rds-proxy-instead/ Fri, 18 Sep 2026 03:39:16 +0200 Your Lambda function works. It connects to RDS, queries the database, returns results. Somewhere in your environment variables sits a username and a password — plain text, sitting there quietly. You know it's not ideal. But it works, so it stays. Here's the thing: one misconfigured IAM policy, one accidental log exposure, one leaked deployment... Weiterlesen

]]> <![CDATA[Build an Agent UI That Explains Its State with Angular Signals]]> https://tsecurity.de/de/4153179/programmierung/build-an-agent-ui-that-explains-its-state-with-angular-signals/ https://tsecurity.de/de/4153179/programmierung/build-an-agent-ui-that-explains-its-state-with-angular-signals/ Fri, 18 Sep 2026 02:41:49 +0200 Most chat interfaces have three states: empty, loading, and finished. Agent workflows have many more. An agent may be planning, waiting for a tool, requesting approval, retrying a recoverable error, or suppressing an unsafe action. If the UI represents all of those as one spinner, users cannot tell whether the system is working, blocked, or about... Weiterlesen

]]> <![CDATA[A default MCP connection hands an agent 11 tools. None of my 23 Actors is one of them.]]> https://tsecurity.de/de/4153178/programmierung/a-default-mcp-connection-hands-an-agent-11-tools-none-of-my-23-actors-is-one-of-them/ https://tsecurity.de/de/4153178/programmierung/a-default-mcp-connection-hands-an-agent-11-tools-none-of-my-23-actors-is-one-of-them/ Fri, 18 Sep 2026 02:41:49 +0200 A default MCP connection hands an agent 11 tools. None of my 23 Actors is one of them. I have 23 audit Actors on the Apify Store. They all do a version of the same thing: take a public record, check whether what it still claims is true, and write the verdict into a dataset. I have also written six articles about what happens when an AI agent calls... Weiterlesen

]]> <![CDATA[Autonomous agents need guardrails, not line-by-line scripts]]> https://tsecurity.de/de/4153177/programmierung/autonomous-agents-need-guardrails-not-line-by-line-scripts/ https://tsecurity.de/de/4153177/programmierung/autonomous-agents-need-guardrails-not-line-by-line-scripts/ Fri, 18 Sep 2026 02:41:49 +0200 Autonomous does not mean uncontrollable. Cogweald’s model can decide what happens next in a world. It cannot change the database schema, bypass authorization, arbitrarily rewrite published content, or turn unvalidated text directly into system state. The guardrails live outside the model: Output must match a structured schema. World state can only... Weiterlesen

]]> <![CDATA[Every Guide Says "Reserve the Address on Your Router." What If the Router Is Not Yours?]]> https://tsecurity.de/de/4153176/programmierung/every-guide-says-reserve-the-address-on-your-router-what-if-the-router-is-not-yours/ https://tsecurity.de/de/4153176/programmierung/every-guide-says-reserve-the-address-on-your-router-what-if-the-router-is-not-yours/ Fri, 18 Sep 2026 02:41:48 +0200 Almost every guide to running an old Android phone as a security camera — including the ones on this blog — ends at the same place. The live view works, you bookmark an address like 192.168.1.7:8080, and then a line appears telling you to go into your router's settings and reserve that address so the bookmark never breaks. That advice is correct.... Weiterlesen

]]> <![CDATA[Property Domain Offboarding — Delete Records Without Whole-Zone Risk]]> https://tsecurity.de/de/4153175/programmierung/property-domain-offboarding-delete-records-without-whole-zone-risk/ https://tsecurity.de/de/4153175/programmierung/property-domain-offboarding-delete-records-without-whole-zone-risk/ Fri, 18 Sep 2026 02:41:48 +0200 Short answer: retire only the records owned by the departing property, never the whole DNS zone, unless an ownership check proves that the zone itself has no other consumers. Lower the relevant TTL before the cutover, wait for the old TTL window to pass, delete by an exact inventory, and keep restoration data until resolver checks agree. The... Weiterlesen

]]> <![CDATA[What `rsync -avz --delete` Actually Does]]> https://tsecurity.de/de/4153174/programmierung/what-rsync-avz-delete-actually-does/ https://tsecurity.de/de/4153174/programmierung/what-rsync-avz-delete-actually-does/ Fri, 18 Sep 2026 02:41:48 +0200 A lot of people paste rsync -avz --delete into a deploy script and move on without ever unpacking what each letter means. It works, so there's rarely a reason to stop and ask. But understanding what each flag actually instructs the command to do makes it much easier to reason about exactly how far --delete reaches, and why the other flags are... Weiterlesen

]]> <![CDATA[Verus proves Rust correct for all inputs. Code review still can't define "correct."]]> https://tsecurity.de/de/4153173/programmierung/verus-proves-rust-correct-for-all-inputs-code-review-still-cant-define-correct/ https://tsecurity.de/de/4153173/programmierung/verus-proves-rust-correct-for-all-inputs-code-review-still-cant-define-correct/ Fri, 18 Sep 2026 02:41:48 +0200 Amazon shipped a blog post on Verus, their Rust verifier used in Firecracker and AWS Lambda. Verus doesn't review your code. It proves it: annotated functions get checked against a mathematical spec for every possible input, mechanically, no model in the loop. Correctness stops being a judgment call and becomes a pass/fail. I keep coming back to... Weiterlesen

]]> <![CDATA[What self-hosting AI code review actually costs]]> https://tsecurity.de/de/4153172/programmierung/what-self-hosting-ai-code-review-actually-costs/ https://tsecurity.de/de/4153172/programmierung/what-self-hosting-ai-code-review-actually-costs/ Fri, 18 Sep 2026 02:41:48 +0200 The "best self-hosted AI code review tool" question gets searched constantly, and almost everything that ranks is a vendor listicle with no method. One source actually ran a test and published costs. Augment Code put ten open-source review tools against a 450K-file Python, TypeScript, Java and Go monorepo and documented what happened, published... Weiterlesen

]]> <![CDATA[Architecting Battery-Efficient Geofencing for Automated Sound Profiles]]> https://tsecurity.de/de/4153171/programmierung/architecting-battery-efficient-geofencing-for-automated-sound-profiles/ https://tsecurity.de/de/4153171/programmierung/architecting-battery-efficient-geofencing-for-automated-sound-profiles/ Fri, 18 Sep 2026 02:41:48 +0200 It was the middle of a Friday afternoon prayer session at the local masjid. The room was heavy with silence, a collective stillness that felt almost fragile. Suddenly, the sharp, upbeat jingle of a popular pop song blasted from somewhere in the back row. A hundred heads turned toward the culprit, who was frantically fumbling with their device,... Weiterlesen

]]> <![CDATA[Your README's code examples are untested — here's how I test mine in any language]]> https://tsecurity.de/de/4153169/programmierung/your-readmes-code-examples-are-untested-heres-how-i-test-mine-in-any-language/ https://tsecurity.de/de/4153169/programmierung/your-readmes-code-examples-are-untested-heres-how-i-test-mine-in-any-language/ Fri, 18 Sep 2026 02:41:48 +0200 Your README is full of code — shell commands, config snippets, &gt;&gt;&gt; sessions, example output. And unlike the rest of your codebase, none of it is tested. A flag gets renamed, an output format changes, a default shifts, and your examples rot silently. The worst part: the first thing a new user does is copy your first example and run it —... Weiterlesen

]]> <![CDATA[Deploying the 600GB Inkling-NVFP4 Model on Spot A3: A GKE and vLLM Deep Dive]]> https://tsecurity.de/de/4153168/programmierung/deploying-the-600gb-inkling-nvfp4-model-on-spot-a3-a-gke-and-vllm-deep-dive/ https://tsecurity.de/de/4153168/programmierung/deploying-the-600gb-inkling-nvfp4-model-on-spot-a3-a-gke-and-vllm-deep-dive/ Fri, 18 Sep 2026 02:41:48 +0200 Ok, so, maybe you're a software developer or data scientist who just heard about the new, massive 600GB Inkling-NVFP4 AI model, and you want to try running it yourself without breaking the bank. You also might have learned through some research that renting a "Spot A3" instance on Google Kubernetes Engine (GKE) is a brilliant way to do it. An A3... Weiterlesen

]]> <![CDATA[resterm v1.8.1]]> https://tsecurity.de/de/4153148/programmierung/resterm-v181/ https://tsecurity.de/de/4153148/programmierung/resterm-v181/ Fri, 18 Sep 2026 02:35:21 +0200 Terminal API client for HTTP, GraphQL and gRPC. Plain .http files you can diff and version, with workflows, mocks, profiling, tracing, OpenAPI import, SSH tunnels, Kubernetes port-forwards, WebSocket, SSE and a CLI runner. Weiterlesen

]]> <![CDATA[remove-ai-watermarks v0.41.1]]> https://tsecurity.de/de/4153145/programmierung/remove-ai-watermarks-v0411/ https://tsecurity.de/de/4153145/programmierung/remove-ai-watermarks-v0411/ Fri, 18 Sep 2026 02:35:21 +0200 Remove visible and invisible AI watermarks and provenance metadata from images and video. Python library and CLI for SynthID, C2PA, EXIF, IPTC, XMP, and common generative-AI marks. Weiterlesen

]]> <![CDATA[WebKit Features for Safari 27.0]]> https://tsecurity.de/de/4153123/programmierung/webkit-features-for-safari-270/ https://tsecurity.de/de/4153123/programmierung/webkit-features-for-safari-270/ Fri, 18 Sep 2026 01:57:14 +0200 Our Safari release notes have never been as long as they are for this version. The number of features alone rose from 58 to 83 since the first beta in June. Safari MCP makes working with coding agents dramatically easier. Customizable select turns the real &lt;select&gt; element into something you can fully restyle — now with new UA default styles... Weiterlesen

]]> <![CDATA[Hands-On Evolution of Deep Learning – Geoffrey Hinton’s AI Legacy]]> https://tsecurity.de/de/4153122/programmierung/hands-on-evolution-of-deep-learning-geoffrey-hintons-ai-legacy/ https://tsecurity.de/de/4153122/programmierung/hands-on-evolution-of-deep-learning-geoffrey-hintons-ai-legacy/ Fri, 18 Sep 2026 01:56:52 +0200 Geoffrey Hinton is known as the "the Godfather of AI". We just published a course on the freeCodeCamp.org YouTube channel that will help you master modern neural networks by recreating the groundbreaking discoveries of Geoffrey Hinton. The course covers his key papers and you will follow the evolution of the ideas across decades, from Boltzmann... Weiterlesen

]]> <![CDATA[Menghadapi "Retry Storms": Mengapa Retry Saja Tidak Cukup dalam Sistem Terdistribusi]]> https://tsecurity.de/de/4153121/programmierung/menghadapi-retry-storms-mengapa-retry-saja-tidak-cukup-dalam-sistem-terdistribusi/ https://tsecurity.de/de/4153121/programmierung/menghadapi-retry-storms-mengapa-retry-saja-tidak-cukup-dalam-sistem-terdistribusi/ Fri, 18 Sep 2026 01:56:51 +0200 Menghadapi "Retry Storms": Mengapa Retry Saja Tidak Cukup dalam Sistem Terdistribusi Pernahkah Anda mengalami situasi di mana satu servis kecil mengalami sedikit perlambatan, namun tiba-tiba seluruh infrastruktur tumbang seperti kartu domino? Jika Anda bekerja dengan sistem terdistribusi, kemungkinan besar Anda baru saja menyaksikan apa yang... Weiterlesen

]]> <![CDATA[From Copy-Pasting curl Commands to Building My Own Java Parser (jquick-curl)]]> https://tsecurity.de/de/4153120/programmierung/from-copy-pasting-curl-commands-to-building-my-own-java-parser-jquick-curl/ https://tsecurity.de/de/4153120/programmierung/from-copy-pasting-curl-commands-to-building-my-own-java-parser-jquick-curl/ Fri, 18 Sep 2026 01:56:51 +0200 How a QA handoff turned into a weekend rabbit hole and eventually an open-source library Tags: java, opensource, http, curl, backend The Slack message that started it all It's 4:47 PM on a Thursday. QA drops this in the channel: curl -X POST https://api.internal.example.com/orders \ -H 'Content-Type: application/json' \ -H 'Authorization: Bearer... Weiterlesen

]]> <![CDATA[FinOps na AWS: configurando o FinOps Agent e integrando com o Slack]]> https://tsecurity.de/de/4153119/programmierung/finops-na-aws-configurando-o-finops-agent-e-integrando-com-o-slack/ https://tsecurity.de/de/4153119/programmierung/finops-na-aws-configurando-o-finops-agent-e-integrando-com-o-slack/ Fri, 18 Sep 2026 01:56:51 +0200 1. Introdução Este artigo tem como objetivo documentar a configuração do AWS FinOps Agent e sua integração com o Slack, desde a habilitação dos pré-requisitos até o recebimento das mensagens no canal. O FinOps Agent foi lançado em junho de 2026, com o objetivo de investigar os custos na conta da AWS, sendo possível integrá-lo às ferramentas de... Weiterlesen

]]> <![CDATA[readme]]> https://tsecurity.de/de/4153118/programmierung/readme/ https://tsecurity.de/de/4153118/programmierung/readme/ Fri, 18 Sep 2026 01:56:51 +0200 Estou dando os primeiros passos na minha carreira em TI — e faço questão de compartilhar essa jornada com transparência. Meu nome é Pedro Sigismundo, tenho 22 anos e atualmente curso o 1º ano de Ciência da Computação na Universidade de Franca (Unifran). Tenho afinidade com áreas exatas, o que me leva naturalmente para a tecnologia — e hoje tenho... Weiterlesen

]]> <![CDATA[Is It Legal for AI to Train on Your Data?]]> https://tsecurity.de/de/4153117/programmierung/is-it-legal-for-ai-to-train-on-your-data/ https://tsecurity.de/de/4153117/programmierung/is-it-legal-for-ai-to-train-on-your-data/ Fri, 18 Sep 2026 01:56:51 +0200 Somewhere in the training data of the model you used this morning, there is a decent chance you are in there. Not you by name, necessarily, but your Reddit comments, the code you pushed to a public repository, the blog you kept in 2019, the photographs you posted before you thought to wonder where they would end up. The models that answer your... Weiterlesen

]]> <![CDATA[Drop Your Fav Portfolio Websites]]> https://tsecurity.de/de/4153115/programmierung/drop-your-fav-portfolio-websites/ https://tsecurity.de/de/4153115/programmierung/drop-your-fav-portfolio-websites/ Fri, 18 Sep 2026 01:56:51 +0200 Hello everyone! I’ve been really busy with work, and I won’t lie… procrastination played its part too. But we are sooo back! 🎉 After spending hours (and tokens 😂) creating my new portfolio website, I’d love to see your portfolio websites or even portfolios you absolutely love. As an art lover, I wanted my portfolio to feel a little more colorful... Weiterlesen

]]> <![CDATA[Anthropic and Adaptyv Bio Launch Claude-Powered Protein Design Competition]]> https://tsecurity.de/de/4153114/programmierung/anthropic-and-adaptyv-bio-launch-claude-powered-protein-design-competition/ https://tsecurity.de/de/4153114/programmierung/anthropic-and-adaptyv-bio-launch-claude-powered-protein-design-competition/ Fri, 18 Sep 2026 01:56:51 +0200 Anthropic and Adaptyv Bio have launched a co-sponsored protein design competition that will experimentally validate more than 5,000 AI-generated designs. The initiative combines Claude-enabled biology models, automated wet-lab testing, cloud computing support and funding, creating a larger end-to-end program for teams working on difficult... Weiterlesen

]]> <![CDATA[A pre-flight gate for vague MCP store rejections]]> https://tsecurity.de/de/4153083/programmierung/a-pre-flight-gate-for-vague-mcp-store-rejections/ https://tsecurity.de/de/4153083/programmierung/a-pre-flight-gate-for-vague-mcp-store-rejections/ Fri, 18 Sep 2026 01:27:32 +0200 The failure class to design for is this: your MCP server works against local clients, then stalls in a plugin store review with feedback too vague to act on. Freeze what you submitted. Pin the manifest, tool list with JSON Schemas, auth scopes, and example transcripts to one commit. Then run the same pre-flight before every resubmit: validate all... Weiterlesen

]]> <![CDATA[The EU Cyber Resilience Act Reporting Duty Started on 11 September 2026: What Manufacturers Now Have to Do in 24 Hours]]> https://tsecurity.de/de/4153082/programmierung/the-eu-cyber-resilience-act-reporting-duty-started-on-11-september-2026-what-manufacturers-now-have-to-do-in-24-hours/ https://tsecurity.de/de/4153082/programmierung/the-eu-cyber-resilience-act-reporting-duty-started-on-11-september-2026-what-manufacturers-now-have-to-do-in-24-hours/ Fri, 18 Sep 2026 01:27:31 +0200 The EU Cyber Resilience Act Reporting Duty Started on 11 September 2026: What Manufacturers Now Have to Do in 24 Hours On 11 September 2026, Article 14 of the EU Cyber Resilience Act (CRA, Regulation (EU) 2024/2847) became directly applicable. It is the first hard compliance milestone of the regulation, and it arrived more than a year before the... Weiterlesen

]]> <![CDATA[XenevaOS an Operating System written from scratch with XR in mind. https://github.com/manaskamal/XenevaOS #operatingsystem #lowlevel #os #xeneva]]> https://tsecurity.de/de/4153081/programmierung/xenevaos-an-operating-system-written-from-scratch-with-xr-in-mind-httpsgithubcommanaskamalxenevaosoperatingsystem-lowlevel-os-xeneva/ https://tsecurity.de/de/4153081/programmierung/xenevaos-an-operating-system-written-from-scratch-with-xr-in-mind-httpsgithubcommanaskamalxenevaosoperatingsystem-lowlevel-os-xeneva/ Fri, 18 Sep 2026 01:27:31 +0200 GitHub - manaskamal/XenevaOS: The Xeneva Operating System · GitHub The Xeneva Operating System. Contribute to manaskamal/XenevaOS development by creating an account on GitHub. github.com Weiterlesen

]]> <![CDATA[What is the programming job market like in 2026? Is it still worth investing in the field and pursuing a career opportunity?]]> https://tsecurity.de/de/4153080/programmierung/what-is-the-programming-job-market-like-in-2026-is-it-still-worth-investing-in-the-field-and-pursuing-a-career-opportunity/ https://tsecurity.de/de/4153080/programmierung/what-is-the-programming-job-market-like-in-2026-is-it-still-worth-investing-in-the-field-and-pursuing-a-career-opportunity/ Fri, 18 Sep 2026 01:27:31 +0200 Hi everyone, I’d like to hear the opinions of those already in the field or those trying to break into it. I’m a Computer Science student, and I’ve been trying to land my first opportunity as a developer, but so far, I haven't succeeded. Throughout this time, I’ve kept studying and trying to improve. Currently, I’m focusing on Python, data... Weiterlesen

]]> <![CDATA[Stop Asking Which Agentic Coding Methodology to Use]]> https://tsecurity.de/de/4153078/programmierung/stop-asking-which-agentic-coding-methodology-to-use/ https://tsecurity.de/de/4153078/programmierung/stop-asking-which-agentic-coding-methodology-to-use/ Fri, 18 Sep 2026 01:27:31 +0200 The prevailing question in AI-assisted development—"Which methodology should I use?"—is fundamentally flawed. Superpowers, BMAD, Compound Engineering, OpenSpec, SpecKit, GSD, Ralph. The ecosystem is flooded with systems claiming to run your AI agents. The thesis here is simple: There is no universal winner. Each framework orchestrates a distinct... Weiterlesen

]]> <![CDATA[Manage Internal DNS Hostnames from Infrastructure Code in 4 Deploy Steps]]> https://tsecurity.de/de/4153076/programmierung/manage-internal-dns-hostnames-from-infrastructure-code-in-4-deploy-steps/ https://tsecurity.de/de/4153076/programmierung/manage-internal-dns-hostnames-from-infrastructure-code-in-4-deploy-steps/ Fri, 18 Sep 2026 01:27:31 +0200 TL;DR: Keep stable internal DNS records in the infrastructure repository, upsert them during deployment, then read them back and fail the deployment on any difference. That makes a marketplace hostname cutover reviewable and gives rollback a concrete input: the last committed record set. Do not put fast-changing service locations in this loop; use... Weiterlesen

]]> <![CDATA[Anthropic’s AI R&D Measurements Point to a Broader Transparency Model]]> https://tsecurity.de/de/4153075/programmierung/anthropics-ai-rd-measurements-point-to-a-broader-transparency-model/ https://tsecurity.de/de/4153075/programmierung/anthropics-ai-rd-measurements-point-to-a-broader-transparency-model/ Fri, 18 Sep 2026 01:27:31 +0200 Anthropic’s public work on AI R&amp;D automation points to a more demanding way to track advanced AI systems: measure not only what a model can do in an evaluation, but also how it is used in consequential research decisions and whether it creates operational risks. The approach matters because AI is increasingly being applied to the work of... Weiterlesen

]]> <![CDATA[I built a digital city where brands can own the advertising space]]> https://tsecurity.de/de/4153074/programmierung/i-built-a-digital-city-where-brands-can-own-the-advertising-space/ https://tsecurity.de/de/4153074/programmierung/i-built-a-digital-city-where-brands-can-own-the-advertising-space/ Fri, 18 Sep 2026 01:27:31 +0200 Most internet advertising still looks the same. Banners. Sponsored cards. Promoted posts. Rectangles everywhere. I wanted to try something different: What if advertising was a place instead of a box? So I built Swishtown. Swishtown is a fictional digital city where buildings, shops, roads, parks, and other locations can become advertising real... Weiterlesen

]]> <![CDATA[Your Calendar Invite Just Ordered Cupcakes: The Smart Home Agent Security Gap Nobody's Watching]]> https://tsecurity.de/de/4153073/programmierung/your-calendar-invite-just-ordered-cupcakes-the-smart-home-agent-security-gap-nobodys-watching/ https://tsecurity.de/de/4153073/programmierung/your-calendar-invite-just-ordered-cupcakes-the-smart-home-agent-security-gap-nobodys-watching/ Fri, 18 Sep 2026 01:27:31 +0200 A Gemini-powered smart home agent misread a dentist appointment invite and ordered cupcakes instead. Not a hypothetical, not a red-team exercise, just a normal calendar entry that got interpreted as a commerce instruction and turned into an actual order. Forkast's writeup uses this alongside the Meta Muse iCloud photo exposure and the DJI Romo... Weiterlesen

]]> <![CDATA[Agentic CLI customizations now in the usage metrics API]]> https://tsecurity.de/de/4153038/programmierung/agentic-cli-customizations-now-in-the-usage-metrics-api/ https://tsecurity.de/de/4153038/programmierung/agentic-cli-customizations-now-in-the-usage-metrics-api/ Fri, 18 Sep 2026 00:30:56 +0200 GitHub Copilot expands existing CLI report coverage with agentic activity metrics for skills, custom agents, Model Context Protocol (MCP) servers, slash commands, and plugins. What’s new The fields appear in enterprise and organization per-user and aggregate 1-day reports, per-user 28-day reports, and the day_totals entries in aggregate 28-day... Weiterlesen

]]> <![CDATA[Copilot impact dashboard now shows feature engagement]]> https://tsecurity.de/de/4153037/programmierung/copilot-impact-dashboard-now-shows-feature-engagement/ https://tsecurity.de/de/4153037/programmierung/copilot-impact-dashboard-now-shows-feature-engagement/ Fri, 18 Sep 2026 00:30:56 +0200 The Copilot impact dashboard now shows how many active users regularly use key Copilot features. Enterprise administrators can quickly see which experiences are widely adopted and which may need more enablement. Enterprise and organization report APIs now include the same 28-day feature engagement breakdown, along with an AI adoption phase... Weiterlesen

]]> <![CDATA[Weekly Report PDF Pipeline: 3 Boundaries Between HTML Templates and Cron Jobs]]> https://tsecurity.de/de/4153035/programmierung/weekly-report-pdf-pipeline-3-boundaries-between-html-templates-and-cron-jobs/ https://tsecurity.de/de/4153035/programmierung/weekly-report-pdf-pipeline-3-boundaries-between-html-templates-and-cron-jobs/ Fri, 18 Sep 2026 00:30:14 +0200 Short answer: keep the weekly schedule, report data, and HTML-to-PDF rendering behind three separate contracts, then let one idempotent job compose them. The deciding constraint is template ownership. If developers own the HTML template, a Node.js service can validate data, render markup, produce a PDF, and store it without asking another system... Weiterlesen

]]> <![CDATA[Attaching a Runner: The DevOps Term Nobody Explains Until It Costs You]]> https://tsecurity.de/de/4153033/programmierung/attaching-a-runner-the-devops-term-nobody-explains-until-it-costs-you/ https://tsecurity.de/de/4153033/programmierung/attaching-a-runner-the-devops-term-nobody-explains-until-it-costs-you/ Fri, 18 Sep 2026 00:30:14 +0200 When I started my DevOps journey back in 2020, I was curious about the term "Octopus Deploy." I figured: okay, it's software that helps release and distribute our code? Then I used Jenkins to deploy my own code from GitHub for the first time — Jenkins has a UI you can work with directly, so I assumed it was the same kind of thing: a tool you just... Weiterlesen

]]> <![CDATA[A task-healer has to bound its own coordination noise]]> https://tsecurity.de/de/4153031/programmierung/a-task-healer-has-to-bound-its-own-coordination-noise/ https://tsecurity.de/de/4153031/programmierung/a-task-healer-has-to-bound-its-own-coordination-noise/ Fri, 18 Sep 2026 00:30:13 +0200 On 2026-09-16 we measured a failure mode in the mesh task healer: resolver-for-resolver retries were producing coordination noise faster than they produced recovery. The inventory at ~/.mesh/evidence/unblock-mess-20260916/inventory.md counted 627 unique unblock steps; 275 were meta-steps whose blocker was itself another unblock/... task, and 95 of... Weiterlesen

]]> <![CDATA[Google Search Console’s June 2026 Indexing Data Gap: What Website Owners Should Do]]> https://tsecurity.de/de/4153030/programmierung/google-search-consoles-june-2026-indexing-data-gap-what-website-owners-should-do/ https://tsecurity.de/de/4153030/programmierung/google-search-consoles-june-2026-indexing-data-gap-what-website-owners-should-do/ Fri, 18 Sep 2026 00:30:12 +0200 Google Search Console users should treat June 2026 Page Indexing figures as unreliable for trend analysis, rather than as proof that pages have suddenly stopped being crawled or indexed. Industry reporting documented a multi-day gap in the Page Indexing report, with activity last seen around June 11 for affected accounts. Google’s reported... Weiterlesen

]]> <![CDATA[Crystal memory: notes that arrive when you act, not when you go looking]]> https://tsecurity.de/de/4153029/programmierung/crystal-memory-notes-that-arrive-when-you-act-not-when-you-go-looking/ https://tsecurity.de/de/4153029/programmierung/crystal-memory-notes-that-arrive-when-you-act-not-when-you-go-looking/ Fri, 18 Sep 2026 00:30:12 +0200 Crystal memory: notes that arrive when you act, not when you go looking Stop your agent making the same mistakes again and again, and looking up the same facts again and again. Sixty days in we still cannot prove it helped, so we started hiding it from ourselves at random to find out. The knowing arrives before the act A crystal is a short knowing... Weiterlesen

]]> <![CDATA[One Missing WHERE Clause Can Expose Another Customer’s Data]]> https://tsecurity.de/de/4153028/programmierung/one-missing-where-clause-can-expose-another-customers-data/ https://tsecurity.de/de/4153028/programmierung/one-missing-where-clause-can-expose-another-customers-data/ Fri, 18 Sep 2026 00:30:11 +0200 A customer opens their dashboard and sees another company’s invoices. Nobody needed to break in. An endpoint returned data it should never have returned. That’s one of the mistakes I want to make harder to introduce when building a B2B SaaS. Authentication alone doesn’t solve it: a user can be correctly logged in and still receive another... Weiterlesen

]]> <![CDATA[I Turned My Editor Into a Pokémon World That Levels Up When I Actually Ship]]> https://tsecurity.de/de/4153027/programmierung/i-turned-my-editor-into-a-pokmon-world-that-levels-up-when-i-actually-ship/ https://tsecurity.de/de/4153027/programmierung/i-turned-my-editor-into-a-pokmon-world-that-levels-up-when-i-actually-ship/ Fri, 18 Sep 2026 00:30:10 +0200 Repo: https://github.com/UribeJr/pokedev Most editor pets are wallpaper. Cute? Sure. Connected to the work you’re already doing? Not really. So I built PokéDev — a VS Code / Cursor extension where your partner lives in a nostalgic 2D overworld (or classic floor pets), and Trainer + Partner XP come from saves, commits, coding time, and successful... Weiterlesen

]]> <![CDATA[PWC 391 Median Boxes]]> https://tsecurity.de/de/4153026/programmierung/pwc-391-median-boxes/ https://tsecurity.de/de/4153026/programmierung/pwc-391-median-boxes/ Fri, 18 Sep 2026 00:30:09 +0200 The first task asks us to combine sorted arrays and find the median, and the second asks us to combine boxes by stacking them inside each other. I feel the urge to merge. Task 1: Array Median The median is the middle point in a sorted list. Our musical selection should a couple of songs titled 'The Middle', one by Jimmy Eat World (warning, the... Weiterlesen

]]> <![CDATA[The EU AI Act's logging rule moved to December 2027. The logs did not get easier.]]> https://tsecurity.de/de/4153025/programmierung/the-eu-ai-acts-logging-rule-moved-to-december-2027-the-logs-did-not-get-easier/ https://tsecurity.de/de/4153025/programmierung/the-eu-ai-acts-logging-rule-moved-to-december-2027-the-logs-did-not-get-easier/ Fri, 18 Sep 2026 00:30:09 +0200 The Digital Omnibus on AI (Regulation (EU) 2026/1744) was published in the Official Journal on 24 July 2026 and entered into force three days later. The obligations for high-risk AI systems, including record-keeping, now apply from 2 December 2027 for the stand-alone systems in Annex III and from 2 August 2028 for AI built into regulated products.... Weiterlesen

]]> <![CDATA[Microsoft Open-Sources TauGrid: A Kubernetes-Native Stack for GPU AI Workloads]]> https://tsecurity.de/de/4153020/programmierung/microsoft-open-sources-taugrid-a-kubernetes-native-stack-for-gpu-ai-workloads/ https://tsecurity.de/de/4153020/programmierung/microsoft-open-sources-taugrid-a-kubernetes-native-stack-for-gpu-ai-workloads/ Fri, 18 Sep 2026 00:29:07 +0200 Platform teams running AI on Kubernetes rarely run one thing. They run a queueing system, a distributed runtime, GPU node health checks, dashboards, and a layer of submission scripts holding all of it together. The Azure Kubernetes Service engineering team open-sourced TauGrid, which collapses that assembly job into a single Helm install. Is it... Weiterlesen

]]> <![CDATA[AI-to-AI Payments: Why Autonomous Agents May Need Their Own Economy]]> https://tsecurity.de/de/4152940/programmierung/ai-to-ai-payments-why-autonomous-agents-may-need-their-own-economy/ https://tsecurity.de/de/4152940/programmierung/ai-to-ai-payments-why-autonomous-agents-may-need-their-own-economy/ Thu, 17 Sep 2026 23:14:59 +0200 Artificial intelligence is rapidly moving beyond the role of a tool that simply answers questions. The next generation of AI systems is being designed to act. Autonomous agents can analyze information, make decisions, interact with software, negotiate with other agents and execute multi-step tasks with limited human involvement. Increasingly, the... Weiterlesen

]]> <![CDATA[Ephemeral Shouldn't Mean Downloading ffmpeg Again]]> https://tsecurity.de/de/4152939/programmierung/ephemeral-shouldnt-mean-downloading-ffmpeg-again/ https://tsecurity.de/de/4152939/programmierung/ephemeral-shouldnt-mean-downloading-ffmpeg-again/ Thu, 17 Sep 2026 23:14:59 +0200 Part 3 got me a clean rebuild from a recipe. It also got me a stupid situation. Every time I launch a Workshop, or every time a fresh Bench needs the same toolchain, the operating system fetches and compiles the exact same ffmpeg again. Ten Benches that all need ffmpeg means ten identical downloads and ten identical builds. The cleanliness is real... Weiterlesen

]]> <![CDATA[I taught a 27B model to write Forge apps. As far as I can find, nobody had done that before]]> https://tsecurity.de/de/4152938/programmierung/i-taught-a-27b-model-to-write-forge-apps-as-far-as-i-can-find-nobody-had-done-that-before/ https://tsecurity.de/de/4152938/programmierung/i-taught-a-27b-model-to-write-forge-apps-as-far-as-i-can-find-nobody-had-done-that-before/ Thu, 17 Sep 2026 23:14:59 +0200 Key takeaways Atlassian Models is Qwen3.8-27B taught Forge, Jira, Confluence and JSM from real apps, the docs, the OpenAPI specs and our own community answers. The 27B's weights are on Hugging Face under Apache-2.0 in five artefacts, and a 9B member joined it this morning. Measured, base to tuned: Atlassian identifier probe 15% to 69%; Forge... Weiterlesen

]]> <![CDATA[Should you harness the harness: what a workflow engine actually is]]> https://tsecurity.de/de/4152937/programmierung/should-you-harness-the-harness-what-a-workflow-engine-actually-is/ https://tsecurity.de/de/4152937/programmierung/should-you-harness-the-harness-what-a-workflow-engine-actually-is/ Thu, 17 Sep 2026 23:14:59 +0200 Part one described a procedure that lives inside the agent session, and the limits that follow from it living there. This part is about the alternative, and about how little of what is sold as the alternative actually is one. A workflow engine is a program that holds the procedure and calls the coding agent when it needs intelligence. That is the... Weiterlesen

]]> <![CDATA[My wife came home late every shift because of ultrasound paperwork, so I wrote her a program]]> https://tsecurity.de/de/4152936/programmierung/my-wife-came-home-late-every-shift-because-of-ultrasound-paperwork-so-i-wrote-her-a-program/ https://tsecurity.de/de/4152936/programmierung/my-wife-came-home-late-every-shift-because-of-ultrasound-paperwork-so-i-wrote-her-a-program/ Thu, 17 Sep 2026 23:14:59 +0200 I am a software developer. A couple of years ago I started learning mobile development to build small personal apps for the phone. A hobby, really. My wife is a physician who spends her day with an ultrasound probe. A couple of evenings a week she has late appointments, and on those evenings I noticed a pattern: she came home very late, and I... Weiterlesen

]]> <![CDATA[MikroTrick: How Two SSH Flaws Let Attackers Take Over MikroTik Routers Without Credentials]]> https://tsecurity.de/de/4152935/programmierung/mikrotrick-how-two-ssh-flaws-let-attackers-take-over-mikrotik-routers-without-credentials/ https://tsecurity.de/de/4152935/programmierung/mikrotrick-how-two-ssh-flaws-let-attackers-take-over-mikrotik-routers-without-credentials/ Thu, 17 Sep 2026 23:14:59 +0200 MikroTrick: How Two SSH Flaws Let Attackers Take Over MikroTik Routers Without Credentials Routers are the devices network teams configure once and then stop looking at. The MikroTrick exploit chain, disclosed by CERT Polska in September 2026, shows what that neglect costs when the management interface is reachable from the internet. What the... Weiterlesen

]]> <![CDATA[The slowest requests on our API were the ones that found nothing]]> https://tsecurity.de/de/4152934/programmierung/the-slowest-requests-on-our-api-were-the-ones-that-found-nothing/ https://tsecurity.de/de/4152934/programmierung/the-slowest-requests-on-our-api-were-the-ones-that-found-nothing/ Thu, 17 Sep 2026 23:14:59 +0200 On 9 September 2026, asking our API for the most recent port event of a vessel took 28 ms if the vessel had one and 2.0 to 2.5 s if it had none. Asking for the ETA of a vessel whose IMO we could not map to an MMSI took 12 s on a quiet database and 30 s or more on a busy one, until the statement timeout ended it. Over one night, requests that ended... Weiterlesen

]]> <![CDATA[Fireship: Did Google actually build RSI? Dream-RSI first look]]> https://tsecurity.de/de/4152917/programmierung/did-google-actually-build-rsi-dream-rsi-first-look/ https://tsecurity.de/de/4152917/programmierung/did-google-actually-build-rsi-dream-rsi-first-look/ Thu, 17 Sep 2026 23:04:02 +0200 YouTube Video

Run GitHub Actions 2x faster and build with Codesmith at https://www.blacksmith.sh/

Google DeepMind just published Dream-RSI, a technique that turns an AI's old discovery logs into a simulator so it can test thousands of exploration strategies. But is this actually RSI or just a search algorithm with caching? Let's dive in.

#coding #programming

Want more Fireship?

🗞️ Newsletter: https://bytes.dev
🧠 Courses: https://fireship.dev
]]> <![CDATA[Bolt.new launches Forge to widen who gets to build with AI]]> https://tsecurity.de/de/4152915/programmierung/boltnew-launches-forge-to-widen-who-gets-to-build-with-ai/ https://tsecurity.de/de/4152915/programmierung/boltnew-launches-forge-to-widen-who-gets-to-build-with-ai/ Thu, 17 Sep 2026 22:45:03 +0200 SAN FRANCISCO —  Bolt.new, the AI app builder, today launched Bolt Forge, a research preview built to widen who gets to build software, and a bet on open-source models as the way to do it. Every individual Bolt.new Pro plan now includes 50X more usage on open models at no extra cost. Price has been deciding who gets to build with AI. Plenty of... Weiterlesen

]]> <![CDATA[Common Pitfalls in RAG Applications: What to Avoid When Using Vector Search and Embeddings]]> https://tsecurity.de/de/4152914/programmierung/common-pitfalls-in-rag-applications-what-to-avoid-when-using-vector-search-and-embeddings/ https://tsecurity.de/de/4152914/programmierung/common-pitfalls-in-rag-applications-what-to-avoid-when-using-vector-search-and-embeddings/ Thu, 17 Sep 2026 22:44:55 +0200 Here's the demo that always works: you point a notebook at a vector index, ask it a question, and it answers perfectly. Everyone claps. Three weeks later, the same system tells a customer that your refund window is 90 days when it's 30, cites a document that doesn't exist, and occasionally surfaces another tenant's invoice in the context. Nobody... Weiterlesen

]]> <![CDATA[Turn Your Android Phone Into a Local Development Server With Termux]]> https://tsecurity.de/de/4152913/programmierung/turn-your-android-phone-into-a-local-development-server-with-termux/ https://tsecurity.de/de/4152913/programmierung/turn-your-android-phone-into-a-local-development-server-with-termux/ Thu, 17 Sep 2026 22:44:53 +0200 You don't always need a computer to test a website or run a small development project. With Termux, your Android phone can run a local development server. You can use it to test websites, run Python applications, work with APIs, or access projects from another device on the same network. It is not a replacement for a production server, but it can... Weiterlesen

]]> <![CDATA[Global Workspace Theory The J-Space of Claude]]> https://tsecurity.de/de/4152912/programmierung/global-workspace-theory-the-j-space-of-claude/ https://tsecurity.de/de/4152912/programmierung/global-workspace-theory-the-j-space-of-claude/ Thu, 17 Sep 2026 22:44:53 +0200 What a 40-year-old theory of human consciousness has to do with catching an AI model lying. Okay, so here's the thing that made me stop scrolling Before Claude Sonnet 4.5 wrote a single word of its response, something had already happened inside it. The setup: a safety test built to bait the model into blackmail. Acting as an email assistant,... Weiterlesen

]]> <![CDATA[How to Run Docker/Containers With Termux]]> https://tsecurity.de/de/4152910/programmierung/how-to-run-dockercontainers-with-termux/ https://tsecurity.de/de/4152910/programmierung/how-to-run-dockercontainers-with-termux/ Thu, 17 Sep 2026 22:44:53 +0200 Docker is widely used for running applications inside isolated containers. But Docker is designed around Linux features that are not directly available in a normal Android environment. That does not mean you cannot experiment with containers on an Android phone. With Termux, you can create a Linux userspace and use container-related tools in ways... Weiterlesen

]]> <![CDATA[I Accidentally Built a Dark Software Factory. Here's How.]]> https://tsecurity.de/de/4152909/programmierung/i-accidentally-built-a-dark-software-factory-heres-how/ https://tsecurity.de/de/4152909/programmierung/i-accidentally-built-a-dark-software-factory-heres-how/ Thu, 17 Sep 2026 22:44:53 +0200 This is the first in a series of articles about my dark software factory, Holodeck. This one covers how it came to be and the principles underneath it. In future articles I'd like to dive into particular aspects in more detail. Want to know more about something I've written here? Hit me up on LinkedIn or Twitter and tell me what to write about... Weiterlesen

]]> <![CDATA[Congrats to the DEV Weekend Challenge: Dog Days Edition Winners!]]> https://tsecurity.de/de/4152908/programmierung/congrats-to-the-dev-weekend-challenge-dog-days-edition-winners/ https://tsecurity.de/de/4152908/programmierung/congrats-to-the-dev-weekend-challenge-dog-days-edition-winners/ Thu, 17 Sep 2026 22:44:53 +0200 The results are in for our DEV Weekend Challenge: Dog Days Edition! Thank you for your patience while we worked through judging, and thank you for the volume and quality of what you sent us. We asked you to build something for, about, or inspired by dogs ahead of International Dog Day. What came back was even cuter than expected: from an OS for... Weiterlesen

]]> <![CDATA[Full Stack HQ: A Permission-First AI Engineering Stack for Claude Code, Antigravity, and Codex]]> https://tsecurity.de/de/4152907/programmierung/full-stack-hq-a-permission-first-ai-engineering-stack-for-claude-code-antigravity-and-codex/ https://tsecurity.de/de/4152907/programmierung/full-stack-hq-a-permission-first-ai-engineering-stack-for-claude-code-antigravity-and-codex/ Thu, 17 Sep 2026 22:44:53 +0200 AI coding agents can move quickly. The engineering challenge is keeping intent, approval, and verification visible while they do. That is the problem Full Stack HQ is designed to address: a shared, permission-first engineering workflow that can travel across multiple AI coding hosts. The project supports Claude Code, Google Antigravity IDE, and... Weiterlesen

]]> <![CDATA[Anthropic Opens Its Life Sciences Verification Program for Gated Mythos Access]]> https://tsecurity.de/de/4152906/programmierung/anthropic-opens-its-life-sciences-verification-program-for-gated-mythos-access/ https://tsecurity.de/de/4152906/programmierung/anthropic-opens-its-life-sciences-verification-program-for-gated-mythos-access/ Thu, 17 Sep 2026 22:44:53 +0200 Anthropic has launched the Life Sciences Verification Program (LSVP), an invite-only beta intended to give vetted life sciences researchers access to Mythos 5.1 under a specialized safety framework. The program creates a formal route for eligible organizations to use Anthropic's most restricted biology-oriented model capabilities while retaining... Weiterlesen

]]> <![CDATA[I never fully understood Python for loops until I grasped the range function. Here is what I learnt]]> https://tsecurity.de/de/4152905/programmierung/i-never-fully-understood-python-for-loops-until-i-grasped-the-range-function-here-is-what-i-learnt/ https://tsecurity.de/de/4152905/programmierung/i-never-fully-understood-python-for-loops-until-i-grasped-the-range-function-here-is-what-i-learnt/ Thu, 17 Sep 2026 22:44:53 +0200 I come from a C Programming background, where for loops are very simple. for(int i = 0; i &lt; n; i++) { // Your fabulous code block } This was intuitively easy to understand. The first part int i = 0 is the initialization (the starting point) for the iterator. It is also nice that this int lives and dies within the scope of this for loop... Weiterlesen

]]> <![CDATA[Was bash the wrong language for my agent?]]> https://tsecurity.de/de/4152904/programmierung/was-bash-the-wrong-language-for-my-agent/ https://tsecurity.de/de/4152904/programmierung/was-bash-the-wrong-language-for-my-agent/ Thu, 17 Sep 2026 22:44:53 +0200 I have a small agent that handles one piece of routine work at a time. It looks at what needs doing, picks the thing most worth doing, shows me the plan, and does it if I say yes. Underneath, it is glue: it drives a few command-line tools, calls a model, reshapes a lot of JSON, and prints a readable summary. It was 2150 lines of bash across seven... Weiterlesen

]]> <![CDATA[Why I Built an Alternative to the Play Store for APK Distribution]]> https://tsecurity.de/de/4152903/programmierung/why-i-built-an-alternative-to-the-play-store-for-apk-distribution/ https://tsecurity.de/de/4152903/programmierung/why-i-built-an-alternative-to-the-play-store-for-apk-distribution/ Thu, 17 Sep 2026 22:44:53 +0200 Every Android developer I know has run into the same wall: slow app store review cycles, an opaque ranking algorithm deciding who sees your app, and policy changes that can bury a listing overnight with no warning. That frustration is why I built Aeroapk (aeroapk.store) — an independent Android app catalog where developers publish their APKs... Weiterlesen

]]> <![CDATA[Flock-Hack zeigt: Überwachungskameras speichern mehr als nur Bilder von Autokennzeichen]]> https://tsecurity.de/de/4152855/programmierung/flock-hack-zeigt-ueberwachungskameras-speichern-mehr-als-nur-bilder-von-autokennzeichen/ https://tsecurity.de/de/4152855/programmierung/flock-hack-zeigt-ueberwachungskameras-speichern-mehr-als-nur-bilder-von-autokennzeichen/ Thu, 17 Sep 2026 21:44:47 +0200 Hacker:innen haben in den USA eine der umstrittenen Überwachungskameras des Herstellers Flock Safety unter die Lupe genommen. Dabei fanden sie heraus, dass die Geräte nicht nur Autokennzeichen speichern, sondern auch Personen und Fahrräder. Weiterlesen

]]> <![CDATA[A new experience for Claude projects, now available in beta in Claude Code]]> https://tsecurity.de/de/4152854/programmierung/a-new-experience-for-claude-projects-now-available-in-beta-in-claude-code/ https://tsecurity.de/de/4152854/programmierung/a-new-experience-for-claude-projects-now-available-in-beta-in-claude-code/ Thu, 17 Sep 2026 21:44:39 +0200 Managing multiple sessions across a build used to require you to divide the work, juggle handoffs, and stitch the results back together. Now in a Claude Code project, you describe what needs to get done and Claude manages the work. Claude scopes the request, delegates the work, coordinates parallel threads, reviews the outputs, and assembles the... Weiterlesen

]]> <![CDATA[Choosing How to Look Up Chinese Zodiac Compatibility: Spreadsheet, Manual, or Purpose-Built Tool]]> https://tsecurity.de/de/4152853/programmierung/choosing-how-to-look-up-chinese-zodiac-compatibility-spreadsheet-manual-or-purpose-built-tool/ https://tsecurity.de/de/4152853/programmierung/choosing-how-to-look-up-chinese-zodiac-compatibility-spreadsheet-manual-or-purpose-built-tool/ Thu, 17 Sep 2026 21:44:26 +0200 Looking up how two birth years interact under the twelve-animal cycle seems simple until you try to do it consistently across a team. A relationship counselor running client intake, a content producer writing a series, and an HR coordinator planning a Lunar New Year event all face the same underlying question: which method is reliable enough that... Weiterlesen

]]> <![CDATA[HTMX is fine until the third stakeholder wants a modal]]> https://tsecurity.de/de/4152852/programmierung/htmx-is-fine-until-the-third-stakeholder-wants-a-modal/ https://tsecurity.de/de/4152852/programmierung/htmx-is-fine-until-the-third-stakeholder-wants-a-modal/ Thu, 17 Sep 2026 21:44:26 +0200 HTMX was successfully implemented in a production environment earlier this year. Then, out of the blue, the third stakeholder expressed their desire for a modal. They tend to break your lovely little world of HTMX snappy actions that got a free pony, a grenade, and a lollipop. That's usually when the fantasy cracks. 🫠 The pitch is real, and it... Weiterlesen

]]> <![CDATA[Jev + Pi: a probability gate for my coding agent's shell commands]]> https://tsecurity.de/de/4152851/programmierung/jev-pi-a-probability-gate-for-my-coding-agents-shell-commands/ https://tsecurity.de/de/4152851/programmierung/jev-pi-a-probability-gate-for-my-coding-agents-shell-commands/ Thu, 17 Sep 2026 21:44:25 +0200 TypeSafe released Jev on 2026-09-15. It is a decision-only model: you give it yes/no propositions and it returns a probability instead of text. I put it in front of Pi's bash, write and edit calls, and then measured 18 commands to decide where the thresholds should sit. TL;DR What it is: An auto-mode extension for the Pi coding agent CLI that uses... Weiterlesen

]]> <![CDATA[Does RAG Need Better Retrieval — or Better Relationships?]]> https://tsecurity.de/de/4152849/programmierung/does-rag-need-better-retrieval-or-better-relationships/ https://tsecurity.de/de/4152849/programmierung/does-rag-need-better-retrieval-or-better-relationships/ Thu, 17 Sep 2026 21:44:25 +0200 I started this experiment for a slightly different reason. I was playing with a system that could reconstruct context across documents. Not summarize documents. Not retrieve the most similar chunks. Reconstruct context. For example, suppose I have two documents: In 2022, the team chose PostgreSQL. And somewhere else: After the migration problems,... Weiterlesen

]]> <![CDATA[Hardening Jenkins After the September 2026 Plugin Advisory: A Practical Guide]]> https://tsecurity.de/de/4152848/programmierung/hardening-jenkins-after-the-september-2026-plugin-advisory-a-practical-guide/ https://tsecurity.de/de/4152848/programmierung/hardening-jenkins-after-the-september-2026-plugin-advisory-a-practical-guide/ Thu, 17 Sep 2026 21:44:25 +0200 Hardening Jenkins After the September 2026 Plugin Advisory: A Practical Guide The Jenkins advisory of September 16, 2026 covers 20 plugin vulnerabilities, seven of which break the Script Security sandbox and yield code execution on the controller. The patches are available. What follows is the operational work around them: how to apply the fixes,... Weiterlesen

]]> <![CDATA[How to Shrink Key Revocation Latency: Webhook Intake with a Scheduled Polling Backstop]]> https://tsecurity.de/de/4152846/programmierung/how-to-shrink-key-revocation-latency-webhook-intake-with-a-scheduled-polling-backstop/ https://tsecurity.de/de/4152846/programmierung/how-to-shrink-key-revocation-latency-webhook-intake-with-a-scheduled-polling-backstop/ Thu, 17 Sep 2026 21:44:24 +0200 Use the push channel for speed and a scheduled poll for proof. Registered webhooks carry a revocation from the issuer to your gateway in a couple of seconds; scheduled polling is what tells you, an hour later, whether that revocation actually landed. On a support desk product where every tenant holds its own scoped key, the axis that decides the... Weiterlesen

]]> <![CDATA[Algorithmic Trading: Debug Your Backtest Before Upgrading Your Model]]> https://tsecurity.de/de/4152845/programmierung/algorithmic-trading-debug-your-backtest-before-upgrading-your-model/ https://tsecurity.de/de/4152845/programmierung/algorithmic-trading-debug-your-backtest-before-upgrading-your-model/ Thu, 17 Sep 2026 21:44:24 +0200 A company releases earnings at 4:05 p.m. Your trading backtest buys its stock at 4:00 p.m., using those earnings to make the decision. The tests pass. The chart looks great. Your model can apparently predict the future. Somewhere in the pipeline, someone joined two datasets on a date column. That five-minute mistake captures what interests me... Weiterlesen

]]> <![CDATA[Dropbox App for Gemini Brings File Search, Sharing and Automation Into Gemini Workflows]]> https://tsecurity.de/de/4152844/programmierung/dropbox-app-for-gemini-brings-file-search-sharing-and-automation-into-gemini-workflows/ https://tsecurity.de/de/4152844/programmierung/dropbox-app-for-gemini-brings-file-search-sharing-and-automation-into-gemini-workflows/ Thu, 17 Sep 2026 21:44:24 +0200 Dropbox has become an official connected app for Google Gemini, giving eligible users a way to locate, summarize, share and manage Dropbox files without leaving Gemini Chat. The integration also extends to Gemini Spark, Google’s workflow environment for tasks that can span multiple connected apps. For teams already storing working documents in... Weiterlesen

]]> <![CDATA[Why client SDK generation belongs in the open]]> https://tsecurity.de/de/4152822/programmierung/why-client-sdk-generation-belongs-in-the-open/ https://tsecurity.de/de/4152822/programmierung/why-client-sdk-generation-belongs-in-the-open/ Thu, 17 Sep 2026 21:18:59 +0200 Google has partnered with Speakeasy to open-source their OpenAPI code generation suite under the AGPLv3 license, a strategic move prompted by the sudden shutdown of Google's previous proprietary SDK provider. The newly open-sourced suite equips developers with deterministic, multi-language SDK generators that natively support strict typing and SSE... Weiterlesen

]]> <![CDATA[An AI System Grows Upward, Not Sideways]]> https://tsecurity.de/de/4152821/programmierung/an-ai-system-grows-upward-not-sideways/ https://tsecurity.de/de/4152821/programmierung/an-ai-system-grows-upward-not-sideways/ Thu, 17 Sep 2026 21:18:57 +0200 More agents, more workflows, more automation. For a while that holds. Then comes the point where more of everything stops making anything better. Our next jump didn't come from more. It came from a layer above. Sideways Was Already Done The fleet had been running long before this rebuild. Orchestrators drove it: jobs on a schedule, pipelines in... Weiterlesen

]]> <![CDATA[How I Implemented Memory in my AI Agent REXA]]> https://tsecurity.de/de/4152820/programmierung/how-i-implemented-memory-in-my-ai-agent-rexa/ https://tsecurity.de/de/4152820/programmierung/how-i-implemented-memory-in-my-ai-agent-rexa/ Thu, 17 Sep 2026 21:18:57 +0200 How I Built Memory for REXA Using PostgreSQL and pgvector One thing I wanted REXA to eventually have was long-term memory. The idea is simple: when I explicitly tell REXA something like: “Remember that I prefer PostgreSQL for my backend projects.” REXA should be able to save that information so it can be used later. The important distinction is... Weiterlesen

]]> <![CDATA[Building Privacy-First Web Utilities with Utilvo]]> https://tsecurity.de/de/4152819/programmierung/building-privacy-first-web-utilities-with-utilvo/ https://tsecurity.de/de/4152819/programmierung/building-privacy-first-web-utilities-with-utilvo/ Thu, 17 Sep 2026 21:18:56 +0200 When handling sensitive documents, contracts, or personal PDFs through online tools, a critical question often goes unasked: Where does that file actually go? Most traditional web utilities require users to upload documents to remote servers. This means confidential files travel across the network and sit in temporary processing queues on external... Weiterlesen

]]> <![CDATA[How to Build an AI Assistant in Termux With Python]]> https://tsecurity.de/de/4152818/programmierung/how-to-build-an-ai-assistant-in-termux-with-python/ https://tsecurity.de/de/4152818/programmierung/how-to-build-an-ai-assistant-in-termux-with-python/ Thu, 17 Sep 2026 21:18:56 +0200 You can build a simple AI assistant directly from your Android phone using Termux and Python. You do not need a computer or a complicated development setup. With a Python script, an AI API, and a few packages, you can create an assistant that accepts your questions and returns AI-generated responses from the terminal. In this guide, we will build... Weiterlesen

]]> <![CDATA[orbitdesk-modern-workplace-operations-lab-webrtc-team-calls]]> https://tsecurity.de/de/4152817/programmierung/orbitdesk-modern-workplace-operations-lab-webrtc-team-calls/ https://tsecurity.de/de/4152817/programmierung/orbitdesk-modern-workplace-operations-lab-webrtc-team-calls/ Thu, 17 Sep 2026 21:18:56 +0200 title: "OrbitDesk — How I Built a Modern Workplace Operations Lab with WebRTC Team Calls and No Backend" published: true tags: nextjs, webrtc, typescript, pwa, microsoft365, entraid, intune, msp, helpdesk cover_image: https://orbitdesk-gamma.vercel.app/og-image.png OrbitDesk — How I Built a Modern Workplace Operations Lab with WebRTC Team Calls... Weiterlesen

]]> <![CDATA[Tool Poisoning on MCP Servers: The Attack Vector Nobody's Patching]]> https://tsecurity.de/de/4152816/programmierung/tool-poisoning-on-mcp-servers-the-attack-vector-nobodys-patching/ https://tsecurity.de/de/4152816/programmierung/tool-poisoning-on-mcp-servers-the-attack-vector-nobodys-patching/ Thu, 17 Sep 2026 21:18:56 +0200 Everybody's shipping AI agents. Nobody's auditing their toolchains. The MCP (Model Context Protocol) ecosystem grew from a specification into production infrastructure faster than most teams can spell "threat model." And that speed left a gap: the layer where an agent decides which tool to call, and what parameters to pass, is now an exploitable... Weiterlesen

]]> <![CDATA[Data Preparation for AI Agents]]> https://tsecurity.de/de/4152815/programmierung/data-preparation-for-ai-agents/ https://tsecurity.de/de/4152815/programmierung/data-preparation-for-ai-agents/ Thu, 17 Sep 2026 21:18:56 +0200 The promise of agentic AI is currently dominating discussions in boardrooms and technology conferences, suggesting that autonomous AI agents will soon revolutionize corporate analytics. The vision involves anyone, from interns to CEOs, typing natural-language questions into platforms like Slack and receiving instant, data-backed answers. While... Weiterlesen

]]> <![CDATA[Case Study - PyBot (AI Powered Python Learning Companion)]]> https://tsecurity.de/de/4152811/programmierung/case-study-pybot-ai-powered-python-learning-companion/ https://tsecurity.de/de/4152811/programmierung/case-study-pybot-ai-powered-python-learning-companion/ Thu, 17 Sep 2026 21:18:56 +0200 Overview PyBot is an AI-powered learning companion that I built to help users learn Python, prepare for DSA interviews and improve their resumes through interactive AI-powered conversations. PyBot started as a simple CLI-based chatbot for learning Python. As I continued working on it, it evolved into a web application with more features and... Weiterlesen

]]> <![CDATA[No Python, No PhD: Train Real ML Models in C# with ML.NET (Regression, Classification, Clustering)]]> https://tsecurity.de/de/4152810/programmierung/no-python-no-phd-train-real-ml-models-in-c-with-mlnet-regression-classification-clustering/ https://tsecurity.de/de/4152810/programmierung/no-python-no-phd-train-real-ml-models-in-c-with-mlnet-regression-classification-clustering/ Thu, 17 Sep 2026 21:18:56 +0200 Mattrx ran its predictive features on a Python scikit-learn microservice for two years. We replaced it with ML.NET running in-process inside the existing .NET 9 app — and trained real regression, classification, and clustering models in C# with no separate service, no second language in production, and no implementing gradient descent by hand. If... Weiterlesen

]]> <![CDATA[Introducing the AndroidX Security State Libraries: A Unified View of Device Security]]> https://tsecurity.de/de/4152809/programmierung/introducing-the-androidx-security-state-libraries-a-unified-view-of-device-security/ https://tsecurity.de/de/4152809/programmierung/introducing-the-androidx-security-state-libraries-a-unified-view-of-device-security/ Thu, 17 Sep 2026 21:18:31 +0200 Posted by Maunik Shah, Staff Software Engineer, Alec Garcia, Software Engineer, and Joseph Yong, Technical Program ManagerAt Android, we are constantly working to provide developers and enterprise partners with the data they need to keep devices protected. Today, we're thrilled to announce the stable release of the AndroidX Security State version... Weiterlesen

]]> <![CDATA[HEAVYGRAM Telegram-Backdoor: mehrstufige Angriffe mit Passwortdiebstahl]]> https://tsecurity.de/de/4152796/programmierung/heavygram-telegram-backdoor-mehrstufige-angriffe-mit-passwortdiebstahl/ https://tsecurity.de/de/4152796/programmierung/heavygram-telegram-backdoor-mehrstufige-angriffe-mit-passwortdiebstahl/ Thu, 17 Sep 2026 21:16:28 +0200 LONDON (IT BOLTWISE) – Eine Sicherheitsanalyse ordnet den Telegram-basierten Spionage- und Angriffskomplex HEAVYGRAM einer iranisch verknüpften Kampagne mit der Persona Handala Hack zu. Die Python-basierte Backdoor kann per Telegram-Kommandos Remote-Aktionen auslösen, Screenshots erstellen und gespeicherte Passwörter auslesen. Für den Zugriff auf... Weiterlesen

]]> <![CDATA[Development Release: AlmaLinux OS 9.9 Beta 1]]> https://tsecurity.de/de/4152767/programmierung/development-release-almalinux-os-99-beta-1/ https://tsecurity.de/de/4152767/programmierung/development-release-almalinux-os-99-beta-1/ Thu, 17 Sep 2026 21:07:54 +0200 The DistroWatch news feed is brought to you by TUXEDO COMPUTERS. The AlmaLinux project has published a new beta snapshot for the 9.x series. "AlmaLinux 9.9 Beta introduces new compiler toolsets, new module streams, and improved security. This release adds GCC Toolset 16 alongside updated LLVM and Rust toolsets, and brings Node.js 26 and PHP 8.4 as... Weiterlesen

]]> <![CDATA[Workflow execution protections in GitHub Actions generally available]]> https://tsecurity.de/de/4152731/programmierung/workflow-execution-protections-in-github-actions-generally-available/ https://tsecurity.de/de/4152731/programmierung/workflow-execution-protections-in-github-actions-generally-available/ Thu, 17 Sep 2026 20:16:58 +0200 Workflow execution protections for GitHub Actions, previously in public preview, are now generally available for GitHub Enterprise, organizations, and repositories. Execution protections let you define an allowlist that controls who can trigger an Actions workflow and what events can start it. Actor rules cover the who, event rules cover the what,... Weiterlesen

]]> <![CDATA[The New API Contract Is Probabilistic: Building Reliable Systems Around Unreliable Model Outputs]]> https://tsecurity.de/de/4152730/programmierung/the-new-api-contract-is-probabilistic-building-reliable-systems-around-unreliable-model-outputs/ https://tsecurity.de/de/4152730/programmierung/the-new-api-contract-is-probabilistic-building-reliable-systems-around-unreliable-model-outputs/ Thu, 17 Sep 2026 20:16:36 +0200 For decades, API design rested on a reassuring assumption: given valid input and a stable dependency, software should return a predictable result. Large language models break that assumption without breaking the API. A request can receive HTTP 200, perfectly valid JSON, and a confidently wrong answer. That distinction matters. The network contract... Weiterlesen

]]> <![CDATA[Federated MCP Control Plane: Policy-Aware Access to Multi-Backend Tool Servers]]> https://tsecurity.de/de/4152729/programmierung/federated-mcp-control-plane-policy-aware-access-to-multi-backend-tool-servers/ https://tsecurity.de/de/4152729/programmierung/federated-mcp-control-plane-policy-aware-access-to-multi-backend-tool-servers/ Thu, 17 Sep 2026 20:16:36 +0200 A federated gateway provides secure, policy-aware access to tool servers. The thing that made me stop and rethink our whole approach to agentic tooling was a text file. Weiterlesen

]]> <![CDATA[WINDOW FUNCTIONS]]> https://tsecurity.de/de/4152728/programmierung/window-functions/ https://tsecurity.de/de/4152728/programmierung/window-functions/ Thu, 17 Sep 2026 20:16:31 +0200 Window function performs a calculation across a set of rows related to the current row The result is calculated per row, but the calculation itself can look at other rows around it. Window function has over() which turns a normal aggregate function into a window function. in this example you are able to see the average total amount compared to... Weiterlesen

]]> <![CDATA[🚀 bro.js v2.4.5 – Next.js Adapter & AI‑First DX]]> https://tsecurity.de/de/4152727/programmierung/brojs-v245-nextjs-adapter-aifirst-dx/ https://tsecurity.de/de/4152727/programmierung/brojs-v245-nextjs-adapter-aifirst-dx/ Thu, 17 Sep 2026 20:16:31 +0200 Hey devs! 🎉 I’m super excited to share bro.js v2.4.5 – the biggest leap we’ve made yet. Imagine dropping zero‑boilerplate Express magic straight into a Next.js serverless route. No more fighting Turbopack or juggling busboy for file uploads. 🚀 What’s fresh? Next.js App Router Adapter – use defineRoute and createBro right inside app/api.... Weiterlesen

]]> <![CDATA[RDS vs DynamoDB: How I Think About Choosing an AWS Database]]> https://tsecurity.de/de/4152726/programmierung/rds-vs-dynamodb-how-i-think-about-choosing-an-aws-database/ https://tsecurity.de/de/4152726/programmierung/rds-vs-dynamodb-how-i-think-about-choosing-an-aws-database/ Thu, 17 Sep 2026 20:16:31 +0200 Choosing a database is one of those decisions that can look simple at the beginning of a project. You need to store some data, so you pick a database and start building. But once you start thinking about scale, queries, cost, performance, and maintenance, the decision becomes much more interesting. As a Node.js backend developer, I've mostly... Weiterlesen

]]> <![CDATA[Backend Development in 2026 - Technologies, Costs, UK Hiring]]> https://tsecurity.de/de/4152725/programmierung/backend-development-in-2026-technologies-costs-uk-hiring/ https://tsecurity.de/de/4152725/programmierung/backend-development-in-2026-technologies-costs-uk-hiring/ Thu, 17 Sep 2026 20:16:31 +0200 Backend development search interest has grown 80% to 110% across UK keyword data in the past three months, appearing in both software development and web development research categories. That dual presence tells you something important: backend skills are now in demand from businesses that have historically focused on frontend and design, as well... Weiterlesen

]]> <![CDATA[The Great Escape? Why Developers Are Choosing Local-First AI and Privacy-Focused Hardware Over the Cloud in 2026]]> https://tsecurity.de/de/4152723/programmierung/the-great-escape-why-developers-are-choosing-local-first-ai-and-privacy-focused-hardware-over-the-cloud-in-2026/ https://tsecurity.de/de/4152723/programmierung/the-great-escape-why-developers-are-choosing-local-first-ai-and-privacy-focused-hardware-over-the-cloud-in-2026/ Thu, 17 Sep 2026 20:16:30 +0200 Originally published on tamiz.pro. Introduction By 2026, a quiet but significant shift has emerged in the developer ecosystem: the move toward local-first AI and privacy-focused hardware, challenging the dominance of centralized cloud platforms. While hyperscalers like AWS, Google Cloud, and Azure continue to dominate headlines, an increasing... Weiterlesen

]]> <![CDATA[Visual Studio make it your own]]> https://tsecurity.de/de/4152722/programmierung/visual-studio-make-it-your-own/ https://tsecurity.de/de/4152722/programmierung/visual-studio-make-it-your-own/ Thu, 17 Sep 2026 20:16:30 +0200 Introduction Many developers will spend hours every day in Microsoft Visual Studio. Learn how to customize the Visual Studio environment and use features that make developers more productive. 💡 Customizing Visual Studio is like decorating a room with trinkets, lights, and paint. Below is an exploration of known and off-the-beaten-path features for... Weiterlesen

]]> <![CDATA[BeeLadybug 0.4.0 — A Blind, Zero-Dependency Overlay for Debugging Anything on Screen]]> https://tsecurity.de/de/4152721/programmierung/beeladybug-040-a-blind-zero-dependency-overlay-for-debugging-anything-on-screen/ https://tsecurity.de/de/4152721/programmierung/beeladybug-040-a-blind-zero-dependency-overlay-for-debugging-anything-on-screen/ Thu, 17 Sep 2026 20:16:30 +0200 https://beeenginejs.com/wp-content/uploads/2026/09/Screenshot-2026-09-15-194620.png The problem I kept running into Every time I built a new game or a new page, I ended up writing the same throwaway debug code: an FPS counter here, a console.log there, a red box drawn around whatever DOM node I was hunting down. It always lived inside the project... Weiterlesen

]]> <![CDATA[The Agent’s Last Mile]]> https://tsecurity.de/de/4152720/programmierung/the-agents-last-mile/ https://tsecurity.de/de/4152720/programmierung/the-agents-last-mile/ Thu, 17 Sep 2026 20:16:30 +0200 Large language models have become remarkably capable. With enough parameters, data, and training, they can develop abilities that are difficult to predict from smaller systems. They can write software, interpret documents, use tools, plan multi-step tasks, and adapt to changing instructions. Watching a strong agent solve a complex problem from... Weiterlesen

]]> <![CDATA[Building Instagram Downloader: Turning a Simple Downloader Into a Real Product]]> https://tsecurity.de/de/4152719/programmierung/building-instagram-downloader-turning-a-simple-downloader-into-a-real-product/ https://tsecurity.de/de/4152719/programmierung/building-instagram-downloader-turning-a-simple-downloader-into-a-real-product/ Thu, 17 Sep 2026 20:16:30 +0200 At first, Instagram Downloader sounded like a small project. A user pastes a public Instagram link, the service finds the media, and the browser downloads it. Simple. But “simple” products are often the ones that require the most care. The user sees one input field and one button. Behind that interaction are dozens of decisions about usability,... Weiterlesen

]]> <![CDATA[Safari runs a module worker's entry file twice if anything imports it]]> https://tsecurity.de/de/4152718/programmierung/safari-runs-a-module-workers-entry-file-twice-if-anything-imports-it/ https://tsecurity.de/de/4152718/programmierung/safari-runs-a-module-workers-entry-file-twice-if-anything-imports-it/ Thu, 17 Sep 2026 20:16:30 +0200 We're building Oh So Video, a set of video tools that run entirely in the browser: nothing is uploaded, and the work happens in Web Workers on your own machine. Before launch, we automated a full run of every tool in Safari and Firefox, checking every exported file with ffmpeg. Everything passed except one thing. In Safari, every ProRes file was... Weiterlesen

]]> <![CDATA[Kubernetes Did Not Replace Virtual Machines — It Changed]]> https://tsecurity.de/de/4152654/programmierung/kubernetes-did-not-replace-virtual-machines-it-changed/ https://tsecurity.de/de/4152654/programmierung/kubernetes-did-not-replace-virtual-machines-it-changed/ Thu, 17 Sep 2026 19:46:14 +0200 Kubernetes virtual machines still coexist by design in many production architectures — not because those environments are behind, but because Kubernetes was never built to do a virtual machine's job. The industry shorthand says otherwise: VM gave way to container, container gave way to Kubernetes, and the virtualization layer is what got left... Weiterlesen

]]> <![CDATA[Why i Built BS9: A Self-Healing Process Manager for Bun]]> https://tsecurity.de/de/4152653/programmierung/why-i-built-bs9-a-self-healing-process-manager-for-bun/ https://tsecurity.de/de/4152653/programmierung/why-i-built-bs9-a-self-healing-process-manager-for-bun/ Thu, 17 Sep 2026 19:46:14 +0200 Bun is fast. Extremely fast. However, running Bun HTTP services in long-running production environments introduces familiar operational challenges: Zero-Downtime Reloads: How do you reload workers when shipping code without dropping in-flight traffic? Fault Tolerance: How do you recover cleanly if an unhandled exception or SIGKILL crashes a... Weiterlesen

]]> <![CDATA[What If Your Mock API Actually Remembered Your POST Requests?]]> https://tsecurity.de/de/4152650/programmierung/what-if-your-mock-api-actually-remembered-your-post-requests/ https://tsecurity.de/de/4152650/programmierung/what-if-your-mock-api-actually-remembered-your-post-requests/ Thu, 17 Sep 2026 19:46:14 +0200 A while ago, I was deep into building a new frontend project. I had spent hours polishing the interface — the form validation was tight, the loading states looked smooth, and I was finally ready to test the full CRUD (Create, Read, Update, Delete) workflow. The backend wasn't ready yet, so like any developer, I reached for a popular free dummy API... Weiterlesen

]]> <![CDATA[Make a Runway Clone in one shot, or something else!]]> https://tsecurity.de/de/4152649/programmierung/make-a-runway-clone-in-one-shot-or-something-else/ https://tsecurity.de/de/4152649/programmierung/make-a-runway-clone-in-one-shot-or-something-else/ Thu, 17 Sep 2026 19:46:14 +0200 i'm jon, i co-founded backboard.io. this is a launch post. it's short and there's code. video models are live on backboard. Here is a video of me and my dog rapping if you don't believe me. ByteDance's Seedance family is in, served through OpenRouter, along with the rest of the OpenRouter video catalog. that's the news. here's why you should care.... Weiterlesen

]]> <![CDATA[How I Built a Broken Link Scanner for Large Websites]]> https://tsecurity.de/de/4152648/programmierung/how-i-built-a-broken-link-scanner-for-large-websites/ https://tsecurity.de/de/4152648/programmierung/how-i-built-a-broken-link-scanner-for-large-websites/ Thu, 17 Sep 2026 19:46:14 +0200 A broken link checker sounds like a weekend project. Fetch a page, collect every &lt;a href&gt;, request each URL, and report anything that returns 404. That approach works surprisingly well—until you point it at a real website. Large websites introduce duplicate URLs, redirects, external domains, missing assets, rate limits, malformed HTML, CSS... Weiterlesen

]]> <![CDATA[I built 116 free browser tools that never touch a server. Here is why and what I learned.]]> https://tsecurity.de/de/4152647/programmierung/i-built-116-free-browser-tools-that-never-touch-a-server-here-is-why-and-what-i-learned/ https://tsecurity.de/de/4152647/programmierung/i-built-116-free-browser-tools-that-never-touch-a-server-here-is-why-and-what-i-learned/ Thu, 17 Sep 2026 19:46:14 +0200 A few months ago I wanted to do something trivial: format an ugly blob of JSON. I googled "json formatter", clicked the first result, and was met with a cookie wall, three ad reloads, and a little banner asking me to create an account. To format JSON. In my own browser. That was the moment 123MiniApps started. The idea was simple and a little... Weiterlesen

]]> <![CDATA[Your AI Agent's Summary Is Lying to You. Here's What to Do About It.]]> https://tsecurity.de/de/4152646/programmierung/your-ai-agents-summary-is-lying-to-you-heres-what-to-do-about-it/ https://tsecurity.de/de/4152646/programmierung/your-ai-agents-summary-is-lying-to-you-heres-what-to-do-about-it/ Thu, 17 Sep 2026 19:46:13 +0200 We run a multi-agent pipeline where different AI agents handle different stages: scout, lead, verifier. The system broke when the verifier started trusting the lead's summary instead of doing independent work. The Problem Agent A finishes work and produces a summary: "Fixed the bug. Tests pass." That summary is a compression of everything A... Weiterlesen

]]> <![CDATA[Lens: screenshots and click-by-click guides, with no account and no server]]> https://tsecurity.de/de/4152645/programmierung/lens-screenshots-and-click-by-click-guides-with-no-account-and-no-server/ https://tsecurity.de/de/4152645/programmierung/lens-screenshots-and-click-by-click-guides-with-no-account-and-no-server/ Thu, 17 Sep 2026 19:46:13 +0200 I write a lot of documentation that is mostly screenshots. Every tool I tried for it wanted an account, uploaded my screenshots to somebody's bucket, and then charged me to export the result as anything other than a link. So I built Lens, a Chrome and Edge extension (Manifest V3, Chrome 137+) that does the whole job in the browser. There is no... Weiterlesen

]]> <![CDATA[High-speed Release Trains – These Weeks in Firefox: Issue 209]]> https://tsecurity.de/de/4152644/programmierung/high-speed-release-trains-these-weeks-in-firefox-issue-209/ https://tsecurity.de/de/4152644/programmierung/high-speed-release-trains-these-weeks-in-firefox-issue-209/ Thu, 17 Sep 2026 19:45:44 +0200 Highlights Firefox 155 just released! That’s the first release that went through the full 2-week release cycle process. The WebExtensions team added a new backgrounds_area theme property so themes can explicitly control whether background images apply to the whole window or only the top toolbars Thanks to Emilio for the new theme property to... Weiterlesen

]]> <![CDATA[Ubuntu 26 generally available and latest migration]]> https://tsecurity.de/de/4152605/programmierung/ubuntu-26-generally-available-and-latest-migration/ https://tsecurity.de/de/4152605/programmierung/ubuntu-26-generally-available-and-latest-migration/ Thu, 17 Sep 2026 19:12:40 +0200 The Ubuntu 26.04 runner image for GitHub Actions is now out of public preview and fully supported for production workflows on both x64 and arm64. As part of this release, the ubuntu-latest label will migrate to Ubuntu 26.04, giving you the latest supported Ubuntu release by default. Using Ubuntu 26.04 To run your workflows on the new image, set... Weiterlesen

]]> <![CDATA[Why Enterprise Engineering Still Struggles to Prove AI ROI]]> https://tsecurity.de/de/4152604/programmierung/why-enterprise-engineering-still-struggles-to-prove-ai-roi/ https://tsecurity.de/de/4152604/programmierung/why-enterprise-engineering-still-struggles-to-prove-ai-roi/ Thu, 17 Sep 2026 19:12:20 +0200 As enterprise adoption of generative AI tools accelerated through late 2025 and into 2026, technology leaders began to hit a frustrating wall. While otheir rganizations poured millions into AI tokens and model subscriptions, corporate leadership and CFOs began pressing for hard evidence that this skyrocketing spend was delivering actual business... Weiterlesen

]]> <![CDATA[I Built FinderBack: Back & Forward Navigation in Finder’s Right-Click Menu]]> https://tsecurity.de/de/4152602/programmierung/i-built-finderback-back-forward-navigation-in-finders-right-click-menu/ https://tsecurity.de/de/4152602/programmierung/i-built-finderback-back-forward-navigation-in-finders-right-click-menu/ Thu, 17 Sep 2026 19:12:10 +0200 I kept running into one small annoyance in macOS Finder: going Back or Forward meant moving the cursor back up to the toolbar every time. So I built FinderBack, a small macOS utility that adds Back and Forward navigation directly to Finder’s right-click menu. It’s intentionally simple: Right-click anywhere in Finder Choose Back or Forward Keep... Weiterlesen

]]> <![CDATA[How I Use the Pocket AI Recorder for Meetings, Ideas, and Life]]> https://tsecurity.de/de/4152601/programmierung/how-i-use-the-pocket-ai-recorder-for-meetings-ideas-and-life/ https://tsecurity.de/de/4152601/programmierung/how-i-use-the-pocket-ai-recorder-for-meetings-ideas-and-life/ Thu, 17 Sep 2026 19:12:10 +0200 Originally published at webofmike.com on 2026-09-17. The demo repo and every command in it were run before publishing. For about six weeks I've had a Pocket recorder stuck to the back of my phone, and it has quietly become the thing I reach for most after the phone itself. It records conversations, turns them into transcripts, summaries, and... Weiterlesen

]]> <![CDATA[Day 77: Jenkins Deploy Pipeline]]> https://tsecurity.de/de/4152600/programmierung/day-77-jenkins-deploy-pipeline/ https://tsecurity.de/de/4152600/programmierung/day-77-jenkins-deploy-pipeline/ Thu, 17 Sep 2026 19:12:10 +0200 The development team of xFusionCorp Industries is working on to develop a new static website and they are planning to deploy the same on Nautilus App Server using Jenkins pipeline. They have shared their requirements with the DevOps team and accordingly we need to create a Jenkins pipeline job. Please find below more details about the task: Click... Weiterlesen

]]> <![CDATA[How AI Hyperscaler Debt Is Repricing Its Own Hurdle Rate]]> https://tsecurity.de/de/4152598/programmierung/how-ai-hyperscaler-debt-is-repricing-its-own-hurdle-rate/ https://tsecurity.de/de/4152598/programmierung/how-ai-hyperscaler-debt-is-repricing-its-own-hurdle-rate/ Thu, 17 Sep 2026 19:12:10 +0200 When the Federal Reserve raised its benchmark federal funds rate to a range between 3.75 percent and 4.00 percent, the move surprised few participants in the rates market. What caught Wall Street off guard was what happened at the long end of the curve. The benchmark 10-year Treasury yield broke above 5 percent, reaching levels not sustained since... Weiterlesen

]]> <![CDATA[Minha primeira palestra não era minha]]> https://tsecurity.de/de/4152597/programmierung/minha-primeira-palestra-no-era-minha/ https://tsecurity.de/de/4152597/programmierung/minha-primeira-palestra-no-era-minha/ Thu, 17 Sep 2026 19:12:10 +0200 No fim de agosto falei em público pela primeira vez. Foi no estande da Dati no Startup Summit 2026, em Florianópolis: duas rodadas, uma na quarta e outra na quinta, com um telão ao lado mostrando o Amazon Bedrock rodando ao vivo e a plateia de fone, como é o formato de palestra em estande. E a palestra não era minha. "Preço por token não é preço"... Weiterlesen

]]> <![CDATA[why your C drive keeps filling up if you use wsl2 or docker on windows]]> https://tsecurity.de/de/4152596/programmierung/why-your-c-drive-keeps-filling-up-if-you-use-wsl2-or-docker-on-windows/ https://tsecurity.de/de/4152596/programmierung/why-your-c-drive-keeps-filling-up-if-you-use-wsl2-or-docker-on-windows/ Thu, 17 Sep 2026 19:12:09 +0200 check this out : https://space-free.vercel.app/ for months i kept getting the low disk space warning on my C drive and had no idea why. i would delete stuff, clear downloads, uninstall apps, and still barely get anything back. turns out the actual problem was not my files at all. if you use wsl2 or docker desktop on windows, both of them store... Weiterlesen

]]> <![CDATA[Structured Output Is an API: Evolving Gemini Schemas Without Breaking Your Agent]]> https://tsecurity.de/de/4152595/programmierung/structured-output-is-an-api-evolving-gemini-schemas-without-breaking-your-agent/ https://tsecurity.de/de/4152595/programmierung/structured-output-is-an-api-evolving-gemini-schemas-without-breaking-your-agent/ Thu, 17 Sep 2026 19:12:09 +0200 Structured output solves an important model problem: instead of asking Gemini for “JSON-like” prose, you provide a schema and receive syntactically structured data. Then the software-engineering problem begins. Once a tool, UI, downstream agent, database, or audit process depends on that JSON, the model output is an API. Renaming a field can break... Weiterlesen

]]> <![CDATA[Claude Code Headless Mode in 2026: Scripting Autonomous Coding Tasks Without the Interactive Shell]]> https://tsecurity.de/de/4152594/programmierung/claude-code-headless-mode-in-2026-scripting-autonomous-coding-tasks-without-the-interactive-shell/ https://tsecurity.de/de/4152594/programmierung/claude-code-headless-mode-in-2026-scripting-autonomous-coding-tasks-without-the-interactive-shell/ Thu, 17 Sep 2026 19:12:09 +0200 Claude Code Headless Mode in 2026: Scripting Autonomous Coding Tasks Without the Interactive Shell This article was written with the assistance of AI, under human supervision and review. Most Claude Code automation failures stem from treating the tool like a human-supervised assistant when production workloads demand fully autonomous execution.... Weiterlesen

]]> <![CDATA[Markdown woes: Looks right, is wrong]]> https://tsecurity.de/de/4152593/programmierung/markdown-woes-looks-right-is-wrong/ https://tsecurity.de/de/4152593/programmierung/markdown-woes-looks-right-is-wrong/ Thu, 17 Sep 2026 19:12:09 +0200 Your Markdown can be perfectly rendered and completely wrong Markdown has an unfair advantage: it looks trustworthy. A table lines up, the headings are right. The numbers have two decimal places. GitHub renders it beautifully. The pull request is green, so you merge it. And the invoice is wrong. Not obviously wrong: not broken-Markdown wrong. Not... Weiterlesen

]]> <![CDATA[The clipboard bridge that had to wait for the device]]> https://tsecurity.de/de/4152592/programmierung/the-clipboard-bridge-that-had-to-wait-for-the-device/ https://tsecurity.de/de/4152592/programmierung/the-clipboard-bridge-that-had-to-wait-for-the-device/ Thu, 17 Sep 2026 19:12:09 +0200 I wanted a copy button in tapflow's browser viewer. The obvious version is short: navigator.clipboard.writeText(text) That works when text is already in the browser. Our text was on a simulator, so the browser had to ask the device to copy first, wait for the answer, and only then put that answer on the user's clipboard. That small difference... Weiterlesen

]]> <![CDATA[Frameworks Are Institutional Memory]]> https://tsecurity.de/de/4152591/programmierung/frameworks-are-institutional-memory/ https://tsecurity.de/de/4152591/programmierung/frameworks-are-institutional-memory/ Thu, 17 Sep 2026 19:12:09 +0200 I stored passwords in plaintext on a floppy disk in the 1980s. Recently, a coding agent made a version of the same mistake. When I was running bulletin board systems in the 1980s, password management could be remarkably straightforward. A user created an account. They chose a password. The BBS needed to determine whether the password they entered... Weiterlesen

]]> <![CDATA[Android Studio Rabbit 2 Canary 1 now available]]> https://tsecurity.de/de/4152590/programmierung/android-studio-rabbit-2-canary-1-now-available/ https://tsecurity.de/de/4152590/programmierung/android-studio-rabbit-2-canary-1-now-available/ Thu, 17 Sep 2026 19:11:47 +0200 Android Studio Rabbit 2 Canary 1 is now available in the Canary channel. If you already have an Android Studio build on the Canary channel, you can get the update by clicking Help &gt; Check for Updates (or Android Studio &gt; Check for Updates on macOS). Otherwise, you can download it here. For information on new features and changes in Android... Weiterlesen

]]> <![CDATA[Anzeige: Kubernetes für automatisierte Container-Orchestrierung]]> https://tsecurity.de/de/4152547/programmierung/anzeige-kubernetes-fuer-automatisierte-container-orchestrierung/ https://tsecurity.de/de/4152547/programmierung/anzeige-kubernetes-fuer-automatisierte-container-orchestrierung/ Thu, 17 Sep 2026 19:06:13 +0200 Kubernetes automatisiert die Bereitstellung und Verwaltung von Containern, verlangt aber fundiertes Know-how. Ein Workshop der Golem Karrierewelt vermittelt die zentralen Komponenten. (Golem Karrierewelt, Server-Applikationen) Weiterlesen

]]> <![CDATA[Mojo 1.1 released, now accepting community contributions to the compiler]]> https://tsecurity.de/de/4152539/programmierung/mojo-11-released-now-accepting-community-contributions-to-the-compiler/ https://tsecurity.de/de/4152539/programmierung/mojo-11-released-now-accepting-community-contributions-to-the-compiler/ Thu, 17 Sep 2026 19:04:14 +0200 submitted by /u/Fcking_Chuck [link] [comments] Weiterlesen

]]> <![CDATA[Understand the Sidecar Pattern by Deploying n8n to AWS Fargate]]> https://tsecurity.de/de/4152486/programmierung/understand-the-sidecar-pattern-by-deploying-n8n-to-aws-fargate/ https://tsecurity.de/de/4152486/programmierung/understand-the-sidecar-pattern-by-deploying-n8n-to-aws-fargate/ Thu, 17 Sep 2026 18:30:27 +0200 A sidecar is a container that runs alongside another container as part of the same deployment unit. Just because two containers are in the same cluster or deployed around the same time doesn't make one a sidecar.  There are two things that make a sidecar. First is that they share a network namespace, so they can reach each other over localhost... Weiterlesen

]]> <![CDATA[The custom checkbox stays hand-rolled until `::checkmark` actually ships]]> https://tsecurity.de/de/4152485/programmierung/the-custom-checkbox-stays-hand-rolled-until-checkmark-actually-ships/ https://tsecurity.de/de/4152485/programmierung/the-custom-checkbox-stays-hand-rolled-until-checkmark-actually-ships/ Thu, 17 Sep 2026 18:30:25 +0200 A styled checkbox is one of those components where the temptation to reach for a &lt;div role="checkbox"&gt; is enormous and the cost is invisible until the wrong person tries to use it. A keyboard user gets nothing. A screen reader user gets whatever ARIA glue you remembered to attach. A user with a switch device or voice control gets a control... Weiterlesen

]]> <![CDATA[JavaScript Promise]]> https://tsecurity.de/de/4152484/programmierung/javascript-promise/ https://tsecurity.de/de/4152484/programmierung/javascript-promise/ Thu, 17 Sep 2026 18:30:25 +0200 Introduction In JavaScript, some operations take time to complete. For example, getting data from a server, calling an API, reading a file, or waiting for a timer. JavaScript should not stop the entire program while waiting for these operations. This is where Promises are useful. A Promise allows us to handle a result that will be available now,... Weiterlesen

]]> <![CDATA[Army vs Hibernate]]> https://tsecurity.de/de/4152483/programmierung/army-vs-hibernate/ https://tsecurity.de/de/4152483/programmierung/army-vs-hibernate/ Thu, 17 Sep 2026 18:30:25 +0200 Army on GitHub: https://github.com/PillArmy/army Every claim about Army below comes from its source (0.6.8-SNAPSHOT, Java 25) and the army-example test suite. Hibernate claims are benchmarked against the current stable release as of September 2026 — 7.4.8.Final (2026-09-13, Jakarta Persistence 3.2) — plus official documentation (hibernate.org,... Weiterlesen

]]> <![CDATA[[Lab Notes] Kubernetes the Hard Way, For Real This Time (Step 06)]]> https://tsecurity.de/de/4152482/programmierung/lab-notes-kubernetes-the-hard-way-for-real-this-time-step-06/ https://tsecurity.de/de/4152482/programmierung/lab-notes-kubernetes-the-hard-way-for-real-this-time-step-06/ Thu, 17 Sep 2026 18:30:25 +0200 Continuing my Kubernetes the Hard Way homelab build. Steps 01-05 are already done, this covers step 06. Original guide: 06-data-encryption-keys.md Thoughts I had while doing this This step was pretty straightforward, just generate an encryption key and an encryption config file. But it did make me think back to step 04, where I set up the TLS/CA... Weiterlesen

]]> <![CDATA[Adding emoji reactions to your Astro blog with Netlify Blobs]]> https://tsecurity.de/de/4152481/programmierung/adding-emoji-reactions-to-your-astro-blog-with-netlify-blobs/ https://tsecurity.de/de/4152481/programmierung/adding-emoji-reactions-to-your-astro-blog-with-netlify-blobs/ Thu, 17 Sep 2026 18:30:25 +0200 Original post: Adding emoji reactions to your Astro blog with Netlify Blobs Comments ask a lot of a reader. Reactions ask almost nothing, a single click and a second of intent. That asymmetry is what makes them worth adding: most readers who found your post useful will never write a comment, but many of them will click a heart or a lightbulb if... Weiterlesen

]]> <![CDATA[Finding the MCP Servers Your Platform Team Doesn't Know About]]> https://tsecurity.de/de/4152480/programmierung/finding-the-mcp-servers-your-platform-team-doesnt-know-about/ https://tsecurity.de/de/4152480/programmierung/finding-the-mcp-servers-your-platform-team-doesnt-know-about/ Thu, 17 Sep 2026 18:30:25 +0200 Originally published at webofmike.com on 2026-09-16. The demo repo and every command in it were run before publishing. An MCP server is a small HTTP service. Anyone on your team can start one in an afternoon, and the useful ones get built precisely because they reach something valuable: the warehouse, the ticket tracker, the build agent, the CRM.... Weiterlesen

]]> <![CDATA[Automated Integration Tests for the Deployed Hello World API]]> https://tsecurity.de/de/4152478/programmierung/automated-integration-tests-for-the-deployed-hello-world-api/ https://tsecurity.de/de/4152478/programmierung/automated-integration-tests-for-the-deployed-hello-world-api/ Thu, 17 Sep 2026 18:30:25 +0200 In Part 1, we built our Hello World API and got it running locally. But writing code is only half the story — you also need to know it actually works, both before and after it leaves your machine. In this part, we will pick up where we left off. We will run local integration tests to catch issues early, deploy the API to AWS, verify the live... Weiterlesen

]]> <![CDATA[One Credential DNS Plus Mail Setup vs Separate Vendors: 2026 Reconciliation]]> https://tsecurity.de/de/4152475/programmierung/one-credential-dns-plus-mail-setup-vs-separate-vendors-2026-reconciliation/ https://tsecurity.de/de/4152475/programmierung/one-credential-dns-plus-mail-setup-vs-separate-vendors-2026-reconciliation/ Thu, 17 Sep 2026 18:30:25 +0200 Short answer: Use one credential for DNS plus mail setup only when the platform owns the zone; with separate vendors, keep an explicit reconciliation job because DNS success never proves mail verification. Move a game publisher's zone and mail verification through one retriable workflow when the customer permits shared ownership; otherwise, treat... Weiterlesen

]]> <![CDATA[A Quick Update on the Summer Bug Smash Winners]]> https://tsecurity.de/de/4152474/programmierung/a-quick-update-on-the-summer-bug-smash-winners/ https://tsecurity.de/de/4152474/programmierung/a-quick-update-on-the-summer-bug-smash-winners/ Thu, 17 Sep 2026 18:30:25 +0200 Hey all, we have a quick update for everyone who participated in DEV's Big Summer Bug Smash powered by Sentry. We need a bit more time to carefully review all of your fixes and optimizations. With 23 winners across 5 categories this is no simple feat, and we want to make sure we give each entry the careful consideration it deserves. We'll be back... Weiterlesen

]]> <![CDATA[Android Bench 2.0: Pushing the frontier with challenging long-horizon tasks]]> https://tsecurity.de/de/4152473/programmierung/android-bench-20-pushing-the-frontier-with-challenging-long-horizon-tasks/ https://tsecurity.de/de/4152473/programmierung/android-bench-20-pushing-the-frontier-with-challenging-long-horizon-tasks/ Thu, 17 Sep 2026 18:30:06 +0200 Posted by Matthew McCullough, VP, Product Management, Android Developer When we first launched Android Bench, we built a rigorous foundation for evaluating how large language models (LLMs) assist developers with real-world Android tasks. As AI models and agents rapidly evolve, we’ve been updating our methodology, such as aligning our benchmark... Weiterlesen

]]> <![CDATA[One UI 9 steht bereit: Welche Samsung-Smartphones das Update zuerst erhalten]]> https://tsecurity.de/de/4152319/programmierung/one-ui-9-steht-bereit-welche-samsung-smartphones-das-update-zuerst-erhalten/ https://tsecurity.de/de/4152319/programmierung/one-ui-9-steht-bereit-welche-samsung-smartphones-das-update-zuerst-erhalten/ Thu, 17 Sep 2026 17:32:09 +0200 Samsung hat den Rollout für das Update auf One UI 9 gestartet. Doch zunächst wird die Aktualisierung nur für einige ausgewählte Geräte bereitgestellt. Welche Galaxy-Smartphones schon jetzt dabei sind. Weiterlesen

]]> <![CDATA[How to Build an Event-Driven Lead Scoring Pipeline with Node.js and PostgreSQL]]> https://tsecurity.de/de/4152318/programmierung/how-to-build-an-event-driven-lead-scoring-pipeline-with-nodejs-and-postgresql/ https://tsecurity.de/de/4152318/programmierung/how-to-build-an-event-driven-lead-scoring-pipeline-with-nodejs-and-postgresql/ Thu, 17 Sep 2026 17:31:49 +0200 null Continue reading How to Build an Event-Driven Lead Scoring Pipeline with Node.js and PostgreSQL on SitePoint. Weiterlesen

]]> <![CDATA[[quick-revisit]: Express Middleware]]> https://tsecurity.de/de/4152317/programmierung/quick-revisit-express-middleware/ https://tsecurity.de/de/4152317/programmierung/quick-revisit-express-middleware/ Thu, 17 Sep 2026 17:31:46 +0200 The Mental Model Think of Express Middleware as a stack of functions that are called sequentially. Express apps run entirely through a series of middleware function calls. The Basics Middleware has access to the following: The req (request) object. The res (response) object. The next() function. The err object (only accessible to Error-handling... Weiterlesen

]]> <![CDATA[BragJack: Prompt-Forcing In-Browser AI Agents via Browser Extensions]]> https://tsecurity.de/de/4152312/programmierung/bragjack-prompt-forcing-in-browser-ai-agents-via-browser-extensions/ https://tsecurity.de/de/4152312/programmierung/bragjack-prompt-forcing-in-browser-ai-agents-via-browser-extensions/ Thu, 17 Sep 2026 17:31:45 +0200 1. Basic Information Original Title: BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension Source: Forever Security Published Date: 2026-09-16 Updated Date: None Severity: High Basis of Severity: Researchers demonstrated that across five environments—Chrome with Gemini, Edge with Copilot,... Weiterlesen

]]> <![CDATA[KREMLIN: Forging Chromium Integrity Checks to Steal Banking Sessions]]> https://tsecurity.de/de/4152311/programmierung/kremlin-forging-chromium-integrity-checks-to-steal-banking-sessions/ https://tsecurity.de/de/4152311/programmierung/kremlin-forging-chromium-integrity-checks-to-steal-banking-sessions/ Thu, 17 Sep 2026 17:31:45 +0200 1. Basic Information Original Title: The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions Source: Elastic Security Labs Published Date: 2026-09-14 Updated Date: None Severity: High Severity Justification: Elastic tracked seven campaigns over 15 months. Separately, requests to a... Weiterlesen

]]> <![CDATA[Stop Optimizing for Output: Why Software Engineering is a Discovery Problem]]> https://tsecurity.de/de/4152310/programmierung/stop-optimizing-for-output-why-software-engineering-is-a-discovery-problem/ https://tsecurity.de/de/4152310/programmierung/stop-optimizing-for-output-why-software-engineering-is-a-discovery-problem/ Thu, 17 Sep 2026 17:31:45 +0200 Most engineering organizations misdiagnose software delivery as a production problem. They treat building software like operating a factory: crank the handle faster, and more features will drop off the conveyor belt. This intuition is fundamentally flawed. In software, copying code is free. Everything you spend time building is unprecedented.... Weiterlesen

]]> <![CDATA[TLS Handshakes and OAuth Flows Are Easier to Learn by Clicking Through Them]]> https://tsecurity.de/de/4152309/programmierung/tls-handshakes-and-oauth-flows-are-easier-to-learn-by-clicking-through-them/ https://tsecurity.de/de/4152309/programmierung/tls-handshakes-and-oauth-flows-are-easier-to-learn-by-clicking-through-them/ Thu, 17 Sep 2026 17:31:45 +0200 There are two security flows every backend developer is supposed to know cold and almost everyone half-remembers: the TLS handshake and the OAuth authorization code flow. Both are sequences of messages between parties. Both are usually taught as static diagrams with numbered arrows. And both produce the same failure in practice: you recognize the... Weiterlesen

]]> <![CDATA[The Web3 Economic Stack: How Onchain Activity Creates Businesses]]> https://tsecurity.de/de/4152308/programmierung/the-web3-economic-stack-how-onchain-activity-creates-businesses/ https://tsecurity.de/de/4152308/programmierung/the-web3-economic-stack-how-onchain-activity-creates-businesses/ Thu, 17 Sep 2026 17:31:45 +0200 Most Web3 maps begin with infrastructure. They start at Layer 1 blockchains, move through Layer 2s and protocols, and eventually arrive at applications. That is useful if you are trying to understand how a blockchain works. It is less useful if you are trying to understand where businesses come from. A more practical map starts with economic... Weiterlesen

]]> <![CDATA[The Answer You Didn't Want: Fiskardo Evacuation Routing]]> https://tsecurity.de/de/4152306/programmierung/the-answer-you-didnt-want-fiskardo-evacuation-routing/ https://tsecurity.de/de/4152306/programmierung/the-answer-you-didnt-want-fiskardo-evacuation-routing/ Thu, 17 Sep 2026 17:31:45 +0200 During a wildfire, how long does it take to move people out of Fiskardo by road? That was the question. It sounds like a database query, because it is one: load the road network, pick a start, run pgRouting's pgr_dijkstra, read the cost. Milliseconds of compute. One number. The first number the twin gave me was absurd. And my instinct was to... Weiterlesen

]]> <![CDATA[Gesundheitstracking fast wie bei Whoop: Apple plant neue Health-App]]> https://tsecurity.de/de/4152213/programmierung/gesundheitstracking-fast-wie-bei-whoop-apple-plant-neue-health-app/ https://tsecurity.de/de/4152213/programmierung/gesundheitstracking-fast-wie-bei-whoop-apple-plant-neue-health-app/ Thu, 17 Sep 2026 16:51:10 +0200 Noch im Herbst soll Apples neue Gesundheits-App erscheinen. Die neue Version von Health trackt mithilfe von KI unter anderem dein „Health Age“ und hilft, länger zu leben. Weiterlesen

]]> <![CDATA[Microsoft-Update legt Copy-und-Paste in Excel lahm – warum du es trotzdem nicht deinstallieren solltest]]> https://tsecurity.de/de/4152212/programmierung/microsoft-update-legt-copy-und-paste-in-excel-lahm-warum-du-es-trotzdem-nicht-deinstallieren-solltest/ https://tsecurity.de/de/4152212/programmierung/microsoft-update-legt-copy-und-paste-in-excel-lahm-warum-du-es-trotzdem-nicht-deinstallieren-solltest/ Thu, 17 Sep 2026 16:51:09 +0200 Ein Update hat eine wichtige Funktion in Excel lahmgelegt. Seither können User:innen keine Inhalte mehr kopieren und einfügen. Bis zu einem Fix durch Microsoft gibt es immerhin einige Workarounds, die Betroffene probieren können. Weiterlesen

]]> <![CDATA[How to Build a Farm Monitoring System with the Sensors and Software You Already Use]]> https://tsecurity.de/de/4152211/programmierung/how-to-build-a-farm-monitoring-system-with-the-sensors-and-software-you-already-use/ https://tsecurity.de/de/4152211/programmierung/how-to-build-a-farm-monitoring-system-with-the-sensors-and-software-you-already-use/ Thu, 17 Sep 2026 16:50:55 +0200 A farm can have plenty of technology without having one clear picture of what is happening in the field. Soil sensors collect moisture and temperature readings. Weather stations track rainfall, wind, and humidity. Irrigation controllers operate equipment. Farm management software stores field information, while another platform may contain... Weiterlesen

]]>