今日已更新 123 条资讯 | 累计 42832 条内容
关于我们

今日精选

HOT

最新资讯

共 42832 篇
第 2037/2142 页
AI 资讯 Dev.to

AI Coding Tools Compared: Copilot vs Cursor vs Claude Code vs Gemini CLI

AI coding tools are no longer just autocomplete. In 2026, they are becoming coding assistants, terminal agents, code reviewers, and sometimes full workflow helpers. But the real question is: Which AI coding tool should developers actually use? Here is a short, practical comparison. Quick comparison Tool Best for Main strength Watch out for GitHub Copilot Daily coding inside IDE Fast autocomplete and GitHub workflow support Can feel limited for deep architecture work Cursor Full AI-first coding experience Great for editing across files and working inside a project You may rely on it too much without reviewing code Claude Code Terminal-based agentic coding Strong reasoning, repo understanding, and command execution Needs careful review before running changes Gemini CLI Open-source terminal AI agent Good for terminal workflows, debugging, and automation Output quality depends heavily on task clarity 1. GitHub Copilot GitHub Copilot is the safest default choice for most developers. It works well inside common IDEs and is useful for: Autocomplete Small functions Unit tests Refactoring Explaining code GitHub-based workflows GitHub also has Copilot coding agent support, which can work on assigned tasks, make code changes, and open pull requests from GitHub workflows. :contentReference[oaicite:0]{index=0} Use Copilot if: You want AI help without changing your full coding workflow. Best for: Junior to senior developers Teams already using GitHub Everyday coding productivity 2. Cursor Cursor is best when you want an AI-first editor experience. Instead of only helping with one line or one function, Cursor is useful when you want to ask questions about your whole project and make multi-file changes. Use Cursor if: You want your editor to feel like an AI coding workspace. Best for: Building features quickly Editing multiple files Understanding unfamiliar codebases Indie hackers and startup builders My honest take: Cursor is very productive, but developers should avoid blindly ac

Jack M 2026-05-30 20:36 11 原文
AI 资讯 Dev.to

The Ghost in the Veltrix: Why Our Treasure Hunt Engine Was Sending Operators Down the Wrong Rabbit Hole

In November 2023 we ran our first global Hytale servers on Google Kubernetes Engine using Veltrix 3.2 as our configuration orchestrator. The Treasure Hunt Engine—a service that fans spawn to claim event loot—started crashing every time search volume exceeded 12 k RPM. Grafana showed a steady climb of 503 errors on /hunt/claim until the autoscaler maxed out at 32 G1 CPU cores and still couldnt keep up. Operators kept filing tickets that boiled down to one sentence: We click the map, nothing happens. We never saw the actual error because the ingress controller was swallowing it and returning a generic Too many requests. What we tried first (and why it failed) Our first move was to crank up the nginx-ingress-controller replicas from 3 to 12 and switch the load-balancer tier from GKE Standard to Premium. The 503 rate dropped to 8 k RPM, but now the p99 latency on claims spiked from 80 ms to 420 ms. The culprit was a recursive call in the hunt service: every claim required a round trip to the player-profile service to validate tier eligibility, and that service was on a shared Postgres 15.4 cluster with 3 k TPS of unrelated traffic. The error stack in Jaeger was literally tracing_id=7f3a1c8… server=profile-db pool_timeout . We tried adding connection pooling with PgBouncer, but the hunt service was using raw libpq and refused to reuse connections—no matter how many times we told it. The Architecture Decision We ripped the validation out of the synchronous path and made the hunt engine publish an event called HuntTierCheckRequired to a dedicated Kafka topic player-events-tier . The hunt service would respond to the client with a 202 Accepted immediately, then the loot-claim worker would listen to that topic and, if the tier passed, publish HuntLootReady . The worker ran in the same pod but on a separate goroutine with a 60-second TTL so we didnt leak memory if the tier service hung. We moved the player-profile service to an SSD-backed CloudSQL instance and gave it 32 GB R

Lillian Dube 2026-05-30 20:36 11 原文
AI 资讯 Dev.to

The AI Test Report Said 97.3% Coverage. The Client's Lead Engineer Asked One Question. The Room Went Silent.

Based on real QA scenarios. About what happens when AI-generated metrics replace real testing, and the quiet engineer in the back row has been running his own numbers the whole time. Act 1: The Review Meeting I was sitting at the back of the long table, a ThinkPad in front of me, screen dimmed. On the big screen, Zhang Lei was presenting the acceptance data for his "AI Automated Testing Platform." His delivery was smooth. Every slide was a beautiful chart — coverage trends, automation rate improvements, regression testing time curves. All three lines pointed up and to the right, exactly like the textbook ideal curves. "In the past three months, the AI testing platform has executed 47,000 test cases, achieving 97.3% functional coverage. Regression testing time has dropped from 12 hours to 2.1 hours." Sparse applause. Zhang Lei added the final slide: "Monthly savings: approximately 200 person-days in labor cost." General Manager Zhou nodded and started the applause. That number was what he cared about most. I glanced at the other end of the table — the client's representative from RuiJie Technology. Chief Engineer Shen. Early fifties, thinning on top, silver-rimmed glasses. He hadn't said a word through the entire presentation. Hands folded on the table, occasionally jotting notes in a small book. Zhang Lei opened the Q&A slide and looked around the room: "Any questions?" Chief Engineer Shen flipped through the printed materials in front of him, stopped at the appendix, and looked up. "Page 47, Table 3.2 — what's the confidence interval on that 97.3% coverage?" The room went silent for about 15 seconds. Not the kind of silence where people are thinking. The kind where nobody had ever thought about it. Zhang Lei stood by the projector, clicker still in his hand, paused for two seconds: "Uh... the model confidence is quite high. The specific number is in the technical report." "Which page?" "I'll need to look it up." Chief Engineer Shen didn't push further. He looked do

xulingfeng 2026-05-30 20:35 10 原文
AI 资讯 Dev.to

CSRF, and the cookie flag

<form action= "https://bank.com/transfer" method= "POST" > <input name= "to" value= "attacker" > <input name= "amount" value= "10000" > </form> <script> document . forms [ 0 ]. submit () </script> Five lines of HTML on a malicious page. When a user who's logged into bank.com in another tab visits this page, the browser auto-submits the form, attaches their session cookie, and ten thousand dollars leave their account. They didn't click anything. The malicious site didn't see their password. There was no XSS, no breach, no leak in the traditional sense. The browser did exactly what it was designed to do. That's CSRF — Cross-Site Request Forgery — and it's been the classic "confused deputy" attack on the web for two decades. Let's walk through what makes it work, why CORS doesn't help, and the one cookie flag that mostly killed it around 2020. Why the browser attaches your cookie to that request Cookies belong to a domain. When you log into bank.com , the bank sets a session cookie in your browser: Set-Cookie: session=abc123; HttpOnly From that point on, every single request your browser sends to bank.com carries that cookie. Every page load. Every API call. Every image fetch. The browser does it automatically, without asking, and regardless of who triggered the request. That last word is the door CSRF walks through. The browser attaches the cookie based on where the request is going , not where it came from . So when evil.com triggers a POST to bank.com/transfer , the browser sees a request destined for bank.com , looks up the cookies for bank.com , and attaches them. As far as the bank's server can tell, the request looks exactly like one the user submitted from inside the bank's own page. This is the "confused deputy" idea. Your browser is the deputy. It has authority on your behalf (your cookies). And it's been tricked into using that authority for someone else's benefit. The server has no way to tell the difference, because from its point of view, there isn't one.

Dipta 2026-05-30 20:35 8 原文
AI 资讯 Dev.to

Quark's Outlines: Python User-defined Functions

Quark’s Outlines: Python User-Defined Functions Overview, Historical Timeline, Problems & Solutions An Overview of Python User-Defined Functions What is a Python user-defined function? You can define your own function in Python using the def keyword. A Python user-defined function is made when you write a def block in your code. When Python runs this block, it creates a function object. A function object has special parts. These include its name, its list of default values, and its code. It also keeps a link to the global names from the file where it was made. You can use this object to call the function later with any valid input. Python lets you create named function objects with the def keyword. def greet ( name = " friend " ): return " Hello, " + name print ( greet ()) print ( greet ( " Mike " )) # prints: # Hello, friend # Hello, Mike The function greet is now a user-defined function. Python stores its name, code, and default values for later use. What are the special parts of a Python function? A Python function holds many facts about itself. These are called attributes. For example, __name__ holds the function name. __defaults__ is a tuple of default values. __globals__ holds the global names it can see. __code__ is a special object that stores the function’s bytecode. Python functions store their details in special attributes. def square ( x = 2 ): return x * x print ( square . __name__ ) print ( square . __defaults__ ) print ( square . __code__ . co_varnames ) # prints: # square # (2,) # ('x',) These parts let Python understand and run your function later. A Historical Timeline of Python User-Defined Functions Where do Python’s user-defined functions come from? User-defined functions in Python build on ideas from earlier languages. They let you name blocks of code and reuse them. Over time, Python added new parts to function objects—like closures, default values, and metadata—to make them more powerful. People designed ways to name and reuse logic 1958 — Fu

Mike Vincent 2026-05-30 20:33 7 原文
开发者 Reddit r/webdev

I built an open-source tracker of every major US layoff

Live app: https://layoffs.kadoa.com Data and code are open source: https://github.com/kadoa-org/layoffs-tracker The federal WARN Act requires employers with 100+ workers to give 60 days notice before mass layoffs or plant closings (different thresholds by state, but roughly 50+ jobs lost). But the notices are scattered across 50 state websites, each with its own format, broken links, and no API. I think this should be transparent and easy-to-access public data, so I built an open-source aggregator for it. submitted by /u/madredditscientist [link] [留言]

/u/madredditscientist 2026-05-30 20:32 6 原文
AI 资讯 Reddit r/webdev

Help needed

What will happen if i failed to pay my imagekit bill? i used imagekit server initaly bill is 9 dollar but after 2 week my invoice is 120 dollar , if i didnot able to pay they will terminate my account or take legal action? submitted by /u/Few_Construction7431 [link] [留言]

/u/Few_Construction7431 2026-05-30 20:31 6 原文
AI 资讯 Reddit r/webdev

How do you manage your skills for codex and claude?

I started with project level .codex and .claude folders to keep the skills. Most of the skills are common for both of the models and when I change something in them now I need to update the other one as well. It has become an additional maintenance job. I created a root level skills folder and tried to make them share the same skills but; they sometimes create files that they like to use like codex adds openai.yaml things; they still go .codex or .claude folders sometimes even though I told them to look in the skills folder etc. etc. I would like to know how do you deal with these kind of things? submitted by /u/abstracten [link] [留言]

/u/abstracten 2026-05-30 20:22 6 原文
开发者 Reddit r/webdev

Vanta | a single-file browser task manager I built out of frustration, looking for feedback and direction

I've been putting off getting deeper into web design for a long time. Not because I wasn't interested, but because I kept telling myself I'd do it properly "at some point". At some point eventually arrived, and this is what came out of it. The motivation was simple: I couldn't find a task manager that just lived in my browser tab without requiring an account, an extension, a subscription, or a whole app install. I wanted something minimal, fast, and always there. So I built it myself. What it is: Vanta is a single HTML file Open it in your browser, bookmark it, done. It has: - Three themes (Focus, Minimal, Paper) - Drag-and-drop reordering - Separators to group tasks visually - Named profiles to save and switch between different lists - Full undo/redo (Ctrl+Z / Ctrl+Y) - JSON import/export - Keyboard shortcuts throughout - Everything persisted in localStorage I deliberately kept it as one file. I didn't really see a reason to split it - it's not a framework project, it's a tool I open in a tab. That was a conscious choice, though I'm curious if others would have approached that differently. https://github.com/Ventexx/vanta-Checklist What I'm actually after: Functionally, I'm happy with it. It does what I needed it to do. What I'm less confident about is everything else. I have always had a complicated relationship with web design. I've made projects that touched on it, but I've never built something I was genuinely visually pleased with at the end. Vanta comes closer than anything I've done before, but I still feel like I'm missing something beyond this - if I want to keep going down the path of building things that are actually aesthetically considered, I don't think I'm quite there yet in how I approach it, and I'm not sure where to look next. So if you have thoughts on where to go from here - what to learn, what I've approached wrong, or just what you'd improve in the app itself - I'd genuinely appreciate hearing it. This is the kind of thing I usually don't have

/u/LifeguardSea99 2026-05-30 20:20 6 原文
AI 资讯 Reddit r/webdev

[Showoff Saturday] I originally built this math tool in C back in 1992 as a math teacher. Today, I ported it into a mobile web app with Speech Recognition (GPLv3)

Hi r/webdev ! I have a bit of a unique backstory for this Showoff Saturday. Back in 1992 , while working as a math teacher, I wrote the very first version of a mental math training program named Aritm in C. Fast forward to today, and I have completely modernized it into Aritm SR —a mobile-first web app, now featuring full English support and optional speech recognition. The Tech & Features: Why I built it: While great platforms like Khan Academy exist, they often rely purely on randomly generated questions. Based on my experience teaching math, Aritm acts more like a physical deck of flashcards that gets shuffled, creating a much better learning rhythm for memorization. I would love to get the community's feedback on the frontend structure, how the speech recognition feels, or any tips on optimizing mobile web performance!Thanks for checking it out, and I'm happy to answer any questions about its 30+ year evolution! submitted by /u/mobluse [link] [留言]

/u/mobluse 2026-05-30 20:20 6 原文
开发者 Reddit r/MachineLearning

Before we spend months processing open-source robotics datasets, tell us why this is a bad idea [D]

Ps. Not pitching anything; Just trying to understand where reality differs from the narrative We're a couple of ML students, mostly worked on ML/software before, but over the last few months we've been playing with VLAs, robot datasets, and trying to understand where the field is heading. After spending a few weeks downloading robotics datasets, we were surprised by how much effort went into just getting data into a usable format. Maybe we're missing something, but it felt like every dataset had different assumptions, schemas, sensors, coordinate frames, metadata standards, and tooling. That got us wondering: How do robotics teams actually think about data sharing? Do people genuinely want access to more robot data, or is the industry moving toward "collect your own data because nobody else's transfers"? Our current (possibly very wrong) hypothesis is: The robotics ecosystem doesn't have a data scarcity problem. It has a data interoperability problem. We're considering running a pretty large experiment: Take essentially every public robot-learning dataset we can get our hands on, normalize it into a common schema, enrich it with metadata, and see how much of it is actually reusable across tasks, embodiments, and learning pipelines. Before we spend months doing that, we'd love to hear from people actually building in robotics. Where is this hypothesis wrong? Is finding data not actually a problem? Is embodiment mismatch the real blocker? Is quality the issue? Is labeling the issue? Is everyone just collecting their own data anyway? Would you ever use robot data collected by another team? If I gave you access tomorrow to every public robotics dataset through one API, what would you actually do with it? Or would you ignore it completely? ------------------------------------------------------------------------------------------------------ Edit: One clarification We're not thinking about a marketplace, proprietary format, or closed platform. The experiment we're conside

/u/sigma_crusader 2026-05-30 20:18 8 原文
AI 资讯 Reddit r/webdev

I built software—an alternative to traditional VPS that boots micro-VMs in under a second. Would love your feedback!

Hey , I got tired of waiting 60 seconds for traditional cloud servers to spin up, and standard Docker containers sharing a single kernel felt like a security risk for multi-tenant apps. So, I built Krova (krova.cloud).It lets you spin up ultra-lightweight, completely isolated micro-VMs (we call them "Cubes") running directly on dedicated bare-metal hardware. Key Features: Sub-second boot times: Container speeds, but with true hardware-level VM isolation. Sleep & Wake: You can pause a Cube to stop compute billing entirely. You only pay a tiny passive storage fee while it sleeps, and it wakes back up in milliseconds exactly where you left off. Reliable Hardware: Everything sits on enterprise servers with ECC RAM (no bit flips) and Mirrored NVMe SSDs (RAID 1). It's fully integrated with Cloudflare for automated HTTPS certificates out of the box. I’m looking for developers, engineers, and hobbyists to stress-test the platform. What features are missing that would make you switch your staging or production workloads over? submitted by /u/logical_people [link] [留言]

/u/logical_people 2026-05-30 20:16 6 原文
AI 资讯 Reddit r/webdev

Renovo - A cost friendly B2B alternative for license renewal tracking

Hi there! I am a web dev with over 7 years of industry experience. Renovo is an expiration and document tracker for businesses and the self employed. Think restaurant owners, general contractors, etc. The target audience is users with licensing/permits to keep track of for their business(es). The free tier allows a user to get a lot out of the app. The paid version allows the user to store their actual PDF documents with the record and some extra goodies. Bigger businesses typically have enterprise software with compliance tracking baked in, often as a side thought. Alternatives tend to cost twice as much and more. Would love to hear anyone's feedback as I recently launched and only have a couple users so far. This post and any comments I make here are written by me, a human 🙂 submitted by /u/OutOfTuneAgain [link] [留言]

/u/OutOfTuneAgain 2026-05-30 20:16 6 原文
产品设计 The Verge AI

Sometimes, a short game hits the spot

Slots & Daggers, a low-key, fantasy-themed slot machine roguelike, was one of my favorite games last year. That may sound like a complicated description, but the game mixes ideas from deckbuilding roguelikes with slot machines to create an engrossing loop, and there's steady meta-progression that helps you push further with just about every run. Perhaps […]

Jay Peters 2026-05-30 20:00 13 原文
开发者 The Verge AI

The SpaceX IPO is great for Elon Musk and terrible for you

I haven't seen anything as stupid as the WeWork IPO document in a very long time - that is, until Elon Musk filed to take SpaceX public. WeWork was a joke. SpaceX is a threat. And if Musk and his bankers have their way, you are going to be their bagholder. Lots of the top-line […]

Elizabeth Lopatto 2026-05-30 20:00 16 原文
AI 资讯 The Verge AI

This is the James Bond game we’ve been waiting for

Hi, friends! Welcome to Installer No. 130, your guide to the best and Verge-iest stuff in the world. (If you're new here, welcome, don't forget to hydrate, and also you can read all the old editions at the Installer homepage.) This week, I've been reading about Victor Wembanyama and mahjong and Merlin Mann's pearls of […]

David Pierce 2026-05-30 20:00 15 原文