Reddit Programming
209 subscribers
1.22K photos
125K links
I will send you newest post from subreddit /r/programming
Download Telegram
I found the stupidest take on Vibe Coding
https://www.reddit.com/r/programming/comments/1pql7bw/i_found_the_stupidest_take_on_vibe_coding/

<!-- SC_OFF -->Choose the stupid and discuss. I will join. My favorite quote was: "You are no longer the person placing every single brick. You are the site manager pointing at the wall and saying, "Build that higher."" If someone would (a very dumb person) kickstart a construction company by hiring random "average joe" people to do what he says, and google everything about it before you do, and he was "just" a guy who thinks big buildings are cool (like everyone is "just" something). I would NOT move into that building, or even visit it. Quote your favorite one! <!-- SC_ON --> submitted by /u/hiskias (https://www.reddit.com/user/hiskias)
[link] (https://www.designgurus.io/blog/vibe-coding-guide?gad_source=1&gad_campaignid=23163907085&gbraid=0AAAAADME9yrwhh3Pn4emui6N9e6TSIGXY&gclid=Cj0KCQiAjJTKBhCjARIsAIMC4496p8jeDlvlPl7NzYAKygn6pb3Uu8ETEcUnO-OXzcajV4U6-B0Ec9IaAi2FEALw_wcB) [comments] (https://www.reddit.com/r/programming/comments/1pql7bw/i_found_the_stupidest_take_on_vibe_coding/)
Registry you can actually query
https://www.reddit.com/r/programming/comments/1pqm8f2/registry_you_can_actually_query/

<!-- SC_OFF -->Running a private registry is easy; making it searchable isn't. Here's how reg taps SQLite to expose fast queries without touching S3. <!-- SC_ON --> submitted by /u/swdevtest (https://www.reddit.com/user/swdevtest)
[link] (https://writethat.blog/reg.html) [comments] (https://www.reddit.com/r/programming/comments/1pqm8f2/registry_you_can_actually_query/)
Vulnerabilities in artificial intelligence platforms: the example of XSS in Mintlify and the dangers of supply chain attacks
https://www.reddit.com/r/programming/comments/1pqpt6s/vulnerabilities_in_artificial_intelligence/

<!-- SC_OFF -->The flaw discovered in this article arose from an endpoint that served static resources without validating the domain correctly, allowing Cross-Site Scripting (XSS) on large customer websites. Although it was not a case of 'AI-generated' code being executed at runtime, the platform itself is powered by AI. This raises a larger concern: even when LLMs do not directly create vulnerable code, the AI ecosystem in general accelerates the adoption and integration of third-party tools, prioritizing speed and convenience, often at the expense of thorough security analysis. Such rapid integrations can lead to critical flaws, such as inadequate input validation or poor access controls, creating a favorable environment for supply chain attacks. Research shows that code generated by LLMs often contains common vulnerabilities, such as XSS, SQL injection, and missing security headers. This leads to a reflection: does this happen because the models are trained on billions of lines of old code, where insecure practices are common? Or is it because LLMs prioritize immediate functionality and conciseness over the robustness of the security architecture? <!-- SC_ON --> submitted by /u/Fragrant-Age-2099 (https://www.reddit.com/user/Fragrant-Age-2099)
[link] (https://gist.github.com/hackermondev/5e2cdc32849405fff6b46957747a2d28?referrer=grok.com) [comments] (https://www.reddit.com/r/programming/comments/1pqpt6s/vulnerabilities_in_artificial_intelligence/)
Engineering Lessons from 12 Projects Shipped in 2025
https://www.reddit.com/r/programming/comments/1pqtia4/engineering_lessons_from_12_projects_shipped_in/

<!-- SC_OFF -->In 2025, engineers on our team shipped projects across growth, payments, content creation, analytics, and infrastructure. Some of this work was user-facing, other projects were migrations and rewrites that paid down years of technical debt. Across the board, the hardest problems involved breaking long-standing assumptions, navigating legacy systems, or making explicit tradeoffs between product outcomes, performance, and velocity. We generalized our learnings through a collection of short engineering case studies framed around the practical challenges of building and maintaining production software: https://www.patreon.com/posts/year-in-review-146102084 <!-- SC_ON --> submitted by /u/patreon-eng (https://www.reddit.com/user/patreon-eng)
[link] (https://www.patreon.com/posts/year-in-review-146102084) [comments] (https://www.reddit.com/r/programming/comments/1pqtia4/engineering_lessons_from_12_projects_shipped_in/)
I implemented secure password hashing in a Java Swing Library Management System (SHA-256)
https://www.reddit.com/r/programming/comments/1pr6i2u/i_implemented_secure_password_hashing_in_a_java/

<!-- SC_OFF -->Hi everyone πŸ‘‹ I’m building a real-world Java Swing Library Management System, and in Part 32 I focused on something many beginner projects ignore: secure password storage. In this video, I implemented: πŸ” Password hashing using SHA-256 ❌ No plain-text passwords in MySQL βœ… Proper login preparation for real applications β˜• Java Swing + πŸ›’ MySQL integration This is part of a User Management Module, not just a demo β€” it’s designed like a real system you’d see in production (for learning purposes). πŸŽ₯ Video: Part 32 β€” Java Swing Library System | User Management – Secure Hashed Password
Part 32 β€” Java Swing Library System | Part 9 User Management Module – Secure Hashed Password (https://www.youtube.com/watch?v=tZGDawjVaD4&t=219s) I’d really appreciate feedback from experienced Java developers: Is SHA-256 okay for learning projects? What would you recommend next? (salt, bcrypt, login verification, forgot password?) Thanks for reading πŸ™
I hope this helps other Java Swing learners too. <!-- SC_ON --> submitted by /u/Substantial-Log-9305 (https://www.reddit.com/user/Substantial-Log-9305)
[link] (https://www.youtube.com/watch?v=tZGDawjVaD4&t=219s) [comments] (https://www.reddit.com/r/programming/comments/1pr6i2u/i_implemented_secure_password_hashing_in_a_java/)
Mastering AI Coding: The Universal Playbook of Tips, Tricks, and Patterns
https://www.reddit.com/r/programming/comments/1pr7wc9/mastering_ai_coding_the_universal_playbook_of/

<!-- SC_OFF -->A very useful, neither hype'y nor shilly, set of universal principles and approaches that makes AI-assisted coding (not vibing!) productive - for many, but not all, programming tasks. We are not talking about vibe coding here, were you don't know what's going on - we're talking about planning your changes carefully and in a detailed way with AI and letting it to write most, but not all, of the code. I've been experimenting with this approach as of late and for popular programming stacks, as long as you validate the output and work in incremental steps, it can speed up some (not all) programming tasks a lot :) Especially if you set up the code repo properly and have good and cohesive code conventions <!-- SC_ON --> submitted by /u/BinaryIgor (https://www.reddit.com/user/BinaryIgor)
[link] (https://www.siddharthbharath.com/mastering-ai-coding-the-universal-playbook-of-tips-tricks-and-patterns/) [comments] (https://www.reddit.com/r/programming/comments/1pr7wc9/mastering_ai_coding_the_universal_playbook_of/)
We revoked our v1.0 status. Why we're rolling NalthJS back to v0.9.0 to prioritize security architecture.
https://www.reddit.com/r/programming/comments/1pr8mhf/we_revoked_our_v10_status_why_were_rolling/

<!-- SC_OFF -->We made a mistake that I think a lot of open source maintainers make: we chased the "v1.0" label before the architecture was truly battle-hardened. NalthJS is designed to be a security-first framework (enforcing headers, sanitization, and encryption by default). But we realized that keeping the v1.0 badge implies a "finished" state that discouraged the kind of radical architectural improvements we're currently making. So, we're doing something unpopular: we're rolling back to v0.9.0 Beta. We're choosing to break things now so they don't break in prod later. I'd love to hear from other maintainers have you ever "undone" a major release to save the project's long-term integrity <!-- SC_ON --> submitted by /u/Evening-Direction-71 (https://www.reddit.com/user/Evening-Direction-71)
[link] (https://nalthjs.com/) [comments] (https://www.reddit.com/r/programming/comments/1pr8mhf/we_revoked_our_v10_status_why_were_rolling/)