📰 Dev.to · Alan West

Quantizing a model with multi-token prediction heads? Here's why standard conversion pipelines drop them silently, and how to preserve and calibrate them.

Geo-restrictions look simple until you ship them. Here's how to build jurisdiction-based access controls that survive VPNs, mobile carriers, and CDN caching.

How to detect when your servers have been compromised into attack infrastructure, with a step-by-step debugging walkthrough using ss, auditd, and nftables.

Autonomous coding agents love getting stuck in tool-use loops. Here's why it happens and four concrete fixes that stop the bleeding.

MySQL's 20-year-old view subquery restriction (Bug #11472) finally has a reported fix. Here's how to refactor views with CTEs and nested views today.

A practical comparison of Umami, Plausible, and Fathom for teams migrating off Google Analytics, with code examples and self-hosting notes.

Your GPU sits at 15% utilization and bigger batches don't help? Here's how to diagnose whether you're compute, memory, or overhead bound — and fix it.

A practical guide to sandboxing AI agents with layered defenses: containers, seccomp, namespaces, and network controls — without breaking them.

Comparing Perplexity's new on-disk scanner Bumblebee with manifest-based tools like OSV-Scanner and Snyk for supply chain security triage.

A walkthrough of debugging high memory usage in a Node.js service running on a small VPS, with three concrete fixes that added up to a 40% RSS reduction.

A practical look at moving off Claude for AI tasks — alternatives I've tried, an abstraction pattern that helps, and the broader vendor lock-in lesson.

LLMs produce confident-looking but geometrically broken OpenSCAD code. Here's why spatial reasoning fails and how to fix it with structured intermediates.

Why your AI agent gets stuck calling the same tool 47 times in a row, and three concrete patterns to break the loop in production.

Why local LLM inference hits OOM errors even when the model 'fits' in VRAM — and how to fix it with quantization, KV cache tuning, and allocator config.

An honest comparison of Umami, Plausible, and Fathom as privacy-focused Google Analytics alternatives, with real migration steps and code.

A practical walkthrough for auditing what your IDE extensions actually send to the cloud, using lsof, mitmproxy, and filesystem monitoring.

A practical walkthrough for identifying unknown hardware on your network — from passive MAC discovery to LLDP, traffic mirroring, and prevention.

When third-party scripts wreck your Core Web Vitals, here's how to find the worst offenders and fix the slowdown without rewriting your app.

Notes from migrating production workloads between closed LLM APIs and open-weight models like Qwen, with code, gotchas, and honest tradeoffs.

Stop runaway LLM agent loops with hard iteration caps, tool-call deduplication, embedding-based loop detection, and forced-decision prompts.

A practical guide to fixing CUDA out of memory errors in Stable Diffusion WebUI — from command-line flags to PyTorch allocator tuning.

A practical guide to auditing VSCode extensions, sandboxing projects with dev containers, and rotating credentials before the next supply chain attack hits.

A practical guide to detecting, scrubbing, and preventing leaked AWS keys in Git repos — using gitleaks, git-filter-repo, OIDC, and pre-commit hooks.

A practical guide to detecting leaked credentials before they hit GitHub, scrubbing them from git history when they do, and preventing the next leak.