Skip to content
360SOFTY
HomeInsights

Insights

Ideas for building
better software.

Engineering perspectives on architecture, product development, AI, and the everyday decisions behind useful software.

From the engineering desk

Browse practical articles or follow the latest technology updates.

Subscribe via RSS →

Curated links from external sources — not 360Softy original articles.

ExternalSoftware Engineering
DEV Community

Every text-to-SQL benchmark score you've seen was measured without access control

Spider, BIRD, LiveSQLBench. If you have evaluated a text-to-SQL system in the None of them ask who is asking. Every score you have seen was produced by a system with unrestricted read Benchmarking Text-to-SQL under Role-Based Access Control, by Yang Fei, The scale of the augmentation: 53 databases, 399 tables, 3,353 columns 21,502 role-annotated query instances policies at column-operation granularity — not "can this role read this table" but "can this role SELECT this column" roles synthesised

aidatabasesecurity
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Milestone Reached: YINI Syntax Highlighting Is Now on the VS Code Marketplace

Milestone Reached: YINI Syntax Highlighting Is Now on the VS Code Marketplace A small but important YINI milestone has been reached: the official YINI Syntax Highlighting extension for Visual Studio Code has reached version 1.0.0 and is now available on the Visual Studio Marketplace. The extension targets YINI Specification 1.0.0 RC 6 and adds syntax highlighting for .yini configuration files directly in VS Code. It highlights YINI sections, keys, values, strings, numbers, comments, lists, ob

webdevtoolingvscode
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Padrão de Projeto Decorator: Adicionando Funcionalidades sem Quebrar sua Arquitetura

Se você já trabalhou com orientação a objetos por algum tempo, provavelmente já se deparou com este dilema: como adicionar novas funcionalidades a um objeto sem criar uma explosão de subclasses? Imagine um sistema de componentes gráficos onde você precisa combinar bordas, sombras, cores e efeitos de diferentes formas. Criar uma subclasse para cada combinação possível rapidamente se torna insustentável. É exatamente para resolver esse tipo de problema que existe o Decorator, um dos padrões de pro

architecturejavasoftwaredevelopment
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

XML Configuration Mode: Decoupling Your API Catalog from Business Code

Annotation mode keeps requests close to Java, but large integrations raise a fair question: do I want a wall of curl strings inside my service interfaces? JQuickCurl's XML mode answers with a firm no — you store every API definition in a separate XML file, and the business layer only sees plain Java interfaces with no annotations at all. This is the classic "declarative client" split: contract in configuration, behavior in code. In this post you'll learn to: Author an XML API catalog with the of

apirestapijava
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Missing RLS: The Most Underrated Breach Cause of 2026

You know why there are so many breaches in databases? Perfect, me neither. Let's find out in a few minutes. Everyone worries about encryption. Almost nobody worries enough about the one thing that's actually been breaking production databases all year: a table with Row Level Security simply left off. I ran into this while researching how to safely migrate Firestore Security Rules into Postgres RLS policies for a side project. What started as "how do I translate this correctly" turned into "oh, t

securitypostgresdiscuss
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

Building a Freelance Rate Calculator for Mexico with Plain HTML and JavaScript

Freelancers in Mexico often start with a tempting formula: take the monthly income they want, divide it by the number of hours they expect to work, and publish that number as an hourly rate. The result is usually too low because it treats every working hour as billable and ignores operating costs, time off, and uncertainty. This article shows how I built a small, privacy-first freelance rate calculator in plain HTML and JavaScript. It makes the assumptions visible without an account, upload, fra

javascriptwebdevfreelance
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

I built a chat where every word costs money — on TON, solo, no legal entity

Hi! I'm a mobile developer (Kotlin by day), and a couple of weeks ago I started a side project with a simple, slightly audacious idea: a chat where sending a message costs money — and the recipient gets paid. You write "hi", you pay. Someone writes to you, you earn. This is the story of how "what if attention literally had a price" became a working Telegram Mini App with real on-chain transactions — and the rakes I stepped on along the way, from app store rules to the anatomy of TON gas. An LLM

blockchaintelegramtypescript
DEV CommunityRead original
ExternalSoftware Engineering
DEV Community

‘I Just Feel Ripped Off’: A Week of Users Asking What They Pay For

There is a particular kind of complaint that gets louder as a market matures. Not “this is broken” — that is the noise of a new product — but “wait, what am I actually paying for?” That is the sound of customers who have done the sum. This week, across the AI tools people pay for daily, that is the sound that carried. None of it is a single scandal. It is a mood: ads turning up inside plans that used to be clean, “unlimited” offers with a quiet expiry date, top-tier subscriptions that somehow fe

voicespricingratelimits
DEV CommunityRead original

Let’s start with a conversation

Tell us what you’re working on.

An idea, a challenge, or a system that needs to work better. We’ll help you understand the next step.

Discuss your project

Prefer email? [email protected]