PSA: Be aware when opening "take home challenges" from untrusted recruiters
https://www.reddit.com/r/programming/comments/1pzvo25/psa_be_aware_when_opening_take_home_challenges/

<!-- SC_OFF -->I was recently contacted by linkedIn "recruiter" who's upto no good it seems. After some brief chatting, they asked me to complete a take-home assignment to go ahead with the recruitment process. This is the link to said take home challenge: https://bitbucket.org/brain0xlab/challenge/src/master/ It all seemed a bit suspcious and I wanted to check the repo out before cloning it and opening it myself. This repository contains a vscode auto run task: https://bitbucket.org/brain0xlab/challenge/src/master/.vscode/tasks.json <- This is a HUGE red flag. This task, through several layers of indirection, effectively downloads a stringified obfuscated JS noscript disguised as a json file from this link: https://api.npoint.io/3b0e9f7bfcd85cc9e77d The JSON is downloaded via a "env.js" file downloaded from here (WARNING: malware noscript host): https://vscode-settings-bootstrap[dot]vercel[dot]app/settings/env?flag=306 (replace the dots with actual dots) You'll likely need to use curl -L or something to actually download it. This vscode-settings-bootstrap is likely hosted by the malware creators as this is the website hosting the actual malware stuff primarily. npoint is sort of just a general service. Notice how the env.js file downloads the malware noscript containing json from npoint, extracts the obfuscated js from the cookie field and runs it. I have not managed to gather more information about the malware noscript itself. I know it reads a bunch of system information, reads credentials from filesystem (e.g ssh private keys) and tries to upload them to some domain. I sorta gave up figuring out what domain it is since the noscript does A LOT of useless work to waste cpu cycles and my virtualbox was simply taking too long to get to the meaty part. I have reported the linked in profile and bitbucket repo. TL;DR: Don't open take home challenges and grant it permissions, especially if it contains auto run noscripts... <!-- SC_ON --> submitted by /u/Phantom569 (https://www.reddit.com/user/Phantom569)
[link] (https://bitbucket.org/brain0xlab/challenge/src/master/) [comments] (https://www.reddit.com/r/programming/comments/1pzvo25/psa_be_aware_when_opening_take_home_challenges/)

ArchUnitTS vs eslint-plugin-import: My side project reached 200 stars on GitHub
https://www.reddit.com/r/programming/comments/1q08r8s/archunitts_vs_eslintpluginimport_my_side_project/

submitted by /u/trolleid (https://www.reddit.com/user/trolleid)
[link] (https://lukasniessen.medium.com/archunitts-vs-eslint-plugin-import-my-side-project-reached-200-stars-on-github-63629fad96ab) [comments] (https://www.reddit.com/r/programming/comments/1q08r8s/archunitts_vs_eslintpluginimport_my_side_project/)

On Why We Won't Have Nice Things
https://www.reddit.com/r/programming/comments/1q095ca/on_why_we_wont_have_nice_things/

submitted by /u/radekmie (https://www.reddit.com/user/radekmie)
[link] (https://radekmie.dev/blog/on-why-we-wont-have-nice-things/) [comments] (https://www.reddit.com/r/programming/comments/1q095ca/on_why_we_wont_have_nice_things/)

Paypal Honey’s Dieselgate: Detecting and Tricking Testers
https://www.reddit.com/r/programming/comments/1q0cgt1/paypal_honeys_dieselgate_detecting_and_tricking/

submitted by /u/neotheseventh (https://www.reddit.com/user/neotheseventh)
[link] (https://vptdigital.com/blog/honey-detecting-testers/) [comments] (https://www.reddit.com/r/programming/comments/1q0cgt1/paypal_honeys_dieselgate_detecting_and_tricking/)

End-to-End Static Type Checking: PostgreSQL to TypeScript | NpgsqlRest
https://www.reddit.com/r/programming/comments/1q0ekqi/endtoend_static_type_checking_postgresql_to/

submitted by /u/vbilopav89 (https://www.reddit.com/user/vbilopav89)
[link] (https://npgsqlrest.github.io/blog/end-to-end-static-type-checking-postgresql-typenoscript.html) [comments] (https://www.reddit.com/r/programming/comments/1q0ekqi/endtoend_static_type_checking_postgresql_to/)

Frontend development in 2025 - indepth recap
https://www.reddit.com/r/programming/comments/1q0h7k9/frontend_development_in_2025_indepth_recap/

<!-- SC_OFF -->a concise, research-driven recap covering the key shifts in frontend engineering this year—framework evolution, performance metrics (INP), AI tooling impact, accessibility compliance, and infrastructure choices. Read here: https://medium.com/@iammidhul/frontend-development-in-2025-an-in-depth-ecosystem-recap-c38d30ac9b6f?sk=fe167a4ed2fcc3c06f12c2fa596ad77c <!-- SC_ON --> submitted by /u/iammidhul (https://www.reddit.com/user/iammidhul)
[link] (https://medium.com/@iammidhul/frontend-development-in-2025-an-in-depth-ecosystem-recap-c38d30ac9b6f?sk=fe167a4ed2fcc3c06f12c2fa596ad77c) [comments] (https://www.reddit.com/r/programming/comments/1q0h7k9/frontend_development_in_2025_indepth_recap/)

Introduction - Create Your Own Programming Language with Rust
https://www.reddit.com/r/programming/comments/1q0lwkn/introduction_create_your_own_programming_language/

<!-- SC_OFF -->After almost 6 years, it's done. createlang.rs (http://createlang.rs/) The journey https://ehsanmkermani.com/posts/2025-12-31-createlang-rs-complete/ <!-- SC_ON --> submitted by /u/ehsanmok (https://www.reddit.com/user/ehsanmok)
[link] (https://createlang.rs/) [comments] (https://www.reddit.com/r/programming/comments/1q0lwkn/introduction_create_your_own_programming_language/)

Best Engineering Leaders Know How To Switch Off
https://www.reddit.com/r/programming/comments/1q0mvmk/best_engineering_leaders_know_how_to_switch_off/

submitted by /u/gregorojstersek (https://www.reddit.com/user/gregorojstersek)
[link] (https://newsletter.eng-leadership.com/p/best-engineering-leaders-know-how) [comments] (https://www.reddit.com/r/programming/comments/1q0mvmk/best_engineering_leaders_know_how_to_switch_off/)

Writing Windows 95 software in 2025
https://www.reddit.com/r/programming/comments/1q0peeg/writing_windows_95_software_in_2025/

submitted by /u/Ok-Appointment7509 (https://www.reddit.com/user/Ok-Appointment7509)
[link] (https://tlxdev.hashnode.dev/writing-windows-95-software-in-2025) [comments] (https://www.reddit.com/r/programming/comments/1q0peeg/writing_windows_95_software_in_2025/)

I canceled my programming book deal
https://www.reddit.com/r/programming/comments/1q0pmjy/i_canceled_my_programming_book_deal/

submitted by /u/azhenley (https://www.reddit.com/user/azhenley)
[link] (https://austinhenley.com/blog/canceledbookdeal.html) [comments] (https://www.reddit.com/r/programming/comments/1q0pmjy/i_canceled_my_programming_book_deal/)

The Second Great Error Model Convergence
https://www.reddit.com/r/programming/comments/1q0q4by/the_second_great_error_model_convergence/

submitted by /u/alexeyr (https://www.reddit.com/user/alexeyr)
[link] (https://matklad.github.io/2025/12/29/second-error-model-convergence.html) [comments] (https://www.reddit.com/r/programming/comments/1q0q4by/the_second_great_error_model_convergence/)

On definitions of memory safety
https://www.reddit.com/r/programming/comments/1q0q6rr/on_definitions_of_memory_safety/

submitted by /u/alexeyr (https://www.reddit.com/user/alexeyr)
[link] (https://matklad.github.io/2025/12/30/memory-safety-is.html) [comments] (https://www.reddit.com/r/programming/comments/1q0q6rr/on_definitions_of_memory_safety/)

Application Prohibited Internationally
https://www.reddit.com/r/programming/comments/1q0shlu/application_prohibited_internationally/

submitted by /u/heavymetalpanda (https://www.reddit.com/user/heavymetalpanda)
[link] (https://tuckersiemens.com/posts/application-prohibited-internationally/) [comments] (https://www.reddit.com/r/programming/comments/1q0shlu/application_prohibited_internationally/)

Writing Load Balancer From Scratch In 250 Line of Code in Golang
https://www.reddit.com/r/programming/comments/1q0udxb/writing_load_balancer_from_scratch_in_250_line_of/

submitted by /u/Sushant098123 (https://www.reddit.com/user/Sushant098123)
[link] (https://sushantdhiman.substack.com/p/writing-load-balancer-from-scratch) [comments] (https://www.reddit.com/r/programming/comments/1q0udxb/writing_load_balancer_from_scratch_in_250_line_of/)

JavaFX User Management System – BCrypt Password Hashing (Part 6)
https://www.reddit.com/r/programming/comments/1q0x8vp/javafx_user_management_system_bcrypt_password/

<!-- SC_OFF -->Hey everyone
I’m building a complete User Management System using JavaFX & MySQL, and in Part 6 I explain how to securely hash passwords using BCrypt instead of storing plain text passwords. Great for students, final-year projects, or anyone learning Java desktop applications. Watch here:
[Part 6 | User Management System in JavaFX & MySQL | BCrypt Password Hashing & Secure Storage (https://www.youtube.com/watch?v=LDD1Kan7tOI&t=4s)] Feedback and suggestions are welcome. Thanks! <!-- SC_ON --> submitted by /u/Substantial-Log-9305 (https://www.reddit.com/user/Substantial-Log-9305)
[link] (https://www.youtube.com/watch?v=LDD1Kan7tOI&t=4s) [comments] (https://www.reddit.com/r/programming/comments/1q0x8vp/javafx_user_management_system_bcrypt_password/)

Software taketh away faster than hardware giveth: Why C++ programmers keep growing fast despite competition, safety, and AI
https://www.reddit.com/r/programming/comments/1q0zuun/software_taketh_away_faster_than_hardware_giveth/

submitted by /u/germandiago (https://www.reddit.com/user/germandiago)
[link] (https://herbsutter.com/2025/12/30/software-taketh-away-faster-than-hardware-giveth-why-c-programmers-keep-growing-fast-despite-competition-safety-and-ai/) [comments] (https://www.reddit.com/r/programming/comments/1q0zuun/software_taketh_away_faster_than_hardware_giveth/)

Sorting with Fibonacci Numbers and a Knuth Reward Check
https://www.reddit.com/r/programming/comments/1q117yd/sorting_with_fibonacci_numbers_and_a_knuth_reward/

submitted by /u/nightcracker (https://www.reddit.com/user/nightcracker)
[link] (https://orlp.net/blog/fibonacci-sort/) [comments] (https://www.reddit.com/r/programming/comments/1q117yd/sorting_with_fibonacci_numbers_and_a_knuth_reward/)

I spent 9 hours debugging a system where I existed on the blockchain but not in the database
https://www.reddit.com/r/programming/comments/1q11auq/i_spent_9_hours_debugging_a_system_where_i/

<!-- SC_OFF -->I accidentally stress tested a modern hybrid system yesterday. It was painful and instructive. I tried to access Polymarket from Australia. VPNs failed because Cloudflare was fingerprinting IP infrastructure, not just location. When I eventually got through, I connected a wallet and signed transactions. On chain, everything worked. Off chain, nothing did. The web app entered an infinite login loop. After writing a pile of diagnostic noscripts, I realized what had happened. My wallet had deployed a proxy contract, so the blockchain recognized me. But the centralized user database never completed my registration. I had created a split brain identity. Valid cryptographically. Invalid application side. The UI could not reconcile the two, so it rejected every action. Later, I thought my funds were gone. They were not. They had been transformed into tokens sitting in contracts I could not interact with through the broken UI. This was not a bug so much as an emergent failure mode of stitching decentralized identity to centralized UX under unreliable network conditions. Full breakdown here: https://structuresignal.substack.com/p/the-9-hour-war-chasing-jane-street <!-- SC_ON --> submitted by /u/ExpertDeep3431 (https://www.reddit.com/user/ExpertDeep3431)
[link] (https://structuresignal.substack.com/p/the-9-hour-war-chasing-jane-street) [comments] (https://www.reddit.com/r/programming/comments/1q11auq/i_spent_9_hours_debugging_a_system_where_i/)

The 8 Fallacies of Distributed Computing: All You Need To Know + Why It’s Still Relevant In 2026
https://www.reddit.com/r/programming/comments/1q1cblg/the_8_fallacies_of_distributed_computing_all_you/

submitted by /u/trolleid (https://www.reddit.com/user/trolleid)
[link] (https://lukasniessen.medium.com/the-8-fallacies-of-distributed-computing-all-you-need-to-know-why-its-still-relevant-in-2026-078b4d8a98f1) [comments] (https://www.reddit.com/r/programming/comments/1q1cblg/the_8_fallacies_of_distributed_computing_all_you/)

Change is the root of all (evil) bugs
https://www.reddit.com/r/programming/comments/1q1d0pn/change_is_the_root_of_all_evil_bugs/

submitted by /u/fernandohur (https://www.reddit.com/user/fernandohur)
[link] (https://fhur.me/posts/2026/change-is-the-root-of-all-evil-bugs) [comments] (https://www.reddit.com/r/programming/comments/1q1d0pn/change_is_the_root_of_all_evil_bugs/)

Gene — a homoiconic, general-purpose language built around a generic “Gene” data type
https://www.reddit.com/r/programming/comments/1q1e75u/gene_a_homoiconic_generalpurpose_language_built/

<!-- SC_OFF -->Hi, I’ve been working on Gene, a general-purpose, homoiconic language with a Lisp-like surface syntax, but with a core data model that’s intentionally not just “lists all the way down”. What’s unique: the Gene data type Gene’s central idea is a single unified structure that always carries (1) a type, (2) key/value properties, and (3) positional children: (type ^prop1 value1 ^prop2 value2 child1 child2 ...) The key point is that the type, each property value, and each child can themselves be any Gene data. Everything composes uniformly. In practice this is powerful and liberating: you can build rich, self-describing structures without escaping to a different “meta” representation, and the AST and runtime values share the same shape. This isn’t JSON, and it isn’t plain S-expressions: type + properties + children are first-class in one representation, so you can attach structured metadata without wrapper nodes, and build DSLs / transforms without inventing a separate annotation system. Dynamic + general-purpose (FP and OOP) Gene aims to be usable for “regular programming,” not only DSLs: FP-style basics: fn, expression-oriented code, and an AST-friendly representation OOP support: class, new, nested classes, namespaces (still expanding coverage) Runtime/tooling: bytecode compiler + stack VM in Nim, plus CLI tooling (run, eval, repl, parse, compile) Macro-like capability: unevaluated args + caller-context evaluation Gene supports unevaluated arguments and caller-context evaluation (macro-like behavior). You can pass expressions through without evaluating them, and then explicitly evaluate them later in the caller’s context when needed (e.g., via primitives such as caller_eval / fn! for macro-style forms). This is intended to make it easier to write DSL-ish control forms without hardcoding evaluation rules into the core language. I also added an optional local LLM backend: Gene has a genex/llm namespace that can call local GGUF models through llama.cpp via FFI (primarily because I wanted local inference without external services). Repo: https://github.com/gene-lang/gene I’d love feedback on: whether the “type/props/children” core structure feels compelling vs plain s-exprs, the macro/unevaluated-args ergonomics (does it feel coherent?), and what would make the project most useful next (stdlib, interop, docs, performance, etc.). <!-- SC_ON --> submitted by /u/gcao99 (https://www.reddit.com/user/gcao99)
[link] (https://github.com/gene-lang/gene) [comments] (https://www.reddit.com/r/programming/comments/1q1e75u/gene_a_homoiconic_generalpurpose_language_built/)