github.com
Show HN: Redos-analyzer – static ReDoS detection and auto-fix for Pythonhttps://github.com/HarshithReddy01/redos-analyzerAt 13:42 UTC on July 2, 2019, an engineer working for Cloudflare made changes to the regular ruleset that was being used by their Web Application Firewall. In under three minutes, there was an 80% drop in the amount of traffic globally. The load on all HTTP serving CPUs in their network hit 100%. It was caused by one regular expression intended to detect XSS attacks, which contained the regular expression pattern `.(?:.=.)`. This pattern included two quantifiers using `.` on the same character class.That was the result of a production ReDoS.I was interested to know how frequent such patterns are in Python libraries that we use everyday.Apr 8, 2026 1:56 AM
nasa.gov
NASA’s Artemis II Crew Beams Official Moon Flyby Photos to Earthhttps://www.nasa.gov/news-release/nasas-artemis-ii-crew-beams-official-moon-flyby-photos-to-earth/The first flyby images of the Moon captured by NASA’s Artemis II astronauts during their historic test flight reveal some regions no human has seen, including a rare in-space solar eclipse. Released Tuesday, astronauts captured the images April 6 during the mission’s seven-hour flyby of the lunar far side, showing humanity’s return to the Moon’s […]Apr 7, 2026 8:44 PM
news.ycombinator.com
ShadowStrike Phantom: Open-Source EDR/XDR Platformhttps://news.ycombinator.com/item?id=47678848We've been developing ShadowStrike Phantom since 2024 and plan to release it on Day 1 of 2027. Here's what we've accomplished so far:Phantom Emulator - A fully X86-64 Special Emulation Engine for advanced obfuscated malwaresPhantom Cortex - Includes Cortex-Static , Cortex-Behavioral ,Cortex-Network , Cortex-Emulation and the Cortex-Memory. We have been trained 5 of those AI/ML models with the malware datas and synthetic malware samples.Phantom Sensor - A custom Kernel minifilter driversrc/Shared_Modules/ - The Heart of Phantom EDR XDR Home products. It includes the fully Malware Hunting Engine and orchestrated with the 5 local AI/ML agents trained from scratch + Phantom Sensor and our Emulation Engine for advanced obfuscated malwares.Mostly the Phantom EDR XDR Home products will use the same Engine but will add top of that specialized to the tiers of them. EDR/XDR will have a web console management dashboard for policies, threat intel dashboards etc. and Home will have a Local UI.All tApr 7, 2026 5:48 PM
github.com
Show HN: Frontend-VisualQA — give coding agents eyes to verify their own UI workhttps://github.com/yutori-ai/frontend-visualqaCoding agents today are blind.They write “valid” HTML/CSS code but can still ship a broken layout, a clipped dropdown, or a page at the wrong URL. Playwright scripts can assert modal.isVisible() without knowing the modal is rendered off-screen.Essentially, coding agents need “eyes” to verify their own UI work.frontend-visualqa is a CLI + MCP server for Claude Code and Codex for visual testing, verification, and QA of a website.You give it a URL and natural-language claims: frontend-visualqa verify http://localhost:8000/dashboard.html \ --claims \ 'The API status indicator shows Active' \ 'The monthly quota progress bar is completely filled' # → first claim passes, second fails (label says 100% but bar is ~65% full) It catches visualDOM disagreements that selectors are blind to.You can also test interactive flows without hardcoded data: frontend-visualqa verify 'http://localhost:8000/booking_form.html' \ --claims 'The date on the confirmation page matches the date selected on the calendApr 7, 2026 5:06 PM
bing.com
How To File an Insurance Claimhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d3e6e8b094ba98cf82de03c6d9d0c&url=https%3A%2F%2Fwww.marketwatch.com%2Finsurance-services%2Fauto-insurance%2Fwhat-is-an-insurance-claim%2F&c=11488055276272849554&mkt=en-usOur team looked at over 100 of the top auto insurance providers in the U.S., from national providers like USAA, Travelers, and State Farm to regional providers like Erie Insurance. 8,500 Data Points ...Apr 7, 2026 5:00 PM
bing.com
Advocate Lutheran General Hospitalhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d9e26780a4ead94fba51e9642f5bb&url=https%3A%2F%2Fhealth.usnews.com%2Fbest-hospitals%2Farea%2Fil%2Fadvocate-lutheran-general-hospital-6430405&c=2663834344099394572&mkt=en-usHow successful hospital is in enabling Black patients to live at home during their first 30 days of recovery, with no time or minimal time spent in a hospital, ER or nursing home, compared to White ...Apr 7, 2026 5:00 PM
bing.com
Advocate Good Samaritan Hospitalhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d9e26780a4ead94fba51e9642f5bb&url=https%3A%2F%2Fhealth.usnews.com%2Fbest-hospitals%2Farea%2Fil%2Fadvocate-good-samaritan-hospital-6431475&c=16059067899563021746&mkt=en-usHow successful hospital is in enabling Black patients to live at home during their first 30 days of recovery, with no time or minimal time spent in a hospital, ER or nursing home, compared to White ...Apr 7, 2026 5:00 PM
bing.com
UCSF Health-UCSF Medical Centerhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d19ba92f64243bfefac39b0520038&url=https%3A%2F%2Fhealth.usnews.com%2Fbest-hospitals%2Farea%2Fca%2Fucsf-medical-center-6930043&c=15573057442068051363&mkt=en-usHow successful hospital is in enabling Black patients to live at home during their first 30 days of recovery, with no time or minimal time spent in a hospital, ER or nursing home, compared to White ...Apr 7, 2026 5:00 PM
bing.com
Johns Hopkins Medicine-Howard County Medical Centerhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d62a5935a48a787b2f83c32006ea6&url=https%3A%2F%2Fhealth.usnews.com%2Fbest-hospitals%2Farea%2Fmd%2Fhoward-county-general-hospital-6320460&c=7853855903240940704&mkt=en-usHow successful hospital is in enabling Black patients to live at home during their first 30 days of recovery, with no time or minimal time spent in a hospital, ER or nursing home, compared to White ...Apr 7, 2026 5:00 PM
bing.com
Johns Hopkins Medicine-Suburban Hospitalhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d62a5935a48a787b2f83c32006ea6&url=https%3A%2F%2Fhealth.usnews.com%2Fbest-hospitals%2Farea%2Fmd%2Fsuburban-hospital-6320350&c=9170310289267427772&mkt=en-usHow successful hospital is in enabling Black patients to live at home during their first 30 days of recovery, with no time or minimal time spent in a hospital, ER or nursing home, compared to White ...Apr 7, 2026 5:00 PM
github.com
Show HN: C64 Ultimate Toolbox for macOShttps://github.com/amiantos/c64-ultimate-toolboxMy wife got me a Commodore 64 Ultimate (https://www.commodore.net) for my birthday, and it became an obvious hassle to have to keep an entire monitor connected to it just to tinker with it. When I found out the Ultimate FPGA board has built-in support for streaming the video and audio data over the network, as well as a REST API allowing for file and configuration management, I set to work on an app to remotely control my new device.- View and hear your Commodore 64 Ultimate or Ultimate 64 device over the network, with a fully configurable CRT shader so you can dial in just the right retro feel.- View and manage files on your device, including support for drag and drop folder/file upload, as well as the ability to run and mount disks, create new disk images, and more.- BASIC Scratchpad is a mini-IDE in the app where you can write BASIC apps and send them directly to any of your connected devices to run.- Keyboard forwarding allows you to interact with your device with your computer keyApr 7, 2026 4:39 PM
news.ycombinator.com
Ask HN: Why isn't Anthropic eating their own dogfood? A Max subscriber's viewhttps://news.ycombinator.com/item?id=47677184Anthropic tells every enterprise customer to use AI to transform operations and automate support. Their own support experience is a chatbot named Fin, a missing contact page, and search results that send paying users to Reddit.I'm paying $200/month for Claude Max on my own dime, not my company's. I'm a Technology Director at a Fortune 50 company, using Claude personally to learn and then advocate for the right tools in our enterprise environment. That context matters for what follows.Here's what's broken:Claude Code OAuth fails repeatedly because the model Anthropic labels "Default (recommended)" — Opus 4.6 with 1M context — has a known OAuth refresh bug. Their own UI is pointing users at the broken option.Claude Desktop throws "This isn't working right now" constantly. Power users send every other prompt twice, especially during business hours. 127 incidents in 90 days per StatusGator. No SLA, no credits, no advance notice when what's included changes. What I'm paying for seems to shiApr 7, 2026 3:50 PM
respectaso.com
Show HN: Developed a solution to automate ASO keyword researchhttps://respectaso.com/The project that I started out of frustration turned into an application that replaced all other ASO tools I have been using. Sharing here so I hope it helps others as well.It is called RespectASO and available at respectaso.comLots of features are free without any limitations: - Keyword popularity - Keyword difficulty - and a separate difficulty score for ranking in top 5, 10 or 20. - Opportunity scores - likelihood of ranking organically - Unlimited apps + searches - Estimated downloads per keyword per localization - Supports 30 different localizations - Country opportunity finder: Which country is the best to target for a given keyword - Automated daily updated ranking results for targeted keywords - ASO targeting advice - CSV export - Keyword trend charts - Bulk operationsAutomation features are monetized for a one time fee, and they aim to automate hours of work into minutes with one click: - AI Niche Researcher: Enter a keyword, get a complete ASO strategy. The agentic engine anaApr 7, 2026 3:39 PM
github.com
Show HN: Testreel – Programmatic product demo videos from JSON and Playwrighthttps://github.com/greentfrapp/testreelI made Testreel as a programmatic alternative to ScreenStudio.This has two primary value props: 1. Not having to manual re-record a demo because of a typo or misclick; just update the config and regenerate 2. Allows LLM agents to generate demo videos for your web app, complete with cursor overlay, and a customizable desktop backgroundTestreel is an npm package that lets you describe interactions (click, type, scroll, zoom etc.) in JSON, YAML or Playwright. Then generate a polished webm/mp4/gif video with cursor overlay, click ripples, gradient background etc.Made with Claude Code. Built on Playwright + FFMPEG. MIT License.Repo: https://github.com/greentfrapp/testreelApr 7, 2026 3:01 PM
github.com
Show HN: Shared team context for AI coding sessions with ambient intelligencehttps://github.com/norrietaylor/distilleryI spent spring break building Distillery, an MCP server that gives AI coding sessions persistent, shared team context. By mid-week it was dogfooding: capturing its own design decisions and feeding them back into development. 50k lines of Python (16k production, 25k tests, 7k docs) designed, built, and shipped in just over a week.Every team I've worked on has the same problem. Someone makes a decision, usually a good one, with a lot of context behind it. And then, six months later, someone asks "why does this work this way?" and the answer is... gone. Buried in Slack. Lost in a PR description nobody remembers. Living only in the head of the person who wrote it, if they're still on the team.In the age of agentic development this fundamental problem has only been exacerbated. The time it takes to code up an epic is no longer the long pole in the SDLC tent. Knowledge is being generated at exponential rates and no one seems to be able to keep up.Distillery captures context inside the codingApr 7, 2026 1:54 PM
raccreative.github.io
Show HN: Rac-delta – open protocol for differential dir sync (Rust/Node SDKs)https://raccreative.github.io/rac-delta-docs/I built a platform for indie game developers (Raccreative Games) that includes a desktop launcher and a CLI upload tool. Developers push builds from their machine; players download them through an Electron app. https://raccreativegames.com/en/homeThe problem: every update (even changing a single texture) transferred the entire build over S3. A 2.2 GB game with minor changes meant 2.2 GB up and 2.2 GB down, every time, for every user. I looked for an existing solution and found nothing that fit:- rsync needs SSH on both ends, doesn't compose with arbitrary cloud storage - bsdiff/xdelta operate on single files, not directoriesSo I built rac-delta: an open, storage-agnostic differential sync protocol with SDKs in Rust and Node.- How it works -The protocol splits files into fixed-size chunks (default 1 MB), hashes each with Blake3, and produces a manifest file "rd-index.json" that describes the full directory, every file, every chunk, every hash.To sync:1. Generate a local rd-index.json byApr 7, 2026 1:08 PM
news.ycombinator.com
Hybrid Attentionhttps://news.ycombinator.com/item?id=47674749TLDR: Forked pytorch and triton internals . Changed attention so its linear first layer , middle quadratic layer, last linear layer Inference got much faster with a low perplexity hit in tests .Full attention O(n²): 17.96s / 5.6 tok/sHybridAttention O(n·W + n·D): 0.35s / 286.6 tok/sI have been building a small Rust focused language model from scratch in PyTorch. This is not a finetune. It is byte level, trained from random initialization on a Rust heavy corpus assembled here: https://codeberg.org/JohannaJuntos/SisyphusModel and training setupThe model has 25.6M parameters with a 512 context length. It uses a byte level vocabulary of 256, with 8 layers, 8 heads, and 512 dimensional embeddings. Positional embeddings are learned and the embedding and LM head weights are tied.Training ran for 30k steps on a 173.5M byte Rust corpus using a single RTX 4060 Ti 8GB.Final metrics were a train loss of 0.5834, validation loss of 0.8217, and perplexity of 2.15. The best validation loss occurred arApr 7, 2026 1:06 PM
bing.com
Tyler, The Creator’s Converse 1908 Jogger Is Getting a Nature-Inspired Upgrade in 4 New Colorwayshttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d271f3f5046dd901dd1b24761e019&url=https%3A%2F%2Fwww.billboard.com%2Fculture%2Fproduct-recommendations%2Ftyler-the-creator-new-converse-1908-jogger-shop-online-1236216657%2F&c=14167899807013887758&mkt=en-usThe rapper's jogger style is a fan favorite and makes a great everyday shoe. By Amina Ayoud All products and services featured are independently chosen by editors. However, Billboard may receive a ...Apr 7, 2026 10:00 AM
bing.com
Complex and Fanatics Partner for Complex Bets: Everything You Need to Knowhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d99a6bf9d43acaece481080a60dff&url=https%3A%2F%2Fsports.yahoo.com%2Farticles%2Fcomplex-fanatics-partner-complex-bets-162019774.html&c=12362875937068811368&mkt=en-usThe three operators told federal regulators that standards for consumer protection and market integrity will be critical as prediction markets expand. NBC Sports adds ‘Not So Fast with Pabst & Perloff ...Apr 7, 2026 9:20 AM
news.ycombinator.com
From Idea to App Store Was Predictable. From Launch to Traction Was Nothttps://news.ycombinator.com/item?id=47672566When you just have an idea and the plan is only starting to form, everything feels unclear. Building a product to launch seems daunting, overly complicated. And it may indeed be complicated, depending on the product. But in reality - given all the available tools and resources - it is the most ‘plannable’ part. If you are meticulous in planning and diligent in execution, it is also the most predictable part in terms of key results. You start with a concept, move to architecture and systems, and before you know it - you have a prototype to play with. You build, test, improve, iterate, iterate, iterate, and launch. And here’s where the real difficulty begins: everything after “Done”. Let me clarify something upfront: I’m talking about owning an indie product - with no backing whatsoever. The cruel reality hits fast. Zero traffic. Let that sink in: zero traffic. With thousands of apps being launched daily - many backed by real marketing budgets - the real (if not the only) challenge becomApr 7, 2026 9:17 AM
