news.ycombinator.com
Show HN: I built a local open-source tracker to bypass Jira UI frictionhttps://news.ycombinator.com/item?id=47501731I originally built SheepCat (https://github.com/Chadders13/SheepCat-TrackingMyWork) to solve a massive personal pain point. When you are holding a complex mental model of a C# backend or trying to optimize a heavy SQL query, the absolute worst thing for your working memory is having a PM come to you and require and upadte which forces you to open a heavy web browser, navigate a clunky enterprise UI, and find a specific ticket just to log a status update. The context-switching friction is brutal. So, I built a local, lightweight Python desktop app to bypass it. The core philosophy is the "gentle nudge"—working with our brains instead of against them, which is especially helpful for neurodivergent developers dealing with the dyslexia or ADHD tax. It gently takes updates when your have two seconds and stores them ready for when you have the time to focus on a proper update. All messages are enhanced by Ai meaning that you can drop messy half written messages in and you will get a summary Mar 24, 2026 12:36 PM
bing.com
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokenshttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d4d3891e14409aafb2387db6f8f07&url=https%3A%2F%2Fwww.bleepingcomputer.com%2Fnews%2Fsecurity%2Fpopular-litellm-pypi-package-compromised-in-teampcp-supply-chain-attack%2F&c=11760155563589823056&mkt=en-usThe TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...Mar 24, 2026 11:30 AM
veilvault.codeveil.de
Show HN: VeilVault – an Android password manager built to stay localhttps://veilvault.codeveil.de/index.en.htmlI used to keep important passwords in ways that were a lot more primitive than they should have been, mostly because I never fully got comfortable with putting everything behind an account or cloud sync by default.That eventually turned into building the password manager I actually wanted to use myself: Android-only, local-first, offline-first, and built around keeping the vault on-device.I’ve been using it daily for a while now, and that shaped the app more than trying to chase a giant feature checklist.It’s called VeilVault. I published the crypto/storage core separately for anyone who wants to inspect the local encryption and storage side.Mar 24, 2026 9:06 AM
news.ycombinator.com
I spent 2 months building a free AgTech app for my 5k-person hometownhttps://news.ycombinator.com/item?id=47499842I'm a Senior Engineer in Berlin. My hometown is Guardia Sanframondi — a hilltop village of ~5,000 people in Southern Italy's Sannio wine region. Local farmers grow heritage grapes (Falanghina, Aglianico) and olive cultivars that have been here for centuries.One evening I was looking at Copernicus satellite data and thought: could I turn NDVI imagery and weather data into something useful for the farmers I grew up with? That turned into months of evenings and weekends.What it does: Guardia del Campo combines satellite imagery (Sentinel-2 NDVI, soil moisture), weather data (Open-Meteo, ARPA Campania), and ML models trained on local varieties to produce daily risk forecasts for downy mildew, powdery mildew, olive fly, frost, and heat stress. Every morning, a Gemini AI brief tells farmers what to do — in plain Italian. No "probability coefficient." Just: "humidity is high, check the vines for peronospora today."The part I'm most proud of: anonymous crowdsourced reporting. A farmer spots diMar 24, 2026 8:13 AM
bing.com
RSA Announces Expanded Partnership with Microsoft, Enhances Leadership in Passwordless Identity Securityhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d135bd7554698b4bfaa801081ebb3&url=https%3A%2F%2Fwww.businesswire.com%2Fnews%2Fhome%2F20260324568393%2Fen%2FRSA-Announces-Expanded-Partnership-with-Microsoft-Enhances-Leadership-in-Passwordless-Identity-Security&c=1986696219995535599&mkt=en-usSAN FRANCISCO--(BUSINESS WIRE)--RSA today announced expanded support for the new Microsoft 365 E7: The Frontier Suite solution at RSAC Conference 2026. This new support joins additional passwordless ...Mar 24, 2026 5:00 AM
bing.com
Disney’s Live-Action ‘Cinderella’ Spinoff ‘Stepsisters’ Lands Director Akiva Schaffer, ‘Naked Gun’ Writershttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8cb01daf6b4684b1bc2b01b7a17d31&url=https%3A%2F%2Fwww.hollywoodreporter.com%2Fmovies%2Fmovie-news%2Fstepsisters-disney-live-action-cinderella-akiva-schaffer-1236545999%2F&c=15466348794241452553&mkt=en-usDan Gregor and Doug Mand, who also worked with the filmmaker on 'Chip 'n Dale,' will pen the comedy film's script. By Ryan Gajewski Senior Entertainment Reporter Disney‘s live-action Cinderella ...Mar 24, 2026 4:39 AM
science.nasa.gov
Tropical Cyclone Narelle Crosses Australiahttps://science.nasa.gov/earth/earth-observatory/tropical-cyclone-narelle-crosses-australia/The powerful storm lashed the northern edge of the continent with damaging winds and drenching rain as it made landfall multiple times.Mar 24, 2026 4:01 AM
bing.com
The most innovative advertising and marketing companies of 2026http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d7d51d7044b9093c347a799a626db&url=https%3A%2F%2Fwww.fastcompany.com%2F91495402%2Fadvertising-marketing-most-innovative-companies-2026&c=1986375576006049053&mkt=en-usIn some ways, the attention game for brands is only getting tougher. The increased pace of the cultural cycle and the tidal wave of slop hitting our feeds have added a layer of suspicion to any brand ...Mar 24, 2026 4:00 AM
github.com
Show HN: PostgreSQL backup manager with BTRFS block-level deduplicationhttps://github.com/Lakshmipathi/pgdedupI wrote BTRFS block level de-duplication sometime in 2020 as use-case for a patch sent in 2015 https://stackoverflow.com/a/34163236 and now after 6 more years created an use-case for dduper via pgdedup!How it works? Consecutive pg_basebackup snapshots share most of their blocks. Store them uncompressed on BTRFS and let dduper deduplicate it.Interestingly: - gzip completely breaks block-level dedup. Two pg_basebackup -z runs of the same database produce < 1% matching blocks. - Chunk size matters hugely. dduper's default 128KB chunks only found 19% savings. Lowering to 8KB (PostgreSQL's page size) jumped to 68%.Mar 24, 2026 12:21 AM
nasa.gov
See NASA’s GUARDIAN Catch a Tsunamihttps://www.nasa.gov/science-research/earth-science/see-nasas-guardian-catch-a-tsunami/A new data visualization illustrates how an experimental NASA technology can provide extra lead time to communities in the path of a tsunami. Called GUARDIAN (GNSS Upper Atmospheric Real-time Disaster Information and Alert Network), the software detects slight distortions in satellite navigation signals to spot hazards on the move.. The animation breaks down a real-life […]Mar 23, 2026 6:10 PM
science.nasa.gov
SWOT Mission Unlocks a New View of Our Waterwayshttps://science.nasa.gov/earth/swot-mission-unlocks-a-new-view-of-our-waterways/Explore how rivers move, change, and sustain life across the planet with SWOT data.Mar 23, 2026 5:22 PM
bing.com
Electronic waste is a gold mine waiting to be tappedhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8cee2b7bdd4aae90220cf7c4b9b641&url=https%3A%2F%2Fcen.acs.org%2Fenvironment%2Frecycling%2FElectronic-waste-gold-mine-waiting%2F102%2Fi23&c=6773542627361491405&mkt=en-usIn the dark corners of your attic shelves or the depths of your desk drawers likely sits a collection of defunct laptops, cameras, and gaming consoles. The phone you may be reading this on will ...Mar 23, 2026 5:00 PM
news.ycombinator.com
Show HN: I built a 0.07ms Python firewall to stop AI hallucinationshttps://news.ycombinator.com/item?id=47491597Hey HN,I was building other AI products and kept hitting the same wall: agents hallucinate and constantly forget context. I ended up building a ledger just to track what they were actually doing.Once that ledger was logging everything, I realized I could use it to enforce rules. Exogram is the result. It is a deterministic firewall that intercepts agent tool calls (like MCP) using pure Python logic gates. It catches bad schemas and destructive actions in 0.07ms. There is zero AI in the security loop.I load-tested it yesterday and hit 137 RPS on a single container with zero dropped payloads.Sandbox: https://exogram.ai/proving-ground Repo: https://github.com/Richard-Ewing/exogram-protocol-rfcI just built the Proving Ground UI today to visualize the 0.07ms block in real time. Let me know if the split-screen demo makes sense, or if you manage to bypass the gates.RichardMar 23, 2026 4:21 PM
blog.mozilla.ai
Show HN: Cq – Stack Overflow for AI coding agentshttps://blog.mozilla.ai/cq-stack-overflow-for-agents/Hi all, I'm Peter at Staff Engineer and Mozilla.ai and I want to share our idea for a standard for shared agent learning, conceptually it seemed to fit easily in my mental model as a Stack Overflow for agents.The project is trying to see if we can get agents (any agent, any model) to propose 'knowledge units' (KUs) as a standard schema based on gotchas it runs into during use, and proactively query for existing KUs in order to get insights which it can verify and confirm if they prove useful.It's currently very much a PoC with a more lofty proposal in the repo, we're trying to iterate from local use, up to team level, and ideally eventually have some kind of public commons.At the team level (see our Docker compose example) and your coding agent configured to point to the API address for the team to send KUs there instead - where they can be reviewed by a human in the loop (HITL) via a UI in the browser, before they're allowed to appear in queries by other agents in your team.We're learMar 23, 2026 4:11 PM
github.com
Show HN: Threadprocs – executables sharing one address space (0-copy pointers)https://github.com/jer-irl/threadprocsThis project launches multiple independent programs into a single shared virtual address space, while still behaving like separate processes (independent binaries, globals, and lifetimes). When threadprocs share their address space, pointers are valid across them with no code changes for well-behaved Linux binaries.Unlike threads, each threadproc is a standalone and semi-isolated process. Unlike dlopen-based plugin systems, threadprocs run traditional executables with a `main()` function. Unlike POSIX processes, pointers remain valid across threadprocs because they share the same address space.This means that idiomatic pointer-based data structures like `std::string` or `std::unordered_map` can be passed between threadprocs and accessed directly (with the usual data race considerations).This accomplishes a programming model somewhere between pthreads and multi-process shared memory IPC.The implementation relies on directing ASLR and virtual address layout at load time and implementing Mar 23, 2026 4:08 PM
bing.com
Wallace Unveils AI-Powered Platform to Transform Personalized Investinghttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d8f588e5e40d090904ea99f1b0a98&url=https%3A%2F%2Ffinance.yahoo.com%2Fmarkets%2Fstocks%2Farticles%2Fwallace-unveils-ai-powered-platform-225800894.html&c=5417152652407696021&mkt=en-usChicago, Illinois, March 23, 2026 (GLOBE NEWSWIRE)-- Wallace Finance Co. has launched its innovative investing platform on the Apple App Store, designed to give everyday investors unprecedented ...Mar 23, 2026 3:58 PM
github.com
Show HN: Urlx – an agent-made Rust replacement for curl/libcurlhttps://github.com/jonwiggins/urlxRecently several AI labs have published experiments where they tried to get AI coding agents to complete large software projects.- Cursor attempted to make a browser from scratch: https://cursor.com/blog/scaling-agents- Anthropic attempted to make a C Compiler: https://www.anthropic.com/engineering/building-c-compilerA few weeks ago I posted xmloxide, an agent-made Rust replacement for libxml2 made by pointing Claude code at the libxml2 test suite: https://news.ycombinator.com/item?id=47201816curl is arguably the most widely deployed software in the world. It's 180,000 lines of C with a history of memory safety CVEs. The curl project itself tried to address this by adding a rust-based HTTP backend using hyper, but after four years of work, they abandoned the effort in December 2024. Daniel Stenberg wrote that, "there simply were no users asking for it and there were almost no developers interested or knowledgeable enough to work on it".- Daniel Stenberg's blog post on dropping hyper: hMar 23, 2026 3:20 PM
news.ycombinator.com
Ask HN: If there has been no prompt injection, is it safe?https://news.ycombinator.com/item?id=47490244As I use open claw I am concerned about prompt injection more than bad code. However I think I'm irrationally paranoid. I'm small fries I'm a single individual, someone actively trying to hack me is exploiting a multi-million dollar zero day and they're not doing that on me.If we're thinking about accidentally deleting everything through a terminal command, I've yet to see this actually occur.Deductively I can see all of the worst case scenarios with open claw. Inductively I've never seen it actually happen.I find it a bit irrational to pretend that open claw is a genuine security risk.The moment I see on Hacker News that someone got prompt injected, I think I'll be concerned. Until then I would need almost a lottery like chance to get hacked as the first person through prompt injection.Mar 23, 2026 2:43 PM
aliveui.dev
Show HN: CSS primitives for product videos, no render pipelinehttps://www.aliveui.dev/video-blocksMost product demo videos are made in screen recorders or tools like Remotion that render frames to MP4. I wanted something different: drop a CSS class on any HTML element and get cinematic motion that's ready for a product video, entirely in the browser. AliveUI Video Blocks is a set of CSS utility classes for common video UI primitives: animated metric cards, toast notifications, typewriter text, kinetic typography, lower thirds, scene backgrounds (aurora, starfield, bokeh), device frames, 3D effects, and particle FX. The interesting technical bit: there's no render pipeline. Animations run as native CSS keyframes. A small runtime (~2KB) handles declarative scene sequencing via data attributes, restarts animations on scene activation via an offsetHeight reflow trick, and drives CSS transition classes between scenes. The tradeoff vs Remotion: you can't do frame-perfect programmatic video or export a standalone MP4 without a headless browser. What you get instead is instant playback, zeMar 23, 2026 10:57 AM
bing.com
13 Symptoms Gastroenterologists Say You Should Never Ignorehttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8d06e112ea45fa85ad7f6f4a3fd008&url=https%3A%2F%2Ftime.com%2Farticle%2F2026%2F03%2F23%2Fdigestive-symptoms-never-ignore-gastroenterologist%2F&c=18158913084344889379&mkt=en-usFollow this section to personalize your feed and get instant alerts. WHY FOLLOW? Update your preferences in Account Settings Personalized Content Follow this tag to personalize your feed and get ...Mar 23, 2026 10:44 AM
