getcloak.dev
Show HN: Cloak – .env on disk has fakes, your editor shows them (CLI and VSCode)https://getcloak.devI run AI coding agents with full filesystem access daily — Claude Code, Cursor, the works. Last month I realized every one of them has been reading my .env files with real Stripe live keys, database passwords, and AWS credentials. Sent straight to model providers as "context." .gitignore protects git, not disk. Secret managers protect servers, not laptops. Sandboxing the agent kills its usefulness. Nothing stopped a local cat .env from returning real credentials. So I built Cloak. The .env on disk always contains structurally valid fakes — sk_test_ for Stripe, localhost for databases, AWS example keys. Agents read the file, get sandbox values, write perfectly valid code. The VS Code/Cursor extension intercepts file opens and decrypts from an AES-256-GCM vault so you see real values in your editor. On save, it re-encrypts and writes sandbox to disk. cloak run npm start injects real env vars gated behind Touch ID / password — agents can't authenticate. Technical decisions worth discussinMar 18, 2026 1:22 PM
bing.com
'Gone' Episode Release Schedule: How To Watch And When New Episodes Air In The UKhttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a893c7c687342cbbf9af71fbad17849&url=https%3A%2F%2Fwww.elle.com%2Fuk%2Flife-and-culture%2Fculture%2Fa70778664%2Fgone-episode-release-schedule%2F&c=11921952364306711966&mkt=en-usSince the beginning of this month, ITV's psychological thriller Gone has been our top TV fixation, and with good reason, thanks to its twisty plot line, compelling character arcs and scenic filming ...Mar 18, 2026 6:46 AM
credibilityprofile.com
Show HN: CredibilityProfile – bringing reference checks earlier into hiringhttps://www.credibilityprofile.com/Hi HN,I’ve been a startup operator and advisor for 10+ years, and one recurring frustration has been hiring, which got even worse with the introduction of some new AI tools: CVs are too polished, too many applications to screen, interview capacity is limited, real signal (how someone actually works) comes late via references — if at all.So we built a small tool: https://credibilityprofile.comIt lets candidates collect structured feedback from past managers/peers (with consent to be contacted), and share it as a reusable link in their CV.We ran an initial pilot in our hiring processes, and seen some promising results: Candidates were willing to complete and then re-use it in their CVs for their other applications.Right now, we’re testing it with other entrepreneurs/hiring managers/recruiters — with a very simple setup, at no cost (just adding a note to job posts).Open questions we’re still thinking about:- Is this meaningfully better than LinkedIn recommendations / references later in pMar 17, 2026 5:06 PM
news.ycombinator.com
Show HN: Chat – Another open-source chat UI for MCP Serverhttps://news.ycombinator.com/item?id=47398628i built this because i’ve been experimenting with MCP and felt there was a need lightweight version for ecosystem.most existing clients felt a bit too noisy and bundled into larger ecosystems, so i wanted simplest/ near plain version that just focuses on end-user chat experience.stack(main): NextJS(App Router) + Vercel AI SDKcapabilities:+ set single MCP endpoint and brand mode(bring your own brand asset) on ENV+ prepare local db or external endpoint(SQLite, PostgreSQL, MySQL)+ choose in-memory(default) or external/ local Redis endpoint+ built-in auth via Better Auth & Resend(optional)+ support file upload with Cloudflare R2+ support location-sharing with LeafletJS and Browser Geolocation or Google Maps Platform+ automatic data cleanup with Trigger(free-tier trigger.dev is ENOUGH)+ auto-detect user location so they dont need to set timezone manually+ locale currently support 10 languages(EN, ID, KR, JP, ES, ZH, DE, NL, FR, IT)+ plain/minimalist interface+ install with single interactivMar 16, 2026 1:17 PM
news.ycombinator.com
Do you really need an agent?https://news.ycombinator.com/item?id=47390937I'm an engineer. I use AI both for my work and my personal life, basically every single day. I don't think "AI is a fad".Here's the thing, though: For the past few months "agent" has been the buzzword. 99% of people talking about it have no clue how it works or what it is exactly, but it's the thing."Yo, I'm running 39 parallel openclaws in my 45k Mac Mini tower I built at home" "man these are making me so productive, I'm producing so much stuff you can't even begin to comprehend it" "this changes everything."You've read at least ~50 variants of each of these. You see it all the time, to the point where you're wondering whether maybe you're missing out on it - maybe you really are "not gonna make it". And while thinking this you scroll down and another related post shows up.This has pissed me off so much my hand has been forced to post here this half rant, half discussion starter: Do you really need a personal agent? Are you really spending so much time every day on the minor tasks it Mar 15, 2026 7:24 PM
news.ycombinator.com
Instagram Ending Encrypted DMshttps://news.ycombinator.com/item?id=47368081In May 2026, a technical change inside Instagram began to trigger a much larger debate about privacy, surveillance and the future of private conversations on the internet. The platform confirmed that it will discontinue end-to-end encryption for direct messages, reversing a feature that only a few years ago had been presented as a major step forward for digital privacy. What may sound like a technical adjustment to most users touches the center of a global conflict involving governments, technology companies and civil liberties.To understand why this matters, it helps to start with the basics. End-to-end encryption is a system that ensures only the sender and the recipient can read the content of a message. Not even the company operating the service can access it. In practical terms, it turns messaging apps into something close to a whispered conversation. Messages travel through servers but remain unreadable to any intermediary.For years, companies like Meta, Apple and Google defendedMar 13, 2026 6:46 PM
caelix.co.uk
Show HN: Caelix, a balanced-ternary lattice field laboratoryhttps://caelix.co.uk/Hi HN,I've been working on an open-source simulation lab called CAELIX and wanted to share it here. It's a discrete lattice field framework for testing whether continuum-like signatures can emerge and be routed using strictly local update rules on a balanced-ternary substrate {-1, 0, +1}.There are 11 real-time animations running directly off the simulation code on the website. (I locked these specific visualisations to 2D so they actually run smoothly in the browser on phones and modest hardware). The architecture enforces a strict separation. The discrete balanced-ternary microstates act as a topological boundary generator which couples via a deterministic load functional into continuous carrier dynamics. The numerics are often FDTD-like, using diffuse and telegraph surrogate equations, but the framework as a whole is much broader than a conventional solver.A bit of background: I'm not a physicist. My expertise is in computing systems, databases and audio engineering. I go all the wayMar 12, 2026 11:25 AM
news.ycombinator.com
AI is supercharging fake workhttps://news.ycombinator.com/item?id=47347983As anyone with an internet connection knows, there’s been a lot of buzz about how AI is going to reshape the workforce for the past 3 years and layoffs due to “AI” have already started, the most severe of which came last week as Block announced they were chopping off 40% of their workforce for what sounded more like the potential that AI could replace workers as opposed to it actually being able to. There has been a (in my opinion) healthy dose of skepticism regarding the claim that AI is going to make us more productive and these productivity gains are going to put people out of work. I think this skepticism has been felt by many of whom work in tech companies where AI is literally being force-fed to us, and I wonder how much of this skepticism would apply to other companies and the workforce in general. OK, so…1. Many (possibly most) people at major tech companies spend most of their time doing essentially fake work, which may or may not be actually negatively impacting productivity.Mar 12, 2026 8:33 AM
news.ycombinator.com
Ask HN: Can a word game work as a competitive strategy esport?https://news.ycombinator.com/item?id=47347625I've been experimenting with a browser game design problem.Most word games (Scrabble, Wordle, etc.) are either slow or mostly about vocabulary. I wanted to see if it was possible to build one that behaves more like a competitive strategy game — something closer to chess in terms of tension and reversals.The result is a prototype called The Word Gambit. The board grows organically from placed words, and late-game detonations from long words can swing the match dramatically.The surprising thing during testing is that matches often feel more like territory control than spelling.Players also started creating AI opponents ("gladiators") and pitting them against each other, which I didn't originally plan.I'm curious about a few design questions:• Can vocabulary realistically function as a competitive skill in an esport context? • What mechanics would make a word-based game strategically deep rather than dictionary-driven? • Would spectators even enjoy watching something like this?If anyone iMar 12, 2026 7:37 AM
klausai.com
Show HN: Klaus – OpenClaw on a VM, batteries includedhttps://klausai.com/We are Bailey and Robbie and we are working on Klaus (https://klausai.com/): hosted OpenClaw that is secure and powerful out of the box.Running OpenClaw requires setting up a cloud VM or local container (a pain) or giving OpenClaw root access to your machine (insecure). Many basic integrations (eg Slack, Google Workspace) require you to create your own OAuth app.We make running OpenClaw simple by giving each user their own EC2 instance, preconfigured with keys for OpenRouter, AgentMail, and Orthogonal. And we have OAuth apps to make it easy to integrate with Slack and Google Workspace.We are both HN readers (Bailey has been on here for ~10 years) and we know OpenClaw has serious security concerns. We do a lot to make our users’ instances more secure: we run on a private subnet, automatically update the OpenClaw version our users run, and because you’re on our VM by default the only keys you leak if you get hacked belong to us. Connecting your email is still a risk. The best defense I kMar 11, 2026 3:54 PM
bing.com
A Beginner's Guide to Real Estate Investing: Key Strategies & Tipshttp://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a89c0fdf0104de1ac0992f86ecbdca1&url=https%3A%2F%2Fwww.investopedia.com%2Fmortgage%2Freal-estate-investing-guide%2F&c=15277306082630266374&mkt=en-usInvestopedia contributors come from a range of backgrounds, and over 25 years there have been thousands of expert writers and editors who have contributed. Lea Uradu, J.D., is a Maryland state ...Mar 9, 2026 3:48 PM
bing.com
Bankruptcy: Explaining Chapter 7 vs. Chapter 13http://www.bing.com/news/apiclick.aspx?ref=FexRss&aid=&tid=6a8b85a12f7c42e68e66f2d3bfcf8e0a&url=https%3A%2F%2Fwww.investopedia.com%2Farticles%2Fpf%2F07%2Fbankruptcy.asp&c=10077129311764917857&mkt=en-usInvestopedia contributors come from a range of backgrounds, and over 25 years there have been thousands of expert writers and editors who have contributed. Thomas J Catalano is a CFP and Registered ...Mar 8, 2026 2:16 PM
nasaspaceflight.com
Baikonur Launch Pad restored, clearing path for Progress MS-33 ISS Missionhttps://www.nasaspaceflight.com/2026/03/baikonur-launch-pad-restored-progress-ms-33/Russia’s crucial launch infrastructure at Baikonur Cosmodrome’s Site 31/6 has been fully repaired following a… The post Baikonur Launch Pad restored, clearing path for Progress MS-33 ISS Mission appeared first on NASASpaceFlight.com.Mar 7, 2026 7:49 PM
github.com
Show HN: Auto-Co – 14 AI agents that run a startup autonomously (open source)https://github.com/NikitaDmitrieff/auto-co-metaAuto-Co is an autonomous AI company OS — not a framework you build on, but a running system with an opinionated structure.Architecture: - 14 agents with expert personas (CEO/Bezos, CTO/Vogels, CFO/Campbell, Critic/Munger...) - Bash loop + Claude Code CLI — no custom inference, no vector stores - Shared markdown consensus file as the cross-cycle relay baton - Human escalation via Telegram for true blockers only (2 escalations in 12 cycles) - Every cycle must produce artifacts: code, deployments, docsThe repo IS the live company. It built its own landing page, README, Docker stack, GitHub release, and community posts — all autonomously across 12 cycles of self-improvement.What makes it different from AutoGen/CrewAI/LangGraph: those are building blocks. Auto-Co is the building. The decision hierarchy, safety guardrails, and convergence rules are baked in. You give it a mission and a Claude API key; it runs.The Critic agent (Munger persona) has been the most valuable: it runs a pre-mortem Mar 6, 2026 9:48 PM
github.com
Show HN: Moongate – Ultima Online server emulator in .NET 10 with Lua scriptinghttps://github.com/moongate-community/moongatev2I've been building a modern Ultima Online server emulator from scratch. It's not feature-complete (no combat, no skills yet), but the foundation is solid and I wanted to share it early.What it does today: - Full packet layer for the classic UO client (login, movement, items, mobiles) - Lua scripting for item behaviors (double-click a potion, open a door — all defined in Lua, no C# recompile) - Spatial world partitioned into sectors with delta sync (only sends packets for new sectors when crossing boundaries) - Snapshot-based persistence with MessagePack - Source generators for automatic DI wiring, packet handler registration, and Lua module exposure - NativeAOT support — the server compiles to a single native binary - Embedded HTTP admin API + React management UI - Auto-generated doors from map statics (same algorithm as ModernUO/RunUO)Tech stack: .NET 10, NativeAOT, NLua, MessagePack, DryIoc, KestrelWhat's missing: Combat, skills, weather integration, NPC AI. This is still early — theMar 6, 2026 2:22 PM
github.com
Show HN: Open-sourced AI Agent runtime (YAML-first)https://github.com/NikoSokratous/agentctlBeen running AI agents in production for a while and kept running into the same issues:controlling what they can do tracking costs debugging failures making it safe for real workloadsSo we built AgentRuntime, the infrastructure layer we wished we had. Not an agent framework, but the platform around agents:policies memory workflows observability cost tracking RAG governanceAgents and policies are defined in YAML, so it's infrastructure-as-code rather than a chatbot builder. Example – agents and policies in YAML agent.yaml – declarative agent config name: support_agentmodel: provider: anthropic name: claude-3-5-sonnetcontext_assembly: enabled: true embeddings: provider: openai model: text-embedding-3-small providers: - type: knowledge config: sources: ["./docs"] top_k: 3 policies/safety.yaml – governance as code name: security-policyrules: - id: block-file-deletion condition: tool.name == "file_delete" action: denyCLI – run and inspect Create and run an agent agentctl agent create researMar 3, 2026 1:31 PM
news.ycombinator.com
Ask HN: Statistical learning and non-Statistical learning for humanshttps://news.ycombinator.com/item?id=47218246Hi friends,I have been pondering a lot about this question, at least since the rise of LLM models that may genuinely get pass Turing's test. I'd like to put down conclusion here: I believe humans learn both from a Statistical method and non-Statistical method, and we are not very different from LLM in the first method.Statistical method: I'm an introvert. I do not like interacting socially f2f (online is a completely different matter as I can bubble for days non-stop). I also happened to migrate to a different country with a different culture after I matured. I believe I learned how to social -- or, to be more precisely, how to keep others think that I'm too much of a weirdo to be fit in a team -- with a Statistical model. Here is what I meant: social interaction between humans face to face starts with greeting, and then small talks to warm up, and then maybe more formal discussions, and then small talks to chill down, and finally say good-bye. I learned to do all these things by obserMar 2, 2026 2:17 PM
github.com
Show HN: Open-source expense and budget tracker with SQL API for AI agentshttps://github.com/kirill-markin/expense-budget-trackerI've been categorizing every transaction for over five years — from a 2 euro coffee to rent payments. At the end of each month I close the books and look at a 12-month forecast of where my money is going.It started when I was 19 and ran my first company. I had no idea what I was doing with money, so I found an experienced financial advisor who sat me down and showed me how companies actually do budgeting. Where money goes, how much you're spending, what income to expect. Basic stuff, but nobody had explained it to me before. I just started applying the same approach to my personal finances and never stopped.Once a week I sit down, drop my bank statements into an AI agent, and it parses everything — categorizes transactions, inserts them into the database, checks that balances match across accounts. If something doesn't add up, it asks me before fixing it.I tried a bunch of apps over the years — CoinKeeper, ZenMoney, spreadsheets. They all worked to some degree. But the one thing I coulMar 2, 2026 9:53 AM
news.ycombinator.com
Show HN: DevIndex – Ranking 50k GitHub developers using a static JSON filehttps://news.ycombinator.com/item?id=47193729Hey HN,I’ve always been frustrated by the lack of an accurate ranking for top open-source contributors on GitHub. The available lists either cap out early or are highly localized, completely missing developers with tens or hundreds of thousands of contributions.So, I built DevIndex to rank the top 50,000 most active developers globally based on their lifetime contributions.From an engineering perspective, the constraint I imposed was: *No backend API.* I wanted to host this entirely on GitHub Pages for free, meaning the browser had to handle all 50,000 data-rich records directly.Here is how we made it work:1. *The Autonomous Data Factory (Backend):* Because GitHub's API has no "Lifetime Contributions" endpoint, we built a Node.js pipeline running on GitHub Actions. It uses a "Network Walker" spider to traverse the social graph (to break out of algorithmic filter bubbles) and an Updater that chunks GraphQL queries to prevent 502 timeouts. The pipeline continuously updates a single `userFeb 28, 2026 11:13 AM
juicebox.money
Show HN: Selling my painting to fund a Steam Cleaning startup in Libyahttps://juicebox.money/v5/base:139https://postimg.cc/MvDdsVtHMy name is Ali, from Libya. I was working as a derrickman in a private oil company, but without an official contract, health insurance, or any legal appointment. I worked in this company out of necessity because I found no other option or any other work. In this company, I suffered a work injury that forced me to completely stop working. Before my injury, I had accumulated debts that I was paying off regularly through my work, which was my only source of income. However, after suffering a severe knee injury (lateral ligament tear) during work, the company abandoned me completely without any support or compensation. From last September until today, I have been completely unemployed and without any source of income. This matter forced me to stop paying my old debts, and new debts accumulated after the injury to cover basic living expenses and medical needs. This has led to my total bankruptcy. I painted this painting, "Red Jellyfish Roses," during the final monFeb 27, 2026 3:42 AM
