block - Moozonian Search

news.ycombinator.com• Feb 18, 2026• 1 min read

Show HN: Designing package namespacing for a new language (Coi)Hey HN, I'm building Coi, a component-based language that compiles to WASM, JS, CSS and HTML with O(1) reactivity (no virtual DOM).I just shipped a built-in package manager, but the interesting part wasn't the implementation, it was all the ecosystem design questions I'd never thought about as a user of package managers.The problem I kept circling: how do you handle naming? Global names like auth or json seem fine until someone squats them. First-come-first-served creates perverse incentives. Reputation systems are easy to game early on. I went back and forth for longer than I'd like to admit.I went through a few approaches:Blocklist common names: reserve things like auth, json, http so people are forced into more specific names. Feels clean in theory, but who decides the list? And it doesn't really scale, someone will always find the next generic name you didn't think to block.Go's approach: just use GitHub URLs directly as the package identifier. No registry needed, no naming wars. I

news.ycombinator.com• Feb 16, 2026• 1 min read

Ask HN: Do LLM agents need a separate safety layer?LLM agents are good at deciding. They are bad at knowing when to stop.VERONICA is a failsafe state machine that sits between strategy engines and external systems. It provides: - Per-entity circuit breakers (task A failure doesn't block task B) - SAFE_MODE manual halt that persists across crashes - Atomic state persistence (survives SIGKILL) - Signal-aware graceful shutdown (SIGINT/SIGTERM) - Zero dependencies (pure Python stdlib)Strategy engines can be replaced. Safety layers cannot.30-day deployment (0 downtime). 12 crash-recovery events handled (100% state recovery). Avg load: 1.003 ops/sec. Validation: 2,600-second high-load test at 1000 ops/sec sustained (2.6M operations).Install via GitHub: `pip install git+https://github.com/amabito/veronica-core@v0.1.0`Repository: https://github.com/amabito/veronica-core

gitnav.xyz• Feb 15, 2026• 1 min read

Show HN: Git Navigator – Use Git Without Learning GitHey HN, I built a VS Code extension that lets you do Git things without memorizing Git commands.You know what you want to do, move this commit over there, undo that thing you just did, split this big commit into two smaller ones. Git Navigator lets you just... do that. Drag a commit to rebase it. Cherry-pick (copy) it onto another branch. Click to stage specific lines. The visual canvas shows you what's happening, so you're not guessing what `git rebase -i HEAD~3` actually means.The inspiration was Sapling's Interactive Smartlog, which I used heavily at Meta. I wanted that same experience but built specifically for Git.A few feature callouts:- Worktrees — create, switch, and delete linked worktrees from the graph. All actions are worktree-aware so you're always working in the right checkout. - Stacked workflows — first-class stack mode if you're into stacked diffs, but totally optional. Conflict resolution — block-level choices instead of hunting through `

github.com• Feb 14, 2026• 1 min read

Show HN: Buildcage – Restrict outbound network access during Docker buildsHi HN,I built buildcage as part of our supply chain security efforts at work. The problem we kept running into: when you run `RUN npm install` in a Dockerfile, that command can connect to anywhere on the internet, and you have no visibility into where it actually goes. Even with pinned dependencies, a compromised package could still exfiltrate build secrets or phone home to a C2 server during the build itself.buildcage is a Docker container that wraps BuildKit with an internal proxy. You give it a list of allowed domains, and only connections to those domains go through — everything else is blocked and logged. Your Dockerfiles stay exactly the same.If you use GitHub Actions, it's a few lines to add to your workflow — see the quick start guide. https://github.com/dash14/buildcage#quick-startI want to be upfront — this is not a silver bullet. If a malicious package is delivered through a legitimate registry, the connection goes to an allowed domain and buildcage can't catch it. You shoul

github.com• Feb 14, 2026• 1 min read

Show HN: Mdr – TUI Markdown Readermdr is a rust-based terminal Markdown reader with these core features:- Renders Markdown well: headings, lists, emphasis, blockquotes, rules, tables, and syntax-highlighted code blocks. - Multi-document queue: start with multiple files/directories, then move through docs in-app. - Filesystem browser (o): starts at current working directory, lets you traverse folders and open Markdown files. - Search: / to search, n/N next/previous, highlights all matches and current match. - Link support: hover shows URL, Enter/mouse click opens links. - Smooth TUI controls: keyboard + mouse scrolling, help overlay (h), quit (q), BeeLine mode toggle (b), plain mode toggle (m).I vibe coded this for my own needs and I hope it can be useful to you.

news.ycombinator.com• Feb 13, 2026• 1 min read

Show HN: MicroGPT in 243 Lines – Demystifying the LLM Black BoxThe release of microgpt by Andrej Karpathy is a foundational moment for AI transparency. In exactly 243 lines of pure, dependency-free Python, Karpathy has implemented the complete GPT algorithm from scratch. As a PhD scholar investigating AI and Blockchain, I see this as the ultimate tool for moving beyond the "black box" narrative of Large Language Models (LLMs).The Architecture of Simplicity Unlike modern frameworks that hide complexity behind optimized CUDA kernels, microgpt exposes the raw mathematical machinery. The code implements:The Autograd Engine: A custom Value class that handles the recursive chain rule for backpropagation without any external libraries.GPT-2 Primitives: Atomic implementations of RMSNorm, Multi-head Attention, and MLP blocks, following the GPT-2 lineage with modernizations like ReLU.The Adam Optimizer: A pure Python version of the Adam optimizer, proving that the "magic" of training is just well-orchestrated calculus.The Shift to the Edge: Privacy, Latency

news.ycombinator.com• Feb 9, 2026• 1 min read

Show HN: EdgeAI-OS – Air-gapped Linux distro where AI is a system primitiveI built a bootable Linux distribution that treats AI as a system primitive – like CPU or memory. Designed for security-conscious environments where data cannot leave the network.The problem: Most AI requires cloud APIs, which means your data leaves your control. For banks, healthcare, defense, and regulated industries – that's a non-starter.The solution: EdgeAI-OS runs everything locally. No cloud calls. No API keys. No telemetry. Boot the ISO, use AI. Your data never leaves the machine.Security features: - 100% offline operation – air-gap friendly, zero network dependencies - No external API calls – all inference runs locally on CPU - Command risk assessment – every command classified as Safe/Moderate/Dangerous - Dangerous pattern blocking – prevents rm -rf /, curl|bash, fork bombs, etc. - Open source & auditable – MIT licensed, inspect every line of code - No data exfiltration – nothing phones home, everWhat's in the ISO: - Local LLMs (TinyLlama 1.1B + SmolLM 135M) – runs on CPU, no

github.com• Feb 7, 2026• 1 min read

Show HN: Tharos – CLI to find and autofix security bugs using local LLMsOP here. We built Tharos because we were tired of "security theatre" tools that produce read-only reports.Tharos is an open-source security engine written in Go. Key features:Polyglot: Scans Go, Python, JS/TS (AST-based + Regex). Interactive: tharos --interactive opens a TUI to fix issues one-by-one. CI-Ready: Returns strict exit codes for blocking builds. Visual: HTML reports and rich terminal UI. Repo: https://github.com/chinonsochikelue/tharos Docs: https://tharos.vercel.appWould love feedback on the rule engine and the TUI ux!

the-profanity-api.com• Feb 6, 2026• 1 min read

Show HN: Built a free moderation API after failing to find oneThe problem with existing content moderation:Every developer who's built profanity filtering knows the frustration. Traditional filters either flag "assistant" because it contains "ass," or miss obviously toxic content because they're just matching keywords. They can't tell the difference between "I'll destroy you in this game" (friendly trash talk) and an actual threat.How The Profanity API solves this:I built a 5-layer detection pipeline that analyzes content progressively:Blocklist (L0): Your custom blocklist for instant flaggingStatic (L1): Exact match against known profanityDictionary (L2): Semantic word matching that catches meaning, not just spellingSemantic (L3): Phrase-level understanding for context-aware detectionLLM (L4): Human-like judgment for edge casesThe key insight: layer disagreementWhen a word gets flagged by keyword matching but scores low on semantic analysis, that disagreement signals potentially innocent usage. Instead of defaulting to "block," we escalate to LL

bing.com• Feb 6, 2026• 1 min read

Ice palace rises again as Saranac Lake Winter Carnival kicks off this weekendCarved blocks of ice, cartoon-themed sculptures and even bathing-suit bike rides are taking over Saranac Lake this weekend as the village’s historic Winter Carnival kicks off more than a week of ...

docs.smooth.sh• Feb 5, 2026• 1 min read

Show HN: Smooth CLI – Token-efficient browser for AI agentsHi HN! Smooth CLI (https://www.smooth.sh) is a browser that agents like Claude Code can use to navigate the web reliably, quickly, and affordably. It lets agents specify tasks using natural language, hiding UI complexity, and allowing them to focus on higher-level intents to carry out complex web tasks. It can also use your IP address while running browsers in the cloud, which helps a lot with roadblocks like captchas (https://docs.smooth.sh/features/use-my-ip).Here’s a demo: https://www.youtube.com/watch?v=62jthcU705k Docs start at https://docs.smooth.sh.Agents like Claude Code, etc are amazing but mostly restrained to the CLI, while a ton of valuable work needs a browser. This is a fundamental limitation to what these agents can do.So far, attempts to add browsers to these agents (Claude’s built-in --chrome, Playwright MCP, agent-browser, etc.) all have interfaces that are unnatural for browsing. They expose hundreds of tools - e.g. click, type, select, etc - and the action space is

github.com• Feb 3, 2026• 1 min read

Show HN: Clawdstrike – a security toolbox for the OpenClaw ecosystemHi HN.OpenClaw has been popping claw for weeks now…We’ve seen the same question come up again and again: “This is fun but how do we no get fuk?”My answer: Clawdstrike.It’s an open-source toolbox for developers who want to ship EDR-style apps and security infrastructure to the OpenClaw ecosystem.Disclaimer: this is an unpublished alpha (APIs will change). Beta is planned within ~7 days (aiming for Feb 10, 2026). Not audited—please treat as experimental.Here’s my take: the first wave of “make autonomous agents safe where users are literally yoloing their entire system without even watching” is actually pretty simple.Security needs to live at the boundary between an agent’s intent and action — the moment it tries to read/write files, patch code, call tools, or reach the network.Not just “visibility.” Not just logs. But enforcement + proof.What Clawdstrike gives you: - Fail-closed guards at the agent/tool boundary - Block sensitive paths, control network egress, detect secrets, validate pa

nono.sh• Feb 1, 2026• 1 min read

Show HN: Nono – Kernel-enforced sandboxing for AI agentsHey HNLuke here.I built nono and got it out quick then I expected, in response to the openclaw carnage, but its use is beyond openclaw.The problem: AI agents execute code on your machine. Prompt injections, hallucinations, or compromised tools can read ~/.ssh, exfiltrate credentials, or worse. Application-level sandboxes can be bypassed by the code they're sandboxing.I have been around security for a long old time now (i started something called sigstore a few years back) and have seen this pattern so many times before.The solution pitch: nono uses OS-level isolation that userspace can't escape:Linux: Landlock LSM (kernel 5.13+) macOS: Seatbelt (sandbox_init) After sandbox + exec(), there's no syscall to expand permissions. The kernel says no.What it does:nono run --read ./src --allow ./output -- cargo build nono run --profile claude-code -- claude nono run --allow . --net-block -- npm install nono run --secrets api_key -- ./my-agentFilesystem: read/write/allow per directory or file Ne

deterministic-stream-demo1.pages.dev• Jan 30, 2026• 1 min read

Show HN: A small reference demo for separating UI stalls from network delaysI built a small reference demo that streams data in the browser, intentionally stalls the UI, and exports a structured trace you can compare across runs.This isn’t a benchmark or a product. I mostly built it to sanity-check my own understanding of a common problem: is this slowdown coming from the network or from the UI thread?What the demo does:Uses real SSE streaming (no simulated network behavior)Relies on real browser throttling (DevTools → Network → 3G)Intentionally blocks the main thread to create real UI stallsExports a plain JSON trace with strict event orderingHow to try it:Open the siteSet DevTools → Network → 3GClick Run All (Standard Test)Download the traceRun it again and compareWhat surprised me is that with the same test and seed, the structure of the trace stays the same, even though timing shifts. That made it much easier (for me) to reason about what actually happened without squinting at timelines.The page is instrumented with a small deterministic event kernel so th

news.ycombinator.com• Jan 28, 2026• 1 min read

Ask HN: How to Built an Active CommunityI have built the Tech Content Platform Insidestack (https://insidestack.it) as a new side hustle with currently over 1000 popular RSS Feeds from independent tech experts, tech media houses and Big Tech.The site has some nice features like - Semantic search with text embedding - You can block / follow feeds - You can bookmark and comment articlesThe longterm goal is that any user can build customised feeds by defining interests (which translate into search vectors).I think the site has clean, modern design and is also quite efficient. (warning not vibe-coded). It is fully self-hosted from frontend, backend, database and email.The costs are extremely low currently, I spend less than €20 / month. I want to offer this as completely free service, not even requiring registration, except for creating customised feeds.My question is what is the best strategy to build an active community. I was thinking of open sourcing the feeds to get some attention. But this would be yet another awesome list

github.com• Jan 28, 2026• 1 min read

Show HN: Rtipc – real-time, zero-copy IPC for LinuxI built a small IPC library for Linux aimed at real-time and low-latency data exchange between processes.At its core is a zero-copy, wait-free, single-producer / single-consumer circular message queue living in shared memory. The design avoids locks and minimizes synchronization overhead, making it suitable for real-time or near-real-time workloads.Key features: - Zero-copy message passing via shared memory - Wait-free SPSC queue (no locks, no blocking in the fast path) - force_push mode: when the queue is full, the oldest message that hasn’t been consumed yet is dropped to make room for new data (useful when freshness > completeness, e.g. sensor streams) - Uses optional eventfds for efficient notifications - Small, dependency-free C implementation (a few thousand lines of code)This is not meant to replace general-purpose IPC systems like D-Bus. Instead, it’s designed to complement them for high-frequency or real-time data paths, while something like D-Bus handles control and configura

theideon.com• Jan 26, 2026• 1 min read

Show HN: Ideon – An open source, infinite canvas for your project's segmentationThe problem: I want to use my tools. You want to use yours. The contractor we hired uses yet another set of tools. This causes unnecessary friction for all participants.Ideon is a self-hosted visual workspace designed to bridge this gap. It doesn't replace your existing stack (GitHub, Figma, Notion, etc.) but provides a shared context where all these pieces live together on an infinite canvas.We built this because projects often die from fragmentation—code is in one place, decisions in chat logs, and visuals in design tools. Ideon aims to keep the project "mentally navigable" for everyone involved.Key features: - Visual Blocks: Organize Repositories, Notes, Links, Files, and People spatially. - State History: Track how decisions evolved with workspace snapshots. - Multiplayer: Real-time collaboration. - Self-hosted: Docker-based and AGPLv3 licensed.Tech stack: Next.js, PostgreSQL, Docker.Would love to hear your feedback on the approach!

bing.com• Jan 24, 2026• 1 min read

TikTok Privacy Policy Changes & What U.S. Users Need to KnowA pop up on the app caused concern in most people and others probably agreed to the new pop-up without blinking. When U.S. users opened the app, the scroll was blocked until they accepted new terms ...

news.ycombinator.com• Jan 22, 2026• 1 min read

Ask HN: Unusual Network FilterI encountered a strange situation: in public sector, there is a isolated network (wifi-5g ap-router-modem, made by oppo branded by wireless career, one Linux desktop connected with Ethernet to oppo router, one android tv connected over wifi and employee owned phones connected over wifi). The unusual problem is that regarding of network settings (dns, 2.4/5ghz and so on) YouTube does not work on tv but works everywhere else. TV shows that network has limited access and does not load YouTube app (but loads Netflix app). YouTube is available on both desktop over Ethernet and phone over wifi. Curl on Linux desktop shows proper http response to youtube site. Router control panel is accessible and does not contain any unusual entries that might block yt access on tv. Do you have any idea how youtube might be blocked on tv?

bing.com• Jan 22, 2026• 1 min read

Oscar nominations 2026: 'Sinners' shatters records with 16 nodsRyan Coogler's blockbuster film dominated the 98th Academy Awards nominations on Thursday with 16 nominations, breaking the Oscars all-time record. The former record was held by "Titanic," "La La Land ...