Monday, February 23, 2026

New top story on Hacker News: Show HN: Shibuya – A High-Performance WAF in Rust with eBPF and ML Engine

Show HN: Shibuya – A High-Performance WAF in Rust with eBPF and ML Engine
12 by germainluperto | 1 comments on Hacker News.
Hi HN, I’ve been working on Shibuya, a next-generation Web Application Firewall (WAF) built from the ground up in Rust. I wanted to build a WAF that didn't just rely on legacy regex signatures but could understand intent and perform at line-rate using modern kernel features. What makes Shibuya different: Multi-Layer Pipeline: It integrates a high-performance proxy (built on Pingora) with rate limiting, bot detection, and threat intelligence. eBPF Kernel Filtering: For volumetric attacks, Shibuya can drop malicious packets at the kernel level using XDP before they consume userspace resources. Dual ML Engine: It uses an ONNX-based engine for anomaly detection and a Random Forest classifier to identify specific attack classes like SQLi, XSS, and RCE. API & GraphQL Protection: Includes deep inspection for GraphQL (depth and complexity analysis) and OpenAPI schema validation. WASM Extensibility: You can write and hot-load custom security logic using WebAssembly plugins. Ashigaru Lab: The project includes a deliberately vulnerable lab environment with 6 different services and a "Red Team Bot" to test the WAF against 100+ simulated payloads. The Dashboard: The dashboard is built with SvelteKit and offers real-time monitoring (ECharts), a "Panic Mode" for instant hardening, and a visual editor for the YAML configuration. I'm looking for feedback on the architecture and the performance of the Rust-eBPF integration.

New top story on Hacker News: ASML unveils EUV light source advance that could yield 50% more chips by 2030

ASML unveils EUV light source advance that could yield 50% more chips by 2030
39 by pieterr | 3 comments on Hacker News.


Friday, February 13, 2026

New top story on Hacker News: Show HN: Moltis – AI assistant with memory, tools, and self-extending skills

Show HN: Moltis – AI assistant with memory, tools, and self-extending skills
8 by fabienpenso | 1 comments on Hacker News.
Hey HN. I'm Fabien, principal engineer, 25 years shipping production systems (Ruby, Swift, now Rust). I built Moltis because I wanted an AI assistant I could run myself, trust end to end, and make extensible in the Rust way using traits and the type system. It shares some ideas with OpenClaw (same memory approach, Pi-inspired self-extension) but is Rust-native from the ground up. The agent can create its own skills at runtime. Moltis is one Rust binary, 150k lines, ~60MB, web UI included. No Node, no Python, no runtime deps. Multi-provider LLM routing (OpenAI, local GGUF/MLX, Hugging Face), sandboxed execution (Docker/Podman/Apple Containers), hybrid vector + full-text memory, MCP tool servers with auto-restart, and multi-channel (web, Telegram, API) with shared context. MIT licensed. No telemetry phoning home, but full observability built in (OpenTelemetry, Prometheus). I've included 1-click deploys on DigitalOcean and Fly.io, but since a Docker image is provided you can easily run it on your own servers as well. I've written before about owning your content ( https://ift.tt/iFuBAq5 ) and owning your email ( https://ift.tt/kRGVAcd ). Same logic here: if something touches your files, credentials, and daily workflow, you should be able to inspect it, audit it, and fork it if the project changes direction. It's alpha. I use it daily and I'm shipping because it's useful, not because it's done. Longer architecture deep-dive: https://ift.tt/zicBIPl... Happy to discuss the Rust architecture, security model, or local LLM setup. Would love feedback.

Thursday, February 12, 2026

New top story on Hacker News: Anthropic raises $30B in Series G funding at $380B post-money valuation

Anthropic raises $30B in Series G funding at $380B post-money valuation
53 by ryanhn | 50 comments on Hacker News.


New top story on Hacker News: Show HN: Pgclaw – A "Clawdbot" in every row with 400 lines of Postgres SQL

Show HN: Pgclaw – A "Clawdbot" in every row with 400 lines of Postgres SQL
8 by calebhwin | 3 comments on Hacker News.
Hi HN, Been hacking on a simple way to run agents entirely inside of a Postgres database, "an agent per row". Things you could build with this: * Your own agent orchestrator * A personal assistant with time travel * (more things I can't think of yet) Not quite there yet but thought I'd share it in its current state.

Tuesday, February 10, 2026

New top story on Hacker News: A brief history of oral peptides

A brief history of oral peptides
15 by odedfalik | 7 comments on Hacker News.


New top story on Hacker News: Show HN: HN Companion – web app that enhances the experience of reading HN

Show HN: HN Companion – web app that enhances the experience of reading HN
8 by georgeck | 2 comments on Hacker News.
HN is all about the rich discussions. We wanted to take the HN experience one step further - to bring the familiar keyboard-first navigation, find interesting viewpoints in the threads and get a gist of long threads so that we can decide which rabbit holes to explore. So we built HN Companion a year ago, and have been refining it ever since. Try it: https://ift.tt/ugRqQ4K or available as an extension for Firefox / Chrome: [0]. Most AI summarization strips the voices from conversations by flattening threads into a wall of text. This kills the joy of reading HN discussions. Instead, HN Companion works differently - it understands the thread hierarchy, the voting patterns and contrasting viewpoints - everything that makes HN interesting. Think of it like clustering related discussions across multiple hierarchies into a group and surfacing the comments that represent each cluster. It keeps the verbatim text with backlinks so that you never lose context and can continue the conversation from that point. Here is how the summarization works under the hood [1]. We first built this as an open source browser extension. But soon we learned that people hesitate to install it. So we built the same experience as a web app with all the features. This helped people see how it works, and use it on mobile too (in the browser or as PWA). This is now a playground to try new features before taking them to the browser extension. We did a Show HN a year ago [2] and we have added these features based on user feedback: * cached summaries - summaries are generated and cached on our servers. This improved the speed significantly. You still have the option to use your own API key or use local models through Ollama. * our system prompt is available in the Settings page of the extension. You can customize it as you wish. * sort the posts in the feed pages (/home, /show etc.) based on points, comments, time or the default sorting order. * We tried fine tuning an open weights model to summarize, but learned that with a good system prompt and user prompt, the frontier models deliver results of similar quality. So we didn’t use the fine-tuned model, but you can run them locally. The browser extension does not track any usage or analytics. The code is open source[3]. We want to continue to improve HN Companion, specifically add features like following an author, notes about an author, draft posts etc. See it in action for a post here https://ift.tt/zhprERv We would love to get your feedback on what would make this more useful for your HN reading. [0] https://ift.tt/R2WwuEe [1] https://ift.tt/4iZk5GU [2] https://ift.tt/lJIWgsB [3] https://ift.tt/IUSr3qT

Friday, February 6, 2026

New top story on Hacker News: How to effectively write quality code with AI

How to effectively write quality code with AI
8 by i5heu | 0 comments on Hacker News.


New top story on Hacker News: Show HN: Daily-updated database of malicious browser extensions

Show HN: Daily-updated database of malicious browser extensions
7 by toborrm9 | 3 comments on Hacker News.
Hey HN, I built an automated system that tracks malicious Chrome/Edge extensions daily. The database updates automatically by monitoring chrome-stats for removed extensions and scanning security blogs. Currently tracking 1000+ known malicious extensions with extension IDs, names, and dates. I'm working on detection tools (GUI + CLI) to scan locally installed extensions against this database, but wanted to share the raw data first since maintained threat intelligence lists like this are hard to find. The automation runs 24/7 and pushes updates to GitHub. Free to use for research, integration into security tools, or whatever you need. Happy to answer questions about the scraping approach or data collection methods.

Tuesday, February 3, 2026

New top story on Hacker News: Show HN: PII-Shield – Log Sanitization Sidecar with JSON Integrity (Go, Entropy)

Show HN: PII-Shield – Log Sanitization Sidecar with JSON Integrity (Go, Entropy)
7 by aragoss | 1 comments on Hacker News.
What PII-Shield does: It's a K8s sidecar (or CLI tool) that pipes application logs, detects secrets using Shannon entropy (catching unknown keys like "sk-live-..." without predefined patterns), and redacts them deterministically using HMAC. Why deterministic? So that "pass123" always hashes to the same "[HIDDEN:a1b2c]", allowing QA/Devs to correlate errors without seeing the raw data. Key features: 1. JSON Integrity: It parses JSON, sanitizes values, and rebuilds it. It guarantees valid JSON output for your SIEM (ELK/Datadog). 2. Entropy Detection: Uses context-aware entropy analysis to catch high-randomness strings. 3. Fail-Open: Designed as a transparent pipe wrapper to preserve app uptime. The project is open-source (Apache 2.0). Repo: https://ift.tt/qW2jcFG Docs: https://pii-shield.gitbook.io/docs/ I'd love your feedback on the entropy/threshold logic!

Wednesday, January 28, 2026

New top story on Hacker News: Show HN: SHDL – A minimal hardware description language built from logic gates

Show HN: SHDL – A minimal hardware description language built from logic gates
3 by rafa_rrayes | 0 comments on Hacker News.
Hi, everyone! I built SHDL (Simple Hardware Description Language) as an experiment in stripping hardware description down to its absolute fundamentals. In SHDL, there are no arithmetic operators, no implicit bit widths, and no high-level constructs. You build everything explicitly from logic gates and wires, and then compose larger components hierarchically. The goal is not synthesis or performance, but understanding: what digital systems actually look like when abstractions are removed. SHDL is accompanied by PySHDL, a Python interface that lets you load circuits, poke inputs, step the simulation, and observe outputs. Under the hood, SHDL compiles circuits to C for fast execution, but the language itself remains intentionally small and transparent. This is not meant to replace Verilog or VHDL. It’s aimed at: - learning digital logic from first principles - experimenting with HDL and language design - teaching or visualizing how complex hardware emerges from simple gates. I would especially appreciate feedback on: - the language design choices - what feels unnecessarily restrictive vs. educationally valuable - whether this kind of “anti-abstraction” HDL is useful to you. Repo: https://ift.tt/Z5HIuef Python package: PySHDL on PyPI To make this concrete, here are a few small working examples written in SHDL: 1. Full Adder component FullAdder(A, B, Cin) -> (Sum, Cout) { x1: XOR; a1: AND; x2: XOR; a2: AND; o1: OR; connect { A -> x1.A; B -> x1.B; A -> a1.A; B -> a1.B; x1.O -> x2.A; Cin -> x2.B; x1.O -> a2.A; Cin -> a2.B; a1.O -> o1.A; a2.O -> o1.B; x2.O -> Sum; o1.O -> Cout; } } 2. 16 bit register # clk must be high for two cycles to store a value component Register16(In[16], clk) -> (Out[16]) { >i[16]{ a1{i}: AND; a2{i}: AND; not1{i}: NOT; nor1{i}: NOR; nor2{i}: NOR; } connect { >i[16]{ # Capture on clk In[{i}] -> a1{i}.A; In[{i}] -> not1{i}.A; not1{i}.O -> a2{i}.A; clk -> a1{i}.B; clk -> a2{i}.B; a1{i}.O -> nor1{i}.A; a2{i}.O -> nor2{i}.A; nor1{i}.O -> nor2{i}.B; nor2{i}.O -> nor1{i}.B; nor2{i}.O -> Out[{i}]; } } } 3. 16-bit Ripple-Carry Adder use fullAdder::{FullAdder}; component Adder16(A[16], B[16], Cin) -> (Sum[16], Cout) { >i[16]{ fa{i}: FullAdder; } connect { A[1] -> fa1.A; B[1] -> fa1.B; Cin -> fa1.Cin; fa1.Sum -> Sum[1]; >i[2,16]{ A[{i}] -> fa{i}.A; B[{i}] -> fa{i}.B; fa{i-1}.Cout -> fa{i}.Cin; fa{i}.Sum -> Sum[{i}]; } fa16.Cout -> Cout; } }

Saturday, January 24, 2026

New top story on Hacker News: Ask HN: Gmail spam filtering suddenly marking everything as spam?

Ask HN: Gmail spam filtering suddenly marking everything as spam?
32 by goopthink | 46 comments on Hacker News.
Almost all transactional emails are being marked as suspicious even when their SPF/DKIM records are fine and they’ve been whitelisted before. Did Google break something in gmail/spam filtering?

Thursday, January 22, 2026

New top story on Hacker News: Show HN: Synesthesia, make noise music with a colorpicker

Show HN: Synesthesia, make noise music with a colorpicker
3 by tevans3 | 0 comments on Hacker News.
This is a (silly, little) app which lets you make noise music using a color picker as an instrument. When you click on a specific point in the color picker, a bit of JavaScript maps the binary representation of the clicked-on color's hex-code to a "chord" in the 24 tone-equal-temperament scale. That chord is then played back using a throttled audio generation method which was implemented via Tone.js. NOTE! Turn the volume way down before using the site. It is noise music. :)

Friday, January 16, 2026

Wednesday, January 14, 2026

New top story on Hacker News: Unemployed almost a year after graduating MIT – a rant

Unemployed almost a year after graduating MIT – a rant
29 by TimGubth | 19 comments on Hacker News.
(This is not a problem-solving rant this is a I need to release my thoughts cuz no one in my life understands rant) Not sure where else to turn to but I'm extremely embarrassed to say we're nearing the 1 year anniversary of my Feb graduation (*course 6*) and I'm still unemployed, to the dismay of me and my family. I've applied to hundreds of jobs, tailored my resume with tech folks who regularly hire, tailored cover letters, gotten referrals, spoken to relevant connections in my network, done really well in interviews, all to no avail. The feedback I've received from asking employers who rejected me is never something wrong about me, just that they found someone else with pre-existing experience in that particular industry or tech stack. How am I supposed to compete with that at an entry level? And the longer I go without work, the worse it gets in the eyes of employers. I have two internships from back in undergrad as my "work experience" but that's it, one at a known company and one at a startup. My personal projects were not super intensive unfortunately, but I'm not sure how much that's affecting me at this point. Given the way things are going in the world, I remove certain tech sectors from consideration, but I really don't think that should be a handicap. I knew the job market was bad going into it, but recently, I've genuinely fallen into depression. It feels like I was sold this lie that the MIT name would open doors previously inaccessible to me, but nothing seems to be helping me land a job. Sucks more when I run into old friends who can't even hide their shock that I'm still unemployed. So I have to pretend this is just a gap year and all part of the plan. I'm starting to come to terms with the fact that I might never work in industry as a *software engineer or in tech*, and that sucks! Maybe it's already time for a career change, I don't know to what. I never felt too good about myself at MIT compared to others and so this all feels like proof that I'm not skilled enough to work in my chosen field. I can't even do my hobbies with all this free time because I spend a lot of it applying to jobs, doomscrolling, and sulking. I am really grateful that I was able to move back home with my parents. I think they were happy to have me back for a bit. But now I'm starting to feel like a drag and burden, especially as the *middle child sister* who’s just… there. I feel like a firework that exploded in bursts of color (everyone ooed and ah-ed), and then... nothing. I'm considering starting some volunteer/side projects, but persistently, in the back of my mind, is this voice telling me I'm worthless because I can't make any money. I am a failure.

New top story on Hacker News: GitHub should charge everyone $1 more per month to fund open source

GitHub should charge everyone $1 more per month to fund open source
61 by evakhoury | 73 comments on Hacker News.


Monday, January 12, 2026

New top story on Hacker News: Unauthenticated remote code execution in OpenCode

Unauthenticated remote code execution in OpenCode
37 by CyberShadow | 1 comments on Hacker News.
Previous versions of OpenCode started a server which allowed any website visited in a web browser to execute arbitrary commands on the local machine. Make sure you are using v1.1.10 or newer; see link for more details.

Sunday, January 4, 2026

New top story on Hacker News: Show HN: Hover – IDE style hover documentation on any webpage

Show HN: Hover – IDE style hover documentation on any webpage
8 by sampsonj | 0 comments on Hacker News.
I thought it would be interesting to have ID style hover docs outside the IDE. Hover is a Chrome extension that gives you IDE style hover tooltips on any webpage: documentation sites, ChatGPT, Claude, etc. How it works: - When a code block comes into view, the extension detects tokens and sends the code to an LLM (via OpenRouter or custom endpoint) - The LLM generates documentation for tokens worth documenting, which gets cached - On hover, the cached documentation is displayed instantly A few things I wanted to get right: - Website permissions are granular and use Chrome's permission system, so the extension only runs where you allow it - Custom endpoints let you skip OpenRouter entirely – if you're at a company with its own infra, you can point it at AWS Bedrock, Google AI Studio, or whatever you have Built with TypeScript, Vite, and the Chrome extension APIs. Coming to the Chrome Web Store soon. Would love feedback on the onboarding experience and general UX – there were a lot of design decisions I wasn't sure about. Happy to answer questions about the implementation.

New top story on Hacker News: I charged $18k for a Static HTML Page (2019)

I charged $18k for a Static HTML Page (2019)
77 by caminanteblanco | 13 comments on Hacker News.


Thursday, January 1, 2026

New top story on Hacker News: Show HN: Feature detection exploration in Lidar DEMs via differential decomp

Show HN: Feature detection exploration in Lidar DEMs via differential decomp
3 by DarkForestery | 0 comments on Hacker News.
I'm not a geospatial expert — I work in AI/ML. This started when I was exploring LiDAR data with agentic assitince and noticed that different signal decomposition methods revealed different terrain features. The core idea: if you systematically combine decomposition methods (Gaussian, bilateral, wavelet, morphological, etc.) with different upsampling techniques, each combination has characteristic "failure modes" that selectively preserve or eliminate certain features. The differences between outputs become feature-specific filters. The framework tests 25 decomposition × 19 upsampling methods across parameter ranges — about 40,000 combinations total. The visualization grid makes it easy to compare which methods work for what. Built in Cursor with Opus 4.5, NumPy, SciPy, scikit-image, PyWavelets, and OpenCV. Apache 2.0 licensed. I'd appreciate feedback from anyone who actually works with elevation data. What am I missing? What's obvious to practitioners that I wouldn't know?