News for hackers. Stuff that matters.

dimiprasakis

Prediction: RSS is coming back stronger than ever
Re:Show HN: Giving Opus 5.5 a simulated paint canvas on Saturday October 03, 2026 @09:15AM (#49943991)
That is so cool!

Show HN: SideKernel – a usable MicroVM sandbox for AI coding agents on macOS

https://github.com/minoansecurity/sidekernel

Hey everyone, SideKernel is the result of my capstone project for my MSc at Georgia Tech.There are a lot of sandboxes on the market right now for AI agents, but most of them focus on production deployments, rather than coding agents (e.g. Claude Code).I always felt uncomfortable running Claude Code or other coding agents directly on my machine, and I didn't want to buy a second computer or rent...

( Read More... | no comments | on HN )
Cool approach.

But, a compromise still lands on host's kernel, Docker doesn't provide kernel isolation (well it does on a macOS because it runs in Docker machine but thats a side effect).

I wonder if a better solution would be to play with seccomp or Linux capabilities so that Chrome is sandboxed even in Docker. Not sure how this would work tbh.

Answering here to get ideas, I saw your fix on Git and request for feedback (will try to review and give it some thought once I find some time)

Neat project, I like the idea. One thing from a quick read: you launch Chrome with --no-sandbox. Is there a good reason for that? Security wise it's probably not a good idea. If there is no reason, I'd suggest leaving the sandbox on!

In any case, cool stuff :)

Re:Linux 7.1 on Sunday June 14, 2026 @01:31PM (#48530064)
- "Anyway, possible slight hiccups in the merge window aside, the news today is 7.1." - "nothing particularly interesting or scary stands out, which is as it should be."

So, a number.

Show HN: GitShare – Turn GitHub repos into beautiful social media screenshots

https://gitshare.ch/

I needed a tool to turn GitHub repos into nice screenshots (for social media) but couldn't find one that I liked. There are plenty for X and LinkedIn posts, but not many for GitHub repositories.I built a simple static web app (GitShare) where you paste any public repo URL, customize it live and then export as PNG/JPEG/WebP. It runs entirely in your browser (it uses GitHub's API client-side, so...

( Read More... | no comments | on HN )
Re:How Shamir's Secret Sharing Works on Tuesday May 26, 2026 @06:36PM (#48286941)
To be honest, I always wondered why variations of SSS haven't been seen commercial adoption more. For example, instead of storing API Keys in GitHub repos, the keys could be constructed on the fly by approvers signing their shares. I guess the UX of coordinating share-holders is what kills most implementations...

SSS does suffer though for some serious weaknesses, i.e. it trusts the shareholders. A cheating party can submit a fake share during reconstruction, corrupting the recovered secret, and honest parties have no way to detect this something that verifiable secret sharing fixes.

Anyway threshold crypto is a very elegant field and the math is there is really beautiful.

What I'd love to see is an e-ink reader, purpose-built for RSS. Think of getting your morning digests from select sources without touching your smartphone or PC. Heaven