News for hackers. Stuff that matters.

greenbeans12

From someone who thinks there's too much AI doom right now and is a glass half full optimist: If you are a software engineer reading this and panicking, don't. The author only mentions his codified, stable knowledge like you'd get from a distributed systems O'Reilly book.

There's no mention of the functional elements of a software engineering role - incident response, working with auditors to define and maintain controls for internal services, handling escalated account support & fraud, working on DevEx, selling shovels (MCPing your consumer-facing APIs/services), getting on customer calls to help sell your company's X feature, managing people downwards and upwards.

The piece kinda reads like remorse over sunken costs and attachment of knowledge to personality. If you twiddle your thumbs and stay static in your role, you will be replaced. It's the differentiation that sets employees apart. And attaching yourself to functions instead of knowledge is the only way to stay afloat.

I’m currently not detecting content from scripts though, just raw HTML at the moment. Good thinking on your side for doing that, I’m gonna throw it in my backlog.
I have a 2-stage agent that analyzes all of the DOM content (including pop up ads). If anything remotely resembles a scam, it passes the DOM content to a second “judge” LLM that’s more powerful and has a ton of criteria for top scam techniques.

The goal of the 2 stage agent is to prevent resource consumption when something isn’t a scam/harmful, and reduce false positives by doing a second pass if something flags.

This is super cool. Tangentially related, I made Ward which analyzes harmful ads: https://tryward.app Blocking them altogether is definitely an elegant solution.

Show HN: Ward – Modern antivirus in your browswer

https://tryward.app

I live in an area with a lot of older folks and I try to talk to them. One thing I've heard is how many of them have been scammed or know people who have gotten conned by phishing, tech support fraud, Medicare schemes, etc. Sometimes even their whole 401k or life savings. It's maddening to think there are individuals in this world taking advantage like that.I built Ward to start to tackle this....

( Read More... | no comments | on HN )
This is pretty cool. I barely use the web UIs for LLMs anymore. Any way you could make a wrapper for Claude Code/Cursor/Gemini CLI? Ideally it works like github push protection in GH advanced security.
In the FBI's 2024 IC3 report, internet crime losses were estimated to be over $16B, with $4.8B attributed directly to individuals 60+. Many people know folks who have gotten hit by Medicare, investment, or tech support scams. You probably can think of someone close to you.

Antivirus programs are antiquated, bloated, and resource intensive and fail to protect users from scam sites. When I had a family member ask me what antivirus to buy for web threats I couldn't recommend anything.

We launched Ward to try and address this problem for our family members, but realized quickly it can help basically any non-savvy internet user - elders, children, non-technical folks, etc. It uses Gemini Nano in the browser under the hood for scanning the DOM and URL for anything suspicious, and has a cloud-enabled mode for supporting less capable hardware like Chromebooks.

We're currently open source and are looking for any and all feedback and testers. We're free in our beta with a high soft quota. When a threat is detected, the user will immediately be directed to stop and click the extension for details, blocking the scam from proceeding.

There's prob not many people on HN who would fall for these, but would you pay for this for peace of mind for a loved one?

Re:Ask HN: What Are You Working On? (Nov 2025) on Monday November 10, 2025 @11:17AM (#45877421)
Ooh, good idea. It started as a question: "How do we make this thing the most private?" and the obvious answer was using offline local device LLMs (e.g. Prompt API/Gemini Nano).

Will poke around and see if there's interest here, thank you!

Re:Ask HN: What Are You Working On? (Nov 2025) on Monday November 10, 2025 @09:40AM (#45876466)
Very neat - I imagine you could even use this as a web scanner to identify security misconfigurations in API implementations (e.g. broken access control)
Re:Ask HN: What Are You Working On? (Nov 2025) on Monday November 10, 2025 @09:35AM (#45876415)
Love the name.
Re:Ask HN: What Are You Working On? (Nov 2025) on Monday November 10, 2025 @08:50AM (#45876000)
https://tryward.app

We’re building Ward, a security browser extension that uses Gemini Nano, an on-device LLM, to scan for phishing, scams, and other threats from the DOM.

Think of an antivirus for everyday web users, like young children, older adults, and less savvy individuals.

We recently participated in the Google Chrome Built-in AI Challenge 2025 and have submitted to the Chrome Web Store.

We’re looking to meet people who may know someone Ward is good for and would want to provide feedback. Alternatively, we’d love to chat with any IT Managers/Directors of Security/Google Apps Admins who would be interested in piloting us as an anti-phishing enterprise solution.

You can DM or hit me at fitzgeraldcedric(AT)gmail.com :)

Is this a shocker? In the cloud, you pay for convenience. This is basically running your own Kubernetes cluster. Right for the right teams (highly technical infra engineers).
Re:Ask HN: What Are You Working On? (October 2025) on Sunday October 12, 2025 @11:37PM (#45564468)
I’ve been casually getting into thrifting and realized pretty quickly that Lens is super limited in its functionality and is mostly a shopping app. I put a site together that is like a supercharged version of Lens for thrifters where you can get info on price, demand, and condition. Share function is borked atm tho

You can check it out at https://antiques-id-1094885296405.us-central1.run.app/.

GPT-5, announced today, follows the same pattern we've seen from OpenAI these past few releases - better model cards, faster inference, lower costs.

And yet it still uses the em dash (—), or long hyphen, far more frequently than is found in typical written communication.

Is OpenAI "locked in" to the em dash as a result of its use of unsupervised training of model outputs on their subsequent models? Or are they willingly keeping it now a signature part of their brand?

It seems odd for them to continue to produce "AI-sounding" text from their newest model's default prompt - but at least it makes it easier to identify AI-generated content.

Just feedback - the site looks nice but is a little slow when scrolling
Re:There may be truth in online banking fearmongering on Sunday August 03, 2025 @12:56PM (#44777920)
I wrote a short blog about the state of security for MFA in online banking after being mindblown SMS was still my only authentication option.

I was inspired by this thread: https://news.ycombinator.com/item?id=43976359. Can we ever get the banking industry ahead? What will it take?

Re:Ask HN: What are you working on? (July 2025) on Sunday July 27, 2025 @04:15PM (#44704318)
We're working on Crystal: a real time infrastructure map for energy operations in the Pacific Northwest. Our focus is to inform energy traders, dam operators, and transmission analysts to support a reliable grid.

https://askcrystal.info/dashboard

Hey HN, I'm Cedric, the other dev behind Crystal here

Hallucinated data sources and statistics from commercial chat interfaces is still a major problem. Reasoning models provide a higher level of confidence in results, but are typically restricted to web searches and its training data. In many tools we tried, the tool was "blind" to the underlying data sets.

In addition, while many are focused on private "Chat with your data" or commercial solutions, there's an overlooked trove of public datasets and APIs out there that have not been fully explored yet. Federal organizations like HUD and EPA maintain high-quality datasets that are difficult to find and locate to query using the right parameters.

Crystal bridges these two opportunities into a (what we think) is a clean and concise tool to democratize access to local, state, and federal government data. Give it a try, it's free!

https://askcrystal.info/

Re:Show HN: Blocky: Code Snippets in Gmail on Wednesday January 08, 2025 @06:35AM (#42633156)
This was a relatively quick project, taking a few weeknights. Tools: - Claude - Cursor (IDE) - Cursorful (for screen recording) - Chrome browser, obviously

Chrome extensions are simpler than I thought to package but require more scrutiny than I thought. Google stopped allowing paid extensions in 2020 and brandishes an "untrusted" message upon install for newer developers' extensions.

They also go through a thorough security review by Google's team, so allocate a few days to your release cycle if you're thinking of doing an extension.

All in all though I'd recommend, also to brush up on your JS skills.

Show HN: Blocky: Code Snippets in Gmail

https://chromewebstore.google.com/detail/blocky-code-blocks-in-gma/bgmfnmpghaocglclckfgaaoakmlhemje

Hey HN, I was searching for the code snippet button in Gmail one day and turns out it just didn't exist! So I built it with this Chrome extension.One of the underrated features of Slack or Discord is the code snippet button, which quickly formats code using strong styling.These features never made their way over to mainstream email clients. As email is still used heavily for external...

( Read More... | 1 comment | on HN )