matusfaro
* I waited for Duolingo to support Mongolian for years, and in one evening, created my own DuoMongo https://github.com/matusfaro/DuoMongo
* I wanted an LLM to mock up a server to speak arbitrary network protocols across any layer (e.g. http/tcp/bgp/snmp/arp) for protocol development/testing/cybersecurity and I got it: https://smotanacom.github.io/netget/
* I wanted a way to inspect/route LLM calls coming from my laptop, something like OpenRouter, but locally running, so I built LocalRouter: https://localrouter.ai/
No one is using these, but I love them!
Also it allows me to prototype so quickly, currently had an idea on a Language Server Protocol (LSP) that compiles English language into a set of software requirements (Intermediary Results) and to generate code and tests against those reqs.
The proper way is to have an actual link but to override the behavior to navigate within the SPA. So if you click it, the navigation will be within the SPA but if you ctrl+click it, the browser takes over and opens the underlying link in a new page.
Typical issue is when a developer forgets to make it an actual link, but only inclides the SPA navigation.
A local desktop app that acts as a gateway for LLMs, MCPs and Skills with smart routing and optimizations built-in.
LocalRouter: MCP via LLM
With Claude and a strong hammer, I made a desktop app that acts as a gateway for LLMs and MCPs to solve some of my problems:
- One place to auth my MCPs and LLMs and to dynamically assign them to apps
- Monitor and intercept requests for debugging AI Apps and MCPs
- LLM routing with local fallback, using up free-tier first across providers
- Just for fun: Enriching LLMs with injected MCPs, Skills, JSON repair, msg compacting/indexing, Memory, etc..
It's a great tool for developing AI apps as well as managing a handful of MCPs and LLMs.
Show HN: Open-Sourcing My Own "Gamified" Wedding Invitations
https://matusnomin.com/Hacker%20News
With a wedding planned in Mongolia and my limited ability to speak the language, I wasn't able to contribute much to most of the planning. So, I decided to focus my efforts on something I could manage: creating the wedding invitations!After dedicating around 50 hours to Blender modeling, sound recording/editing, level design, and game development, I crafted unique wedding invitations that were...
Tell HN: Color Blind Awareness Day: Set Your Screen to Grayscale
Hi HN community,Today is Color Blind Awareness Day, a day dedicated to raising awareness about color vision deficiency, which affects approximately 350 million people worldwide.To better understand the challenges faced by those with color blindness, I encourage everyone to set their monitors to grayscale for the day. By doing this, we can gain insight into how color is used in our own products...
About Upwave:
Upwave is a YC/venture-funded SF-based startup that helps large enterprises plan, measure, and optimize brand advertising campaigns. We offer a comprehensive set of tools that help our Fortune 500 clients understand and improve how they’re perceived in the marketplace, how aware consumers are of the value they provide, and how much consumers trust them to provide the value they promise. We've been rapidly expanding our list of enterprise customers and deepening our integrations with "household name" partners like Amazon and Clorox. As we grow, we need engineers to help us build even more unique, differentiated, valuable, scalable, and robust analytical SaaS tools and products.
About the Role:
We are looking for an Adtech-experienced engineer who’s excited about doing the wide variety of technical work that modern SaaS startups need. That includes backend web development (JVM frameworks), frontend SPA development (mostly React), AWS-based cloud engineering, and some data engineering. We are also particularly interested in someone who knows (or is interested in learning) the intricacies of our industry and our business and who is comfortable leading conversations with customers and partners to scope, define, and execute the technical integrations that have become one of our major levers of growth. We're not fixated on years of experience, but this role is unlikely to be right for someone with less than 10. Our team emphasizes high-quality, high-velocity, sustainable software development in a collaborative and inclusive team environment. We’re a small team that gives our engineers a lot of autonomy and empowerment, and we want people who are excited to step in to learn whatever skills or technologies are needed, to contribute wherever in the R&D process they're needed, and to grow their careers by taking on pivotal responsibilities early in their tenure.
If you are interested, email me directly: [email protected] or check out the specific role https://www.upwave.com/job/6815819002/
My most notable discovery was when I wanted to jump start my car, because the battery died due to the cold. I was about to bring out my jumper cables when my local friend told me to bring the cables inside first.
I didn't understand why and naively ignored what he said only for the rubber jumper cables to literally crumble in my hand, breaking as I tried to straighten them.
Mongolians are so resilient and have so much knowledge on how to survive in extreme weathers with a simple yurt and a livestock of 100 sheep goats and horses.
Cool idea but probably not that useful and difficult to accomplish. There are many ways to communicate that could be grouped into:
1. tab -> tab (same domain)
2. tab -> tab (different domain)
3. tab -> server -> tab
For #1, there are so many ways to transfer information it would be hard to detect and differentiate whether it's communication or just happens to be using the same resource. (e.g. one sets a cookie or local storage and the other one reads it)
For #3, it would be impossible to detect. Especially if detection is an issue, both tabs could be communicating with unrelated servers which talk with each other.
For #2, it would be the only interesting one as there is limited options (e.g. Broadcast Channel), but at the same time I assume rarely used in practice. And if detection is an issue, they would switch to #3 to avoid it.
I also remember there was a data-over-voice library called "chirp.io" which now redirects to Sonos homepage. Now I know why they acquired them :)
Thank you "dz2742" for finding out [1] existing connections including websockets are not terminated and has won 100 USD! This is exactly the type of exploit I was hoping to catch.
Now I have to figure out how to fix that :) And also think about refilling the bug bounty pool without becoming very poor very soon.
Looking into it more, there is an open request to complete the work in Android Firefox [2] and also to make the MAC extension for Android too [3]
1. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
2. https://bugzilla.mozilla.org/show_bug.cgi?id=1807456
3. https://connect.mozilla.org/t5/ideas/multi-account-container...
The only minor counter-argument would be laziness as a security threat: the more difficult you make the process, the more likely the user will skip seemingly useless steps, thus compromising security.
Interesting, but consider this is a cat-and-mouse game. If you are the only one using this trick it may work for you, but I assume would be easy to overcome. (e.g. keep the page loading forever or until ads are loaded. Have the ads be J-free after page load, ...)
> website could play background music ... another tab could listen
You would need mic access from the other tab, but yes. If you send it over high enough frequency you wouldn't even hear it. You would just have a visual feedback that the tab is playing music.
On a side-note, I recall there was some kind of hardware device pairing (maybe Chromecast?) that used data over voice to establish that you are physically near the other device.
Interesting attack vector I haven't thought about which could leak information out of a network-locked Firefox Container. It would be under an assumption you have either:
1. A malicious extension installed (you have a much worse problem in this case)
2. A side-effect of an existing extension that leaks information to the outside world. (e.g. translate a part of a page, lookup a word in a dictionary, pre-fetch some images...)
> Firefox's containers are only useful if you want multiple logins
I think there are valid use cases for both Containers and Profiles. You can go down the list to have more and more isolation as needed:
- Grouping tabs to stay organized, no isolation
- Firefox containers, same browser window, shared history & extensions
- Chrome profiles, almost complete isolation within same browser (different processes)
- Separate browser instances
- Separate devices
Yes! Chrome has a visually similar functionality to Firefox Containers hidden away behind a feature flag [1] at the moment. BUT under the hood it's simply just tab grouping with no isolation. I presume isolation is against Google's interests so we will never see this kind of feature.
As for Firefox's API, the Contextual Identities API [2] that allows you to create/delete containers is amazing and easy to work with as a dev. And it works out-of-the-box, it doesn't need the companion addon Multi-Account Containers (MAC) [3] which really should've been part of Firefox in my opinion.
1. chrome://flags/#tab-groups-save
2. https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
3. https://addons.mozilla.org/en-US/firefox/addon/multi-account...
It would probably be more successful as a feature added to an existing trusted extension such as Temporary Containers.
It is time consuming to do this and do it right so I actually already created an extension for it in another ShowHN post: https://news.ycombinator.com/item?id=37469321
Show HN: Firefox addon to quarantine a tab to use offline with private data
Introducing QuaranTab: Companion extension to quarantine tabs so you can safely use them offline with private dataI find myself wanting to use online format parsers to quickly decode that production JWT or decode a base64 Authorization header but cannot trust these websites to not leak my information. I thought to myself if only I could cut-off network access to this site, use it offline, and...
Ask HN: Thoughts on isolating an “allegedly” offline site?
Hi,I find myself wanting to quickly parse/decode/unescape sensitive data via randomly found sites but cannot. I wonder if there is an existing solution to making sure a random base64 encoder site will not phone home with my data.Specific use cases:- Parse a JWT using jwt.io- Encode/unescape/parse data from a specific format (base64, protobuf, ...)- Hashing a password- Generating Bitcoin wallet...
About Upwave:
Upwave is a YC/venture-funded SF-based startup that helps large enterprises plan, measure, and optimize brand advertising campaigns. We offer a comprehensive set of tools that help our Fortune 500 clients understand and improve how they’re perceived in the marketplace, how aware consumers are of the value they provide, and how much consumers trust them to provide the value they promise. We've been rapidly expanding our list of enterprise customers and deepening our integrations with "household name" partners like Amazon and Clorox. As we grow, we need engineers to help us build even more unique, differentiated, valuable, scalable, and robust analytical SaaS tools and products.
About the Role:
We are looking for an Adtech-experienced engineer who’s excited about doing the wide variety of technical work that modern SaaS startups need. That includes backend web development (JVM frameworks), frontend SPA development (mostly React), AWS-based cloud engineering, and some data engineering. We are also particularly interested in someone who knows (or is interested in learning) the intricacies of our industry and our business and who is comfortable leading conversations with customers and partners to scope, define, and execute the technical integrations that have become one of our major levers of growth. We're not fixated on years of experience, but this role is unlikely to be right for someone with less than 10. Our team emphasizes high-quality, high-velocity, sustainable software development in a collaborative and inclusive team environment. We’re a small team that gives our engineers a lot of autonomy and empowerment, and we want people who are excited to step in to learn whatever skills or technologies are needed, to contribute wherever in the R&D process they're needed, and to grow their careers by taking on pivotal responsibilities early in their tenure.
If you are interested, email me directly: [email protected] or check out the specific role https://www.upwave.com/job/6815819002/
About Upwave:
Upwave is a YC/venture-funded SF-based startup that helps large enterprises plan, measure, and optimize brand advertising campaigns. We offer a comprehensive set of tools that help our Fortune 500 clients understand and improve how they’re perceived in the marketplace, how aware consumers are of the value they provide, and how much consumers trust them to provide the value they promise. We've been rapidly expanding our list of enterprise customers and deepening our integrations with "household name" partners like Amazon and Clorox. As we grow, we need engineers to help us build even more unique, differentiated, valuable, scalable, and robust analytical SaaS tools and products.
About the Role:
Upwave is a startup and we need an experienced generalist “startup engineer” who’s excited about doing the wide variety of technical work that modern SaaS startups need. That includes backend web development (JVM frameworks), frontend SPA development (mostly React), AWS-based cloud engineering, and some data engineering. We are also particularly interested in someone who knows (or is interested in learning) the intricacies of our industry and our business and who is comfortable leading conversations with customers and partners to scope, define, and execute the technical integrations that have become one of our major levers of growth. We're not fixated on years of experience, but this role is unlikely to be right for someone with less than 10. Our team emphasizes high-quality, high-velocity, sustainable software development in a collaborative and inclusive team environment. We’re a small team that gives our engineers a lot of autonomy and empowerment, and we want people who are excited to step in to learn whatever skills or technologies are needed, to contribute wherever in the R&D process they're needed, and to grow their careers by taking on pivotal responsibilities early in their tenure.
If you are interested, email me directly: [email protected] or check out the specific role https://www.upwave.com/job/6815819002
Honestly, I thought about it and I'm perfectly fine not being able to smell for the rest of my life. On the flip side, I'm actually happy I'm not impacted by unwanted smells in my environment.
Having smelt before, I don't miss it, but if I was born without it I would always wonder. Well let me tell you there's not much to miss.