News for hackers. Stuff that matters.

nyell

Re:Am I German or Autistic? on Thursday April 09, 2026 @11:32AM (#47705063)
I lived in Germany for four years, but no longer there. I got 42% German / 20% Autistic grade and I am not European at all.
Never bought a Samsung phone, TV or Fridge. Smart is now translating into "Ad-injection" in various appliances and I hope this backfires!

Show HN: Fast, private command-line history search with instant documentation

https://github.com/cybrota/recaller

Hi, HN community,I have built a CLI tool called Recaller to fuzzy-search your command history based on recency and frequency. Recaller can magically curate your history and hands over most useful commands to you. Think it like a second brain while recalling history.Please check it out and let me know your feedback.

( Read More... | no comments | 3 points | on HN )
Simple. Upscale and hop onto new roles created by AI
Re:Ask HN: What are you working on? (April 2025) on Tuesday April 29, 2025 @09:12PM (#43840110)
I am working on Scharf, an open-source SAST tool to identify and auto-fix 3P GitHub actions those are prone to supply-chain attacks. It is blazing fast and written in Go.

Project link: https://github.com/cybrota/scharf

Quick demo: https://imgur.com/a/wEyk9AR

This tool can cutdown hours of grind for Security engineers.

Show HN: Scharf – Find and protect ur GitHub Actions from supply-chain attacks

https://github.com/cybrota/scharf

Welcome to "Scharf", a blazing-fast security scanner for hardening third-party GitHub actions with mutable references. Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.The recent `tj-actions/changed-files` security incident is scary, so we built a mutable-reference scanner that performs a deep scan across branches...

( Read More... | no comments | on HN )
Re:Ask HN: What are you working on? (March 2025) on Sunday March 30, 2025 @11:35PM (#43530636)
I am building "Scharf", a blazing-fast security scanner for reporting and hardening third-party GitHub actions.

For whoever aware of recent `tj-actions/changed-files` security incident, I built a mutable-reference scanner that performs a deep scan across branches to identify all third-party GitHub actions used in organization Git projects. The output report can be exported to CSV or JSON (default).

Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.

Project link:

https://github.com/cybrota/scharf

Re:Whispr: Securely develop software without leaking secrets on Sunday October 20, 2024 @10:44PM (#41900243)
Whispr is created to enable secure software development by simplifying developer experience.

It is easy for developers to place their database credentials in a `.env` file for local testing and accidentally commit them to a version control system.

Even not committed, storing credentials as plain text is a risk as per MITRE ATT&CK Framework: credential access.

Whispr helps you store nothing locally and provides on-demand, Just In Time (JIT) secret access for applications. It supports AWS, Azure and GCP secret vaults.

Best part is no bash scripts nor CLI commands required. The tool is language & application agnostic.

It is not just for storing variations of a prompt. It separates context to make intentions clear. Here is a XMl prompt serialized from PromptML program:

https://gist.github.com/narenaryan/651d8081eaaffa846e05da7a3...

You can test it with Claude and GPT-3.5 or GPT-4o, and they all will bring strikingly bring similar results with differences in detail.

YAML & XML serializations are coming in v0.6.0 of PromptML.

Hi there. Your question is valid. That's why we built Prompt Markup Language:

https://github.com/narenaryan/promptml/ https://www.promptml.org/

It isn't XML nor JSON, but a DSL built especially for writing prompts. We do not have published benchmarks but running few examples, we see consistent outputs from LLM, and supplements RAG by separating context and using it for enriching prompt.

That's a great question. Right now, we don't have that feature incorporated, but we do thought about hydrating existing bookmarks and making it part of memory graph. Chrome's bookmark API is so primitive, and we have seen many issues keeping things in sync (being cautious here..).

I took your point down. Thanks for brining it forward.

We are building a smart bookmark manager for Chrome. Need your feedback

Hi hackers. We (at Vidura Labs) are working on an amazing alternative to standard browser bookmarks that can smartly organize, and visualizes bookmarks, so that your brain can easily follow, rather than searching through a heap of objects(like in traditional bookmarks).It is a chromium extension that lets you bookmark any web site, automatically tags it and puts it into the right folder (or...

( Read More... | 3 comments | on HN )
Re:Does Python really sucks? on Monday November 06, 2023 @06:33PM (#38170828)
I am hearing many complaints from new developers learning Python. Here I made an attempt to clear those doubts in mind with possible explanations.

Show HN: Vidura, an AI prompt manager for text, image, and audio

https://vidura.ai

Hi HN community: I am one of the creators of vidura, the missing "AI prompt manager" for prompt engineers. Vidura is essentially a Prompt Management System(PMS) where a user can categorize, tag, and test their GPT and Stable diffusion prompts in one single place. With syntax highlighting and export responses to PDF, it provides a practical user experience.

( Read More... | no comments | on HN )