News for hackers. Stuff that matters.

primeobsession

primeobsession on Hacker News

Re:Show HN: Teapot – A methodology for pen testing voice AI agents on Wednesday February 18, 2026 @10:16AM (#47061887)
Very cool! Voice AI feels like the frontier of the frontier and isn't getting the attention needed.
Re:LLM Pentest Leaderboard on Tuesday June 10, 2025 @11:49AM (#44238277)
Yes it fell shorter than we expected. It cost almost nothing and was stupid fast but I don't think its a compelling option for this use case at least.
Re:LLM Pentest Leaderboard on Tuesday June 10, 2025 @11:32AM (#44238102)
Hi HN — we’re the SecureCoders Labs crew .

What we built An open, continuously updated LLM Penetration-Testing Leaderboard. Run 001 pits 8 models against a deliberately vulnerable Express.js app.

Headline results

• Gemini 2.5 Pro (safety-off) found all 9 critical/high vulns.

• Qwen3-30B-a3b-mlx (open source, local on a 2019 MacBook Pro) caught 7/9 with $0 API spend.

• GPT-4-o and Claude Opus produced the most polished write-ups but each missed one bug.

Scope (v1) This first pass measures static bug-hunting skill—think SCA/OWASP Top 10.

Next up: we’ll score exploit writing and automatic PoC execution* so the models must prove they can go from finding to weaponizing a flaw.

Check it out

• Leaderboard + cost/latency numbers https://www.securecoders.com/labs/projects/llm-penetration-t...

• Methodology & prompts (Run 001 analysis) https://securecoders.com/labs/projects/llm-penetration-testi...

Feedback, replication attempts, and ideas for Run 002 are very welcome — we’re hanging out here to discuss!

Show HN: Audio Super Bowl Cheat Sheet for People Who Don't Watch Football

Posted by primeobsession on Sunday February 09, 2025 @09:30AM
from the show-hn dept.

https://www.nowafan.com/

Hey HN,This is an idea I had years ago when I got pulled into a Washington Capitals game for a sales meeting. Our customer was a huge fan, and I realized I knew nothing about the Caps. I wanted a quick cheat sheet—something like a “CliffsNotes” podcast to get me up to speed on the drive over—but it didn’t really exist.Fast forward 10 years, I now run a cybersecurity firm doing penetration tests...

( Read More... | no comments | 2 points | on HN )
Re:Launch HN: Common Paper (YC W23) – SAFEs for Commercial Contracts on Tuesday May 23, 2023 @09:49PM (#36053098)
I’ve been using CommonPaper since they first put up their concept and it’s all sorts of awesome. Awesome in principle and very convenient for my boutique security consulting business.

Absolute no brainer for us to use what they have built. It was instrumental in getting us off the ground.

Congrats team on YC and the launch.

Ask HN: COVID-19 response with 3D printing?

Posted by primeobsession on Tuesday March 17, 2020 @06:59AM
from the ask-hn dept.

Like many here, I have a 3D printer and I want to help. Is there any legitimacy to printing ventilators or other equipment to donate to local hospitals?I created a GH repo to encourage discourse: https://github.com/securecoders/covid-3d-printing-responseNot a medical professional!

( Read More... | 1 comment | 2 points | on HN )
Re:Show HN: Props, whats happening at your company on the office TVs on Thursday April 28, 2016 @04:43PM (#11591765)
Interesting thought. It would be complicated to pack this into something that you just purchase. Props integrates into Slack, Salesforce, Zendesk, etc.

Maybe we are not communicating the product well on the site.

Re:Show HN: Props, whats happening at your company on the office TVs on Thursday April 28, 2016 @04:39PM (#11591744)
Its about recognizing people doing great things in your org. It really has become a part of the culture in the companies that have been using it (and pay) for months now.
Re:Show HN: Props, whats happening at your company on the office TVs on Thursday April 28, 2016 @12:34PM (#11590060)
We are launching today and are doing well on Product Hunt. Any feedback is greatly appreciated.

We started on Props 11 months ago. Here is our story so far: http://www.propsboard.com/2016/04/28/your-office-tvs-suck-pr...

Re:Segment Sources – Load Salesforce, Zendesk, Stripe into Redshift an... on Wednesday April 06, 2016 @02:54PM (#11440905)
RJMetrics has a similar product (ETL as a service) with 10x the number of rows for their free tier. https://rjmetrics.com/product/pipeline/

Ask HN: How should equity+cash for contract work be structured?

Posted by primeobsession on Monday January 12, 2015 @07:09AM
from the ask-hn dept.

My questions are:- For a contractor/freelancer, how should equity as part of compensation be structured? - Grants instead of options? - Should I be buying shares at the same cost that the last angel round was at? - Is it typical to have an agreement that the startup can buy back shares within a given period?I have been doing freelance development for the past 2 years and building my own...

( Read More... | no comments | 2 points | on HN )
Re:Show HN: OpenGraph.io, a simple OpenGraph data parsing API on Sunday September 14, 2014 @06:56PM (#8316527)
I'm not sure if I follow. I'm currently only looking at the value for content attribute for a value. Are you saying that specifically 'nam=...' should work or it should respect any attribute name?
Re:Show HN: OpenGraph.io, a simple OpenGraph data parsing API on Sunday September 14, 2014 @05:50PM (#8316346)
To tell you the truth I had never even thought about that but its a good idea. Thanks!
Re:Show HN: OpenGraph.io, a simple OpenGraph data parsing API on Sunday September 14, 2014 @03:52PM (#8316065)
To add a bit of background, I needed an OpenGraph parser for a personal project so I broke it off into a separate service.

The API takes in a URL and returns any OpenGraph data found along with some inferred values based on the HTML content.

The main focus for the product was to get the commonly used OG fields so some of the more obscure fields are ignored.

Re:Hey LinkedIn – Nobody Wants This on Wednesday February 12, 2014 @11:56PM (#7229542)
Whoa thats a lot of traffic. I just beefed up the server! Sorry for the 500 errors!