Feed aggregator

Show HN: A Silent PWN – hackable web playground (4 chained exploits)

Hacker News - Fri, 05/30/2025 - 5:30am

I watched Mr. Robot, stayed up 72 hours on caffeine, and shipped A Silent PWN, a deliberately vulnerable web app with four chained exploits (SQLi → leaked TLS keys → JWT alg confusion → WebSocket nonce). Grab flags, climb the live scoreboard, and let me know what else you break. Code is hilariously bad by design—feedback welcomed!

Comments URL: https://news.ycombinator.com/item?id=44134444

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: An automation tool built upon MCPs

Hacker News - Fri, 05/30/2025 - 5:27am

I was thinking about how Model Context Protocol (MCP) servers are a standard interface to third party tools, and how it must have been annoying to integrate before for companies like Zapier. I wondered if I could make a tool that does the same thing but for free and locally. After making a prototype it felt like something that could be built out and released so I'm now on that journey!

It's still very early stages, I'm wanting to take it on a journey similar to Postman flows (which is awesome). It's my first desktop app using Tauri, a lighter-weight alternative to Electron. It's also my first time using Rust, so that's been really fun!

The goal here is to provide a way to take the tool calling chains done by LLMs and solidify them into programmatic tasks - so you don't waste tokens every time getting an LLM to do it.

Comments URL: https://news.ycombinator.com/item?id=44134427

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: I made an ensemble model to find underpriced properties

Hacker News - Fri, 05/30/2025 - 5:24am

I trained a stacking ensemble model on recently sold data and it turned into my startup Property Deal Finder. Just enter a zip code or city and it will find properties for sale under market value!

Comments URL: https://news.ycombinator.com/item?id=44134416

Points: 1

# Comments: 0

Categories: Hacker News

RISC-V assembly board game

Hacker News - Fri, 05/30/2025 - 5:21am

Article URL: https://punkx.org/overflow/

Comments URL: https://news.ycombinator.com/item?id=44134401

Points: 2

# Comments: 0

Categories: Hacker News

Modern C++ – RAII

Hacker News - Fri, 05/30/2025 - 5:20am
Categories: Hacker News

A tribute to Mario Kart 8

Hacker News - Fri, 05/30/2025 - 5:16am
Categories: Hacker News

The Complete Stripe Alternatives List

Hacker News - Fri, 05/30/2025 - 5:12am

Article URL: https://stripealternatives.com/

Comments URL: https://news.ycombinator.com/item?id=44134352

Points: 2

# Comments: 0

Categories: Hacker News

Western Blotting Must Die

Hacker News - Fri, 05/30/2025 - 5:09am
Categories: Hacker News

How AI coding agents could infiltrate and destroy open source software

ZDNet Security - Fri, 05/30/2025 - 5:00am
Imagine a single rogue line of code slipping past your tired eyes - and suddenly your entire app is compromised. AI coding agents could be the silent saboteurs of the next big cybersecurity crisis.
Categories: ZDNet Security

Ask HN: User IDs in app share links

Hacker News - Fri, 05/30/2025 - 4:42am

A thing I've noticed recently is more and more apps including some sort of "share id" query string parameter when you copy a link to share content.

These parameters are then (sometimes) used to surface a banner in the app when the receiver of the link opens it. Something like "user so and so shared this with you, want to follow them?". I'm presuming they are also used for ad/data mining/network building purposes under the hood.

For example Instagram adds an `igsh` parameter to share links while Youtube and Spotify add an `si` parameter.

I guess these are a continuation of the `utm` type parameters used for marketing. But they feel a way more creepy and invasive when operating on a personal level than a marketing campaign level.

Also the user isn't made aware of this parameter at all. A user link could get sent onwards and would identify the user as a source long after they are out of the loop.

Any thoughts on these practices? Is there an opt out somewhere?

Comments URL: https://news.ycombinator.com/item?id=44134198

Points: 1

# Comments: 0

Categories: Hacker News

Pages