MurphyA/hacker-news huggingface dataset:
Al-LLM powered eBPF based security platform
by gaurav1086 | 2025-05-28 19:28:37+00:00
There’s a growing need for a lightweight, AI-LLM + eBPF-powered EDR/XDR solution that works for both large and small enterprises — and is actually affordable.

We’ve built a self-managed EDR/XDR platform that combines real-time intrusion detection, enhanced user activity logging, and sensitive file monitoring, all driven by eBPF for deep system visibility. It’s designed to be efficient enough for thousands of endpoints, and comes with a clean, dual-dashboard UI (main + per-server) for managing everything at scale.

Works seamlessly across 1000s of servers Detects file access/modifications (e.g. /etc/passwd) Logs detailed user behavior and suspicious command activity Blocks malicious IPs across server groups with 1 click AI-assisted alert classification and risk scoring

Here’s a quick 2-minute demo: https://youtu.be/16BvgmfiYzQ — would love your thoughts!
by sureglymop | 2025-05-28 19:29:38+00:00
Right. Iirc the environment is put on the stack of a new process shortly after. Though I'd want to do this from very early on and then track how the environment changes. I thought of ftrace because it can be enabled/configured in a kernel parameter and as such will already capture information shortly after boot. But maybe it would be easier to work with ebpf or ptrace.
by jkcxn | 2025-05-28 19:29:45+00:00
This seems like a really good idea. I like that it's just markdown files and how seemless it is with an existing project. I have a few minor suggestions

1. I would really like a way to run the endpoint by clicking something in addition to command+enter (it wasn't obvious that I could open the sidebar and then click play but I see that now)

2. It would be good to include the evaluated request body and headers in the result sidebar

3. Duplicate file in the file tree context menu - I saw it in the tab context menu but that seems unintuitive

4. Maybe allow the user to set variables inside the markdown that can be imported to other files, for example a customerId variable that different requests could use which isn't part of the environment

5. Dragging text around appears like it will be moved but when releasing the mouse nothing happens

And finally 1 question I have: is this using an underlying text editor? It looks pretty robust but it doesn't look like VSCode, maybe something else? I am wondering if it's available to use for my own project
by mihaaly | 2025-05-28 19:29:52+00:00
And there are enstranged families. A sort of common occurrence nowdays, but not unknown in the past either (concealed, suppressed, being a shame, common occurrence of the present is perhaps due to less stigma nowadays). They do not want to live or even be in contact with those who gave you (you gave to) their values, efforts, view of life. Lived together for years and years in dependency. People with very strong ties, like it or not.

And co-living should work better with strangers of mixed mentality?

Yes, this must be for people with highly common way of current thinking (current, momentarily, as people do change when they go through significant life experiences, like raising children or joining a community).
by WorldMaker | 2025-05-28 19:30:09+00:00
CAB is a format like ZIP. MSIs are fun because they use CAB files under the hood. But also a database format from the Microsoft JET Engine that was an ancient predecessor to the Windows Registry and contemporary/counterpart of the Office Access format at the time.

It's really interesting to compare MSI to MSIX which is ZIP/XML instead of CAB/weird JET DB file.
by zoogeny | 2025-05-28 19:30:39+00:00
That is a good point and I should have been more clear. My choice for alpine isn't based on it's reproducibility at all, but its small size.

As with anything in engineering there are tradeoffs, there is no singular perfect solution. My choice of alpine was from years ago when I examined the amount of included code in competing docker images and I found the alpine solution was geared towards the least amount of code required to achieve the desired goal (e.g. running a server of a particular kind). That line of thought almost certainly requires a new examination of the available options since the world has changed since I last did a deep dive into docker base images.

In a perfect world I want a base image that doesn't contain a single bit extraneous to executing the services I deploy (for whatever expansive definition of "necessary" I arbitrarily choose). And in that perfect world the image is completely reproduceable from a static definition. Oh yeah, and it should be stable/robust, free from exploits, etc.

So it might be too strong to say "holy grail" if one interprets that as a singular goal that needs to be fulfilled. I meant it as "one among many" in the list of virtues I look for.

That being said, there are a lot of minimal *nixes these days and I would expect Nix would be a contender in that realm as well.
by codyb | 2025-05-28 19:30:52+00:00
Basically any... autopilot behavior for me is going to turn into some insight at some point or another (although it's good to be in the present too! Now I try to think in Spanish which forces me to be present cause it's such a slow process for me still lol, but actually super useful I've found for continuing to flesh out those neural pathways is to just sit and talk to myself outloud in Spanish about whatever I'm doing all day)

Also love writing things on paper. I love using different pens, and write in different styles sometimes (cursive, block, normal, whatever). I just take quick throwaway notes on paper or I'll sometimes sit down and outline things for an hour over a few sheets just to put organization to some large task which I'll translate into something for consumption by others later. Almost always throw these away. Sometimes I work through a notepad, sometimes it's a little notebook, sometimes it's printer paper... getting away from the screen for a bit is lovely.

And I set up a notes section on my computer which I can pop open with a quick <space>X in ViM which has a directory structure giving me spaces for recurring meetings, architecture work, or notes on whatever initiatives I'm trying to push through. I index file names with 01-, 02- etc and if I have a section that branches out I'll just add another index so 01A-, 01B-, etc...

Having everything in ViM with a tmux conf setup that scaffolds out a ton of different spaces I've set up mnemonic keyboard shortcuts to navigate to is really helpful in reducing the overload of having Slack, IDEs, browsers, notepads, music, etc etc etc all open at once (since on a good day I just have Slack, Outlook, iTerm, Firefox and maybe Figma or Music open at most points). I'm also quick to wipe away tabs in the browser...

Next up I'm diving into Figma so I can turn these ideas into beautiful diagrams and even mock interfaces my partners can ingest visually for easier understanding of complex spaces

Finally, and I'm thankful I can afford to do this, but I turn all notification sounds off, Slack'll bounce once from the hidden dock...

It's great, distraction free, tailored to my needs, a fair amount of variety, and some really nice productive times.
by ameliaquining | 2025-05-28 19:30:53+00:00
According to https://slack.engineering/building-hybrid-applications-with-..., Slack never used multiple different per-platform webviews. The earliest version of their desktop app was Mac-only and used the OS-native WebView API, but they switched to Electron at the same time they started work on making the app cross-platform. At the time, not only did Tauri not exist, but neither did the WebView2 API that it uses under the hood on Windows; they would have had to use the WebBrowser ActiveX control, which uses Internet Explorer's Trident engine and was already deprecated. So it's not so much that they rejected per-platform webviews, as that per-platform webviews were not yet really available as an option on desktop.
by ryandrake | 2025-05-28 19:31:08+00:00
Funny... All of my kid's friends are pretty wholesome, respectful, nice people. Always happy to have them visit to play. But many of their parents (30-40 years old) are pretty bad. Not nasty, but just... anti-social and aloof, totally absorbed in themselves and their phones. I couldn't imagine raising our kids together in some sort of shared commune.
by xdfgh1112 | 2025-05-28 19:31:32+00:00
In Okinawa I get music in the morning when kids need to go to school as well as random announcements.

Japan has always been weird like that - people are generally quiet and respectful of others, but when it comes to trucks driving around blaring out political speeches, or a "pay to take your large trash" van playing music while driving around to advertise its presence, all bets are off.
by tuckerman | 2025-05-28 19:31:50+00:00
You're right not all of those need to be conflated but they aren't entirely orthogonal either, uv can install/manage python installations for you and poetry can manage environments as well if you want. On top of that, you have tools like mise that are more cross cutting.

I agree that there is a really nice simplicity to requirements.txt but I've myself enjoying uv enough to just fully embrace it (and not farm out to uv pip) and as a result I now find myself in pyproject.toml land.
by dividefuel | 2025-05-28 19:32:29+00:00
I've shared this before. In a lot of modern jobs, how hard you turn the crank of effort is almost completely disconnected from the outcomes that you see.

Beyond a small minimum requirement, turning the crank more only leads to the expectation that you will continue to turn that crank that much. Rewards for going beyond -- money, security, autonomy -- are rarely present and almost never in proportion to how much you turn the crank. Plus, one day the company will decide it no longer needs you to turn the crank anymore, and without so much as a "thank you" you're on your own.

People only have a finite amount of 'caring' to give out. Why invest a lot into something when you feel you won't see any difference for your effort?
by cosmic_cheese | 2025-05-28 19:32:35+00:00
It’s an unpopular take I’m sure, but I really have to question shipping binaries for platforms that I can’t or won’t personally test. Between platform intricacies I don’t understand, unaddressed papercuts, and limited ability to debug issues, the end result is very likely to be underwhelming and/or frustrating for users of that platform, and as such if the app is paid those users are disproportionately unlikely to convert and more likely to churn. The only real benefit I see is an extra platform icon lined up on the marketing page.
by os2warpman | 2025-05-28 19:33:28+00:00
People generally only live in community houses if they're poor and have no other options.

"But people in Indi.."

No.

Wealthy Indians have fucking single-family Get Me The Fuck Away From Everyone Else compounds surrounded by high walls, gate houses, and surveillance equipment.

Unless you're a lifelong career civil servant in the foreign service nearing retirement who went abroad working in consulates and embassies immediately after graduating university who has spent their entire life bouncing between different assignments to the point that you don't even feel like a resident of their own country anymore, I know more about this than you.

I know what Africans who live in villages do once they get money. (they buy an SUV or wagon and move to an American-style suburb)

I know what Japanese, Chinese, and Koreans who live in miniscule tower apartments do once they get money. (they buy an SUV or wagon and move to an American-style suburb)

I know what Hip Young Urban Professionals Sipping Coffee On A Sidewalk Next To A Cafe Along The Seine Or Rhine Because Their Apartment Is To Small To Do Anything do the second they get money. (they buy an SUV or wagon and move to an American-style suburb)

It seems impossible for the nu-urbanists and the like to understand the brains of normal human beings who prefer not smelling the farts of others or their terrible cooking, hearing them snore or argue or fuck, seeing them scratch their ass and pick their nose.
by godelski | 2025-05-28 19:33:37+00:00
I use it in python 3.12, and 3.12 just got out of bug fix. I haven't tried 3.13 but I would be surprised if there was a break. Most of it works through OmegaConf[0].

Idk why they haven't pushed an update in 2 years but neither has this been a problem. FWIW, they're still updating the repo[1]

[0] https://omegaconf.readthedocs.io

[1] https://github.com/facebookresearch/hydra
by isaacimagine | 2025-05-28 19:33:38+00:00
Chaotic energy haha, I like it. Thanks for the tips re: keeping a journal, I will do this more in the future. I usually keep development notes, though normally in markdown files scattered across the codebase or in comments, never by date in the README. In the future, I might make JOURNAL.md a standard practice in my projects? re:w&b, I used w&b when it first came out and I liked it but I'm sure it's come a lot further in the time since then. I will have to take a look!

Also lol "pretentious perfectionist" I'm glad to finally have some words to describe my design aesthetic. I like crisp fonts, what can I say.
by horsawlarway | 2025-05-28 19:33:39+00:00
Eh, I don't really mind a service playing in the same space as Keycloak.

It's really not much work to spin up a service, and personally having used Rails + Devise + OmniAuth + Doorkeeper... I'd pick Keycloak instead.

The level of complexity is pretty similar at the end of the day, but you get more robust auth service, with a lot more flexibility.
by Veserv | 2025-05-28 19:33:40+00:00
This is just a trace viewer. Except the trace visualization is vastly less dense than any standard trace viewer and seems to provide no meaningful execution time information.

Compare to chrome://tracing

https://www.chromium.org/developers/how-tos/trace-event-prof...

I am not sure if trace visualizers were invented 20 years ago for the original time travel debuggers, but they have certainly been used for time travel debugging visualization since at least 20 years ago.
by Kon-Peki | 2025-05-28 19:33:43+00:00
That’s fine and all, but if this is the direction they’re taking, why not just call it AppleOS 26 across all platforms? Even if each platform gets a “specialized” version.

Part of me wonders if this is related to the EU CRA. It mandates software support lifecycles. It’s a lot easier to say xxxOS 26 is supported until 2032, 27 until 2033, etc as opposed to iOS 19 is supported until 2032, macOS 15 is supported until 2033, etc etc
by FredPret | 2025-05-28 19:33:47+00:00
You need to make your way through 1-5 to get to 6, but I specifically excluded 5 (organization of militias).

There are rumours of this but if it's true, these militias must be very secret indeed.

One problem is that violent criminals run rampant and the state seemingly has little desire to stop them, and zero capacity to do so. Meanwhile prominent politicians sing songs whose lyrics include machine gun sounds and calls for the murder of whites.

Parallel to this, there are job restrictions limiting the maximum number of whites companies may employ or promote. Franchises limit the number of white owners. White business owners are strong-armed through law and government contracts to give up some of their equity. There's regular talk about seizing white-owned property.

Whatever label you want to put on all that, I think the it's fucked up.

The worst part is, the average poor black South African is innocent in all this and now has to live in a place with a spiraling economy, power & water outages, even worse crime than the whites have to face, terrible standards of education, and much more.
by multjoy | 2025-05-28 19:33:48+00:00
It's massively common. USDT is the usual coin of choice because even though the ledger is public, the convenience and relative stability massively outweighs the security risks. In the jobs I've seen, the marks will be 'investing' in BTC but the criminals will be moving those funds out into USDT the moment it hits the bandit wallet.
by nathan_compton | 2025-05-28 19:34:16+00:00
As a person with a doctorate in physics who basically totally believes that life has no fundamental meaning at all and that most humans are cursed to believe it does despite it being ultimately harmful to them (from my point of view, I hope that is obvious), I think your take is wrong in a lot of ways.

As far as I can tell very, very few people, scientists or otherwise, feel the way I do about the meaninglessness of the universe. As you might imagine, I know a lot of scientists and I don't think any of them are even soft core nihilists, so your characterization of the reaction of people to some kind of mush of science and philosophy and spirituality seems wrong to me. From my point of view, everyone loves that kind of bullshit. They can't get enough.
by Lerc | 2025-05-28 19:34:37+00:00
What's the innovation here?

Using logic operators? Picking something from a range of options with SoftMax? Having a distribution to pick from?

I remember reading about adaptive boolean logic networks in the 90's. I remember a paper about them using the phrase "Just say no to backpropagation". It probably goes back considerably earlier.

Fuzzy logic was all the rage in the 90's too. Almost at the level of marketers sticking the label on everything the way AI is done today. Most of that was just 'may contain traces of stochasticity' but the academic field used actual defined logical operators for interpolated values from zero to one.

A quick look on picking from a selection found https://psycnet.apa.org/record/1960-03588-000 but these days softmax is just about ubiquitous.
by mort96 | 2025-05-28 19:34:46+00:00
Well, they're right to point out that it removes a lot of inconsistency though. For example, today I was working on an app which used some Unicode characters as icons in buttons, and they look perfectly centered in the button in Firefox but weirdly off-Center in Chrome.

I never managed to find a set of CSS properties which made it look good in Chrome tho. And if it was a more serious project I'd probably have used SVGs instead of Unicode characters.
by mrktf | 2025-05-28 19:35:25+00:00
Just random sofa scientist fantasy, papers like this reinforces my thinking that gravity are two forces with different speed: 1st force - gravity as we now, 2nd is spacetime gradient effect due to object mass with influence boundary (for example this force works from distance at-least 1 light-minute and more).

For simplified analogy you can image as you are boat in lake with spillway hole ( see youtube: Glory Hole Spillway at Monticello Dam). As the boat you are effected with water current and wind. Yes, it is for static case when only one object movies but principle should hold with both moving objects in space.

I know that if I took time and try to gather data, my toy theory will fall on first non trivial case.
by aavshr | 2025-05-28 19:35:33+00:00
Great work, I can imagine how interesting the migration went. Why are you using Redis if I may ask? Was something like sqlite not enough? What are your biggest challenges with Tauri?

I also work with an Electron app and we also do local embeddings and most of the CPU intensive work happens in nodejs addons written in Rust and using Neon (https://neon-rs.dev very grateful for this lib). This is a nice balance for us.
by Analemma_ | 2025-05-28 19:36:22+00:00
In addition to the social problems, which are nontrivial, there are tons of little bureaucratic friction points to living in community houses that people may not have even considered.

I know one community house of > 10 people in California, exactly the type the author says they want, which kept getting fines from PG&E because they were using too much electricity, even though this was solely due to the house size and on a per-person basis they used much less than people living in single-family houses thanks to resource sharing. A policy intended to encourage energy efficiency ended up punishing it instead. Landmines like this are all over the place.
by godelski | 2025-05-28 19:36:48+00:00
> the distraction of doing so may break the state of flow.

Sure, but like you said, don't do it when in the state of flow.

Or better, make it part of your flow state. To me, it is part of my flow state, so not a real issue.

I mean whatever works for you. You gotta time manage and I can't manage for you. I'm sure your boss is asking for more writeups than I am and just send them your notes. They don't care whats in it half the time, they just don't know how to figure out if you're working or not and just want something.

Hell, we're on HN on a workday... I can guarantee you aren't in a flow state the whole time and can't be bothered with a few minutes to write some stuff down. I mean you have to eat and go to the bathroom, right?
by alphazard | 2025-05-28 19:36:50+00:00
This is largely a consequence of the economic opportunities presented to people at work. There is basically no organization that will pay you more as a direct consequence of being better at your job. Compensation is almost never tied to performance, and is in practice most closely tied to age. Compensation isn't adjusted quickly enough for people to associate it with the quality of their work. A yearly meeting where your wage is adjusted to keep up with inflation or reflect your time in the workforce isn't something you can control.

This leads to a lot of doing the bare minimum, since any effort beyond what is necessary to keep the job is wasted effort. You will get paid more just for existing longer, so just hang on. The only real way to get more money is to switch jobs, which is more about negotiation and politics than being good at the previous or next job. Most people aren't ambitious enough to repeatedly job hop, but would be ambitious enough to chase more money at their current job, were the opportunity presented.

The only way to fix this is to encourage larger variations in salary between high and low performers and get the union (I've done my time) mentality out of these organizations. It will never happen for the government.
by curt15 | 2025-05-28 19:37:09+00:00
In my experience, the main weakness of Linux distros' package management experience is they don't distinguish core system functionality from add-on software. After all, a Linux distro is ultimately just a bag of packages. Every package installs into the global `/usr` directory, and the package manager treats third-party packages and system packages equally. The Windows analogue would be if all software installed themselves into the Windows folder, or if you could uninstall ntoskrnl from Add/Remove programs. This leads to several problems:

1. It's easy to inadvertently break one's system. How often have users accidentally uninstalled their desktop environment due a buggy dependency specification or dependency solver? Shouldn't there be a whitelist of core system packages and files that should never be touched during ordinary package transactions? There was also a Fedora bug maybe 1 year ago where a problem with the Google Chrome RPM's GPG signing key blocked system updates unless one manually overrode the package manager transaction to skip broken packages. Imagine if Chrome could cause Windows updates to fail or if a misconfigured Homebrew package could block MacOS updates.

2. It's easy to accumulate cruft over time because there's no out-of-box tracking of software I've added compared to be the base system. I could manually keep a list in a text file, but what about any dependencies of the packages on that list? What about any config files in `/etc` left behind by packages even after they are uninstalled? I'd like an easy way to revert my system to its out-of-box condition without carefully inspecting every line of `dpkg -l` (of which there could hundreds or thousands). With Homebrew on MacOS I can just blow away `/opt/homebrew`.