MurphyA/hacker-news huggingface dataset:
A new modular security and system‑monitoring suite (feedback welcome)
by j0hnsm1th | 2026-02-10 23:08:46+00:00
Over the past months I’ve been building something I couldn’t find anywhere else: a modular, real‑time security and system‑monitoring suite that runs locally, stays lightweight, and gives you deep visibility into what your machine is actually doing.

It started as a personal project, but it’s grown into a surprisingly capable toolkit — now over 70 independent monitoring modules, each focused on a specific part of the system. Everything is written in C#, no external dependencies, no cloud processing, no telemetry.

Some examples of what it currently monitors:

System integrity: driver loads, DLL injection attempts, shadow copy tampering, privilege escalation, ransomware‑like behavior

Network activity: DNS queries, DHCP events, LAN entity discovery, loopback anomalies, Nmap‑style scans

User‑space behavior: clipboard changes, screenshot attempts, camera/mic activation, window focus, idle anomalies

File & registry: permission changes, metadata tampering, large file creation, root‑drive activity, registry edits

Hardware & OS: battery health, power events, USB devices, performance spikes, uptime, service changes

Forensics modules: browser cookie inspection, hash change detection, driver inventory, kernel driver monitoring

External data: real‑time weather monitor, multi‑currency crypto tracker with 24h change, highs/lows, and trend arrows

Everything logs cleanly with timestamps, and each module can be enabled or disabled independently.
The suite is still under active development — I’m adding modules almost daily — but it’s already stable enough for real use.

Because a few people asked: yes, it’s buyable.
I’m keeping it simple for now: €5 / $5, purchased directly from me.
If you want to try it, send an email to:

contact.levisantegoets@gmail.com

After payment, you’ll receive:

a Windows installer

a personal serial key bound to your name

permission to install it on your own devices

No subscriptions, no online accounts, no telemetry.

If you’re into system internals, security tooling, or just like seeing what your machine is really doing behind the scenes, I’d love feedback — especially from the HN crowd.
This project is still evolving, and I’m very open to ideas, criticism, and feature requests.
by mtlynch | 2026-02-10 23:09:28+00:00
Thanks for reading!

> But, come on ... isn't it just a touch disingenuous to call this a bootstrap situation?

> I assume an ex-Google developer jettisoned with a decent safety net. Perhaps I'm wrong. But I have a very different idea of what bootstrapping is.

Yeah, I agree and wish I had a better term. I've heard people talking about "bootstrapping" a business with $200k+, and I roll my eyes.

I used to call these updates "My Xth Year as a Solo Developer" but that stopped making sense when I was working with a team.
by cyberax | 2026-02-10 23:09:32+00:00
??

What exactly do you disagree with? Most immigration violations are a civil matter (USC section 8). There are criminal violations like human trafficking or illegal entry. But if you came into the US with a visa and then overstayed, you're not committing anything criminal.

And even illegal entry is a misdemeanor, the maximum punishment is at most 6 months in jail. So yeah, ICE and DHS _technically_ don't have more power than regular marshals for most immigration cases.

Which should scare you, btw. There are plenty of civil violations that can be similarly weaponized in future.
by dominick-cc | 2026-02-10 23:09:34+00:00
I made a little web app to simulate the look of playing a video on an LED matrix display. e.g. https://files.catbox.moe/ddequo.webm

I thought it would be cool to make some VJ-style visualizations to go along with music on a matrix LED sign. I finally got a quote for one from Aliexpress that can take HDMI input and it was like $900 before shipping. It seems these are a bit more costly than I was expecting because there is a "sending box" that takes HDMI and converts it to some Ethernet protocol. That goes to a bespoke card, and that card is what all the smaller matrix modules plug into to make one big display. Those components apparently are quite expensive.

So I made this little tool with the help of AI to play videos with the look and feel of the real thing so I can start making my visualizations right now until I figure out a cheaper solution. I got some advice to check into neopixel matrix displays. Haven't dug into that but maybe I can get video to play on those from a raspberry pi or something directly, avoiding the need for a sending box.
by init2null | 2026-02-10 23:09:49+00:00
Just bear in mind that the OSS nvidia kernel module often causes breakages there with mismatched firmware. The entirely proprietary module or nv are fine.

Tumbleweed is good for a mostly stable, clean KDE distro, but I wouldn't recommend it for gaming or codec integration. The first-class btrfs snapshots are probably my favorite feature.
by snowwrestler | 2026-02-10 23:09:57+00:00
The economics of infrastructure actually improve for stable or shrinking populations because funding can shift from raw capacity buildout (extremely expensive) to maintenance and value-add services (profitable). Observe that the best infrastructure in the world is in nations with slow population growth, like Western Europe, Japan, and more recently the U.S. and China. Whereas nations with very high population growth struggle to deliver capacity for even basic needs like clean water or paved roads.
by leros | 2026-02-10 23:10:46+00:00
Looking back, how do you feel about your slate of past projects?

I'm curious as TinyPilot is your most successful project and it looks like the most business-oriented thing you built: as in, its a product aimed at serious businesses. Whereas Zestful is a niche micro-saas and Is It Keto is a niche website. Perhaps I'm characterizing things wrong, but that's my rough perception.
by jauntywundrkind | 2026-02-10 23:10:49+00:00
It's kind of sort of glorious how Google and ICE are both setting their reputation on fire like this at the same time.

The cloud has such a long legacy of being the safe easy convenient place that you just don't have to think about. Nations have somewhat kept their fingers out of the cookie jar.

But now it's just wanton unchecked madness, with no real process, with no judicial review. Google giving in to ICE so quickly is absolutely existentially destructive to Google's business model, of the cloud being a default place you can put your stuff & rely on.

The cloud never deserved this reputation, and there was a certain freight train of inevitability that was coming crashing in from the future, that nations would make the cloud untenable & hostile a space. That felt inevitable. But this is so much harder worser faster dumber than could be expected.
by inglor_cz | 2026-02-10 23:11:17+00:00
"unrelated"

Are they, or is it just our incomplete understanding?

We still keep finding new and new surprising relationships in our bodies. Caries bacteria in colorectal cancer. Schizophrenia cured by bone marrow transplant. ALS cases induced by consumption of mushrooms (false morels).

I wouldn't be surprised if, say, reduction of systemic inflammation caused all sorts of unexpected effects body-wide.
by measurablefunc | 2026-02-10 23:11:21+00:00
Mining rigs have a finite lifespan & the places that make them in large enough quantities will stop making new ones if a more profitable product line, e.g. AI accelerators, becomes available. I'm sure making mining rigs will remain profitable for a while longer but the memory shortages are making it obvious that most production capacity is now going towards AI data centers & if that trend continues then hashing capacity will continue diminishing b/c the electricity cost & hardware replenishment will outpace mining rewards.

Bitcoin was always a dead end. It might survive for a while longer but its demise is inevitable.
by ashtom | 2026-02-10 23:11:31+00:00
Chris was also CEO from 2008 to 2012. Tom had 2012 to 2014.

Nat's company Xamarin was acquired by Microsoft in 2016.

HockeyApp wasn't A/B testing, but a platform for iPhone, Mac, Android, and Windows Phone developers to distribute their beta version (like what TestFlight is today to the App Store), collect crash reports (like what Sentry is today), user feedback, and basic analytics for developers.
by TacticalCoder | 2026-02-10 23:11:48+00:00
> executive orders targeting students who protested in support of Palestinians, Thomas-Johnson and his friend Momodou Taal went into hiding

Ah. They went into hiding. That explains why there are very few pro-Iran protests: for a second I thought there were double-standards when it came to protesting and that that was why we had non-stop pro-Gaza protests but hardly any protests to criticize the tens of thousands of victims the islamist iranian regime made in a few days.

> “As a journalist, what’s weird is that you’re so used to seeing things from the outside,” said Thomas-Johnson, whose work has appeared in outlets including Al Jazeera and The Guardian.

Where can I read the entirety of her work: that is, including her coverage of the tens of thousands of civilians executed by the islamist iranian regime?

For you're not telling she's not covering those because the islamist iranian regime happens to be pro-Hamas and anti-jews right? (btw I'm not jewish)

Right?
by mediumdeviation | 2026-02-10 23:12:17+00:00
Ah these poor fools. Having built this exact product (OOXML compatible editor in React) before, it took all of two minutes to find a bug. The issue is that the OOXML spec is not in fact definitive - Word is, and trying to implement it from the spec will produce something that works maybe 80% of the time then fall over completely when you hit one of hundreds of minor, undocumented edge cases. Assuming of course that CC did not just hallucinate something. And then there's the more fundamental problem that HTML/CSS has unresolvable incompatibilities with OOXML. This is why Google Docs for instance use canvas for rendering.
by andy99 | 2026-02-10 23:12:24+00:00
True for the fake stuff that doesn’t work anyway. If you want to master clawdbot or whatever and pretend to have some cutting edge skill set, then yeah tomorrow is better. If you’re a product person or an executive, AI has had the same strengths and limitations for 10 years, it’s great for demos but the gap to production is impossible for most use cases and you’ve got to work hard to figure out real applications that are actually feasible, by cutting through the shiny distractions and understanding what it’s actually good at.
by DavidFerris | 2026-02-10 23:12:36+00:00
We rendered the one million part ABC dataset from Deep Geometry, and open-sourced the data. We also built a fun demo with the following pipeline: CAD > render > caption > embed.

Open-sourced dataset: https://huggingface.co/datasets/daveferbear/3d-model-images-...

Blog writeup: https://www.finalrev.com/blog/embedding-one-million-3d-model...
by jvandreae | 2026-02-10 23:12:45+00:00
> unchecked climate change is going to mean for kids born today

No amount of climate change today could compare with the threat of war and famine in the past, and yet they still had kids.

Louise Perry even goes so far as to hypothesize that the distinct lack of threat contributes to low fertility, under the term "mortality salience": https://x.com/Louise_m_perry/status/2014296167262126192
by hungryhobbit | 2026-02-10 23:12:54+00:00
I'm sorry, but this guy is not a founder: he's a "wantrepreneur" who is living off his wife and working (extremely) part-time on his side projects. Women who did what he does used to be called "dilettantes", and really I think that's the best term for him.

To legitimately be a founder/entrepreneur you have to found a successful business ... and even the most minimal definition of that includes being able to pay at least one employee (yourself) a living wage after eight years of effort!
by ljm | 2026-02-10 23:13:02+00:00
I'm pretty much just rawdogging Claude Code and opencode and I haven't bothered setting up skills or MCPs except for one that talks to Jira and Confluence. I just don't see the point when I'm perfectly capable of writing a detailed prompt with all my expectations.

The problem is that so many of these things are AI instructing AI and my trust rating for vibe coded tools is zero. It's become a point of pride for the human to be taken out of the loop, and the one thing that isn't recorded is the transcript that produced the slop.

I mean, you have the creator of openclaw saying he doesn't read code at all, he just generates it. That is not software engineering or development, it's brogrammer trash.
by smallstepforman | 2026-02-10 23:13:26+00:00
I’m 5 years older than James and had a similar discovery and enthusiasm path which got lost in the era commercial big modern systems. The soul of the machine has long since disappeared.

There was a brief period when I discovered BeOS 4.5 which brought the wonder back in September 1999. That was short lived. I occassionally get the bug with Haiku but sadly dont have the spare time during this last decade.

Enthusiast on small platforms still chase the bug, in these smaller communities you can actually make a difference, and there is still passion to be found there. There is also some innovation since experimental concepts can be tried out.
by LoganDark | 2026-02-10 23:14:02+00:00
I spent 7 hours or so yesterday installing Zulip. It was a huge pain; for one, it wants to own an entire server and the only supported installation method is this mega-script that clobbers everything, so I had to try to use the Docker container. Documentation on installation is scarce; other than telling you to use the script, and the fact that a docker container exists (though the GitHub repo it linked me to was no longer accurate, and I had to find the updated image name elsewhere), there's practically no information on how it works or how to use it, or what it depends on or how to configure it.

- Had to use ChatGPT to help generate me a docker-compose.yml, except it forgot about memcached, set the wrong environment variables and just generally did a sloppy job.

- Once it was running it was a huge pain to set up reverse proxying properly, because Zulip apparently doesn't even pay attention to proxy headers if you're talking to it on port 80, even if X-Forwarded-Proto says https. It would get stuck in an endless redirect loop trying to redirect https to https. I could only properly debug this with tcpdump. The only solution I could find was to expose port 443 of the container and then have the reverse proxy talk to that, but Zulip still won't respect X-Forwarded-For, and login emails still show the Docker network address for whatever reason. No idea how to fix this as I couldn't find documentation on how to do it for Docker; the doc for reverse proxying without Docker says to edit zulip.conf, which is impossible (or I don't know how, as again, I couldn't find documentation on any way to do it for Docker.)

- Even once I could access Zulip it was a huge pain to get it to access the databases it needs, because again, I couldn't find documentation on how to do this for Docker. This was after it was a pain to figure out how to generate an org creation link because I don't think I could find documentation for that either, I had to find the script and read the source to figure it out.

- Even once it could access the databases it needs, and I could get it to use the right passwords (which was annoying as it generated SOME of own secrets, but not others, and started ignoring the corresponding settings, like the email host password), I tried to set up push notifications but that required a setting I didn't know how to set because I couldn't find documentation on how to do that for Docker; I eventually figured it out but it was annoying.

It was so awful and took up practically my entire day. Once I could finally get it to work, it works pretty well, but it's not an experience I would recommend until the docs start supporting this use case.

I'm sure it would've been easier if I read the entire documentation, the entire source code, the entire build script of the Docker container, etc. but I just wanted something to work...
by mattstir | 2026-02-10 23:14:22+00:00
I'm not sure how hash chains would resolve the fundamental issue of needing to send your ID or similar to some random third-party company that does god-knows-what with it (probably stores it in a publicly accessible path with big "steal me" signs pointing at it). That they need to attest to your age means that they need to trust what your age is, which has really just moved the problem one layer deeper (as far as I can tell).
by NotNerdz | 2026-02-10 23:14:26+00:00
Hey Everybody,

Today we are unveiling InfiniaxAI Sites. The next level of affordable vibe-coding and web app creation. This is a next generation tool to come to our platform.

You can now use every AI, create repositories and projects and now create and publish sites at a new level of affordability!

How much does a site cost? $5 To Make + $10 to ship it, no recurring costs
Dont get me wrong, you dont have unlimited edits, but you can make hundreds of changes which would cost thousands on Replit or loveable.

This is the ultimate level of affordable. Manage a database, console, code, AI and more in litteral seconds, the ultimate VibeCoding tool. And its here to stay.

Sites are officially out Now for all users starter+ under our new sites page (You will see a popup to use it next to the sidebar)

I know experienced Developers will ask some questions about this, so I am here to answer, heres a basic FAQ:

- Costs are calculated per message
- We have Fast mode using Claude Haiku 4.5, Sonnet 4.5 is default and Claude Opus 4.6 is availiable for High Powered mode (~4x Cost)
- It can manage complex codebases with our next generation simple agentic system.

Connecting custom domains costs 1 time $15 and includes deployment fees, You can monitor your analytics and website status via our deployments page.

- Have an issue? Click support and contact us. We will get back to you.
by bonsai_spool | 2026-02-10 23:14:52+00:00
I'm not a specialist but I think there are some stapled peptides that do show appreciable uptake, so the blog post is not a complete history; this review reports bioavailability of up to 70% for some agents.

Nielsen DS et al. 2017. Orally Absorbed Cyclic Peptides. Chemical Reviews.

https://sci-hub.ru/10.1021/acs.chemrev.6b00838
by 124816 | 2026-02-10 23:15:00+00:00
It's not lazy framing, this is what "journalism" is now. Push your agenda as far as you can, misrepresenting as many facts as you like. At the very end of your story -- which >85% will never get to -- walk back your misdirections with a paragraph or two of facts, right next to your bolded "sign up" text. None of this is unintentional or accidental.
by turtlesdown11 | 2026-02-10 23:15:24+00:00
>Yes, I think this is counting on the ignorance that people will believe there are "drone operators" at the console, halfway across the world, who are driving our cars [A.I. stands for "Actually Indians"?]

...
>Honestly this model doesn't make any sense, as Waymo has set it up so that the only driver is the Waymo Driver making decisions, because the Waymo Driver is the only one who's privy to 100% the real-time data.

Their competitor Telsa does use teleoperation in their "robotaxis"? So what is ignorant about believing it to be the case in this scenario?

https://electrek.co/2024/11/25/tesla-remote-control-team-rob...
by notepad0x90 | 2026-02-10 23:15:32+00:00
Neither, I meant if enough people panic and stop using chrome, website operators need not worry much. Safari is default on macs, and Edge is default on windows, both can render any website that can't be accessed in Chrome, so it'll make Chrome the browser that can't open half of the websites, instead of half of the websites out there suddenly being incompatible with chrome. The power of numbers is on LE's side.
by projectazorian | 2026-02-10 23:15:46+00:00
Built this as part of koen.social - a quality social network for AI agents. The idea behind this system is to establish a quality floor for the bots that post on the network. Any LLM that can generate interesting discourse can solve these challenges without breaking a sweat, but script kiddies or poor quality LLMs will be stumped.

In combination with requiring human operators to register, the idea here is that we'll develop a curated community that encourages quality discourse and interesting emergent behavior.

Working on encapsulating this idea in an open-source library, more to follow. In the meantime happy to answer any questions!
by decafninja | 2026-02-10 23:15:58+00:00
Some of my friends and family who had kids at a young(er) age - and by that, I mean late twenties or early thirties - seemed totally oblivious to the hardships of parenthood.

You’d think by your thirties you’d do some basic research. Most people just have kids because it’s just “what your supposed to do” and don’t give much thought beyond that.

I don’t know what they thought to themselves, but outwardly they projected rainbows and unicorns until reality eventually hit them.
by JCattheATM | 2026-02-10 23:15:59+00:00
> what makes _your_ opinion better than mine, or that of the Singaporeans?

Because I believe it can be supported and be shown to be objectively correct. Not that I'm willing to put in the effort when it already took this much for you to realize I was stating an opinion though.

> Okay, why should they? Drug traffickers are perfectly capable of not attempting to smuggle drugs into Singapore.

If you think casual murder is fine because it's convenient, I don't think there's much for us to discuss anyway. We clearly have drastically different values. I'll just take solace in the fact that Singapore likely won't survive another 100 years.
by maxglute | 2026-02-10 23:16:02+00:00
EUV is not a biological process on an immutable. This bad analogy on par with EUV is magic. Second mover advantage = compressing 20 year commercial cycle into 10 year strategic one viable. As it's been consistently done. Litho complexity wank needs to stop. ASML integrator of western expertise, it's not one company. We ended up having 1 integrator due to $$$. Meanwhile PRC generating more expertise with blueprint and poached many of the ASML implementers in the first place, while pursuing any EUV efforts simultaneously, stuff ASML had to ditch due to limitations.

Lack of willingness/urgency is just loser talk for last of system capacity, i.e. overcome political barriers, especially when it's been highlighted how strategic important it is to hammer out separate REE chain. Important to distinguish between unwillingness and simple inability. Easy to strong arm TW to TSMC Arizona for leading edge goals, but can't strong arm PRC to transfer M/HREE tech.

Note I didn't say M/HREE was "easier" than EUV in technical sense. I said in terms of execution, i.e. overcoming barriers, PRC is simply going to have easier working with EUV engineering problem than west with M/HREE engineering, massive infra, domestic politics problem. So it's going to be slow going, in terms of execution time.
by chongli | 2026-02-10 23:16:10+00:00
I've read that it's quite usable as a spare part itself, in order to make a cheap and reliable time-bomb IED. It has a built-in alarm and it's apparently not too difficult to use the alarm's beeper signal to set off the bomb at an exact time of day. This would otherwise be quite difficult and time-consuming to build out of a box of off-the-shelf electronic components (not to mention a UI for setting the alarm).

The fact that the watch is so ubiquitous means the paramilitaries can write and distribute a standard field manual explaining how to do this, knowing that anyone wanting to build an IED ought to be able to acquire some of the watches on their own.