Hacker News

Netlify Is Having an Outage

Hacker News - Tue, 05/19/2026 - 5:55pm

Article URL: https://www.netlifystatus.com

Comments URL: https://news.ycombinator.com/item?id=48200196

Points: 2

# Comments: 0

Categories: Hacker News

Solo Dev Kills YouTube Ask

Hacker News - Tue, 05/19/2026 - 5:46pm

Article URL: https://www.neotube.ai/

Comments URL: https://news.ycombinator.com/item?id=48200133

Points: 4

# Comments: 1

Categories: Hacker News

Show HN: PrismoDev – local CLI for finding token waste in Claude Code/Codex

Hacker News - Tue, 05/19/2026 - 5:39pm

I built PrismoDev after noticing my Claude Code and Codex sessions were getting expensive in ways that were hard to explain.

After digging through local session logs, the recurring issue was not just model pricing. A lot of the waste came from context bloat: generated artifacts, logs, build output, oversized CLAUDE.md / AGENTS.md files, repeated tool output, broad repo exploration, stale session state, and command loops.

PrismoDev is a local CLI that scans a repo plus local Claude Code / Codex logs and tries to explain where token/context waste is coming from. It does not require API keys or login, and nothing leaves the machine.

A few commands:

```bash npx getprismo doctor ```

Scans the repo, flags missing `.claudeignore` / `.cursorignore`, oversized instruction files, generated artifacts exposed to agents, and creates compact `.prismo/` context summaries.

```bash npx getprismo watch ```

Monitors live context pressure during a coding session and warns about repeated file reads, artifact leaks, oversized tool output, and possible loops.

```bash npx getprismo cc timeline ```

Builds a postmortem timeline showing where context spikes, repeated reads, command loops, or generated artifacts appeared in a session.

There are also scoped context policies:

```bash npx getprismo firewall auth-bug ```

which creates a task-specific context boundary before starting work.

The main idea is to make AI coding sessions easier to reason about before the bill surprises you: what got loaded, what repeated, what could have been avoided, and what should be ignored next time.

Repo: https://github.com/shanirsh/prismodev

I’d be especially interested in feedback from people using Claude Code, Codex, Cursor, or similar tools on larger repos. I’m trying to tune the false positives and find more real-world waste patterns.

Comments URL: https://news.ycombinator.com/item?id=48200057

Points: 1

# Comments: 1

Categories: Hacker News

VeilGate- Deception Reverse Proxy

Hacker News - Tue, 05/19/2026 - 5:13pm

In my day job, I run AI pentest agents against real targets like banks, fintechs, and secured production stacks with paid WAFs. I also deal with multilayer infrastructure and dedicated security teams. Despite these defenses, I keep finding high and critical vulnerabilities using just an LLM agent loop, a few open-source tools, MCP servers, and Burp Suite.

The volume of traffic is increasing quickly. Agent-driven activity in web logs has shifted from occasional noise to a constant background presence. Tools like PentestGPT, CAI, Strix, and HexStrike allow you to set up fully autonomous agents against any target for under a dollar an hour of API cost. Most teams haven’t noticed this change because their tools weren’t designed to detect it.

This repetition started to concern me. Despite all the paid WAFs, the rules, and the layered infrastructure, I could still guide an AI agent through a secured target and find critical issues. So what is the actual defense?

The realization that changed my perspective: blocking doesn’t work. A 403 error is simply a signal in an LLM's context window. The agent sees "defended here," updates its model, and pivots in milliseconds. Every block provides free information that shows the attacker where your weaknesses are.

That’s why I created VeilGate as a deception proxy, not just another blocker. It sits in front of your app and operates in modes such as `observe`, `challenge`, `tarpit`, or `auto`. Each request is scored based on protocol fingerprints, behavioral signals, and online machine learning. Requests below the threshold are forwarded to your main app normally. Ambiguous traffic receives a browser proof-of-work challenge. High-confidence agent traffic gets redirected into tarpit mode, where it encounters a deception layer instead of your actual app.

Comments URL: https://news.ycombinator.com/item?id=48199725

Points: 1

# Comments: 0

Categories: Hacker News

Auto-Brewery Syndrome

Hacker News - Tue, 05/19/2026 - 5:10pm
Categories: Hacker News

Pages