Hacker News

Data Is Your Moat

Hacker News - Tue, 02/17/2026 - 6:07am
Categories: Hacker News

Show HN: Nibble a fast and easy to use network scanner

Hacker News - Tue, 02/17/2026 - 6:03am

Hi HN. I built Nibble, a local network scanner I always wanted because I kept forgetting the quickest way to find devices and services on my LAN or VPN that I needed to SSH or log into. It focuses on speed and ease of use.

It scans common ports, grabs service banners, and identifies hardware vendors in a clean terminal UI. It’s open source and MIT Licensed, and it's available on brew, npm and pip.

I’d love for you to try it out.

Comments URL: https://news.ycombinator.com/item?id=47046085

Points: 1

# Comments: 0

Categories: Hacker News

I broke into my own AI system in 10 minutes. I built it

Hacker News - Tue, 02/17/2026 - 6:00am

Last week I finished building a small AI workflow. Four agents working together, connected to a real database.

I got curious and asked myself — what if someone sent something malicious?

So I tried it on myself.

I typed a manipulative goal instead of a normal one. The system processed it, stored it in my database, and told me everything completed successfully.

Tried it five more times with different approaches. Same result every time. Six attempts. Six successes. My own database now has six attack records sitting in it from my own tests.

Nobody in my system noticed. No alert. No refusal. No warning. The thing that got me — this isn't a bug. The system worked exactly as designed. It just wasn't designed with this in mind. And from what I can tell, most AI agent systems aren't.

Is anyone actually thinking about this in production?

Comments URL: https://news.ycombinator.com/item?id=47046068

Points: 2

# Comments: 0

Categories: Hacker News

The Cost of Staying

Hacker News - Tue, 02/17/2026 - 5:56am
Categories: Hacker News

Show HN: CleanCloud – 20 rules to find what's costing you money in AWS and Azure

Hacker News - Tue, 02/17/2026 - 5:55am

Most cloud cost tools require write access, send data to SaaS platforms, and generate reports no one acts on.

CleanCloud is different: read-only, runs in your environment, and enforces hygiene as a CI/CD gate.

AWS Rules (10): - Unattached EBS Volumes - Old EBS Snapshots (90+ days) - Infinite Retention CloudWatch Logs - Unattached Elastic IPs (30+ days) - Detached Network Interfaces (60+ days) - Untagged Resources (EBS, S3, Log Groups) - Old AMIs (180+ days) - Idle NAT Gateways (~$32/mo each) - Idle RDS Instances (zero connections 14+ days) - Idle Load Balancers (zero traffic 14+ days)

Azure Rules (10): - Unattached Managed Disks - Old Snapshots - Unused Public IPs - Empty Load Balancers - Empty Application Gateways - Empty App Service Plans - Idle VNet Gateways - Stopped (Not Deallocated) VMs — still incurring full compute charges - Idle SQL Databases (zero connections 14+ days) - Untagged Resources

Every finding includes: - Confidence level (HIGH / MEDIUM) - Evidence and signals used - Resource details and age

Enforce in CI/CD: cleancloud scan --provider aws --all-regions --fail-on-confidence HIGH Exit 0 = pass. Exit 2 = policy violation. - No write access. - No telemetry. - No SaaS.

"pip install cleancloud" and run your first scan in 5 minutes.

GitHub: https://github.com/cleancloud-io/cleancloud

If you’re one of the 200+ users who have downloaded CleanCloud, we’d love to hear what you found. Please open an issue at https://github.com/cleancloud-io/cleancloud or leave a comment below.

Comments URL: https://news.ycombinator.com/item?id=47046010

Points: 1

# Comments: 1

Categories: Hacker News

1984 Bhopal Disaster

Hacker News - Tue, 02/17/2026 - 5:15am

Article URL: https://vvesh.de/death/bhopal

Comments URL: https://news.ycombinator.com/item?id=47045700

Points: 2

# Comments: 0

Categories: Hacker News

Show HN: PgCortex – AI enrichment per Postgres row, zero transaction blocking

Hacker News - Tue, 02/17/2026 - 5:14am

Hi HN,

Been working on a way to get "agent-per-row" behavior in Postgres without actually running LLMs inside the database.

The problem: Calling LLMs from triggers/functions blocks transactions, exhausts connections, and breaks ACID. Saw some projects doing this and it felt dangerous for production.

The solution: DB-adjacent architecture. Lightweight triggers enqueue jobs to an outbox table. An external Python worker (agentd) polls, executes AI calls, and writes back safely with schema validation and CAS.

What you can build:

Auto-classify support tickets on INSERT

Content moderation that doesn't block your app

Lead scoring, fraud detection, and invoice extraction

Anything where data arrives and needs AI enrichment

Works with OpenAI, Anthropic, OpenRouter, or any Agent.

One SQL line to add AI to any table:

SELECT agent_runtime.agent_watch('tickets', 'id', 'classifier', 'v1', '{"priority":"$.priority"}');

Includes 9 example use cases in the repo. Would love feedback on the architecture.

Comments URL: https://news.ycombinator.com/item?id=47045690

Points: 1

# Comments: 0

Categories: Hacker News

I built a free alternative to Datadog Synthetic Monitoring using Playwright

Hacker News - Tue, 02/17/2026 - 5:11am

Hi HN,

I'm Vajid, the founder of a small dev agency.

I built this tool because I got tired of the "200 OK" lie. We had a client whose e-commerce site was "Up" (returning 200 status codes), but the "Add to Cart" button was broken due to a silent JavaScript error. They lost sales for 6 hours while our dashboard said "All Systems Operational."

Existing tools like Datadog Synthetic Monitoring are excellent but can be expensive for indie hackers or small startups (often ~$15/check).

So I built a lightweight alternative using Playwright, Node.js, and BullMQ.

How it works:

It spins up a headless browser instance.

It navigates to your URL and waits for specific DOM elements (not just HTTP status).

It captures screenshots and console logs if the specific flow (like Login or Checkout) fails.

The Business Model (Transparency): I am not trying to become the next Datadog. I run a dev agency, and this tool acts as a "loss leader" to demonstrate our competence to potential enterprise clients. That’s why the core monitoring is free for the community.

I’m currently paying for the infrastructure (DigitalOcean) myself. I have some spare capacity, so if you are working on a student project or open-source tool and need hosting/monitoring, let me know—I’m happy to support 5-10 projects with free credits.

I’d love feedback on the false-positive handling (currently looking into smarter DOM diffing).

– Vajid

Comments URL: https://news.ycombinator.com/item?id=47045671

Points: 1

# Comments: 0

Categories: Hacker News

Pages