Hacker News

Subscribe to Hacker News feed
Hacker News RSS
Updated: 16 min 38 sec ago

First Proof

Sat, 02/14/2026 - 12:49pm

Article URL: https://1stproof.org/

Comments URL: https://news.ycombinator.com/item?id=47016569

Points: 1

# Comments: 0

Categories: Hacker News

Public Universal Friend

Sat, 02/14/2026 - 12:48pm
Categories: Hacker News

Depressive Realism

Sat, 02/14/2026 - 12:08pm
Categories: Hacker News

The Cab Ride That Circled the Earth

Sat, 02/14/2026 - 12:07pm
Categories: Hacker News

ClawdReview – OpenReview for AI Agents

Sat, 02/14/2026 - 11:57am

Agents can review the paper on arXiv, and humans can like or dislike agents' reviews. There are also ranking lists of the most popular papers and agents. Please visit: https://clawdreview.ai/

Comments URL: https://news.ycombinator.com/item?id=47016081

Points: 5

# Comments: 0

Categories: Hacker News

Show HN: Buildcage – Restrict outbound network access during Docker builds

Sat, 02/14/2026 - 11:56am

Hi HN,

I built buildcage as part of our supply chain security efforts at work. The problem we kept running into: when you run `RUN npm install` in a Dockerfile, that command can connect to anywhere on the internet, and you have no visibility into where it actually goes. Even with pinned dependencies, a compromised package could still exfiltrate build secrets or phone home to a C2 server during the build itself.

buildcage is a Docker container that wraps BuildKit with an internal proxy. You give it a list of allowed domains, and only connections to those domains go through — everything else is blocked and logged. Your Dockerfiles stay exactly the same.

If you use GitHub Actions, it's a few lines to add to your workflow — see the quick start guide. https://github.com/dash14/buildcage#quick-start

I want to be upfront — this is not a silver bullet. If a malicious package is delivered through a legitimate registry, the connection goes to an allowed domain and buildcage can't catch it. You should still pin dependencies, use lock files, and scan for vulnerabilities.

The way I think about it: buildcage is a last line of defense. If something slips through all your other measures, at least it can't call home to an attacker's server.

That framing is exactly why I focused on making it easy to adopt. A security tool that's hard to set up doesn't get set up. With buildcage, you add a few lines to your GitHub Actions workflow and everything just works — no certificate injection, no Dockerfile changes, no special build flags.

Would love to hear your thoughts — whether it's about the approach, the limitations, or how this fits into your own workflow.

Comments URL: https://news.ycombinator.com/item?id=47016063

Points: 1

# Comments: 0

Categories: Hacker News

Show HN: Arcmark – macOS bookmark manager that attaches to browser as sidebar

Sat, 02/14/2026 - 11:55am

Hey HN! I was a long-time Arc browser user and loved how its sidebar organized tabs and bookmarks into workspaces. I wanted to switch to other browsers without losing that workflow. So I built Arcmark, it's a macOS bookmark manager (Swift/AppKit) that floats as a sidebar attached to any browser window. It uses macOS accessibility API to follow the browser window around.

You get workspace-based links/bookmarks organization with nested folders, drag-and-drop reordering, and custom workspace colors. For the most part I tried replicating Arc's sidebar UX as close as possible.

1. Local-first: all data lives in a single JSON file ( ~/Library/Application Support/Arcmark/data.json). No accounts, no cloud sync.

2. Works with any browser: Chrome, Safari, Brave, Arc, etc. Or use it standalone as a bookmark manager with a regular window.

3. Import pinned tab and spaces from Arc: it parses Arc's StorableSidebar.json to recreate the exact workspace/folder structure.

4. Built with swift-bundler rather than Xcode.

There's a demo video in the README showing the sidebar attachment in action. The DMG is available on the releases page (macOS 13+), or you can build from source.

This is v0.1.0 so it's a very early version. Would appreciate any feedback or thoughts

GitHub: https://github.com/Geek-1001/arcmark

Comments URL: https://news.ycombinator.com/item?id=47016058

Points: 2

# Comments: 0

Categories: Hacker News

Pages