Feed aggregator
Show HN: VibeCheck – Know if your vibe code is safe to ship
I kept shipping AI-generated code I didn't really trust. Not because the AI was wrong necessarily, but because I had no real way to know if it was right.
So I built a tool to vibe check the vibe code. It scans your code and gives it a Vibe Score: Dead Vibe (0-40), Off Vibe (41-65), Good Vibe (66-85), or Immaculate Vibe (86-100). It checks for security issues, code quality, and test coverage across JS/TS, Python, PHP, Go, Ruby, Rust, Java, Swift, and C#. Plus gives real feedback to address!
Free to try. Paste your code and see where it lands.
Comments URL: https://news.ycombinator.com/item?id=47307958
Points: 2
# Comments: 1
Bridging the Operational AI Gap
Article URL: https://www.technologyreview.com/2026/03/04/1133642/bridging-the-operational-ai-gap/
Comments URL: https://news.ycombinator.com/item?id=47307947
Points: 1
# Comments: 0
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.
- CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery
- CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
- CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability
These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.
Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.
Cloned AI Tool Sites Distribute Malware in ‘InstallFix’ Campaign
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
The post Cloned AI Tool Sites Distribute Malware in ‘InstallFix’ Campaign appeared first on SecurityWeek.
Nscale has a pipeline of 1.3GW of capacity across the UK, Norway and the US, with contracted supply of 200,000 Nvidia GPUs, and is name-checked as a British supplier of AI factories
From government-backed STEM initiatives in the UAE to thriving regional communities such as Women in Cybersecurity Middle East and Women in IT, the region is shifting the conversation from participation to influence
As part of a series of short documentaries, tech recruitment organisation Harvey Nash discusses the AI skills ‘paradox’, with a number of tech experts shedding light on the potential future of work
Major gatherings, including Leap and Gisec Global, remain scheduled, but travel disruptions and geopolitical tensions are adding uncertainty
Show HN: SubstanceWiki – Open-source encyclopedia of psychoactive substances
SubstanceWiki is a free, open-source encyclopedia of psychoactive substances with a harm reduction focus.
Site: https://substancewiki.org Source: https://github.com/yagcioglutoprak/substance_wiki
The database covers 381 substances with structured data including dosage tables by route of administration, duration timelines, 14,967 interaction safety ratings, 240+ catalogued subjective effects, experience reports, and community insights aggregated from Reddit.
Tech stack: Next.js 16 (App Router), PostgreSQL via Prisma, Tailwind CSS. Content is CC-BY-SA 4.0. The whole codebase including the database schema and seed scripts is public.
Some technical decisions that might interest HN:
- Interaction checker is backed by ~15K pre-computed combination records, not runtime calculation - Community insights are built from Reddit data via the Arctic Shift archive, run through a classification and enrichment pipeline - Programmatic SEO generates comparison pages, combo guides, and concept pages from the underlying data - Dynamic OG images generated per-page via @vercel/og - JSON-LD structured data on every page type (WebSite, Article, BreadcrumbList, FAQPage)
Feedback welcome on the data model, the UX for presenting safety-critical information, or anything else.
Comments URL: https://news.ycombinator.com/item?id=47307140
Points: 1
# Comments: 0
What if you never had to get an API key ever again?
Article URL: https://stevekrouse.com/x402
Comments URL: https://news.ycombinator.com/item?id=47307131
Points: 1
# Comments: 0
A willingness to look stupid is the most underrated moat in doing creative work
Article URL: https://sharif.io/looking-stupid
Comments URL: https://news.ycombinator.com/item?id=47307124
Points: 1
# Comments: 0
Why use F# for scripting and automation?
Article URL: https://iev.ee/blog/why-use-fsharp/
Comments URL: https://news.ycombinator.com/item?id=47307101
Points: 1
# Comments: 0
Custom Agents in Visual Studio
Article URL: https://devblogs.microsoft.com/visualstudio/custom-agents-in-visual-studio-built-in-and-build-your-own-agents/
Comments URL: https://news.ycombinator.com/item?id=47307082
Points: 1
# Comments: 0
Advice for Operating a Public-Facing API (2023)
Article URL: https://jcs.org/2023/07/12/api
Comments URL: https://news.ycombinator.com/item?id=47307080
Points: 2
# Comments: 0
Show HN: TemplUI v1.7.0 – UI components for Go and templ, now with import mode
I shipped templUI v1.7.0 today.
templUI is a component library for Go + templ + Tailwind.
The biggest change in this release is that you can now use it in two ways: - CLI workflow: copy components into your own codebase - Import workflow: use github.com/templui/templui directly as a dependency
Other changes: - dedicated quickstart repo is back - interactive components now handle their own script rendering automatically - docs were simplified around Quickstart, Import Workflow, and CLI Workflow
The import workflow is still marked beta, but it’s usable now and was one of the most requested things.
Repo: https://github.com/templui/templui
Quickstart: https://github.com/templui/templui-quickstart
Would love feedback from people building with Go and templ.
Comments URL: https://news.ycombinator.com/item?id=47307077
Points: 1
# Comments: 0
Gemini Exporter – Save Gemini to PDF, Word, Google Docs and Notion
Article URL: https://chromewebstore.google.com/detail/gemini-exporter-save-gemi/lgipeakgdkcgnkdljeagconfbfeolidj
Comments URL: https://news.ycombinator.com/item?id=47307072
Points: 2
# Comments: 2
Ireland shuts last coal plant, becomes 15th coal-free country in Europe
Article URL: https://www.pv-magazine.com/2025/06/20/ireland-coal-free-ends-coal-power-generation-moneypoint/
Comments URL: https://news.ycombinator.com/item?id=47307055
Points: 2
# Comments: 0
Gemini Exporter – Export Gemini Chat to PDF, Word, and Notion in One Click
I built a Chrome extension called Gemini Exporter that solves a problem I kept running into: there's no native way to export Gemini chat history into a clean, usable document.
Every time I finished a long research session or drafted something in Gemini, I had to manually copy-paste everything and reformat it. Headings broke, code blocks turned into plain text, and the whole thing looked messy.
So I built an exporter that actually preserves structure.
What it does: - Export Gemini chat to Word (DOCX) – preserves headings, lists, code blocks as editable text - Export Gemini chat to PDF – useful for archiving, sharing with clients, or compliance - Export to Google Docs – for team collaboration without downloading files - Send chat to Notion – great for building knowledge bases or project docs - Choose to export a selected conversation or the full chat history - Set font, size, and text color before exporting
Why I built it: Most AI chat tools lack native export. ChatGPT at least lets you download a JSON. Gemini gives you nothing. As someone who uses Gemini heavily for writing drafts and research, the friction of "how do I get this out of the browser?" was real enough to justify building a fix.
Technical notes: The extension reads the DOM on gemini.google.com, parses the conversation structure, and routes it to either a local file generator (DOCX/PDF via client-side libraries) or the respective API (Google Docs / Notion). No chat data is sent to any third-party server. Export happens entirely in your browser for Word and PDF.
Would love feedback on edge cases, especially around code-heavy chats and multi-turn conversations with lots of nested formatting.
>> Install: https://chromewebstore.google.com/detail/gemini-exporter-save-gemi/lgipeakgdkcgnkdljeagconfbfeolidj
>> Website: https://backrun.co/gemini-exporter
Comments URL: https://news.ycombinator.com/item?id=47307039
Points: 2
# Comments: 1
