Feed aggregator

Show HN: VibeCheck – Know if your vibe code is safe to ship

Hacker News - Mon, 03/09/2026 - 8:03am

I kept shipping AI-generated code I didn't really trust. Not because the AI was wrong necessarily, but because I had no real way to know if it was right.

So I built a tool to vibe check the vibe code. It scans your code and gives it a Vibe Score: Dead Vibe (0-40), Off Vibe (41-65), Good Vibe (66-85), or Immaculate Vibe (86-100). It checks for security issues, code quality, and test coverage across JS/TS, Python, PHP, Go, Ruby, Rust, Java, Swift, and C#. Plus gives real feedback to address!

Free to try. Paste your code and see where it lands.

Comments URL: https://news.ycombinator.com/item?id=47307958

Points: 2

# Comments: 1

Categories: Hacker News

CISA Adds Three Known Exploited Vulnerabilities to Catalog

US-Cert Current Activity - Mon, 03/09/2026 - 8:00am

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

  • CVE-2021-22054 Omnissa Workspace ONE Server-Side Request Forgery
  • CVE-2025-26399 SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability
  • CVE-2026-1603 Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities established the KEV Catalog as a living list of known Common Vulnerabilities and Exposures (CVEs) that carry significant risk to the federal enterprise. BOD 22-01 requires Federal Civilian Executive Branch (FCEB) agencies to remediate identified vulnerabilities by the due date to protect FCEB networks against active threats. See the BOD 22-01 Fact Sheet for more information.

Although BOD 22-01 only applies to FCEB agencies, CISA strongly urges all organizations to reduce their exposure to cyberattacks by prioritizing timely remediation of KEV Catalog vulnerabilities as part of their vulnerability management practice. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.

Categories: US-CERT Feed

Cloned AI Tool Sites Distribute Malware in ‘InstallFix’ Campaign

Security Week - Mon, 03/09/2026 - 7:42am

Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.

The post Cloned AI Tool Sites Distribute Malware in ‘InstallFix’ Campaign appeared first on SecurityWeek.

Categories: SecurityWeek

Nscale has a pipeline of 1.3GW of capacity across the UK, Norway and the US, with contracted supply of 200,000 Nvidia GPUs, and is name-checked as a British supplier of AI factories

Computer Weekly Feed - Mon, 03/09/2026 - 7:34am
Nscale has a pipeline of 1.3GW of capacity across the UK, Norway and the US, with contracted supply of 200,000 Nvidia GPUs, and is name-checked as a British supplier of AI factories
Categories: Computer Weekly

From government-backed STEM initiatives in the UAE to thriving regional communities such as Women in Cybersecurity Middle East and Women in IT, the region is shifting the conversation from participation to influence

Computer Weekly Feed - Mon, 03/09/2026 - 7:34am
From government-backed STEM initiatives in the UAE to thriving regional communities such as Women in Cybersecurity Middle East and Women in IT, the region is shifting the conversation from participation to influence
Categories: Computer Weekly

As part of a series of short documentaries, tech recruitment organisation Harvey Nash discusses the AI skills ‘paradox’, with a number of tech experts shedding light on the potential future of work

Computer Weekly Feed - Mon, 03/09/2026 - 7:34am
As part of a series of short documentaries, tech recruitment organisation Harvey Nash discusses the AI skills ‘paradox’, with a number of tech experts shedding light on the potential future of work
Categories: Computer Weekly

Major gatherings, including Leap and Gisec Global, remain scheduled, but travel disruptions and geopolitical tensions are adding uncertainty

Computer Weekly Feed - Mon, 03/09/2026 - 6:34am
Major gatherings, including Leap and Gisec Global, remain scheduled, but travel disruptions and geopolitical tensions are adding uncertainty
Categories: Computer Weekly

Show HN: SubstanceWiki – Open-source encyclopedia of psychoactive substances

Hacker News - Mon, 03/09/2026 - 6:23am

SubstanceWiki is a free, open-source encyclopedia of psychoactive substances with a harm reduction focus.

Site: https://substancewiki.org Source: https://github.com/yagcioglutoprak/substance_wiki

The database covers 381 substances with structured data including dosage tables by route of administration, duration timelines, 14,967 interaction safety ratings, 240+ catalogued subjective effects, experience reports, and community insights aggregated from Reddit.

Tech stack: Next.js 16 (App Router), PostgreSQL via Prisma, Tailwind CSS. Content is CC-BY-SA 4.0. The whole codebase including the database schema and seed scripts is public.

Some technical decisions that might interest HN:

- Interaction checker is backed by ~15K pre-computed combination records, not runtime calculation - Community insights are built from Reddit data via the Arctic Shift archive, run through a classification and enrichment pipeline - Programmatic SEO generates comparison pages, combo guides, and concept pages from the underlying data - Dynamic OG images generated per-page via @vercel/og - JSON-LD structured data on every page type (WebSite, Article, BreadcrumbList, FAQPage)

Feedback welcome on the data model, the UX for presenting safety-critical information, or anything else.

Comments URL: https://news.ycombinator.com/item?id=47307140

Points: 1

# Comments: 0

Categories: Hacker News

Why use F# for scripting and automation?

Hacker News - Mon, 03/09/2026 - 6:18am

Article URL: https://iev.ee/blog/why-use-fsharp/

Comments URL: https://news.ycombinator.com/item?id=47307101

Points: 1

# Comments: 0

Categories: Hacker News

Advice for Operating a Public-Facing API (2023)

Hacker News - Mon, 03/09/2026 - 6:16am

Article URL: https://jcs.org/2023/07/12/api

Comments URL: https://news.ycombinator.com/item?id=47307080

Points: 2

# Comments: 0

Categories: Hacker News

Show HN: TemplUI v1.7.0 – UI components for Go and templ, now with import mode

Hacker News - Mon, 03/09/2026 - 6:16am

I shipped templUI v1.7.0 today.

templUI is a component library for Go + templ + Tailwind.

The biggest change in this release is that you can now use it in two ways: - CLI workflow: copy components into your own codebase - Import workflow: use github.com/templui/templui directly as a dependency

Other changes: - dedicated quickstart repo is back - interactive components now handle their own script rendering automatically - docs were simplified around Quickstart, Import Workflow, and CLI Workflow

The import workflow is still marked beta, but it’s usable now and was one of the most requested things.

Repo: https://github.com/templui/templui

Quickstart: https://github.com/templui/templui-quickstart

Would love feedback from people building with Go and templ.

Comments URL: https://news.ycombinator.com/item?id=47307077

Points: 1

# Comments: 0

Categories: Hacker News

Gemini Exporter – Export Gemini Chat to PDF, Word, and Notion in One Click

Hacker News - Mon, 03/09/2026 - 6:12am

I built a Chrome extension called Gemini Exporter that solves a problem I kept running into: there's no native way to export Gemini chat history into a clean, usable document.

Every time I finished a long research session or drafted something in Gemini, I had to manually copy-paste everything and reformat it. Headings broke, code blocks turned into plain text, and the whole thing looked messy.

So I built an exporter that actually preserves structure.

What it does: - Export Gemini chat to Word (DOCX) – preserves headings, lists, code blocks as editable text - Export Gemini chat to PDF – useful for archiving, sharing with clients, or compliance - Export to Google Docs – for team collaboration without downloading files - Send chat to Notion – great for building knowledge bases or project docs - Choose to export a selected conversation or the full chat history - Set font, size, and text color before exporting

Why I built it: Most AI chat tools lack native export. ChatGPT at least lets you download a JSON. Gemini gives you nothing. As someone who uses Gemini heavily for writing drafts and research, the friction of "how do I get this out of the browser?" was real enough to justify building a fix.

Technical notes: The extension reads the DOM on gemini.google.com, parses the conversation structure, and routes it to either a local file generator (DOCX/PDF via client-side libraries) or the respective API (Google Docs / Notion). No chat data is sent to any third-party server. Export happens entirely in your browser for Word and PDF.

Would love feedback on edge cases, especially around code-heavy chats and multi-turn conversations with lots of nested formatting.

>> Install: https://chromewebstore.google.com/detail/gemini-exporter-save-gemi/lgipeakgdkcgnkdljeagconfbfeolidj

>> Website: https://backrun.co/gemini-exporter

Comments URL: https://news.ycombinator.com/item?id=47307039

Points: 2

# Comments: 1

Categories: Hacker News

EL Filósofo Espiritualista

Hacker News - Mon, 03/09/2026 - 6:12am

Comments URL: https://news.ycombinator.com/item?id=47307030

Points: 2

# Comments: 0

Categories: Hacker News

Pages