@chaibytesai · X

Nqspq

been building a security scanner for vibe-coded apps — it catches leaked API keys, open databases, logins you can bypass. tested it on a repo made for testing scanners. it caught everything — report below free if you want to check yours:

@MrBallaz · X

Protect your vibe-coded app

@velumprivacy · X

sluice_data · Product Hunt

SluiceData Turn scattered data into trusted, AI-ready answers

@LindenSec · X

Felt like vibe-coding something I'd use in my daily workroutine, so I made Pewpew map with live IOC's, a "HUNT' button to pull all recent IOC's/C2's from AbuseCH. Add your personal stack in a watchlist. See any new KEV CVE's. All in one dashboard.

Topfi · HN

Like everyone on HN, I love nothing more than to (re)read my own comments. Getting my intuition that I am among the smartest, most humble, highest quality commenters on here confirmed by an LLM so capable that the US government had to temporarily export restrict it [0] seemed only natural. Having had my perfection confirmed, I decided to share this joy with you as I had a few percent usage left before a reset. I took a few prompts, then did a review of the output which resulted in Selbstbild, a BYOK (Anthropic / OpenRouter) web app that gives you a summary and assessment of your public comments by one of our machine Gods, including Fable 5 (provided your can afford that luxury at API pricing). In all seriousness, I have, for a long time, used my own comments on social media (including HN) as part of a personal needle-in-haystack test, simply because I do know my somewhat peculiar style and what I tend to write, but also because I can sometimes write in a slightly confusing manner, ma

u/King_Kazma · Reddit

whatsthegrift.com - a RAG research tool for today's grifters every day i feel like there's a new grift attached with some news article, which naturally birthed the idea to built something to investigate & visualize them examples: https://whatsthegrift.com/q/777063a64e512565 https://whatsthegrift.com/q/e5945d20375ed3ff and my personal favorite so far: https://whatsthegrift.com/q/f43eb30a15342d53 react (vite) + node (fastify) + brave search (retrieval) + claude haiku (extraction)

@Sentrint · X

Made Sentrint after seeing how many vibe-coded apps ship with RLS switched off. Point it at a GitHub repo and it finds open user tables, exposed keys and auth checks that only run in the browser. Free scan is the whole scan, no card.

@MBrew26730 · X

Dataset cleaning + fine tuning + continual learning at

u/ajaysurya_ · Reddit

Looking for feedback Built Bayeso after realizing most churn prediction tools ignore small businesses. Looking for feedback. hey everyone, i've been working on bayeso ( https://bayeso.tech ), an ai platform built for businesses that don't have massive datasets. while building it, i kept running into the same problem. almost every churn prediction solution is designed for companies with thousands or even millions of customer records. if you're a small business with a few hundred customer

jallmann · HN

> want without a PR process that requires hardware authentication or proof of presence Just curious, what do you use for this? I built OTP Guard [1] a few years ago for exactly this problem, although I haven't seen any alternatives in the space. Does GitHub have something built-in now? The original framing was more "local malware compromising your GitHub account" ... it never occurred to me that the malware could be a LLM. I really should update the page. [1] https://otpguard.com