we struggle with a similar problem at my workplace - vuln alerts from GCP container image scans put a ton of noise into Vanta which screams bloody murder at CVEs in base images which we A) can't fix, and B) aren't relevant as they're not on the hot path (often some random dependency that we don't use in our app).

Are there any tools for handling these kind of CVEs contextually? (Besides migrating all our base images to chainguard/docker hardened images etc)

I'm working at a medium sized SaaS vendor. We've been using Aikido Code which tries to filter vulnerability impact using AI. Results are generally positive, though we are still struggling with keeping the amount of CVEs down, due to the size of our code bases and the amount of dependencies.

I'd be weary to trust AI with something like that, especially if I had to assert to a third party that we absolutely do not have a vulnerability.

can you give some more detail about the airtag-sized device you made? This is exactly what I've been thinking about doing to test the "idea" of the Index, but haven't figured out how to go about doing it.

(Tried looking on your blog, but ended up instead reading your article about the little ESP8266 clock which convinced me to buy one to play with myself, thanks!)

Sure, I haven't written it up, but the code is here:

https://github.com/skorokithakis/middle

I'll take some photos, it's larger now than it will be, because I don't have a MEMS mic (and a small battery). It looks like this now:

https://imgz.org/iACAKWj2/

Since we recently moved out of the city and into the mountains of Switzerland, I had a niche problem... agreeing with my buddies which is the best ski field to meet at when we all live in different towns. So I made a little web app to help:

https://skicompromise.ch

This was a fun little project I did over the Christmas holidays but only finished off recently. Basically I precalculated the public transport time between the most populated towns in Switzerland to every ski field (about 350 of them!) and then built a little web app around it using Django.

You can choose to prioritise shortest (lowest time overall) versus fairest (smallest variance in group members).

Totally free to use. Next steps are to integrate it with live snow conditions/open lifts...

Claude did help a lot with the FE part. The biggest part was actually finding the best public transport stop for each ski field - that was a very manual process trawling through skimap.org images and Anreise info on ski resort websites.

This sounds great :D feel like sharing the prompt?

Here is one of the agents. I prefer large agents, so you can tweak it to your purposes. It also calls some of my skills and other pieces, but it will give you the "gist" of it.

https://gist.github.com/notque/e57cb975a3df7780824ce4085a59a...

This is cool. It looks like it's possible for devs to add their own games, similar to Airconsole. What sets your platform apart?

Thanks! Yes, or at least it will be in the future as we have not yet publicly released our SDK's for 3rd party devs :)

What sets us apart from AirConsole is our strict niche focus on real-time action party games and social couch gaming. In practice this means that the games added to our platform's public playlists should adhere to being short, competitive and real-time (no asynchronous or text/language-based trivia games).

AirConsole on the other hand is fully focused on in-car-entertainment at the moment as the whole company was recently sold to a car software manufacturer. My understanding is that they are not accepting any new 3rd party games on the platform apart from few very high-profile games based on already established studios and IP.

Absolutely loved that the intensity of the music is synced with the swiping. Fantastic job as always!

Yes please!

I've been actually kind-of enjoying using Jules as a way of "coding" my side project (a react native app) using my phone.

I have very limited spare time these days, but sometimes on my walk to work I can think of an idea/feature, plan out what I want it to do (and sometimes use the github app to revise the existing code), then send out a few jobs. By the time I get home in the evening I've got a few PRs to review. Most of the code is useless to me, but it usually runs, and means I can jump straight into testing out the idea before going back and writing it properly myself.

Next step is to add automatic builds to each PR, so that on the way home I can just check out the different branches on my phone instead of waiting to be home to run the ios simulator :D

Async vibe coding is the new hot thing, I'm also recommending to check GH Copilot Coding Agent (NOT the VScode one)

Im not sure about how this translates to react native, AFAICT build chains for apps less optimiside, but using vercel for deployment, neon for db if needed, Ive really been digging the ability for any branch/commit/pr to be deployed to a live site i can preview.

Coming from the python ecosystem, ive found the commit -> deployed code toolchain very easy, which for this kind of vibe coding really reduces friction when you are using it to explore functional features of which you will discard many.

It moves the decision surface on what the right thing to build to _after_ you have built it. which is quite interesting.

I will caveat this by saying this flow only works seamlessly if the feature is simple enough for the llm to oneshot it, but for the right thing its an interesting flow.

I hooked up a GitHub repo that's long been abandoned by me and I've just been tinkering with menial stuff - updating dependencies, refactoring code without changing any actual implementation details, minor feature or style updates. It mostly works well for those use cases. I don't know if I'd give it anything important to develop though.

This is exactly why we built superconductor.dev, which has live app preview for each agent. We support Claude Code as well as Gemini, Codex, Amp. If you want to check it out just mention HN in your signup form and I’ll prioritize you :)

I'm making a kind of "Tinder for hiking trails".

I live in Switzerland and am (like many people here) an avid hiker. There are a lot of great hiking websites but they all suffer from the same problem: They are ultimately just a list of hiking routes that you need to plan around. Because I do a hike almost every week, the extra planning has become an overhead that takes time out of my life: how far away is it, what train should I take, whats the weather situation like, do I need to bring snowshoes, etc. The 65,000km of trails in this country also gives me decision paralysis!

So I'm building an app (React native/django) which takes a users current situation and preferences and then algorithmically suggests a few best options for them that they can quickly give a yes/no to. It's integrated with a lot of data like the train timetables, snow data, weather forecast etc.

I was able to reduce an hour of planning down to 5 minutes last week, so it's definitely working for me. What I am currently trying to do is figure out if other people have this problem and there's interest in the app concept.

This sounds great! My partner and I also spend a lot of time just scrolling around the Swiss hiking maps looking for potential routes. I had an idea for better filters (e.g. roundtrip hikes with >1000m elevation <2h by transit) and got as far as displaying hiking and transit data. Are you looking for testers? :)

Absolutely! Send me an email. Address in my profile

Interested...from Italy! some "hike with kids" filters could be interesting too. I don't have much time at the moment, but if you need an help let me know (even just for brainstorming)

Pretty sure people would want to play with it here in Geneva but it would need to expand to covering the French, Italian and Austrian Alps too over time. Keep us posted.