Posted by david927 3/30/2025
Ask HN: What are you working on? (March 2025)
https://apps.apple.com/us/app/japan-top-100/id6741251616
Only public on iOS store for now, due to Google requires larger # of testers to authenticate the app.
This app idea came from my last Japan trip. I had a hard time finding good local restaurants (not tourist traps). So I decided to build this app with Japanese-oriented lists, due to lists' lacked of maps, etc. The app actually helped me discover some great spots, since it lists places all over Japan. Please give it a try and let me know if you have any feature requests or ideas.
1. Support on-device RAG to allow chatting with your own documents on mobile offline 2. Support MCP on-device, taking advantage of information that’s (only) available on your phone, like calendar events, health data, etc. These shouldn’t need to be anywhere but on-device. 3. Allow on-device AI to use shortcuts(?)
I think most of the functionality are well served on desktop front with Ollama and LM Studio, but moving these functionality to mobile offers a great learning opportunity.
Motivation for the project:
> This project was born out of the need for a lightweight analytics tool to track internal services on a resource-constrained VPS. Most SaaS analytics products either lack the scalability or exceed their free tier limits when tracking millions of events per month. Minimalytics addresses this gap by offering a minimalist, high-performance solution for resource-constrained environments.
I recently did a Show HN which you can find on my profile.
After using tools like Sentry on apps serving millions of users, I always felt I was missing a cheap and dead simple approach to following what happened in my apps and apis, and basically became my first customer for all of my side projects and even got some friends using it for their SaaS and apps.
I’m sure many of you were asked to engage with some product announcement, hiring post, or whatever on LinkedIn. With SocialWeaver, we remove all friction from that process by letting employees like, share, and comment directly within Slack and Teams. On top of the core use case, marketing teams also get analytics, employee leaderboards, content scheduling, etc.
For whoever aware of recent `tj-actions/changed-files` security incident, I built a mutable-reference scanner that performs a deep scan across branches to identify all third-party GitHub actions used in organization Git projects. The output report can be exported to CSV or JSON (default).
Using mutable references (version tags, main/master/dev etc.) is a security vulnerability that can result in supply-chain attacks.
Project link:
The end goal is a community-focused study/prayer/chill sound generator for an Orthodox Christian audience
At the moment, I've been doing very little. I had been hyperfixated on going "above and beyond" at work, doing close to 60 hours per week when I was only getting paid for 40 since January. I had been hoping that if I had been putting in an excessive amount of effort in terms of productivity, I would get some recognition for it, and more importantly: be given the opportunity to work on professional development things, in terms of, say, classes or training so I could learn more about automated testing. I really want to move towards something more intellectually stimulating the grinding manual process we have - I see so much room to improve. I really just want to learn more things, so I can become a better asset to the my employer, and so I don't feel like I'm just "treading water" in terms of industry knowledge.
Instead of things going that way, I was basically told that doing what I had been doing is... appreciated... but doesn't really change anything, because no one had asked or expected me to do it.
It was demoralizing to get the brush off in that way, but I've decided the best course of action then, is to forge my own way. Do the hours I'm required to do (and do them sincerely well), but put that creative hunger into building a website, building some repos, and finding my own way forward.
At this point, I've already bought a domain. Now I just need to figure out how to build one, and start making some cool stuff.
Its hard to set tone through text... I'm not bitter about what happened, everything they said was technically true. Heck, I'm not even angry about it. It was naive of me to get my hopes up thinking I would get my way, if I put in the effort up front. It just feels... bad to not really feel any kind of positive reinforcement for professional development, or even for working as hard as I’ve been working for the past 3-ish months. In fairness, what they said isn't unreasonable, but it sucks they don't want to invest into me, the way I invested into them.
Recon Wave basically finds and scans all their services - DNS, IPs, Apps, Ports - and notify customers when it breaks some policy (aka. "no ports than 443 should be open") or when some service is straight vulnerable.
I'm former security engineer and I hated all that "critical reports" that reported missing CSP header.
We're now playing with an idea to build LLM pentesting agent that could run agains the whole infra of our customers.
What we build is primarily focused on companies that have at least hybrid stack - some on prem, some in cloud. If you completely behind load balancer and have strict change management, we can't bring you any value.
In ideal world, we wouldn't have any business. But oh boy... Companies host wild stuff.
Every single conversation I had with clients ended up with us showing some of their infra and the response was "wow, we didn't know this is ours".
Said every security company ever. :)