Show HN: A Chrome extension to open a link without leaving your real footprints (chromewebstore.google.com)

We do have tools in every step of the sdlc so we can find issues as early as possible. Anything that is exploitable and left unmatched is a compliance violation so we take it very seriously. That said, exploitability is very (expensive) hard to proof, so in practice we try to mitigate via upgrading instead of long pointless discussions about risk. The second thing this forces us, is to look at complexity and tech-debt in a new light.

megamix · 35d ago

And in what industry/sector (possibly markets) are you mainly operating in ?

nextts · 35d ago

Yes get chased up about it by security teams. Internal or external apps.

2rsf · 35d ago

It's mandatory as part of the SDLC and support by appropriate tooling, unfixed higher level vulnerabilities are periodically tracked by middle-upper management

comprev · 33d ago

Tools in the pipelines detect and report on CVEs found.

We block high/critical by default and the rest are given a deadline to be resolved in agreement with security.

Show HN: Beatsync – perfect audio sync across multiple devices (github.com)

Show HN: A Chrome extension that will auto-reject non-essential cookies (blog.bymitch.com)

Show HN: An MCP server for understanding AWS costs

Show HN: AgenticSeek – Self-hosted alternative to cloud-based AI tools (github.com)

Show HN: An interactive demo of QR codes' error correction (qris.cool)

Show HN: Sim Studio – Open-Source Agent Workflow GUI (github.com)

Show HN: I built a hardware processor that runs Python (runpyxl.com)

Show HN: Built a API that returns your GitHub Contribution chart (github.com)

Show HN: CodeClarity – an open source source code analysis platform (codeclarity.io)

Show HN:I Open Sourced Deepwiki (github.com)

Show HN: Flowcode – Turing-complete visual programming platform (app.getflowcode.io)

Show HN: Heart Rate Zones Plus – The first iOS app I developed (apps.apple.com)

Show HN: Web-eval-agent – Let the coding agent debug itself (github.com)

Show HN: A Chrome extension to open a link without leaving your real footprints (chromewebstore.google.com)

Show HN: Generate discord timestamp that converts to each user's local timezone (discordtimestamp.cc)

Show HN: Neurox – GPU Observability for AI Infra (github.com)

Show HN: A pure WebGL image editor with filters, crop and perspective correction (github.com)

Show HN: Tariff Calculator for Amazon (twitter.com)

Show HN: I486SX_soft_FPU – Software FPU Emulator for NetBSD 10 on 486SX (github.com)

Show HN: Daily Jailbreak – Prompt Engineer's Wordle (vaultbreak.ai)

Show HN: Autarkie – Instant grammar fuzzing using Rust macros (github.com)

Show HN: A Common Lisp implementation in development, supports ASDF (savannah.nongnu.org)

Show HN: I made a web-based, free alternative to Screen Studio (screenrecorder.me)

Show HN: I created snapDOM to capture DOM nodes as images with exceptional speed (github.com)

Show HN: My self-written hobby OS is finally running on my vintage IBM ThinkPad (github.com)

Show HN: Rad Type - Can we make gamepad typing fast? (tyleo.com)

Show HN: Remote-Controlled IKEA Deathstar Lamp (gitlab.com)

Show HN: Neuro Tools, a collection of tools to help neurodivergent people (neurotools.app)

Show HN: Bhvr, a Bun and Hono and Vite and React Starter (bhvr.dev)

Show HN: I built an AI that turns GitHub codebases into easy tutorials (github.com)

Show HN: I made an app to learn guitar scales (guitartonic.com)

Show HN: Auto-fix your GitHub PR issues with Proton for FREE (proton.codes)

Show HN: POC to scrape and structure HTML into JSON for RAG (structured.pages.dev)

Show HN: BitNote – Using browsers and blockchains to store secrets (github.com)

Show HN: GS-Calc – A modern spreadsheet with Python integration (citadel5.com)

Show HN: Dish – A simple HTTP and TCP endpoint monitoring tool (written in Go) (blog.vxn.dev)

Show HN: Xilt – A concurrent log parser written in Go (github.com)

Show HN: NanoAgent, zero-dependency 1k-LOC AI-agent runtime (github.com)

Show HN: Discorss – RSS Feeds for Discord (discorss.fldr.zip)

Show HN: Photorealistic ray-traced micro-voxel FPS (github.com)

Show HN: Colanode, open-source and local-first Slack and Notion alternative (github.com)

Show HN: Classic games that look like a spreadsheet for office workers (boredspreadsheet.com)

Show HN: Rowboat – Open-source IDE for multi-agent systems (github.com)

Show HN: Logchef – Schema-agnostic log viewer for ClickHouse (github.com)

Show HN: Zotero-MCP – Connect Your Research Library with Your AI Assistant (github.com)

Show HN: Formalizing Principia Mathematica using Lean (github.com)

Show HN: Empty Enter Expander – Type less in the terminal with this tool (github.com)

Show HN: I used OpenAI's new image API for a personalized coloring book service (clevercoloringbook.com)

Show HN: Morphik – Open-source RAG that understands PDF images, runs locally (github.com)

Show HN: Wrap Notes – One big text file with multiple projections (wrapnotes.app)

Ask HN: How much do you care about CVE in your team?

Comments (5)