Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: What are you working on? (September 2025)

news.ycombinator.com

Post reply on HN
Print view View original

431–440 of 1001 posts

Re: Ask HN: What are you working on? (September 2025)

#431

Post by ymyms »

AceJohnny2 wrote: post #421
ymyms wrote: post #419

biscuit-based identity and authorization I’m working on https://www.hessra.net/ , an identity + authorization service built around [Biscuits]( https://www.biscuitsec.org/ ) instead of JWTs. The goal is to decompose auth primitives so they’re easier to use in service-to-service cases, while also showing off what Biscuit tokens make possible. JWTs feel like problems waiting to happen. I think biscuits give stronger gua…

Are Eclipse Biscuits related to Google Macaroons? https://research.google/pubs/macaroons-cookies-with-contextu... (what a word salad that is...)

Biscuits are in the same family as macaroons in that they are bearer tokens that can be attenuated offline, but they go further. A biscuit carries a chain of signed “blocks” that can contain facts, rules, and checks in a small Datalog-like logic language. That lets the token itself express richer authorization context, not just restrictions.

Key differences from macaroons:

- Crypto model: Macaroons use HMAC, so every verifier needs the shared secret. Biscuits use public/private keypairs so any verifier with the public key can check validity.

- Expressiveness: Macaroons only add caveats (restrictions). Biscuits can encode facts, rules, and checks, enabling more complex policies to travel with the token. so you can attest and attenuate (and do some other tricky stuff if you want)

- Delegation: Both support attenuation, but biscuits do it with signed blocks that are verifiable and can be chained across services.

So conceptually similar, but biscuits aim to be more decentralized and policy-rich.

Re: Ask HN: What are you working on? (September 2025)

#432

Post by Liftyee »

I'm working on exploring an exploit in physical security systems that I haven't seen anyone investigate before (at least, not published on the internet). It's involved an interesting combination of reverse engineering, pentesting and regular prototyping/hardware development.

Currently writing a run-through of it to publish on my website. I'm not sure how secretive to be - I think I just want to be the first to actually release my findings. In my post I'll detail the steps to reproduce my results so more people can look into this.

So far I haven't found any critical ways to (ab)use this access control system weakness, as it only typically applies to the outer layer of physical security.

Re: Ask HN: What are you working on? (September 2025)

#433

Post by mavilia »

- Active recall studying app that allows a user to practice active recall[0]. The app hides user provided content at first and asking the user to try to remember all they can before reading the content. Then the user goes through the material slowly revealing each paragraph from their input. At the end they try to actively remember what they learned and can even compare to what they knew at the start.

- Mixtape sharing platform for midwest emo[1] which is a genre I've really gotten into over the past few years. The community is pretty strong on YouTube for creating "mixtapes" so I wanted a spot that was just for these videos.

- PhotoForge[2] Photographer's companion app which can help me choose photos using a Tinder-esque swiping mechanism. It also has some AI stuff for generating Instagram descriptions. Finally has a watermark tool. Still trying to think of other stuff to add. This was an AI code weekend project so it's like a house on stilts at the moment but I plan to give it some more love soon

[0] - https://www.youtube.com/watch?v=CXdpSfDWbGY

[1] - https://www.youtube.com/watch?v=KS4M4WpmrY4

[2] - https://www.photoforge.fun/

Re: Ask HN: What are you working on? (September 2025)

#435

Post by jwpapi »

I’m solo-coding the clear commercial project smmdealfinder.com which is not ground-breaking or amazing as these other great projects here, but its been an amazing journey for me personally for the last 18 months and has developed me probably from a junior engineer to senior+/staff.

Whilst I’m recently really critical of most AI posts here, this wouldn’t have been possible without AI, but mainly because AI could feed my curiosity and barely any riddle was unsolvable, when I put it into pieces and combined it with debugging (and checking docs). Actually most riddles on my level weren’t unsolvable before, but AI reduced the friction and speed of learning for me. This actually goes beyond coding. In life I just ask and learn a lot about, washing, cooking and domain-specific terms.

Re: Ask HN: What are you working on? (September 2025)

#436

Post by wd776g5 »

thgil wrote: post #362

https://sumostats.com a fun side project to track Sumo stats. Every two months there’s a 15-day tournament where 670 rikishi(sumo wrestler) fighting ~160 matches each day. I’m recording all the results and kimarite (winning moves) into a browsable database with charts and videos. Recently I have been using Gemini to process and edit the daily match videos. It works surprising well. It can detect the start/end of each…

Sumo fan here, this is cool. UI is great. I assume you know about sumodb? I don't say that to discourage you, but people are tracking stats.

Since you are good at UI, here's something I would really like: a Natto-style page for each bout that I can manually page through as I watch the basho. Since Natto is underground, I have to watch the basho on NHK or Abema or via Kintamayama - all fine, but I miss the Natto graphics. If you could do that in a way that I could tap through each match, I'd use it every day of the basho and I think so would everyone on r/sumo.

BTW if you don't know what I'm talking about, reach out and I will explain.

Re: Ask HN: What are you working on? (September 2025)

#437

Post by psychoslave »

Esperanto havas la mal- prefikso por krei specialcelan antonomion, sed la rezulto ofte mankas klarecon, kaj kiel morfemo mal mem estas morale kondamna: komparu malica, maligna, malversacio kie mal ne estas sinkrone disigebla.

Tial mi vorkas por krei liston de ĉiuj mal- vortoj kun sen mal- alternativoj. Fakte ĝi ankaŭ povas servi la kontraŭan celon, provizi pli ĝeneralajn mal- vortojn kiam oni deziras krei verkon pli facile akirebla de ĉia nivelo.

Mi planas eldoni ĝin denove ĉe https://eo.wiktionary.org/wiki/Aldono:Pri_antonimoj kiam mi finis, sed nun estas pli facila progresi per citilaj kaj vidŝangaj kromaĵoj ja provizata ĉe https://fr.wikiversity.org/w/index.php?title=Utilisateur:Psy...

Re: Ask HN: What are you working on? (September 2025)

#438

Post by Brajeshwar »

bobnarizes wrote: post #234

Building https://fallinorg.com/ , a Mac app that organizes your files. It looks inside each file to see what it’s about, then moves it to the right folder for you. Everything happens on your Mac, so nothing leaves your computer. No clouds, no servers. It already works with PDFs, text, Markdown, and many other file types. Next I’m adding ePub, and later Microsoft Office and iWork support. If you have messy folders any…

I pride myself on being pretty well organized with my digital life, especially files and folders. I’ve been using Hazel (God Knows, since it's beta). Recently, I realized it has become a muscle memory for me to name/rename files, and drop them where they belong while I'm working on or as it happens. This works for me now because I have a weekly routine of digital chores that picks up any slack and missing things that I missed during my days. Compound this with the fact that I have reduced a lot of clutter, minimized things that I’m involved in. That worked. I did away with Hazel since the beginning of 2025 and I didn’t missed it.

However, I’ve been sheepishly and shamefully looking at either an AI-assisted solution to even do away with the last mile cleanups and organization that I do.

Your text above is good enough marketing for me, and your website’s content sealed it. Didn’t even look further. I’m your customer now. And, personally, have always loved supporting other founders/builders building interesting tools and utilities.

Edit: I just realized this is not compatible with Intel Macs which I wanted to use on too. I didn’t read everything on the website, did I?

Suggestion: Please send me an email after successful purchase, so I have a record.

Re: Ask HN: What are you working on? (September 2025)

#439

Post by oidar »

cjflog wrote: post #398
oidar wrote: post #27

Earlier quoted context omitted.

Looking at the tofu reports, I really don't know what to make of them. Is there a way to give more meaning to them for the average person? Also, I'd love to see a sort by "almost funded" option.

Thanks for the feedback. Yes, data readability is on the roadmap!

Your blog doesn't seem to expose an RSS feed - I'd like to follow your progress.

Re: Ask HN: What are you working on? (September 2025)

#440

Post by cookiengineer »

tomxor wrote: post #103
cookiengineer wrote: post #36

I am working on my Go UI library called gooey [1] which aims to be a one stop framework to build webview/webview apps in Go and WebASM. It started out with bindings for the DOM, Web, and Browser APIs, but as of today I now have custom Web Components support (which is a big deal considering Go's type system quirks). Tomorrow I'm gonna polish some of the UI components and start refactoring my git-evac [2] repo manageme…

> Components are bad for web accessibility (aria- property fatigue). I've been using web components as a vehicle to automate and auto validate accessibility aspects as much as possible, because I think the only way to truly make things sustainably accessible is to find a way to unburden the developer by either inferring as much as possible or making validation a natural part of development rather than a separate test…

The UI components that I wrote initially are just wrappers for the Browser provided input/form elements. As I'm relying on webview/webview to build desktop apps out of it, that also kind of implies WebKitGTK4 on Linux, WebKit on MacOS, and WebView2 (Edge) on Windows.

These work quite nicely together with a screen reader because you don't have to intercept the focus event (or others) that people browsing in caret mode or similar would use to navigate the page.

Additionally I decided to make single page applications using a main and section[data-view] elements so that the HTML and CSS alone is enough to hint screen readers on what's visible and so that there are no javascript codes necessary to tween things around, the JS/WebASM side of things literally just sets a data-view property on the main element.

The whole idea behind gooey and the way it is structured is:

- all states must be serializable in HTML

- Static HTML and CSS makes the page usable (apart from web forms and REST APIs, that's developer provided code)

- Dynamic WebASM on top essentially translates the DOM to be interactive, so that things can be animated based on changing data or streams coming from the backend. All interactivity is rendered directly into the DOM, so that it can be serialized again at all times.

- Communication between Client and Server is JSON or any other Go implemented Marshaller, and using Fetch API behind the scenes.

I decided on purpose to not provide XMLHTTPRequest and other old APIs because I'm relying on WebASM and "modern Browser engines" anyways. This way I kinda force users of gooey to use modern JS from the WebASM context and I save a whole lot of trouble with compatibility issues (and don't get into the unsemantic div fatigue like React does, for example).

Post reply on HN