I've just released sanctum 1.0.0 and am taking 2-3 weeks off from hacking on it while I work on a little dumb game to be creative in a different way.
Ask HN: What are you working on? (January 2026)
281–290 of 914 posts
Re: Ask HN: What are you working on? (January 2026)
#282https://techtalksweekly.io/
I'm building a newsletter called Tech Talks Weekly[1] where my readers get one email per week with all the latest Software Engineering conference talks and podcasts[1] published that week.
In January, I've released a paid tier[2] where my subscribers additionally get:
1. Access to my internal database of all the talks and podcasts since 2020 (+48,000 in total) where they can search, filter, sort, and group by title, conference/podcast, view count, date, and duration.
2. See the list of the most-watched talks over the last 7, 30, 90 days, 6 months, and 12 months based on number of views.
3. Get category-based view of new talks & podcasts by tech stack, language, and domain (Software Architecture, Backend, Frontend, Full Stack, Data, ML, DevOps, Security, Leadership and every major language & ecosystem)
[1] https://www.techtalksweekly.io/p/what-is-tech-talks-weekly [2] https://plus.techtalksweekly.io/
Re: Ask HN: What are you working on? (January 2026)
#283Little Snitch clone for Windows and Android.
Re: Ask HN: What are you working on? (January 2026)
#284I've been experimenting with what a serverless cloud platform would look like that networks wasm components using gRPC:
Re: Ask HN: What are you working on? (January 2026)
#285I'm working on https://www.hessra.net/
We've built a new auth platform with some new identity primitives and capability-style tokens using biscuits.
Right now, I'm trying to figure out ways to apply it and am looking into offering integrations with extremely fine-grained access control that wouldn't have it otherwise. So adding a fine-grained access layer in front of stuff like backend-for-frontend (BFF) systems, brownfield stuff with poor auth, or even OAuth stuff that just have really coarse scopes.
Are there any integrations out there that people want but the access control is bad for them? I'll build one for you!
Re: Ask HN: What are you working on? (January 2026)
#286A suite of productivity tools for Claude Code, Codex CLI and similar CLI agents. These solve pain points for me, and I build and share them in the repo[1].
I’ll highlight a couple:
- an “aichat” command group that enables continuing work from a session that is at full context usage, by creating a new session and injecting session lineage pointers so the agent/sub-agent can recover arbitrary full details from ancestor sessions. So no more compacting needed.
- aichat search command: TUI for rust/tantivy-powered full text search across Claude and Codex sessions. CLI/json mode for agents to search for past work.
- Tmux-cli tool + skill to enable CLI agents to interact with scripts (including other agents) running in other Tmux panes. Like Playwright for the terminal. Multiple CLI agents can collaborate/consult etc. Agent can run and interact with interactive CLI scripts.
Re: Ask HN: What are you working on? (January 2026)
#287Earlier quoted context omitted.
This is great. One thing that is not immediately obvious to me is what kind of authentication it supports. Needing to authenticate the caller is the #1 piece of boilerplate that gets in the way of me completing mini-projects. It’s not hard, but it’s definitely a nonzero amount of effort. And this is coming from someone who has implemented many, many auth flows professionally.
It doesn't say because there's no special support for any auth protocols. Long-term I want to have out-of-the-box support for things like OAuth (for user-facing auth) or mutual TLS (for device/service auth). _Technically_ there's currently support for the cryptographic primitives required to do JWT (I added that because I wanted to support WebPush w/ payloads for myself), but those aren't documented because I intend…
Ah makes sense!
> Are there any auth protocols / flows you think would be important to support?
- I think API key passed via basic HTTP auth would get you pretty far. This is ideal for serving machine-machine requests and just requires that both parties can securely store the secret.
- OIDC is great for interactions that happen in the browser or if the function is serving multiple users, but is more complicated to setup and/or use correctly.
OpenID connect is probably the best for contexts where you want something served by multiple users and those users are humans.
> _Technically_ there's currently support for the cryptographic primitives required to do JWT (I added that because I wanted to support WebPush w/ payloads for myself)
This is probably a good intermediate solution FWIW - expose signature verification and HMAC APIs and allow a user to bring in their own implementation.
Re: Ask HN: What are you working on? (January 2026)
#288I've been experimenting with using LLMs for a content recommender system. Specifically I've built a news reader app that fetches news articles from multiple RSS feeds, uses an LLM to first deduplicate and then score them. The user can then rate the articles and those ratings are used as few-shot examples in the LLM scoring prompt. Any resulting low score articles (uninteresting to the user) are hidden by default and…
Nice project.
One thing I’ve always disliked about RSS (and this could actually fix it) is duplicates. When a new LLM model drops for example there are like ~5 blogs about it in my RSS feed saying basically the same thing, and I really only need to read one. Maybe you could collapse similar articles by topic?
Also, would be nice to let users provide a list of feed URLs as a variable instead of hardcoding them.
Re: Ask HN: What are you working on? (January 2026)
#289https://dawnofthe.dad/workout
Been working on a Google-sheet backed workout tracker, which basically makes it easy for me to see what I've done or not done recently and pick the next thing to do. I'm thinking of open sourcing this soon, but need to do some "de-monolithing" first.