Ask HN: What Are You Working On? (April 2026)

VCamper: use LLMs to spot security fixes before CVE publication

Once a patch for a security vulnerability is public, the patch itself can reveal the vulnerability before the CVE is published. VCamper uses a staged LLM pipeline to analyze a Git commit range and flag likely vulnerability patches, even when they look like routine changes.

It’s still a proof of concept, but on known cases like curl CVE-2025-0725 it got close to the published root cause from the patch alone.

This matters because LLMs could make it much harder to keep security fixes quiet: once the patch is public, the bug may be recoverable almost immediately. Quietly shipping a fix and hoping it stays under the radar may stop being a reliable strategy.

https://github.com/rndhouse/vcamper

Building something that finally stops making me the tester for my own AI. You know that moment where the AI finishes writing code and then goes "can you run this and check if it works?" I got tired of that loop. So I built an IDE that just... runs it, clicks through it, finds what broke, and fixes it. You watch. Not Better Cursor , But what comes after it.

I've got a mobile app.

It allows you to get a wake up call from someone friendly, somewhere out there in the world.

It's got a handful of regular users and it's mostly me making the calls, but it's great fun to wake people up!

No phone number required - these are VoIP calls via the app.

Built it because I think it's cool.

Also see:

3 days ago, 220 comments: https://news.ycombinator.com/item?id=47700460

5 days ago, 51 comments: https://news.ycombinator.com/item?id=47679021

8 days ago, 21 comments: https://news.ycombinator.com/item?id=47639039

11 days ago, 22 comments: https://news.ycombinator.com/item?id=47600204

[dead]