HN user

caust1c

3,284 karma

Programmer. Hacker. Building RunReveal, the Security Data Platform

    https://runreveal.com
    https://twitter.com/Caust1c
    https://www.abraithwaite.net
Posts79
Comments312
View on HN
antirez.com 2mo ago

A few words on DS4

caust1c
440pts190
jitesh117.github.io 4mo ago

I Built Google File System in Go: One File, Zero Dependencies

caust1c
3pts1
twitter.com 5mo ago

Anyone get refunds from OpenAI they didn't request?

caust1c
3pts0
github.com 7mo ago

3D visualization of audio latent spaces (AI Vector Map of Audio)

caust1c
3pts1
www.kron4.com 8mo ago

A blimp from LTA Research was spotted flying over San Francisco Bay

caust1c
1pts0
projectkamp.com 9mo ago

Project Kamp

caust1c
2pts0
blog.runreveal.com 10mo ago

How We Built Our Model-Agnostic Agent for Log Analysis

caust1c
1pts0
calv.info 11mo ago

The Coding Agent Metagame

caust1c
4pts0
www.monad.com 1y ago

Monad Acquires Tarsal

caust1c
1pts0
blog.runreveal.com 1y ago

RunReveal AI Agent and Chat for Analyzing TBs of Security Logs

caust1c
1pts0
clickhouse.com 1y ago

ClickHouse raises $350M Series C

caust1c
119pts102
sketch.dev 1y ago

A Lightweight Merge Queue Using GitHub Actions

caust1c
1pts0
blog.runreveal.com 1y ago

Building a Multi-Modal API to Support MCP Using Go Generics

caust1c
2pts0
frame.work 1y ago

Framework Computers: Tariff-driven price changes for US customers

caust1c
47pts0
terinstock.com 1y ago

Netboot Windows 11 with iSCSI and iPXE to play Games

caust1c
2pts0
blog.cloudflare.com 1y ago

Over 700M events/second: How Cloudflare makes sense of too much data

caust1c
13pts1
www.servethehome.com 1y ago

They Let Me Bring a Camera into a Top Classified US Supercomputer El Capitan

caust1c
3pts0
xeiaso.net 1y ago

Apple squandered the Holy Grail

caust1c
423pts557
arxiv.org 1y ago

4.5M Fake Stars in GitHub: Popularity Contests, Scams, and Malware [pdf]

caust1c
4pts2
www.youtube.com 1y ago

Zelda Majora's Mask's Improbable Blue Dog Win Analyzed [video]

caust1c
1pts0
www.imperialviolet.org 1y ago

A Tour of WebAuthn

caust1c
299pts150
badkeming.com 1y ago

A site for kerning's so bad it's keming, plus other typographical failures

caust1c
2pts1
github.com 1y ago

Reaper: An Open Source AI-Enhanced Pentesting Tool by Ghost Security

caust1c
1pts0
www.theguardian.com 1y ago

US startup charging couples to 'screen embryos for IQ'

caust1c
48pts46
hackaday.com 1y ago

What Happened to Duracell Powercheck?

caust1c
5pts0
www.anandtech.com 1y ago

The Ultimate Hacking Keyboard Review (2020)

caust1c
3pts0
hackaday.com 1y ago

Flying Lotus Is a Framework-Powered Portable All-in-One Computer

caust1c
1pts1
shkspr.mobi 1y ago

Giving the Finger to MFA – A Review of the Z1 Encrypter Ring from Cybernetic

caust1c
2pts0
terinstock.com 1y ago

When Serial Isn't RS-232, Geocaching with the Garmin GPS 95

caust1c
101pts35
blog.jgc.org 2y ago

Fixing the iPhone 13 Pro cameras by putting it in the freezer

caust1c
2pts0

I’d like it to eventually pay for itself [...] — but that’s a problem for later.

Hard pass from me dawg. If you don't know the business model now, folks like me are tired of trusting their data to randos on the internet without a plan for sustainability. Guaranteed to end up being just another data farm.

Neat you got the domain tho.

I'm getting tired of everyone saying "MCP is dead, use CLIs!".

Yes, MCP eats up context windows, but agents can also be smarter about how they load the MCP context in the first place, using similar strategy to skills.

The problem with tossing it out entirely is that it leaves a lot more questions for handling security.

When using skills, there's no implicit way to be able to apply policies in the sane way across many different servers.

MCP gives us a registry such that we can enforce MCP chain policies, i.e. no doing web search after viewing financials.

Doing the same with skills is not possible in a programatic and deterministic way.

There needs to be a middle ground instead of throwing out MCP entirely.

FYI man, alright. You could sit at home, and do like absolutely nothing, and your name goes through like 17 computers a day. 1984? Yeah right, man. That's a typo. Orwell is here now. He's livin' large. We have no names, man. No names. We are nameless!

The Great Unwind 6 months ago

I watched this video yesterday corroborating this story and I gotta say the evidence is pretty hard to refute:

https://www.youtube.com/watch?v=7ws8Grsc4jU

Purposefully devaluing the dollar to make US goods more globally marketable and hide the Japanese debt crisis is an interesting but risky strategy.

Currently, I'm glad to see a correction without panic, but it's too early to make a call on the effect on the overall global economy. Xi's already suggested making the Yuan a global reserve currency, and seeing as much debt they're holding, I'm a little worried they're able to make it happen if this is the US financial strategy.

xAI joins SpaceX 6 months ago

The sequence of events: Elon doing a leveraged buyout of X, then xAI funding, then debt transfers to X, then the xAI–X stock deal. Now the proposed SpaceX–xAI merger appears to have shifted X’s financial burden from Musk personally toward xAI investors and, potentially, future SpaceX shareholders.

This is speculative, of course, but yeah seems likely.

it prevents entire classes of bugs where IDs get mixed up across services.

~Does this really happen for people? I haven't ever seen this class of bug, and shudder to think of how it happens in code. Sure support tickets are nicer with the prefix, but how would a bug manifest in the code itself?~

Edit: of course it can happen with `new.id = old.id` where new and old are different types, now that I think about it after coffee. However, I'd be hesitant to claim that this prevents those bugs, instead I'd argue that it simply makes them easier to identify.

Also, KSUID has been around since before UUIDv7 and seems to meet all of the author's same requirements and has many client libraries already. Guess people doing research on it still aren't able to find it, or just want to do their own anyway which is cool too.

If you find the OP interesting, you might find Project Kamp more interesting:

https://projectkamp.com/mission.html

The OP seems like the academic approach to what project kamp is learning by doing: They're attempting to build a community that's eventually completely self sufficient on a fairly limited land space, and documenting the whole process.

This is exactly it. AI is sniffing out the good datamodels from the bad. Easy to understand? AI can understand it too! Complex business mess with endless technical debt? Not too much.

But this is precisely why we're seeing startups build insane things fast while well established companies are still questioning if it's even worth it or not.

Claude and Slack 10 months ago

Super curious how they enforce the security story here. Doesn't seem easy to hoover up the context needed for individual users to keep private chats private. Maybe they search dynamically based on the prompt like Claude Code does?

Seems hard without creating an embedding on slack topics and synonyms.

Wait, what? A database in 2025 doesn't support any kind of auth? A financial database? WTF?

C'mon folks, the least you can do is put a guide for adding an auth proxy or auth layer on your site.

Particularly since you don't use HTTP (cant easily tell from the docs, I'm assuming), then folks are going to be left wondering: "well how the hell do I add an auth proxy without HTTP" and just put it on the open internet...

100% agree. It should be an optional argument for your logging library and handled one time there to be used everywhere.

Django + REST framework is what I cut my teeth on doing web programming in my first job. It's a wonderfully written codebase, I'm very thankful I had some great code to learn from, and it wasn't even 10 years old then, I didn't even realize.

Congrats team! Glad to see it's still thriving and a great option to pick up for beginners.

In my mind the only thing novel about MCP is requiring the schema is provided as part of the protocol. Like, sure it's convenient that the shape of the requests/response wrappers are all the same, that certainly helps with management using libraries that can wrap dynamic types in static types, but everyone was already doing that with APIs already we just didn't agree on what that envelope's shape should be. BUT, with the requirement that schema be provided with the protocol, and the carrot of AI models seamlessly consuming it, that was enough of an impetus.

You got this, best of luck! Engineers with ClickHouse knowledge are def in short supply right now.

To job seekers, this is your sign. Learn about how ClickHouse works. If you know SQL, you're halfway there. The other half is learning ClickHouse's data storage model which is what gives it it's efficiency.

This anecdote corroborates my theory that it will still be critical to become an expert in your field. Everyone is treating AI like it's a zero-sum game with regards to jobs being "lost" to AI, but the reality is that the best results will come from experts in the field who have the vocabulary and knowledge to get the best answers.

My fear is that people treat AI like an oracle when they should be treating it just like any other human being.

So build your own crappy agent-assistant?

In earnest though, I'm certain we'll see a community replacement of Siri by end-of-year if the iPhone permissions model allows it or there's some workaround. IDK what the limitations are here but I'm eagerly awaiting the community to step in where Siri has failed.

How does the deduplication itself work? The blog didn't have many details.

I'm curious because it's no small feat to do scalable deduplication in any system. You have to worry about network latencies if your deduplication mechanism is not on localhost, the partitioning/sharding of data in the source streams, and handling failures writing to the destination successfully, all of which cripples throughput.

I helped maintain the Segmentio deduplication pipeline so I tend to be somewhat skeptical of dedupe systems that are light on details.

https://www.glassflow.dev/blog/Part-5-How-GlassFlow-will-sol...

https://segment.com/blog/exactly-once-delivery/