Where's the source code for the database itself? Looks like the repo is just a client.
Congrats on the launch!
HN user
Programmer. Hacker. Building RunReveal, the Security Data Platform
https://runreveal.com
https://twitter.com/Caust1c
https://www.abraithwaite.netWhere's the source code for the database itself? Looks like the repo is just a client.
Congrats on the launch!
I’d like it to eventually pay for itself [...] — but that’s a problem for later.
Hard pass from me dawg. If you don't know the business model now, folks like me are tired of trusting their data to randos on the internet without a plan for sustainability. Guaranteed to end up being just another data farm.
Neat you got the domain tho.
I'm getting tired of everyone saying "MCP is dead, use CLIs!".
Yes, MCP eats up context windows, but agents can also be smarter about how they load the MCP context in the first place, using similar strategy to skills.
The problem with tossing it out entirely is that it leaves a lot more questions for handling security.
When using skills, there's no implicit way to be able to apply policies in the sane way across many different servers.
MCP gives us a registry such that we can enforce MCP chain policies, i.e. no doing web search after viewing financials.
Doing the same with skills is not possible in a programatic and deterministic way.
There needs to be a middle ground instead of throwing out MCP entirely.
Disclaimer: OP (Caust1c) is not Jitesh, just following hn recommendations w/ post titles.
FYI man, alright. You could sit at home, and do like absolutely nothing, and your name goes through like 17 computers a day. 1984? Yeah right, man. That's a typo. Orwell is here now. He's livin' large. We have no names, man. No names. We are nameless!
I watched this video yesterday corroborating this story and I gotta say the evidence is pretty hard to refute:
https://www.youtube.com/watch?v=7ws8Grsc4jU
Purposefully devaluing the dollar to make US goods more globally marketable and hide the Japanese debt crisis is an interesting but risky strategy.
Currently, I'm glad to see a correction without panic, but it's too early to make a call on the effect on the overall global economy. Xi's already suggested making the Yuan a global reserve currency, and seeing as much debt they're holding, I'm a little worried they're able to make it happen if this is the US financial strategy.
The sequence of events: Elon doing a leveraged buyout of X, then xAI funding, then debt transfers to X, then the xAI–X stock deal. Now the proposed SpaceX–xAI merger appears to have shifted X’s financial burden from Musk personally toward xAI investors and, potentially, future SpaceX shareholders.
This is speculative, of course, but yeah seems likely.
it prevents entire classes of bugs where IDs get mixed up across services.
~Does this really happen for people? I haven't ever seen this class of bug, and shudder to think of how it happens in code. Sure support tickets are nicer with the prefix, but how would a bug manifest in the code itself?~
Edit: of course it can happen with `new.id = old.id` where new and old are different types, now that I think about it after coffee. However, I'd be hesitant to claim that this prevents those bugs, instead I'd argue that it simply makes them easier to identify.
Also, KSUID has been around since before UUIDv7 and seems to meet all of the author's same requirements and has many client libraries already. Guess people doing research on it still aren't able to find it, or just want to do their own anyway which is cool too.
Video of the visualization https://x.com/_lyraaaa_/status/1993858890421727738
Definitely not malware: https://www.star-history.com/#openagents-org/openagents&type...
If you find the OP interesting, you might find Project Kamp more interesting:
https://projectkamp.com/mission.html
The OP seems like the academic approach to what project kamp is learning by doing: They're attempting to build a community that's eventually completely self sufficient on a fairly limited land space, and documenting the whole process.
This is exactly it. AI is sniffing out the good datamodels from the bad. Easy to understand? AI can understand it too! Complex business mess with endless technical debt? Not too much.
But this is precisely why we're seeing startups build insane things fast while well established companies are still questioning if it's even worth it or not.
When you're talking the size of investment that AI-centric companies have received, on the order of hundreds of billions of dollars, there's no way it's not exposed to the wider market.
But I agree with you, the article is too light on details for how inflammatory it is.
Super curious how they enforce the security story here. Doesn't seem easy to hoover up the context needed for individual users to keep private chats private. Maybe they search dynamically based on the prompt like Claude Code does?
Seems hard without creating an embedding on slack topics and synonyms.
Wait, what? A database in 2025 doesn't support any kind of auth? A financial database? WTF?
C'mon folks, the least you can do is put a guide for adding an auth proxy or auth layer on your site.
Particularly since you don't use HTTP (cant easily tell from the docs, I'm assuming), then folks are going to be left wondering: "well how the hell do I add an auth proxy without HTTP" and just put it on the open internet...
Good research. I'm glad people are hopping on this. Lots of surface area to cover and not enough time!
~That's a good way to launder money.~
Err, tumble money. Err, that's a good internet gag.
100% agree. It should be an optional argument for your logging library and handled one time there to be used everywhere.
Django + REST framework is what I cut my teeth on doing web programming in my first job. It's a wonderfully written codebase, I'm very thankful I had some great code to learn from, and it wasn't even 10 years old then, I didn't even realize.
Congrats team! Glad to see it's still thriving and a great option to pick up for beginners.
Yes, unfortunately it's pretty trivial. Any time arbitrary file write is possible, RCE is usually possible too.
It's incredible for investigating audit logs. Our customers use it daily.
https://blog.runreveal.com/introducing-runreveal-remote-mcp-...
In my mind the only thing novel about MCP is requiring the schema is provided as part of the protocol. Like, sure it's convenient that the shape of the requests/response wrappers are all the same, that certainly helps with management using libraries that can wrap dynamic types in static types, but everyone was already doing that with APIs already we just didn't agree on what that envelope's shape should be. BUT, with the requirement that schema be provided with the protocol, and the carrot of AI models seamlessly consuming it, that was enough of an impetus.
Spencer is an engineer at ClickHouse, so it makes sense.
You got this, best of luck! Engineers with ClickHouse knowledge are def in short supply right now.
To job seekers, this is your sign. Learn about how ClickHouse works. If you know SQL, you're halfway there. The other half is learning ClickHouse's data storage model which is what gives it it's efficiency.
HN has polls?
This anecdote corroborates my theory that it will still be critical to become an expert in your field. Everyone is treating AI like it's a zero-sum game with regards to jobs being "lost" to AI, but the reality is that the best results will come from experts in the field who have the vocabulary and knowledge to get the best answers.
My fear is that people treat AI like an oracle when they should be treating it just like any other human being.
So build your own crappy agent-assistant?
In earnest though, I'm certain we'll see a community replacement of Siri by end-of-year if the iPhone permissions model allows it or there's some workaround. IDK what the limitations are here but I'm eagerly awaiting the community to step in where Siri has failed.
Thanks for clarifying, best of luck!
How does the deduplication itself work? The blog didn't have many details.
I'm curious because it's no small feat to do scalable deduplication in any system. You have to worry about network latencies if your deduplication mechanism is not on localhost, the partitioning/sharding of data in the source streams, and handling failures writing to the destination successfully, all of which cripples throughput.
I helped maintain the Segmentio deduplication pipeline so I tend to be somewhat skeptical of dedupe systems that are light on details.
https://www.glassflow.dev/blog/Part-5-How-GlassFlow-will-sol...
Check out redpanda connect / warpstream bento (depending on your license needs). Both came out of what was benthos.