Wednesday, February 15, 2023

Tuesday, February 14, 2023

Show HN: Openapi.security, a fast security checker for REST-based API https://ift.tt/K50NquE

Show HN: Openapi.security, a fast security checker for REST-based API tl;dr we released openapi.security, an online tool that performs a dozen of security tests on any given openapi/swagger-based API, with no signup or email required. You can try it here: https://ift.tt/x5r6ldH My team at Escape (YC W23) is mainly focused on securing GraphQL APIs. For this, we developed a new approach called Feedback driven API Exploration. Basically, we infer the right security tests cases to run using the specification and a carefully crafted in house graph traversal algorithm. (It's a bit long to describe here but we published a more in depth explanation of how this algorithm works in our blog!) We recently wondered if this Feedback Driven Exploration approach could be efficiently applied to good old REST APIs as well. From our experience, well designed GraphQL and REST APIs are quite equivalent: both have an organized data structure and explicit relationships between objects. So why wouldn't it work? We often organise internal hackathons. So this time, we focused on this experiment, adapting our algorithm to REST and ending up creating our last side project: OpenAPI.security. It is a very simple tool: anybody can enter an OpenAPI / Swagger spec, and openapi.security will run a bunch of security tests on it and give back a report. It's designed to be fast and smart in the way it analyzes input specs. https://ift.tt/x5r6ldH February 15, 2023 at 12:28AM

Show HN: I built a little online drum machine using 808 style samples https://ift.tt/dIzoLQG

Show HN: I built a little online drum machine using 808 style samples https://peel.fm February 15, 2023 at 01:34AM

Show HN: I made an extension for browser bookmarks https://ift.tt/WA6EDYG

Show HN: I made an extension for browser bookmarks Hello HN! I have just released my browser extension. FavBox - is a bookmark management tool with a clean and modern UI. Absolutely compatible with default browser bookmarks has no third-party services, and still syncs with the browser profile. Free and open source. Chrome Web Store https://ift.tt/nQEa9ti... https://ift.tt/o04vueL February 14, 2023 at 05:01PM

Monday, February 13, 2023

Show HN: I made a game, Tippy Coco https://ift.tt/FLYIfMT

Show HN: I made a game, Tippy Coco Tippy Coco is a volleyball game in the browser. You can play with a friend at the same keyboard, or solo challenge the built-in opponents. As for the tech: it's all TypeScript + HTML5. I did not use a game engine; I just made a game loop with setTimeout and the artwork is all just png's drawn on the canvas. The sound is played through the HTML audio API. Input is watching keyboard events and the Gamepad API. One thing: I know this is 2023 but it's not a game for phones. It's for a laptop or desktop PC with a physical keyboard. It also works ok on an iPad with a physical keyboard. Tippy Coco is free and without ads. The code is available (MIT license) at https://ift.tt/OIFqsw9 https://tippycoco.com February 14, 2023 at 03:23AM

Show HN: Generate User Interface Components with GPT-3 https://ift.tt/FfJasXi

Show HN: Generate User Interface Components with GPT-3 I’m building an experimental tool that can generate a UI component from a high-level text description, i.e. “Design a card for viewing goals in a goal tracking application”. Basically, stable diffusion but for user interface components instead of images. This tool is at best a proof of concept. It currently only generates a single type of component (small cards that have basic info about an object), but the goal is to be able to design entire applications (either in one fell swoop or by piecing together components that the tool generates). The components it generates can be exported as react code. You can also have it modify an existing design. The tool isn't useful yet but it's somewhat fun to play around with. Having it generate a component rather than an entire screen made the problem easier but I'm not sure if there are any users that this would appeal to. I could see it appealing to developers who lack design and CSS skills and want to quickly build a decent looking frontend for their app. Looking forward to hearing what you guys think of this project and the generative AI for UI space in general. If you're interested in collaborating on a startup or open-source project in this space, email designhat dot ai at gmail dot com https://ift.tt/PIObrpc February 13, 2023 at 11:13PM

Show HN: I made a code notebook for Datalog queries https://ift.tt/Bm3WVoQ

Show HN: I made a code notebook for Datalog queries https://ift.tt/XCfz5Rj February 13, 2023 at 11:52PM

Show HN: Sign-up flows from 100s of websites made publicly available https://ift.tt/aG8OfY5

Show HN: Sign-up flows from 100s of websites made publicly available Hi HN! Fil here from Formsort ( https://formsort.com/ ). We just launched Fineflows, a design gallery that showcases leading sign-up flows from around the web. Why? My team has been building sign-up flows for close to a decade across mortgages and healthcare. We’ve spent a lot of time working through the technical and design aspects of this problem, such as state management (getting that pesky back button to work), design flexibility, and data enrichment. Time and again, we’ve seen product teams who don’t know what to build even though they can . Often times, builders of forms start their process by looking at what other people are doing, answering questions like: What are different ways error validations are done? Should I use photos of people, or is text enough? Is it appropriate to use emojis in forms? How can I decline a user in a polite yet firm way? To that end, we set out to capture as many different form flows as we could and make them available. We’ve found it to be an invaluable resource ourselves, and many of our customers have used it to improve their own designs. I’m always shocked by how often people reinvent the wheel instead of using a tried-and-true technique, and I hope that we’re helping address that problem. Take a look at the gallery at ( https://ift.tt/5ukZ460 ), or head to Formsort’s homepage to start building yourself! Would love to hear any feedback, inspiration, or thoughts, as we are just getting this off the ground :) https://fineflows.com February 13, 2023 at 11:21PM

Show HN: (Repost) A Chrome extension to help you improve website performance https://ift.tt/BxlF2id

Show HN: (Repost) A Chrome extension to help you improve website performance https://ift.tt/dz2XPh6 February 13, 2023 at 04:15PM

Show HN: Meta peddling unsecured business credits to users in India https://ift.tt/Mo6ANRY

Show HN: Meta peddling unsecured business credits to users in India I have a friend who owns a business and they got a really weird email from meta. Apparently meta has teamed with "Indifi and FlexiLoans" to give unsecured business loans. 1. They are sharing details of "this user is a small business owner" with third parties and that they are directly emailing about "helping businesses in need". What the hell is wrong with these people. If I wanted a loan,i would approach my bank and not some fincorp who would fleece me with 18% interests. Banks have much less interest rates February 13, 2023 at 04:03PM

Sunday, February 12, 2023

Show HN: Toodle.Studio is an art playground with Lisp and turtles https://ift.tt/QNO34xA

Show HN: Toodle.Studio is an art playground with Lisp and turtles https://toodle.studio February 11, 2023 at 09:24PM

Show HN: Forever-Time Multi-player- Play with your loved ones after you're gone https://ift.tt/PB9AGUu

Show HN: Forever-Time Multi-player- Play with your loved ones after you're gone Summer Friends Don't Stick Around is a "forever-time" multiplayer game created to immortalize players and give others a chance to play with them "in spirit" even after they are no longer with us. In the "Remember Me" mode, players can train a neural network to capture their play style. The output is a data model that can be shared with friends and family. Your playstyle is essentially encoded in the data model. In the "Remember Them" mode, players can load a data model file and play with them. I'm still learning more about neural networks and tweaking them to capture more of how any particular player approaches the game. There is room for improvement. https://ift.tt/MBxbiUI February 13, 2023 at 01:05AM

Show HN: Nix-init – Generate Nix packages from URLs with dependency inference https://ift.tt/96STaLP

Show HN: Nix-init – Generate Nix packages from URLs with dependency inference https://ift.tt/HQb7qhK February 13, 2023 at 12:04AM

Show HN: HN Pop-Up – Hover on HN Username to See Their Profile https://ift.tt/BLwhPXI

Show HN: HN Pop-Up – Hover on HN Username to See Their Profile https://ift.tt/MfJBsDO February 12, 2023 at 11:55PM

Show HN: Vettel – a tiny key value store that's faster than Redis (sort of) https://ift.tt/qhB7lvr

Show HN: Vettel – a tiny key value store that's faster than Redis (sort of) https://ift.tt/kDmJhW7 February 12, 2023 at 01:29PM

Show HN: Link Book – Quickly save links from around the web to GitHub https://ift.tt/tyvhqlC

Show HN: Link Book – Quickly save links from around the web to GitHub Save and sync your web bookmarks using Link Book and GitHub while retaining full control of your data https://ift.tt/ySXJ12N February 12, 2023 at 03:29PM

Saturday, February 11, 2023

Show HN: Log collector that runs on a $4 VPS https://ift.tt/KRjqu5M

Show HN: Log collector that runs on a $4 VPS Hey guys, I'm building erlog to try and solve problems with logging. While trying to add logs to my application, I couldn't find any lightweight log platform which was easy to set up without adding tons of dependencies to my code, or configuring 10,000 files. ErLog is just a simple go web server which batch inserts json logs into an sqlite3 server. Through tuning sqlite3 and batching inserts, I find I can get around 8k log insertions/sec which is fast enough for small projects. This is just an MVP, and I plan to add more features once I talk to users. If anyone has any problems with logging, feel free to leave a comment and I'd love to help you out. https://ift.tt/7IPOayF February 12, 2023 at 02:14AM

Show HN: For Product Managers – curated collection of tools https://ift.tt/vtWQ7pS

Show HN: For Product Managers – curated collection of tools Curated collection of tools and frameworks for product managers, startup founders and delivery managers. https://ift.tt/DgbhEkK February 11, 2023 at 10:44PM

Show HN: My personal website designed in the style of Windows 95 https://ift.tt/aA37coC

Show HN: My personal website designed in the style of Windows 95 link: https://ift.tt/Jeh6Bq4 github repo: https://ift.tt/5dfcAsv Your thoughts and recommendations are highly appreciated :) https://ift.tt/Jeh6Bq4 February 12, 2023 at 12:14AM

Show HN: I’m an introvert – made an app to help maintain connections with people https://ift.tt/WfjFZvU

Show HN: I’m an introvert – made an app to help maintain connections with people https://ift.tt/vLPMZAy February 11, 2023 at 10:12PM

Show HN: tltv – Federation protocol for 24/7 TV channels https://ift.tt/KMVr6Ng

Show HN: tltv – Federation protocol for 24/7 TV channels I spent six years trying to build a tv channel server. rewrote it eight times. flas...