wrote an open-source ngrok alternative which creates instant ephemeral... HTTP tunnels to localhost. It uses userspace wireguard network, so 1) no root permissions needed to run the server 2) client side doesn't need custom software to connectshow more

Karan Sharma
13,059 görüntüleme • 11 ay önce
How to find viable targets for client-side desync attacks:... 1️⃣ Open Burp Suite and intercept requests. 2️⃣ Choose an endpoint that wouldn't usually expect a POST request (e.g GET) and send it to repeater. 3️⃣ Go to Inspector > Request Attributes > Protocol field > Upgrade to HTTP/2. 4️⃣ Send the Modified Request and look for this error message: "Server ALPN does not advertise HTTP/2 support"... 5️⃣ Enable ALPN Override in request settings and send again. If you see "Stream failed to close correctly" then you've confirmed that the server does not support HTTP/2 and is a valid target for desync testing! Want to learn more about desync attacks? On August 6, at Black Hat USA, James Kettle from PortSwigger Research will reveal new classes of desync attack that enabled him to compromise multiple CDNs and kick off the desync endgame! 😲 Stay up to date here:show more

Web Security Academy
16,453 görüntüleme • 11 ay önce
So... I literally oneshotted this code with Claude Sonnet... 3.7 for replicating the exact same browser sandbox runtime that Manus uses. And I am going to open-source it, welcome contributions for building out the React VNC client, integrating to browser use, agent loop, etc. But we need a name first, should we call it... - Autonomous Neural Universal System - Magnus - or ?show more

jian
419,270 görüntüleme • 1 yıl önce
I’m making big changes to the AI hedge fund.... Multi ticker trading. Here is how it works: • you specify tickers • analysts research all tickers • portfolio manager creates trading signal Before: we only supported 1 ticker. Now: you can add as many as you like. No coding experience required to run. Everything is open source.show more

Virat Singh
29,635 görüntüleme • 1 yıl önce
PixVerse V6 (left) vs Seedance 2 (right). Seedance mispronounced... a name (a persistent problem in the model - he says "Castellani" but I wrote Castellano), however it is otherwise far superior to PixVerse. I hope another company is able to dethrone Seedance 2 in the very near future - we need proper competition in AI video, as well as an alternative to the totalitarian censorship adopted by Bytedance since SD2 first appeared - but at the moment, no other models come close to it.show more

Christopher Gwinn | Grindhouse Glitch
13,341 görüntüleme • 3 ay önce
Inviting early testers and contributors to Project Devika -... The open-source alternative to Devin. 👩💻 As of now, Devika is far from the capabilities of Devin... but we'll eventually get there. So I am calling the open-source community to join forces! ❤️ Features: - 12 Agentic models that can interact with each other in a feedback loop to understand, browse, research, code, document, and make decisions according to the user's query to complete a project. - Supports Claude 3, GPT-4, GPT-3.5, and Local LLMs via ollama. - Devika can run the code she writes and fix/patch the code herself if she encounters any errors without user intervention. - Devika can deploy static websites she creates on Netlify. (Experimental) - And much more... Will be doing an official launch after intensive testing and bug fixes. 🙌 I've created a Discord server for the early testers and contributors. If you're interested in joining the team, reply to this tweet and I will DM you the invite link. #buildinpublicshow more

mufeed vh
155,002 görüntüleme • 2 yıl önce
Litter iOS just got a beta (TestFlight) release so... now you can install it and try it out. It's a remote for codex! - Finds all the computers on your local network (or tailscale) that run codex app-server or ssh - Lets you continue any session or start a new one - Experimental local codex with oauth support Free, fully open-source, fully native, with android release coming soon! Thanks to Maky drumroll.dev ☄️ PincentΞ for the contributions! TestFlight ⬇️show more

SIGKITTEN
68,308 görüntüleme • 4 ay önce
Today our Pi main screen changed to the following... which we can see there will be another Hackathon! I believe this is a great work and deployment from CT! And Hackathon should be continuing to expand to apps which can connect to all industries widely in the world. I can see some Pioneers disappointed. Because these pioneers don't pay attention to Pi Network vision and mission and not understanding white paper well. They just want to get a car, property and cash ASAP. This is a short-sight. The eco system is Pi Network blood. This is critical. I used an example to make pioneers understand well what the relationship pioneers and CT is and what our pioneers task is. CT and pioneers are like a man's two feet. CT is on the right foot and pioneers are on the left foot. CT is like 💡, pioneers is like ⚡. We need to walk together to move. And if you want a light bulb, you need to have stable electricity and this stable electricity is like GCV. So when CT advanced to the Hackathon eco hardware system, pioneers should work on a software system which includes GCV, passion, attention and influence of Pi Network. When pioneers are ready with the above, ecosystem development will be super fast and easy. It will automatically go to open the mainnet! During the time CT and developers will keep on working on ecosystem hardware to develop more good platforms! So all pioneers should focus on self improvement! Of course if some Pioneers don't have trust in Pi Network, we all respect your decision 🙏 However this is yourself losses 🙏🙏🙏 All best wishes to pioneers all community! The third video introduces HuaRun Group. We don't need to argue if HuaRun joined the Pi Network. But we believe if all pioneers work hard with CT, not only HuaRun but also all super businesses will join Pi Network! So don't be an observer to wait and complain but stand up as a brave pioneer fighting for Pi Network success! Pi Network #PiNetwork #PiNetworkLive #Piopenmainnet #PiGCVshow more

Doris Yin 东方紫莲🪷
36,403 görüntüleme • 3 yıl önce
OpenClaw, but built for normal people. Sim is an... open-source platform that lets you build AI agent workflows on a drag-and-drop canvas. Connect them to channels like Telegram and WhatsApp and deploy without writing a single line of code. They also have a built-in Copilot that generates entire workflows from plain English, which you can then tweak and customize in the UI. Key features: - Free and open-source (Apache 2.0) - Vector store integration for RAG-grounded agents - Self-host with one command (`npx simstudio`) - Run fully local with Ollama, no API keys needed - Supports vLLM for production-grade self-hosted inference The thing I really like about Sim is the level of control you get. You can add conditional branching, parallel execution, human-in-the-loop approval gates, and even nest workflows inside other workflows. Everything is visible on the canvas, so you know exactly what your agent is doing at every step. And you can build a workflow in Sim, deploy it as an MCP server, and plug it into any agent, including OpenClaw. I've shared the link to Sim's GitHub repo in the next tweet.show more

Akshay 🚀
52,426 görüntüleme • 4 ay önce
let me save you 3 hours of head scratching.... if you're running local models like Qwen3.5-35B-A3B through Claude Code via llama.cpp's Anthropic endpoint, the chain will break every 3 to 5 minutes. tool call fails. flow stops. you reprompt. it recovers. 2 minutes later it stops again. the model is fine. the harness chokes on local inference latency. switch to OpenCode. same localhost endpoint. same model. same GPU. the chain doesn't break. the tradeoff: OpenCode sometimes loops. the model forgets what it already read and repeats the same tool call. but a loop you can interrupt. a broken chain kills your momentum and you start over. watch both side by side. proprietary agent vs open source agent. same 3B model. different failure modes. pick your poison.show more

Sudo su
72,501 görüntüleme • 4 ay önce
SOMEONE BUILT AN IPHONE APP THAT ONLY REVEALS WHATS... UNDER YOUR HAND the whole screen stays hidden you rest the side of your hand on it, the way you shield a keypad at an atm, and only the part your hand covers becomes readable lift your hand and it goes back to hidden > uses a multi touch area to detect your hand, no camera or permissions needed > he tried the proximity sensor first but it just turned the screen off > skipped the camera on purpose since asking for camera access in a privacy app felt wrong > fully native ios, with app clip and imessage support its insane how many simple but useful ideas you can vibe code in a weekendshow more

Om Patel
869,075 görüntüleme • 1 ay önce
Why Mobile Wallet Protocol? Warpcast uses Mobile Wallet Protocol... to connect frames to a user's wallet on mobile devices. MWP is an open standard with great UX on mobile. Specifically: 1. It works 100% of the time. 2. It's fast. 3. It redirects you between apps smoothly See it in action with the Storage Fairy below. MWP was created by the Coinbase Wallet team and is an open protocol that can work with any wallet. Link in the next tweet. It's really well designed and can work with any wallet. If you're a wallet thinking of supporting MWP, reach out to us! Why not Wallet Connect? WalletConnect works great on desktop and we use it in Warpcast. But on mobile, we ran into several issues that led to bad UX or outright failures. We've shared feedback with the WC team and other wallets about the challenges we've faced and people are working on improving the experience.show more

Dan Romero
58,079 görüntüleme • 2 yıl önce
This Chinese developer launched Llama 70B locally on a... MacBook on a plane and for a full 11 hours without internet ran client projects. He was sitting by the window on a transatlantic flight with a MacBook Pro M4 with 64 GB of memory. WiFi on board cost $25 for the flight. He declined. No cloud API, no connection to Anthropic or OpenAI servers, no internet at all. Just a local Llama 3.3 70B on bf16 and his own orchestrator script. The model runs through llama.cpp. Generation speed, 71 tokens per second. Context around 60,000 tokens. Memory usage, 48.6 GiB out of 64. Battery at takeoff, 3 hours 21 minutes. And he gave the orchestrator this system prompt before takeoff: "You are an offline orchestrator running on a single MacBook. There is no network. The only resources you have are local files in /Users/dev/work, the Llama 70B inference server at localhost:8080, and a battery budget of 3 hours 21 minutes. Process the queue at /Users/dev/work/queue.jsonl (one client task per line). For each task: draft → run local evals → save artefact to /Users/dev/work/done/. Save context checkpoints every 12 tasks so you can resume after a battery swap. Stop only on empty queue or when battery drops below 5%." So the system knows exactly what resources it is running on. It knows it has no connection to the outside world for the next 11 hours. It knows it has finite memory and a finite battery. It knows the human will not intervene until the plane lands. The system runs in 1 loop. Takes a task from the queue, runs it through inference, saves the artifact, writes a checkpoint. Task after task, just like that. And only when the battery drops below 5% does the orchestrator automatically pause, waits for the laptop to switch to the backup power bank, and continues from the last checkpoint. Here is what the system actually writes in his log during the flight: "saved context checkpoint 8 of 12 (pos_min = 488, pos_max = 50118, size = 62.813 MiB)" "restored context checkpoint (pos_min = 488, pos_max = 50118)" "prompt processing progress: n_tokens = 50 / 60 818" "task 37016 done | tps = 71 s tokens text → /Users/dev/work/done/proposal_westside.md" Outside the window, clouds, blue sky, and no WiFi. On the tray, 1 MacBook, an open terminal on 2 screens, and an inference server on localhost. From what I have observed, this is the cleanest offline AI workflow I have seen in the past year: 11 hours of flight, $0 for WiFi, and the entire client queue closed before landing.show more

Blaze
1,839,572 görüntüleme • 2 ay önce
SOMEONE BUILT AN OPEN-SOURCE JARVIS WITH 9 AGENTS AND... 5 MEMORY BACKENDS AND YOUR DATA NEVER LEAVES YOUR DEVICE Every time you message ChatGPT or Claude your data hits a server you don't control, gets processed by infrastructure you're paying for and comes back with zero guarantee of what happened in between. OpenJarvis runs the entire stack locally - 9 agent types, 5 memory backends, a learning loop that gets smarter every day and a morning digest that connects to Google Drive and surfaces what matters before you open a single app. Most AI tools are exactly as dumb on day 100 as they were on day 1 because they forget everything when the window closes - this one indexes your documents once and automatically injects relevant context into every prompt forever. Custom agent setup for a client is $500-2,000 one time and AI infrastructure retainer is $300-800 a month - and your cost is one afternoon and an open source repo. The repo is free. The advantage it creates is not.show more

Cortex
11,374 görüntüleme • 2 ay önce
This app uses AirDrop to send files from your... Android phone to your Macbook! Yes, it actually uses AirDrop. That means you don't have to install ANYTHING on your Mac to send files from your Android phone! Here's a video of a Galaxy Z Flip 5 AirDropping a file to a Macbook running macOS Ventura 13.5.1. (Thanks to u/FragmentedChicken for testing this app for me and sharing the video!) A few months ago, Twitter user @Linus13499209 brought an app called WarpShare to my attention. WarpShare is an app made by the developers of MoKee, an AOSP-based custom ROM that was popular in China. Since MoKee wasn't as popular outside of China, it seems the existence of their WarpShare app slipped under the radar. I was skeptical about whether it would work at all. Grishka, the developer of NearDrop, an open source port of Google's Nearby Share to macOS, told me that they were under the assumption that AirDrop requires the use of AWDL (Apple Wireless Direct Link, Apple's proprietary WiFi-based protocol) to communicate both ways. However, it seems that AWDL is only required for your Android phone to be discoverable by your Mac (ie. to send files from your Mac to your Android phone) but not the other way around. Because of this, though, WarpShare only supports sending files from Android to Mac but not vice versa. Your Mac also needs to have AirDrop discoverability set to "everyone" for this to work, as "contacts-only" requires Apple-signed certificates. Plus, it also doesn't support sending files from Android to iPhones or iPads, even when "everyone" mode is enabled. Still, if you find other Android --> Mac file sharing options to be lackluster, give WarpShare a try! The fact that it works at all is incredible, which is why I'm sharing this news here. If you want to download WarpShare on your Android device, you'll need to compile the app from its source code. If you're a Patron/X subscriber, however, I will share my compiled APK with you. WarpShare source code:show more

Mishaal Rahman
1,290,199 görüntüleme • 2 yıl önce
Most robots still need markers, checkerboards, or long calibration... rituals just to know where their arms are. Now it works from raw images in seconds. roboreg is a markerless multi arm localization toolkit that plugs into ROS 2 and RViz. No special hardware. No custom setup. You toggle between robot descriptions and the system figures out the rest. The idea is simple: ✅ Hand eye calibration from plain RGB or RGB D images ✅ Only three robot poses needed for millimeter accuracy ✅ Works with any ROS 2 compatible robot and camera ✅ Fully open source under Apache 2.0 It is powered by Hydra, a new marker free ICP variant that converges far more reliably than classical baselines and runs in under a second. If you want to try it: roboreg: ROS 2 roboreg: Hydra paper: pip install roboreg More details and discussion on Open Robotics Discourse:show more

Ilir Aliu
18,406 görüntüleme • 8 ay önce
SOMEONE BUILT A TERMINAL TORRENT CLIENT THAT SEARCHES EVERY... TRUSTED SOURCE AT ONCE AND DOWNLOADS STRAIGHT TO DISK finding a torrent in 2026 is miserable fake download buttons, popups that spawn three more tabs, and half the results are dead with zero seeders. so he built the opposite of all that: > type one query and it hits a curated set of trackers all at once > results stream back tagged with source, size and seeders as fast as each site answers > arrow to the one you want, press d, and it lands on your drive > if one source is down it just skips it and keeps searching the rest > downloads run in the background and pick up where they left off if you quit mid transfer the whole thing is one command. npx and youre running, all you need is node, no browser, no setup, nothing leaves your machine except the request itself. its called torlink, open source and mit. this is the kind of clean terminal tool that does one annoying thing perfectlyshow more

Om Patel
357,885 görüntüleme • 24 gün önce
we sped up distributed inference by up to 5x... with decentralized speculative decoding. many don't realize that AI models normally generate text one single word at a time, waiting for the network after every word. speculative decoding changes this by using a "guess & confirm" system, similar to autocomplete. how it's done: 1. draft locally (the guess) instead of waiting for the network, a tiny, fast model on your device guesses the next few words instantly, without waiting for the network. 2. confirm remotely (the check) the massive remote model doesn't generate from scratch; it just checks the draft. it looks at the guesses in a batch and says "yes, yes, no." you get multiple words in the time it usually takes to get one. 3. adaptive logic dsd is smart. if the topic is creative, it lets the draft flow loose. if the topic is math or code, it checks more strictly. it balances speed and precision automatically so your inference almost feel instant. find out more: paper: blog:show more

Parallax
45,425 görüntüleme • 6 ay önce
Introducing my new OSS framework: OhSnap provides really simple... way to record and reproduce the data your users saw when encountering an issue (bug/crash), integration in your project should take a few minutes at most. Majority of bugs are related to data you have to deal with and often times we have to work with frequently changing data via network API's. Even if you have access to multiple environments (prod/staging/dev) it's still going to be PITA to reproduce a lot of bugs your user saw, since we often get to them a long time after the bug occured... OhSnap allows you to easily record any data your app downloads, pack it and put it on server so that you can replay it on your device later on, while connected to debugger and save hours of development time trying to figure out what exactly they experienced! Here's a demo of 2 app instances running, and me manipulating what server reply I'll be getting, there is 1 line of code needed to record and reply this data (outside of just setting up your framework). I built this so that I can show dev tool building process for the members of which I encourage you to join if you want to put your engineering efficiency at a different level😉show more

Krzysztof Zabłocki
30,484 görüntüleme • 2 yıl önce