frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Ask HN: How to deal with security implications of running/installing projects?

5•johng•55m ago
There are so many neat projects coming out on HN/Github, etc. But, it's so easy to inject back doors and malware into software projects now a days. I'm wondering how people deal with the secrutiy of this. Even if you install them under docker, if it's run by root it seems like there are ways they can get root access on the box.

I see so many neat projects here I'd like to try out but I'm worried that I may install some malware or backdoored software on here. There are a few AI harnesses, terminals, etc. that keep coming up that look neat... but at the very least they'd be able to get your Claude credentials, if not worse.

I'm just wondering with so much stuff coming out, most of it AI coded.

Just wondering how people deal with it? What's the best sandbox way of testing it if that's the solution?

Comments

fsflover•34m ago
Have you considered Qubes OS, https://qubes-os.org? It is more secure than Xen, which it relies on, https://www.qubes-os.org/security/xsa/#statistics.
johng•3m ago
I've always been interested in Qubes OS but it definitely seems like a very high pain point. I can see installing these things on VM's and then maybe trying to inspect traffic outbound to see if there is something untoward, but even that can be hidden pretty well.

Hell, I've installed some older "known good" packages and some of them have so many dependencies that are pulled in automatically, the app itself could be good but one of the obscure dependencies that it requires could be hacked and now you are still running hacked software. It just seems really scary to install nearly anything now. AI can inject an obfuscated backdoor in seemingly good software, and it can spread at a speed that humans couldn't have back in the day. I'm just hesitant with new software now and it's kind of sad. So much stuff I want to test but I'm afraid to test it.

Pure Mathematical Conal Architecture (PMCA)

https://zenodo.org/records/21630656
1•hiddenarchitect•33s ago•0 comments

The Polynomial-Time Low-Degree Conjecture Is False

https://arxiv.org/abs/2607.20318
1•MarcoDewey•1m ago•0 comments

Beyond "Clean Code": Why Your Comments Matter

https://blog.moertel.com/posts/2026-07-27-beyond-clean-code-why-your-comments-matter.html
1•chmaynard•5m ago•0 comments

The TLA+ Video Course

https://lamport.azurewebsites.net/video/videos.htmlhttps://lamport.azurewebsites.net/video/videos...
2•woggy•7m ago•0 comments

Show HN: Fancontrol-rs rust windows fan controls specdrivendesigned open source

https://github.com/Leyukaka/fancontrol-rs
1•yukaka•8m ago•0 comments

BSX Markets

https://markets.basicswapdex.com/plain/
1•dRK-U•10m ago•0 comments

Double jeopardy law ushered out (2005)

http://news.bbc.co.uk/2/hi/uk_news/4406129.stm
1•Cider9986•12m ago•0 comments

TeXShop History

https://pages.uoregon.edu/koch/texshop/history.html
1•sharma-arjun•13m ago•0 comments

Show HN: A record the vendor doesnt hold

https://github.com/githubscum/lotor
1•hnscum•13m ago•1 comments

Lilian Weng (co-founder) leaving Thinking Machines

https://twitter.com/lilianweng/status/2081816923088814421
4•dpc10•14m ago•0 comments

What Building My Own Container Runtime Taught Me About Software Architecture

https://kaleab-ayenew.github.io/writings/what-building-my-own-container-runtime-taught-me-about-s...
1•kalishayish•15m ago•0 comments

Opus 5: Richard III

https://analog-antiquarian.net/2026/07/24/opus-5-richard-iii/
1•ibobev•16m ago•0 comments

FreeBSD Developing New Ntsync Driver for Accelerating Windows NT Sync Primitives

https://www.phoronix.com/news/FreeBSD-Q2-2026
1•Bender•16m ago•0 comments

I Recommend Old Russian Mathematics Books

https://valeman.medium.com/why-i-recommend-old-russian-mathematics-books-b9d36405dcf1
1•ibobev•16m ago•0 comments

Vapnik and Chervonenkis: The Founding Fathers of Machine Learning

https://valeman.medium.com/vapnik-and-chervonenkis-the-founding-fathers-of-machine-learning-96f17...
1•ibobev•18m ago•0 comments

I've Spent a Month with Nvidia's RTX Spark in Microsoft's Surface Laptop Ultra

https://www.techpowerup.com/forums/threads/i%E2%80%99ve-spent-a-month-with-nvidia%E2%80%99s-rtx-s...
3•_____k•19m ago•0 comments

HBM Is the Ugly Baby: What Now? – By Vikram Sekar

https://www.viksnewsletter.com/p/hbm-is-the-ugly-baby-what-now
2•rbanffy•19m ago•0 comments

I got tired of writing the same FastAPI boilerplate, so I built a CLI

https://github.com/prathamdmehta/backend-dash
1•prathamdmehta•23m ago•0 comments

Now it's Nvidia's turn in the CDs funhouse

https://bsky.app/profile/carlquintanilla.bsky.social/post/3mrnpjnje4c2y
1•doener•23m ago•0 comments

Anthropic used robots.txt to hide shared Claude chats; the pages have no noindex

https://www.wired.com/story/private-claude-chats-exposed-in-google-and-bing-search-results/
2•logickkk1•24m ago•1 comments

Show HN: X Enhancement Suite (Chrome Extension)

https://github.com/tomchapin/x-enhancement-suite
1•remmargorp64•25m ago•0 comments

MappingTools

https://github.com/erivlis/mappingtools
1•erivlis•25m ago•1 comments

Live wildfire map that knows a refinery flare from a real fire

https://arguseyes.xyz/?layers=fire
2•spwizard•26m ago•0 comments

Show HN: Sealing traffic between Go services with hpke –no mTLS, no secrets

https://towardsdev.com/sealing-traffic-between-co-operating-go-services-with-crypto-hpke-a628cb89...
2•cheikhdev•26m ago•0 comments

AlgebraX

https://github.com/erivlis/algebrax
2•erivlis•26m ago•0 comments

Ordinary Abundance

https://ordinaryabundance.com/
2•salonium_•28m ago•0 comments

ASD-STE100 Simplified Technical English [pdf]

https://asd-web-be-prod.azurewebsites.net/media/wunhmi5y/asd-ste100-issue-9.pdf
2•gregsadetsky•29m ago•0 comments

60 Minute Creator – Node-based AI content workflows using your own API keys

https://60minutecreator.com/
1•dansambusiness•33m ago•0 comments

AMD Advancing AI 2026: Talking CDNA5 with AMD's Alan Smith

https://chipsandcheese.com/p/amd-advancing-ai-2026-talking-cdna5
2•rbanffy•34m ago•0 comments

Notes on the Fourier Transform

https://eli.thegreenplace.net/2026/notes-on-the-fourier-transform/
2•Jimmc414•35m ago•0 comments