frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

Show HN: I rewrote my Mac Electron app in Rust

https://desktopdocs.com/?v=2025
195•katrinarodri•2h ago•169 comments

Compiler Explorer and the promise of URLs that last forever

https://xania.org/202505/compiler-explorer-urls-forever
122•anarazel•3h ago•57 comments

Compiling a Neural Net to C for a 1,744× speedup

https://slightknack.dev/blog/difflogic/
90•todsacerdoti•2h ago•19 comments

Visualize and debug Rust programs with a new lens

https://firedbg.sea-ql.org/
38•alex_hirner•3d ago•2 comments

Deepseek R1-0528

https://huggingface.co/deepseek-ai/DeepSeek-R1-0528
112•error404x•1h ago•28 comments

Show HN: Tesseral – Open-Source Auth

https://github.com/tesseral-labs/tesseral
89•ucarion•4h ago•39 comments

LLM Codegen go Brrr – Parallelization with Git Worktrees and Tmux

https://www.skeptrune.com/posts/git-worktrees-agents-and-tmux/
41•skeptrune•4h ago•28 comments

The Blowtorch Theory: A new model for structure formation in the universe

https://theeggandtherock.com/p/the-blowtorch-theory-a-new-model
95•surprisetalk•5h ago•59 comments

Launch HN: MindFort (YC X25) – AI agents for continuous pentesting

24•bveiseh•3h ago•8 comments

Getting a Cease and Desist from Waffle House

https://www.jack.bio/blog/wafflehouse
160•lafond•3h ago•97 comments

GoGoGrandparent (YC S16) is hiring Back end Engineers

1•davidchl•2h ago

De-anonymization attacks against the privacy coin XMR

https://monero.forex/is-monero-totally-private-a-comprehensive-analysis-of-de-anonymization-attacks-against-the-privacy-coin/
123•DbigCOX•5h ago•60 comments

As a developer, my most important tools are a pen and a notebook

https://hamatti.org/posts/as-a-developer-my-most-important-tools-are-a-pen-and-a-notebook/
272•ingve•13h ago•199 comments

The mysterious Gobi wall uncovered

https://phys.org/news/2025-05-secrets-mysterious-gobi-wall-uncovered.html
58•bikenaga•4h ago•14 comments

xAI to pay telegram $300M to integrate Grok into the chat app

https://techcrunch.com/2025/05/28/xai-to-invest-300m-in-telegram-integrate-grok-into-app/
179•freetonik•4h ago•220 comments

Mathematical Fiction

https://kasmana.people.charleston.edu/MATHFICT/default.html
34•the-mitr•3d ago•4 comments

Show HN: Loodio 2 – A Simple Rechargable Bathroom Privacy Device

https://loodio.com/
48•testmasterflex•5h ago•50 comments

Ice Cream Replaced Booze in the US Navy

https://www.oldsaltblog.com/2025/05/how-ice-cream-replaced-booze-in-the-us-navy-2/
4•speckx•1h ago•0 comments

Implementing complex numbers and FFT with just datatypes (2023)

https://gist.github.com/VictorTaelin/5776ede998d0039ad1cc9b12fd96811c
19•surprisetalk•3d ago•2 comments

Why is it so hard to get families to live in community houses?

https://supernuclear.substack.com/p/why-is-it-so-hard-to-get-families
26•caser•3h ago•28 comments

Japan Post launches 'digital address' system

https://www.japantimes.co.jp/business/2025/05/27/companies/japan-post-digital-address/
66•jmsflknr•3h ago•50 comments

Show HN: Wetlands – a lightweight Python library for managing Conda environments

https://arthursw.github.io/wetlands/0.2.0/
21•arthursw•4h ago•35 comments

Building interactive web pages with Guile Hoot

https://spritely.institute/news/building-interactive-web-pages-with-guile-hoot.html
29•e12e•3d ago•2 comments

Show HN: My LLM CLI tool can run tools now, from Python code or plugins

https://simonwillison.net/2025/May/27/llm-tools/
469•simonw•22h ago•154 comments

Show HN: AutoThink – Boosts local LLM performance with adaptive reasoning

368•codelion•16h ago•56 comments

Square Theory

https://aaronson.org/blog/square-theory
674•aaaronson•1d ago•127 comments

A thought on JavaScript "proof of work" anti-scraper systems

https://utcc.utoronto.ca/~cks/space/blog/web/JavaScriptScraperObstacles
137•zdw•2d ago•166 comments

Homo erectus from the seabed, new archaeological discoveries in Indonesia

https://www.universiteitleiden.nl/en/news/2025/05/homo-erectus-from-the-seabed-new-archaeological-discoveries-in-indonesia
27•palmfacehn•2d ago•6 comments

The Ingredients of a Productive Monorepo

https://blog.swgillespie.me/posts/monorepo-ingredients/
271•mifydev•3d ago•187 comments

The Decline of Battery Life

https://brainbaking.com/post/2021/07/the-decline-of-battery-life/
5•akyuu•2h ago•6 comments
Open in hackernews

Show HN: Malai – securely share local TCP services (database/SSH) with others

https://malai.sh/hello-tcp/
111•amitu•1d ago
malai is a peer to peer network, and is a dead simple to share your local development HTTP server, without setting up tunnels, dealing with firewalls, or relying on cloud services.

In malai 0.2.5, we have added TCP support, which means you can expose any TCP service to others using malai, without opening the TCP service related port to Internet. With malai installed on both ends, any TCP service can be securely tunneled over it.

It can be used to secure your SSH service, or securely share your database server.

GitHub: https://github.com/kulfi-project/kulfi (star us!)

Would love feedback, questions, or ideas — thanks!

PS: We have also added `malai folder`, which lets you share (readonly) the content of a folder with others.

Comments

mdaniel•1d ago
> In this case, you can visit kulfi://http-e9b1c82b43206c96173848ed0afad2fe633fdc8a02ba391a3d37, which is where the Talk App lives.

What is the DNS story for this platform? Or are you intending to be kind of like a replacement for Syncthing where each endpoint has to explicitly approve the other and thus discovery is left as an exercise to the reader?

Actually, even after further thought, I am still able to rename my peers in Syncthing, and unless one has to go to the dashboard for getting that Talk App link(? button?) all the time, it's been my experience that folks will always want aliases for ginormous hex strings

---

p.s. you have some broken images in your Journey docs

amitu•1d ago
Kulfi is a network (peer to peer) which support http/https even tcp can be sent over kulfi.

Kulfi App is a web browser that talks kulfi protocol natively, so you can open kulfi://<id52> natively. malai is the server side part of this story, and can expose existing HTTP/TCP services over kulfi:// network.

For DNS, here is my initial deign/thought: https://github.com/kulfi-project/kulfi/discussions/55

For access control, we are working on a "what-to-do" service, which is an bunch HTTP/JSON APIs, that will be called by the malai (which runs on your server, or even as part of Django/Node/Golang once we wrap malai as a cffi library, and write corresponding Python/Node etc packages). You will be able to write the what-to-do in any framework you like, and we will maintain a general purpose open source what-to-do service.

thm•1d ago
Don't we use Tailscale for this?
haiku2077•1d ago
Indeed.

https://tailscale.com/kb/1312/serve

jbverschoor•10h ago
Tailscale serve is within your tailnet

Tailscale funnel is publicly accessible

https://tailscale.com/kb/1223/funnel

https://tailscale.com/kb/1247/funnel-examples

Apreche•1d ago
Or ngrok, or Cloudflare Tunnel or https://github.com/anderspitman/awesome-tunneling
danielbln•1d ago
I'm gonna add https://localhost.run as a contender.
apitman•23h ago
It's on the list linked
amitu•1d ago
Unlike tailscale/ngrok, malai is completely open source, does not rely on any company provided infrastructure (we have a http bridge to bridge http/tcp with http/kulfi at *.kulfi.site, but you can run your own http bridge), and once Kulfi app is ready, you will not need the bridge at all and Kulfi app (which is also basically a browser that speaks http(s) over kulfi along with http(s) over tcp) can talk kulfi protocol directly.
aidenn0•1d ago
Iroh requires relay servers; so wouldn't Malai need those?
amitu•1d ago
Yes, we are currently using iroh provided relay servers. malai will soon connect with any relay server, so in future you can use ones provided by us, or run your own.
hoistbypetard•1d ago
Among other clear differences, it looks like tailscale requires you to sign in with some cloud provider and Malai does not.

I use and like tailscale for similar purposes, but I can see why some people might prefer to skip that aspect, especially.

haiku2077•15h ago
The hosted part of tailscale is optional. https://headscale.net
jarsj•1d ago
Awesome would love to use it.
OJFord•1d ago
'hehe, malai, wonder if they know' -- 'oh, kulfi, ok they definitely know' -- just a fun quirky name, or an analogy I'm missing?
amitu•1d ago
malai: cream that forms on top of milk when it cools down, its a flavor of kulfi. kulfi: a milk based ice cream / desert. Nothing to do with networking etc, just a desert I enjoyed since childhood :-)
srameshc•1d ago
Nice naming of your projects. It just caught my attention :).
sky_fan•1d ago
malai also means mountain in my mother tongue Tamil and I am named as malai.
OJFord•23h ago
Yep, just wondered if there was some analogy/joke like malai is the layer on top and kulfi is.. I don't know, the rod that connects A to B or something (that's nonsense, but that's why I was asking!)

Anyway, project seems great and all, but I'll wait for pista. :)

qudat•1d ago
Very cool! This is similar to a service we manage at https://tuns.sh that runs entirely as an SSH server.

We love to see new ideas in this space since we think tunnels are great for prototyping and app development.

thenthenthen•1d ago
Sorry, noob here: Can this traverse managed NAT and deep packet inspection?
amitu•1d ago
We are using iroh[1] internally, so the question is does iroh support these things? The quickest way to answer this would be to test it. Can you help me with what kind of setup would be needed for me to test this?

[1]: https://www.iroh.computer

lxgr•21h ago
Sorry, but basic NAT traversal is an essential feature for any P2P network launched in at least the last 20 years, and as such doesn’t seem like something you can just leave to lower layers or even ask your prospective users to figure out themselves.
CGamesPlay•19h ago
Yes, Iroh supports this through a variety of hole-punching means as well as via public relay servers.
throwaway314155•19h ago
Did you vibe code this or something? How could you not know...?
candiddevmike•1d ago
I read the readme and I don't quite understand the relationship between malai and kulfi, or what the "total cost" (what I need to know, what I need to install) of the stack is here.
amitu•1d ago
Kulfi is the official name of the project, and the name of the "peer to peer internet" "id52/identity based internet", so kulfi net.

Kulfi App is going to be a browser like Google Chrome, available on various app stores, and it will speak both http over tcp and http over kulfi. Kulfi app acts like client (but is also a server, so on your iPhone tomorrow you can install Kulfi, which will let you access any http over kulfi site, and also will run a web server which is exposed over kulfi net for others to access, so my Android phone's Kulfi browser can connect with the your iPhones Kulfi's web server, with no intermediary [1]).

malai is ready now, and it is a Swiss army knife toolkit for working with kulfi net. Currently malai can expose a HTTP or TCP service over kulfi net.

Malai also has a "http bridge" feature, which bridges any malai exposed http over kulfi service with the http over tcp, so people can use regular browsers to access malai exposed HTTP services.

[1]: we are using https://www.iroh.computer/blog/iroh-dns, so their caveats apply.

lxgr•23h ago
What's id52?

I feel like I'm missing a lot of context to understand what's being shared here.

mdaniel•19h ago
e.g. https://github.com/kulfi-project/kulfi/blob/malai-0.2.5/kulf...

  $ echo -n c1b2d4463e503765b7422e126ea7ff5633ba5903f97b700ac818 | wc -c
    52
It would appear the leading "org-", "account-", et al are a separate namespacing of the id52 key
lxgr•50m ago
I figured as much, but that's an example for an id52, but not a description of what it is.

The actual answer seems to be that these are zbase32-encoded 32 byte iroh node IDs: https://www.iroh.computer/blog/iroh-global-node-discovery

immibis•1d ago
Kulfi red flags:

Does the same thing as a bunch of other systems (e.g. Tor) without providing any comparison of what this one does better.

Docs pages are TODO, certainly don't explain how it works.

Website is "Copyright 2025 YourCompany, Inc."

Discord link goes to something called "fastn" with apparently no relation to Kulfi.

amitu•1d ago
fastn is an ingredient to kulfi project. fastn.com is a full stack programming language we (FifthTry, Inc, the company behind these) have built, and it is the web server that is going to be part of Kulfi app.

The comparison posts, TODO, copyright etc we will do/fix when we get around to it. It's all open source, you can send PRs as well.

tauoverpi•21h ago
How does fastn handle errors? Is is possible to perform the SQL query client side or does it prevent / add friction for such? Can I visit `/foo/";DROP%20TABLE%20users;/` or does it handle inputs properly?
immibis•8h ago
It sounds a lot like you're trying to reinvent things that already exist for the purpose of having them be your intellectual property, so you can convince everyone to use your thing instead of the free thing, and possibly rugpull them later. Embrace, extend, extinguish!
redleader55•1d ago
A few more:

No explanation of how it works

Comments in this thread reveal a bunch of obscure components that also don't have much details.

lxgr•23h ago
To be fair, assigning copyright to the reader is a good first step to build trust :)
barbazoo•3h ago
Vibe coding tools need a post step to fix all the templating issues like wrong links, wrong names, etc.
snihalani•1d ago
what problem does this solve over ngrok/tailserve?
Ingon•23h ago
Looks very cool. Another self-hosted, open source, and private solution in this space is my own https://github.com/connet-dev/connet/
apitman•23h ago
I maintain a list of tunneling solutions here: https://github.com/anderspitman/awesome-tunneling

Usually my first question is what makes this different than the many existing options. Looks like the answer in this case is that it's p2p and built on iroh (which is built on QUIC), which I find interesting. Would love a PR on the list.

hamburglar•22h ago
This desperately needs a “how the hell does this work” page for either malai or kulfi (preferably both) because the vibe I’m getting is “it’s magic! Trust us and sign up for an account.”
p0w3n3d•22h ago
It's magic man-in-the-middle and we're the magicians here
hamburglar•22h ago
I’m always wary when there’s clearly some infrastructure required and it isn’t clear how it gets paid for. What’s the catch? What’s between my bridge listener and my target, and what’s their incentive to be there?
nokun7•21h ago
I use ngrok for exactly this type of functionality. Can someone clarify why would anyone need malai over ngrok?
devrandoom•20h ago
Feedback: This crowd likes technical docs. These docs are nothing like that, and raise more questions than they answer.
ryao•16h ago
> It can be used to secure your SSH service, or securely share your database server.

SSH is one of the most secure network daemons ever devised. This is not to say that there is never any need to harden SSH, but given that people usually secure services behind SSH, I find the words “secure your SSH service” strange.

That said, I am no stranger to bastion/jump hosts, but those usually involve accessing one ssh host through another ssh host.

nilinswap•11h ago
This is pretty awesome.