Hasty Briefsbeta

All tags

#open-source

716 stories total

Bilingual

NautilusTrader: Open-source algorithmic trading platform
9 months ago
- Open-source trading platform supporting any asset class with event-driven backtests and live trading.
- Algorithmic trading solutions with Python API for building, analyzing, and iterating strategies quickly.
- Supports trading in crypto, futures, equities, options, FX, and betting markets with detailed instrument definitions.
- Features nanosecond-resolution backtesting, high-performance execution, and modular components like Clock and MessageBus.
- Easy installation and integration with various data providers and venues for seamless trading operations.
Buttercup is now open-source
9 months ago
- Buttercup, a CRS (Cyber Reasoning System), is now open-source after Trail of Bits won second place in DARPA’s AI Cyber Challenge (AIxCC).
- A standalone version of Buttercup has been created to run on a typical laptop, optimized for individual projects.
- Buttercup is an AI-driven system for discovering and patching vulnerabilities in open-source software, with four main components: Orchestration/UI, Vulnerability discovery, Contextual analysis, and Patch generation.
- The system works by fuzzing programs to find vulnerabilities, analyzing them with static tools, and generating patches using multiple AI agents.
- To get started, users need an x86-64 Linux system (partially supports ARM64), at least 8 CPU cores, 16GB RAM, 100GB disk space, and an API key for an LLM provider.
- Buttercup’s setup involves cloning the repository, installing system packages, and running simple terminal commands.
- Future plans include upgrading and maintaining the standalone version, with contributions welcome from the community.
- Versions submitted to AIxCC semifinal and final rounds are also open-sourced but not actively maintained.
Tribblix – The Retro Illumos Distribution
9 months ago
- Tribblix is an open source operating system based on illumos, created by Peter Tribble.
- Milestone 37 for x86 is available, including Vanilla Tribblix and LX variants.
- SPARC upgrades from m32 to m33 are available; fresh installs should use m32 ISO and upgrade.
- A CDROM-sized ISO for m32 SPARC is now available.
- 32-bit hardware support has been completely removed.
- The x86 version is solid, while the SPARC version has limited testing and hardware support.
Sandstorm- self-hostable web productivity suite
9 months ago
- Sandstorm is an open-source project designed to simplify running open-source web applications.
- Offers various apps like Etherpad for document collaboration, Davros for file storage, Wekan for task organization, and Rocket.Chat for secure communication.
- Easy app installation via the App Market with automatic updates.
- Unified access control system ensures all apps and data are private by default.
- Each document or app instance ("grain") is containerized in a secure sandbox, mitigating 95% of security vulnerabilities.
- Supports compliance with security, regulatory, and data privacy requirements through granular access control.
- Flexible hosting options: cloud-based or on-premises, with the ability to switch anytime.
- No vendor lock-in; mix and match apps from different developers, including open-source options.
- Enables companies to centralize data while allowing teams to choose their own tools.
- Simplifies app deployment for developers by handling service management and scalability.
Open Lovable
9 months ago
- Clone the repository from GitHub using `git clone https://github.com/mendableai/open-lovable.git`
- Navigate into the project directory with `cd open-lovable`
- Install dependencies using `npm install`
- Create a `.env.local` file and add required API keys for E2B and Firecrawl
- Optionally add API keys for AI providers like Anthropic, OpenAI, or Groq
- Run the development server with `npm run dev`
- The project is licensed under MIT
What to Do When Critical Open Source Projects Go End of Life
9 months ago
- 98% of organizations use open source software (OSS), making it pervasive in daily applications.
- Open source version life cycles are shortening, with over 100 scheduled EOLs for top projects in 2025 alone.
- EOLs can be for minor/major versions (e.g., .NET 6) or entire projects (e.g., AngularJS).
- Maintainer burnout and underfunding contribute to project abandonment, with 60% of maintainers considering quitting.
- EOL challenges include security vulnerabilities, technical debt, and compatibility issues.
- Steps to handle EOL: gather information, assess damage, look for alternatives, take over maintenance, fork, or hire experts.
- Forking requires deep domain knowledge and community support, not just a random team effort.
- Investing in OSS health through contributions, funding, and community support can prevent abandonment.
- Corporate initiatives like HeroDevs' $20M fund and Bloomberg's FOSS Contributor Fund help sustain critical projects.
- Automated tools like SBOMs can help track EOL timelines, but proactive involvement is key to sustainability.
Self-Guaranteeing Promises
9 months ago
- Companies often break promises, but self-guaranteeing promises don't require trust—they can be verified independently.
- File over app is a self-guaranteeing promise; files in open formats under your control can be used in any app without export.
- Stainless steel is a self-guaranteeing promise because its properties can be tested and verified by the user.
- Terms and policies are not self-guaranteeing; companies can change them retroactively, affecting user data (e.g., Google, Zoom).
- Self-guaranteeing privacy promises provide proof that the tool cannot access your data in the first place.
- Governance structures are not self-guaranteeing; corporate structures can be reversed (e.g., OpenAI).
- Open source alone is not self-guaranteeing; data may still be locked in proprietary formats or databases (e.g., Omnivore, Skiff).
- The future of tools is ambiguous, but self-guaranteeing promises help mitigate risks from changes in needs, technology, or ownership.
Show HN: I built an offline, open‑source desktop Pixel Art Editor in Python
9 months ago
- Tilf (Tiny Elf) is a simple yet powerful pixel art editor built with PySide6.
- Designed for creating sprites, icons, and small 2D assets with essential tools.
- No account registration or email required, with zero dependencies and setup time.
- Runs on Windows, MacOS, and GNU/Linux.
- Features include drawing tools, canvas customization, undo/redo, and export options.
- Supports import/export of PNG, JPEG/JPG, and BMP formats.
- Keyboard shortcuts for efficient workflow.
- Auto-save functionality for unsaved changes.
- Open-source project under GPL v3.0 license, welcoming contributions.
- Developer: Dario 'danterolle' Camonita.
Ashet Home Computer
9 months ago
- The Ashet Home Computer is an expandable and hackable computer inspired by 80's home computers.
- It aims to bridge the gap between Arduinos and Raspberry Pi, designed for fun and learning.
- Features include a dual-core 150 MHz CPU, 16 MB Flash, 8 MB RAM, modern connectivity (USB, Ethernet, DVI), and 7 expansion slots.
- The computer has a hackable OS, open architecture, built-in debug probe, and is fully documented.
- Design phase is complete, with a functional cable clutter prototype validating key components like PSRAM, DVI, and Ethernet.
- Next steps include engineering (schematics, PCB layouts), crowdfunding, and finding a manufacturing partner.
- Goal is to price the computer at 250€ or less, with the design available for free under a permissive license.
Eca: Editor Code Assistant – AI pair programming capabilities agnostic of editor
9 months ago
- Editor-agnostic protocol for integrating LLMs with any editor.
- Single configuration setup works globally or locally across all editors.
- Features include chat interface, agentic capabilities, and context support.
- Supports multiple models like OpenAI, Anthropic, and Ollama.
- Server written in Clojure, inspired by LSP protocol.
- Benefits include tool call management, multiple LLM interaction, and telemetry.
- Easy installation with automatic server download for supported editors.
- Debugging options available with --log-level debug or --verbose.
- Open for contributions and sponsorships to support project growth.
Le Lamp – an open source expressive robot
9 months ago
- LeLamp is an open-source robot lamp based on Apple's Elegant design, developed by Human Computer Lab.
- The project is in early development, with two parallel tracks: one for SO-101/SO-100 arm owners and another for future interactive paradigms.
- For SO-101/SO-100 arm users, 3D files for modifications are available, including a motor mount, lamp head, and camera mount.
- Setup involves motor calibration, teleoperation, and attaching the 3D printed lamp head to the arm.
- Calibration and teleoperation commands are provided for both leader and follower configurations.
- A hand tracking demo using a PID loop is included in the main.py file.
- Upcoming tasks include redesigning the lamp for ST3215 servos, testing Mujoco environment, and adding voice capabilities.
- The project is licensed under GNU General Public License v3.0.
How I Started Contributing to Tinygrad – My First 4 Merged PRs
9 months ago
- tinygrad is a minimalist deep learning framework ideal for those who enjoy building from scratch and writing high-quality code.
- Contributors should read the codebase thoroughly, starting with tensor.py, and trace operations end-to-end to understand dataflow.
- Use AI to learn the codebase but not to generate code for PRs; clarity and intent are valued over volume.
- Before contributing, search Tinygrad Discord and prior PRs/issues to avoid redundant questions and respect maintainers' time.
- PRs should be minimal, well-tested, and logically scoped with small commits to facilitate reviews.
- Example contributions include replacing custom download logic with built-in fetch, fixing bugs like logcumsumexp, linting examples, and adding features like enable_gqa to SDPA.
- Validation involves local testing, comparing outputs with expected results, and ensuring changes work across different environments and devices.
- Key habits for successful contributions include shipping small changes, testing rigorously, and optimizing for signal over noise.
North Korean hackers target open-source repositories in new espionage campaign
9 months ago
- North Korean state-backed hackers planted malicious code in open-source software repositories.
- Between January and July, 234 malicious packages were blocked on npm and PyPI repositories.
- The malicious packages impersonated legitimate tools to steal credentials and plant backdoors.
- Over 36,000 developers may have been impacted by the campaign.
- Lazarus exploited gaps in the open-source supply chain, like unvetted packages and lack of oversight.
- Typosquatting and brand impersonation tactics were used to trick developers.
- Malicious packages deployed spying tools like clipboard stealers, keyloggers, and credential harvesters.
- Lazarus has shifted from financial theft to espionage and critical infrastructure access.
- Developers in DevOps and CI/CD-heavy environments were specifically targeted.
- Open-source repositories are increasingly exploited for financial gain or espionage.
- Recent incidents include phishing attacks on npm and PyPI maintainers.
- Lazarus is turning open-source ecosystems into delivery mechanisms for cyberespionage.
Citybound: City building game, microscopic models to vividly simulate organism
9 months ago
- Citybound is a city-building game that microscopically simulates the interactions of millions of individuals to create a dynamic city organism.
- Each household (family or business) is individually simulated with real-time inventories of tangible and intangible resources.
- Economic patterns emerge from household interactions, influencing trade, commute, and city growth.
- Traffic is simulated microscopically, with each trip and vehicle movement calculated for realism.
- Future work includes pre-simulating trade conditions, scaling to high-density populations, and adding multi-modal transport.
- The game features a planning-based interaction system, allowing for large-scale project previews and collaborative multiplayer planning.
- Citybound uses an innovative computation architecture with an actor-system framework (Kay) for scalable, networked simulation.
- The UI combines 2D and 3D elements using React and WebGL, with complex geometric operations handled by the Descartes library.
- Procedural geometry in Citybound is managed by the Michelangelo library, enabling dynamic architectural and natural shape generation.
Car Brands Running Curl
9 months ago
- curl is now used in 47 car brands, including top brands like Audi, BMW, and Tesla.
- The number of cars running curl is estimated to be several hundred million.
- Evidence of curl usage comes from documentation or on-screen mentions in car infotainment systems.
- Manufacturers are required to provide curl license information, though some may not comply.
- Missing brands may also use curl, but lack sufficient evidence.
- Cars use libcurl (not the command line tool), often older versions.
- Common uses include downloading firmware, maps, and uploading statistics.
- Curl runs in many cars but no car companies sponsor or pay for curl support.
- Curl is licensed under MIT, allowing free use without obligations.
- The author considers changing the license to improve financial sustainability.
Lessons learned from buying an open source repo
9 months ago
- The startup acquired a popular open-source Unity MCP repo to keep it relevant and open-source.
- SEO of the repo was reset after ownership changed, causing it to drop in Google rankings.
- Media outlets showed little interest in covering the open-source repo acquisition.
- Maintainer buy-in was crucial for smooth transition and changes post-acquisition.
- Despite marketing challenges, the acquisition increased Discord joins and Coplay installs.
Show HN: Chatbang – Access ChatGPT from the terminal without an API key
9 months ago
- Chatbang is a terminal tool for accessing ChatGPT without an API key.
- Installation on Linux involves downloading, making executable, and moving to /usr/bin.
- Can be installed from source using git clone and go build.
- Requires a Chromium-based browser (not Snap-installed) with correct path in config.
- Users must log in to ChatGPT via Chatbang's Chromium session and allow clipboard permissions.
- Works by scraping ChatGPT's website in a headless session, rendering responses in the terminal as markdown.
A minimal tensor processing unit (TPU), inspired by Google's TPU
9 months ago
- A minimal tensor processing unit (TPU) reinvented from Google's TPU V2 and V1.
- Function: Performs multiply-accumulate operations every clock cycle.
- Data Flow: Input values flow horizontally, partial sums vertically, weights remain fixed.
- Architecture: Grid of processing elements (starting 2x2), with rotated input matrices.
- Modules: Bias addition, Leaky ReLU, MSE loss, Leaky ReLU derivative, dual-port memory.
- Instruction Set: 94-bit wide ISA controlling data transfer and TPU interaction.
- Setup: Requires cocotb, iverilog, and gtkwave for development and testing.
- Adding a new module involves creating SV files, test files, and updating Makefile.
- Future steps include compiler development and scaling TPU to larger dimensions.
- Project is open-source, aimed at helping beginners break into hardware design.
OpenMower – An Open Source Lawn Mower
9 months ago
- Background in software engineering, embedded programming, hardware design, and robotics.
- Project OpenMower aims to improve robotic lawn mowers with better software.
- Hardware from YardForce Classic 500 is high quality and suitable for upgrades.
- Goals include autonomous mowing, safety, no perimeter wire, low cost, and obstacle avoidance.
- Basic mowing function works, including docking and recharging.
- Stable mainboard and motor controllers available (xESC mini and xESC 2040).
- Software repository available for ROS hardware interface and path planning.
- Community involvement encouraged for validation and documentation.
- Many robotic mowers may share similar hardware, expanding compatibility.
- Legal disclaimer and Creative Commons license for project use.
Show HN: Chroma Cloud – serverless search database for AI
9 months ago
- Chroma Cloud is an open-source serverless search database that is fast, cost-effective, scalable, and reliable.
- Key features include Vector Search, Full-Text Search, Metadata Search, Collection Forking, and Ingestion & Sync.
- Developer experience highlights: Usage-based pricing, Dashboard, Local build capability, CI/CD integration, and CLI.
- Performance aspects: Low latency, High QPS, Scaling Data, and Object Storage.
- Operational benefits: Reliability & Uptime, Support, Security, and Deployment Options.
- Testimonials highlight fast, effortless, accurate search and reduced latency.
- Quick setup: Create a database in 30 seconds with the same API as local Chroma using the Cloud Client.

first prev14next

About|Login

#open-source

NautilusTrader: Open-source algorithmic trading platform

Buttercup is now open-source

Tribblix – The Retro Illumos Distribution

Sandstorm- self-hostable web productivity suite

Open Lovable

What to Do When Critical Open Source Projects Go End of Life

Self-Guaranteeing Promises

Show HN: I built an offline, open‑source desktop Pixel Art Editor in Python

Ashet Home Computer

Eca: Editor Code Assistant – AI pair programming capabilities agnostic of editor

Le Lamp – an open source expressive robot

How I Started Contributing to Tinygrad – My First 4 Merged PRs

North Korean hackers target open-source repositories in new espionage campaign

Citybound: City building game, microscopic models to vividly simulate organism

Car Brands Running Curl

Lessons learned from buying an open source repo

Show HN: Chatbang – Access ChatGPT from the terminal without an API key

A minimal tensor processing unit (TPU), inspired by Google's TPU

OpenMower – An Open Source Lawn Mower

Show HN: Chroma Cloud – serverless search database for AI