HNHacker News
TopNewBestAskShowJobs

vhsdev

182 karma · joined January 11, 2022

submissionscomments
vhsdev··on Show HN: Birdcage – Secure remote access for personal AI
I built Birdcage because I wanted to access my claw from anywhere without handing auth to a third party or punching holes in my home network.

Birdcage sits on a VPS and handles auth + reverse proxying. The connection back home runs over WireGuard — the VPS only sees opaque packets. The agent manages its own WireGuard interface, discovers endpoints via STUN, and falls back to relay when direct UDP fails.

Auth uses PBKDF2 with adaptive proof-of-work on brute force, JWT dual-token pattern with sliding session expiry, and WireGuard key rotation on a configurable interval. Single binary, pure Go, no CGO.

vhsdev··on Show HN: Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers
Pretty sure all those are covered, upon more careful review. PRs open!

Edit: The create account I hadn't thought of for the email enum. Thanks!

Edit 2: Fixed up two schema issues identified and the last mitigated already via call: await passwords.rejectPasswordWithConstantTime(validatedData.password)

vhsdev··on Show HN: Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers
Hi, amichal. Nice finds. I will dig into more of the particulars where sensible. Please feel free to send up a pull request! Thanks for taking a peek.
vhsdev··on Show HN: Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers
Everything you or your agent need to see is in the commit history.
vhsdev··on Show HN: Minimal NIST/OWASP-compliant auth implementation for Cloudflare Workers
Appreciate it, TheTaytay!
vhsdev··on RedwoodSDK – a composable framework for building server-side web apps
May I live a thousand years and never hunt again.
vhsdev··on Degoogled phones running privacy oriented OS
Did anyone look at the business address? It's placeholder text...
vhsdev··on German publicly funded open source projects
Briar is a fantastic tool. A little rough around the edges but the idea of being able to use Bluetooth to communicate with someone in range versus sending data into a router has appeal beyond offline communication. I'd love to see Codeberg on here in the future. They're doing a bang up job.
vhsdev··on Injecting fairness into machine-learning models
I thought it was garbage in, garbage out. Here they seem to be suggesting garbage in, fairness out.
vhsdev··on F-Droid – alternative to Google Play store
Some of my favorite apps on F-Droid and the apps they help replace:

Floris Keyboard - Gboard

Bromite - Chrome

OsmAnd+ - Google Maps

Editor - Google Keep

My Expenses - Mint

NewPipe - YouTube

LibreSpeed - Ookla Speed Test

Currencies - xCurrency

Diary - DayOne

Password Store - 1Password

Aegis - Authy

WireGuard - All VPNs

Book Reader - Acrobat

Pluvia Weather - Weather

vhsdev··on Show HN: A more social, Amazon-free alternative to Goodreads
I commonly rely on Goodreads for book reviews before deciding if it's worth spending the time to read. Any chance of integrating functionality like this with z-lib.org?
vhsdev··on I'm getting spammed via Google Photos sharing
You signed a legal agreement with Google and gave them permission to update it anytime without notifying you. That's the root of your problem, not spam.
vhsdev··on Testing Library
There's a concept called building for throwawayability in the front-end. If you're using Testing Library for tesing front-end components and you're not writing a big app consider whether or not you're using your time wisely. As by the time you finish perfecting your unit tests you might have to throw it all away.
vhsdev··on Covid-19 Vaccines Linked to Menstrual Cycle Changes
Here we go again. What was once a conspiracy is now mass media designed to feed the frenzy. Perhaps menstral cycles are 100% psychological for the 20% who opted to rely on their own immune systems to fight the disease. What do you think?
vhsdev··on Play audio only on YouTube and save bandwidth
youtube-dl -x --audio-format mp3 https://youtu.be/k3WkJq478To
vhsdev··on Living by the Code: In China, Covid-Era Controls May Outlast the Virus
Funny how many places look JUST like China right now...
vhsdev··on Docker for Mac Without Docker Desktop
The proper way to develop with docker on Mac is using a Linux dual-boot.
vhsdev··on Wire is now on F-Droid
It's always great to see new software titles land on F-Droid. The rub with messengers is that for each new messenger we've further fragmented our ability to communicate with one another. Rember the telephone? You used to be able to call literally anyone and you didn't have to ask which operator they were using.