<a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;live&#x2F;Tf_UjBMIzNo" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;live&#x2F;Tf_UjBMIzNo</a>

Live: Artemis II Launch Day Updates

EmDash – A spiritual successor to WordPress that solves plugin security

DRAM pricing is killing the hobbyist SBC market

Show HN: Git bayesect – Bayesian Git bisection for non-deterministic bugs

SpaceX files to go public

Please state the location and include REMOTE for remote work, REMOTE (US)
or similar if the country is restricted, and ONSITE when remote work is not an option.Please only post if you personally are part of the hiring company—no
recruiting firms or job boards. One post per company. If it isn&#x27;t a household name,
explain what your company does.Please only post if you are actively filling a position and are committed
to replying to applicants.Commenters: please don&#x27;t reply to job posts to complain about
something. It&#x27;s off topic here.Readers: please only email if you are personally interested in the job.Searchers: try <a href="https:&#x2F;&#x2F;nthesis.ai&#x2F;public&#x2F;hn-who-is-hiring" rel="nofollow">https:&#x2F;&#x2F;nthesis.ai&#x2F;public&#x2F;hn-who-is-hiring</a>, <a href="http:&#x2F;&#x2F;nchelluri.github.io&#x2F;hnjobs&#x2F;" rel="nofollow">http:&#x2F;&#x2F;nchelluri.github.io&#x2F;hnjobs&#x2F;</a>, <a href="https:&#x2F;&#x2F;hnjobs.emilburzo.com" rel="nofollow">https:&#x2F;&#x2F;hnjobs.emilburzo.com</a>,
or this (unofficial) Chrome extension:
<a href="https:&#x2F;&#x2F;chromewebstore.google.com&#x2F;detail&#x2F;hn-hiring-pro&#x2F;mpfaljjblphnlloddaplgicpkinikjlp" rel="nofollow">https:&#x2F;&#x2F;chromewebstore.google.com&#x2F;detail&#x2F;hn-hiring-pro&#x2F;mpfal...</a>.Don&#x27;t miss this other fine thread: Who wants to be hired? <a href="https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=47601858">https:&#x2F;&#x2F;news.ycombinator.com&#x2F;item?id=47601858</a>

Ask HN: Who is hiring? (April 2026)

AI for American-produced cement and concrete

StepFun 3.5 Flash is #1 cost-effective model for OpenClaw tasks (300 battles)

Windows 95 defenses against installers that overwrite a file with an older one

I&#x27;m excited to introduce Zerobox, a cross-platform, single binary process sandboxing CLI written in Rust. It uses the sandboxing crates from the OpenAI Codex repo and adds additional functionalities like secret injection, SDK, etc.Watch the demo: <a href="https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=wZiPm9BOPCg" rel="nofollow">https:&#x2F;&#x2F;www.youtube.com&#x2F;watch?v=wZiPm9BOPCg</a>Zerobox follows the same sandboxing policy as Deno which is deny by default. The only operation that the command can run is reading files, all writes and network I&#x2F;O are blocked by default. No VMs, no Docker, no remote servers.Want to block reads to &#x2F;etc?<pre><code> zerobox --deny-read=&#x2F;etc -- cat &#x2F;etc&#x2F;passwd

 cat: &#x2F;etc&#x2F;passwd: Operation not permitted
</code></pre>
How it works:Zerobox wraps any commands&#x2F;programs, runs an MITM proxy and uses the native sandboxing solutions on each operating system (e.g BubbleWrap on Linux) to run the given process in a sandbox. The MITM proxy has two jobs: blocking network calls and injecting credentials at the network level.Think of it this way, I want to inject &quot;Bearer OPENAI_API_KEY&quot; but I don&#x27;t want my sandboxed command to know about it, Zerobox does that by replacing &quot;OPENAI_API_KEY&quot; with a placeholder, then replaces it when the actual outbound network call is made, see this example:<pre><code> zerobox --secret OPENAI_API_KEY=$OPENAI_API_KEY --secret-host OPENAI_API_KEY=api.openai.com -- bun agent.ts
</code></pre>
Zerobox is different than other sandboxing solutions in the sense that it would allow you to easily sandbox any commands locally and it works the same on all platforms. I&#x27;ve been exploring different sandboxing solutions, including Firecracker VMs locally, and this is the closest I was able to get when it comes to sandboxing commands locally.The next thing I&#x27;m exploring is `zerobox claude` or `zerobox openclaw` which would wrap the entire agent and preload the correct policy profiles.I&#x27;d love to hear your feedback, especially if you are running AI Agents (e.g. OpenClaw), MCPs, AI Tools locally.

Show HN: Zerobox – Sandbox any command with file, network, credential controls

A new C++ back end for ocamlc

The revenge of the data scientist

Swappa.com for GrapheneOS compatible devices – Stay Away

Signing data structures the wrong way

Fast and Gorgeous Erosion Filter

I built a real-time flight tracker that renders 10,000+ aircraft on an interactive 3D globe, entirely in the browser using Rust compiled to WebAssembly.

Show HN: Flight-Viz – 10K flights on a 3D globe in 3.5MB of Rust+WASM

Jax's true calling: Ray-Marching renderers on WebGL

Scientists crack a 20-year nuclear mystery behind the creation of gold

ZomboCom stolen by a hacker, sold, now replaced with AI-generated makeover

I kept deleting and redownloading Instagram because I couldn&#x27;t stop watching Reels but needed the app for DMs. Tried screen time limits, just overrode them. So I built this.Dull loads Instagram, YouTube, Facebook, and X and filters out short-form content with a mix of CSS and JS injection. MutationObserver handles anything that lazy-loads after the page renders, which is most of the annoying stuff since these platforms love to load content dynamically.The ongoing work is maintaining the filters. Platforms change their DOM all the time, Instagram obfuscates class names, YouTube restructures how Shorts appear in the feed, etc. It&#x27;s a cat-and-mouse thing that never really ends.Also has grayscale mode, time limits, and usage tracking.Happy to answer questions.

Show HN: Dull – Instagram Without Reels, YouTube Without Shorts (iOS)