Friday, August 2, 2024

Show HN: Trayce – Network tab for your local Docker containers https://ift.tt/k65lViE

Show HN: Trayce – Network tab for your local Docker containers Trayce is an open source desktop application which monitors HTTP(S) traffic to Docker containers on your machine. It uses eBPF to achieve automatic instrumentation and sniffing of TLS-encrypted traffic. As a backend developer I wanted something which was similar to Wireshark or the Chrome network tab, but which intercepted requests & responses to my containers for debugging in a local dev environment. Wireshark is a great tool but it seems more geared towards lower level networking tasks. When I'm developing REST APIs I dont care about packets, checksums, bit flags etc. I'm only concerned with HTTP requests and their responses. I also didn't want to have to configure a pre master key to intercept TLS, I wanted it to work out-of-the-box. Trayce is in beta phase so feedback is very welcome, bug reports too. The frontend GUI is written in Python with the QT framework. The TrayceAgent which is what does the intercepting of traffic is written in Go and eBPF. https://trayce.dev July 31, 2024 at 12:28AM

Show HN: Anyma V, a hybrid physical modelling virtual instrument https://ift.tt/RITB4A7

Show HN: Anyma V, a hybrid physical modelling virtual instrument Hi HN! We're a small team in Lille (France) who make synthesizers and MIDI controllers. We've just released a virtual plugin version of our hardware synth Anyma Phi, which offers a semi-modular environment with a focus on physical models, although there are several other kinds of synthesis. Here's a video: https://www.youtube.com/watch?v=6efDQ9GmRpg We're not pivoting to VSTs, it's just that it was a practical way of investigating several issues and helping us with the ongoing development of our upcoming Kickstarter-backed synth (Anyma Omega) and MPE controller (Loom), and a gift to thank our backers for the wait they gave to go through due to several manufacturing and production issues. I enjoy reading music-related entries here, so I thought I'd contribute this time and I hope it will interest some. I'm here for any question or remark. https://ift.tt/pFVNnPI August 2, 2024 at 12:05AM

Show HN: Limbo – SQLite compatible, in-process OLTP database written in Rust https://ift.tt/H6E7VGb

Show HN: Limbo – SQLite compatible, in-process OLTP database written in Rust https://ift.tt/QxLGMyj August 1, 2024 at 11:48PM

Show HN: Uncover the Tools and Tech Behind Any Website https://ift.tt/l1XG7Qu

Show HN: Uncover the Tools and Tech Behind Any Website https://ift.tt/2478xjq August 1, 2024 at 11:29PM

Thursday, August 1, 2024

Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes https://ift.tt/SkjHuz9

Show HN: Shadow IT Scan – Uncover SaaS Apps, Users and Risky OAuth Scopes Hey HN, TL;DR: We’ve launched a free version of our Shadow IT scanner to identify which SaaS apps are used in your company, who uses them, and if they have high-risk OAuth scopes. Philip and I went through YC with AccessOwl in 2022. We started the company because, in our previous roles, we struggled to track all the SaaS apps, users, and granted OAuth scopes. The Shadow IT scanner started as a small feature within AccessOwl, which manages SaaS vendors and user accounts centrally. But a standalone scanner would have made our lives so much easier in our previous roles. So, we thought, why not release it? And here it is: a free, standalone Shadow IT scanner! Hope you find it useful :) The Shadow IT scan helps with: 1. Offboarding: Employees often don’t report all the apps they sign up for, making it tough to track and secure these accounts when they leave, especially with the common SSO tax. 2. Security: OAuth scopes are quickly granted but rarely reviewed or removed, leading to organizations unknowingly spreading their data. 3. Compliance: Auditors need a list of SaaS vendors, which is hard to compile when employees sign up for tools independently. Any surprises in your scan? What features would you like to see in the next version? Looking forward to your feedback! FAQ What’s Shadow IT? Unauthorized SaaS apps within an organization not centrally managed, posing security and compliance risks. How does it work? Our tool connects to your Google Workspace or M365 instance, identifies OAuth tokens granted, and maps them to known SaaS tools. Note: In this v1 version, it only detects apps using the “Sign in with Google/Microsoft” button. Who is this for? Typically IT and InfoSec teams, but in smaller companies, it may fall under the CTO. Is it safe to use? Yes, reading OAuth tokens is standard for SaaS management tools. Data extraction only occurs when you initiate a scan. AccessOwl is SOC 2 Type II audited and GDPR compliant. https://ift.tt/qbHOtdF July 31, 2024 at 05:35PM

Explore Our Vision Zero 10-Year Report and Shape the Program's Future

Explore Our Vision Zero 10-Year Report and Shape the Program's Future
By

Vision Zero is the city’s policy to end traffic fatalities. As we mark ten years since the launch of Vision Zero, we want to partner with you to shape the future of this traffic safety program. This week, we published a Vision Zero 10-Year Report. It summarizes the work we’ve done since 2014 to prevent traffic deaths and reduce severe injuries. Last month, we launched summer outreach. We published our Help Us Shape What’s Next for Vision Zero blog to hear from you about next steps for the program. We’ll be collecting feedback and priorities from the Vision Zero community through the end of...



Published July 31, 2024 at 05:30AM
https://ift.tt/56NVIOy

Show HN: Shimmr: Free iOS App Uses CIA Findings to Enhance Meditation and Focus https://ift.tt/qI9BEgz

Show HN: Shimmr: Free iOS App Uses CIA Findings to Enhance Meditation and Focus https://ift.tt/hkl6TNV July 31, 2024 at 11:58PM

Show HN: Free OSS transcription app I made and found it's faster than wispr flow https://ift.tt/jXQh9Tk

Show HN: Free OSS transcription app I made and found it's faster than wispr flow title doesn't let nuance, ofc it's not the app ...