HNHacker News
TopNewBestAskShowJobs

txprog

238 karma · joined July 17, 2011

[ my public key: https://keybase.io/tito; my proof: https://keybase.io/tito/sigs/dID2W_AkC_XIHDm8MkNiKBk3TV5IT2nDZ7KvqqyVWoI ]
submissionscomments
txprog··on Ask HN: How are you handling runtime security for your AI agents?
We're working on that! Many sandboxes exist, including our own, Greywall. It integrates with our proxy, Greyproxy, which handles TLS interception and reconstructing LLM conversations, plus features like credential swapping. We currently have a PR for middlewares we can test; things like intent classification to catch conversation derails, PII redaction, etc.

It's open source, check out greywall.io // github.com/greyhavenhq/greyproxy // github.com/greyhavenhq/greywall

txprog··on OpenClaw privilege escalation vulnerability
This is why kernel-level sandboxing matters. I use a sandbox name greywall that enforce filesystem/network isolation at the syscall level (Landlock + Seccomp + eBPF on linux, sandbox-exec on mac).

I do disagree about unix system were designed for this kind of stuff. Unix was not designed for an agent to act like you and take decision for you...

txprog··on Show HN: Userland local agent sandbox with real-time network control dashboard
Author here. I didn't set out to build this. Started with Cubbi as a opinionated Docker-based wrapper for CLI agents, but the network restrictions and not having my own tooling kept fighting. Then found Fence which was already doing the hard kernel work really well. What pushed me to go further was network control: tools that ignore HTTP_PROXY env vars bypass proxy-based filtering entirely. The transparent TUN approach captures everything regardless (but not yet on macos).

The dashboard is just the start. The real goal is full conversation observability including tool calls, a semantic firewall that understands what the agent is actually trying to do rather than just which domain it's hitting, and credential replacement on the fly before anything leaves the machine. The hard part is that sitting as a transparent proxy makes this significantly more complex, and I don't want to touch any agent internals or require integrating a third party SDK.

Happy to answer questions and curious how others are thinking about the visibility vs isolation tradeoff.

txprog··on Ask HN: What was an interesting project you started and finished over a weekend?
I wrote a podcast generator based on AI related papers that ingest the podcast dialogues, voices, tag, assemble audio et publish RSS automatically. I was inspired by the PDF ingestion of OpenAI and the quality of the TTS.

It is named https://paperbrief.net

txprog··on Ask HN: Who wants to be hired? (July 2023)
SEEKING WORK | France (UTC-1) | Remote | Full stack developer

My name is Mathieu Virbel, and I am a consultant on system and software architecture with over 12 years of experience as a consultant and 20 years into programming. I have a passion for creating innovative and user-friendly applications. I specialize in using the open-source Kivy framework to develop desktop and mobile applications, but I am also skilled in other technologies and frameworks.

I worked on a variety of subjects, from Interactives and mobile application for Museum and Public Institutions, Embedded system in security company, telecommunication, and Startups environments from scratch. Recently playing with Python, Golang, VueJS 3/Typescript, InfluxDB, Docker Swarm, as well as writing specifications and reviewing code of others contractors.

Technologies: Python (django, flask, tensorflow, Kivy, fastapi, aiohttp …), Golang, TypeScript, VueJS, Quasar, Docker, Docker Swarm, Terraform, Ansible, MongoDB, InfluxDB, MariaDB, SQLite, Kafka, Prometheus/Graphana

Résumé/CV: https://meltingrocks.com/cv

LinkedIn: https://www.linkedin.com/in/mathieuvirbel/

Website: https://meltingrocks.com

Email: mat@meltingrocks.com

Notable Project: Kivy ( https://kivy.org/ )

txprog··on Ask HN: Freelancer? Seeking freelancer? (June 2023)
SEEKING WORK | France (UTC-1) | Remote | Full stack developer

My name is Mathieu Virbel, and I am a consultant on system and software architecture with over 12 years of experience as a freelance and 20 years in the field. I have a passion for creating innovative and user-friendly applications. I specialize in using the open-source Kivy framework to develop desktop and mobile applications, but I am also skilled in other technologies and frameworks.

I worked on a variety of subjects, from Interactives and mobile application for Museum and Public Institutions, Embedded system in security company, telecommunication, and Startups environments from scratch. Recently playing with Python, Golang, VueJS 3/Typescript, InfluxDB, Docker Swarm, as well as writing specifications and reviewing code of others contractors.

Technologies: Python (django, flask, tensorflow, Kivy, …), Golang, TypeScript, VueJS, Quasar, Docker, Docker Swarm, Terraform, Ansible, MongoDB, InfluxDB, MariaDB, SQLite, Kafka, Prometheus/Graphana

Résumé/CV: https://meltingrocks.com/cv

LinkedIn: https://www.linkedin.com/in/mathieuvirbel/

Website: https://meltingrocks.com

Email: mat@meltingrocks.com

Notable Project: Kivy ( https://kivy.org/ )

txprog··on Ask HN: Who wants to be hired? (June 2023)
Location: France

Remote: Yes

Willing to relocate: No

Technologies: Python (Django, Flask, TensorFlow, Kivy, …), Golang, TypeScript, VueJS, Quasar, Docker, Docker Swarm, Terraform, Ansible, MongoDB, InfluxDB, MariaDB, SQLite, Kafka, Prometheus/Graphana, Wireguard

Résumé/CV: https://meltingrocks.com/cv

LinkedIn: https://www.linkedin.com/in/mathieuvirbel/

Website: https://meltingrocks.com

Email: mat@meltingrocks.com

Notable Projects: Kivy ( https://kivy.org/ )

My name is Mathieu Virbel, and I am a consultant on system and software architecture with over 12 years of experience as a freelance and 20 years in the field. I have a passion for creating innovative and user-friendly applications. I specialize in using the open-source Kivy framework to develop desktop and mobile applications, but I am also skilled in other technologies and frameworks.

I worked on a variety of subjects, from Interactives and mobile application for Museum and Public Institutions, Embedded system in security company, telecommunication, and Startups environments from scratch. Recently playing with Python, Golang, VueJS 3/Typescript, InfluxDB, Docker Swarm, as well as writing specifications and reviewing code of others contractors.

txprog··on Dotfiles Management
I discovered chezmoi a few days ago after getting a new laptop and a wish to normalize my configuration across multiple computers.

Templating is awesome when having computers with differents DPI or screens attached, OS, etc.

Edition with --watch is a breeze, auto commit too!

txprog··on Ask HN: Do you self-host your database?
Very interested to hear your story and details!
txprog··on Indoor CO2 could cut our capacity for complex, strategic thinking: study
Shameless plug here. I'm working for https://cozyair.fr - keeping a good indoor air quality is good for both the user but also the the building.

CO2 is not the only factor you should look at, PM are also dangerous when you cook, or when there is outside pollution. NO2/O3 is an outdoor air pollution that we watch. Because the only way to get out the CO2 is ventilation / open your windows for a few minutes. But it can bring another kind of pollution depending your area.

txprog··on Ask HN: What are some hacks of real founders who did things that don't scale?
Using redis as a main database.
txprog··on Python for Android
Just an addition, there is many others alternatives, but it may be hard for others to be able to compile the Python extensions you want (or impossible). That's what we wanted to do here: ability to pick the extension needed, provide a "recipe" that contain specialized tricks or patches to extension for running in Android, etc.
txprog··on Python for Android
A minimal hello world with Python 3 required 7MB. But it's not optimized.

Unlike pyinstaller, we don't scan import to try reducing the distribution on the phone. Instead we have a blacklist.txt which you can put file pattern to exclude during packaging. I remember for one app in Python 2 to reduce the size around the 5MB.

We won't be able to reduce much more, as Python interpreter is embedded. We also don't want to adopt an approach like Qt where Qt binaries can be shared for all Qt-application, which break the all-in-one APK, open some potential issues, and add more work to manage dependencies.

txprog··on Python for Android
Please note that Python for Android project is not meant to be used with Kivy only anymore.

It's a project that allow you to compile Python and dependencies, and package it along your own application. You could for example compile Numpy, ZMQ, sqlalchemy, zeroconf, etc...

We have a mechanism called bootstrap that allow you to select your primary technology that you're going to use for your application, such as "sdl2" (required for kivy), "webview" (it just start a webpage that connect to your phone port 5000, so you can start an embed webserver such as Flask to serve your app), "service_only" (if you don't need any kind of UI). New bootstrap can be written to support another type of apps.

Also, you could embed your whole UI in pure java if you wanted too, as the directory libs (to include .jar) or src (to include .java) are compiled. So you can imagine having your app in Java, but still call Python for something else if you really wanted too.

txprog··on JavaScript Start-up Performance
I'm confused.

One of the idea behind CDN for javascript/css is to leverage caching by reusing the same resources across websites. But then optimization tools said we should bundle everything into one javascript, which delay the loading time, but defeat the initial purpose.

I wonder if the caching could be more intelligent, by recognizing libraires bundled into the "big" javascript that website delivers, and parse only the new content.

txprog··on Show HN: Ninchanese, Learn Chinese with SRS, natural learning, voice recognition
Not at all. For example, if you already know the HSK1, feel free to start directly on the World 2. Each world = one HSK for now, and you can learn up to HSK 5 with the current application (HSK 6 on the way).

In case you stop in the middle of HSK 1, going through the stage should be very easy. I still think you should give it a try, as even if you know the word, you'll also make sentence and learn to talk (or listen if you don't like to talk). Review are only for words right now, and if you know them, they won't bother you a lot ^^

Let me know if you need any help!

txprog··on Ask HN: What cool development languages/tools changed your career?
Kivy (https://kivy.org) changed my career too. I make now a living mostly due to this project :)
txprog··on Neural Networks Demystified
I liked! Already done the first 3, the music didn't bothered me neither the voice (i'm not a native english at all.). As for the concept explain, it's true that some equation are a little bit out of reach for someone that has less mathematical background. But i understand the concept so far, which are well explained.

I'm not sure i would be able to just write (or decide) the equation for the neural network. On what criteria can you decide this will work better or not? What are your key to make a decision?

txprog··on Python on Android
Awesome start!
txprog··on Kivy 1.9 – A framework for creating novel and performant user interfaces
Documentation. A subject that is as important as the code, maybe more. We are internally always debating what does an user should known by default, and how. Both matters and depends of the target (noob, average, expert) or which approach first (kv based or python based). I personally don't know how to write a good documentation, except if it's just API documentation. But in that case, API is just not sufficient, as concept need to be explain as well. We have actually one big big big contributor named ZenCode who work behind the scene on the documentation, and constantly fixing our mistake / wording. I ear you loud and clear, wish to have a better programming guide / module documentation as well.

About ListView... Let's say it's one of the Kivy widget that doesn't fit to the Kivy logic at all. Historically, i started a POC about it, then a contributor take it and worked a lot to have something that works for any sort of situations. And he tend up to something that cover lot of cases, but still bugs, and not easy to get it. Not to mention issue with performance. That's why i rebooted the ListView from scratch, and named it RecycleView (like RecycledView from android): https://github.com/kivy-garden/garden.recycleview

The visual design was taken from Meego / Android in the old days. We might be able to refresh the theme one day, if we have somebody that can contribute to it (i mean a real designer, not a coder). I rarely use the default theme, always extend a widget to put the designer visuals i got on customers projects.

txprog··on Kivy 1.9 – A framework for creating novel and performant user interfaces
The only one was ProcessCraft, released years ago.

Right now, it seems that peoples are shy to share their apps. We have a list on the wiki of what we have found + users contributions: https://github.com/kivy/kivy/wiki/List-of-Kivy-Projects

But i'm sure there is more. Like this one: https://play.google.com/store/apps/details?id=com.nrtech.nrt... - Kivy is not referenced anywhere, but it's based on it.

txprog··on 2048 with Leaderboard and achievements, with Kivy (Python/OpenGL)
Fixed in 1.2.0, should be up on Google Play soon. I've added it as a achievement by the way, You're a real master.
txprog··on 2048 with Leaderboard and achievements, with Kivy (Python/OpenGL)
Somebody on reddit said it was using ART and crash. Without it it work. Try without it maybe? I didn't got a chance to test a Kivy application with ART yet.
txprog··on 2048 with Leaderboard and achievements, with Kivy (Python/OpenGL)
Even after a restart? Would you have a chance to share the log (if you know how to do it)
txprog··on 2048 with Leaderboard and achievements, with Kivy (Python/OpenGL)
There is no ads, donations goes to Gabriel, i thank him in everyway i can when publishing. He said he wont do an ios/android App. There is nothing petty.
txprog··on 2048 with Leaderboard and achievements, with Kivy (Python/OpenGL)
There is no official version, as the author said: https://twitter.com/gabrielecirulli/status/44449813553323212...

The link your sent is by the way slower than the gl version :)

txprog··on Kivy - Open source cross-platform library for rapid development
It's not limited to game, check the gallery :) It's funny because before we did the contest, peoples was thinking it's not made for games...
txprog··on Kivy - Open source cross-platform library for rapid development
For now, yes. But we are working on it. Recently, we released Pyjnius (http://github.com/kivy/pyjnius) to access dynamically Java from Python. That way, we can access to various Android API without any Java code. We are doing the same with objective-C: pyobjus (http://github.com/kivy/pyobjus), but not yet finished.

Take a look at http://pyjnius.readthedocs.org/

txprog··on Kivy - Open source cross-platform library for rapid development
We embed the python interpreter with your python app inside an iOS app. Then, we have a bootstrap in objective-c that start the interpreter on your main.py file. ProcessCraft and Deflectouch are made with this approach, and are available on the app store :)
txprog··on Kivy - Open source cross-platform library for rapid development
That was the website github, the code is at https://github.com/kivy/kivy
Page 1 of 2Next →