... disagreement to characterise, because the label was perfectly stable. It was just the wrong label. A repeat test can only detect instability, and a deterministic mislabel passes it every time, by construction. The control arm is what exposed it, and only because the two arms failed in shapes that should not have matched each other. Comment from Serdar D(@serdarships): @omri_ben_shoham1   Taking the calibration test, and I would run it before writing any of the alerting logic ... ... catch on the plan-tier gate - I hadn't checked that Logpush for Firewall Events sits behind Enterprise specifically. For anyone stuck on Free/Pro/Business, there's a middle ground short of paying for Enterprise: the GraphQL Analytics API also exposes

... without actually understanding what triggered the failure. So I changed the order. Now my first request is: Reproduce the failure before changing anything. I ask the agent to: identify the exact failing scenario reproduce it locally show the expected vs actual behavior identify the smallest failing case explain what it thinks is happening only then propose a fix That extra step has been useful because it separates: I found some code that looks suspicious from: I can actually reproduce ... ... problem this code causes. It also catches a second problem: sometimes the reported bug isn't actually a bug in the code being inspected. The reproduction exposes

... when needed and vanish 5 minutes later. Even if something somehow got compromised, the window is 5 minutes not 5 months. Visit betterclaw.io . We're basically shouting security at you from every page. That's deliberate. After 500,000+ exposed openclaw instances, a zero-click RCE exploit, and supply chain attacks through the skill marketplace, security shouldn't be a footnote. It should be obnoxious. We chose obnoxious. "So what DON'T you do that other free products ... ... your API usage). No gating basic features behind paywalls. free gets unlimited chat, smart context management, verified skills, Telegram, Slack. Same features as paid, just with usage limits. "What's actually different on paid then?" More tasks (unlimited vs

... want to make the harder argument, because I live on the other side of it. Not every product should be a tool an agent picks up. I build Murror, an AI companion for understanding your own emotions, and "expose it as an MCP tool so agents can call it" is a genuinely bad idea for us, and it's worth being precise about why. The value of Murror isn't a returnable result. There's no output an agent could ... ... destination? If the value is a result someone wants and doesn't care how they got an action then being agent-callable is close to free distribution and you should be looking hard at it before your competitor

... built something as an afterthought, basically a debug tool we left exposed because we were lazy about hiding it, and it turned into one of the most used parts of the product. meanwhile a couple of things we spent weeks polishing barely get touched. curious if this is universal. what's a feature that you almost didn't ship, or built half-heartedly, that ended up mattering way more than the stuff you were actually proud of building? Comment from ... ... check whether it actually refuses when it should. survivorship bias is a fair worry, but I think it's less that lazy features randomly win and more that the ones people ship reluctantly tend to be the ones that expose

... favorite use cases now) An API contract forces cleaner boundaries in your own architecture, so your product code gets better as a side effect Every endpoint is a surface an MCP server can expose, so agent support becomes nearly free We just went through this ourselves at @Basedash: AI data analyst . We spent the last few months exposing

... Trust is especially important when an app can access location, motion sensors or emergency contacts. However, transparency is not always as simple as publishing everything. Sharing source code and data flows can help independent review, while exposing detailed detection logic or security controls could also make a safety system easier to bypass. Which information would actually help you decide whether to trust a personal safety app? Would you look for a clear privacy model, permission explanations, selected public source code ... ... interested in examples of products that have handled this balance particularly well. Comment from Matthias Str lman(@matthias_stralman): this is the tension i've thought about most, honestly. the instinct is "open source everything," but you nailed it, exposing

... production. Auth bugs, webhook failures, that kind of thing. What worries me more is the stuff that doesn't break loudly. No error, no crash, it just quietly leaks data or accepts requests it shouldn't. Things like exposed API keys sitting in the frontend bundle, missing rate limits, or database rules that let any logged in user read rows that aren't theirs. None of that throws an error. It just sits there until someone finds ... ... only gets exercised once you log in as a second, different user and try to touch the first user's row from that session. And 'denied' has two flavors worth telling apart: an empty result, the policy filtering correctly, versus

... didn't slow your team down. Misalignment and lack of visibility did. AI just exposed it. We spent the last two years doing agentic engineering work across our own teams and clients. Same thing kept happening: code was moving fast, everything around it wasn't. Docs weeks behind. Tickets missing. Leadership asking what was shipping and getting answers that depended on someone remembering to update the board. Speed up one layer of the system and every gap compounds fast ...

... everyone Netfox 0.8.0 is out, and it ships something that came straight from this community: a Prometheus-compatible metrics endpoint. Huge thanks to @angsak6 you asked us to expose Netfox's data to Prometheus so you could chart it in Grafana next to the rest of your homelab. Here it is. Turn it on in Settings Integrations and Netfox serves /metrics in the Prometheus text format. Point Prometheus at it, drop the series into Grafana, done. What it exposes

... Expose Your Competitors

... gotten thank you. You named something I half-felt but hadn't: rank is a vanity proxy; the signal is pull . All three are buildable from PH data, and they're going on the roadmap: Velocity shape (first 3h vs final) started capturing intraday this week, exactly for this. Engagement depth (unique commenters per 100 upvotes; comment-to-vote over time , not one figure) the "split by depth and timing" point is a real upgrade over the single ratio ... ... unanswered question does. If you weight them equally, a maker who replies to every easy congratulations and ignores every genuine question will score well on your metric while doing exactly the wrong thing. Even a crude intent flag, question versus

... Something I built led to a design decision I want to get feedback on. LineageLens is a free VS Code extension that captures every AI code insertion and scores it for risk on a 0 100 scale. Works with Cursor, Copilot, ClaudeCode, Gemini CLI. Zero config on install just start using your AI tools and your insertions start showing up in the sidebar. The scoring is deterministic rules: +28 for credential-like material, +24 for eval/exec patterns, +22 for subprocess ... ... require the prompt to be visible.The practical consequence: if you run only the extension without the proxy backend, your risk scores are 24 points higher for the same code than they would be with full prompt capture. The architecture exposes

... because it was wrong, but because it was designed for a world where you could afford to be slow, partial, and reactive. That world is gone. The real shift isn t that AI improves discovery -it s that it exposes how much of discovery today is still fragmented, episodic, and disconnected from actual decisions. That s why we built Athena -not to add AI to discovery, but to move toward a model where discovery is continuous, adaptive, and directly tied ... ... time intelligence. Comment from FinSight AI(@tim_blanc): This framing really resonates. The bar for what counts as "good research" or "informed decision-making" is shifting dramatically. What I've noticed: AI accelerates the discovery phase, but it also exposes

... www.producthunt.com/p/netfox/net... - let me know if it works for you Comment from Anurag sarkar(@angsak6): @gfazioli  One small feature request if possible. I use prometheus + grafana for monitoring my homelab, is it possible for you to expose an prometheus compatible endpoint and expose

... clearly see what is happening. With Pulseboard, we are trying to build something earlier, lighter and safer. The idea is simple: What if every employee could send a small daily signal about how they are doing, without having to expose themselves immediately? Not a long survey. Not a heavy HR process. Not a public confession. Just a small anonymous check-in that helps people notice changes earlier. Why anonymity matters In many teams, people do not speak up when work ... ... team may need attention. That could mean: someone s stress pattern has changed workload pressure is rising emotional energy is dropping one or more people may be struggling the team s general wellbeing signal is shifting This does not expose

... doorbell. It rings the same whether it's a package or a fire. That's basically the gap Pushary fills, same hook idea you've already wired, but the event carries a real handoff (done vs blocked vs

... your audit trail can tell you what it actually saw. That is the part I keep coming back to: a flat log is easy to build, but it is not honest enough for mixed-tool AI work. One assistant exposes prompt text, another only gives you metadata, another leaves you with an editor diff. If you flatten that into one record type, you have not built provenance. You have built confidence theater. What I wanted LineageLens to do was simpler ... ... only saw the file diff, say so . If it saw nothing reliable, say that too. That sounds like a small schema choice, but it changes the whole conversation . Suddenly the record is queryable without pretending every tool exposes

... shows realtime camera and microphone activity across the menu bar, title bar, Health Check, Settings > Privacy, notifications, and Ops Feed. When available, it can also show which app is using the microphone, and likely camera attribution when macOS exposes enough information. You can also enable notifications when camera or microphone activity starts. Would love feedback from macOS users who spend a lot of time in calls, recordings, demos, or shared workspaces. Full changelog: https://roomservices.pro/changelog Comment from Arda ... ... first notification Comment from Arda Can K rko (@ardacankrko): @ellie_russell  Good question. The activity signal itself is reliable: Room Service can tell when camera or mic activity starts. Attribution is strongest for the mic, where macOS usually exposes

... goal isn't met, everyone gets their money back. No harm, no foul. But when app developers try to force this exact model onto standard Shopify stores by offering "automatic refunds for failed campaigns," they inadvertently expose merchants to massive financial liabilities. Here is why the "charge upfront, mass-refund later" model is a ticking time bomb for your Shopify business and how you can test product demand without risking your payment processor account. 1. The Devastating Hidden Cost: Unrecoverable ... ... Fees The biggest secret that competitors

... saved login from import or autofill, it s in the  same on-device vault  as Firefox. Is the vault walled off from the assistant? For vault contents: yes, by architecture. The Oasis Assistant exposes dozens of browser tools (tabs, groups, bookmarks, history search, page summarize, etc.). There is  no   list my passwords, export logins, or vault-read tool in that set. Product-improvement telemetry (anonymous by default) is scoped to  assistant interactions   prompts, replies ... ... cloud.  It means the  password vault is a separate subsystem  from the assistant s context pipeline. Here s the honest boundary table: Scenario Vault Assistant / cloud Passwords you imported from Chrome/Safari/etc. On-device, encrypted Not exposed

... shipped Netfox 0.3.3. No new features this round a focused polish pass on accuracy, privacy, and reliability based on real usage. What's better: Security that tells you what actually matters - The Security view now clearly separates devices that expose a service from the ones genuinely at risk. A device serving plain HTTP but also offering HTTPS is no longer lumped in with the insecure ones each service shows exactly how many of its devices carry a real finding. - Plaintext ... ... admin pages on alternate

... What's the process to secure a vibe-coded app to make sure you haven't done anything silly like left your API tokens exposed in the browser or accessible via the DevTools console? Or to prevent cross site scripting attacks, or ensure forms only accept sanitized inputs that can't be used to manipulate the database. Or that your user authentication is safe and secure and no one is going to be able to login to someone else ... ... Explain risk clearly 4. Suggest practical fixes 5. Prioritize critical issues first Focus especially on: - Broken access control - Authentication flaws - Missing authorization checks - IDOR vulnerabilities (Insecure Direct Object References) - SQL injection - XSS (stored, reflected, DOM) - CSRF - File upload vulnerabilities - Exposed

... full backup  of web pages. It is  distilled text  used to steer replies, not a copy of everything you browsed. How to work with it: Keep chatting in the same thread for continuity. If your build exposes a control, ask the assistant to  forget  sensitive details you do not want retained. Start a  New chat  when you want a  clean memory scope  (separate from chat history stored in IndexedDB). Privacy note ... ... Memory sits in the broader assistant data picture. See what leaves the device vs

... before they become a problem. You can upload a BOM or parts list, and PartFinder looks at things like lead-time changes, supplier concentration, geography exposure, disruption events, and replacement difficulty. The goal is to show which parts are exposed, why they re risky, and what actions teams can take next like finding alternates