... octoscope 0.27.0 the integrity scan stops describing a repo and starts noticing things about it. Before this release the supply-chain scan

... octoscope 0.28.0 is out, and the integrity scan can now see an attack that lives in two files instead of one. Here's the shape it used to miss. You read a workflow, it triggers on pull_request_target so anyone can start it, and it holds nothing worth stealing. Fine. Except the last line is uses: ./.github/workflows/build.yml with secrets: inherit and that file reads your deploy token. Neither file is a finding on its own. Together they ... ... reads as coverage: that response tells you the effective value, not where it came from. Org policy and a repository override are indistinguishable in it. You can see the posture; you can't see its provenance. Also, the scan

... Netfox 0.16.0 is out and this one finds what a network scan structurally can't. Here's the blind spot. Netfox checks every device by connecting to it across your network. Perfect for a printer, a NAS, a phone. Wrong for the Mac you're sitting at A dev server on 127.0.0.1:3000 genuinely refuses connections from anywhere else so the check says "closed". Accurate, and completely useless. The most interesting services on the machine you care most about ... ... that way: The Ports tab on a network device, grouped by category Also fixed: a closed port now says closed. A port that actively refuses a connection was being reported as filtered and those mean different things. Nothing listening, versus

... source repos, and I noticed a scary gap: You git clone a project, you point an agent at it, and before you type a single command , code can already run. A .git/hooks/pre commit, an npm postinstall, a .envrc, a VS Code task set to folderOpen, a CLAUDE.md that tells the agent to curl | bash none of these show up in a normal diff review. Your agent will happily trigger them for you, because it's just following instructions. Existing tools ... ... actually does (pipe to shell, credential theft, persistence, exfiltration ). A harmless "postinstall": "echo thanks" stays Medium, while curl | bash becomes Critical. You can run it as a CI gate, baseline known findings, output SARIF (directly upload to GitHub Code Scanning

... inbox." Personal Gmail for Spotify. Work account for the SaaS tools. An old iCloud address still getting App Store receipts from 2021. One inbox was never going to find all of it. So v1.1.0 is about that. **Scan up to 9 inboxes.** Connect up to 3 Gmail, 3 iCloud and 3 Yahoo accounts.Every result lands in the same subscription list no switching profiles, no separate accounts, no re-doing your setup. **Yahoo Mail joins the party.** Connected with ... ... came from.** A small source icon on each card, and the detail screen names the exact inbox that found it. Disconnect an account later and its subscriptions stay in your list, clearly marked nothing silently disappears on you. **Scanning

... suddenly lose access to all AI. But what happens if , one day, access to the leading American models is restricted more broadly? We would still have European models, open-source systems we can operate ourselves, and Chinese alternatives. But there is no guarantee that another major power would never make the same decision to protect its own strategic advantage. AI is no longer just another software category. It is becoming infrastructure. It will shape education, healthcare, national security, research ... ... world are American, and Europe should continue working closely with the United States. But cooperation and dependency are not the same thing. Technological sovereignty does not mean refusing to use foreign technology. It means having a real alternative

... Product Hunt, Room Service 2.5.0 is out. This release adds Keyboard Locker to the menu bar and makes Developer / Full scans much faster. Keyboard Locker temporarily blocks keyboard input until you unlock it from a full-screen overlay. Small feature, but useful when cleaning the keyboard or avoiding accidental input. The bigger update is scan

... vibe-coded something great. It runs. But your AI builder cared about "does it work," not "is it safe" so most of these apps quietly leave stuff open: keys, admin pages, endpoints you forgot existed. Xseth scans your site like an attacker would and gives you a PDF with everything it found and how to fix it. Then just hand that PDF to the AI you built with and let it patch things up. No security knowledge required. Free beta ...

... attack surface and surfaces the findings worth your attention, minus the scanner noise. We're pre-launch and at the stage where honest feedback is worth more than revenue. So here's the deal: We'll run a security scan on your website at no charge and walk you through what we find. Best fit if you're: About to launch (or recently did) and want a second set of eyes on your attack surface A founder or indie maker ... ... things I'm also curious about from this room: If you're shipping soon, what's your current security check before launch? Honest answers only "nothing" is a valid one. What would make you actually trust an automated scan

... face clustering, multi-person groups, richer location workflows, improved map runtime behavior, large-library performance work, and a new internationalized UI with English, German, and Simplified Chinese support. What s new People, Face Clusters & Groups iPhotron can now scan your photo library for faces, generate face thumbnails, build embeddings, and cluster them into persistent People cards. You can name people, merge duplicate clusters, hide or unhide people, choose covers, reorder cards, and create People groups for photos where multiple ... ... player controls, edit sidebar controls, and map preview entry points. Locale-aware formatters were also added for dates, numbers, decimals, and file sizes. Large Library Performance Recent releases include several improvements for larger libraries: More responsive thumbnail loading Better scan

... Shai-Hulud / Miasma worm has been quietly pushing itself into people's GitHub repos including real, well-known OSS projects where it auto-runs the moment you open the repo in an AI editor (Claude / Cursor / Gemini / VS Code) or install it, then harvests your tokens. It lives in the GitHub source, not the npm registry, so a lockfile audit never sees it. octoscope already points at the repos you own, so this release teaches it to look. @icflorescu What ... ... catches On a Repos row, open the action menu (space) and hit Security scan

... building OpenClaw LLM Proxy and would love early feedback. It's a drop-in OpenAI API replacement that scans every prompt and response for PII (SSN, credit cards, API keys) and injection attacks before they reach the provider. Block, redact, or log. We built it because most LLM proxy setups focus on routing and cost - we wanted to add a security layer on top. Self-hosted, 113 tests, Docker one-command. GitHub: https://github.com/secure-mind-l... What would you want ... ... partha_mehta): Update: We're launching on Product Hunt this Tuesday (June 16) at 12:01 AM PDT! Would love your support. Pre-launch page: https://www.producthunt.com/prod... Since posting here, we've added a demo video, comparison table vs

... ones genuinely at risk. A device serving plain HTTP but also offering HTTPS is no longer lumped in with the insecure ones each service shows exactly how many of its devices carry a real finding. - Plaintext admin pages on alternate web ports (the kind routers and IoT hubs love to use) are now flagged when there's no secure alternative

... unused apps, stale configs. Existing cleaners were either heavy-handed or opaque, and many users are understandably anxious about accidentally removing something critical. What CleanMyLinux solves : CleanMyLinux helps you reclaim space and tidy your system while minimizing risk. It scans your system, flags likely-unused items, explains why they were flagged, groups suggestions by risk, and shows an exact preview before any removal. Everything is reversible, we create snapshots and keep an undo staging area. How it works (brief) : Lightweight ... ... device ML + deterministic heuristics scan

... After seeing merchants get hit with $15k-$35k ADA lawsuits for violations they didn't know existed, I wanted to help. How it works: Enter your Website URL Get instant scan (60 seconds) Receive detailed report via email The report shows: Specific WCAG 2.1 AA violations Legal risk level How to fix each issue Impact on disabled users Completely free: https://accessorax.com/free-audit If you run a website (or know someone who does), give it a try. Help me test ...

... clean, squint at the ingredients, and have no real way to evaluate what I was looking at. Reading labels is a skill most of us were never taught. So I built Sift to do the work for you: Scan any food label or barcode Get an honest health score (no brand favoritism) Ask the Sift Assistant questions like is maltodextrin actually bad? in plain English Family plan: up to 6 allergen profiles with per-person safety indicators on every scan

... someone charged with an offence, sitting across a kitchen table from a stack of police disclosure they were never going to read and lawyers charging $300 $500/hour to read it for them. What it does: Upload your disclosure (PDFs, scanned pages, photos of pages, Word docs OCR is built in) and RightsRadar returns a plain-English list of potential Charter (Canada) or Constitutional (US) issues, with the exact page and quote each one came from. Things like: Arbitrary detention ... ... Amdt.) Right to counsel breaches (s.10(b) / Miranda) Search & seizure problems (s.8 / 4th Amdt.) Disclosure gaps (Stinchcombe / Brady) Confession voluntariness (s.7 / 5th Amdt.) What it covers: All 13 Canadian provinces & territories, all 50 US states + DC. Each scan

... transfer service that lets you send files up to 5 GB for free, no account needed on the recipient's end. A few things we focused on that most transfer tools skip: Every file up to 200MB is virus-scanned before the download link activates Files are encrypted in transit and at rest Links auto-expire and files are permanently deleted after expiry No forced sign-ups - just verify your email and send We're actively building and would love ... ... similar tools? Why or why not? Any security concerns we haven't addressed? Try it for free at https://transfersecure.ai/ - no credit card, no catch. Comment from Sorin(@sorinify): I am curious about what antivirus system is used to scan

... With AI bots getting harder to detect, there s been growing discussion around platforms using biometric verification (like face scans) to confirm real users. Cool in theory... Reddit is full of bots, fake accounts and garbage engagement. But let s be real Reddit without anonymity isn t Reddit. The whole point of this platform is: Saying things you wouldn t say elsewhere Being anonymous without consequences tied to your real identity Having raw, unfiltered discussions And now the proposed solution ... ... scan

... agreed to today? Most people have never read a Privacy Policy or Terms of Service in their life. We tap "I Agree" and move on , without knowing what we actually signed. That changes today. You Need This. Avalw Vision scans any privacy policy or terms of service and tells you exactly what's inside. Paste a URL, import a PDF, scan

... Comparison tables I was optimizing for humans. AI is not human. Lesson #1: AI Doesn't Read It Extracts Humans read your About page. They feel your brand voice. They appreciate the design. AI does none of that. AI scans your page looking for one thing: answers to specific questions. If your page doesn't directly answer "what is the best tool for X" in a way AI can extract, you don't exist. What I fixed: I stopped writing ... ... project management tool for remote design teams. Here's exactly how we work." Feature lists Problem-solution paragraphs Vague benefits Specific outcomes Lesson #2: AI Loves Comparisons Even If You Lose This one hurt. I avoided mentioning competitors

... Google Workspace CLI finished #3) 68 comments (most of any product launched that day) 64 upvotes on maker comment (most voted comment of the day) 3.4K page views on clawsecure.ai 2.4K unique visitors 1,498 new users scanning agents Zero downtime. The scanner held up all day. ClawSecure, a bootstrapped AI security startup, outranked Google on Product Hunt launch day. Still processing that. What actually surprised me about launching on Product Hunt The comments were more valuable than ... ... this resonated: our audit of 2,890+ OpenClaw skills found 41% have security vulnerabilities. The full data is on the site. The top feature requests from the community: CI/CD GitHub Actions integration, Slack/Discord alerts from Watchtower, better post-scan

... scraper, not a founder. So I built PackLeads( @Packleads )to automate the entire reconnaissance-to-close pipeline that agencies hate doing manually. How it works You type in a niche and a location (e.g., "Plumbers in Austin"). PackLeads scans the market and pulls back businesses, but instead of just giving you a list of names, every single business gets scored across 20+ real signals. The system checks if their Google Business Profile is claimed, when the owner last responded ... ... they have an optimized website, and if they are showing up in AI search results like ChatGPT, Google AI Overview, and Perplexity. Each business gets a Need Score (0-100) so you instantly see who's desperate for help vs

... answer about your category includes comparisons. Always. When someone asks "best CRM for agencies," AI doesn't list one tool. It lists 3-5. And it compares them. The data: Content Type Citation Rate Pages with comparison tables +470% vs. average Pages that mention competitors

... many found they were invisible. But here's what scared me more: Of those who WERE visible, 43% had incorrect information in AI answers. Not "suboptimal." Not "could be better." Wrong. Outdated pricing. Missing features. Wrong founder bios. Competitors credited for your work. And the average error sticks around for 4 6 months . Today, I'm sharing the full dataset: 1,000+ SaaS products, 75,000+ AI answers, and the hard truth about what's being said about you when ... ... analyzed 50 brands that discovered errors and tracked the impact. Error Type Average Revenue Impact Pricing error (higher than actual) 47,000 Pricing error (lower than actual) 23,000 (leakage) Missing critical feature 38,000 Wrong positioning (enterprise vs