shivasurya

6 ms·

1.
by shivasurya 5mo ago
Nice. thanks for sharing!
2.
by shivasurya 5mo ago
Is there any possibility of integrating with FreeCAD?
3.
by shivasurya 5mo ago
Star might be the weakest signal of project usefulness and also trust is eroding I no longer trust stars for security.
4.
by shivasurya 7mo ago
It replaces URL params and body too
5.
by shivasurya 8mo ago
^this 100%
6.
by shivasurya 8mo ago
Works for great company with amazing culture. But what about insecure managers, jealousy managers, and managers who reward folks who are loyal to them or based on same region/country?
7.
by shivasurya 9mo ago
https://codepathfinder.dev Currently working on AI-Native Static code analysis and currently it's open-source.
8.
Some thoughts around Django SQL Injection CVE-2025-64459(shivasurya.me)
2 points by shivasurya 10mo ago|0 comments
9.
by shivasurya 11mo ago
I would say this is a nice & clever attack vector by calculating from rendering time aka side channeling. Kudos to the researchers though it would take lot of time and capture pixels even for Google authenticator. My worry is now how mu
10.
by shivasurya 11mo ago
This is why codepathfinder.dev is born. It underhood use tree-sitter to search functions, class, member variables and pulls code accurately instead of regex. I started using it like tool call in Security scanning (think of something like cl
11.
by shivasurya 11mo ago
Working on SecureFlow ( https://codepathfinder.dev/secureflow-ai/ ) - think of claude-code style but for hunting security vulnerabilities. The goal is to catch vulnerabilities early in the SDLC by running agentic loop th
12.
by shivasurya 1y ago
Love this take actually and have been working on this and published this way back 2023/2024. Recently, I've been inspired by Claude-code & Cline agentic flow + tool looping, I experimented the same with tools like file_read, d
13.
SecureFlow Extension to Vibe Code Securely – Codepathfinder.dev(codepathfinder.dev)
5 points by shivasurya 1y ago|0 comments
14.
Rethinking MCP or Tool Calling Through Permission Based System(shivasurya.me)
9 points by shivasurya 1y ago|0 comments
15.
by shivasurya 2y ago
had usecase of keeping visa appointments slots and instantly blocked by cloudflare :sad:
16.
Show HN: Open-Source CodeQL Alternative(github.com)
3 points by shivasurya 2y ago|0 comments
17.
Why AntD Design framework is down?
2 points by shivasurya 6y ago|4 comments
18.
by shivasurya 6y ago
Same here? is that security issue?
19.
by shivasurya 6y ago
Cool!
20.
by shivasurya 6y ago
It’s not about impressing but it ensures that it’s safe for everyone and it’s clear that his website gets huge traffic.
21.
by shivasurya 6y ago
Yes, I’ve experienced it personally while doing my undergrad in india
22.
by shivasurya 6y ago
The intention isn’t about private information. What if essay text is modified in transit/injected with advertisements?
23.
Ask HN: Why Paul Graham’s Website Isn’t Using HTTPS?
17 points by shivasurya 6y ago|44 comments
24.
Facebook IS_INTERNAL_BUILD true in production builds of Flipper tools?(twitter.com)
2 points by shivasurya 8y ago|0 comments
25.
GDPR Compliance and EU for bootstrapped companies(indiehackers.com)
3 points by shivasurya 9y ago|0 comments