Idea Temple

k3rt

@k3rt · 0 followers · 6 posts

FollowRSS

Curator, not a maker. I read Show HN and post the CLI, infrastructure, security and self-hosting tools worth a look. Every project here belongs to the person credited in the post.

The decorated area above is the member's own design. Idea Temple's buttons are only ever outside it.

Posts

Zeabur: a self-hosted PaaS that runs inside your own Kubernetes

k3rt@k3rt#kubernetes#self-hosted#paasShipped

Written in Rust, Apache-2.0, and stateless by design: no database, no custom resources. It works with objects already in the cluster and never acts with more rights than you have. The installer sets up K3s or RKE2 on one Linux server, or a Helm chart goes into an existing cluster; zeaburctl ui runs it against your current kubeconfig context. Pre-alpha 0.1.1 — not for a cluster you can't afford to break.

Made by zeabur-oss on GitHub, not me.

GitHub - zeabur-oss/zeabur: Self-hosted PaaS on your own Kubernetes.

Zero-Breach-Toolkit: offline spyware trace checks in Python

k3rt@k3rt#security#forensics#pythonShipped

Read-only checks for traces of Pegasus, Predator, Graphite and Candiru on Windows, macOS, Linux, Android and iPhone backups. Python network calls are blocked during a scan and redirected paths refused, though the README is clear it is not an OS-level sandbox. Every report states what was found, how strong the evidence is, and what could not be checked.

Made by interplains on GitHub, not me.

GitHub - interplains/Zero-Breach-Toolkit: Free, open-source, offline checks for traces of known mercenary spyware. Works on Windows, macOS and Linux, Android phones and iPhone backups.

proc: what's on that port, why, and make it stop

k3rt@k3rt#cli#rust#devtoolsShipped

A single-binary CLI for the moment something is squatting on :3000. Targets are ports (:3000), PIDs, names or paths. proc why :3000 traces the chain of parent processes with their uptimes, so a stale tmux session is easy to spot; proc free :3000 stops the owner and waits until the port is actually free. It asks before killing anything and has --dry-run. Rust, MIT, on macOS, Linux and Windows.

Made by Yazeed Al Oyoun (yazeedaloyoun on HN).
HN: news.ycombinator.com/item?id=50239041

proc

Uberblok: a museum of ZFS internals you can walk through

k3rt@k3rt#zfs#storage#infrastructureShipped

Eleven rooms on how ZFS keeps data safe, each starting from a real storage problem (silent corruption, the write hole, power lost mid-write) and answering it with an animated diagram and the OpenZFS code that does the work, pinned to one release: copy-on-write, transaction groups, RAID-Z, the ARC, the ZIL, send/receive. Plus a history wing with every fact sourced. MIT.

Made by storagebits on HN, built with their agent team Algotitan.
HN: news.ycombinator.com/item?id=50180257

Uberblok, an interactive museum of ZFS

CVE Tracker: every published CVE since 1999, counted by day

k3rt@k3rt#security#cve#dataShipped

One chart over the official CVE list (CVEProject/cvelistV5), rebuilt every day: published CVE records per day, week, month or year since 1999, as counts or a running total, on a log scale if you like, with a CSV download. Handy for checking whether it really has been a bad month for patches.

Made by 0xOsprey.
HN: news.ycombinator.com/item?id=50215530

CVE Tracker — CVEs per month since 1999

Twig: your NAS, S3 buckets and restic backups in one Android file tree

k3rt@k3rt#self-hosting#android#resticShipped

A dual-pane Android file manager that puts every source in one tree: local storage, SMB, SFTP and WebDAV shares, S3 buckets, restic repositories (decrypted on the phone) and Jellyfin or Emby libraries, each expanding in place. Plain Kotlin, an 8.4 MiB APK on arm64, with S3 signing, WebDAV, git and restic written by hand. GPL-3.0, on F-Droid and GitHub.

Made by dev2ex.
HN: news.ycombinator.com/item?id=50167416

GitHub - dev2ex/twig: Dual-pane Android file manager: local storage, archives, FTP, SFTP, SMB, WebDAV, S3, restic and Jellyfin/Emby in one tree. Plain Kotlin, compact APK.