Hacker News: nnurmanov

Show HN: Basecheck agent – Local database checks with HTTP/syslog output

nnurmanov — Tue, 21 Jul 2026 15:44:54 +0000

Hi HN!

I am building basecheck, a database auditing tool. It currently supports PostgreSQL, SQL Server, Oracle, Supabase (preview), SQLite and the goal is to support more databases over time.

There is a standalone agent CLI that can be used in free or paid mode. The free mode includes six control packs with 61 controls and SIEM delivery to generic HTTP or syslog destinations. The paid mode allows you to run more control packs and use basecheck platform features.

The free packs cover concrete states: PostgreSQL SSL, password encryption, superuser and PUBLIC schema exposure; SQL Server `sa`, `xp_cmdshell`, sysadmin membership, and password policy; Oracle default accounts and audit settings; Supabase RLS and grants; and SQLite integrity and journal safety. Supabase is in preview. If you believe the free mode should definitely include some more controls, let me know.

Findings can be written to JSON or sent to an existing HTTP or syslog collector. If you just want to test, `--test-siem` sends a test event without running a scan.

The source is available under BSL 1.1 and free for internal use.

Repo and release: https://github.com/baselabs-io/basecheck-agent

Native SIEM connectors are not built yet (I could not install one on my laptop:)). If you run a SIEM, I’d be glad to build and test one with you.

Comments URL: https://news.ycombinator.com/item?id=48993862

Points: 3

# Comments: 0

New comment by nnurmanov in "GitLost: We Tricked GitHub's AI Agent into Leaking Private Repos"

nnurmanov — Wed, 08 Jul 2026 09:52:28 +0000

You have to have fixed commands that LLM could execute, just limit its universe. I don't think it is a good practice to give LLMs access to everything.

New comment by nnurmanov in "Anthropic's "J-lens" reveals workspace in Claude mirrors theory of consciousness"

nnurmanov — Wed, 08 Jul 2026 08:28:25 +0000

I believe this may impact on post training.

Training for instruction following, reasoning, reflection, and self-monitoring may have forced models to learn resource allocation: compress the currently useful concepts into a sparse shared workspace instead of keeping all computation equally active.

This is actually interesting observation, what if they add resource allocation constraints in post training, will it force to add more workspaces?

New comment by nnurmanov in "Chat Control 1.0 and 2.0 Explained"

nnurmanov — Wed, 08 Jul 2026 03:40:38 +0000

Wake me up in 100 years and ask me what EU politicians are doing.

My answer: regulating something:)

New comment by nnurmanov in "Is The Economist Always Wrong?"

nnurmanov — Wed, 08 Jul 2026 03:37:24 +0000

We will never know as the article is behind a paywall:)

New comment by nnurmanov in "Ask HN: Why about a third of the submissions become dead in mere minutes?"

nnurmanov — Wed, 08 Jul 2026 03:35:43 +0000

Actually, my mornings start with reading HN; I am more of a reader than a writer :) But I see your point: if you find it useful, then repay it with a contribution.

I agree on the repo link as well; it was indeed selfish on my side. HN is one of the few places where you can read human content, so let's keep it that way. Lesson completely learned on my side.

Communicating with mods about issues could be a good idea too, but I shall keep it to a minimum. Apparently, they are super busy fighting AI :)

New comment by nnurmanov in "Ask HN: Why coding assistants are so bad at UI?"

nnurmanov — Tue, 07 Jul 2026 19:02:35 +0000

In this case, could coding it manually be faster?:)

New comment by nnurmanov in "Ask HN: Why coding assistants are so bad at UI?"

nnurmanov — Tue, 07 Jul 2026 18:55:57 +0000

1. Did not use the UI framework currently being used in the web app; 2. Did not see the pattern, I always use header, but it skipped; 3. Wrong placement of elements, e.g. one element should have been on the left pane, instead it put it on the top right and so on.

I agree that on pure code they are OK, but I thought maybe I am missing something?

Ask HN: Why coding assistants are so bad at UI?

nnurmanov — Tue, 07 Jul 2026 18:48:52 +0000

A genuine question: I spent the whole day trying to get Codex to build a UI and finally gave up. Now I’m considering doing it manually.

Comments URL: https://news.ycombinator.com/item?id=48821916

Points: 2

# Comments: 6

New comment by nnurmanov in "Ask HN: Why about a third of the submissions become dead in mere minutes?"

nnurmanov — Tue, 07 Jul 2026 16:46:32 +0000

I guess HN has become an AI/vs human battleground:)

New comment by nnurmanov in "Ask HN: Fable 5 promo ends today – is anyone keeping it once it's usage-billed?"

nnurmanov — Tue, 07 Jul 2026 16:44:54 +0000

I guess UI hasn't been solved yet.

New comment by nnurmanov in "Ask HN: Why about a third of the submissions become dead in mere minutes?"

nnurmanov — Tue, 07 Jul 2026 13:45:58 +0000

My submission was killed immediately. It took me weeks to build the product and days to polish the documentation. At one point, I even went 24 hours without sleep working on it—only to have the submission killed instantly.

I emailed @dang at hn@ycombinator.com but never heard back. What should I do now? I’m scared to repost because I don’t want to risk a permanent ban.

New comment by nnurmanov in "Ask HN: Why about a third of the submissions become dead in mere minutes?"

nnurmanov — Tue, 07 Jul 2026 13:41:51 +0000

But don't turn on the noprocrast option;) I did it today and had to wait for 3 hours:)

New comment by nnurmanov in "Ask HN: Fable 5 promo ends today – is anyone keeping it once it's usage-billed?"

nnurmanov — Tue, 07 Jul 2026 13:39:47 +0000

How is it with UI? Any good?

New comment by nnurmanov in "Samsung profits jump 1,800% as AI chip sales soar"

nnurmanov — Tue, 07 Jul 2026 10:32:05 +0000

I’m not sure this growth is sustainable. Even if the barriers are adequate, companies may be reluctant to invest if they believe the bubble could burst soon.

New comment by nnurmanov in "Samsung profits jump 1,800% as AI chip sales soar"

nnurmanov — Tue, 07 Jul 2026 09:58:38 +0000

Any startup would envy this rate of growth:)

Samsung profits jump 1,800% as AI chip sales soar

nnurmanov — Tue, 07 Jul 2026 09:57:16 +0000

Article URL: https://www.bbc.com/news/articles/c1kyy8yrpxdo

Comments URL: https://news.ycombinator.com/item?id=48815657

Points: 6

# Comments: 3

New comment by nnurmanov in "Claude has the worst pricing – but people want it"

nnurmanov — Tue, 07 Jul 2026 09:07:25 +0000

Fixed, now Fabric works with subscription plans as well. It took some time to figure it out, but the issue is resolved now. I shall push the updated release later to GitHub

New comment by nnurmanov in "Claude has the worst pricing – but people want it"

nnurmanov — Tue, 07 Jul 2026 02:50:26 +0000

To the comment below, I have no idea why CC subscription did not work, apparently they have some different way to connect? Thanks to the leaked source code, I am going to find it out:)

New comment by nnurmanov in "Claude has the worst pricing – but people want it"

nnurmanov — Mon, 06 Jul 2026 19:48:12 +0000

This is basically why I built HailMary Fabric.

Claude Code is good, but a lot of the cost is repo discovery: finding files, reading candidates, following imports, etc.

Fabric indexes the repo locally and gives Claude Code the relevant context up front. Nothing goes to HailMary.

Tiny early test on httpx: 58% lower API cost across 2 tasks, both passed tests.

Repo is here if anyone wants to try it or poke holes in it: https://github.com/hailmarylabs/fabric/