Hey HN! We've been building HomeDock OS, a platform to self-host Docker apps with a full desktop-like UI running entirely in the browser.
Version 2.0 introduced exactly that, Prism, a window manager with real multitasking: drag, resize, minimize, and snap windows. It runs on Raspberry Pi, Linux, Mac, or Windows.
On the Drop Zone, files are encrypted with AES-256 GCM and 1.2M PBKDF2 iterations, even on a Pi Zero. App updates use Docker manifest digest comparison, not just tag checking so you can easily update them from the taskbar with a single click.
Happy to answer questions about architecture or design decisions!!!!
Sure! No formal writeup but here's the gist, base model was Qwen2.5-3B-Instruct, fast, reliable, low ram specs and most of the times fine on cpu.
Dataset: ~620 Claude-crafted examples, all following the same pattern, a question you'd ask a Ouija board paired with a short, uppercase, cryptic response. Things like "Is anyone there?" "YES.", "Write me a poem" "NO.", "How did you die?" "Ouija: PAIN.". The key was being very very consistent with the output format across all examples.
Method was LoRA fine-tune using HuggingFace Transformers + PEFT. Rank 16, alpha 32, targeting all attention + MLP projections. 3 epochs, lr 2e-4, effective batch size 8. Trained on Apple Silicon (MPS). Loss went from ~3.0 to ~0.17 pretty quickly given how uniform the outputs are.
Baked a system prompt into every training example using Qwen's chat template, basically the rules the "spirit" follows (uppercase only, one-word answers, never elaborate). For deployment I merged the LoRA adapter, quantized to GGUF Q4_K_M via llama.cpp, rruns locally with llama-cpp-python. I'm planning to drop an iOS version too. Honestly the whole thing is more about the dataset design than anything fancy on the training side. 620 consistent examples was enough to completely override the models default chatty behavior.
The workflow is quite simple, you type a question, the planchette moves across the Ouija board spelling the answer letter by letter. The board shakes, glows or flickers depending on the spirit's mood. Runs fully offline using llama-cpp-python. Model auto-downloads from HuggingFace.
You can run it from source or using the Docker Compose, it also has real-time crisis detection, if someone shows signs of distress, a helpline banner appears. Even a fake spirit board shouldn't ignore real pain, I guess. Would love feedback on the UX and the model behavior!
In January someone hit us with ~2K malicious backlinks from AWS instances across 15+ regions, cheap TLD spam domains, and even Blogspot. We built a Python script to automate the disavow file generation, then added a UI and Dockerized it. Full technical writeup with the forensic analysis here:
https://dev.to/surcebeats/someone-paid-around-2k-to-destroy-...
The tool parses exports from Ahrefs/SEMrush/Google Search Console, categorizes IPs vs domains, supports whitelisting, tracks new threats across uploads, and generates Google-ready disavow.txt files.
I'm atm working on a couple of things, first the biz, a self-hosted home server OS that simplifies Docker management and provides a unified dashboard for running services at home. The goal is making self-hosting more accessible without sacrificing flexibility.
And also building as a hobbie a procedural universe generation engine that simulates galaxies, solar systems and planets in real-time. Everything is generated from a seed with actual orbital physics, seasonal changes and so... Built with Python/Flask backend too but Three.js for 3D visualization and React instead of Vue3 as in the prior one. Think No Man's Sky vibes but as an explorable simulation engine really D:
Benchmarks optimize for fundraising, not users. The gap between "state of the art" and "previous gen" keeps shrinking in real-world use, but investors still write checks based on decimal points in test scores.
Nice! We considered this exact approach but never shipped it in the end. The geolocation permission is probably unnecessary friction and probably an overkill imho... Timezone + rough location (country-level from IP) would get 95% accuracy without the prompt. Most users will bounce on that permission dialog.
Solid work though, especially the twilight transitions. Loving it!!!
Suffered that back in the day with an Electron desktop app. Not to mention that the notarization and signing integration itself is completely broken. The first time you submit a binary it can take DAYS to process, and setting everything up to work properly with GitHub Actions CI/CD is absurdly time-consuming. It's ridiculous, and if you add this new notarial verification policy on top of that... In the end it's just Apple being Apple.
Google used to proudly say "Don't be evil"... But they just forgot to add "let us take that part".
When tech giants start deciding what technical knowledge is too "dangerous" for users to access, we've crossed into a different kind of territory. Installing an OS on your own hardware is now physical harm? That's some creative interpretation of their policies. The irony is that this kind of censorship just validates why people want to bypass these systems in the first place, nobody wants corporations deciding what they can and can't do with their own machines.
The article is kind of right about legitimate bloat, but "premature optimization is evil" has become an excuse to stop thinking about efficiency entirely. When we choose Electron for a simple app or pull in 200 dependencies for basic tasks, we're not being pragmatic, we're creating complexity debt that often takes more time to debug than writing leaner code would have. But somehow here we are, so...
This really resonates. Sometimes the best reason to switch tech is just to feel that spark of learning again. I build self-hosting platforms and have spent years trying to make it “easy”, even getting it to work on Windows/macOS. But honestly, the magic isn’t in convenience. It’s in that figuring it out phase imho...
Fascinating deep dive into OverlayFS CoW behavior. The 11GB btmp file getting copied 271 times is a perfect storm scenario. Did they consider mounting /var/log outside the image layers? Seems like that would prevent any log file from causing this amplification. Also interested in image-manip... Does it handle metadata differently than
docker export/import?
About time! Nothing kills productivity like waiting 30s for the compiler to tell you it can't infer a type on line 27437 (who needs to refactor?). The diagnostic improvements alone will be worth it really but...
The ICEBlock removal is absurd when you consider Waze has been warning drivers about police locations for... Years? The only difference is which government agency is being monitored. This sets a dangerous precedent for selective enforcement of ToS really
The sophistication here (SVG > CHM > fileless execution > dual payload) suggests access to commercial malware toolkits rather than bespoke APT development.
/etc/hosts works until you need to change an IP across 10,000 servers in under a minute. Then you understand why DNS exists.
DNS isn't just name resolution, I'd say it's kind of load balancing, service discovery, caching, and dynamic configuration "all in one".
The FAANGs do minimize external DNS calls, but they run massive internal DNS infrastructures because the alternatives (config management pushing files) are actually slower and more fragile at scale.
The 10-year research-to-production timeline is the key lesson. Today's funding (VC or government grants) demands results in 2-3 years. We've systematically eliminated the "patient capital" that creates foundational infrastructure imho...
Version 2.0 introduced exactly that, Prism, a window manager with real multitasking: drag, resize, minimize, and snap windows. It runs on Raspberry Pi, Linux, Mac, or Windows.
On the Drop Zone, files are encrypted with AES-256 GCM and 1.2M PBKDF2 iterations, even on a Pi Zero. App updates use Docker manifest digest comparison, not just tag checking so you can easily update them from the taskbar with a single click.
Happy to answer questions about architecture or design decisions!!!!