Article URL: https://www.bbc.com/news/articles/cw62jje658dlo Comments URL: https://news.ycombinator.com/item?id=49856665 Points: 14 # Comments: 5
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
A developer has released Kram, an open-source macOS tool designed to automatically sort cluttered folders by organizing files into categorized subfolders based on file type. The tool was built after its creator grew frustrated with a disorganized Downloads folder containing hundreds of mixed files. Kram operates entirely locally, never uploading files to external servers, and only works on folders the user explicitly selects — leaving system files untouched. Currently a command-line tool, it is being tested against edge cases such as duplicate filenames, files without extensions, and permission-restricted items. Planned features include a dry-run preview mode, undo functionality, custom sorting rules, and eventually a native macOS GUI.
Cross-Site Request Forgery (CSRF) is a security attack where an authenticated user is tricked into unknowingly triggering an unintended action on a web application. Attackers exploit the browser's automatic cookie-sending behavior to make malicious requests appear legitimate. One of the most effective defenses is the use of CSRF tokens — randomly generated, cryptographically secure values that the server associates with a user's session. When the frontend makes state-changing requests such as POST, PUT, PATCH, or DELETE, it must include this token in a custom HTTP header, which the backend then validates before processing the request. Importantly, CSRF tokens serve a distinct purpose from authentication tokens, as they verify the legitimacy of the request source rather than the identity of the user.
Tool calling, also known as function calling, is a method that enables large language models to interact with external systems such as APIs, databases, and knowledge bases. Rather than relying solely on trained knowledge, an LLM is provided a set of tools — essentially functions — and decides which ones to invoke based on a given user query. In frameworks like LangChain, tools are defined using decorators that wrap standard functions, while providers like Groq supply the infrastructure to run models such as LLaMA 3 via API keys. Key benefits of tool calling include real-time data access, reduced hallucinations, and extended model capabilities, though it also introduces concerns around token costs, latency, and security risks. The next evolution of this concept is the Model Context Protocol (MCP), which builds further on the tool-calling paradigm.
A developer at Munchable built a single shared pricing package to ensure the price shown to users is always the price charged — across 24 currencies, a Next.js site, and an Expo mobile app. The package has zero runtime dependencies, preventing the Stripe SDK from being pulled into lightweight landing page components that only need to display a number. All prices derive from a single source-of-truth integer (1000 pence for £10), replacing a previous setup where Stripe's Adaptive Pricing caused the local amount to fluctuate with exchange rates. Hardcoded conversion rates include a 4% buffer to absorb Stripe's settlement fee and rate drift, ensuring £10 in list revenue stays close to £10 after currency conversion. Local prices are then rounded up — to the nearest .99 for decimal currencies, or to a scaled round step for non-decimal ones — so the rounding logic for display and for billing lives in one place.
Discussion (0)
Log in to join the discussion and vote.
Log in