惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

N
News and Events Feed by Topic
V
V2EX
博客园 - 【当耐特】
Vercel News
Vercel News
雷峰网
雷峰网
爱范儿
爱范儿
WordPress大学
WordPress大学
云风的 BLOG
云风的 BLOG
S
Securelist
Threat Intelligence Blog | Flashpoint
Threat Intelligence Blog | Flashpoint
Microsoft Azure Blog
Microsoft Azure Blog
F
Full Disclosure
有赞技术团队
有赞技术团队
Hugging Face - Blog
Hugging Face - Blog
NISL@THU
NISL@THU
www.infosecurity-magazine.com
www.infosecurity-magazine.com
Attack and Defense Labs
Attack and Defense Labs
Application and Cybersecurity Blog
Application and Cybersecurity Blog
Hacker News - Newest:
Hacker News - Newest: "LLM"
Microsoft Security Blog
Microsoft Security Blog
腾讯CDC
P
Proofpoint News Feed
B
Blog
CTFtime.org: upcoming CTF events
CTFtime.org: upcoming CTF events
K
Kaspersky official blog
I
InfoQ
Google Online Security Blog
Google Online Security Blog
L
LINUX DO - 最新话题
Project Zero
Project Zero
Engineering at Meta
Engineering at Meta
V
Visual Studio Blog
AI
AI
Schneier on Security
Schneier on Security
B
Blog RSS Feed
T
Tor Project blog
H
Help Net Security
H
Hackread – Cybersecurity News, Data Breaches, AI and More
L
LINUX DO - 热门话题
阮一峰的网络日志
阮一峰的网络日志
S
Security @ Cisco Blogs
T
Threat Research - Cisco Blogs
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More
C
Cyber Attacks, Cyber Crime and Cyber Security
G
Google Developers Blog
Google DeepMind News
Google DeepMind News
V2EX - 技术
V2EX - 技术
让小产品的独立变现更简单 - ezindie.com
让小产品的独立变现更简单 - ezindie.com
A
Arctic Wolf
Webroot Blog
Webroot Blog
Recent Commits to openclaw:main
Recent Commits to openclaw:main

Hacker News - Newest: "AI"

AI can't read an investor deck AI as an attorney? Student uses ChatGPT, Gemini to sue UW over alleged racial discrimination Hacking MCP Servers in AI Systems – The Rug Pull: Tool Changes After Approval GitHub - MeepCastana/KubeezCut: Free Web based video editor GitHub - GenAI-Gurus/awesome-eu-ai-act: Curated tools, official sources, OSS, templates, and guides for EU AI Act compliance. Can AI judge journalism? A Thiel-backed startup says yes, even if it risks chilling whistleblowers Coming soon: 10 Things That Matter in AI Right Now DARPA built an AI to fact-check enemy weapons claims What explains heterogeneity in AI adoption? When AI Meets Muscle: Context-Aware Electrical Stimulation Promises a New Way to Guide Human Movements - Department of Computer Science AI Changed How We Build. It Did Not Change What Matters. Linux rules on using AI-generated code - Copilot is OK, but humans must take 'full responsibility for the… Meta spins up AI version of Mark Zuckerberg to engage with employees Code Mode: Let Your AI Write Programs, Not Just Call Tools | TanStack Blog GitHub - Delavalom/graft: Go framework for building AI agents. Type-safe tools, multi-provider (OpenAI, Anthropic, Gemini, Bedrock), zero vendor SDKs. India's TCS tops estimates, says new AI models did not dent services demand Gen Z's fading AI hype Strong feeling: we are in a folded AI reality GitHub - machinarii/total-recall-catalog: A reference catalog of latest knowledge retrieval, memory & RAG systems GitHub - mensfeld/code-on-incus: Give each AI agent its own isolated machine with root, Docker, and systemd. Active defense detects and stops threats automatically.. Quantization, LoRA, and the 8% Problem: Benchmarking Local LLMs for Production AI Iran war: We spoke to the man making Lego-style AI videos that experts say are powerful propaganda Powell, Bessent discussed Anthropic's Mythos AI cyber threat with major U.S. banks GitHub - immartian/bellamem: Persistent belief-graph memory for AI agents. Retrieves decisive context by importance — not recency, not RAG, not /compact. recursive-mode: The Repo-Native Operating System for AI Engineering After the attack on Sam Altman's home, will AI CEO's go on the offensive? The biggest advance in AI since the LLM Opus 4.6 vs GPT 5.4 One Prompt Unity World Generation Test “AI polls” are fake polls Client Challenge Can AI be a 'child of God'? Inside Anthropic's meeting with Christian leaders How to Switch AI Chatbots and Why You Might Want To GitHub - MattMessinger1/agentic_refund_guardrail: Safe refund policy layer for AI agents — Python + TypeScript. Same behavior, shared tests. Adam/papers/emergent_values_whitepaper.md at master · strangeadvancedmarketing/Adam Ask HN: How do you stop playing 20 questions with your AI coding tools How far can automation and AI support psychotherapy? - @theU GitHub - stagas/rtdiff: realtime git diff gui and AI-assisted commits A Mac Studio for Local AI — 6 Months Later A History of the Early Years of AI at the University of Edinburgh Why AI Coding Tools Still Feel Stuck on Localhost MSN AI Datacenters Are Becoming Strategic Targets twitter.com Penn Researchers Use AI to Surface Unreported GLP-1 Side Effects in Reddit Posts Show HN: MoodSense AI (ML and FastAPI and Gradio, Deployed on Hugging Face) Moodsense Ai - a Hugging Face Space by aman179102 AI models are terrible at betting on soccer—especially xAI Grok GitHub - xialeistudio/echoic GitHub - HimashaHerath/github-dev-wrapped: AI-powered weekly GitHub activity reports deployed to GitHub Pages GitHub - alejandrobalderas/claude-code-from-source: Architecture, patterns & internals of Anthropic's AI coding agent — reverse-engineered from source maps AI and Tech brief: Ireland ascendant GitHub - Titovilal/context0: Context0 - Never Surrender Training for a Marathon with an AI Coach: What Worked and What Didn't Cyber Pulse: Agentic Intel - Apps on Google Play I Built an AI PR Reviewer That Catches Bugs by Not Looking for Bugs Gen Z workers are so fearful AI will take their job they’re intentionally sabotaging their company’s AI rollout | Fortune How AI Is Reimagining the Game of Golf–For Both Players and Courses GitHub - nattergabriel/reseed: A CLI tool for managing and distributing agent skills across projects Is SVG the final frontier? My AI workflow evolved from prompts to a near-autonomous workflow MLSharp Help - 3DGS Viewer & Generator I put my cognitive field based AI's runtime on GitHub Is Numble the first AI-proof game? A3: Kubernetes for autonomous AI agent fleets | Emergent Principles Deepali Vyas ("The Elite Recruiter") GitHub - msmarkgu/RelayFreeLLM: A restful API designed to route user prompts to various AI model providers. Unionized ProPublica staff are on strike over AI, layoffs, and wages Unleashing the Advantage of Quantum AI We're heading for an AI-fueled 'dementia crisis,' brain scientist warns The AI-Assisted Breach of Mexico's Government Infrastructure [pdf] GitHub - stef41/lmscan: 🔍 Detect AI-generated text and fingerprint which LLM wrote it. Open-source GPTZero alternative. Zero dependencies, works offline. MSN GitHub - visionscaper/collabmem: Enabling long-term collaboration with Agentic AI - building up episodic and world model memory over time with in-context awareness We gave an AI a 3 year retail lease in SF and asked it to make a profit | Andon Labs AI Code is Hollowing Out Open Source, and Maintainers are Looking the Other Way What leaked "SteamGPT" files could mean for the PC gaming platform's use of AI AI is the boss at this retail store. What could go wrong? GitHub - Wuzu11517/agentic-proxy: Local proxy meant to help reduce With Drones, Geophysics and ArtificiaI Intelligence, Researchers Prepare to Do Battle Against Land Mines A Single Operator, Two AI Platforms, Nine Government Agencies: The Full Technical Report 在 Steam 上购买 FriedrichAI: Offline AI 立省 10% GitHub - inevolin/resume-cli: Hit Claude usage limits? Resume any AI coding session elsewhere. Switch tools at zero friction. GitHub - atripati/ark: AI Runtime Kernel — a context operating system for AI agents. Eliminates tool bloat, loads only what’s needed, and gives LLMs their reasoning space back. How to Build a Secure AI PR Reviewer with Claude, GitHub Actions, and JavaScript This Startup Wants You to Pay Up to Talk With AI Versions of Human Experts Intel Arc Pro B70 Brings 32GB VRAM to Local AI for $949 WordPress 7.0: The Good, the AI, and the Still Missing AI on the couch: Anthropic gives Claude 20 hours of psychiatry IatroBench: Pre-Registered Evidence of Iatrogenic Harm from AI Safety Measures AI Agents Know About Supabase. They Don't Always Use It Right. The history and future of AI at Google, with Sundar Pichai Inside an AI‑enabled device code phishing campaign How Meta Used AI to Map Tribal Knowledge in Large-Scale Data Pipelines AI for Systems: Using LLMs to Optimize Database Query Execution Forecasting the Economic Effects of AI Introducing Tinker: Play with AI, bring your ideas to life AI sheds light on an ancient gaming mystery People really hate AI but not as much as Iran—or Democrats | Fortune What is an AI Product Engineer? Phoebe Gates wants her $185 million AI startup to succeed with 'no ties to my privilege or my last name': 'I have a chip on my shoulder' | Fortune
Shipping AI-Generated Code Safely with Static Sites - Tom Barrasso
Tom Barrasso · 2026-06-25 · via Hacker News - Newest: "AI"

For years, I’ve built websites using Hugo. It powers this blog, Cloud Phone for Developers, and now my personal real estate website, Unique Homes Massachusetts. Even early versions of the PodLP Podcast API were architected as static websites, where the podcatcher crawled RSS feeds and, when the feed content changed, pre-computed API payloads as JSON fragments stored in S3 and hosted by CloudFront.

Simply put, any website that can be statically-generated, should be. With coding agents like Claude Code, and serverless platform-as-a-service (PaaS) hosting services like Cloudflare Workers, it’s trivial to build frequently-updated, information-dense, custom-designed, affordable static websites. I’ll share more context on Unique Homes MA, its architecture, and how I’ve validated and shifted AI to build time for reproducible, daily builds on Cloudflare Pages.

Carving out a niche in real estate #

As one of the original thirteen colonies, my home state of Massachusetts (MA) has a long and rich history dating back hundreds of years. Despite its size and population, MA punches above its weight when it comes to architectural influence. MA is also a great state to practice real estate, because it has a healthy and growing economy driven by biotech/tech and education. For my niche, I chose to focus on MA’s unique historical inventory.

Massachusetts History & Architecture #

The Bay State has had an outsized impact on housing and architecture, where many homes continue to be built to this day in styles originating in MA. A few notable styles include:

The Cape Cod #

The oldest house in Brockton Heights, a Cape Cod cottage, on a 1910 postcard
The oldest house in Brockton Heights, Brockton, MA, a classic Cape Cod (1910 postcard). Public domain, via Wikimedia Commons.

First built in the late 17th century, the Cape Cod style is attributed to Massachusetts’ coastal region. The Cape Cod House is one of the US’ most recognizable styles, with its steep roof to shed snow, central chimney, and iconic cedar shingles worn to a gray tone.

The Saltbox #

The Comfort Starr House, a colonial saltbox with a long sloping rear roof
The Comfort Starr House in Guilford, CT, a colonial saltbox. Photo from the Historic American Buildings Survey (National Park Service), public domain.

Named after wooden boxes used to store salt, the Saltbox is an asymmetric Cape: a steep rear roofline that sweeps down to a single story at the back.

New England Triple-Decker #

A three-story triple-decker house in Cambridge with stacked front porches
A triple-decker in Cambridge, MA, with stacked porches on each floor. Photo by Bcorr, CC BY-SA 3.0.

Built in communities like Worcester, Boston, and Fall River to house immigrant workers, the Triple-Decker with matching front and rear porches is another MA contribution to affordable, dense housing.

Walter Gropius & Modernists #

A low, flat-roofed midcentury modern house designed by The Architects Collaborative
A TAC-designed house (1954) in the Five Fields neighborhood of Lexington, MA. Photo by Fothergilla, CC BY-SA 4.0.

Walter Gropius, founder of the Bauhaus, brought Modernism to Massachusetts when he joined the Harvard Graduate School of Design in 1937. Along with Carl Koch and fellow members of The Architects Collaborative (TAC), Modernism took shape in Boston suburbs like Lincoln.

A primer on real estate data #

Websites like Zillow and Redfin access property listings through Multiple Listing Services (MLS), which share and vend data to brokerages using the Internet Data Exchange (IDX) format. From a technical perspective, data is typically served in comma-separated value (CSV) format, delimited using the pipe character (|), with column names like LOT_SIZE in upper-snake case. Booleans are stored as Yes and No, and IDX consumers need to honor office-level opt out requests or visibility controls like DisplayOnInternet = No or ShowAddress = No.

Fortunately, these files are manageable in both format and size. The total records for all single-family homes sold in MA in the past year are only ~65MB. The challenge is in reliably stitching together data from a variety of sources accurately and with minimal loss.

Alternative approaches #

Other than IDX feeds, the Real Estate Standards Organization (RESO) maintains a standard for the RESO Web API, including public specifications. The RESO Web API is RESTful, serves data in real time, supports reads and writes, and uses OAuth 2.0 & OpenID Connect exchanged in JSON format. The RESO Data Dictionary standardizes fields like BedroomsTotal to avoid localized MLS variations.

Compared to IDX feeds, the RESO Web API has more (often non-public) data fields, but comes at a greater cost and with stricter compliance requirements. For lead generation, public IDX data offers enough information to entice prospective buyers.

Stitching data together #

Data flow diagram showing sources feeding Python pipelines into DuckDB, then Hugo, then Cloudflare Pages
Architecture of UniqueHomesMA.com

Unique Homes MA pulls parcels, address, deed, location, historical designation, and other data from sources including MLS PIN, Massachusetts Geographic Information Systems (GIS), Massachusetts Cultural Resource Information System (MACRIS), the National Registry of Historic Places (NRHP), and Wikidata. Next, addresses need to be normalized including town suffix (e.g. “Southboro” vs “Southborough”), unit designation, and road abbreviations (e.g. “St” vs “Street”).

Some sources provide latitude, longitude, and a radius, while others give specific bounding boxes to identify parcel boundaries. The configuration and logic needed to test and stitch all of this together gets very messy, and is certainly the type of job I’ll happily offload to a coding assistant.

Most of the Unique Homes MA pipelines are written in Python. Python has an extensive catalog of libraries for handling data manipulation and transformation. DuckDB is used to store and query listings and property data. It’s embedded (no server to run, so it’s cheap), open-source, and reads CSV, Parquet, and time-series data efficiently. Its columnar engine handles full table scans far better than SQLite, which lets me test different categorizations quickly without reshaping the underlying data. Lastly, as I mentioned at the start, I’m using Hugo as the static-site generator because it’s familiar, fast, and flexible. End-to-end pipeline takes ~5 minutes, ~30 seconds of which is hugo --minify generating 13,000+ pages.

Daily updates #

Balancing cost and freshness, Unique Homes MA runs a daily cron job using an EventBridge Scheduler that triggers an EC2 instance to run a systemd service. When the pipeline and hugo --minify build finish, the service publishes HTML documents to Cloudflare Pages using wrangler deploy, then stops itself. Data is stored on Elastic Block Storage (EBS) to preserve state across execution runs.

At $0.034/hour for a t4g.medium EC2 instance, $0.05 per GB-month of EBS, and $0.023 per GB-month on S3 (for backups), the total cost is ~$2.35 per month, or about $39 per year including .com domain registration fees. That’s well below common real estate expenses like annual licensure renewal fees, MLS membership dues, or broker desk fees. Compare that to services like AgentWebsite that start at $39 per month.

Irregular expressions #

I’ve never enjoyed writing regular expressions (regex), but they’re a powerful tool for pattern-matching and extracting information from raw text. Unique Homes MA uses regex extensively to match words and phrases in the listing broker remarks. Claude proposes and validates each expression against historical data, identifies outliers, and continuously improves coverage and accuracy. Unlike calls to claude -p from the terminal, regular expressions are deterministic, don’t require network access, and cost (effectively) nothing to execute. Combined with other pattern-recognition techniques, this allows Unique Homes MA to quickly identify, catalog, and sort over ten thousand homes by style, builder, and feature.

_ARTS_CRAFTS_STYLE_RE: Final = re.compile(
    r"\barts\s*(?:&|and)\s*crafts[-\s]+"
    r"(?:(?!or\b|and\b|for\b|with\b|studio|rooms?|space|area|office|nook|corner|"
    r"station|closet|loft|den|table)[a-z][\w-]*\s+)?"
    r"(?:home|house|bungalow|colonial|cottage|residence|cape|victorian|tudor|foursquare|"
    r"styled?|movement|period|era|design|architectur\w+|aesthetic|character|charm|"
    r"influenced?|inspired|revival|interior|woodwork|built[\s-]?ins?|detail\w*|trim|"
    r"millwork|gem|beaut\w+|masterpiece|pedigree|flair|grandeur|elements?)\b",
    re.IGNORECASE,
)

For example, this gnarly regular expression is used as a signal to classify a property as Arts and Crafts style. Combined with other signals like build year and MLS style codes, this categorizes properties described as “historic Arts & Crafts Colonial built by F.A. Day,” while ignoring descriptions like “extra space for arts & crafts or office.”

Note: listing broker remarks are notoriously inconsistent. Character count limits encourage agents to use nicknames (e.g. “Nab Lake” vs “Nabnasset Lake”) and abbreviations (e.g. “FHA” instead of “forced hot air”). It’s not uncommon to see exaggerations (e.g. “lakefront” vs “lake view”), or typos (e.g. “Sears & Robuck”). No regular expression or deterministic solution will work perfectly across tens of thousands of listings. Rules must be validated against live listings regularly for accuracy and precision.

Why go static? #

Static websites have lower costs and fewer security concerns since there’s no server to compromise, and no database exposed to internet traffic. They’re inherently fast without just-in-time processing.

Static considerations #

Static sites can be hosted just about anywhere including bucket storage like AWS S3 and Cloudflare R2, hosting services like GitHub Pages or Cloudflare Pages, or even a Raspberry Pi running Apache or NGINX. Each comes with trade-offs in terms of cost, content freshness, complexity, and maintenance.

Why Hugo? #

I chose Hugo because I’m familiar with it and it’s portable, mature, lightweight, and fast. That said, there are dozens of static site generators, so pick one you’re familiar with.

Testing and validation #

AI-generated code for a static site isn’t inherently safer. “Safe to ship” in a static context still requires you to tell the agent what “good” looks like, write tests against that outcome, iterate, build, and ship. To keep token cost low and builds deterministic, an LLM doesn’t evaluate and classify listings at build time. Instead, it authors rules inside of a pipeline, gated by tests, that ultimately produce a set of artifacts (namely, Markdown and HTML).

Every change to Unique Homes MA runs a number of checks including:

  • pytest unit tests, including VCR-like network replay tests
  • mypy and ruff linting & code formatting
  • hugo --minify build completion
  • HTML validation
  • Drop orphaned links

Although dynamic websites might crash or return an HTTP 500 if there’s a bug, static sites can silently “fail.” A visitor won’t hit an error page and complain. Instead, they won’t realize a listing is missing or know when a property goes under contract. Users might click a broken link, notice a discrepancy against Zillow or Redfin, and ultimately leave. Silent failures aren’t a blocker, but they do require a different strategy: detection and validation at build time, before anything ships. Each build of Unique Homes MA sends me an email through AWS SES so I can keep an eye on whether builds succeed, fail, or stall, instead of quietly serving broken or stale information.

Mostly static #

With PaaS services like Cloudflare Workers, static websites don’t have to be 100% static. Workers lets you write small functions for things like handling a contact form or subscribing to an email list. Serverless platforms can then integrate with:

  • Cloudflare Email – Workers Paid ($5/m) + $0.35/1,000 emails
  • AWS Simple Email Service (SES) – $0.10/1000 emails (see pricing)
  • Third-party APIs – Resend, SendGrid, etc
  • Webhooks – Discord, Slack, etc
  • Bots – Telegram

Remembering state #

While dynamic websites primarily use session cookies to store detailed user information, static websites can still “remember” visitor data using localStorage, sessionStorage, indexedDB, URL query parameters, and other storage technologies.

When visitors to Unique Homes MA click “Request more info” they are taken to a static page that pulls information from URLSearchParams about the previous listing. The homepage also displays “Recently viewed” properties stored in localStorage, so visitors can quickly find properties they previously considered.

Never store sensitive information in browser storage, like identification numbers, passwords, or names. It may be vulnerable to cross-site scripting (XSS), is likely stored unencrypted, and can be cleared at any time.

Closing thoughts #

Crawl then walk #

Websites need to be crawled by search engines like Google, Yandex, and Bing in order to be discovered. Don’t forget to create a sitemap.xml, robots.txt, llms.txt, include JSON-LD tags, and register your website in Google Search Console and Bing Webmaster Tools if you want to be discovered.

When to NOT go static #

Static websites are great! But they are not the right solution whenever you regularly store sensitive information or require real-time content updates. If you primarily host user-generated content (UGC), need to control content access, or publish minute-by-minute updates, a dynamic website is almost certainly required.

What I’d do differently #

Static websites aren’t totally pain free. For me the hardest part was getting started. It would have been far easier to create a website with an embedded <iframe> that links to an existing IDX service provider. Regex still misses some listings and misclassifies others. Image classification would almost certainly do better at determining architectural style. Testing Terraform was a huge pain, and right-sizing the EC2 instance was tricky because the workload is spiky (idle stretches waiting on network downloads followed by heavy CPU usage computing nearest-neighbor membership). That said, most of these frustrations and costs are paid one-time for the benefit of low ongoing expenses and creative control.

Takeaway #

This pattern works well: it’s cheap, fast, secure, and easy to maintain. Coding agents handle the messy work of stitching data, matching addresses, writing regular expressions, and gluing pipelines together, while static generation keeps the result lean and safe to host just about anywhere. Real estate is only one domain where this pattern proves valuable. Running an LLM at build time would be more flexible, but substantially increase cost and result in non-deterministic builds.

My takeaway is this: start static, then add dynamic APIs only when necessary because any website that can be statically-generated, should be.