public digest · 5 picks
This week's list skews toward tools that hand AI or automation real power over infrastructure — and mostly do the work of thinking through what that means. Supabase's MCP server and KubeStellar both expose live systems to either an LLM or a multi-cluster control plane, and the interesting part is seeing where each one draws its guardrails.
Elsewhere: a STUN/TURN pentest tool that implements the protocols itself instead of wrapping a library, a browser extension that takes HLS muxing seriously enough to avoid blowing up your RAM on long streams, and a Windows video player for language learners that runs Whisper locally instead of just calling an API.
// pick 1 of 5
An MCP server that gives AI assistants like Claude and Cursor direct access to your Supabase project — managing tables, running queries, checking config, deploying edge functions, through tools exposed over MCP. It's for developers who want their AI coding assistant to act on a live Supabase project instead of just reading docs about one. The hosted endpoint at mcp.supabase.com is the primary path; CLI and self-hosted deployments get a cut-down version.
// pick 2 of 5
A Go CLI for probing and abusing misconfigured STUN/TURN/TURN-over-TCP servers (the relay infrastructure behind WebRTC), letting a tester check whether a server will proxy traffic into an internal network and, if so, actually pivot through it. Built for pentesters who run into TURN servers like Cisco Expressway during an engagement, not for general network admins.
// pick 3 of 5
A browser extension that sniffs HLS (.m3u8) streams on a page and lets you pick quality/audio tracks, then muxes them into an MP4/MKV locally via ffmpeg.wasm. Built for people who want to grab video off sites that stream via HLS without a server-side service doing the work — the use case is explicitly scoped to content you have rights to download.
// pick 4 of 5
LLPlayer is a Windows WPF video player built specifically for language learners: dual subtitles, local Whisper-based ASR for auto-generated subtitles, OCR for converting bitmap subtitles to text, and real-time translation (cloud or local LLM). It's for people studying a language by watching foreign video who want Language Reactor-style tooling without being locked into a browser extension or Netflix.
// pick 5 of 5
KubeStellar is a CNCF Sandbox project for propagating and placing Kubernetes workloads across multiple clusters using a BindingPolicy CRD, built on top of Open Cluster Management for cluster registration and kubeflex for hosting the control planes. It's aimed at platform teams already running several clusters (edge, multi-cloud, hybrid) who want to keep using regular kubectl/GitOps workflows instead of scripting per-cluster deployments by hand.
That's five. If you want this in your inbox every week instead of hunting for it, the signup is below — no spam, just the picks.