MurphyA/hacker-news huggingface dataset:
Show HN: VibeCoCo – Plan your project, get a custom MCP server for your AI agent
by rjboadi | 2025-12-15 19:55:01+00:00
I built VibeCoCo (vibecoco.app/demo) to better manage context throughout each step of the development lifecycle.

The workflow: 1. Define your idea in a guided wizard (or create everything from scratch) 2. AI helps you to generate context documentation (PRD, tech design, user stories and task breakdown) 3. Get a personal MCP server with your project context (or download context manually without signing up) 4. Point Claude Code (or any MCP-compatible agent) at it (or add the downloaded context to your agents folder) 5. Your agent can now query your project context while coding The problem: Managing the context window is challenging, agents lose track and have to waste valuable context reading and rereading the codebase. Context gets scattered across conversations and it's hard to control what information shapes their decisions. Using memory is ineffective, forcing repetition and refactors. Troubleshooting endless logs cn quickly fill a context window and confuse the agent before it begins What VibeCoCo does: - Planning: Helps create well structured and comprehensive project and context documentation - Delivery: Kanban task management and Custom MCP server delivers the right context at the right time, reducing code lookups etc - Troubleshooting: context aware prompts that filter logs and error reports and provide your agent the exact info it needs - Collaboration: Centralized context: Planning docs in one place, separate from execution conversations. Use the same context across different agents, share projects with collaborators. - Official docs URLs: Tech stack includes links to official documentation – avoids prompt injection risks from unknown web sources Feedback I'm looking for: - Does the planning → Context workflow strike a good balance between control for people who know what they want and guidance for people who are new to coding / vibe coding. - Does the context outoput provide use to your agents - What improvements and/or additional context do you wish your AI agent had access to? - Is the wizard structure useful or too rigid, not helpful enough? Try it at vibecoco.app/demo – full wizard available without an account. You can download all of the output, MCP servers are in testing and not yet available so this is really for feedback on the quality of the output and the overall workflow of the wizard. Thank You
by Arch485 | 2025-12-15 19:55:03+00:00
If I had a nickel for every "secure" app that handled sensitive user data and then subsequently leaked that data this year...

I'd only have 20 cents, which I guess is good. But I'm sure there's more I'm forgetting.

Related:

[1] https://news.ycombinator.com/item?id=44684373

[2] https://news.ycombinator.com/item?id=43964937

[3] https://news.ycombinator.com/item?id=45985036
by lapcat | 2025-12-15 19:55:07+00:00
> At 30%, one does observe a faint correlation between genetic potential and IQ. The correlation becomes clearer at 50%, while remaining quite noisy. This is an essential aspect to keep in mind: 50% may sound like a solid heritability figure, but the associated correlation is rather modest. It’s only at 80% that the picture starts to “feel like” a line.

My understanding is that the author thinks the heritability of IQ is somewhere between 30% and 50%, but not 80% or 100%, and not 20% or 0%.
by VexAnvil | 2025-12-15 19:55:13+00:00
Hi HN,

I’ve been working on Anvil, an experimental payment network that replaces competitive mining with sustained participation.

Instead of PoW races or stake-based selection, nodes earn rewards via time-weighted effectiveness: staying online, responding to challenges, and participating consistently over time. Rewards are normalized across participants, making large-scale Sybil attacks economically inefficient rather than forbidden.

The current prototype includes a leader-based BFT consensus, account-based ledger, participation tracking, and a local web wallet with optional mining. I’ve also built a simulation suite and adversarial tests to explore attack economics.

This is early, experimental. I’m mainly interested in feedback on the economic model, participation mechanics, and failure modes.

This is intentionally not optimized for speculative yield; it’s an exploration of participation-driven incentives.
by bccdee | 2025-12-15 19:55:37+00:00
Yeah but there are zero barriers to market. France can't sell its nuclear energy to Australia, but anyone anywhere can release software. If anyone is exploiting this, it should be visible to everyone.

Companies can release games with crap performance because nobody else is making the same game as them. The idea being put forth here is that, with AI, you can just clone someone's product for nothing. So why isn't that happening?
by AshamedCaptain | 2025-12-15 19:55:41+00:00
> Unix domain socket authentication is stronger and doesn't require storing cookies on the client side.

And pointless here, since everything runs under the same uid. You need to authenticate this is the same browser that stored this secret, not that this is the same uid (useless), or the same pid, or any other concept that unix domain socket authentication understands.

> Which is why you can (and people do, e.g. flatpak) run applications where ptrace or global filesystem access is blocked. Which is why portals exist and why there shouldn't be a "get all secrets via dbus" escape hatch.

In which case they do not connect to the same D-Bus "bus", and the problem is again non-existent. See how flatpak sandoxing does it.

> Then don't use it? Secure defaults matter for most users.

Right until they notice they can no longer view the keyring contents, or any other stupid limitation most desktop users couldn't care about.

In fact, if you do not need a shared secrets service, and your applications are containerized... why do you need a secrets IPC at all? Just let each program store its secrets in some of its supposedly private storage...

> Find the *kwargs here: https://wayland.app/protocols/xdg-shell

Much better to have a million non-extendable protocols competing with each other. To this day there are two protocols (at least) for exposing the address of the DbusMenu service of a surface, one for gnome-shell and one for kwin. So much for the uglyness of X atoms. And this has nothing really to do with the design of the IPC mechanism itself...
by blablabla123 | 2025-12-15 19:55:50+00:00
This is the first time I hear that anyone hates D-Bus. I always saw it as a global API Bus that Apps can register to and which enables some sort of interoperability and automation. After all it can even be used from Bash. What is bad about this?

The security aspect seems also a bit funny to me. After all the average Desktop has most data in the home directory, so every application can read everything. That's not the fault of D-Bus.

Also I'm puzzled that Polkit hasn't been mentioned even once.
by schmuckonwheels | 2025-12-15 19:56:04+00:00
>the cabin crew warned passengers to make sure children cannot see the adult content they're watching (can you get more American than that?)

Is it considered normal in Europe to watch pornography on public transit in public so children can see it?

>Lufthansa longhaul flight

My experience is different. Old planes, and Lufthansa cabin crew are cold and service was poor and inattentive.
by andrepd | 2025-12-15 19:56:20+00:00
This was a random snippet of complicated rules to illustrate what I mean. C++ has significant footguns and complexity when it comes to initialising an object. Even sticking by "Effective Modern C++" rules is a significant cognitive burden on something that should be simple and straightforward. Rust has (mostly) no such footguns; its complexity follows from the essential complexity of the problems at hand.
by lelanthran | 2025-12-15 19:56:33+00:00
> Again, I got As ... but they were solidly in the "kind of test that convinces you literature is stupid class" kind of questions. Unless there is some kind of actual interesting insight to be had, this question just shows how empty the whole exercise is.

You are not making much sense.

You got As in the type of question that required demonstration of a broad swath of literature ... but that just shows you how empty the question is?

WTF?
by mbesto | 2025-12-15 19:56:35+00:00
> If you think otherwise, you're in a filter bubble.

Belittling. Excellent way to get your point across.

> They actively recruit on elite engineering campuses over it. It is super fucking interesting work and candidates compete for the opportunity to do it.

This seems like it should be an easy thing to verify with some sort of reference. This is exactly what the parent comment is suggesting and you still flippantly are avoiding it as "trust me bro". I actually believe you, so why don't you share some evidence then?
by krlx | 2025-12-15 19:56:54+00:00
The "what should we eat" problem was a big source of tension in our household since the arrival of our first child. Too much time-consuming, too much planning effort. What changed our life (and I really mean it) is the app https://jow.com: it suggests you a list of meals for the week suited to your family and equipment, and it creates a shopping list for your preferred delivery provider. I only have good things to say about it and could go on for hours.
by wkat4242 | 2025-12-15 19:57:09+00:00
> I’d go further though: Execution is not an appropriate punishment for scamming people, period. Any time we voice disinterest in whether “bad people” are killed by the government, we make it easier for governments to get away with extrajudicial executions (or as it’s called when ordinary citizens do it, murder).

It's not really execution, they are caught in the crosshairs but not the actual target.

But yeah, really. Would you really care if a local drug thug is dragged out of a ditch somewhere? More so than if it's a family that has never done anything wrong in their life?

I've had some dealings with some of these scammers as I often like to toy with them when they call me, I feign interest and then waste their time. I can tell you they are really nasty people, when they find out you're stringing them along they get very vicious and threatening. I kinda doubt they are victims themselves.
by jay_kyburz | 2025-12-15 19:57:32+00:00
I have two kids in high school. It's frustrating to me that the teachers spend so much of their time encouraging kids to make their writing more interesting, and less direct, and padded to meet word length criteria.

They'll then spend the first few years of their career unlearning this and attempting to write as directly and clearly as possible with as few words as possible.
by pyuser583 | 2025-12-15 19:57:38+00:00
This is fine though. I’m glad I can watch Game of Thrones, which is only possible because we can keep it away from kids.

Same with drinking, etc.

Ideally there were would be well moderated sites for children, but that’s not practical.

Saying “let’s move kids out of this area so we can do grown up stuff” is totally fine. It protects children while not infringing on adults freedoms.
by ocdtrekkie | 2025-12-15 19:58:07+00:00
Oh, one more thing: Straight up ask other vendors about hypervisor support. If I'm having a conversation about another type of product and they tell me they support VMware and Hyper-V, I'm going to ask them what to expect if I switch to Proxmox in a couple years.

The way a vendor answers this won't just help you avoid future lock in, it'll likely reveal a lot about a company's confidence in their product and their support team.
by bflesch | 2025-12-15 19:58:07+00:00
The problem with dbus is also that all these nice browser extensions that integrate websites with gnome/kde talk over dbus. These dbus APIs had several DOS vulnerabilities, some of which could be triggered by visiting any website. It is unacceptable that my desktop environment crashes just because something floods the dbus API, even moreso if it can be triggered by visiting a website.

So if you are a security researcher, dbus is a very worthwhile entry point if you want to improve some open source software :-)
by oersted | 2025-12-15 19:58:22+00:00
I hate to get into this, but I'm impressed by the ideological juggling. A conspiracy theory about minorities being anti-minority to weaken the majority by provoking them to anger against minorities?

I suppose I'm falling for the trolling right now.

EDIT: I assumed, perhaps wrongly, that OP was referring to individual "Africans and Indians" from the US. I suppose it does make some sense if we are talking about organised action from foreign powers.
What changes when agent routing is fully deterministic?
by balachandarmani | 2025-12-15 19:58:28+00:00
I’ve been exploring what happens if you treat agent routing as a deterministic problem instead of a dynamic or heuristic one.

I built a small routing runtime (IntentusNet v1.0.0) that is intentionally limited: - synchronous execution - explicit routing strategies (direct, fallback, broadcast, parallel) - deterministic agent ordering - no retries, no workflows, no scheduling

It’s useful only when multiple handlers can satisfy the same intent and the fallback path needs to be predictable.

Code and documentation: https://github.com/Balchandar/intentusnet

I’d appreciate feedback on where this approach breaks down or isn’t worth the trade-off.
by lemonwaterlime | 2025-12-15 19:58:56+00:00
There's also Julia.

Earlier in my career, I found that my employers would often not buy Matlab licenses, or would make everyone share even when it was a resource needed daily by everyone. Not having access to the closed-source, proprietary tool hurt my ability to be effective. So I started doing my "whiteboard coding" in Julia and still do.
by bawolff | 2025-12-15 19:59:02+00:00
> the most meritorious solution never rises to the top for any given problem, but rather one apparently chosen by absolute randomness.

Respectfully, i think that mostly happens when people reviewing the solution space don't understand the problem fully. Often the requirements differ from what people think they are, and as a result the winner seems random because they don't understand the actual requirements.
by hedora | 2025-12-15 19:59:11+00:00
Back when Amazon was going to buy Roomba so they could use the cameras to sell us crap and/or sell the feed to law enforcement, I unplugged ours.

They were unimaginably unreliable compared to our older Roombas, and I was kind of shocked how little we missed them.

Anyway, I looked into getting a secure (or at least not malicious) alternative. At the time, the best bet was to get a Chinese model, then MITM its connection to the cloud + run your own server locally.

At that point, I realized it was less effort to just manually vacuum the house and moved on. I'm certainly not the only one, given the size of the modder community for the Chinese competitors.

Now, I wonder how far the modders are from buying a handful of commodity components + just 3d printing the rest of the robot, since that's less effort than dealing with enshittification.
by workfromspace | 2025-12-15 19:59:12+00:00
I was just browsing this website and found that the jobs are actually listed at https://www.usajobs.gov I think.

The latter website, job search, job details and help center look actually nice. Unfortunately I'm living in EU and not an American citizen, but I wish EU did something similar.

(There is https://eures.europa.eu but just like almost any other EU website, the design is very confusing and cluttered)
by torginus | 2025-12-15 19:59:19+00:00
I am puzzled by this comment - hasn't been an explicit goal for the Linux desktop (pushed esp by the Gnome/Fedora folks) to have applications run in a sandbox? That's literally what stuff like Flatpak xdg-desktop-portal and Wayland isolation are built around.

And maybe its time for a reinvention anyway? IPC and efficient and portable formats are very mature nowadays, with protobuf, flatbuffers etc. and the general model of the internet is based around service location, and stuff talking to each other.

I'm kida curious why they didn't go with Unix Sockets in the first place, with named pipes in memory carrying the message transport.
by Joel_Mckay | 2025-12-15 19:59:22+00:00
The Arduino 1kHz busy-loop and ISR designs is not real-time or necessarily guaranteed latency.

RTLinux or FreeRTOS are guaranteed-latency OS, that can reduce timing jitter.

"Real-time" is another term hijacked by people that think it means the same thing. It was a disservice to students, but thankfully FPGA or Raspberry Pico io DMA with mcu parallelism can teach people to understand clock domain crossing.

Part of the Arduino appeal, was convincing people the mcu and application SoC problem domains were the same. They are not, and never were... Hence the new Arduino board dual chip layout is twice as bad in some ways. Cheers =3

https://www.youtube.com/watch?v=G2y8Sx4B2Sk

risc v -- a new hope, but 20 years too late

stm32 -- a solid competitor to Microchip/AVR, but 14 years too late

esp32 -- FreeRTOS with hardware flash paging can pose an issue, but at least it already doesn't need Arduino software lol
by nutjob2 | 2025-12-15 19:59:37+00:00
> Your point stood fine without this.

Did it? Mentioning MAGA is smear? The app's intended audience is pretty clear.

But where I really disagree is promoting whataboutism. Anyone is free to submit stories about the foibles of the left or right, but what we don't need dualing whatabouts for every issue raised.
by boscillator | 2025-12-15 19:59:51+00:00
Interesting... I wrote a similar post about MATLAB's syntax a while ago, and I still think MATLAB is one of the best calculators on the market.

RunMat is an interesting idea, but a lot of MATLAB's utility comes from the toolboxes, and unless RunMat supports every single toolbox I need, I'm going to be reaching for that expensive MATLAB license over and over again.
by slowturtle | 2025-12-15 20:00:01+00:00
By "Arabs who live in Israel" you mean the minority of Arabs who the Israelis didn't force out at gunpoint during Plan Dalet and the Nakba. The Israelis can rectify the situation at any time by either allowing the Palestinians in the West Bank and Gaza to have a real state, not a puppet or rump state, or by incorporating them into Israel with full legal rights, political representation, and an end to military occupation.
by danaris | 2025-12-15 20:00:11+00:00
If you would rather have an extra, say, $3k/yr* in salary, rather than having that exact same amount of money go toward an employer-provided health plan that would, if you tried to obtain it on your own, cost $10k/yr, then I think you might have a problem with math.

Note that I don't just mean the math of $10k > $3k, because I know some people think that they can save money by just not having health coverage. This is also being bad at math: specifically, statistics. You won't win, especially since you need regular checkups to make sure you aren't starting to develop something that's cheap to nip in the bud, but massively expensive to treat later.

* No actual numbers were harmed in the making of this post. If you think these specific numbers are unrealistic, feel free to substitute other actual values, but the rough ratios should still be in the right ballpark.
by hereme888 | 2025-12-15 20:00:21+00:00
So the U.S. is still using 11-17 lbs/yr despite warnings and bans really since 1986, a re-authorization in 2021 by the EPA, and known elevated risk near use sites, which corporations have fought against claiming "no definitive proof". So if the U.S. allows its use "as directed", who can be legally accountable for all this?
Show HN: I made an LLM-powered CRO tool
by adamoufkir | 2025-12-15 20:01:07+00:00
Hi HN, I built Crovise, an AI-powered tool that reviews landing pages and gives concrete, actionable suggestions to improve conversion rates.

You paste a URL, and it analyzes copy clarity, CTA placement, messaging hierarchy, and friction points using LLM-based heuristics inspired by CRO best practices. The goal is to help founders and marketers quickly understand why a page isn’t converting, not just guess.

This started as a side project after I struggled to get useful feedback on my own landing pages. I’d love feedback from the HN community on the approach, accuracy, and what would make this more useful for developers and indie founders.
by lossolo | 2025-12-15 20:01:20+00:00
I would like to remind you that HK was a British colony for more than 100 years, and there was no democracy or freedom then. They only allowed the first partly free elections two years before they gave it back to China, in 1995. And not because they suddenly wanted freedom and democracy for HK, but because it would be harder for China and better for their own interests. Hypocrisy all the way.
by BrenBarn | 2025-12-15 20:01:21+00:00
The article calls out "bad" union bosses as being those who push things like two-tiered contracts, prioritizing more senior members and creating inequality within the union. But in my perception (and I don't think I'm alone in this), an equally troubling problem is that even "good" union bosses prioritize members of their own union and create inequality among the broader class of workers and citizens.

Egregious examples include union advocacy for various kinds of licensure or "fossilizing" regulations (i.e., "we must keep doing things in this way we've been doing them to preserve the jobs of the people who do them that way"). These just raise barriers for other workers, increase competition for coveted union jobs, and increase the separation between "good" (aka union) jobs and the rest.

The old-school unions a la the Wobblies were more focused on improving the lot of all workers, everywhere. Many of the labor reforms that were passed in the early 20th century (like minimum wage) followed this model: everyone gets the minimum wage, everyone gets worker safety guarantees, everyone gets the benefits of the labor policies. But nowadays I don't see so much of that from unions or labor activism in general. To a large extent I see the reverse: advocating for special minimum-wage carveouts (e.g., for hotel workers or fast-food workers); advocacy for special work-condition requirements; and yes, things like two-tier systems where benefits or pensions are differentially allocated based on characteristics internal to the union/job.

I hate fat cat capitalism and large corporations more than almost anyone I know, but many unions (especially public employee unions) have lost a lot of my trust because of these things. The sad reality seems to be that many unions, just like the corporate bosses, are just in it for themselves. Being in it for everyone in the union is better than being in it for just the union bosses, but it's still not good enough as long as they're not in it for everyone who isn't super wealthy. If unions want to attract people they need to forcefully advocate not just for better stuff right now for these few people (union members), but for a wholesale societal overhaul to upend the entire economic system that makes such small-scale negotiation necessary.
by kccqzy | 2025-12-15 20:01:35+00:00
I have a Roborock too. It is certainly good at quickly creating a reasonably accurate map, but it just gets stuck so easily. Things like going into an enclosed corner but unable to get out. Or going into a room, cleaning the floor just behind the door such that the door shuts and now unable to leave the room. I certainly cannot run it while not at home. It will just get stuck.