MurphyA/hacker-news huggingface dataset:
by connorbelldev | 2026-01-28 02:33:26+00:00
I kept building AI agents and hitting the same wall: the agent worked, but getting it in front of users meant building auth, multi-tenancy, a chat UI, conversation storage, access control. Months of infrastructure before anyone could use the thing.

AgentFlow is my attempt to solve this. Connect any HTTP/SSE endpoint and get a production-ready interface with complete tenant isolation. Your LangChain agent, n8n workflow, custom Lambda, whatever speaks HTTP — plug it in, you're live.

The real use case: you're an AI consultant or agency with multiple clients. Client A needs a LangChain contract analyzer. Client B needs an n8n refund bot. Without something like this, you're managing two deployments, two auth systems, two codebases. With AgentFlow, it's one portal. Route each client to their own backend. Complete data isolation. Same professional frontend.

Or you're a SaaS company adding AI features at different tiers. Free users get GPT-3.5, Pro gets GPT-4, Enterprise gets your fine-tuned model. Create groups, assign endpoints, done.
Stack: Next.js, Supabase, Row-Level Security. Config is YAML-based with a UI wizard option.

This started as a tool I needed for my own consulting work. AGPL-3.0, self-hostable, free forever. Happy to answer questions.

GitHub: https://github.com/connorbell133/Agentflow
by jjk166 | 2026-01-28 02:33:28+00:00
> Both warm-blooded dinosaurs and the Chicxulub impact were both theories dismissed as fringe for decades before overwhelming evidence led to them being accepted as likely. In no small way thanks to Jurassic Park.

The main rejection of the impact hypothesis was that the dinosaurs had already died off by the time of the impact, the idea that the iridium in the layer came from an impact was reasonably well received. In 1984 a survey found 62% of paleontologists accepted the impact occurred, but only 24% believed it caused the extinction. The Alvarez duo, who proposed the impact hypothesis, were proposing to redefine where the cretaceous ended based on a new dating method (at the time the end of the cretaceous was believed to be a layer of coal a few meters off from the now accepted boundary), and fossil evidence at the time seemed to show gradual decline. A big part of the acceptance of the theory was the development of new analysis methods that showed the evidence for a gradual extinction prior to the impact to be illusory. By the time the impact crater was identified, it was already the dominant theory. Actually in the early 90s major journals were accused of being unfairly biased in favor of the impact hypothesis, with many more papers published in favor than against.

Completely coincidentally, the theory that the chixulub structure was an impact crater was initially rejected and it wasn't until 1990 that cores sampled from the site proved it was.

Dinosaurs being warm blooded was well accepted by the late 70s.
by ncallaway | 2026-01-28 02:34:10+00:00
> They'd have to fight the feds for jurisdiction and will unfortunately likely lose that fight.

That’s simply not how the system works. There’s no one assigned entity with “jurisdiction” over a crime.

The state and federal governments are dual sovereigns and each are empowered to enforce their own laws. It doesn’t even violate double jeopardy for the Feds and a state to prosecute the same actions.

The only thing that matters is if the state can obtain enough evidence that they feel they could secure a conviction before a jury of the shooter’s peers.
by echelon | 2026-01-28 02:34:15+00:00
This is immediately what my mind went to.

If you haven't seen Smiling Friends, you're in for a treat. Zach Hadel is a genius.

The mix of 2D animation, 3D animation, claymation, stop motion, live action rotoscoping, and comping in guest animators like Joel Haver and David Post amazing. You know they appreciate the art form.

You've probably already seen the gif of this scene: https://www.youtube.com/watch?v=5zxL77g1em4
by belorn | 2026-01-28 02:34:52+00:00
No one has to be accepting to have an environment where people feel safe to participate in a dialog. Civil disagreement is a good thing and can improve a discussion just as civil agreements.

If however a large portion of comments get flagged or downvoted to the point of being killed, or met with hate rather than polite and constructive discussion, the result becomes a hostile environment. Repeat that experience a few times and many people will stop engaging in the discussion and just use tools like downvote and flag without making a single comment. It becomes a battle ground where moderation tools are a weapon, rather than a forum where moderation is there to improve the quality of those wishing to participate.

There has been a few times where dang has removed the flags of an article but also done some more heavy handed moderation with a seemingly focus on civility and tone. Personally I would also like to see them remove downvoting for those articles, leaving only upvotes as a way for people to appreciate other comments. It is a nice way to give people room to have a serious and open discussion around political topics here on HN, but with some supervision.
by coppsilgold | 2026-01-28 02:35:59+00:00
Remote attestation only works because your CPU's secure enclave has a private key burned-in (fused) into it at the factory. It is then provisioned with a digital certificate for its public key by the manufacturer.

Every time you perform an attestation the public key (and certificate) is divulged which makes it a unique identifier, and one that can be traced to the point of sale - and when buying a used device, a point of resale as the new owner can be linked to the old one.

They make an effort to increase privacy by using intermediaries to convert the identifier to an ephemeral one, and use the ephemeral identifier as the attestation key.

This does not change the fact that if the party you are attesting to gets together with the intermediary they will unmask you. If they log the attestations and the EK->AIK conversions, the database can be used to unmask you in the future.

Also note that nothing can prevent you from forging attestations if you source a private-public key pair and a valid certificate, either by extracting them from a compromised device or with help from an insider at the factory. DRM systems tend to be separate from the remote attestation ones but the principles are virtually identical. Some pirate content producers do their deeds with compromised DRM private keys.
by jonsoft | 2026-01-28 02:36:35+00:00
I asked the Spanish tutor if he/it was familiar with the terms seseo[0] and ceceo[1] and he said it wasn't, which surprised me. Ideally it would be possible to choose which Spanish dialect to practise as mainland Spain pronunciation is very different to Latin America. In general it didn't convince me it was really hearing how I was pronouncing words, an important part of learning a language. I would say the tutor is useful for intermediate and advanced speakers but not beginners due to this and the speed at which he speaks.

At one point subtitles written in pseudo Chinese characters were shown; I can send a screenshot if this is useful.

The latency was slightly distracting, and as others have commented the NVIDIA Personaplex demos [2] are very impressive in this regard.

In general, a very positive experience, thank you.

[0] https://en.wikipedia.org/wiki/Phonological_history_of_Spanis...
[1] https://en.wikipedia.org/wiki/Phonological_history_of_Spanis...
[2] https://research.nvidia.com/labs/adlr/personaplex/
by unleaded | 2026-01-28 02:36:59+00:00
For some reason the opening settings page made me think this would be someone who just told claude to make a monkey ball style game.. maybe from seeing too much of that on HN. forgive me for that, this is awesome.

As far as i can tell it's not even an emulator or a decompilation running in emscripten or anything like that, they remade the game in TypeScript. love stuff like this https://github.com/sndrec/WebMonkeyBall
by ncallaway | 2026-01-28 02:37:22+00:00
They are, but again, district courts have been pretty good, and I would be out of jail in <30 days, unless my case goes up on appeal.

And if I die in jail because I won’t unlock my phone: fuck ‘em, they’ll have to actually do it.

I don’t plan on being killed by the regime, but I don’t think I would’ve survived as a German in Nazi Germany, either. I’m not putting my survival above everything else in the world.
by nntwozz | 2026-01-28 02:37:22+00:00
Transmission version 4.0.6 is widely banned by private and public BitTorrent trackers due to a critical bug in its announce logic, which causes it to overwhelm trackers with excessive requests (a "hammering" or DDoS-like effect). This issue arises particularly when IPv6 is disabled or unavailable, causing the client to loop rapidly.
by WalterBright | 2026-01-28 02:37:39+00:00
Allied fighters were also equipped with self-sealing fuel tanks, so a hit doesn't automatically mean it burns. I don't have any stats on it, but they wouldn't have added the self-sealing if it didn't improve the survivability.

The sensitive part for a P-51 was the cooling system. Any hit on that, and you're done.

B-17s famously endured a lot of battle damage. The usual vector of attack on them was head on, and they aimed for the cockpit. (Attacks on fighters usually aimed for the cockpit, too.)

I know that tracers were used in WW1 to set observation balloons (filled with hydrogen) afire. Tracers in WW2 were used so the gunner could direct his aim. I haven't read that they were intended for the fuel tanks, but that could be true.

109's would frequently sneak up from the rear, and if the tail gunner was not paying attention, it was an easy kill. My dad (B17 navigator) said the tail gunners, once they spotted a 109, would fire a few rounds of tracers long before the 109 was in range - just to let the pilot know they were awake and aware. It usually meant the 109 would veer off.
by Dev_Master | 2026-01-28 02:38:08+00:00
NumMaze is a small open-source Python desktop app (Tkinter + ttkbootstrap) that auto-generates arithmetic logic puzzles with guaranteed step-by-step solutions.

You pick a difficulty (4, 6, or 9 numbers), and it builds a grid plus a target value by recursively combining the numbers with + − × ÷. Every puzzle comes with a solvable path.

Features:

Easy / Medium / Hard modes (2×2, 2×3, 3×3 grids)

Live GUI preview

Automatic solution steps

Export single or multiple puzzles to:

Combined PDF

Separate PDFs

Combined JPG

Separate JPGs

Designed for classrooms, worksheets, and self-practice

Built mainly as an educational / hobby project to make printable math puzzles quick and visual.

Feedback welcome
by saghm | 2026-01-28 02:38:17+00:00
On the other hand, if compressing to a single number is not possible, a doctor will just refuse to give a grade in that way. In my experience, most doctors tend to be very careful about trying to avoid saying anything definitive that they're not actually sure of, even if they're reasonably confident, in large part because part of their job involves understanding how patients react to how things are communicated to them. Being willing to confidently give a misleading answer to a bad question is itself as bad thing when it comes to health data because regular people aren't able to (and shouldn't be expected to) figure out what various interferences from health data happen to feasible from a given data set.
by Springtime | 2026-01-28 02:38:21+00:00
> The Post-LLM World: Fighting Digital Garbage https://archive.org/details/paper_20260127/mode/2up

This appears to just be the output of LLMs itself? It credits GPT-5.2 and Gemini 3 exclusively as authors, has a public domain license (appropriate for AI output) and is only several paragraphs in length.
by rpdillon | 2026-01-28 02:38:43+00:00
To your last statement: not at all. I think releasing all the chats publicly would show that basically no one is using ChatGPT to circumvent paywalls because the model was trained on that material.

As to your Ars article, I'm familiar because I read Ars.

> The chart shows how easy it is to get a model to generate 50-token excerpts from various parts of Harry Potter and the Sorcerer’s Stone. The darker a line is, the easier it is to reproduce that portion of the book.

50-token excerpts are not my concern, that's 40 words. The argument that the plantiffs need to make is that people are not paying for the NYT because ChatGPT (part of the four fair use pillars, I could expand, but won't). That's gonna be tough. Let's revisit this after the ruling and/or settlement.
by bigbadfeline | 2026-01-28 02:39:09+00:00
> people spend tens of thousand and millions while they are under suspicion (i.e. not cleared of wrongdoing)

You managed to hit the nail on the proverbial head... "not cleared of wrongdoing" means "guilty until proven innocent" and turns the promise of the justice system on its head - spending millions to prove innocence is just a mundane consequence of that perversion.

> So due process doesn't guarantee an innocent person is not inadvertently "dragged though mud".

And, not quite accidentally, it allows to drug anyone though mud regardless of guilt - both purposefully or inadvertently.

I've said this before but the type of argument you use is quite common and it boils down to the following fallacy: If something is already happening somewhere, sometimes - it's the right thing to do everywhere and all the time.

The fact that the government can excuse and routinely do something while getting away with it doesn't mean that the getting away or the action itself are right or justified.

The discussion here is about the compatibility of government's actions with the spirit of the Constitution which doesn't provide an exemption for habituated wrongs.
by falcor84 | 2026-01-28 02:39:19+00:00
Too fast. It's already coding too fast for us to follow, and from what I hear, it's doing incredible work in drug discovery. I don't see any barrier to it getting faster and faster, and with proper testing and tooling, getting more and more reliable, until the role that humans play in scientific advancement becomes at best akin to that of managers of sports teams.
by raw_anon_1111 | 2026-01-28 02:39:34+00:00
Why would any company past the savings on to you? Besides “no one ever got fired for buying IBM”. No company is going to replace SalesForce with a vibe coded alternative they find out about on “Ask HN”. Coding has never been the issue with having a successful project. Look at all of the companies who were crushed by BigTech just throwing a few developers at the same problem and having a good enough alternative.
by michtzik | 2026-01-28 02:40:29+00:00
Yup, this inspires great confidence in the source.

> 10,109 ... left their jobs

> departures outnumbered new hires last year by a ratio of 11 to one

That means that there were ~919 new hires, and thus it seems that 10,109 minus 919 equals

> a net loss of 4224

It appears that the "11 to one" ratio is the average, across agencies, of each individual ratio. It's left as an exercise to the reader to determine whether that average has any meaning at all.
by giardini | 2026-01-28 02:40:35+00:00
toyg says "Sure. That doesn't mean that an external viewpoint is any less valid."

Sure, but it is unwelcome and likely invalid.

toyg says "The world is watching you, and it sees something really sinister happening...innocent lives....you are in a very dark place..."

Woooo! I'm scared now!8-0

1. The world is always watching us! Y'all should take a break sometime. The world is big and there are lots of other things to see. Too much watching Minneapolis, right now one of the iceholes of the world, indicates poor judgement regarding one's use of time (indeed most anytime, unless you live there, which is another problem).

2. I count one possibly innocent life lost so far. That's very good given the circumstances. Renee Nicole Good drove an SUV toward an LEO officer on an icy road, possible attempted manslaughter. Alex Pretti OTOH was probably only foolish and I do believe it likely ICE will be charged with crimes associated with his death.
by afpx | 2026-01-28 02:40:50+00:00
I saw the writing on the wall the first day in the office. Microsoft was already dumping loads of R&D money into software development automation. They were very motivated. Everyone hated software developers because we made too much money relative to people with important positions. And, we were too weird. To them, we were 'blue collar'. I figured with exponential progress it wouldn't take long. Pretty much my strategy after college was bank and invest and get out as early as possible then go hack on my own projects until my end of days.
by nntwozz | 2026-01-28 02:42:08+00:00
Btw if you haven't seen it yet TrguiNG is a great Remote GUI:

https://github.com/openscopeproject/trguing

Screenshots:

https://github.com/openscopeproject/TrguiNG/wiki

TrguiNG is a rewrite of transgui project using tauri. Frontend is written in typescript with react.js and mantine library. Backend for the app is written in rust
by kaitai | 2026-01-28 02:42:29+00:00
Yeah Cam Higby & friends have "infiltrated" the Signal groups. It's not that hard frankly, and most of the chats emphasize that 1) they're unvetted, 2) don't do anything illegal, anywhere, including taking a right on red if the sign is there saying not to 3) don't write anything you don't want read back to you in a court of law. Higby and friends do have "How do you do, Fellow Kids?" energy in those chats.

Here's what I'm interested in: anyone know what Penlink's tools' capabilities actually are? Tangles and WebLoc. Are they as useful as advertised?
by SideQuark | 2026-01-28 02:43:01+00:00
Except they’re destroying those places too, and the places producing those skilled people, and breaking the pipelines that created innovation.

This past year top US talent entering college left the US at 5x the rate they did before. Europe, pacific rim, china, all have massive recruiting programs to suck talent out, and it’s working.

Trumps Gift will surpass Hitlers Gift.
by apothegm | 2026-01-28 02:43:07+00:00
This might be one of those “the market can remain irrational for longer than you can remain solvent” cases, though.

And for arts and entertainment, where the long term value is less important economically than the immediate click, AI slop is good enough that the percentage of people unable to tell the difference means there’s no point in creating any more except at the highest end or for the love of it.
by rpdillon | 2026-01-28 02:43:08+00:00
I think it's going to be important to track. It's going to change things.

I agree on your specific points about what you prefer, and that's fine. But as I said 15 years ago to some recent Berkeley grads I was working with: "You have no right to your current job. Roles change."

AI will get better and be useful for some things. I think it is today. What I'm saying is that you want to be in the group that knows how to use it, and you can't there if you have no experience.
by Dylan16807 | 2026-01-28 02:44:15+00:00
> They are representing their client's position.

I guess, but it's still distasteful, especially when it's a corporation saying it and the corporation is incentivized to exaggerate/mislead to an extreme.

> You also cannot "lie" about an opinion about what might confuse other people.

What are you talking about? Of course you can lie about your opinion. And the opinion involving other people doesn't change that.

I'll do it right now: I think basically nobody likes ice cream, they're all faking it to fit in.
by TOMDM | 2026-01-28 02:44:43+00:00
Pull Request: chore: remove node_modules

I don't see much of a reason to keep a copy of node_modules on the git repository considering they can be reinstalled for deployments and it is generally bad form.

sndrec (the author):

Thank you for this - I'm newbie at webdev so I wasn't sure what was and wasn't needed. I'll merge this soon.

Haha, almost certainly Claude
Clawdbot: Eval() by default, no rate limiting, 50 attack scenarios
by Chgdz | 2026-01-28 02:44:51+00:00
I audited an AI coding agent – found 50 attack vectors
https://dev.to/dmitry_labintcev_9e611e04/riding-the-hype-security-audit-of-ai-agent-clawdbot-2ffl
by dlcarrier | 2026-01-28 02:47:17+00:00
The regular Fresh stores have a scanner and screen on the cart that you can use to track your purchases while shopping, then the cashier could pull up the contents in one go, without scanning scanning at the register. There's also some discounted products for Prime members that can be applied by pulling up your account on your phone and displaying a barcode.

I went there the first week they opened, and the whole store was a mess with shoppers standing still or walking slowly, completely unaware of their surrounds, while messing with the phone or their cart trying to figure it out.

I'm sure that with enough time, shoppers could figure out there system, but I was in a hurry so I just grabbed the few items I wanted and paid cash, which was just as fast as it is everywhere else.

I do want to stop by before it closes, and see if customers figured out their systems, in the year and a half the location has been open.
by aschla | 2026-01-28 02:49:27+00:00
This is a silly bill. I'm struggling to imagine how this would be practically implemented and enforced.

The details in the bill mention inserting a "firearms blueprint detection algorithm" in either the firmware of the printer, or in the slicer, which can detect a file based on its presence in a database of known downloadable firearm files.

Are the people who drafted this bill aware that firearm parts can be modeled relatively easily in any flavor of CAD software, which would make a known list of files essentially pointless? Even someone who doesn't have CAD skills can just download another file in the endless stream of possible files, all with small modifications to differentiate the file hash.

And then there's the whole open-source side of 3D printing, which involves a significant share of machines, where this approach would essentially be completely unenforceable.

This is one of those pieces of regulation that doesn't actually prevent criminals from acquiring firearms, it just makes regular people's lives more difficult.
by ok123456 | 2026-01-28 02:49:55+00:00
They're trying to "nudge" everyone. Major desktop environments and entire distributions are removing X11 support to varying degrees. A lot of this is because they can't get their adoption rates above about half due to various broken workflows or simply user preference.

They intentionally don't want you to keep using X11, and they'll keep turning up the heat on the pot until we're all boiling.

Gnome just removed the middle-click paste option. Is that because they fixed the clipboard situation on Linux, and there's a universal, unambiguous way of cut and paste that works across every application? No. It's because middle-click to paste is an "X-ism." This is just demagoguery and unserious.