MurphyA/hacker-news huggingface dataset:
Show HN: Hyperterse – a super fast runtime to connect your data to your agents
by samrith | 2026-01-29 16:24:47+00:00
Hi HN,

I'm Samrith, the creator of Hyperterse.

I built *Hyperterse* because I kept running into the same problem when building AI agents: safely connecting databases to LLMs requires writing endless API endpoints, managing boilerplate validation, and building custom integrations for each AI framework.

To build an AI agent that can query your database, you usually have to:
- Write REST endpoints for every query
- Implement input validation and type checking
- Generate OpenAPI documentation separately
- Build custom MCP integrations for each AI framework
- Worry about exposing SQL or connection strings to clients

We built a runtime server that consolidates this into a single declarative configuration file. You define your queries once, and Hyperterse automatically generates typed REST endpoints, MCP tools, OpenAPI specs, and LLM-friendly documentation.

*HOW IT WORKS:*

Instead of writing API endpoints, you define queries in a simple config file. Hyperterse handles:
- *Query Definition*: Write SQL once with typed inputs
- *Endpoint Generation*: Each query becomes a REST endpoint (`POST /query/{name}`)
- *MCP Integration*: Queries are automatically exposed as MCP tools for AI agents
- *Documentation*: OpenAPI 3.0 specs and LLM-readable docs generated automatically
- *Security*: SQL and connection strings stay server-side—never exposed to clients

*THE SYNTAX:*

Here's what a typical query looks like. This replaces about 50-100 lines of boilerplate API code:

```yaml
adapters:
my_db:
connector: postgres
connection_string: "postgresql://user:pass@localhost:5432/db"

queries:
get-user:
use: my_db
description: "Retrieve a user by email"
statement: |
SELECT id, name, email, created_at
FROM users
WHERE email = {{ inputs.email }}
inputs:
email:
type: string
description: "User email address"
```

Run `hyperterse run -f config.terse` and you get:
- REST endpoint: `POST /query/get-user` with automatic input validation
- MCP tool callable by AI agents via JSON-RPC 2.0
- OpenAPI docs at `/docs`
- LLM-friendly documentation at `/llms.txt`

*FEATURES:*

- Supports PostgreSQL, MySQL, and Redis (at the moment, more connectors coming)
- Hot reloading in dev mode (`hyperterse dev`)
- Type-safe input validation (string, int, float, boolean, uuid, datetime)
- Self-contained runtime—deploy anywhere
- No ORMs or query builders required

*USE CASES:*

- AI agents and LLM tool calling
- RAG applications with structured database queries
- Rapid API prototyping
- Multi-agent systems sharing database access
by firmretention | 2026-01-29 16:24:52+00:00
Dexas are notoriously inaccurate. Your dexa scan is probably wrong, and you are fatter than you think. I've been lifting over a decade, so I have far more muscle mass than the average person, and I am 6'1", yet am still easily over 20% BF if I'm 200 lbs or more. Don't believe me? Try to get truly shredded. You'll see for yourself that you will have to lose far more weight than you think. Everyone is fatter and less muscular than they think they are, even if they're active. Unless of course you are a heavy steroid user, in which case you may actually be muscular enough for that to be valid. But for the average natural trainee? Nobody who's truly lean is getting an obese or morbidly obese BMI. Overweight at worst, maybe.

BMI is definitely inaccurate for those with greater amounts of muscle mass, but not as inaccurate as many would like to believe.
by tracker1 | 2026-01-29 16:25:02+00:00
At this point, I mostly avoid prescribed medications and don't take very many things at all regularly. Mostly because I've had some of the worst interpretations of the side effects of most medications I've ever been on. These include hospitalizations and side effects I'm still dealing with years after (looking at you Trulicity/Ozempic)...

I'm usually able to reason or force my way through depression and the like, but have had a few deep bouts in my life. The medications have ranged from ineffective to building a tolerance quickly, to just plain worse than the symptoms being treated. Nothing like missing your highway exit multiple times back and forth because you get lost "in" the drive on medication, or having 140 browser tabs open and losing 5 hours of work time.

Everyone is different. I am amazed at how much western society has so many hormonal issues that come down to the lack of quality or appropriate fatty acid intake and a lack of something as simple as more outdoor/sun time. I think the "low fat/cholesterol" advice for most of the past half century combined with the increase in snacking and junk foods have been massive disservices to humanity as a whole. I wouldn't be surprised if some of the effects are multi-generational in the making either.
by dpc050505 | 2026-01-29 16:25:20+00:00
How long would it take from New York to Philadelphia, or Boston to DC? How long would it take between San Diego and SF? What about a train between Chicago and Detroit?

We're building a fast train from Toronto to Quebec city in Canada. It's going to be a lot more comfortable and way faster than driving. A MP in my family takes the train from Montreal to Ottawa very frequently, they don't want to bother with parking in the capital and they can work on the train.
by account42 | 2026-01-29 16:25:20+00:00
> Ideally, instead of the CLI app switching to "bright green", it would pick a "bright contrasting green". So if the terminal background was dark, it would pick bright green, and for light background it would pick a darker green. There isn't CLI app implementations for this? This is similar to how you'd implement dark mode in a web app.

The responsibility for this lies with the color scheme not the terminal program.
by cybrox | 2026-01-29 16:25:28+00:00
I should have probably said: "[...] exclusive content which is curated on [the creators] Patreon and [accessible to the user via the web browser or] their app."

Hope this clears things up. My main point was that there is in fact an incentive for users to check the app beyond setting up payment and forgetting about it. Even if it is not the only way such content is available, it certainly is a convenient one.
by gensym | 2026-01-29 16:25:36+00:00
Yeah. I'm a stickler for accountability falling on drivers, but this really can be an impossible scenario to avoid. I've hit someone on my bike in the exact same circumstance - I was in the bike lane between the parked cars and moving traffic, and someone stepped out between parked vehicles without looking. I had nowhere to swerve, so squeezed my brakes, but could not come to a complete stop. Fortunately, I was going slow enough that no one was injured or even knocked over, but I'm convinced that was the best I could have done in that scenario.

The road design there was the real problem, combined with the size and shape of modern vehicles that impede visibility.
by EastLondonCoder | 2026-01-29 16:26:10+00:00
OP here (Jonatan + Maria). Happy to answer questions.

If anything’s unclear: the “show” is the site + media, but the thing we’re sharing is the operating model for a repeatable local night—how we built trust, got strangers to show up alone, and kept it coherent enough that people return.

If you’re building any kind of local cultural/community format—music nights, reading groups, maker spaces, whatever, we’re happy to talk about what worked, what failed, and what we’d do differently.
by AnotherGoodName | 2026-01-29 16:26:11+00:00
This is a little damning of the way Google does things honestly.

>When an app runs on a single machine, you can often trace an error by scrolling through a log file. But when it runs across 50 microservices, that single request gets scattered into a chaotic firehose of disconnected events.

Yep this is about Google. It's painful for humans to debug and it's also an extremely bespoke issue to deal with. No one else has quite the same level of clusterfuck and there's going to be no training for LLMs on this.
by whynotminot | 2026-01-29 16:26:14+00:00
It might not be possible for a lot of places — I don’t really know.

But I know when I drive, if it’s a route I’m familiar with, I’ll personally avoid school zones for this very reason: higher risk of catastrophe. But also it’s annoying to have to slow down so much.

Maybe this personal decision doesn’t really scale to all situations, but I’m surprised Waymo doesn’t attempt this. (Maybe they do and in this specific scenario it just wasn’t feasible)
by JoshTriplett | 2026-01-29 16:26:17+00:00
Ofcom's claimed aims are simultaneously overreaching even in what they claim to want, and inconsistent with their actual enforcement actions which in some cases seem intentionally unsatisfiable by any means other than "stop existing online". Empirically, their attempts at enforcement on non-UK entities, which should not even be able to go as far as "block UK users" (not a responsibility of a non-UK entity), don't stop with "block UK users", and also attempt to enforce "don't suggest VPNs" and "block VPNs", which are not aspects inherently associated with UK users specifically as opposed to any other country.

And all that is leaving aside that the claimed aims of "protecting UK users" are confirmed false, in legal filings: https://bsky.app/profile/tupped.bsky.social/post/3lwgcmswmy2...
by matt-p | 2026-01-29 16:26:42+00:00
Incentives (for western Governments) are strong to show population has grown as little as possible, because it reduces stats on (mostly illegal) immigration, and improves GDP-per capita. I think it is probably healthy to explore if these incentives leak into the data that Governments produce. Probably to some extent it does, to be frank, even if that extent is just not looking too closely at passive measurements like food purchase trends or similar.
by sara_builds | 2026-01-29 16:26:50+00:00
The variance mostly comes down to prompt craft and context management.

People who get consistently good results have usually internalized a few things: (1) being explicit about constraints and output format, (2) providing relevant context without noise, (3) matching the model to the task (reasoning-heavy vs creative vs code), and (4) iterating on the prompt when something fails rather than assuming the model is broken.

I've seen the same person get wildly different results depending on whether they ask "write code to do X" vs "I need a function that takes A, returns B, handles edge case C, and should be optimized for D. Here's the existing code it needs to integrate with: [context]."

The gap between those two approaches can be a 10x difference in usefulness. Most of the "LLMs are useless" crowd and the "LLMs are magic" crowd are just working with very different prompt habits.
by tptacek | 2026-01-29 16:26:54+00:00
This is Sweet32, an attack on any block cipher with an 8-byte block size. We don't consider those ciphers "broken"; they just can't be used safely in some common modes. You shouldn't use 3DES or IDEA or Blowfish, of course, but I don't think they're considered "broken", not in the same sense that, say, RC4 is.
Show HN: I made a dual-bootable NixBSD (NixOS and FreeBSD) image
by jonhermansen | 2026-01-29 16:26:54+00:00
I've been working on getting NixBSD (Nix package manager + FreeBSD) to boot alongside NixOS on a shared ZFS pool. The result is a <2GB disk image you can try in QEMU or virt-manager.

What works:

- GRUB chainloads FreeBSD's bootloader
- Both systems share a ZFS pool
- Everything is defined in a single Nix flake
- Fully reproducible builds (some dependencies are now cached on Cachix)

Planned:

- Support native compilation of NixBSD (currently cross-compiled on Linux)
- Many shortcuts were taken to get this working, needs lots of cleanup
- Add a semi-automated installer like nixos-wizard

Try it:

qemu-system-x86_64 -enable-kvm -m 2048 \
-bios /usr/share/ovmf/OVMF.fd \
-drive file=nixos.root.img,format=raw

Login: nixos/nixos or root/toor

The hardest parts were getting mounts working at boot, making the bootloader setup idempotent, and debugging early init. This disk image could potentially work on a USB stick with a bit more work.

This is very much experimental. My goal is to eventually produce a proper NixBSD installation ISO and consolidate all configuration into one repository while still consuming upstream NixBSD as a flake.

Download: https://github.com/jonhermansen/nixbsd-demo/releases/tag/bui...

Feel free to leave feedback here or on GitHub! Thanks!
by ericmay | 2026-01-29 16:27:19+00:00
It might be a strong argument depending on the negative effects - I don't think it's very clear cut. Also no, neither Apple nor Google have a duopoly on the distribution of all consumer software. Microsoft exists, for example.

The other problem consideration here is negotiating power.

Today consumers don't have negotiating power over individual developers, but both Apple and Google do. If you complain to Meta about their unwanted tracking, you don't really have many options besides deleting the app (which you should do anyway). But if enough people complain to Apple or Google, they are more inclined to do something and have the power.

While it may be a marriage of convenience, it's undeniable that both companies through their app distribution models have also provided benefits to consumers that developers otherwise would have abused - privacy, screen recording, malicious advertising, &c.

If you want to argue from the standpoint of pro-consumer action, you have to remember that "developers" are usually pretty awful too and will get away with anything they can, even if it harms their customers. A good balance, instead of ideological purity about one "side" or the other is the smarter move. I tend to come down on the side of the mainstream app stores precisely because those asking for more "freedom" to do as they wish are a tiny minority and are usually more technical. I.e. they can jump through the hoops to install 3rd party app stores and jailbreak their phones today, and since you already can do what you want, maybe it's best to just leave the masses alone since they're very obviously happy with the duopoly.
by cyphar | 2026-01-29 16:27:30+00:00
> trust us we're cool guys

I'm guessing you're referencing my comment, that isn't what I said.

> But the team is not even willing to make promises as big as yours.

Be honest, look at the comment threads for this announcement. Do you honestly think a promise alone would be sufficient to satisfy all of the clamouring voices?

No, people would (rightfully!) ask for more and more proof -- the best proof is going to be to continue building what we are building and then you can judge it on its merits. There are lots of justifiable concerns people have in this area but most either don't really apply what we are building or are much larger social problems that we really are not in a position to affect.

I would also prefer to be to judged based my actions not on wild speculation about what I might theoretically do in the future.
by Anonyneko | 2026-01-29 16:27:37+00:00
The latest population census in Russia was executed so horribly that demographics experts still rely on the 2010 and earlier ones to figure out the approximate population number (the difference between estimations is in ~10 million range). Of course the whole war, relocation, and undocumented immigration things aren't making things any easier.

Much easier to calculate population numbers in countries with a population register, but those are usually smaller countries like those in the Nordics. I don't think censuses are even held around here...?
by trilogic | 2026-01-29 16:27:49+00:00
This agent repo is going nuts:

Moltbot is a personal AI assistant you run on your own devices. It answers you on the channels you already use (WhatsApp, Telegram, Slack, Discord, Google Chat, Signal, iMessage, Microsoft Teams, WebChat), plus extension channels like BlueBubbles, Matrix, Zalo, and Zalo Personal. It can speak and listen on macOS/iOS/Android, and can render a live Canvas you control. The Gateway is just the control plane — the product is the assistant.

If you want a personal, single-user assistant that feels local, fast, and always-on, this is it.

Website · Docs · Getting Started · Updating · Showcase · FAQ · Wizard · Nix · Docker · Discord

Preferred setup: run the onboarding wizard (moltbot onboard). It walks through gateway, workspace, channels, and skills. The CLI wizard is the recommended path and works on macOS, Linux, and Windows (via WSL2; strongly recommended). Works with npm, pnpm, or bun. New install? Start here: Getting started

Anyone did try the repo, are they using bots to get stars or is the repo so viral? Just today it got 4000 stars, come on.

It should be full of security flaws. I get it, it runs autonomous in your pc and phone, but it needs full access to your systems, computers, social media, chats, emails, etc. According to github stars, 100k people are already using it!

This can´t be true, or can it?
by blackcatsec | 2026-01-29 16:27:52+00:00
The articles surrounding the insider builds gaining "ads" are from 2024--now 1.5 years ago. So whatever was implemented is in the OS at this point--particularly items that showed up in the "Beta" channel of Windows. There's nothing new or current surrounding new ad placement on Windows except some Copilot items throughout 2025, if you consider copilot an "ad" and not a useful tool similar to Notepad, or Office.

The TPM2 requirement (and kind of by extension the IOMMU requirement, which is the one itself that bit most people) has significantly more benefits than "DRM" or "planned obsolescence". For one, did you know that TPM1.2 didn't include SHA2? Would you be okay relying on SHA1 hashing in 2026 to be used for digital signing? Of course you wouldn't. If I told you today to go generate an X.509 certificate with SHA1 you're going to look at me funny. Did you know it also didn't include ECC? Also much more useful in this day and age for cryptographic speed. There are many other features I don't feel like digging into at the moment, but you get the point.

I would counter that the downstream requirement for the IOMMU (useful for Hypervisor Enforced Code Integrity), in which Windows itself is broken up into "Virtual Trust Levels" (VTL0, VTL1, and I think there are some newer ones now as well); is extremely useful for securing early parts of the platform boot.

Or did we collectively forget about the early rootkit era of Windows XP from 2005-2010 when running with legacy/MBR boot mechanisms?

Establishing a trust boundary as early as possible to force possible attackers into userspace as much as possible (where it can be more easily removed and remediated) is significantly important in modern operating system security--and this goes for any platform: MacOS, Windows, Android, iOS, or Linux.

Apple, Google, and Microsoft have some form of integrity control over their platforms along with dedicated security chips. Short of some exploits, the most common vector to get into Windows' early boot process is to steal or abuse code IHV kernel driver signing certificates; or in some cases, be maliciously issued one from Microsoft (lol, now THAT is indeed a problem, but a tough one).

This is just part of modern platform security at this point so I don't really see the issue.

In addition, TPM2 offers significantly more storage and
by idopmstuff | 2026-01-29 16:28:31+00:00
I find takes like this very strange. Whether or not it gives the correct information, it's clearly not designed to give false information to factual queries.

The design of it is based on the intention of the people creating it, not the actual outcome, and it's pretty clear from all available information, plus a general understanding of incentives, that it's designed to be as accurate as possible, even if it does make errors.
by mikepurvis | 2026-01-29 16:28:33+00:00
The original copyright laws date from the 1700s; at the time the only thing being protected was text: stories, essays, reference volumes, etc. Basically, stuff for which there was no "source code" to conceal, the whole thing was right there on the page.

It's only been in the 20th century that we're increasingly seen classes of copyrightable works for which the source code dwarfs the final released product.

To make matters even worse, the commercial interest in copyright doesn't care about any of this, because pirates only duplicate and distribute the end product anyway. So it's only the creative side wanting to remix and extend that is shut out by all of this.
by adamos486 | 2026-01-29 16:28:39+00:00
I built this because I was mass copy-pasting skills between Claude Code, Cursor, and Codex. Every agent has its own skills directory, its own format, and no way to sync them.

Skulto:
- Installs via symlinks — one source of truth, updates propagate instantly
- Security scanner with 35+ patterns (prompt injection, jailbreaks, data exfil)
- Offline-first after initial sync, pure-Go binary (no CGO, no libsqlite3)
- MCP server so Claude Code can search/install skills without leaving the terminal

The scanner isn't grep-for-bad-words.

200+ curated skills indexed. Supports Claude Code, Cursor, Windsurf, Copilot, Codex, and 25+ others.

Install: brew install asteroid-belt/tap/skulto

Happy to answer questions about the architecture or the security patterns.
by pixl97 | 2026-01-29 16:28:50+00:00
That may or may not work depending on where you're at.

If for example you have poor compliance with the law then the law is mostly useless (in the US you do have to update your ID in 30 days, but huge numbers of people dont).

And that doesn't count if your country has a huge undocumented population, like some places in the US do.
by craftkiller | 2026-01-29 16:29:04+00:00
> They're hard to type

I'd like to recommend rofimoji. I have it bound to a hotkey, so whenever I want to type an emoji, I just hit that hotkey and then a window pops up with my most recent emoji already visible at the top. Then I start typing in words that describe the emoji that I want like "crying" and it filters the list. Finally I select one and it pastes it into whatever text box I had selected before I hit the hotkey. My only complaint is I wish it worked for all unicode codepoints instead of just the emoji.
by zahlman | 2026-01-29 16:29:19+00:00
> More reports, ones that quoted more than just police officers, came a few days later. The New York Times headlined its story about it “Video of Officer’s Collapse After Handling Powder Draws Skepticism.” NBC News’ report was “Viral video on San Diego deputy's fentanyl exposure raises questions.” “You can't just touch fentanyl and overdose,” Marino, the #WTFentanyl doc, told NBC News. “It doesn’t just get into the air and make people overdose.” Leo Beletsky, a Temple law graduate with a masters in public health, told the Times “it is not biologically possible” to overdose on fentanyl from touching or being exposed to the drug. (He’s much more of a credit to the institution than Dr. Munch.) Still, despite the outlets’ reporting and citations from the National Judicial Opioid Task Force and a peer-reviewed research from the International Journal of Drug Policy, the cops aren’t said to be lying in cases like this, or even wrong. They simply have raised questions and drawn skepticism.

Given that Wikipedia lists multiple sources to confirm that fentanyl for medical use is administered transdermally, and has over 90% bioavailability through this route (and also notes that it can be absorbed by inhalation although this isn't a common deliberate route of administration), and given that it is dozens of times more potent than morphine (which has effective dosages in the single-digit milligram range); and given that we're talking about seizures of supposedly pure fentanyl, I don't see why I should take these experts' bald assertions at face value.
by Eddy_Viscosity2 | 2026-01-29 16:29:35+00:00
For me, the email interface works great. I treat it as a self-populating to-do list. The 'one thread per contact' wouldn't work because I organize by project/topic and often have multiple of these with the same contacts.

IM threads have a place of course, but regular email works for me and is actually an important structural element of my work flow.