MurphyA/hacker-news huggingface dataset:
by mrguyorama | 2026-02-24 20:25:29+00:00
> Do these people not come first?

Not to republicans who have repeatedly voted down measures to take care of people getting straight up cancer from abysmal practices during the middle east wars that they started.

Those same republicans also voted down support for the aid workers of 9/11 dealing with absurd health issues from all the dust.

Literal heros and innocent victims, but republicans don't want to spend pennies on them.
by layer8 | 2026-02-24 20:25:47+00:00
Not a problem for XML per se (you can work with byte positions, and with fixed-size blocks to avoid resizing/relocation), but in the case of KDBX there is the issue that it is encrypted as a whole. Not encrypting as a whole, on the other hand, risks leaking more information about the contents, like you can see which parts/how much changed between one update and the next.
by tadfisher | 2026-02-24 20:25:53+00:00
Correction: nothing prevents the attacker from using the app's legit package ID other than requiring the uninstall of the existing app.

The spoofed app can't request passkeys for the legit app because the legit app's domain is associated with the legit app's signing key fingerprint via .well-known/assetlinks.json, and the CredentialManager service checks that association.
by foxglacier | 2026-02-24 20:25:54+00:00
Gated communities don't count because residents have to be wealthy enough to buy their way in, so they're populated by a non-violent-criminally-biased sample of the general population. Some countries might count as gated communities if they're heavily populated by 1st generation immigrants who had to be wealthy to get in, otherwise no, they're just full of whatever random people were born there or moved there without any selection pressure against crime.
by haimau | 2026-02-24 20:26:31+00:00
Been driving my agents (CC, currently testing Pi) for a couple of weeks via Emdash. Finally, got a productive worktree setup working. There were still rough edges when I started, but the team has shipping fast [0] and is vaporizing concerns on the fly. Building on top of the native CLI seems to be the right strategy as well.

[0] https://github.com/generalaction/emdash/releases/
by WarmWash | 2026-02-24 20:26:36+00:00
The judge told Google that Apple is not anti-competitive because Apple has no competitors on it's platform (this all stemming from the Epic lawsuits).

Google listened.

Blame the judge for one of the worst legal calls in recent history. Google is a monopoly and Apple is not. Simple fix for Google...

Same comment I made a few days ago, I feel it bears repeating as much as possible until it's really driven home how detrimental and uninformed that decision was.
by rvnx | 2026-02-24 20:26:39+00:00
If you are curious, the number #1 beneficiary of USAID is Ukraine, by far, and just behind #2 is Israel.

Sounds more like foreign influence than actual survival help. Maybe USAID even funded wars, and caused more death and chaos, who knows. Difficult to predict what's next. Perhaps it will be good because countries will adapt and shine, instead of having local dictators surviving on these aids, etc.

Also, there is a thing about people depending on you:

I am feeding birds during winter, so at some point they depend on my food. Should have I had started feeding them at all or not ?

If I didn't feed them, technically less birds would have died because they would never had a chance to live...
by thaumasiotes | 2026-02-24 20:27:10+00:00
> I'm also rather sceptical of things that "sanitise" HTML, both because there's a long history of them having holes, and because it's not immediately clear what that means, and what exactly is considered "safe".

What is safe depends on where the sanitized HTML is going, on what you're doing with it.

It isn't possible to "sanitize HTML" after collecting it so that, when you use it in the future, it will be safe. "Safe" is defined by the use.

But it is possible to sanitize it before using it, when you know what the use will be.
by benjifisher | 2026-02-24 20:27:24+00:00
I'm Ben — I built UCP Playground (https://ucpplayground.com), the testing tool mentioned in the post. I can confirm the Saturday night debugging session. We were chatting while patching things live on both sides for hours.

A few things I can add from the Playground side:

On schema quality > model capability: This is the biggest takeaway from 180+ sessions across 11 models. We have a leaderboard tracking completion rates per model, and the variance between stores is larger than the variance between models. A clean store schema makes even weaker models succeed. A messy schema makes even Claude and GPT fail. The store is the bottleneck, not the LLM.

On variant resolution: The agents that skip get_product_details and try to cart directly almost always fail. They guess variant IDs from search results, hit type errors, and drop off. Llama 3.3 70B's higher success rate comes down to it reliably calling the details endpoint first — it follows the tool sequence more faithfully than models that try to shortcut.

On the three transports: UCP Playground tests MCP, REST, and ECP (embedded checkout via iframe). The REST fallback turned out to be critical — MCP connections to WooCommerce stores can be flaky (OOM on unbounded queries, rate limits), so the agent silently falls back to REST for that tool call and continues. Without that, a lot of sessions would just die at search.

On store instructions: One thing we surface in Playground that merchants don't always realize — stores can inject response_instructions into MCP tool responses. These are behavioral prompts that tell the agent how to present products. We extract and display them per tool call. It's worth auditing what your store is telling agents to do.

If anyone wants to see what a real agent session looks like, Playground lets you share replays as public links. Happy to answer questions about the testing/observability side.
by sebastos | 2026-02-24 20:27:33+00:00
Before you can learn how far away an object is, you must decide: which laser return corresponds to which object? In fact, what counts as an object? Where does a tree stop and become a fallen tree branch? Is that object moving towards me? Is the apparent velocity of this point represent the fact that the object is moving, or that it's rotating, or that it's flexing, or dividing, or all 4? Is that object moving towards me but that's ok because it's a car that's going to stay in its lane? What's a lane? What's my laser return for where the lane is? Should I stop at this intersection? What's my laser return for whether the light is red? Am I in the blind spot of the car in front of me? Is he about to shift into my lane because he doesn't see me? What laser return do I get to tell me whether his indicator is on?

The problem of understanding what is happening in front of you while driving is preposterously more complicated than just a point cloud of distances. That is .01% of the problem. To solve the remaining 99.99%, you need interpretation of photons and sound waves into a semantic understanding that gives you predictive power to guess how the physical world will evolve and avoid breaking the rules of the road. Show me a mechanized way of understanding the causes of how the physical structure of the world is about to evolve, and I'll show you something that is imitating a human brain, however poorly. The cameras give you _plenty_ of data to determine 3D structure, at a higher resolution than the laser, without being emissive, for cheaper. It's a completely reasonable approach to focus your limited computational hardware on interpreting the data you have instead of adding more modalities with their own limitations that (according to nature) are demonstrably unnecessary.

The world is more complicated than slogans and pitchforks and Elon Bad.
by mrtesthah | 2026-02-24 20:27:51+00:00
The best way defeat MAGA is to fracture their coalition, which requires understanding its various constituencies. The “MAGA Hardliners” at the forefront of this fascist movement are only 29% of his support:

https://www.theatlantic.com/politics/2026/01/trump-roles-sup...

Currently, his approval rating is hovering in the mid to high 30s, which tracks.

We should spend our energy on the people who can be convinced; don’t get discouraged by thinking they’re all the same.
by hhh | 2026-02-24 20:27:59+00:00
Yes. Auto manufacturers tend to have contracts with different tiered automotive suppliers that have heavy-hitting production lines for current vehicles, and also maintain a 'service' department where these style of products are produced. The tools for producing these parts have really good lifetimes, and you can take the tooling and put it into whatever mold machine you have written the program for, or set it up for another machine.

In my experience service departments are basically a large warehouse with a small set of assembly machines running at any given time where you are setting up time to produce some random part for a day or two and then change to something else, whereas the real production assembly lines are designed to produce as many of X part for the latest car as possible.

Several of the old mold machines where I worked that made parts for this service business ran DOS, with PCMCIA cards to load programs. I helped a process engineer get these PCMCIA cards working on his contraband laptop running win98 (obviously banned from the network) because we could never get them working with anything newer. This was in like 2021.
by wps | 2026-02-24 20:28:20+00:00
Exporting to a relational db is beside the point. You can very easily just export a CSV file and double click it in DB Browser and have something working. Or you could export the XML document and write a quick importer for it. But genuinely what benefit does it provide other than allowing me to hack at my unencrypted db with sql statements? All the benefits that I was referring to are for daily usage of a KeePass client, not for a one off export.
by belviewreview | 2026-02-24 20:28:26+00:00
Am I correct in assuming that you believe, as Trump puts it, that global climate change is a hoax invented by the Chinese to ruin the American economy? And that we should stay on fossil fuels forever?

Or if I am wrong about you, then tell us what you yourself actually believe. What do you specifically believe about global climate change? And what specifically should we be doing about energy? And also, what do you think about Trump's claim that wind turbines cause cancer, and his claim that China has no wind turbines?

I strongly suspect that you won't answer these questions, or you will do so but in a vague, evasive manner. But perhaps I am wrong about this.
by orbital-decay | 2026-02-24 20:28:26+00:00
Relying on self-reported names is a pretty bad idea. Name training is always shallow. Sonnet 3.6 used to call itself GPT-3 (not even 3.5) with some irrelevant distractors in the context, and they clearly didn't train it on GPT-3 outputs. It's just dataset contamination.
by Y-bar | 2026-02-24 20:29:02+00:00
Dang, I'm writing this reply as a target of antisemitic hate. I am not strictly a Jew (though I am often mistaken for one due to both name and appearance). My relatives were hunted and gassed in WW2.

The poster you are responding to is making ha joke:ish observation (probably badly communicated) that the modus operandi in the Israeli Government is to label all evidence of their crimes "antisemitic" no matter how truthful they are, no matter how many facts, no matter how vile their actions look.

Netanyahu et al have nurtured a context where there is no difference between real antisemitic hate and valid criticism. He and the people like him equate truth to antisemitism. Something which hurts many of us.

Please understand this.
by deborahjacob | 2026-02-24 20:29:09+00:00
Hi HN, I’m the technical founder of botanu (www.botanu.ai)

I started building this after repeatedly hitting the same problem on AI teams: we could see total LLM spend, but couldn’t answer “what did one successful outcome actually cost?”. In real systems, a single business event often requires multiple runs ex-retries, fallbacks, escalations, async workers etc., before it reaches a final outcome. Most tooling tracks individual calls, or at best single runs. That hides the true cost. botanu treats cost per outcome as the sum of all runs and attempts for an event, including failures.

How it works
-An event represents business intent

-Each attempt is a run, with its own run_id

-All runs are linked via a shared event_id

-A single outcome (success / failure / partial) is emitted for the event

-Total cost = cost of all runs for that event

-Run context propagates across services using standard W3C Baggage (OpenTelemetry).

I’m building this as part of a broader effort around outcome-based pricing for AI systems and understanding true cost per outcome. If you’re thinking about similar problems, I’d love to chat and compare notes.
Happy to answer technical questions or get critical feedback. Email- deborah@botanu.ai
Show HN: Duck – A Django-compatible framework with native HTTP/2 and Live HTML
by digreatbrian | 2026-02-24 20:29:35+00:00
I’ve been working on Duck, a Python web framework designed to modernize the development experience without throwing away what we love about Django.
For years, the standard path for real-time Python apps has been Django + Channels + Redis + daphne + Nginx. It works, but the overhead is immense. Duck aims to simplify this by making high-performance features "native" rather than "add-ons."

Key Features:

- Native HTTP/2 & HTTPS: No need for a reverse proxy just to get modern protocol support; Duck handles multiplexing out of the box.

- Lively Components: Think Phoenix LiveView but for Python. Build reactive, stateful UIs that update over WebSockets without writing a single line of JavaScript.

- Django Compatibility: You can keep your existing Django models and logic. Duck acts as a high-performance transport layer.

- Zero-Dependency Automation: A built-in task system that replaces Cron/Celery for 90% of use cases.

- Real-time Observability: A built-in terminal monitor (duck monitor) to watch your app's hardware impact in real-time.

Why build this?

I love the Python ecosystem, but I felt we were falling behind frameworks like Elixir’s Phoenix or Go’s Fiber in terms of "out-of-the-box" performance and developer velocity. Duck is my attempt to bridge that gap.

Docs: https://docs.duckframework.xyz
GitHub: github.com/duckframework/duck

I’d love to hear your thoughts on the architecture, especially regarding the Lively component implementation!
by mikey_p | 2026-02-24 20:30:03+00:00
Or the Victoria Hall disaster (183 dead), or Cocoanut Grove (492 dead), or The Station Nightclub (100 dead), or The Beverly Hills Supper Club (165 dead), or.....

Also in what world is a badge reader going to contain an armed gunman unless the walls, floors, doors, and windows are also bulletproof??

(Triangle shirtwaist fire resulted in 146 dead)
by HerbManic | 2026-02-24 20:30:12+00:00
I suspect you may be right. My guess is that Telsa will be bought out by SpaceX so they can cover up loses from various parts of the company, namely X and xAI.

Like security backed bonds but on a company scale.

With SpaceX having loads of government contracts, they become more immune to failure via odds of a bailout.
by skydhash | 2026-02-24 20:30:22+00:00
> I think the cost and work remains the same. What has change is efficiency. Previously people had to manually program byte after byte. Then came C and streamlined it, allowing faster development.

I think you got your history wrong. People didn’t program bit by bit. They programmed on paper (flowcharts, pseudo-code, diagrams,…), then encoded that afterwards. There was a lot of programming languages before C like Lisp and APL (which are high-level, btw). Why would they waste precious computer time, when you could plan out procedures on a notepad or a whiteboard.
by latexr | 2026-02-24 20:30:27+00:00
> Based on the comments I see here, I think the focus is going on the turnstiles just as it did when I worked there.

You titled the piece after the turnstiles and spent the overwhelming majority of the post talking about them (and surrounding physical features). The Jira ticket felt secondary, and when it was introduced in the middle of the post I was genuinely confused, thinking why the heck the card system was contacting Jira.

People reading your writing are going to focus on whatever you did when you wrote it. The turnstiles read like the important part.
by kodebach | 2026-02-24 20:30:28+00:00
My guess is that Android 17 will show the registered name of the developer of the app you're trying to install. With stolen IDs you can only get accounts for individual developers not for organisations.

When a scammer pretending to be your bank tells you to install an app for verification and it says "This app was created by John Smith" even grandma will get suspicious and ask why it doesn't show the bank's name.
by cultofmetatron | 2026-02-24 20:30:33+00:00
> too many focus on SBCL + Emacs and then complain about Lisp tooling.

well yea, lispworks and allegro are expensive commercial projects. I wish sbcl, the defacto best open source option had better tooling. emacs is great and all for the true believers but I'm an unwashed vscode user. For plenty of reasons I can't justify it in my startup but I'd love to spend more time working with common lisp for personal projects but my time is limited so I prefer clojure or rust.
by arjie | 2026-02-24 20:30:39+00:00
If I'm being honest, I suspect this

> Disproportionate impact on marginalized communities and controversial but legal applications

applies more to the elderly in third-world countries who are constantly scammed through fraudulent side-loaded apps than it does to hackers who want to install whatever software they want but do not want to use a non-Google AOSP distribution.
by londons_explore | 2026-02-24 20:30:56+00:00
Also, almost any web product could have the core functionality reproduced by 3 guys in a couple of weeks.

The actual value is in the brand, siloed data, lockin, network effect, etc.

China solved that by banning most western services and building their own, and many of the results are better than the west, yet the same network effects stop those services expanding.

These are all fairly strong arguments for regulator's to step in because the market clearly is no longer working to direct the profit towards the best products.
by snowhale | 2026-02-24 20:31:02+00:00
yeah Tailscale + mosh is the obvious answer for most people. but WebRTC has one specific win: corporate networks that block all VPN/UDP traffic. mosh needs UDP, Tailscale needs its relay port at minimum. WebRTC's TURN fallback is pure HTTPS port 443 -- you literally can't block it without breaking the web. so if your target user is 'I need to SSH into my Mac from a locked-down enterprise wifi', WebRTC is actually the right call.
Show HN: ProdRescue AI – Turn Slack war-rooms and raw logs into incident reports
by devrimozcay | 2026-02-24 20:31:24+00:00
Hi HN,

Most of us have been there: It’s 3 AM, there’s an outage, and the #incident channel is exploding with 200+ messages. Once the fix is deployed, the real pain begins—spending 4 hours reconstructing the timeline for the post-mortem.

I built ProdRescue AI to automate this. It’s an incident intelligence engine that correlates technical logs with human context from Slack.

How it works:

Native Slack Integration: Connect via OAuth 2.0. We only access channels you explicitly invite the bot to.

Contextual Correlation: It maps Slack timestamps to log events, identifying not just what failed, but who made which decision and why.

4-Layer Intelligence: We use a pipeline to Sanitize (mask PII), Correlate (logs + chat), Infer (RCA), and Verify (link every claim to a source log line).

Security: We use ephemeral processing. No log retention, no training on your data.

I’m really interested in your thoughts on the "Evidence-Backed" approach. Instead of just generating a narrative, we link every finding to a specific evidence tag ([1], [2], etc.) to eliminate AI hallucinations.

Check it out here: https://prodrescueai.com

Would love to hear your feedback on the Slack-to-Timeline flow!
by umairnadeem123 | 2026-02-24 20:31:53+00:00
the standardization angle is interesting but the real value is in skills that bundle executable scripts alongside the markdown. pure instruction-based skills are fragile because the agent has to interpret intent each time. when the skill includes a concrete shell script or python tool the agent just needs to know when to call it and what args to pass - way more deterministic.

we settled on a pattern where the SKILL.md mostly just describes the interface to a script in the same folder. the agent rarely drifts when it has a concrete tool to invoke vs trying to follow multi-step prose instructions.
by reducesuffering | 2026-02-24 20:32:03+00:00
How many yearly events are drawing tens of thousands in cities? About 15% of the US runs regularly per stats, cardio is even more because cycling is also huge.

Of course cardio is unpleasant to most people, 73% of the US is overweight or obese. I'm saying for healthy individuals with a small modicum of fitness (like their bodies were evolutionarily designed to do, we are the animal kingdom's top long distance runner after all), cardio is generally enjoyable.
by trinsic2 | 2026-02-24 20:32:10+00:00
Actually It woke people up to the fact that there is clearly bad things going on. The people that take the politically correct standpoint have a lot to learn. Talking about things that are going wrong in society is important. If you don't like that, go live on an island somewhere where you can cut yourself off from humanity.

Discourse is good for society, unless you think that society shouldn't exist, or freedom shouldn't exist...
by kaliszad | 2026-02-24 20:33:38+00:00
If you brush for 2 minutes I can guarantee you have not cleaned your teeth properly if you have 28-32 of them, use interdental brushes (TePe, Curaprox)/ superfloss and a regular tooth brush.

If you are worried about brushing off your enamel, you should get correct tooth brushes, not use abrasive tooth pastes, not brush immediately after drinking acids as another commenter has written. Some people have soft enamel but effect of some medication/ sickness/ malnutrition during childhood but that is relatively rare. If in doubt, consult dental hygiene specialist or a dentist.

Source: My wife is an established dental hygienist keeping up with the newest approaches, going to advanced courses/ master classes, visiting conferences.
by crazygringo | 2026-02-24 20:33:39+00:00
> Life is not safe, nor can it be made safe without taking away freedom.

So... no food and safety regulations, because life is not safe, and people should have the freedom to poison food with cheaper, lethal ingredients because their freedom matters more?

You're right that things can't be made more safe without taking away the freedom to harm people. Which is why even the most freedom-loving countries on earth strike a balance. They actually have tons and tons of safety regulations that save tons and tons of lives, even you from your point of view that means not "treating people as adults". You have to wear a seatbelt, even if you feel like you're not being treated like an adult. Because it's also not just your own life you're putting at risk, but your passengers' as well.

You're taking the most extreme libertarian stance possible. Thank goodness that's an extremely minority view, and that the vast, vast majority of voters do actually think safety is important.
by WarmWash | 2026-02-24 20:33:42+00:00
Optimus is a longer horizon promise that allows Elon to keep kicking the "can of untold profits" down the road. Tesla car hype has fizzled, robotaxi is currently fizzling, so the new promise is optimus. Elon sells dreams and visions, not really products.

Tesla absolutely cannot keep it's valuation without a promise for it's delusional stock holders or actual massive revenue streams.