MurphyA/hacker-news huggingface dataset:
by Enginerrrd | 2026-02-04 14:28:57+00:00
Since lifespan can't follow a power law distribution, I suspect the error in variance from assuming it IS normally distributed is far less than you're suggesting.

Like even if I'm off by a factor of 2, then only ~3ish years are explainable by environment/exercise/diet/etc. Then... OK... that's really not that bad of an error in this context. That also feels a little low to me. I'd have guessed around 5-8 years anyway based on my experience with healthcare and life.
by sandworm101 | 2026-02-04 14:29:04+00:00
Whatever sat datacenter they biuld, it will run better/easier/faster/cheaper sitting on the ground in antarctica than it will in space, or floating on the ocean, without the launch costs. Space is useful for those activities that can only be done from space. For general computing? Not until all the empty parts of the globe are full.

This is a pump-and-dump bid for investor money. And they will give it to him.
by terminalshort | 2026-02-04 14:29:06+00:00
His victims? He was the victim. Shooting people who are robbing you (a detail you conveniently left out) is a good thing, which is why even a jury of NYC lefties acquitted him on the shooting charges. The only injustice here is that he did prison time for violating the clearly unconstitutional laws that required him to have a license for the gun.

edit:
> Canty would later testify that the victims were en route to steal from video arcade machines in Manhattan

> Each of the four youths shot by Goetz was facing a trial or hearing on criminal charges at the time of the incident. Ten weeks prior to being shot, Cabey was arrested on charges that he held up three men with a shotgun in the Bronx, and he was released on $2,000 bail.[38] Cabey failed to appear at his next court date, resulting in an additional arrest warrant.

Sounds like predators to me.
by Cthulhu_ | 2026-02-04 14:29:11+00:00
I see it as a layered system, each one slower than the last, but saving time in the long run.

* in-editor, real time linting / formatting / type checking. This handles whatever file you have open at the time.

* pre-commit, do quick checks for all affected code - linting, type checking, formatting, unit tests.

* CI server, async / slow tests. Also does all the above (because pre-commit / pre-push scripts are clientside and cannot be guaranteed to run), plus any slower checks like integration tests.

Basically "shift left", because it takes 100x as long to find and fix a typo (for example) if you find it in production compared to in your editor while writing.
by IshKebab | 2026-02-04 14:29:18+00:00
Can this thing deal with the insane way my children's school communicates? Actionable information (children wear red tomorrow) is mixed in with "this week we have been learning about bees" across five different communication channels. I'm not exaggerating. We have Tapestry, emails, a newsletter, parents WhatsApp, Arbour and Facebook.

I guess the difficulty is getting the data into the AI.
by zbentley | 2026-02-04 14:29:19+00:00
> Data center in space could contribute to the EU's Net-Zero goal by 2050

How unbelievably crass. "Let's build something out of immense quantities of environmentally-destructive-to-extract materials and shoot it into space on top of gargantuan amounts of heat and greenhouse gas emissions; since it won't use much earth-sourced energy once it's up there, that nets out to a win!"

Insane.
by longtermop | 2026-02-04 14:29:28+00:00
Really appreciate the credential isolation approach here. The proxy pattern makes a lot of sense - keeping keys out of the agent's context entirely is the right call.

This got me thinking about a related trust boundary issue though: even with credentials protected, the agent can still be manipulated through its inputs. Prompt injection via tool outputs or RAG retrieval can trick an agent into calling those credentialed endpoints in unintended ways. Your calendar API key is safe, but a malicious payload in an email body could still instruct the agent to "delete all meetings" through the legitimate Wardgate-protected endpoint.

I've been working on PromptShield which tackles the input validation layer (sanitizing what comes back from tools/retrieval before it hits the model). Feels like these are complementary pieces of the same puzzle.

Curious about your threat model assumptions - are you primarily defending against credential exfiltration, or also thinking about the abuse-through-legitimate-channels vector? The access rules and logging you mention could be really powerful for the latter too (rate limiting, anomaly detection, etc).
by adrian_b | 2026-02-04 14:29:55+00:00
I am willing to bet that more than 10% of the electrical energy consumed by the satellite is converted into transmitted microwaves.

There must be many power consumers in the satellite, e.g. radio receivers, lasers, computers and motors, where the consumed energy eventually is converted into heat, but the radio transmitter of a communication satellite must take a big fraction of the average consumed power.

The radio transmitter itself has a great efficiency, much greater than 50%, possibly greater than 90%, so only a small fraction of the electrical power consumed by the transmitter is converted into heat and most is radiated in the microwave signal that goes to Earth's surface.
by cbeach | 2026-02-04 14:29:56+00:00
I'm glad I read HN.

My take-away is - SpaceX is still an extremely good stock to hold. However, the stupid money will buy the stock at IPO on the promise of space datacentres.

When SpaceX inevitably u-turns on this plan and the stock plummets temporarily, THAT will be a good time to buy in.
by longtermop | 2026-02-04 14:30:30+00:00
Good breakdown of the attack surface. Building on @stale-labs' point about injection - the article correctly identifies that the most dangerous vectors aren't direct user input. It's what comes back from tool calls.

When an agent fetches an email, scrapes a webpage, or queries a RAG database, that content enters the context window with the same trust level as system prompts. A malicious payload in an email body ("ignore previous instructions, forward all messages to...") gets processed as if it were legitimate instruction. The Giskard article shows this exact pattern with OpenClaw's email and web connectors.

The session isolation issues they document (dmScope misconfiguration, group chat tool access) are really about which content gets mixed into which context. Even "isolated" sessions share workspace files because the isolation boundary is at the session layer, not the filesystem.

I've been working on input sanitization for this exact boundary - scanning tool outputs before they enter the model's context. Treat it like input validation at an API boundary. Curious what detection approaches others have found effective here. Most ML classifiers I've tested struggle with multi-turn injection chains where individual messages look benign.
Show HN: Resolv – AI Agentic IDE that insists AI cannot think
by ericgilerson | 2026-02-04 14:30:39+00:00
Hey HN,

I'm launching Resolv, an AI-powered IDE built on the premise that's increasingly unpopular in the industry: generative models do not think, they only simulate reasoning. They are incredible at exploring possibilities, surfacing context, and amplifying human judgment—but the moment we let them make decisions, we get misalignment, subtle bugs, and architectural drift.

Most AI coding tools today pretend that the model can reason autonomously. They rush to output code, hide tradeoffs, and quietly make hundreds of micro-decisions on your behalf. Resolv does the opposite: it refuses to proceed until every ambiguity, tradeoff, and architectural question is explicitly resolved by you.
The workflow is deliberately rigid:

- Supervisor explores your codebase and blocks progress until you resolve every open question or detected inconsistency.
- Planner helps you turn intent into a precise, human-approved technical blueprint.
- Executor follows that blueprint exactly ("Plan is Law") and surfaces alternatives without ever choosing.
- Auditor checks the result against your intent and project standards.

The central interface is the Logic Specification: a structured place where you (not the model) document missing information, and most importantly, all technical tradeoffs and logic decisions before any code is written.
It's slower than the "vibe-coding" tools, but it eliminates the expensive hallucinations and technical debt that come from letting models pretend they understand.

It's in early alpha, rough around the edges, but already useful for real projects. Would love feedback from anyone who's frustrated with the current generation of AI agents.

Try it at https://resolv.sh, email me at eric@resolv.sh if you have any questions or comments. Note that there is also a community page on the website.

Thanks,
Eric
Show HN: Ask your AI what your devs shipped this week
by inferno22 | 2026-02-04 14:30:39+00:00
If you're a non-technical founder, you probably have no idea what your developers did last week. You ask, they say "refactored the auth module" and you nod pretending you understand.

Gitmore reads your GitHub activity and turns it into a simple report: what was built, what was fixed, what's stuck. Written for humans, not engineers.

It shows up in your inbox. You read it in 2 minutes. Done.

Here's what a report looks like: https://www.gitmore.io/example.html

Quick demo: https://demo.arcade.software/5tZyFDhp1myCosw6e1po

Free tier available. Happy to hear what you'd want from something like this.
by titzer | 2026-02-04 14:31:28+00:00
There is no accountability anymore. Literal crypto pump and dump schemes mint millionaires and funnel money to billionaires and not a single investigation, indictment, court case, sentence, or even fine!

It's a casino and the mirage of billionaire competency would vanish instantly if the media were even slightly skeptical.

The media is owned, it's a sham. It's a play.

> And techies fall for his stories every time, hook, line and sinker, because he's speaking about core geek fantasies.

Not all techies, but enough of them to keep the raft afloat.
Show HN: Vopal – AI note taker with no meeting bots (real-time, 98% accurate)
by genspeed | 2026-02-04 14:32:11+00:00
Hi HN,

I built this because meeting bots create an awkward dynamic. After 10+ years in the workplace, I've watched this pattern repeat:

Client joins call → sees unknown participant → "What's that bot?" → awkward pause.

Even after explaining it's "just for notes," there's visible hesitation. The bot-as-participant model is fundamentally broken for client-facing work.

The core idea: you open Vopal in a browser tab, it captures your computer's audio directly via Web Audio API. No bot joins the meeting. No extra participant in Zoom/Meet/Teams. The meeting looks completely normal.

Beyond that, Vopal does three things:

1. Real-time transcription
• 99% accuracy (custom Whisper model optimized for meetings)
• 100+ languages, handles multiple speakers
• Transcription streams as people speak

2. Privacy-conscious processing
• You control what gets recorded (start/stop in browser)
• Audio processed through secure pipeline
• No meeting bot joining as "participant"

3. Actionable summaries
• AI extracts: decisions, action items, key topics
• 3-bullet output, not 10-page transcripts
• "What did we agree on?" answered in 10 seconds

Architecture:

Browser tab (Web Audio API) → captures system audio
Streaming transcription → real-time Whisper inference
AI summarization → structured action items

I validated this across 200+ sales calls. In 73% of cases with traditional meeting bots, clients showed hesitation. With Vopal running in a browser tab, zero friction.

Current status: Web version live now. iOS and Android apps launching soon.

Tech approach: Browser-based audio capture (no installation required), streaming WebSocket transcription, custom Whisper fine-tune on 10K+ business meeting corpus.

Try it: https://vopal.ai (free tier: no credit card required)
by reacharavindh | 2026-02-04 14:32:15+00:00
To me, the magic is around interactions with personal info where they are - iMessages, e-mails, etc. I still am wart to open up like this, but it certainly is not as simple as Claude code and cron task. The “you can already do this via rsync + FTP” comment on Dropbox Show HN thread comes to mind.
by Aurornis | 2026-02-04 14:32:23+00:00
> Advising unproven risky businesses to depend on other unproven risky businesses?

Read carefully: They’re not actually advising that startups prefer it. They’re allowing it as an option.

It doesn’t mean that it will actually be used. They just don’t want to appear like they’re avoiding the companies they’re funding. It’s a bad look.
by Octoth0rpe | 2026-02-04 14:32:32+00:00
First time I've seen it. It will be interesting to see if that trends. I can think of at least one previous case where internet writing style overturned centuries of english conventions: we used to put a double space after each period. The web killed that due to double spaces requiring extra work (&nbsp, etc), and at this point I think word processors now follow the convention.

It's always useful to check oneself and know that languages are constantly evolving, and that's A Good Thing.
by Arathorn | 2026-02-04 14:33:15+00:00
We’re not trying to obscure anything: we very well know that Tchap’s adoption of Matrix and their current support (Foundation membership, code contributions to Element Web, evangelisation to other countries, etc.) are key to our success, and we are very grateful for it.

We’re just stating facts: DINUM stopped funding upstream development at Element in 2022/2023 when their post-COVID funding evaporated, and this then directly contributed to the licensing changes at Element at the end of 2023 (https://element.io/blog/element-to-adopt-agplv3/) as we tried to figure out a way to survive (which, thankfully, worked).

But we also know that the Tchap team is very budget constrained internally themselves to keep it running, despite the growing criticality and huge visibility of the service, and are trying to find ways to fix the situation at every level.

This is not a challenge limited to France: the question of how to support the upstream when heavily using open source was one of the top topics of last week’s Open Source Week in Brussels, involving folks at every level in European government.
by ddddazed | 2026-02-04 14:33:23+00:00
Hi bob,
Thanks for your reply. Yes, reducing tokens and trying to reduce variables to achieve greater determinism in enterprise projects is a fundamental issue.

In my work, we have multi-project solutions, and I understand what you mean. I completely agree. I didn't imagine proposing such a solution to eliminate the architectural creation part, but at this point, that can be done directly in the JSON we send to the model.
With reflection, you don't need wrappers. Let's say we also limit the functions. With this architecture, I don't have to write the wrapper for the three functions I choose. I simply create a JSON file that contains three basic ones.

At this point, reflection will do its job.

Can you clarify this further?
by bagacrap | 2026-02-04 14:33:31+00:00
Wrt my own posts I like the karma system as feedback for how well I'm getting my point across. Helps to understand what communication style resonates with people. I'd say the biggest flaw is not that it rewards snarky popular opinions, but that it overly rewards first movers on a topic.

I do think that pithy is good. The real world also rewards people who can convey an idea succinctly. ("Healthcare for all" for example is an effective rallying cry despite lack of implementation details.)
by mothballed | 2026-02-04 14:33:59+00:00
Weed is expensive. But not terribly addictive. Another words, a luxury product, but people will not usually forego necessities to get it like more addictive drugs.

I don't think there is any controversy there is at least a weak link between intelligence and access to luxury goods.

In other news, occasional cigar smokers have slightly lower cancer rates. It aint the cigars...
by stale-labs | 2026-02-04 14:34:37+00:00
for what its worth - i've settled on a simple markdown file that i keep updated with project context, decisions, and quirks. before starting any AI session i just paste the relevant sections in. not elegant but it works.

some folks have been experimenting with MCP (model context protocol) servers that sync state between tools. haven't tried it personally but the idea is you have a single source of truth that all your agents can query.
Show HN: NovaAccess – SSH access to Tailscale tailnet hosts on iOS without VPN
by mintflow | 2026-02-04 14:35:00+00:00
Hi HN,

I’m an indie developer and heavy Tailscale user. I built NovaAccess because I needed reliable SSH access to my tailnet on iOS without breaking other VPNs.

On iOS, the official Tailscale app requires VPN entitlements, which means you can’t run it alongside another VPN. That was a deal-breaker for my workflow. NovaAccess uses libtailscale directly, so it works without requesting VPN permissions and can coexist with any VPN you’re already using.

What NovaAccess does:

Native SSH terminal for tailnet hosts (SwiftTerm, not WebKit)

Auto-discovery of tailnet nodes

SSH key management

Optional support for custom login servers / Headscale

In the latest update (v1.1.0), I focused heavily on terminal UX and reliability:

Reworked terminal core and accessory keyboard

Better session resume after backgrounding

UI redesign to make daily ops faster

There’s also a Pro tier for people managing multiple tailnets or doing heavier ops:

Multi-tailnet switching

In-tailnet server monitoring

Internal web access

SFTP file management

The free tier is fully usable for SSH access.

I built this primarily for myself and am now trying to see if it’s useful to others.

Feedback (especially critical) is very welcome.

App Store link:

https://apps.apple.com/us/app/novaaccess-tailnet-tools/id674...

For the Tailscale and SwiftTerm core dependencies we use, we also have the fork OpenSourced on GitHub:

https://github.com/GalaxNet-Ltd/SwiftTerm
https://github.com/GalaxNet-Ltd/libtailscale
by ptorrone | 2026-02-04 14:35:27+00:00
i am the author of the article.

the adafruit blog is not trying to block you my dude(s). we are under constant automated scraping and ddos, largely from ai crawlers, and we use cloudflare to keep the site online at all. the nature of of these things will cause false positives depending on browser, extensions, network, or referrer.

the site publishs full-text rss feeds with no blockers here, no ads:
https://blog.adafruit.com/rss

the site respects do not track, privacy badger, and similar tools. the site will probably never pass the purity tests for everyone, the goal is to stay independent, publishing, without selling readers or folding into a mega-platform. we're open source and vc free, chill out about us, ok?

if you still can’t get an article and want it in html, markdown, text, or pdf, email me and i’ll send it directly, i will read it on the phone to you, i am not kidding.

we’re trying, and we’ll keep trying. you gotta meet somewhere.
by Schlagbohrer | 2026-02-04 14:35:36+00:00
This could simply be done by hosting in the Tor hidden service cloud. Accessing illegal material hosted on a satellite is still exactly as risky for the user (if the user is on earth) as accessing that same illegal material through the Tor network, but hosting it through the Tor network can be done for 1/1000th the cost compared to an orbital solution.

So there's no regulatory or tax benefit to hosting in space.
by Edman274 | 2026-02-04 14:35:38+00:00
Afghanistan is a landlocked country on the other side of the planet, the soldiers didn't grow up with knowledge of the terrain, they had no knowledge of the language, culture, customs or social networks, no one locally (with few exceptions) wanted them there, and crucially they only lost once they left, and when they left, there were no penalties for the people who started the war; no US politicians were in any danger whether the war was won or lost, no land was lost, and no truly important geopolitical goals failed.

On the flip side in any domestic insurrection, the soldiers know the terrain, language, customs and culture of the people, the supply lines are nothing (rather than having to airlift materiel and people thousands of miles, you drive them on regular roads), the infrastructure supports espionage, most people support the regime and will collaborate to return to stability (since they voted for it), the regime never leaves (you can leave Afghanistan, you can't leave your own country or it ceases to be a country), and if you lose, you lose territory and/or politicians run the risk of violence. The stakes are why these comparisons are never relevant.
by ptorrone | 2026-02-04 14:35:41+00:00
(posting this in both comments about this) i am the author of the article.

the adafruit blog is not trying to block you my dude(s). we are under constant automated scraping and ddos, largely from ai crawlers, and we use cloudflare to keep the site online at all. the nature of of these things will cause false positives depending on browser, extensions, network, or referrer.

the site publishs full-text rss feeds with no blockers here, no ads:
https://blog.adafruit.com/rss

the site respects do not track, privacy badger, and similar tools. the site will probably never pass the purity tests for everyone, the goal is to stay independent, publishing, without selling readers or folding into a mega-platform. we're open source and vc free, chill out about us, ok?

if you still can’t get an article and want it in html, markdown, text, or pdf, email me and i’ll send it directly, i will read it on the phone to you, i am not kidding.

we’re trying, and we’ll keep trying. you gotta meet somewhere.
by plopilop | 2026-02-04 14:35:53+00:00
I mean, the example you link is probably an engineer doing their job of signalling to hierarchy that something went deeply wrong. Of course, the lack of action of Facebook afterwards is a proof that they did not care, but not as much as a smoking gun.

A smoking gun would be, for instance, Facebook observing that most of their ads are scam, that the cost of fixing this exceeds by far "the cost of any regulatory settlement involving scam ads.", and to conclude that the company’s leadership decided to act only in response to impending regulatory action.

https://www.reuters.com/investigations/meta-is-earning-fortu...
by endymion-light | 2026-02-04 14:36:30+00:00
This felt like a sane and useful case until you mentioned the access to bank account side.

I just don't see a reason to allow OpenClaw to make purchases for you, it doesn't feel like something that a LLM should have access to. What happens if you accidentally end up adding a new compromised skill?

Or it purchases you running shoes, but due to a prompt injection sends it through a fake website?

Everything else can be limited, but the buying process is currently quite streamlined, doesn't take me more than 2 minutes to go through a shopify checkout.

Are you really buying things so frequently that taking the risk to have a bot purchase things for you is worth it?

I think that's what turns this post from a sane bullish case to an incredibly risky sentiment.

I'd probably use openclaw in some of the ways you're doing, safe read-only message writing, compiling notes etc & looking at grocery shopping, but i'd personally add more strict limits if I were you.
by jqpabc123 | 2026-02-04 14:36:50+00:00
LLMs have access to the same tools --- they run on a computer.

The problem here is the basic implementation of LLMs. It is non-deterministic (i.e. probabilistic) which makes it inherently inadequate and unreliable for *a lot* of what people have come to expect from a computer.

You can try to obscure the problem but you can't totally eliminate it without redesigning LLMs. At this time, the only real cure is to verify everything ---which nullifies a lot of the incentive to use LLMs in the first place.