MurphyA/hacker-news huggingface dataset:
by davej | 2026-02-01 21:30:34+00:00
I had a housemate in college who used to party until all hours, bring people back at 3AM and put on loud music. Even during exam season. I tried talking to her a couple of times but she would roll her eyes and say "sure". Never stopped though.

One evening my girlfriend was using a hair straightener in my bedroom, it tripped the central fuse and turned off the electricity. I told my GF that I would buy her a new hair straightener because this one isn't safe.

Now every time my housemate started blaring music at 3AM then I just needed to plug in the hair straightener. It only took 3 or 4 attempts for me to Pavlov my housemate into not playing loud music at 3am. :-)
by 2ICofafireteam | 2026-02-01 21:30:36+00:00
Something I've seen with renovations is construction companies not understanding how to attenuate sound, and not bothering to learn or, even better, consult someone who knows.

Well meaning PMs read up on products and throw them at the problem and it's treated as a great success because there are no hard targets, just a general desire to reduce noise, and that happened.
by overgard | 2026-02-01 21:31:10+00:00
Unfortunately I think I cleaned up the code before committing it, so I don't have an exact example! I did actually read that usage page though after looking at those tests, and that helped me in fixing the tests (maybe in retrospect I should have pointed the AI at the docs page first).

I think the main issue I was having with it was reusing the store object instead of creating a new one for each test. The other issue I was seeing was that it was creating mock objects and API's for things that weren't even being tested (lot of scope creep), and one of those API's was basically copy-pasted between two files (code duplication). It was also just testing things that weren't really necessary (ie, testing Redux itself, instead of my usage of it).

Another issue was just taking a complex approach to fixing something that could be more easily solved. For instance, I had debug: true turned on for redux-undo so I was seeing some unnecessary log messages in the test. Codex identified this, and asked if I wanted to disable them, so I said yes. What it did though, was instead of setting debug: false, or disabling it on tests, it patched console.log to look for redux-undo prefixes. Technically worked, but kind of byzantine!

None of this was a terrible disaster or anything, especially since I started pretty small, but I think what made me miss some of the issues at first glance is this is my first usage of Redux in a non-toy project so while I understand the fundamentals fine, it was easy to sneak working-but-bad stuff past me until I sat down with the code to write a test on my own and started to see the issues.
by oaiey | 2026-02-01 21:31:12+00:00
Hmmm. I have a different take there: when you are young and wild, you achieve stuff because you think later and instantly produce code. When you turn older, you do it the other way leading to your example.

In the early 2000s I have been in a startup and we delivered rapidly in C# as we did in PHP. We just coded the shit.
by nephihaha | 2026-02-01 21:31:25+00:00
I've seen those years ago, long before this Epstein business emerged. While I believe Musk does have a substantial legitimate fanbase, I've seen YouTube channels which are full of dozens of bot-type sycophantic comments about him. Some of them seem to think he is the most brilliant man who ever lived. Personally I think he is a very rich man who can pay others to do his R&D while he takes the credit for it.
by TallSession9532 | 2026-02-01 21:32:20+00:00
Hey HN,

I built this after trying to automate short-form video creation for TikTok. I wanted to share interesting Reddit stories, but I did not want to be on camera and I really did not want to spend hours editing vertical videos.

The tool takes a Reddit post URL and generates a vertical video with text overlays and TTS narration, then schedules it directly to TikTok. The hardest part was making video generation reliable enough to run fully in the cloud without manual intervention.

Tech stack:
- Frontend: Next.js
- Backend: Django
- Video generation: MoviePy + Pillow
- Text to speech: Azure Cognitive Services

Videos are rendered asynchronously and queued for publishing since render times vary a lot depending on post length and formatting.

Things I am still figuring out:
- How to keep narration sounding natural for longer posts
- How much control creators want versus full automation
- Whether scheduling is more valuable than deeper editing features

Would really appreciate feedback, especially from anyone who has built creator tools or media pipelines before.
by Lerc | 2026-02-01 21:32:57+00:00
Connections is infuriating.

Not only are they using regional specific knowledge, but they use regional relative concepts.

Many people do not agree that ant rhymes with aunt.

The recent Homophones of words meaning brutal.

Gorey, Grimm, Grizzly, Scarry.

I am guessin that Grimm is a eponym which makes it nebulous at best, eponyms take a lot of use to be regarded in objective terms rather than as invoking an arbartrary property of the name holder. Kafkaesque rises to that use. I don't think Grimm does.

I have no idea if Scarry is supposed to be a homonym for scary. Which it neither sounds like nor means brutal.

Perhaps there is another word that means brutal that sounds like however the person who makes connections thinks Scarry is pronounced.

In which case it would be a homonym of a synonym of brutal.

I also do not live in the same country as only connect, yet do not have such issues with their walls.

The real problem is that while you might be wrong about an answer, once you lose faith that the puzzle setter is right, you can never be sure if your guess is wrong or they are wrong. It is no longer a puzzle and you are playing 'what have I got in my pocket?'.
by vulnwrecker5000 | 2026-02-01 21:33:25+00:00
what worries me here is that the entire personal AI agent product category is built on the premise of “connect me to all your data + give me execution.” At that point, the question isn’t “did they patch this RCE,” it’s more about what does a secure autonomous agent deployment even look like when its main feature is broad authority over all of someone's connected data?

Is the only real answer sandboxing + zero trust + treating agents as hostile by default? Or is this category fundamentally incompatible with least privilege?

yikes
by Hermes_276 | 2026-02-01 21:33:28+00:00
Hi HN,

I’m Hermes, an 18-year-old developer from Greece. For the last few months, I’ve been building Kalynt, an AI-powered IDE focused on privacy and real-time collaboration.

*Why build this?*
I love tools like Cursor and VS Code, but I felt three things were missing:
1. *Privacy by default*: Most AI IDEs are cloud-first. I wanted something where the code never leaves the machine unless you want it to.
2. *Offline Intelligence*: Running powerful LLMs locally (via node-llama-cpp) shouldn't be a "hack"—it should be a first-class feature.
3. *P2P Collaboration*: Most "Live Share" features rely on central servers. Kalynt uses WebRTC and CRDTs to let teams sync directly and privately.

*Technical Highlights:*
- *AIME (AI Memory Engine)*: A local-first context engine designed to help run agents efficiently even on hardware like my 8GB laptop.
- *Open Core*: All safety and core logic is AGPL-3.0 and available on GitHub. Proprietary modules for advanced agentic features are kept separate but run entirely locally.
- *Serverless Sync*: Real-time collaboration powered by yjs and simple-peer.

I built this solo, mostly instructing AI models to help with implementation while I focused on the architecture and security boundaries. It’s been an intense journey of shipping 44k+ lines of code on a budget laptop, but it’s finally ready for a beta release.

I’d love to get your feedback on the architecture, the P2P implementation, or anything else.

*GitHub*: https://github.com/Hermes-Lekkas/Kalynt
*Releases (Installers)*: https://github.com/Hermes-Lekkas/Kalynt/releases

Thanks for taking a look!
by ethin | 2026-02-01 21:34:04+00:00
They are easy to avoid if you actually give a damn. Unfortunately, people who create these things don't, assuming they even know what even half of these attacks are in the first place. They just want to pump out something now now now and the mindset is "we'll figure out all the problems later, I want my cake now now now now!" Maximum velocity! Full throttle!

It's just as bad as a lot of the vibe-coders I've seen. I literally saw this vibe-coder who created an app without even knowing what they wanted to create (as in, what it would do), and the AI they were using to vibe-code literally handwrote a PE parser to load DLLs instead of using LoadLibrary or delay loading. Which, really, is the natural consequence of giving someone access to software engineering tools when they don't know the first thing about it. Is that gatekeeping of a sort? Maybe, but I'd rather have that then "anyone can write software, and oh by the way this app reimplements wcslen in Rust because the vibe-coder had no idea what they were even doing".
by nkrisc | 2026-02-01 21:34:10+00:00
No, because the noise of people just living life is not comparable to cigarette smoke. You can also use earplugs if you’re that sensitive to regular noises of people living around you. That kind of sensitivity is not normal though.

I can’t stop cigarette smoke from seeping in to everything in my home if I leave the windows open. Also, smoking is not a necessary part of life. You can’t live silently.

It’s not the same.
by dluan | 2026-02-01 21:34:12+00:00
I used to be a hardcore beatnik collector in my college days, basically gobbling up any of books, pamphlets, first editions from everyone on the bus or even mildly associated. But as I got older, I realized how much of it was really just reactionary circle jerking without much meaningful substance, save for Ferlinghetti and Ginsberg at times. The rest of it, especially Kerouac, was basically just documenting a special time and place in niche west coast history, and the real heroes I've come to recognize were the characters like Neal Cassady who's writings I also had. But it's like people today who had parasocial relationships with pre-Covid Dimes Square. Pretty weird to make Cumtown your entire personality, but those people exist. Probably some dork with 2010s hair like Mark Pincus or Dennis Crowley will buy this.
by mrandish | 2026-02-01 21:34:25+00:00
The Gary Marcus blog post drinking game. Take a drink whenever the post:

* Discusses how a new AI thing isn't really new since it's pretty much the same as an older AI thing.

* Links to where and when Gary Marcus predicted this new/old thing would happen.

* Lists ways in which new thing will be bad, ineffective or not the right thing.

Take a double shot whenever the post:

* Mentions a notable AI luminary, researcher or executive either agreeing or disagreeing with Gary Marcus by name.
by oofbey | 2026-02-01 21:34:36+00:00
Another common mistake today is to observe one LLM failing to do something in a single situation, and to generalize that observation to "LLM's are incapable of doing this thing." Or "they're not good at this kind of thing" which is what you're repeating here. This logic underlies a lot of AI skepticism. Sure you and they aren't skeptics and acknowledge this will get better. But I think you're over-indexing on a specific problem they observed. Plus to blame the LLM when they haven't optimized the system prompt is IMHO quite silly - it's kind of like "did you read the instructions you were giving it?". What I think they should say is "I tried this and it didn't work super well out of the box. I'm sure there's some way to fix it, but I haven't found it yet." Instead of blaming the model intrinsically.

In contrast, I've seen coding agents figure out extremely complex systems problems that are clearly outside of their training set - by using tools and interacting with complex environments, and reasoning and figuring it out.

Plus, "tools" can be multi-layered. You give an agent a "bash" tool, and voila, it has access to every piece of software ever written. So I don't think any of these arguments apply in the slightest to the question of de-compiling code.
Show HN: Nono – Kernel-enforced sandboxing for AI agents
by decodebytes | 2026-02-01 21:35:04+00:00
Hey HN

Luke here.

I built nono and got it out quick then I expected, in response to the openclaw carnage, but its use is beyond openclaw.

The problem: AI agents execute code on your machine. Prompt injections, hallucinations, or compromised tools can read ~/.ssh, exfiltrate credentials, or worse. Application-level sandboxes can be bypassed by the code they're sandboxing.

I have been around security for a long old time now (i started something called sigstore a few years back) and have seen this pattern so many times before.

The solution pitch: nono uses OS-level isolation that userspace can't escape:

Linux: Landlock LSM (kernel 5.13+)
macOS: Seatbelt (sandbox_init)
After sandbox + exec(), there's no syscall to expand permissions. The kernel says no.

What it does:

nono run --read ./src --allow ./output -- cargo build
nono run --profile claude-code -- claude
nono run --allow . --net-block -- npm install
nono run --secrets api_key -- ./my-agent

Filesystem: read/write/allow per directory or file
Network: block entirely (per-host filtering planned)
Secrets: loads from macOS Keychain / Linux Secret Service, injects as env vars, zeroizes after exec

Technical details:

Written in Rust. ~2k LOC. Uses the landlock crate on Linux, raw FFI to sandbox_init() on macOS. Secrets via keyring crate. All paths canonicalized at grant time to prevent symlink escapes.

Landlock ABI v4+ gives us TCP port filtering. Older kernels fall back to full network allow/deny. macOS Seatbelt profiles are generated dynamically as Scheme-like DSL strings.

Limitations:

macOS: Currently allows all reads to make executables work. Tightening in next release.
Linux: Landlock doesn't cover everything (no UDP filtering until recent kernels, no syscall filtering - that's seccomp territory)
No Windows support (yet?)

Origin:

Built this for OpenClaw (AI agent platform handling Telegram/WhatsApp messages). Needed real isolation, not "please don't read this file" isolation. Generalized it because every agent runner has this problem.

GitHub: https://github.com/lukehinds/nono
Docs: https://docs.nono.dev
Site: https://noto.sh

Apache 2.0. Would love feedback on the security model, especially from folks who've worked with Landlock or Seatbelt. Having said that, the code needs a good tidy and I am not exactly proud of it, so go easy on me!
by akersten | 2026-02-01 21:35:05+00:00
Political parties hitching their wagon to "AI good" or "AI bad" aside, I'm actually a huge fan of this sort of anti-law. Legislators have been far too eager to write laws about computers and the Internet and other things they barely understand lately. A law that puts a damper on all that might give them time to focus on things that actually matter to their constituents instead of beating the tired old drum of "we've got to do something about this new tech."
by fvdessen | 2026-02-01 21:35:19+00:00
> Looking at the talk lineup of a LLM related devroom, it sound forward looking to me: https://fosdem.org/2026/schedule/track/ai/

It doesn't to me at all, it is mainly focused on self hosting llms, which is a complete deadend. It just isn't feasible to self host the useful models, the hardware requirements are just too big.

The current topic of focus around AI are: how to adapt development practice to agentic coding, agent harness, agent orchestration, mcp integrations, etc.

I guess there is some unease in the oss community to rely on large companies to run and host the models. But this isn't entirely new, we also relied on big companies to manufacture our computers. It's just the way it is.

> Well, for better or for worse, FOSDEM is not a tech start-up event.

It is weird, there are a lot of startups present, look at all the stands showcasing projects. Aren't those startups ? What I noticed is that they are usually funded by public grants rather than VCs. I am not sure why this is the case.
by LightBug1 | 2026-02-01 21:37:17+00:00
I had this problem ... a smoker who would religiously sit on their patio and smoke so much that it would smoke us out of our house.

After speaking with them didn't help ... my next response was to religiously water the garden at the same time with my jet spray ...

I have amusing videos (from our CCTV) of our neighbour regularly diving for cover from an "accidental" spray of water.

"Sorry. I'm just watering our plants, sorry about that".

I wish I could say this solved it ... but the subtlety of the point that their smoking was impacting the enjoyment of our home, in the same way as my water spray was impacting his enjoyment of his garden was lost on them ...

We eventually settled it the old fashioned way. Not with pistols or swords ... but an old-fashioned chat after reporting them to the local council.

Luckily the problem is resolved ... but largely due to the threat of the Council taking action against their landlord.

The only solution is leverage ...
by ChicagoDave | 2026-02-01 21:37:54+00:00
Sharpee is an open source IF platform built on modern architecture patterns and principles. Some of the things it does very differently from legacy platforms:

- Mutations and Text are separate concerns. The game mutates state, then adds domain command events to an event source. At the end of each turn, the engine sends all events on the stack to a text service. The text service calls the language service for the actual content based on ID, though story-based responses will come through the domain event as literals. This allows the author to play with the text before it's emitted to a client.

- Sharpee is composition-oriented. There are traditional object-oriented aspects to the platform, but the Traits & Behaviors are the core pattern. Traits are data and their associated Behavior is the logic. You can create objects (IFEntity) and apply Traits to them and the platform will know what to do with them for the implemented actions in the standard library.

- It's pure Typescript which means it will run anywhere and is blazing fast. It is infinitely adaptable to any creation one might come up with.

- Open Source out of the gate. Fork it, send in pull requests, or just be inspired to do something else with it.

- i18n ready. The platform sees parser-en-us and lang-en-us at the moment, but it would be relatively trivial to create other languages in Sharpee. An author could even push all of their story text into language modules and have a single story be multi-lingual. The platform could even recognize the player's language from their first command and switch in real-time.

- Has a cross-platform story runner named Zifmia with downloads for Windows, Ubuntu, and MacOS.

- The author can share their stories via a simple thin web app (no web server required) or as a .sharpee story file that will run in Zifmia.

Roadmap

- Implement panel layouts in Zifmia for alternate user experiences.
- Implement Spanish, French, Italian, and German parser and language packages.
- Implement a screen-reader client for blind players.
- Implement a graphical client.

Sharpee was a lot of fun to build and it took all of my 40 years of IT experienced to master the complexities. I hope others find it useful.
by marojejian | 2026-02-01 21:38:02+00:00
Interesting article, though I'm biased since:

- I like to shop IRL, and the opportunities to do this pleasurably are going extinct

- I live right by Hayes valley, which they start out with.

- I'm also a member of "The Commons" which they mention at the end. I love what it's trying to do: creating a new social 3rd space in SF.
by ndegruchy | 2026-02-01 21:38:34+00:00
100%

My biggest gripes with Time Machine are the lack of visibility, the silent failures and the inflexible scheduling. I know there are methods to work around the last one, but the first two are paramount. It does do consistency checking, at least as far as the logs say, but it says nothing about the health of the backup container.

While most users don't really want to know about this stuff, I feel like it's important enough to have a more comprehensive UI to provide some insight into the feature and the associated health.
by iamrobertismo | 2026-02-01 21:39:07+00:00
> I don't want to pay taxes that go to social programs

This is such awild thing to say. What do you think the point of society is? Also, there is no way you "Totally agree" if at the same time you are saying this.

Also if you understand the cost of incarceration and the negative social ills of poverty, then being against social programs, broadly, makes no sense.
by Ingon | 2026-02-01 21:39:19+00:00
I'll take a look at what twingate does for sure, thanks for pointing that out.

A few things that worth mentioning for connet's current state - you can technically bind to any local IP, not just loopback (or listen to them all). You also have the option of directly running a TLS/HTTPS destination (for mutual TLS directly to the service) or source (e.g. for mutual authentication between your local listener and the outside world). Another option is to build your own client and define how you want to source traffic - maybe its part of your app and there are no sockets or anything - you just connect and start talking.
by satvikpendem | 2026-02-01 21:39:30+00:00
OP implied they have powerful enough hardware, since Kimi runs on their computer, so that is why they mentioned it is local. That it doesn't work for most people has no relation to what OP of this thread said. Regardless, you don't need an Opus level model, you can use a smaller one that'll just be slower at getting back to you, it's all asynchronous anyway compared to a coding agent where some level of synchronicity is expected.
by 0xbadcafebee | 2026-02-01 21:40:02+00:00
Are you running a mattress factory? Or are you trying to run a hotel, and need mattresses, so you build a mattress factory? The "software industry" is that - dysfunctional with perverse incentives.

We should not be building the same software over and over and over and over. I've built the same goddamn app 10 times in my career. And I watch other people build it, making the same old mistakes over and over, like a thousand other people haven't already gone through this and could easily tell you how not to do it. In other engineering professions, they write that stuff down, and say "follow this plan" because it avoids all the big problems. Thank god we have a building code and not "agile buildings".

Agile sucks because it incentivizes those obvious mistakes and reinventing of wheels. Planning allows someone to stop and look up the correct way of building the skyscraper before it's 100 feet in the air with a cracked foundation.
Show HN: Multiplayer flight SIM over San Francisco using Google 3D Tiles
by alistairmcleay | 2026-02-01 21:40:48+00:00
Built this over the weekend inspired by levelsio's viral flight sim last year. Uses Google's Photorealistic 3D Tiles for actual SF terrain - you're flying over real buildings.

Multiplayer via WebSockets. You can dogfight strangers over the Golden Gate.

Stack: Three.js and 3D Tiles Renderer.

Would love feedback on the flight physics - still tuning it.