MurphyA/hacker-news huggingface dataset:
Show HN: Raypher–Sandboxing local AI agents(OpenClaw)on your own local computer
by Kidiga | 2026-02-23 20:49:05+00:00
Hey HN,

Most of us want to run autonomous agents like OpenClaw locally, right on our daily-driver machines. We want them to actually interact with our files, our IDEs, and our real local workflows.

But doing that right now is a security nightmare. A hallucinating (or hijacked) agent with raw system access is basically local remote code execution waiting to wipe a directory or leak an SSH key.

The current workarounds are terrible:

The Hardware Air-Gap: Buying a dedicated Mac Mini or a secondary cheap laptop just to run agents safely.

The Cloud: Spinning up a VPS, which adds annoying latency, costs money, and completely kills the "local-first" advantage.

Containers: Shoving the agent in a Docker container. It’s clunky, and it completely lobotomizes the agent because it can no longer see or interact with your actual host OS where your real work lives.

I got fed up and built Raypher.

Raypher is a bare-metal security architecture specifically designed for AI agents. It lets you run agents directly on your host machine while keeping them on a cryptographically tight leash.

How the Alpha works under the hood:

Zero-Touch Interception: You don't have to rewrite your Python/Node agent scripts. Raypher currently uses transparent system proxy injection (netsh portproxy on Windows) to catch all agent traffic automatically.

Hardware Identity: We bind the agent's session cryptographically to your physical TPM 2.0 chip.

The Policy Engine: Every request is evaluated against strict budget, domain, and time-restriction policies. If it tries to phone home to a weird domain, it gets blocked. It also runs local DLP to automatically redact API keys or any sensitive information that you can custom to be redacted before they hit the stream.

We will distribute it as a single script that sets up the interception and launches a local Command Center dashboard so you can watch your agents get secured in real-time.

(Transparency note: The heavy kernel-level eBPF/WFP hooks are currently in development, but this proxy MVP proves the hardware-bound Policy Engine actually works).

join the waitlist/architecture is at raypherlabs.tech to be the first to be notified when we launch
by nomel | 2026-02-23 20:49:27+00:00
What does AGI have to do with it? Look up the top employer for your state [1] (or top few). If you go with the definition that AGI allows novel ideas/innovation, you'll see AGI is not needed for most jobs.

Don't fall for the hype or anti-hype.

[1] https://worldpopulationreview.com/state-rankings/largest-emp...
by cycomanic | 2026-02-23 20:49:59+00:00
> According to that article, Waymo crashes 2.3x more often than human drivers (every 98k miles vs 229k miles), which is clearly false.

Why is it clearly false? It might be false, but clearly? I would definitely like to see evidence either way.

> I think it's far more likely that humans don't report most minor collisions to insurance, and that both Robotaxis and Waymo are safer than human drivers on average.

That sounds like you are trying to find reasons to get the conclusion you want.
by user568439 | 2026-02-23 20:50:19+00:00
I think you don't cook much if you say this... We try to cook our food as much as possible and also we are at home almost all the time. At the end of the day there can easily be 2-3 pots, 2-3 bowls, 4-6 cups for tea, coffee or breakfast, a few glasses, 4 to 8 dishes, utensils and cutlery, some devices like a blender attachment and its jug, Tupperwares and some pan that I made sure it's dishwasher safe...

I could reduce a bit the number of glasses and cups by reusing them more but anyway,the dishwasher makes a big difference.
by Markoff | 2026-02-23 20:50:39+00:00
I use email corner with push, so I have emails instantly with notification to my smart watch, all my clients send me tasks through email

yes, especially the 4th point, the entering all the recipient's banking details on real keyboard is much more convenient than switching the windows and checking some microscopic numbers in PDF document on smartphone same copypasting them one by one between different fields (and yes, there are many companies which still don't provide QR code in their invoice)
by dmonitor | 2026-02-23 20:50:48+00:00
The fact that they're calling it an "attack" implies otherwise.

I find the entire premise of this announcement absurd. Fraudulent accounts? They're just accounts. They paid for the access the same as any other. They're accessing Claude just like a human (or *claw) would.

There's no argument against their strategy that doesn't make them complete hypocrites in respect to how they got the model training data in the first place.
by KittenInABox | 2026-02-23 20:50:59+00:00
On the contrary I think Americans are reacting about the same as any other set of people would react. There are always going to be people who, as long as their personal lives are stable, they are not going to do anything to put that stability at risk. America is also huge enough that even if one part of the country is having a crisis, millions of fellow citizens will not hear of it or have any 2nd, 3rd or 4th hand connection to the matter.

But also if a small portion of Americans disparately plan to do stuff like sabotage surveillance camera, it's still newsworthy.
by andai | 2026-02-23 20:51:06+00:00
Would be interesting to see Sonnet. It's fair bit smaller than Opus but scores pretty high on common sense, subjectively.

I'm also curious about Haiku, though I don't expect it to do great.

--

EDIT: Opus 4.6 Extended Reasoning

> Walk it over. 50 meters is barely a minute on foot, and you'll need to be right there at the car anyway to guide it through or dry it off. Drive home after.

Weird since the author says it succeeded for them on 10/10 runs. I'm using it in the app, with memory enabled. Maybe the hidden pre-prompts from the app are messing it up?

I tested Sonnet 4.5 first, which answered incorrectly.. maybe the Claude app's memory system is auto-injecting it into the new context (that's how one of the memory systems works, injects relevant fragments of previous chats invisibly into the prompt).

i.e. maybe Opus got the garbage response auto-injected from the memory feature, and it messed up its reasoning? That's the only thing I can think of...
by returningfory2 | 2026-02-23 20:51:12+00:00
These stories usually have some non-trivial factor that is missing in the article. In this case there's a small visible red flag: the two tourists are British but traveling on B visas, rather than using the visa waiver program. Why? Well according the DHS they both have multi-year overstays in the US.

This doesn't justify the detention they went through. But it also means the lesson of the story is not "random tourists are being detained".
by eddyg | 2026-02-23 20:51:12+00:00
Those aren't the problem, it's any "free" mobile app in the App Store or Play Store with an advertising SDK (which is almost all of them) that uses your location to "keep your weather forecast up-to-date" but also provide data brokers with your location...

https://darkanswers.com/how-your-location-is-sold-to-adverti...
by hsaliak | 2026-02-23 20:51:24+00:00
Thanks for your interest in this work - I do not blog(maybe I should?) but i have posted a bit more on X about this work.

- A bit more on mail mode https://x.com/hsaliak/status/2020022329154420830

- on the Lua integration https://x.com/hsaliak/status/2022911468262350976 (I've since disabled the recursion, not every code file is long and it seems simpler to not do it), but the rest of it is still there

- hotwords for skill activation https://x.com/hsaliak/status/2024322170353037788

Also /review and /feedback. /feedback (the non code version) opens up the LLM's last response in an editor so you can give line by line comments. Inspired by "not top posting" from mailing lists.
by jp1016 | 2026-02-23 20:51:35+00:00
Been running a handful of dedicated boxes on Hetzner for about 5 years now. Even with the increase, the price/performance ratio is still way better than anything comparable from the big three US clouds. Their AX-series auction servers especially.

What concerns me more than the price hike itself is the trend. Memory prices spiking, hard drives selling out, and now this. If you're running anything with serious storage or RAM needs, it's worth locking in what you can now. I grabbed an extra auction server last month just because the specs were good and I figured prices were only going up.

For anyone panicking about alternatives: OVH and Netcup are decent in Europe but have their own tradeoffs. OVH's network has been flaky for me, and Netcup's support is basically nonexistent. Hetzner's support has been solid every time I've needed it, which is worth something.
by gigel82 | 2026-02-23 20:52:52+00:00
A Verifiable Credential fundamentally doesn't solve the problem of "sharing", "smuggling". All it takes is one verified adult to "leak" their VC somewhere, and millions of underage people would be able to use it to "prove" they are over 18.

This would only work with something like MS TPM 2 / Apple Secure Enclave (device attestation), which is anti-freedom by design. I was curious if they found a way around that (maybe with time/rate limits, or some actual useful use of blockchain tech).
by kristianp | 2026-02-23 20:53:02+00:00
Do you mean this? https://gyrovague.com/2026/02/01/archive-today-is-directing-... the malicious code wasn't injected, it was served with their captcha.

They shouldn't have used users to ddos someone's blog, but this seems like a one off attack against a perceived threat to the service's privacy. I don't condone that ddos attack, but it's been a very useful service over the years.
by LoganDark | 2026-02-23 20:53:07+00:00
I find Rust's complexity freeing, in that there are often at least a few ways to express what I want, and I can choose the one I feel best fits the use-case and my desired ergonomics. (I also like that there are often ways to express exactly a very precise want, owing well to the Rust principle of "zero-cost abstractions.") However of course, that very same complexity can make it unclear which approach may best serve a given objective, and lead to false starts, wacky implementations, or even giving up entirely.
by JetSetIlly | 2026-02-23 20:53:13+00:00
"Any terminal tool like Claude Code or Codex (I assume OpenCode too, but I haven't tried) can do it, by using as a prompt pretty much exactly what you wrote, and if it still wants to edit, just don't approve the tool calls."

I'm sure it can. I'd still like a single use tool though. I don't want to install NPM etc. or be reliant on a third-party, just to run a linter.

But that's just my taste. I'm very simple. I don't even use an IDE.

edit: to expand on what I mean. I would love it if there was a tool that has conquered the problem completely and doesn't require me to chat with it. I'm all for LLMs helping and facilitating the coding process, but I'm so far disappointed in the experience. I want something more like the traditional process but using LLMs to solve problems that would be otherwise difficult.
by jp1016 | 2026-02-23 20:53:14+00:00
The technology argument is the most convincing one to me. I worked with a Japanese client a few years ago and the internal tools they used were wild by western standards. Like full-on frameset layouts in 2020. But it wasn't ignorance, it was continuity. The tools worked, people knew how to use them, and there was zero appetite for redesigning something that wasn't broken.

The font thing is also underrated as a factor. When you only have a handful of web-safe CJK fonts and you can't rely on weight/size variations to create hierarchy the way you can with Latin text, you compensate with color and density. It's a constraint that pushes you toward a specific aesthetic whether you want it or not.

I think the framing of "peculiar" is a bit western-centric though. Dense information-heavy pages are arguably more respectful of the user's time than the trend of spreading three sentences across five viewport-heights of whitespace.
Show HN: Search-sessions – Search all your Claude Code session history in <300ms
by sinzin91 | 2026-02-23 20:53:24+00:00
Claude Code forgets everything between sessions. After months of heavy use, I had 1.6GB of JSONL session files buried in ~/.claude/projects/. Architecture decisions, debugging breakthroughs, and solutions I couldn't find again. There’s nothing more annoying that solving the same problem twice.

I tried RAG pipelines and local vector DBs, but they added complexity for a problem that's really just text search over structured files. So I built search-sessions: a single Rust binary that searches your session history directly. No database, no indexing step, no dependencies.

It supports two modes: index search (~18ms) for finding the right session, and deep search (~280ms with ripgrep, ~1s without) for matching against full message bodies. Each result includes the session UUID so you can resume any conversation with `claude --resume`.

The design choice that makes it work: skip the database entirely. JSONL files are already structured — just search them fast. Under the hood it's just files and a CLI, so it's easy to inspect, backup, and delete. You install it as a Claude Code skill, then ask "do you remember that auth refactor?" and Claude searches your history and picks up the thread. It also works with OpenClaw.

MIT licensed. macOS and Linux:

brew install sinzin91/tap/search-sessions

or

cargo install search-sessions

Curious what people think about exact vs fuzzy vs semantic search as a default — and which other coding CLIs you’d like supported.
by tacostakohashi | 2026-02-23 20:53:44+00:00
Sometimes it seems that the primary "benefit" / use case for AI is that people can use it, and if it outputs something useful then they look like they are AI early adopters, geniuses, etc, and if it outputs something dumb, then it's not their fault, it's the AI.

Either way, they get the upside, and apparently now it's your job to sort the AI slop from the reality, for some reason.

A few times, I have pointed out to people that their AI slop is wrong, and they said "yeah, it's wrong sometimes, but humans are also wrong sometimes, so it's no better/worse". It's the same logic as self-driving cars that kill people being fine, because after human-driven cars also kill people. It's true, but that's a _problem_....
by snowhale | 2026-02-23 20:53:47+00:00
fair point on the memory -- humans forget too. but the rubber stamping problem is actually worse with AI-generated code because when something breaks, there's no single human who wrote it and has to live with the consequences. PRs have had low review quality for a while, agreed. the difference is accountability gradient -- a human author who pushed slop has at least some skin in the game when prod goes down.
by levkk | 2026-02-23 20:53:50+00:00
I'll need a bit more info about your use case to answer. We use logical replication to move data between shards, with the intention of creating new shards.

This is managed by PgDog. We are building a lot of tooling here, and a lot of it is configurable and can be used separately. For example, we have a CLI and admin database commands to setup replication streams between databases, irrespective of their sharded status, so it can be used for other purposes as well, like moving tables or entire databases to new hardware. If you keep the stream(s) running, you can effectively keep up-to-date logical replicas.

We don't currently manage DDL replication (CREATE/ALTER/DROP) for logically replicated databases - this is a known limitation that we will address shortly. After all, we don't want users to pause schema migrations during resharding. I think once that peace is in, you'll be able to run pretty much any kind of long-lived logical replicas for any purpose, including HA.
by bavaga | 2026-02-23 20:54:07+00:00
Thanks for sharing this insights. I'm currently leaning heavily into using superpowers as well, so your article was particulary interesting to me.

In your workflow, what happens to the `PRD.md` after the initial module planning phase?

Is it mainly used to guide the decomposition into modules, or does it continue to play a role during implementation?

I might have missed it, but I'm curious wether it's just a planning artifact or an active part of the coding loop.
by dogcomplex | 2026-02-23 20:54:30+00:00
Correct. A ZK Proof backed identity system is a significant bump up in both privacy and security to even what we have right now.

Everyone does realize we're being constantly tracked by telemetry, right?

A proper ZK economy would mitigate the vast majority of that tracking (by taking away any excuse for those in power to do so under the guise of "security") and create a market for truly-secure hardware devices, while still keeping the whole world at maximal security and about as close to theoretical optimum privacy as you're going to get. We could literally blanket the streets with cameras (as if they aren't already) and still have guarantees we're not being tracked or stored on any unless we violate explicit rules we pre-agree to and are enforceable by our lawyers. ZK makes explicit data custody rules the norm, rather than it all just flowing up to whatever behemoth silently owns us all.
by tialaramex | 2026-02-23 20:54:33+00:00
> But "ginger ale" seems straightforward to me. It's an ale, flavored with ginger

Ginger ale is in fact, not an ale, it's a soft drink. It is distantly related to Ginger Beer and some variants of Ginger Beer are alcoholic like ales, but Ginger ale was conceived as a soft drink and today continues as a soft drink.
by nozzlegear | 2026-02-23 20:54:46+00:00
When this first came up on HN, I had commented that Opus 4.6 told me to drive there when I asked it the first time, but when I switched to "Incognito Mode," it told me to walk there.

I just repeated that test and it told me to drive both times, with an identical answer: "Drive. You need the car at the car wash."
by array_loader | 2026-02-23 20:54:58+00:00
(apologies for new account - NDA applies to the specifics)

Nice surprise to see this here today. I was working on a deployment just last week.

Unfortunately for me, I found that it crashed when doing a very specific bulk load (COPY FORMAT BINARY with array columns inside a transaction). The process loads around 200MB of array columns (in the region of 10K rows) into a variety of tables. Very early in the COPY process PgDog crashes with :

"pgdog router error: failed to fill whole buffer"

So it appears something is not quite right for my specific use case (COPY with array columns). I'm not familiar enough with Rust but the failed to fill whole buffer seemed to come from Rust (rather than PgDog) based on what little I could find with searches.

I was very disappointed as it looked much simpler to get set up and running that PgPool-II (which I have had to revert to as my backup plan - I'm finding it more difficult to configured, but it does cope with the COPY command without issues).

I would have preferred to stick with PgDog.
by servo_sausage | 2026-02-23 20:55:03+00:00
Yes, I am aware of waymo... What they do is impressive. However they don't have a product that works for all highways yet, that's the space I work in, and we have no real fixation on lidar... It's nice but not a requirement, and hard to justify the cost unless you can make sales because of it (and there are some places where this is the case, but not everywhere)

You don't need the mm precision of lidar very often; we find that it offers nothing at speed over radar; and in tight manoeuvres the cameras we need for human park assist and ultrasonics do well enough.

It in not more accurate; but it is more precise, but that doesn't really matter. (Radar gives you relative speed directly, this is more important than a very precise point at highway speeds).
by Night_Thastus | 2026-02-23 20:55:17+00:00
I agree. If the LLM were truly an intelligence, it would be able to ask about this nonsense question. It would be able to ask "Why is walking even an option? Can you please explain how you imagine that would work? Do you mean hand-washing the car at home, instead?" (etc, etc)

Real people can ask for clarification when things are ambiguous or confusing. Once something is clarified, they can work that into their understanding of how someone communicates about a given topic. An LLM can't.
by jjmarr | 2026-02-23 20:55:26+00:00
> At that scale, you can't just give everyone the source and tell them to do a world compile. Stable ABIs fix that. Also, you can't coordinate between all of the people involved other than via stable ABIs. So stable ABIs save both individual build time and reduce cognitive load.

Rust supports ABI compatibility if everyone is on the same compiler version.

That means you can have a distributed caching architecture for your billion line monorepo where everyone compiles world at all times. Split up your repo into distinct `cargo` packages and now you can share artifacts.

What Rust does not support is a team deciding they don't want to upgrade their toolchains and still interoperate with those that do. Or random copy and pasting of `.so` files you don't know the provenance of. Everyone must be in sync.

In my opinion, this is a reasonable constraint. It allows Rust to swap out HashMap implementations. In contrast, C++ map types are terrible for performance because they cannot be updated for stability reasons.
by thisisit | 2026-02-23 20:55:38+00:00
The whole “humans also do this” isn’t a winning defence here. Humans and copyright has long history and so much law that it is easy to get confused.

The default assumption here seems to be that the system needs to be broken. This is similar to the Google defence. If a user intent is to search for a cracked software what can poor Google do about it? The answer is to make it even more difficult.

This is a defence also used by torrent sites using magnet urls. “We don’t host files” is the default defence. But then if these sites get hit with DMCA they are required to remove the magnet url.

So the article shows what the lawyer is saying. Despite claims that it is difficult to search for full books, it really isn’t so. It is trivial. When it goes to court and it will, AI models will be required to make it even more difficult and allow for a DMCA like takedowns.
by 47282847 | 2026-02-23 20:56:21+00:00
Regarded, by whom? Not by financial experts such as Matt Levine. It looks like the prosecution followed the books and the law and the long-held SEC position; in stark contrast to what happened in that space and elsewhere since Trump. If you’re honestly interested, Levines newsletters at the time carry a lot of detail and quotes and historical comparison.

It’s too easy of a spin to later declare events as all political; one should be careful to make that claim unless accompanied with good arguments.
by _aavaa_ | 2026-02-23 20:56:28+00:00
> CAD was a drop-in replacement for draftsmen -- and even then, draftsmen are still around today, in slightly smaller numbers

You’re off my an order of magnitude here. Even ignoring departments that were significantly downsized, you would need substantially more draftsmen to do the work currently done by a smaller number with AutoCAD.

The skill required is also much lower, doubly so if you consider Solidworks/Inventor. You get everything for free; design the 3D model and your projections are free.
by j45 | 2026-02-23 20:56:39+00:00
The sunk cost and dollar store arguments assume the goal is information retrieval at minimum cost.

The relationship with technology you're designing around your family is worth considering too.

Looking at a shared hallway screen that shows a shared calendar which doesn't exist to pull anyone into a feed doesn't make a worse phone, it's solving a different level of shared understanding entirely.

The assumption that the phone is a neutral free tool tends to come most naturally to people who haven't yet thought about who designed the defaults and why. Free at point of use isn't the same as free. Someone optimized very hard for your continued presence.