MurphyA/hacker-news huggingface dataset:
by ashtonsuire | 2026-02-28 16:54:34+00:00
The current trend of running autonomous, LLM-generated scripts directly on a host machine is wild to me. I looked into things like Firecracker and gVisor, but they felt way too heavy for a daily dev workflow.

I wanted something better than running agents on devices, so I recently put together a tool called enclv.

It basically just throws your untrusted code into a locked-down, disposable Docker container.

The main thing I cared about was network egress. The container runs on an internal-only Docker network, and all traffic is forced through a proxy. You provide a YAML config with allowed domains (e.g., api.anthropic.com), and the proxy drops everything else. Raw IP connections are blocked so it can't bypass DNS.

Other than that: the rootfs is read-only, it can only write to a specific output volume (which gets hashed at the end), and secrets are injected via tmpfs instead of standard env vars.

It auto-detects what you're running based on your files:

requirements.txt / pyproject.toml -> drops it in a python:3.12-slim image.

package.json -> drops it in node:20-slim.

If you drop a Dockerfile in the directory, it uses that, so you can run Go, Rust, or whatever else. It still injects the proxy and runtime hardening regardless of the base image.

(Full disclosure: If it doesn't recognize the project, it silently falls back to Python right now, which is a bit janky. Eventually, I can add Go/Ruby detection and a fallback warning if there is enough interest.)

Before the security folks roast me:

I documented the limitations heavily in the README, but to be clear here:

This is a seatbelt for dev workflows, not a zero-day malware sandbox. Docker shares the host kernel, so a real exploit will escape it.

I'm not doing TLS interception. If a malicious script wants to exfiltrate a secret, it can still hide it in the JSON payload sent to an allowed domain (like OpenAI's API) and I can't stop it.

There's no disk quota on the output volume yet, so a script could just fill your drive.

It’s just an npm install to use it. You can point it at a local dir or a git repo.

Curious to hear if the proxy logic makes sense to you folks.
by omoikane | 2026-02-28 16:54:46+00:00
I was thinking in situations where a coworker might send me something to review, and I might have thought "hmm, I wouldn't have done it like that, but this is a great way to do it too". Also, a good source of teachable code is to participate in a programming contest, and then review the repositories of the teams who scored better than me after the contest.

I agree that if I don't already know how to implement something, seeing a solution before trying it myself is not great, that's like skipping the homework exercises and copying straight from the answer books.
by elephanlemon | 2026-02-28 16:55:17+00:00
Agree. I’d like more fine grained control of context and compaction. If you spend time debugging in the middle of a session, once you’ve fixed the bugs you ought to be able to remove everything related to fixing them out of context and continue as you had before you encountered them. (Right now depending on your IDE this can be quite annoying to do manually. And I’m not aware of any that allow you to snip it out if you’ve worked with the agent on other tasks afterwards.)

I think agents should manage their own context too. For example, if you’re working with a tool that dumps a lot of logged information into context, those logs should get pruned out after one or two more prompts.

Context should be thought of something that can be freely manipulated, rather than a stack that can only have things appended or removed from the end.
by jasode | 2026-02-28 16:55:39+00:00
Not to disagree with anything the article talks about but to add some perspective...

The complaint about "code nobody understands" because of accumulating cognitive debt also happened with hand-written code. E.g. some stories:

- from https://devblogs.microsoft.com/oldnewthing/20121218-00/?p=58... : >Two of us tried to debug the program to figure out what was going on, but given that this was code written several years earlier by an outside company, and that nobody at Microsoft ever understood how the code worked (much less still understood it), and that most of the code was completely uncommented, we simply couldn’t figure out why the collision detector was not working. Heck, we couldn’t even find the collision detector! We had several million lines of code still to port, so we couldn’t afford to spend days studying the code trying to figure out what obscure floating point rounding error was causing collision detection to fail. We just made the executive decision right there to drop Pinball from the product.

- and another about the Oracle RDBMS codebase from https://news.ycombinator.com/item?id=18442941

(That hn thread is big and there are more top-level comments that talk about other ball-of-spaghetti projects besides Oracle.)
by dminik | 2026-02-28 16:55:50+00:00
Too many to list, but for some examples:

You take a reference to a vector element, which you later accidentally invalidate by pushing to the same vector.

You move out of a unique_ptr, but then you accidentally use it again.

You create a cycle with shared_ptr causing a memory leak.

If you std::sort a list of floats with NaNs (among other things) you can stomp over memory. The sort function requires some very specific ordering otherwise you get UB.
by jbdamask | 2026-02-28 16:55:51+00:00
I hear you. At the same time, I think we're on the cusp of a Cambrian explosion of creativity and there's a lot of opportunity. But we need to think about it differently; which is hard to do since the software industry hasn't changed much in a generation.

It wouldn't surprise me if we start to see software having much shorter shelf-lives. Maybe they become like songs, or memes.

I'm very long on human creativity. The faster we can convert ideas into reality, the faster new ideas come.
by sosomoxie | 2026-02-28 16:55:56+00:00
It's not the same as all, whatever you think of the Ukraine, it used to be part of the Soviet Union. Russia and the Ukraine fighting is a "normal" war. The US has absolutely no business attacking Iran. It's entirely unprovoked and at the behest of the terrorist "nation" of Israel, which also should have nothing to do with the US.
by albert007_d | 2026-02-28 16:55:59+00:00
I published a guide + repo for running a private EaglercraftX 1.8.8 server at home with Docker:

Blog: https://prolinix.com/blog/eaglercraft-server/
Repo: https://github.com/hackboxguy/eaglercraft-docker
What it does:

Browser-based clients (no native launcher installs)
Local multiplayer for family/home LAN
Persistent worlds/logs via Docker volumes
Optional web admin dashboard (Plan)
Safety-focused setup guidance (LAN-first, no public port exposure)
Important caveat:

Initial build requires internet to fetch server/plugins
After setup, gameplay works on local network without internet
Would love feedback on architecture, security hardening, and reproducibility improvements (pinning/checksum strategy for upstream artifacts).
Not affiliated with Mojang or Microsoft.
by xeromal | 2026-02-28 16:57:05+00:00
Of course, there are counter examples but there's a disconnect between the production of something and the selling of it with almost opposing goals. Given unlimited money and time, many engineers, arts, etc will write and rewrite something to perfection. Constraints are needed because the world doesn't operate in a vacuum and unless we all live in a utopia, we have to compete for customers and resources.

Constraints often result in better results. Think of Duke Nukem Forever and how long it took them to release a nothingburger.

I just watched a show called the Knight of the Seven Kingdoms and the showerunners were given a limited budget compared to their cousin shows and it resulted in a better product.

Sometimes those metrics keep things on the rails
by jacquesm | 2026-02-28 16:57:20+00:00
Agreed that you can't compare Venezuela and Iran. But I challenge you to check which are the top three countries in the world by oil reserves.

Israel needs it, Trump wants it, this was going to happen either now or next year. The potential for escalation is massive and I sincerely hope that it will not. Iran is a problem, but Israel is also a problem and the United States is becoming a bigger problem every day. It would be nice if the people in charge of this planet could hold back from throwing matches into the powder kegs for a while.
by brandonb | 2026-02-28 16:57:33+00:00
We've done a little research in this area, attempting to approximate blood-based biomarkers on wearable data. You can get some of them: https://www.empirical.health/blog/wearable-foundation-model-...

A YC company, Athelas, started by developing an at-home blood test analyzer (they've since pivoted).
Ask HN: Why People Support Anthropic?
by piratesAndSons | 2026-02-28 16:57:48+00:00
In recent days, Anthropic and the Department of War have been having a back-and-forth war of words. What surprises me is the people who support Anthropic. Did you forget how scummy this company is? How they violated the copyrights of hundreds, if not thousands, of authors— the vast majority of whom rely on that work for their income?

Even if you don’t care about the copyrights of authors, this company is constantly advertising to your boss how they can save money by firing you and giving the salary they would have paid you to them. And you’re on their side?

Anthropic is scum. Regardless of how many dipshit “marketers” they deploy here and elsewhere, never support them—because the only reward you get as a developer if they win is your job being eliminated.

I know some software developers have deluded themselves into thinking they’re different from the working class. You’re not. Anthropic and others like them would gladly be fine with former developers scavenging in city dumpsters if it meant their shitty, stolen product achieved product–market fit.
by vlovich123 | 2026-02-28 16:58:13+00:00
That’s a false analogy.

You have two parties who want to enter into a contract and a third party unrelated to the contract that doesn’t for whatever reason. Just based on contract law and common sense the unrelated party shouldn’t have standing. Now if there’s externalities to the contract that impact that unrelated party sure, but only insofar as to get those externalities addressed.

This is not the same as a robbery which involves no contract or a willing counterparty to the robbery.
by nz | 2026-02-28 16:58:16+00:00
Yes, I wrote this, and you can find an intro/context to the _UNFINISHED_[1] essay here (https://www.galacticbeyond.com/a-bridge-to-everywhere/), with a link to the PDF at the bottom.

[1]: what you see is the first 5% of the essay, based on the notes that never made it in. Many topics are untouched, such as cults, caves, imagination, conspiracy, paranoia, fear, wakefulness, blindness, hallucinations, altering consciousness, notations, etc. And other topics are mentioned but not explored deeply (taoism, buddhism, prophecy, trust+belief[2], mnemonics, dreams, metaphors, etc). So it's mostly setup, with planned payoffs and epiphanies in the latter unwritten parts[3]. And some of the transitions between topics are in need of deburring.

[2]: note that many languages use the same word for trust and belief. In Indo-European languages, the root is the same root as tree and true. Relevant to the unwritten parts of the essay.

[3]: so you'll just have to imagine the unwritten parts, until I actually get around to writing them ;)
by rayiner | 2026-02-28 16:58:32+00:00
If anyone thinks the moral justification for selective service has diminished, they should launch a campaign to repeal it and see how it goes over. I suspect that the non-prosecution more reflects the public’s leniency in the absence of major threats since the fall of the soviet union than a change in the underlying normative view.

Conscientious objection still puts the ball in the government’s court. You have to make your case to the government that you have a deeply held religious or moral belief that precludes participation in war, and then the government decides what it wants to do. It’s not clear to me how a corporation would prove the existence of such a belief. But even if that was possible, it wouldn’t give the company the right to decide unilaterally.
by JumpCrisscross | 2026-02-28 16:58:42+00:00
> Iran has the capacity to end calm life in the GCC and possibly disrupt oil flows

I'm genuinely surprised the mines haven't rolled out, to the point that I believe they won't be. (They were–in the initial strikes–destroyed or incapacitated, or they never existed.)

> Iran was able to project its missile to several countries in a couple hours

To minimal effect. And every launch exposes a missile and firing team to American and Israeli jets flyig in uncontested airspace.
by Svoka | 2026-02-28 16:58:42+00:00
Russian invasion of Ukraine is absolutely a genocidal war, with genocidal claims spoken out loud and actions documented, tens of thousands of times.

Never heard someone in USA claiming that Iraqis or Iranians had no right to exist, saying that they are not a real country and/or nation. This rhetoric is pretty much main stream in russia and used to justify ongoing genocide.
by etc-hosts | 2026-02-28 16:59:15+00:00
from 2024:

"Harris to Jewish voters: ‘All options on the table’ to stop Iran from going nuclear
In pre-election High Holidays call, US vice president says diplomatic solution still preferable to keep Islamic Republic from the bomb, charges Trump won’t stand by Israel"

https://www.timesofisrael.com/harris-to-jewish-voters-all-op...
by underlipton | 2026-02-28 16:59:16+00:00
Could very well be that, on a diplomatic level, they're far more reasonable and forgiving than we've been lead to believe. Maybe in order to justify an aggressively adversarial posture against them and their interests.

But that's hard to grok without corroborating evidence. Like maybe an analogous social dynamic where the American mainstream maintains a hostile posture towards a particular ethnic group, stereotyping them as violent and irrational and criminals and parasites, and doing things to them that have triggered sustained, armed uprisings in other times and places, but who, in fact, have historically and in-aggregate been steadfast in a commitment to non-violent resistance, integration, and endurance of oppression.

Safe to say that this is the first time America's ever encountered that kind of thing, though, so I guess that we can be somewhat forgiven for not recognizing it.
Show HN: The rust of Knox:anti-ASIC lattice L1 built by a dad and his 11yo son
by KnoxProtocol | 2026-02-28 16:59:40+00:00
I’ve been digging through the repository for the KNOX Protocol (v1.3.0), and while the pure-lattice cryptography is the headline, the actual engineering flex is the architecture. This father (ULT7RA) and his 11-year-old son(Rockasaurus Rex) didn't just write a whitepaper; they built the entire Layer-1 core from scratch in bare-metal Rust.

If you are building a 100% post-quantum chain with no classical hashing, Rust isn't just a stylistic choice—it’s the only way this network survives.

Here is why the codebase is an absolute anomaly:

The Stack Isolation
They didn't build a monolithic mess. The core crates (knox-node, knox-core, knox-ledger, knox-lattice, knox-p2p, knox-storage) are 100% pure Rust. The UI is completely decoupled into an Electron app (JS/React JSX) that talks to the knox-wallet Rust crate, and the GPU heavy-lifting is offloaded to a custom CUDA C kernel (kernelcuda1.cu). It is a strictly disciplined, production-ready stack.

Why Rust is the Only Language for VeloxReaper
KNOX uses an anti-ASIC PoW called VeloxReaper that forces the hardware to continuously thrash a 512MB DRAM DAG.

If this were written in Go or Java, the Garbage Collector pauses would absolutely destroy the block-timing mechanics for their Proof-of-Time consensus (CLH).

If it were written in C++, a single memory leak during the continuous O(nlogn) NTT polynomial multiplications would eventually crash the node.

Rust’s borrow checker guarantees memory safety without a GC, allowing the CPU to feed the CUDA kernel at maximum bandwidth without dropping a single frame.

Fearless Concurrency on the P2P Layer
Their P2P gossip layer is built on the Tokio async runtime. Because KNOX uses a two-round lattice key exchange (ML-KEM) instead of classical Diffie-Hellman, and masks traffic with 1KB padded packets on randomized 120ms–900ms jitters, the network handles a massive amount of concurrent cryptographic overhead. Rust ensures they don't get race conditions or thread-locking when the network gets slammed.

The Kicker
There is an 11-year-old kid actively contributing to memory-safe, async Rust code for a ground-up, post-quantum Layer-1 blockchain.

There is no VC funding here. No copied Ethereum code. Just a father and son writing fearless-concurrency Rust to build a mathematical fortress.
by apical_dendrite | 2026-02-28 16:59:45+00:00
This happened to me yesterday.
I give a junior engineer a project. He turns it around really quickly with Cursor. I review the code, get him to fix some things (again turned around really quickly with Cursor) and he merges it. I then try a couple test cases and the system does the wrong thing on the second one I try. I ask him to fix it. He puts into cursor a prompt like "fix this for xyz case" and submits a PR. But when I look at the PR, it's clearly wrong. The model completely misunderstood the code. So I leave a detailed comment explaining exactly what the code does.

He's moving so fast that he's not bothering to learn how the system actually works. He just implicitly trusts what the model tells him. I'm trying to get him to do end-to-end manual testing using the system itself (log into the web app in a local or staging environment and go through the actions that the user would go through), he just has the AI generate tests and trusts the output. So he completely misses things that would be clear if you learned the system at a deep level and could see how the individual project you're working on fit in with the larger system

I see this with all the junior engineers on my team. They've never learned how to use a debugger and don't care to learn. They just ask the model. Sometimes they think critically about the system and the best way to do something, but not always. They often aren't looking that critically at the model's output.
by Loughla | 2026-02-28 17:00:01+00:00
That's the thing. It is acting. All the characters are played by actors. And they just simply nail their parts. You're right that it's an equal and almost perfect mix of acting while not changing the tone or impacting the content via the same acting process.

It legitimately is the best audio book I've ever heard. I think it's because their voices and tone and cadence matches what I hear in my head when reading the book.
by bachmeier | 2026-02-28 17:00:03+00:00
Didn't see this until now, but it's still worth a response:

> You believe that builders are this nefarious cabal.

No, calling them profit maximizers has nothing to do with them being a "nefarious cabal".

When folks come along and ask "Why can't I afford a house?" the builders don't give the honest answer "Because we're maximizing profit, and that means we don't build houses for you." Instead they say "We're trying but the government won't let us build houses for you."
by dijit | 2026-02-28 17:00:53+00:00
"It's perfectly natural that Gazans would support the extermination of Jews."

That's not a point about colonialism or occupation; that's a justification
for ethnic extermination based on the conditions of the people holding the
position. By that logic there is no floor: any atrocity becomes "perfectly
natural" if the grievance is large enough.

In your broader argument you're describing a blood debt with no statute of limitations and no mechanism for resolution. Skåne (where I live) was Danish. Alsace was German. Most of Europe was Roman. At some point borders exist, people live within them, and the only available direction is forward. You haven't described a political framework- you've described a permanent state of war with no exit condition except one side's disappearance.

You just said it's perfectly natural to want to exterminate an ethnic group. Read that back.
by Bender | 2026-02-28 17:01:06+00:00
It is odd. Trump has been receiving advice on Iran from General Dan Caine. It was suggested Caine warned of risks and limited munitions Trump refuted these stating Caine believes a conflict would be easily won. Other senior officers were in shock that he said this could be done. The pentagon objected due to the lack of ammo and oilers. This is one case where I wish he would listen to the senior officers with substantial experience instead of the guy that often agrees with him.
by gck1 | 2026-02-28 17:01:28+00:00
> Using third-party software, tools, or services to harvest or piggyback on Gemini CLI's OAuth authentication to access our backend services is a direct violation of Gemini CLI’s applicable terms and policies.

It's been 2 months since these bans have started, first Anthropic, then Google. And their wording is still so confusing that I can't get a simple answer to a simple question:

Is piggybacking on headless 'gemini-cli -p' or 'claude -p' a TOS violation? Because there's really no reason why you can't do exactly what these tools did that caused these two companies to start giving out bans.

Unless you're in for a very specific configuration of models for some niche concern, CLIs give you nearly exact same access to the backend that snatching an OAuth token from them does. They give you JSONL for stdin, JSONL for stdout, and if you spin up a local proxy, you even get the same exact API contract in responses that you get from public APIs.

In fact, I already built a small tool for myself that does exactly that, to allow usage of alternative harnesses I prefer. Once I release it to the public, will -p be banned too?
by hearsathought | 2026-02-28 17:01:36+00:00
> non-programmers began programming without knowing they were

Using excel in the traditional sense isn't the same as programming. Unless they were doing some VBA or something like that which the vast majority of excel/spreadsheet users don't.

> spreadsheet formulae

formulas. We aren't speaking latin here.

> I see an analog with AI-generated code: the disciplined among us know we are programming and consider error and edge cases, the rest don't.

Programming isn't really about edge cases or errors.
by kibwen | 2026-02-28 17:01:54+00:00
> would the same thing not have happened with the rise of high level languages?

Any argument that attempts to frame LLMs as analogous to compilers is too flawed to bother pursuing. It's not that compilers are deterministic (an LLM can also be deterministic if you have control over the seed), it's that the compiler as a translator from a high level language to machine code is a deductive logical process, whereas an LLM is inherently inductive rather than deductive. That's not to say that LLMs can't be useful as a way of generating high level code that is then fed into a compiler (an inductive process as a pipeline into a deductive process), but these are fundamentally different sorts of things, in the same way that math is fundamentally different from music (despite the fact that you can apply math to music in plenty of ways).