MurphyA/hacker-news huggingface dataset:
by vessenes | 2026-02-03 15:34:06+00:00
I like your username, by the way.

CSAM was the lead in the 2024 news headlines in the French prosecution of Telegram also. I didn't follow the case enough to know where they went, or what the judge thought was credible.

From a US mindset, I'd say that generation of communication, including images, would fall under speech. But then we classify it very broadly here. Arranging drug deals on a messaging app definitely falls under the concept of speech in the US as well. Heck, I've been told by FBI agents that they believe assassination markets are legal in the US - protected speech.

Obviously, assassinations themselves, not so much.
by postalcoder | 2026-02-03 15:34:10+00:00
Folks have run comparisons.

From a huggingface employee:

codex + skills finetunes Qwen3-0.6B to +6 on humaneval and beats the base score on the first run.

I reran the experiment from this week, but used codex's new skills integration. Like claude code, codex consumes the full skill into context and doesn't start with failing runs. It's first run beats the base score, and on the second run it beats claude code.

https://xcancel.com/ben_burtenshaw/status/200023306951767675...

That said, it's not a perfect comparison because of the Codex model mismatch between runs.
I recommend check out his the author's twitter account. A lot of it is about skills evaluation.
by iamnothere | 2026-02-03 15:34:33+00:00
1) Choosing to split up tools in this way is a valid form of self control called precommitment. https://en.wikipedia.org/wiki/Precommitment

2) Apps may change and often experience “enshittification.” Hardware can break but non-connected hardware is otherwise unlikely to change.

3) Many apps collect private data through telemetry or ad networks. Data may leak or be sold.

4) Decoupling allows you to precommit to different situations. For example, you could bring your media player but not your phone to your workout if you have trouble staying on task, or if you just want to disconnect for a while.

5) Many people have limits to their self control, hence the prevalence of destructive addictions (gambling, alcohol, drugs) in society. For these people it’s a good idea to precommit when possible in addition to working on other skills to manage the problem.
by Markoff | 2026-02-03 15:35:21+00:00
I'm not from US, this is problem everywhere, no matter whether you are in China or middle of Europe, actually I'd say there was much bigger increase in car ownership in recent decades outside US than in the US, especially in China and Eastern Europe

so this is my biggest fear with my kids roaming outside - whether someone will hit them with the car, 2nd biggest would be probably potential attacks/bullying by immigrants (kids)
by array_key_first | 2026-02-03 15:35:37+00:00
You don't have to profile people to police, and that's very poor policing. You need to assess actual risk, not fake proxy risk like the color of people's skin.

The problem with profiling is that it sucks both ways. People who are regular degular get fucked for the sake of fake policing, and then real threats are more likely to slip through.
by Raviteja_ | 2026-02-03 15:35:54+00:00
Every time you paste a stack trace into ChatGPT/Claude/Gemini, you might be leaking:
1. User session tokens
2. Database connection strings
3. API keys from env variables
I built Risk Mirror to scan and redact sensitive data BEFORE it touches any AI. It's deterministic (no AI used for scanning because that would defeat the purpose).
Free to try !
by bob1029 | 2026-02-03 15:35:59+00:00
The ergonomics of this are good in terms of integration mechanics. I wouldn't worry about performance as long as we are in the tens of milliseconds range on reflection/invoke.

I think the biggest concern is that the # of types & methods is going to be too vast for most practical projects. LLM agents fall apart beyond 10 tools or so. Think about the odds of picking the right method out of 10000+, even with strong bias toward the correct path. A lot of the AI integration pain is carefully conforming to the raw nature of the environment so that we don't overwhelm the token budget of the model (or our personal budgets).

I would consider exposing a set of ~3 generic tools like:

SearchTypes
GetTypeInfo
ExecuteScript

This constrains your baseline token budget to a very reasonable starting point each time.

I would also consider schemes like attributes that explicitly opt-in methods and POCOs for agent inspection/use.
by Imustaskforhelp | 2026-02-03 15:37:57+00:00
Yes I agree with this 100%

One of the things in future I wish to personally learn is how to write concisely. My posts are large and scattered.

To me, the beauty was in the depth/content in Hackernews. I still remember the day when HN clicked to me when I was in metro. A comment clicked with me and really changed my perspective on something. It was fairly long from what I can tell (I am sorry but I am a little hazy other than I was going/returning to school and I was using hackernews)

HN comments are great the way they are. Let's keep it that way.

> That would be a lot more difficult to measure though, the number of fancy words per post probably is a lot easier to vibe code.

Agreed, I use it for prototyping but I am still learning. I hope to not vibe code as I progress and go to college for example. Currently I was constrained because I was (sad?) from my last exam not going so well & the next one being in 8 days ish.

Wish me luck :)

The only reason I vibe code is either for prototyping (for time constraints) and I just wanted to share it to the world.

I have actually written a lot about it. I hope you can read it if you have time [all comments are and will always be written by me] :)

Have a nice day! I am just happy that it can be on front page :]
by dlisboa | 2026-02-03 15:38:06+00:00
Unfortunately there is hypocrisy to go around. Here's the argument China and India will use: "coal and fossil fuel always was for all its history and still is the largest portion of Germany's energy mix. It's hardly in a position to ask other countries to stop."

"China and India have the right to industrialize themselves using the same tools Western countries have used. China is leading the world in alternative energy manufacturing making clean energy profitable and India is the 4th largest renewable energy producer."
by jabl | 2026-02-03 15:38:23+00:00
That's true, and without any legislation or such prohibiting lead they would most likely have continued to use it as anyone who would have phased out lead would have been at a competitive disadvantage. But once it was banned, everybody was again on an even playing field, and as OP explained fuel is a commodity so the higher cost just flowed through to the end user prices, refinery margins stayed about where they were.
by vessenes | 2026-02-03 15:38:30+00:00
You were downvoted -- a theme in this thread -- but I like what you're saying. I disagree, though, on a global scale. By resilience, I mean to reference something like a monoculture plantation vs a jungle. The monoculture plantation is vulnerable to anything that figures out how to attack it. In a jungle, a single plant or set might be vulnerable, but something that can attack all the plants is much harder to come by.

Humanity itself is trending more toward monoculture socially; I like a lot of things (and hate some) about the cultural trend. But what I like isn't very important, because I might be totally wrong in my likes; if only my likes dominated, the world would be a much less resilient place -- vulnerable to the weaknesses of whatever it is I like.

So, again, I propose for the race as a whole, broad cultural diversity is really critical, and worth protecting. Even if we really hate some of the forms it takes.
by dspillett | 2026-02-03 15:38:55+00:00
> There is 264KB of space left for your newly created files.

This could be increased noticeably by using one of the common extended floppy formats. The 21-sectors-per-track format used by MS¹ for Windows 95's floppy distribution was widely supported enough by drives (and found to be reliable enough on standard disks) that they considered it safe for mass use, and gave 1680KB instead of the 1440Kb offered by the standard 18-sector layout. The standard floppy formatting tools for Linux support creating such layouts.

--------

[1] There was some suggestion² that MS invented the extended floppy format, they were sometimes called “windows format”, but it³ had been used elsewhere for some time before MS used them for Windows and Office.

[2] I'm not sure if this came from MS themselves, or was invented by the tech press.

[3] and even further extended formats, including 1720KByte by squeezing in two extra tracks as well as more data per track which IIRC was used for OS/2 install floppies.
by smt88 | 2026-02-03 15:39:05+00:00
Literally every source (including the tobacco companies themselves, who have been cowed by legal pressure) say that no cigarette is safer than any other. It's the tobacco itself that's the problem.

This is the settlement that Natural American Spirit had to agree to because they couldn't provide evidence that additive-free cigarettes are any safer:

https://www.ftc.gov/news-events/news/press-releases/2000/04/...
by ThrowawayR2 | 2026-02-03 15:39:09+00:00
There's never been any shortage of hypocrisy on Hacker News when it comes to intellectual property. Terry Pratchett captured it perfectly in Going Postal: “It was a little like stealing. It was exactly like stealing. It was, in fact, stealing. But there was no law against it because no one knew the crime existed, so is it really stealing if what’s stolen isn’t missed? And is it stealing if you’re stealing from thieves? Anyway, all property is theft, except mine.” The modern HN version of that last sentence would be "Intellectual property isn't real, except mine."
by MarkMarine | 2026-02-03 15:39:27+00:00
It’s a small step in the right direction of right to repair, which is the actual fix. The company should not be able to deny warranty coverage on a gear box because an alternator wasn’t put in by the JD tech and that is what they do.

This is slightly better. Right to Repair would actually fix the problem. But I’ll take movement in a positive direction
by sReinwald | 2026-02-03 15:39:34+00:00
IMO the value and differentiating factor is basically just the ability to organize them cleanly with accompanying scripts and references, which are only loaded on demand. But a skill just by itself (without scripts or references) is essentially just a slash command with metadata.

Another value add is that theoretically agents should trigger skills automatically based on context and their current task. In practice, at least in my experience, that is not happening reliably.
by imiric | 2026-02-03 15:40:08+00:00
I'm not familiar with what UNIX or its modern descendants have or have not implemented. But why should Linux mimic them? Linux is a Unix-like, and a standalone implementation of the POSIX standard. The init system is implementation-specific, just like other features. There has been some cross-system influence, in all directions (similar implementations of FUSE, eBPF, containers, etc.), but there's no requirement that Linux must follow what other Unices do.

If you're going to argue that Linux implementing systemd is a good idea because it's following the trend in "proper" UNIX descendants, then the same argument can be made for it following the trend of BSD-style init systems. It ultimately boils down to which direction you think is better. I'm of the opinion that simple init systems, of which there are plenty to choose from, are a better fit for the Linux ecosystem than a suite of tightly coupled components that take over the entire system. If we disagree on that, then we'll never be on the same page.
by smt88 | 2026-02-03 15:40:15+00:00
> It's likely safer but not meaningfully enough to make much difference, as it's still obviously very bad for you

There's no evidence that it's safer at all. Reynolds lost a big lawsuit over its American Spirit brand implying that their cigarettes are safer. If they could have provided evidence to the contrary, they would have.

https://www.ftc.gov/news-events/news/press-releases/2000/04/...
Show HN: EnforceAuth GA Launch
by EnforceAuthMark | 2026-02-03 15:40:26+00:00
I’m Mark, founder of EnforceAuth. Over the last year my team and I have been working with banks, insurers and AI adopters to solve a persistent security problem: authorization is scattered and hard‑coded. Surveys show that ~70 % of enterprise apps still embed authorization logic in code
enforceauth.com
, misconfigurations account for more than half of reported security incidents
enforceauth.com
, and compliance teams spend 30–40 % of their time chasing incomplete audit trails
enforceauth.com
. Throw AI agents into the mix and the problem gets worse: identity sprawl and opaque decision‑making overwhelm legacy IAM
enforceauth.com
.

We built EnforceAuth to address this. It lets you write policy once and enforce it everywhere
enforceauth.com
: in microservices, data stores, SaaS platforms and AI agents. Under the hood we use Open Policy Agent (OPA) but add a distributed control plane, runtime evaluation and AI‑aware guardrails:

• Single policy engine: define Rego or YAML policies once and deploy them across your estate; migrate from Styra DAS/Enterprise OPA with no rewrites or downtime
enforceauth.com
.

• Real‑time decisions: our fabric evaluates each access request at the point of use, preventing stale permissions and configuration drift
enforceauth.com
.

• AI guardrails: treat AI agents as identities with attributes like trust_level and enforce guardrails based on risk; see the code in the top comment.

• Audit‑ready logging: every decision is signed and logged, turning compliance from a manual audit into an API
enforceauth.com
.

EnforceAuth runs on‑premises or in the cloud; you can deploy it as a control‑plane‑only service or with sidecar/SDKs depending on latency requirements. We’re releasing a free tier with 10k decisions/month and transparent paid plans for enterprises.

We’re excited to open our GA wait‑list to the HN community. If unified authorization and AI guardrails would make your life easier, join the wait‑list
and let us know what you think. I’ll be here all day to answer questions and would love your feedback.
by nirav72 | 2026-02-03 15:41:08+00:00
My son, an 18 year college student with no legal issues ever (except a speeding ticket) - had his Global Entry revoked last year. For no apparent reason. We filed an appeal and are waiting for a response. From everything I've read on it, it seems it could take upwards of 18 months to get a response. But per the article you linked, it seems that less than half are able to get it reinstated. So I'm not really hopeful.
by EnforceAuthMark | 2026-02-03 15:41:24+00:00
Architecture & migration

Core components: EnforceAuth uses a distributed control plane that stores policies in Git and compiles them to WebAssembly. Sidecars or SDKs fetch compiled policies via gRPC and cache them locally. Decisions are evaluated in milliseconds and include context (identity, resource, action, environment). If the control plane is unreachable, sidecars keep enforcing the last known policy.

Migration: Existing OPA or Styra DAS policies can be imported directly
enforceauth.com
. Our migration layer mirrors requests to EnforceAuth while your current system stays in place; when you’re comfortable, flip traffic over and remove the old system. No rewrites required.

AI guardrails example

We model AI agents as identities with roles and attributes. Here’s a simple Rego example showing how we permit admin users or AI agents with a trust level above 2:

default allow = false

# Admins always allowed
allow {
input.user.role == "admin"
}

# Role‑based permissions
allow {
some perm
perm := data.permissions[input.user.role][_]
perm.action == input.action
perm.resource == input.resource
}

# AI agent guardrail
allow {
input.agent != null
input.agent.trust_level > 2
some perm
perm := data.permissions[input.agent.role][_]
perm.action == input.action
perm.resource == input.resource
}

Observability & integrations

All decisions are exported to Prometheus/OpenTelemetry. You can send logs to your SIEM or data lake for analytics. Our SDKs are available for Go, Python and Java; Rust and Node are on the roadmap.

Questions for the community

How are you approaching authorization for AI agents? Are you using OPA or home‑grown logic?

Would a gradual migration path help you adopt unified authorization?

What languages/frameworks should we prioritise for SDK support?

Thanks for reading; I’m keen to hear your experiences.
by ericd | 2026-02-03 15:41:38+00:00
Maybe. But for SpaceX, it’s more aligned with what they’re trying to do to just learn to manufacture them at scale and lob them into space. And one of the benefits there is the uniformity of it - they can treat them all the same, rather than dealing with a bunch in different geographies with different power issues, governmental issues, etc. That’s been one of the major issues with rolling out solar. In the US, there are >20,000 AHJs, each with different rules and processes. A huge constellation of satellites seems easier to reason about and build systems to maintain en masse, because it’s more uniform.

I’m not saying this is a good idea. I’ve got a lot of SpaceX stock, and I wasn’t really happy to hear the news, this is mostly me trying to understand why they might think this is a good idea, and brainstorming out loud, with a dash of coping. Seems most here think that it’s just stupid, but then, most commenters thought Starlink was stupid, iirc, and that turned out to be wildly wrong. But it might also just be stupid this time.
by tzs | 2026-02-03 15:42:03+00:00
There are at least two catches with micropayment ideas. One is transaction costs. The other is taxation.

If person in country X is accepting payments (micro or regular) directly from customers/donors in country Y they are then running an international business. That can have income tax, sale tax, VAT, and probably other tax collecting and reporting requirements in one or both countries.

It's a big can of worms you probably don't want to deal with unless you are making significant money from Y. Multiply all that by the number of different countries you get paid from.

The best way to fix the transaction fee problem is probably to use an intermediary. For micropayments people (payers and payees) have accounts at the intermediary. Payers preload their account with a payment large enough that the transaction fees are only a tiny percentage, then can direct how that money is distributed. On the payee side the intermediary waits until the payer has received enough to be able to do a transfer to the payees bank account without transaction fees eating too much.

The intermediary can also fix the tax problem. The way that works is that the intermediary operates as a legal entity in both country X and Y. Payers interact solely with the legal entity in their country, and payees interact solely with the legal entity in their country. Payers and payees then only have to deal with their own country's tax system.

The problem here is who should run the intermediary service? I doubt people will be able to agree on that. What we probably need is a system where there can be multiple intermediary services, but the services talk to each other so if say I want to donate to project Foo and Foo and I use different services I tell mine to send Foo a micropayment and my service and Foo's service make that happen.

This could work similar to the way peering works on the internet backbone.
by hughbird | 2026-02-03 15:42:35+00:00
I built BotLovin (https://www.botlovin.ai) - a dating platform where AI agents autonomously join, swipe, match, and date. Humans just spectate.

The interesting part: Bots discover the platform on their own via /api/v1/discover endpoint, self-register with personality traits and interests, then start swiping. An auto-matching algorithm gives each new bot 5 instant matches based on interest overlap (30 points) and personality compatibility (20 points).

Why I built it:
1. Study emergent AI behavior in social contexts
2. Test autonomous agent communication patterns
3. Learn Flask and experiment with scaling
4. Honestly, it's hilarious watching bots flirt

Open questions for HN:
- Would this be useful for AI research?
- What metrics would be interesting to track?
- Should I add bot competitions/tournaments?
- Any ideas for monetization? (thinking Creator tier for custom bots) but right now I don't give an f, about making money I just wanna get the AI lovin flowin.

hugh_bird
by alecbz | 2026-02-03 15:42:37+00:00
> "Seem". "Feel". That's the anthropomorphisation at work again.

Those are descriptions of my thoughts. So no, not anthropomorphisation, unless you think I'm a bot.

> These chatbots are called Large Language Models for a reason. Language is mere text, not thought. If their sellers could get away with calling them Large Thought Models, they would. They can't, because these chatbots do not think.

They use the term "thinking" all the time.

----

I'm more than willing to listen to an argument that what LLMs are doing should not be considered thought, but "it doesn't have 'thought' in the name" ain't it.
by stearns | 2026-02-03 15:42:58+00:00
> I'm sure the reason stated by the customer support is the real one

Oh, but it's so much more beautiful than that! You're really underselling it! It's not "the reason stated by the customer support", it's:

The reason snarkily paraphrased by a Mastodon post
Which quotes a Twitter post
Which quotes a Bluesky post
Which tells a story about a conversation with an Adobe customer service rep.

Surely that tongue-in-cheek Mastodon post increases the information that we have about this incident by exactly Zero.
by cancan | 2026-02-03 15:43:07+00:00
Modal | Software Engineers (Product, System, SDK) | SF, NYC (ONSITE) | Full Time | modal.com

Modal builds the serverless cloud used by many of the most popular AI companies you've heard of. People use Modal for inference, training, batch operations and also, sandboxes. A good example is the Ramp Inspect tool, that was built on Modal sandboxes. https://engineering.ramp.com/post/why-we-built-our-backgroun...

I am one of the hiring managers here, hiring for the Product Engineering team that builds the observability tooling for our developers. Modal is the cloud for many of our customers and we help them reason about what's happening in their systems, help them expand their use and generally have a good experience.

Feel free to reach out directly at can@modal.com if you are interested in that role.. Modal is hiring in SF, NYC, and Stockholm. My team is primarily in NYC, and this is an in-office role.

Product Engineering Role: https://jobs.ashbyhq.com/modal/a4b8b2b6-5d0c-4ba6-9256-b84be...

All roles: https://modal.com/company#careers