MurphyA/hacker-news huggingface dataset:
by derpified | 2026-02-05 16:11:18+00:00
But wait, we have tools that can introspect on the semantic content of these skills, so why not make a skill that checks the security of other skills? You would think that'd be one of the first things people put together!

Ideally such a skill could be used on itself to self-verify. Of course it could itself contain some kind of backdoor. If the security check skill includes exceptions to pass it's own security checks, this ought to be called a Thompson vulnerability. Then to take it a step further, the idea of Thompson-completeness: a skill used in the creation of other skills that propagates a vulnerability.
by somenameforme | 2026-02-05 16:11:20+00:00
The Nazis were engaging in systematic and large scale genocide. ICE is deporting people in the country illegally back to their home countries, free of charge. I'm not being snarky there either, immigration offenses are taken seriously worldwide and in many places you can end up in indefinite detention, required to pay for your own deportation + fines, and more. The 'penalty' being a free ticket home is a pretty sweet deal.
by davydm | 2026-02-05 16:11:45+00:00
because these files contain a lot of arbitrary garbage, including unsent emails

for instance, you will find Stephen Colbert's name in there - because an email sent between two of epstein's buddies included a line where the author thought that epstein would enjoy Colbert's show

so his name is in the files, and he really has nothing to do with it - and I bet there's a lot more, considering the sources of the files
by exceptione | 2026-02-05 16:11:55+00:00
The bigger problem is that data can be part of a migration. A diff is far too rudimentary.

If I split a Fullname into FirstName and LastName, a diff will only tell half of the story. In EF Core, you will adjust an Up and a Down generated method to make the change reversible, plus you deal with data transformation there.

So I would love to know how people handle that without an explicit notion of migrations.
by seg_lol | 2026-02-05 16:12:24+00:00
Using "big" cloud providers is often a mistake. You want to use rented assets to bootstrap and then start deploying on instances that are more and more under your control. With big cloud providers, it is easy to just succumb to their service offerings rather than do the right thing. Do your PoC on Hetzner and DigitalOcean then scale with purpose.
by Spooky23 | 2026-02-05 16:12:31+00:00
It’s a risk/reward scenario, and an example of security minded people chasing ghosts.

The likelihood of conmen stealing VW Golfs from repair shops is a really low risk/high impact event. So they could demand your passport and piss you off or have you leave a happy customer.

In the remote chance the con artist strikes, it’s a general liability covered by insurance.
by sporkland | 2026-02-05 16:13:09+00:00
As a regular bike commuter in cities with hit and miss roads, With big enough tires (tyres?) it's totally fine, there are some ebikes out there with massive tires. I'd be more concerned about the blind bends and presumably due to semi-rural people driving very fast. If there's a broad shoulder or you can get off the road at a moments notice then it could be okay but as with most things the cars are the biggest danger.
by drnick1 | 2026-02-05 16:13:09+00:00
Absolutely. I don't have a blog but run my own email, several game servers, Matrix instance, Nextcloud and other internal services on a retired gaming PC. The total cost of my cloud subscriptions is $0, and no one is snooping on me. It's a great setup when combined with Linux machines and GrapheneOS phones, completely private and free of Big Tech.
by PurpleRamen | 2026-02-05 16:13:09+00:00
What other party? They often don't even know you or if you can use something for tax or not. Pretty much everything can be used for tax deduction, it all just depends on circumstances. I know, many countries have a really broken privacy-situation, but I don't think it would be realistic that every shop is preventive filing every receipt and forces every customer to give them their tax-number so they can link them..
by tyre | 2026-02-05 16:13:13+00:00
Looking at the underlying study, this isn’t evidence of bias. It’s evidence of correlation between Republicans and negative sentiment.

If you look at the sentiment for public figures given, the bottom one is, for example, Brett Kavanaugh. Well, he was credibly accused of sexual assault during his confirmation hearings, which was a huge deal at the time. Someone with that on their record will probably be read as negative, but, I mean, not the editors’ fault!
by rdhyee | 2026-02-05 16:13:23+00:00
Took this idea and ran with it using Fly's Sprites, inspired by Simon's https://simonwillison.net/2026/Feb/3/introducing-deno-sandbo.... Use case: Claude Code running in a sandboxed Sprite, making authenticated API calls via a Tokenizer proxy without credentials ever entering the sandbox.

Hit a snag: Sprites appear network-isolated from Fly's 6PN private mesh (fdf:: prefix inside the Sprite, not fdaa::; no .internal DNS). So a Tokenizer on a Fly Machine isn't directly reachable without public internet.

Asked on the Fly forum: https://community.fly.io/t/can-sprites-reach-internal-fly-se...

@tptacek's point upthread about controlling not just hosts but request structure is well taken - for AI agent sandboxing you'd want tight scoping on what the proxy will forward.
by vladdoster | 2026-02-05 16:13:43+00:00
Location: Nashville, TN
Remote: true
Willing to relocate: boston || nashville
Technologies: Python, Django, IaC, Terraform, Golang, CI/CD, Azure/AWS, {ba,z}sh, Lua, Springboot,
Redis, Docker, Open Service Broker, {,non}relational & vector dbs, shared services, SOA
Email: mvdoster@gmail.com

resume: https://linkedin.vdoster.com && http://github.com/vladdoster

sr. cloud software engineer @ Mastercard (5 years)

Designed and built Platform-as-a-Service for microservice workloads running on Azure and AWS
to migrate on-prem workloads to the cloud. The platform operates globally, allowing teams to
deploy to several Azure-backed regions worldwide. Helped plan and create regional landing zones
in Azure for application teams wanting to perform globally. Designed platform components using
Terraform, Go, and Node; developed support tooling using Bash, Python, and Azure CLI. De-risk the
platform by addressing security vulnerabilities and ensuring the platform is PCI compliant.

api/devops software engineer @ Harvard Medical School (2 years)

Worked as part of the DevOps team to manage a 15k core CentOS HPC cluster. Designed and implemented
Python-based security scanning pipeline to securely deploy & run Apptainer images via SLURM.
Coordinated cross-team emergency patching eﬀorts. Collaborated with researchers and engineers across
3-letter institutions to deliver secure research infrastructure. Built CI/CD Pipelines with GitHub, Jenkins,
to automate code builds, testing, and deployments. Wrote Puppet modules to manage configuration of HPC fleet.
Wrote custom Puppet module & Python scripts to automatically remediate Tenable findings.

full-stack software engineer @ Global Prior Art (3 years)

Used Django, Celery, Selenium grid, and AWS API Gateway for IP rotation to scrape USPTO patent PDFs,
apply CV for data extraction, and generate reports with relevant claims, saving employees 4-5 hours daily.
Wrote E2E black-box/fuzzing unit tests. Automated on-premise deployment via Github Actions and Ansible.

maintainer @ Zinit (5 years)

Develop and maintain a zsh plugin manager on Github with 4k stars. Implemented unit tests,
containerization, bug fixes, and new features.
See: https://github.com/zdharma-continuum/zinit

contributor @ Open-source documentation (5 years)

Contributed hundreds of documentation corrections and enhancements to 400+ open source projects.
by Raviteja_ | 2026-02-05 16:13:56+00:00
3 Tools you are overpaying for:

- Prompt Compressor ($10/mo)

- PII Redactor ($20/mo)

- Fake Data Gen ($15/mo)

Risk Mirror does all 3 in the browser.

The Text Suite is $0 right now.

No card required.
No logs kept.

Try for free. Feedback would be great !
by stego-tech | 2026-02-05 16:14:05+00:00
This is not a new or novel idea. I proposed such a thing at the start of my career in tech, and repeatedly propose it when I feel I have ears willing to listen.

The problem - and I do mean the problem, the only problem - is the threat this poses to power dynamics in the organization.

Compliance people do not benefit from their outputs being readily searchable and indexed like this, because it means there’s less need for them. Executives and leaders do not benefit from this, because they’re increasingly hired specifically because of their knowledge of various compliance frameworks. The people whose power derives from this knowledge and expertise are overwhelmingly the people in charge of the company and its operations, and they benefit more from blocking it outright than implementing it.

Don’t get me wrong, I love this idea. I love transparency in organizations, because it makes it infinitely easier to identify and remediate problems beyond silo walls. It’s peak cooperation, and I am all for it.

I also do not see it happening at scale while competition is considered the default operating mode of society at large. That said, I would love to work for an organization placing importance on this degree of internal cooperation. I suspect I’d thrive there.
by djtango | 2026-02-05 16:14:12+00:00
Did you watch the video? Her expressivity and musicianship is far beyond many adults..
She had also just finished a concerto playing with an orchestra

EDIT Also with band music or non-classical music so much of it is to do with platform and distribution, and 7 year old prodigies don't get much interest outside of talent shows or Youtube. Justin Bieber (as mentioned in another reply) though is a good example of someone who did at age 12
by louiereederson | 2026-02-05 16:15:16+00:00
This is a crowded solution space with participation from cloud, SaaS and data infrastructure vendors. All of these players and their customers have been trying to operationalize LLMs in enterprise workflows for 2+ years. Two big challenges are business ontology and fitting probabilistic tools into processes requiring deterministic outcomes. Overcoming these problems require significant systems integration and process engineering work. What does OpenAI have that makes them specifically capable of solving these problems over Azure, Databricks, Snowflake, etc., who have all been working on these problems for quite a while? I don't know if the press release really addresses any of this, which makes it seem more like marketing copy than anything else.

The question of lock-in is also a major one. Why tether your workflow automation platform to your LLM vendor when that may just be a component of the platform, especially when the pace of change in LLMs specifically is so rapid in almost every conceivable way. I think you'd far rather have an LLM-vendor neutral control plane and disaggregate the lock-in risk somewhat.
by antonvs | 2026-02-05 16:15:34+00:00
> 3) New engineer comes in and panics

> 4) Ends up using a "managed service" to relieve the panic

It's not as though this is unique to cloud.

I've seen multiple managers come in and introduce some SaaS because it fills a gap in their own understanding and abilities. Then when they leave, everyone stops using it and the account is cancelled.

The difference with cloud is that it tends to be more central to the operation, so can't just be canceled when an advocate leaves.
by rsynnott | 2026-02-05 16:15:39+00:00
> Really, stop reading everything except blog posts on HackerNews.

Pft, that is amateur-level. The _real_ 10x vibecoders exclusively read posts on LinkedIn.

(Opened up LinkedIn lately? Everyone on it seems to have gone completely insane. The average LinkedIn-er seems to be just this side of openly worshipping Roko's Basilisk.)
by JALTU | 2026-02-05 16:15:39+00:00
I'm a manager too, but I'm also the new guy pushing the solution to a human problem: work management. SMAR, ASAN, MNDY, etc. Not only do people not want to be responsible for it (and in some cases simply be "not responsible"), not only is the internal solution "too time consuming", the only answer thus lands on hiring external consultants to implement and maintain massively-overkill-$olution$ in $aa$ like CRM, NOW, etc. which as you know, do not solve the same problems as the aforementioned SaaS.

"Now that I'm in management, I 100% get it."
100% and win or lose I am still going to fight it...
by aed | 2026-02-05 16:15:46+00:00
These are both amazing! And I want to encourage you to do a Show HN. I think showcasing things people are building with AI is good. I'm actually very close and putting the polishing touches on something I'm building that will allow people to play Micropolis over API/MCP so you can watch agents build cities (mostly terribly, but it's quite fun).
by mailguy | 2026-02-05 16:16:36+00:00
Unfortunately, it's less a Zendesk thing and more of the end user deciding to turn off the security features to make it easier for their users to use. SPF/DKIM signing happens on all outbound mail I get from Zendesk. On the inbound email, SPF/DKIM/ARC verification is on by default but people keep turning it off. That's before weak spots like chat come in where the customers turn off captcha and just let any email get entered in.

Unfortunately, too many company admins keep saying "we don't want our customers to have to be configured correctly, we might miss a message from them" and disable all the built in protections. Hopefully the option to disable protections will go away soon.
by fc417fc802 | 2026-02-05 16:16:47+00:00
That was an interesting read. However it doesn't look like small scale DIY at a high quality level would be particularly expensive in terms of tooling? Only in terms of time and personal experience.

Ball mills are trivial to DIY - electric motor, belt drive, couple pieces of copper tubing, drill some holes in a wooden frame, use large metal coffee cans, throw some ball bearings in.

Calcination is also easy. 1000 C is not a difficult temperature to deal with. You can hit that using plain old nichrome wire. You will need to purchase a few ceramic bricks of course.

The only slightly tricky step I'm seeing is sintering. The nickle-zinc option mentioned in the article will be substantially easier (lower temperature, oxygen atmosphere) but the required temperature still pushes up against the limits of nichrome wire. Given that propane can get you to the vicinity of 1900 C and tanks of that are sold at the grocery store (at least where I live) I'm going to say this step is also cheap and easy to DIY.

The real issue is that you can't do this at home if you live in high density housing. You will need a shop or a small back yard.
by dorianzheng | 2026-02-05 16:17:10+00:00
I think you basically answered the entire question
1. Our fundamental assumption is: anything that hands control to an agent/skill is potentially compromised (especially if it touches the web / parses docs). So we isolate that work in its own Box with least privilege: minimal mounts (prefer read-only), no ambient secrets, tight CPU/mem limits, and only the network access it actually needs.
2. BoxLite doesn’t try to solve inter-agent “data trust” / prompt-injection by sanitizing content. What it does do is make sure untrusted code can’t hurt the host, and that sensitive local info doesn’t leak (i.e. it reduces blast radius). If you want semantic safety between agents, you still need boundary hygiene patterns (structured outputs, extraction/validation steps, etc.).
by Terretta | 2026-02-05 16:17:42+00:00
> I'm working on an open source project for security policies/processes/standards that map back to underlying frameworks (e.g. SOC 2, GDPR, ISO 27001, etc.) Docs are Markdown with YAML frontmatter metadata, interlinks generated automatically, site is published via GitHub actions.

> Would love to know if others find it useful or have built similar systems.

Yes, to both for over a decade now, and by now there are many so one doesn't need to rewalk the whole path, some are developed in open on GitHub.

Commercial firms have built on that for live monitoring of the mappings, although don't scratch at that too hard, it's generally mostly (a) self-selected subsets of controls, and (b) manually self-reported at the end of the day.

Product examples: https://delve.co or https://safebase.io/products/trust-center

Applied example: https://trust.openai.com

Have you Googled this or talked to large firms (e.g. banks) that care about avoiding footfalls with regularly scheduled regulator exams? Writing your own shows you grok the concept, many need (well paid!) help applying something off the shelf or from OSS.
by serf | 2026-02-05 16:17:58+00:00
a primary source is not inherently the accurate one, and collab tools like wikipedia allow for more sources -- this makes the difference.

yeah it's game-able, and a bad actor can ruin work, but we're comparing it to a literal singular gospel source of information from a three letter agency.

p.s. I noticed I used an em dash, appropriately or not. i'm leaving it in. I like it. maybe im turning bot. changing the way I speak/type to avoid being taken that way irks me to hell.
by dorianzheng | 2026-02-05 16:18:12+00:00
+1. That’s basically what I want too: npx skills but for Python.
For now BoxLite is the isolation/runtime layer; the “skills registry + one-liner runner” is a thin wrapper we can add (e.g. pipx boxlite && boxlite run <skill>). If you have a preferred UX, I’m all ears.
by ineedasername | 2026-02-05 16:18:51+00:00
There’s plenty of software that does this sort of thing, often industry specific but plenty that aren’t. You don’t see it “as code” in the raw like this article wants mainly because a company doesn’t deal with this information in such a non-integrated way, they do so as part of a more integrated whole. Monolithic ERP suites are probably the best example, and when done well it really does make a whole host of things easier and more seamless, like compliance modules that run defined routines that track with policy as implemented in operational modules.
by renewiltord | 2026-02-05 16:18:57+00:00
You’re correct. Any statement by HN users that something is useless has no value because they say that about useful things too.

Moltbot has the shape of the future but doesn’t feel like it to me. Sort of like Langchain once was. Demonstrated some new paradigm shift but is itself flawed so may not be the implementation that lasts. Time will tell.

The only thing here to say is “put it in a VM and try it”. It’s easy to try.
by SAI_Peregrinus | 2026-02-05 16:19:39+00:00
Linux doesn't really have any distinction between the desktop and underlying OS components in userspace and anything else in userspace. Linux is quite userland-agnostic, and distros have traditionally mixed user software with distro-managed software. You shouldn't use `sudo` to install software by default, your package manager should allow installing software for just your user. Software installed for the system could then be the only software allowed to mark itself as required for interactivity. You could do that manually to other software if you had root access, but "normal" user software installs with the package manager couldn't do so since they wouldn't get root access.

That'd require some new capabilities added, and some substantial shifts in how distro maintainers & users operate, so it's extremely unlikely. It's much closer to how things like Android operate, though still not quite as secure as giving each application its own user & dedicated storage for data.
by MisterTea | 2026-02-05 16:19:42+00:00
The prototypes might be milled and/or produced via additive manufacturing (3D printing.) In production the heads are likely formed via stamping. Here's an old video I remember watching as a kid (Unfortunately quite pixelated) of the Robertson screw being manufactured which has a tapered square profile for the bit: https://www.youtube.com/watch?v=Td7GjAMAY7Y (The Acme School of Stuff was awesome for its time and still is.)
Show HN: Resilient RAP – A self-healing pipeline for telemetry using embeddings
by tarekclarke | 2026-02-05 16:19:45+00:00
I spent some time building a prototype to handle schema drift in high velocity data. It is called the Resilient RAP Framework and it uses semantic embeddings to fix broken data streams on the fly.

I tested it by feeding it F1 telemetry and then switching to clinical ICU data to see if it could map different fields without manual help. It successfully mapped drift across domains, like matching kph to km/h in racing data and resolving pulse oximetry to oxygen saturation in a health context.

The repo hit about 600 clones on GitHub this week. I'm interested to see if anyone else is using agentic recovery for ingestion or if there are better ways to handle this at scale.
by Aurornis | 2026-02-05 16:19:58+00:00
One of the biggest problems with the self-hosted situations I’ve seen is when the senior engineers who set it up leave and the next generation has to figure out how to run it all.

In theory with perfect documentation they’d have a good head start to learn it, but there is always a lot of unwritten knowledge involved in managing an inherited setup.

With AWS the knowledge is at least transferable and you can find people who have worked with that exact thing before.

Engineers also leave for a lot of reasons. Even highly paid engineers go off and retire, change to a job for more novelty, or decide to try starting their own business.
by AlwaysRock | 2026-02-05 16:20:21+00:00
Not exactly the same but I wish copilot/github allowed you to have two plans. A company sponsored plan and your own plan. If I run out of requests on my company plan I should be able to use my own plan.
Likewise, If I have 1 github account that is used for work and non work code, I should be able to route copilot to use a company or personal plan.
by datsci_est_2015 | 2026-02-05 16:20:22+00:00
I’ll admit to being misinformed on occasion, and greatly appreciate the opportunities to learn and be corrected.

Dishonest, though? To what end? If anything, the anonymity of the internet allows me to test my more weakly-held fringe beliefs and adjust them as I receive feedback.

I get the impression that you’re not well-informed enough to have a meaningful conversation about these difficult topics, though you may hold an opinion with significant conviction. Sorry.
by ssl-3 | 2026-02-05 16:20:23+00:00
To me, it's a question of time and money efficiency. (Time is money.)

I can buy a NAS, whereby I pay money to enjoy someone else's previous work of figuring it out. I pay for this over and over again as my needs change and/or upgrades happen.

Or

I can build a NAS, whereby I spend time to figure it out myself. The gained knowledge that I retain in my notes and my tiny little pea brain gets to be used over and over again as needs change, and/or upgrades happen. And -- sometimes -- I even get paid to use this knowledge.

(I tend to choose the latter. YMMV.)
by naasking | 2026-02-05 16:21:36+00:00
Sure, instruction tuned models implicitly plan, but they can easily lose the plot on long contexts. If you're going to have an agent running continuously and gathering memory, then plan decomposition, persistence and error recovery seems like a good idea, so you can start subagents with fresh contexts for task items and they stay on task or can recover without starting everything over again. Also seems better for cost since input and output contexts are more bounded.
by randusername | 2026-02-05 16:21:43+00:00
I haven't seen mention of macOS Automator or AppleScript yet.

15 years ago or so almost everything you wanted to do on a Mac GUI already _was_ scriptable.

Shortcuts is better than nothing, but unsatisfying.

I read this less as a fumble and more as a frustrating sign of the times. Automation is not powerful because powerful automation is a maintenance and malfeasance liability only valued by a tiny minority.