MurphyA/hacker-news huggingface dataset:
by saghm | 2026-02-10 13:33:16+00:00
Not being able to automate something is not the same as not being able to verify at all. It sounds like the parent commenter is arguing that at least some of the clients listed are not worthy of this trust because (either intentionally or due to developer error) they don't actually hold up to scrutiny. Obviously they're just one person and their opinion might not be representative but it's hard to argue that if some random user is expected to have enough time to try out various clients and figure out which ones work or don't that the official people in charge of making the recommendations of clients should probably be able to find the time to as well even if it's just a volunteer that they, well, you know...trust.
by sdf2erf | 2026-02-10 13:33:16+00:00
What youre pointing at is the trade off between concentration of understanding vs fragmented understanding across more people.

The former is always preferred in the context of product development but poses a key person risk. Apple in its current form is a representation of this - Steve did enough work to keep the company going for a decade after his death. Now its sort-of lost on where to go next. But on the flip side look at its market cap today vs 2000.
by windexh8er | 2026-02-10 13:33:44+00:00
If we revisit these posts in a week, a month and then a year my question is: was it useful? Are others building off of this, still?

My is answer right now is: you can't answer that question yet and the fact that you are looking for immediate validation showcases you're just building random things. Which is great if that's what you want to do. But is it truly novel or compelling? Given you just move on to the next thing, there seems to be a lack of direction and in that regard I would say: no.

Just because you're doing more doesn't mean anything unless it's truly useful for you or others. I just don't think that's the case here. It's a new of form of work hard and break things. And while that can have net positives, we also are very aware it has many net negatives.
by JKCalhoun | 2026-02-10 13:34:44+00:00
Growing up, my American-addled brain could not comprehend putting the "good of others" above my own empowerment. The focus on the individual (me, I suppose) was a thing I was, for some reason, proud of about the U.S. (or perhaps "the West" by extension?).

Only as an adult, with a wife, kids (and perhaps a better perspective of the world?) did I realize how foolish I was growing up. And I see more and more how we, as a nation, constantly pay the price for that mindset.
by patwolf | 2026-02-10 13:35:02+00:00
I found that writing rules was tricky when I didn't know exactly what content would be in a spam/promo notification. I ended up having claude code up a filter that asks an AI to review the notification first, which seems to be working well.

Thanks for making it open source. I've been wanting something like that for a while, but I'd been putting it off since I didn't want to learn the underpinnings of the notification service.
by zokier | 2026-02-10 13:35:08+00:00
While deciday is workable hour replacement and milliday is decent minute replacement, the metric time would be missing decent seconds replacement. The next named prefix, microday, is 86ms which is very small for humans.

Of course it is not insurmountable problem, but for lot of other units milli- tends to represent the lower end of "human scale"; millimeters, milligrams, milliliters, milliwatts, etc are as small as most people will ever use in day-to-day life.

In some ways it would be more convenient if the base unit would be e.g. 1e-4 days (or some other power of 10) so day would be 10 kilos. Understandably it would be lot less elegant but more practical. Deci- would be .86 seconds which is kinda nice.
by ghm2199 | 2026-02-10 13:35:35+00:00
What I don't understand is why not have designated actors/ombudsman like notaries in the society that can verify your age/id without anyone knowing what it's for.

One can easily implement a nationwide system like this. You can trust people in your own community. There are no central govt actors. In such a system no one has any knowledge of which service you are proving your identity/age for and the cryptographic approval can be done without any ids being exchanged. The input to the ombudsman is a hash you provide which he can sign with his key and send to a server, that can ask the ombudsman: "this thing you are signing is for age verification > 18, check persons ID and press confirm if that's the case". The ombudsman presses confirm after checking the id and you are done. Every city municipality can elect a local councilman/notaries to do this, for a small fees.
by hiccuphippo | 2026-02-10 13:35:51+00:00
Kids can create accounts only at age 13+, adulthood is at age 18 (at least in my country) which means any account older than 5 years should automatically be marked as an adult's account. Please tell me that's the case.

If you still require an ID for those accounts, that means you don't really care about age verification, you just want to tie people to a government ID.
by t0dorakis | 2026-02-10 13:36:08+00:00
hey hn, i built murmur. its a cron daemon that runs claude code
sessions on a schedule.

you write a HEARTBEAT.md file in your repo with yaml frontmatter
for config and a prompt below:

---
name: competitor watch
cron: 0 9 * * MON
agent: claude-code
model: sonnet
timeout: 10m
---

fetch https://competitor.com/changelog.
compare against ~/tracking/competitor-last.md for new entries.

for each new feature, check our issue tracker and think about
whether it makes sense for our product given our roadmap.
only if it genuinely adds value: open an issue with reasoning.

update competitor-last.md. if nothing new, HEARTBEAT_OK.

murmur reads the file, runs claude on schedule, claude uses its
tools to do the work. the file is version controlled, similar
format to skills files.

you could run claude in github actions too but murmur runs on your
own machine. a mac mini or raspberry pi in the corner, full access
to your local files and network.

got the idea from openClaw's heartbeat but didn't want a full
platform, just the scheduling part.

bun + effect-ts, single binary, no cloud.

brew install t0dorakis/murmur/murmur

or: npx skills add t0dorakis/murmur --skill heartbeat-cron

i run about 6 of these for competitor analysis, issue triage, weekly
paper research, daily briefs. curious what pepole would use it for.
by nradov | 2026-02-10 13:36:14+00:00
I never understood this concern about the death of literary criticism. So what. Regular books (not textbooks) are so cheap now that for most middle-class consumers if we accidentally buy a crappy one it's no great loss. And if we want to discuss it with others there are plenty of book clubs and online forums for that. We don't need some anointed critic to tell us what to think.
by throw_a_grenade | 2026-02-10 13:36:16+00:00
Yes, that's all right, there's already a requirement that they submit to one Google CT log and one non-Google CT log. They thought about it already. The playbook I mentioned they've been rehearsing contains specific threat against backdating certs, they say they'll distrust immediately if they detect, and they have means of detecting backdating on significant scale (esp. for LE, where they submit 100% issued certs, not just the subset that is intended for consumption with Chrome).
by paulcole | 2026-02-10 13:36:21+00:00
The kind of person who gets pushed around by their reports like this will end up walking by everyone’s cubicle a few times a day because they’re afraid to tell the bad employees why the good employee gets special treatment.

Read the guys story again. He wasn’t a manager. He was at best a babysitter.

If the guy reading novels is that valuable, fire the pushover manager and pay somebody $10/hr to walk by his cubicle.
by rybosworld | 2026-02-10 13:37:19+00:00
We've gone from "it's glorified auto-complete" to "the quality of working, end-to-end features, is average", in just ~2 years.

I think it goes without saying that they will be writing "good code" in short time.

I also wonder how much of this "I don't trust them yet" viewpoint is coming from people who are using agents the least.

Is it rare that AI one-shots code that I would be willing to raise as a PR with my name on it? Yes, extremely so (almost never).

Can I write a more-specified prompt that improves the AI's output? Also yes. And the amount of time/effort I spend iterating on a prompt, to shape the feature I want, is decreasing as I learn to use the tools better.

I think the term prompt-engineering became loaded to mean "folks who can write very good one-shot prompts". But that's a silly way of thinking about it imo. Any feature with moderate complexity involves discovery. "Prompt iteration" is more descriptive/accurate imo.
by a3w | 2026-02-10 13:37:28+00:00
Completely not my experience:

I have lots of Signal contacts I cannot phone, since the phone number is never shared by default. Not even the signal contact is shareable. It is way too privacy focused to work easily.

i.e. I cannot even match two people I have in contacts unless one of them sends me their hidden username. Then they can talk to one another.

And people in my contacts don't use their full name. In groups, they often share the first name, making it confusing as hell. And many use an arbitrary nickname, most often the abbreviated first name I think but sometimes truly random stuff, and might even change that yearly with no mapping in my history to tell me who they were.
by ReptileMan | 2026-02-10 13:37:37+00:00
>Тhe EUDI Wallet notifies the user of a pending request to prove their age, including: the name and identity of the requesting party.

>She consents to share the requested info and her wallet uses verifiable credentials issued by a trusted authority (e.g., national civil registry) to generate a cryptographic proof that she meets the age requirement.

I am fairly sure that here is enough info to be deanonimized by the authorities issuing the EUDI and the wallet app developers.
by prng2021 | 2026-02-10 13:37:46+00:00
“You never needed 1000s of engineers to build software anyway”

What is the point of even mentioning this? We live in reality. In reality, there are countless companies with thousands of engineers making each piece of software. Outside of reality, yes you can talk about a million hypothetical situations. Cherry picking rare examples like Winamp does nothing but provide an example of an exception, which yes, also exists in the real world.
Show HN: Darna – Atomic commit validator for Go
by darccio | 2026-02-10 13:38:33+00:00
Lately, while experimenting with agentic coding, I kept running into the same pain point: committing generated code cleanly. Quick prototypes often turn into large diffs that are hard to review and even harder to split into sensible commits.

After watching a FOSDEM talk on efficient Git workflows [0], I started exploring the idea of “atomic commits” for Go. The result is Darna.

Darna is a small CLI tool (usable as a Git hook) that validates whether your staged changes form a valid, working fileset. It works down to the line level, so partial staging is fully supported, and it can also tell you which additional files need to be staged (as whole files) to make a commit truly atomic.

If you’re dealing with large diffs, partial staging, or AI-assisted code generation, this might be useful for you too. For extra confidence: all commits in the repo are validated by Darna itself, and the commit messages were reviewed (not auto-generated) with help from Claude Code.

Feedback very welcome.

0: https://fosdem.org/2026/schedule/event/3VNNBK-efficient-git-...
by pdpi | 2026-02-10 13:39:05+00:00
The issue is a fair bit subtler than that. The analogous question here isn't "do violent video games induce violent behaviour in the general population?" but rather "do violent video games induce violent behaviour in people who already have a propensity for violence?"

Or, even more specifically, "does incredibly realistic-looking violence in video games induce violent behaviour in people who already have a propensity for violence?". I'm not talking about the graphics being photorealistic enough or anything, I mean that, in games, the actual actions, the violence itself is extremely over the top. At least to me, it rarely registers as real violence at all, because it's so stylised. Real-world aggression looks nothing like that, it's much more contained.
by krapht | 2026-02-10 13:39:50+00:00
Why not have a megatopic for things that don't need their own topic?

Topics are necessary when you start having a huge Zulip server, 100+ people. There's so much noise --- dividing things by channel is too coarse.

I participate in several open source Zulip servers and it reminds me of a better IRC. It's a lot more ergonomic that Gitter or Discord.
by mmaunder | 2026-02-10 13:39:52+00:00
Ezekiel 23:2–21 is CSAM by the same standard.

https://www.biblegateway.com/passage/?search=Ezekiel%2023%3A...

Criminalizing fictional expression solely on the basis that it depicts sexual exploitation of a minor, absent any real victim, collapses a long-recognized legal distinction between depiction and abuse and renders the law impermissibly overbroad.

Canonical texts routinely protected and distributed in Australia, including religious and historical works such as the Book of Ezekiel, contain explicit descriptions of sexual abuse occurring “in youth,” employed for allegorical, condemnatory, or instructional purposes. These works are not proscribed precisely because courts recognize that context, intent, and literary function are essential limiting principles.

A standard that disregards those principles would not only criminalize private fictional prose but would logically extend to scripture, survivor memoirs, journalism, and historical documentation, thereby producing arbitrary enforcement and a profound chilling effect on lawful expression. Accordingly, absent a requirement of real-world harm or exploitative intent, such an application of child abuse material statutes exceeds their legitimate protective purpose and infringes foundational free expression principles.
by dcre | 2026-02-10 13:39:59+00:00
People often describe the models as averaging their training data, but even for base models predicting the most likely next token this is imprecise and even misleading, because what is most likely is conditional on the input as well as what has been generated so far. So a strange input will produce a strange output — hardly an average or a reversion to the mean.

On top of that, the models people use have been heavily shaped by reinforcement learning, which rewards something quite different from the most likely next token. So I don’t think it’s clarifying to say “the model is basically a complex representation of the average of its training data.”
by jorvi | 2026-02-10 13:40:04+00:00
No, because a Dutch citizen in the EU is paying a lot more into the system than a French citizen in that same EU.

If "per country" is the logical way to compare it, then the Dutch (and all other small countries) are severely lacking. If you compare it per capita, then the citizens of those countries I named are already carrying a ridiculously undue burden.
by sebstefan | 2026-02-10 13:42:04+00:00
How much? 2 bucks per user?

Their paid users shell out 3 a month...

And then you think of the real world

> secretly selling your IDs data behind your back, they have to account for that revenue in their books, put it in their privacy policies or do it illegally, it's weak to whistleblowers, third parties get breached all the time (as well as yourself), and you have to trust the people you're selling this to. It's not credible.
by pierreseck | 2026-02-10 13:42:10+00:00
I built this tool because comparing cloud GPU pricing to buying hardware has become increasingly messy for AI workloads. I wanted a way to input real workload parameters (tokens/sec, request patterns, model size) and see where the break-even point actually is.

How it works: it models throughput and utilization, then compares current cloud pricing (AWS/GCP) against ownership costs for on-prem GPU clusters over time.

Free/Paid: the online diagnostic is free and gives the core recommendation. I charge $99 for a detailed PDF with 36-month cash-flow projections and charts, mainly for teams that need to justify decisions to a board or CFO.

I’d really appreciate feedback on the assumptions and modeling approach.
by timmg | 2026-02-10 13:42:35+00:00
What I find very interesting about it is how much data they have (and are able to collect).

I'm personally someone who is less worried about "privacy" for this sort of data. But I know lots of other people feel differently.

To me, this is a great example of the "greater good" for data sharing. But it is also a great example of responsible use of data.
by lucastytthhh | 2026-02-10 13:42:49+00:00
I was scammed out of $154,000. I spoke with a Russian man to whom I had sent money in Bitcoin and almost lost it all. However, Mr. Dennis, who was just starting out, intervened in a timely manner and recovered $154,000 worth of Bitcoin for me. He really does a great job; I've recommended him to several friends and colleagues, who have become satisfied customers. He's been a huge help in my trading business. You can contact him. Hacking and Fund Recovery. He's the best and has a wide range of skills in recovering and exposing scammers. I'm glad I got my money back; there's no shame in being a victim of one of these sophisticated and predatory operations. By this, you can recover some or all of your lost funds and prevent fraudulent attacks. To recover your ill-gotten Bitcoin funds, clear or erase your criminal record, and get Bitcoin mining underway, contact TRUSTWAVE CYBERDEFENSE at this email address: Trustwave.cyberdefense@gmail com
by wongarsu | 2026-02-10 13:42:54+00:00
The arguments for and against end up similar to those for and against banning drawn or AI generated depiction of csam. No actual children are harmed, it's artistic expression, moving the topic out of sight won't solve it, and any ban will also catch works that speak out against sexual abuse. On the other hand any such content risks playing into pedophilia fetishes (and some content simply does so very openly), and so far research is (very lightly) in favor of withholding any such content from "afflicted people" rather than providing a "safe outlet". Though this is debated and part of ongoing research
by pavlov | 2026-02-10 13:42:56+00:00
This is one of the things that makes sci-fi stories set on Moon and Mars colonies more interesting than generic space opera with abundant/unexplained resourcing.

Unfortunately the Moon/Mars genre has been tainted by Heinlein’s “Moon is a Harsh Mistress” which recognized this question and solved it by making everyone a true libertarian who would rather nobly suffocate than steal air. When a criminal element shows up, it’s a racial stereotype shipped from Earth and the enlightened lunar dwellers simply kick him out and proceed with their zero-crime paradise of private property. Ridiculous book but understandably influential in its era.
by hugoventures1 | 2026-02-10 13:44:04+00:00
After watching OpenClaw hit 179K GitHub stars while accumulating 5 CVEs, and 341 malicious marketplace skills, and exposing 42K instances in 10 days, I spent 3 hours building AgentVault.

The Issue
The research conducted by Penligent, Zenity, and CrowdStrike reached the conclusion that prompt injection is architecturally unsolvable: you simply cannot prevent a bad prompt from reaching the model. However, the subsequent malicious actions could be stopped by you.

What AgentVault Offers.
- The file system interception is deep which could catch when the agents read ~/.aws/credentials.
- Prevents unsafe commands – blocks the use of ‘rm -rf’ and more.
- Human actions require approvals – all risky actions require your OK.
- Monitors your network activity – logs any outbound connections.
- SQLite database of everything. Comprehensive audit trails.

The method consists of allowing prompt injection to succeed, but catching what it attempts to perform. When Agent Vault identifies a Google doc as malicious that tells the agent to exfiltrate your SSH keys it blocks the file read. It also notifies you.

live demo
GitHub: https://github.com/hugoventures1-glitch/agentvault.

Developed using Node.js/TypeScript and a Next.js dashboard with SQLite audit log integration. The execution layer of OpenClaw is wrapped with a proxy that hijacks system calls.

This is day 01. What would it take to make this useful for your setup?
by Semaphor | 2026-02-10 13:44:09+00:00
All the people I know who joined big servers, have nitro and do it for their emotes. My impression of really big servers is that they also skew really, really young.

That said, I agree that not having to create a new account is a huge barrier of entry removed. A lot of the servers I’m in would probably not be a thing, or at least be even smaller, if everyone had to create an account to join.
by 827a | 2026-02-10 13:44:28+00:00
This might be an unpopular opinion, but imo this is a directionally correct decision from Discord. I feel that it's important that there exist privacy preserving, anonymous communication platforms; not that every platform must have or must not have these qualities.

Platforms need to adapt to how they're used (or how they want to be used). The amount of child exploitation that happens on Discord should make any civilized person working in that company uncomfortable, and its natural and good to want to do something about it, not out of external or governmental pressure, but because you yourself can see the dashboards and logs, and can see what's happening.

There's a needle of difference between a government mandating identity verification, and a private organization saying this is how we want to run our company. Threading that needle is living in a free and safe society. If we can't thread it, and we fall to one side or the other, then you have to choose whether you prefer safety or freedom. Personally, I'd rather have both.
Show HN: Sign Any PDF Free – No account, no watermarks, no limits
by detroitwebsites | 2026-02-10 13:44:55+00:00
I got tired of paying $15-50/month to sign PDFs, so I built a free alternative.

How it works: Upload PDF, draw or type your signature, place it, download. Done.

No account required. No document limits. No watermarks. No "you've used your 3 free signatures" gotchas.

Monetized through ads (same model as Photopea).

Tech: Node.js + Express, pdf-lib for manipulation, vanilla JS frontend. Processing happens client-side for privacy.

Happy to answer questions about the implementation or business model.
by tedggh | 2026-02-10 13:45:22+00:00
I spent some time in China working in manufacturing. I remember talking to some of the guys there. As it was explained to me, everything they had, their home, kids school, wife’s job was owned by the employer. Meaning if you lose your job you lose everything. I remember how incredibly difficult was to get things done there, no one wanted to make decisions. That was many years ago, maybe things have changed.
by Tade0 | 2026-02-10 13:45:46+00:00
My region hosts a large Korean manufacturer and to me reality is actually simpler: rank-and-file employees are locals, management is Korean.

Those of my friends who worked for Korean companies generally agree that decision makers are not interested in the local culture beyond whether people belonging to it will accept certain rules.

It so happens that my country has a culture of overwork, so we're compatible enough.
by ferguess_k | 2026-02-10 13:46:00+00:00
I always heard that individualism is centric to the American mind, but on the other hand, I found that American interests groups (corporations especially) are very good at "hunting" in a group. I talked to some mid-level policy-maker friends in China and they recognize that the American corporations are very good at working as a "wolf pack", while the Chinese ones usually fight each other -- you can see examples in Huawei versus Zhongxing when both are competing in foreign markets.