MurphyA/hacker-news huggingface dataset:
by quantiq | 2026-02-17 13:43:57+00:00
We hired some LLM cowboy developer externals that were pushing out a plethora of PRs daily and a large portion of our team's time at one point was dedicated entirely to just doing PR reviews. Eventually we let them go, and the last few months for us has been dedicated to cleaning up vast quantities of unmaintainable LLM code that's entered our codebase.

I think it's still early days, and it's probably the case that a lot of software development teams have yet to realize that a team basically just doing PR reviews is a strong indication that a codebase is very quickly trending away from maintainability. Our team is still heavily using LLMs and coding agents, but our PR backlog recently has been very manageable.

I suspect we'll start seeing a lot of teams realize they're inundated with tech debt as soon as it becomes difficult for even LLMs to maintain their codebases. The "go fast and spit out as much code as humanly possible" trend that I think has infected software development will eventually come back to bite quite a few companies.
Show HN: Mtb – An MCP sanity checker for vibe coding
by dbravender | 2026-02-17 13:44:14+00:00
I originally conceived of Make the Bed (named after the Calvin & Hobbes strip where Calvin spends all day building a bed-making robot that never works instead of making his bed) as a tongue-in-cheek response to some of the vibe coded projects I've seen recently. To my surprise it works as intended and prompts users to consider many factors (existing solutions, maintenance costs, etc.) before starting a new project or feature. It also shows complexity metrics via scc.

Check out the demo prompts and responses listed in the README: https://github.com/dbravender/mtb?tab=readme-ov-file#demonst...

Note: Sometimes you have to explicitly ask the LLM to consult mtb but it often does this on its own after reading the tool descriptions.

The dogfooding section shows the results of mtb's tools run on itself: https://github.com/dbravender/mtb?tab=readme-ov-file#eating-...

Contributions are welcome but I'm looking to keep this as light as possible.

And yes, mtb was itself vibe coded. The irony is not lost on me.
by fuzzfactor | 2026-02-17 13:44:18+00:00
That's a meaningful sign to me too, except there are some brilliant tech people who mainly need all the help they can get just with their English.

Even before AI got so strong, some of the translations were fairly abnormal in their own way.

>The post body is supposed to be part of the human connection element!

I really think this is the best too :)

Maybe for the non-English speakers, or anyone really, if a project means a lot, have a number of people who are smart in different ways look over the text a number of times and help you edit beforehand.

To make sure it's what you the human want to really say at the time.

That would be the pg way.
by xiphias2 | 2026-02-17 13:44:22+00:00
,,Many people tell me I need to lift weights to lose weight.''

This is stupid. All you need to do is to get used to being hungry to the point of losing 0.1kg/day and measure yourself a lot (I'm doing the same).

Actually for me working out increases my appetite, and I feel like I have to eat so thar the gym session doesn't go wasted.
by thunky | 2026-02-17 13:44:35+00:00
> I apologise for you misunderstanding my example as a strict definition?

My point is that I believe you have probably misinterpreted the author and used that as a basis to critisize them, unfairly in my view.

We don't all need to indulge (hey look another one) your personal perspective of how that word should be used.
by b3lvedere | 2026-02-17 13:45:02+00:00
I come from a time when people had to use 1 to a maximum of 48 kilobytes for their entire computer. Later on i once went to Helsinki to watch with my own eyes what people can program in a restriction of 4 to 64 kilobytes. Computers have amazed me, but people who used them, have amazed me a lot of more times.

I wasn't saying it'll be good and that the good guys win, but a lot of insane creativity to circumvent restrictions will pop up.
by tsimionescu | 2026-02-17 13:45:04+00:00
I think the advice that everyone who is overweight or obese really needs is to experiment with different ways of reducing their food consumption while managing their hunger and cravings, and find out a method that works for them. I don't think there's any universal solution. Even saying "eat less simple carbs, those make you more hungry because of this and that chemical pathway" is not good universal advice, because food consumption is not strictly tied to hunger in all people. It is up to you as the one who wants to lose weight to experiment and figure out what motivates you and works for you longer term.

For example, I don't feel satisfied with my meal if I don't feel slightly full. So, what has worked for me is to generally have a single large meal per day, in which I will typically eat whatever I've been really craving since my last meal. In some days that might be steak and brocolli, in other days it might be a McDonald's meal, or some cake. When I get cravings, it's far easier for me to defer them to tomorrow's meal than it would be to just stop eating junk food entirely, or to eat half a burger and two fries from the bag. The exact opposite might be true for other people, and you won't really know until you've tried for yourself.

One thing I will note - I think one of the concerns of the poster you are replying to with focusing too much on enduring hunger is that it might lead some people to develop anorexia, which is indeed a huge problem, even when the person is really overweight (since their anorexia will not just go away once they've lost that extra weight, it will keep going until they get dangerously malnourished).
by vladeta | 2026-02-17 13:45:17+00:00
I've been working on making ecommerce stores AI-readable using Google's Universal Commerce Protocol (UCP), and I built what I believe is the first live product demo where you can actually see how AI shopping agents interact with real store data.
Demo: https://app.ucphub.ai
Most UCP resources right now are either spec docs or simulated playgrounds. This is different - it connects to a real WooCommerce store and shows you exactly what happens when an AI agent like ChatGPT or Gemini tries to shop your products.
What you'll see in the demo:

How AI agents present products with rich cards (images, pricing, ratings, stock status)
Real-time data pulled from an actual store catalog
Intent matching - type "lightweight hiking jacket" and see how the agent interprets and matches
Direct purchase links that send buyers straight to checkout

The problem we're solving: right now, about 97% of stores are invisible to AI shopping agents. Without structured UCP data, agents guess (badly) or skip your products entirely. The before/after difference is dramatic.
How it works:

Install our WooCommerce plugin
Add your API key
Your catalog is structured into UCP format
AI agents can now discover, compare, and recommend your products

Tech: WooCommerce plugin > UCP data layer > serves structured product data to any UCP-compatible agent (ChatGPT, Gemini, Perplexity, Claude, Copilot).
We're currently WooCommerce-only with more platforms on the roadmap. Happy to answer questions about UCP implementation, the protocol itself, or what we've learned about how different AI agents handle product data.
Try it: https://app.ucphub.ai
Landing page: https://ucphub.ai/ucp-demo/
by m4rtink | 2026-02-17 13:46:12+00:00
That is a very good point!

Still, at least in the short to medium term, there are many companies, institutions and individuals that are used to getting new hardware that is under warranty - developer hardware refreshes, store hardware updates and deployments, some schools and academic institutions that provide hardware to students or even just people getting a laptop for schools use.

I think people would be used to getting new hardware for all of these & might be pretty much left out cold without a machine or having to opt for a reused or resold machine without the necessary technical knowledge to support it themselves.
by iugtmkbdfil834 | 2026-02-17 13:47:49+00:00
~6 months here. In my case, it became almost a full daily driver ( putting corporate spyware on it would kinda defeat the purpose ). It is by no means perfect, but I can recommend it ( and I could not do the same with other phones that should have been better on paper -- linux phones like pinephone or purism ).
by kakacik | 2026-02-17 13:48:45+00:00
A quick question from potential buyer of next generation of pixel phones, since samsung keeps disappointing hard with their top line - is there any difference in quality between default photo app and what graphene os bundles with?

Pixel are supposed to be very good in photography, part hardware and part software, and my concern would be degradation of that software part. With small kids, there is nothing more important on phone for me than photos/video quality these days (apart from never going into apple ecosystem, I am just incompatible with that company' philosophy).

Or its just about slapping some commercial photo app (like I heard from other photographers is often done on apple to get most out of it, but forgot the name of the app) and not caring about this?
by ModernMech | 2026-02-17 13:48:54+00:00
> In 2007 (my senior year), I went to two major national science fairs.

I did the science fair circuit growing up from 7th through 12th grade, then coached HS students on projects when I was in college. Today I'm a judge for ISEF, which is happening shortly.

Frankly, the whole scene is a bit done by 12th grade, so I'm not really sure this person has enough experience doing fairs to say what's broken about them and how to fix them. It's really a middle school to early high school thing; if you're starting in senior year most of the best students are already set with results they will use to apply to colleges, so they stop doing fairs in senior year. 8,9,10 is the real heat.

It's also not the common case that a student is placed in a research lab and works on in-progress research, you see all kinds of students doing varied projects. I judge the CS field and yeah you get projects which are essentially "Me and my dad built a PC" (although I've never seen a volcano project). Others are like "Here's a robot I built" and it's cool but not really novel. Some of them have a giant board with binders upon binders upon binders and it's clear the kid was coached and worked at his mom's lab. The "consumer science" category of the fair grows every year.

But really no matter what, I find this to be true of all students at the fair:

> Science exploration driven by genuine curiosity is more open-ended than experiments that come in a box and test students on whether they get the right answer.

All the kids exhibit genuine curiosity and open-mindedness. Some of them are only capable of doing experiments that come in a box, but they're still curious. So I don't really know what the author is trying to say with this article. I don't know what the problem is and to the extent they articulate a problem it doesn't seem so severe. I'm all for changing up the science fair and evolving it and doing a new format, but I don't think they're especially lacking in innovative spirit as the author implies.
by gosub100 | 2026-02-17 13:48:57+00:00
Good thing the perp wasn't part of the Epstein class, otherwise they would have done all that work for nothing.

On a more serious note, there is a subreddit where police can post redacted pics of CSAM and they crowd source info on the background. I can't remember the name of it though.

They post godbolt style questions like "where is this beach/playground/parking lot", or ask what brand an object is. I don't know how much success they have had but it's a worthy cause and the more people who try, the higher their chances.
by ForHackernews | 2026-02-17 13:49:50+00:00
The main difference is that GrapheneOS prioritizes security hardening first and foremost (above usability or compatibility). /e/OS focuses on privacy (i.e. reducing data leakage to adtech) and usability over security.

To put it concretely, GrapheneOS recommends running all the proprietary Google apps in a locked "sandbox" so they can't read data on the phone outside the sandbox -- but obviously Google still gets to see everything you do in their apps. /e/OS tries to provide [largely but not entirely FLOSS] alternatives (e.g. their own Maps app, their own email, their own calendar) that make your phone usable out of the box without Google software.
by danebalia | 2026-02-17 13:50:28+00:00
I built Omniscient, a command history tracker for your shell. It captures every command you run, categorizes them intelligently, and makes them instantly searchable across machine migrations.

*What it does:*

- Captures every shell command with zero overhead (<10ms)
- Auto-categorizes by command type (git, docker, npm, etc.)
- Full-text search through your entire history
- NEW in v1.2.0: Contextual queries - filter commands by directory (`omniscient here`)
- Export/import for syncing across machines
- Privacy-first: automatic redaction of passwords/tokens

*Example:*

```bash
# What git commands did I use in this project?
omniscient here --recursive | grep git

# How did I deploy the backend last time?
omniscient search deploy --dir ~/services/backend

# What's my most-used docker command?
omniscient top 10 | grep docker
```

*The AI elephant in the room:*

Yes, this was built with AI assistance (Claude). I know that raises trust questions for a tool that captures your command history. Here's how I addressed that:

1. *100% Open Source*: Every line is auditable (https://github.com/daneb/omniscient)
2. *91 Automated Tests*: Comprehensive test coverage
3. *Zero Network Calls*: Grep the source yourself - all data stays local
4. *Security Audits*: cargo-audit on every commit
5. *Architecture Decision Records*: All major decisions documented
6. *Human Review*: Every AI-generated line was reviewed and validated

The AI helped with implementation, but humans made all architectural decisions, wrote tests, and validated everything. Full transparency: CONTRIBUTING.md documents the development process.

*Tech stack:* Rust, SQLite FTS5, zero dependencies on external services

*Privacy:* Everything stored in `~/.omniscient/`. No telemetry, no analytics, no network calls. You can audit the code yourself.
by clemlesne | 2026-02-17 13:50:49+00:00
TLS terminates at your CDN, load balancer, or WAF. After that point, request and response bodies are plaintexts. Cloudflare, AWS ALB, GCP -- they can all read your API payloads. For most production APIs, this is the reality.

hpke-http adds RFC 9180 HPKE encryption on top of TLS. It's a drop-in middleware for FastAPI (server) and aiohttp/httpx (client). Zero application code changes:

app.add_middleware(HPKEMiddleware, private_keys={...}, psk_resolver=resolve_psk)

That's it. Your existing routes, request.json(), return values -- all unchanged. Bodies are encrypted end-to-end between client and origin server.

What it does: encrypts/decrypts request and response bodies using X25519 + HKDF-SHA256 + ChaCha20-Poly1305. PSK mode binds each request to an API key. Counter-based nonces prevent replay attacks. SSE streaming and file uploads work with O(chunk_size) memory. Optional zstd compression before encryption.

What it does NOT do: encrypt URLs, headers, query params, or status codes. Those remain visible to intermediaries. This is not a replacement for TLS -- it's a layer on top.

Cipher suite is a single opinionated choice (no algorithm negotiation), validated against official CFRG test vectors and Wycheproof. 10K lines of library, 14K lines of tests including property-based fuzzing and statistical randomness verification.

We looked for an open-source, standards-based HTTP body encryption middleware and couldn't find one, so we built it. Apache-2.0.

https://github.com/dualeai/hpke-http
by btown | 2026-02-17 13:52:14+00:00
If it were in the context of parachuting into a codebase, I’d make these skills an important familiarization exercise: how are tests made, what are patterns I see frequently, what are the most important user flows. By forcing myself to distill that first, I’d be better at writing code that is in keeping with the codebase’s style and overarching/subtle goals. But this makes zero sense in a green-field task.
by vintagedave | 2026-02-17 13:52:17+00:00
Try Oxygene. Files are always up to date (you don't even save, if you type, it'll end up on disk, same in reverse if you save with another editor.) Code completion works. IDE supports themes. Most importantly the language is _far_ more modern than Lazarus / FPC.

It can import Lazarus (and Delphi) projects, but does not have a form designer built in.
by regularfry | 2026-02-17 13:52:48+00:00
> Regarding the 4% improvement for human written AGENTS.md: this would be huge indeed if it were a _consistent_ improvement. However, for example on Sonnet 4.5, performance _drops_ by over 2%. Qwen3 benefits most and GPT-5.2 improves by 1-2%.

Ok so that's interesting in itself. Apologies if you go into this in the paper, not had time to read it yet, but does this tell us something about the models themselves? Is there a benchmark lurking here? It feels like this is revealing something about the training, but I'm not sure exactly what.
by Closi | 2026-02-17 13:52:49+00:00
Because humans always say 'bread' if you ask them what you put in a toaster.

And humans will always deduce that you should switch doors if you are in a hypothetical gameshow and they show you a horse behind one of the doors.

(All I mean is - an example of an LLM answering illogically is not proof that LLMs can't really think logically, as you can equally find examples of humans answering illogically and also find examples of novel questions that LLMs get right)
Show HN: Rm-MCP – Give Claude/OpenClaw access to your reMarkable tablet
by thijsverreck | 2026-02-17 13:52:53+00:00
I take notes, and draft designs on a reMarkable tablet and wanted Claude to be able to reference them while I code.

So I built an Open Source MCP server that connects to the reMarkable Cloud API and gives AI assistants (Claude Code, OpenClaw, etc) read-only access to your entire library.

What it does:

- Read notebooks, PDFs, and ebooks with full text extraction
- Full-text search across your library (SQLite FTS5 index)
- Render pages as PNG/SVG — useful for hand-drawn diagrams and wireframes
- Handwriting OCR using the client's own LLM via MCP sampling (no external API keys needed)

Setup is super easy using the following command:

curl -fsSL https://thijsverreck.com/setup.sh | sh

It installs dependencies, registers your tablet, and configures both Claude Code andClaude Desktop. The server runs via uvx and auto-updates on each launch.

Built with Python, runs on the MCP protocol so it works with any compatible client. Everything is read-only — it never writes to your tablet.

Would love feedback, especially from other reMarkable users who've been wanting better integration with their dev workflows.
by mr_toad | 2026-02-17 13:53:50+00:00
> In fact, management is full of numbers that a slightly-clever high school sophomore who’d paid attention in science classes could tell you are totally useless, because they were gathered all wrong. They mean nothing whatsoever. They’re just noise.

The whole point of SPC is to separate signal from noise. Pointing out that some change that everyone is obsessing over is well within the expected range is useful, it can head-off knee jerk reactions to phantom issues.
by streetfighter64 | 2026-02-17 13:54:03+00:00
I mean, step 0 is verifying that the code with changed names actually compiles. But step 1, which is way more difficult, is ensuring that replacing v01 with out_file_idx or whatever, actually gives a more accurate description of the purpose of v01. Otherwise, what's the point of generating names if they have a 10% chance of misleading more than clarifying.
by gordonhart | 2026-02-17 13:54:14+00:00
> This is supported out of the box by any agent worth its salt, including OpenCode and CC.

I thought Claude Code didn't support AGENTS.md? At least according to this open issue[0], it's still unsupported and has to be symlinked to CLAUDE.md to be automatically picked up.

[0] https://github.com/anthropics/claude-code/issues/6235
by kristopolous | 2026-02-17 13:54:17+00:00
Still misses the mark.

It should be designed for the 95% of students who are not going to be scientists so that they become better citizens and we aren't just flooded by piles of misguided people when it comes to funding public policy. Instead we want people to have the basic literacy to know that say, MMS (Miracle Mineral Solution) is wildly unsound.

It should be seen as a society-wide improvement project like the declination of smoking or how people are exercising more and eating healthier then half a century ago.

This is the same kind of project.
by jackhackett | 2026-02-17 13:54:37+00:00
I've read a few articles that claim a large part of the reason ATSC 3.0 is supported by broadcasters is the potential money to be made from marketing. All information about what you watch, and any personal details stored in the box, will be totally available to broadcasters. Supposedly they will be able to change the commercials shown to each viewer based on your information they get from the box. If your box has a dvr function they will able to change and update the commercials in any programs you have recorded. DRM is broadcasters way of finding more ways to sell people items or services they don't need or want.
by password4321 | 2026-02-17 13:55:01+00:00
Once a month HN user david927 does a "What are you working on?" post (among others: https://hn.algolia.com/?query=%22What%20are%20you%20working%...) that is perfect for you to drop things like this into as a comment. It looks like this month's is still open for comments though unlikely to generate much interest after the first few days.

It should be made an official HN tradition like whoishiring.
by sublinear | 2026-02-17 13:55:03+00:00
> Sometimes a new feature needs maybe 2k lines of code split over 10-20 or so files

I still disagree. Why was the feature not split up into more low-level details? I don't trust that kind of project management to really know what it's doing either.

I am not promoting micromanagement, but any large code review means the dev is having to make a lot of independent decisions. These may be the right decisions, but there's still a lack of communication happening.

Hands off management can be good for creativity and team trust, but ultimately still bad for the outcome. I'm speaking from my own experience here. I would never go back to working somewhere not very collaborative.
by zbentley | 2026-02-17 13:55:10+00:00
I doubt it, but that's just a hunch. Is there data out there regarding compiler/language maintainer/standards committee members' contributions to other projects (beyond "so and so person works on $compiler and $application, both written in C"-type anecdotes)?

If not, then, like ... sure, C compiler maintainers people who program in C, but they're not "C programmers" as it was intended (people who develop non-compiler software in C).

My hunch is that that statement is overwhelmingly true if measured by influence of a given C compiler/implementation stack (because GCC/LLVM/MSVC take up a huge slice of the market, and their maintainers are in many cases paid specialists who don't do significant work on other projects), but untrue if measured by count of people who have worked on C compilers (because there are a huge number of small-market-share/niche compilers out there, often maintained by groups who develop those compilers for a specific, often closed-source, platform/SoC/whatever).
by ForHackernews | 2026-02-17 13:55:18+00:00
This is only my opinion, but GrapheneOS's approach to privacy seems obtuse to me. They will claim that an unlocked bootloader is a risk, but then turn around and recommend you install proprietary apps GApps in their sandbox. The sandbox doesn't matter if all the private data is in the same sandbox!

Reminds me of https://xkcd.com/1200/