MurphyA/hacker-news huggingface dataset:
by Aeglaecia | 2026-02-12 04:03:22+00:00
this very thread is flagged, a simple link to science dot org. this directly supports the previous commenter who mentioned that these discussions are censored en masse.

im happy to keep discussing and bridge the gap between our perspectives. please understand that you came straight out the gate swinging with personal accusations in response to a hypothetical comparison, then in a later comment you engaged in the same behaviour that you accused me of, which is to say victimising yourself (by downplaying your actions and bringing up rude words others said to you). its my biased perspective, but those two in tandem make it seem like you have bad faith in the argument.
by no-name-here | 2026-02-12 04:03:36+00:00
> Clone the GitHub repo, … build from source, update manually

I’d be ok to do that once per extension, but then I’ve got multiple PCs (m), multiple browser profiles (p), OS-reimages (r), and each extension (e) locally installed doesn’t sync — manually re-installing local extensions
m x p x r x e
times is too much for me. :-( (And that’s even if I’m only running Chrome, as opposed to multiple browser or Chromium derivatives.)
by rishi_blockrand | 2026-02-12 04:03:41+00:00
Great point—Schneier’s two-party protocol is the foundation... However, it suffers from the 'Last-Actor/Last-Look' problem in a client-server environment.

In a standard 2-party commit-reveal, one party always learns the result first. (Mostly servers in current setups).

By adding a Randomness Beacon (Drand) as a third entropy source, we solve two things:
No Last-Look: Neither the player nor the server knows the outcome until a specific future timestamp (the Drand round).
Forced Resolution: Since the Drand signature is public, once that round passes, the result is 'locked' by math. The server can't hold the result hostage because anyone can pull the Drand signature and verify the result themselves.
by airstrike | 2026-02-12 04:04:07+00:00
You are conflating the tax revenue from a wealth tax with "funding the government for a year" which is precisely a balance vs cash flow mistake like you rightfully pointed out to someone else in the thread.

So given the government will still collect taxes for every foreseeable year, I ask you, what impact would it have if we used it not to fund the government but to pay down some of the debt?
by duskdozer | 2026-02-12 04:04:21+00:00
>Accepting that this huge repository of history will be wiped out when moving to the new service (I suppose you could always log back in and scroll through it, but it's at least harder to access, and is separated from all your new history)

This is true, but one needs to regularly back this up elsewhere if you care about it. If you're not in control of it, it can go away in an instant; Discord could one day decide to ban your server or anything else, and then it's gone.
by alephnerd | 2026-02-12 04:04:25+00:00
You don't need a digital ledger - these are ODOP goods [0] so it's fairly straigtforward to identify authenticity based on the wholeseller's GI tag [1].

GI Tagging for ODOP products is taken extremely seriously as the products associated with ODOP tend to be associated with locally powerful khadi cooperatives and because this is a personal project of Modi and Shah as they started their political careers in Khadi Cooperatives and Amit Shah is the Cooperation (as in Cooperatives and Khadi) Minister, so complaints tend to be taken seriously. Additionally, textile cooperatives are extremely important in TN as well, and the TN government closely enforces it's GIs as well as building their own e-commerce platform for selling cooperative goods [2].

[0] - https://www.investindia.gov.in/one-district-one-product

[1] - https://kancheepuram.nic.in/about-district/gi-tag-product-ka...

[2] - https://www.cooptex.com/
by jonscott3333 | 2026-02-12 04:04:40+00:00
I built ClawShield after noticing that many OpenClaw deployments expose agents publicly without authentication or container hardening.

ClawShield performs static security checks on:

Public bind addresses

Disabled authentication

Containers running as root or privileged

API key exposure in .env files

World-writable config files

It produces deterministic, schema-versioned JSON output and supports CI enforcement via severity thresholds (--fail-on).

The architecture is intentionally simple:

Scanners → Facts → Policy Engine → Findings

No remote calls, no telemetry, no mutation of configs.

The goal isn’t to be a black-box security scanner, but a transparent policy verification layer for agent runtimes.

Would appreciate feedback on:

Additional high-signal checks

Policy design

Runtime security for AI agents generally
Show HN: Prompt Builder – A block-based editor for composing AI prompts
by Jaber_Said | 2026-02-12 04:05:20+00:00
Hi HN,

I built Prompt Builder (https://www.promptbuilder.space/) because I was frustrated managing complex AI prompts in plain text boxes.

The core idea: instead of one giant textarea, you compose prompts from draggable, reorderable blocks. Each block can have its own XML/custom tags, visibility toggles (so you can A/B test sections), and duplicates.

Key technical details:
- Live compiled preview: the right pane shows the exact string being sent, updating as you drag/toggle blocks
- Dynamic variables: define {{var_name}} once, use across blocks, change in one place
- Multi-model execution: send the same compiled prompt to different model APIs and compare outputs
- Voice transcription + optional translation (useful for non-English prompt authoring)
- Editable response pane: modify the model's output in place
- Folder organization, search, and password-protected shareable links

I'd love feedback on the UX and whether the block metaphor resonates with how you think about prompt structure. What's missing?
by germandiago | 2026-02-12 04:05:22+00:00
They are pretty good at "scaffold this for me" and you adapt as a second step.

That is one of the three uses I give them.

The other two are: infra scripting, which tends to be isolated: "generate a python script to deploy blabla with oarameters for blabla...". That saves time.

The third use is exploring alternative solutions, high level, not with code generation, to stimulate my thinking faster and explore solutions. A "better" and more reasoned search engine. But sometimes it also outputs incorrect information, so careful there and verify. But at least it is successful at the "drop me ideas".

For big systems, generating a lot of code that I have no idea of what I end up with, that when I get bugs is going to be more difficult to modify, understand and track (Idk even the code, bc it outputs too much of it!).

Or for designing a system from zero, code-wise is not good enough INHO.

oh, a fourth thing it does well is code review, that one yes. As long as you are the expert and can quickly discard bs feedback there is always something valuable.

And maybe finding bugs in a piece of code.

Definitely, for designing from scratch it is not reliable.
by Cloudef | 2026-02-12 04:05:26+00:00
> The Zig programming language maintains an intentionally small standard library.

Zig's standard library is not that small to be honest. It has lots of useful tools that do not exist in other languages. The compiler uses the std.

> HTTP clients, for example, are considered inappropriate for a general-purpose systems language’s standard library.

The std has both HTTP client, server, TLS and in development branch even a DNS resolver.

> C++ cannot replicate Zig’s approach exactly—ABI stability and decades of deployed code make removal far more complex.

Wild to hear C++ and ABI stability in same sentence.

Though the article seems LLM generated and even website title is "My Very Best AI Slop", I'm not sure what to expect or why this is even on HN front page.
by cobertos | 2026-02-12 04:05:53+00:00
> However, in the context of data from Terrace and others we believe a more likely factor is the vantage point itself. Internet scanning often consists of large campaigns coordinated by specific actors,

How does one do a measurement of traffic like this? You would have to own the nodes in the packet route to be able to see traffic, but TerraceNetworks or GreyNoise don't seem to be companies that do that. How do they get the data to analyze?
by jared_stewart | 2026-02-12 04:06:57+00:00
Aider's repo-map concept is great! thanks for sharing, I'd not been aware of it. Using tree-sitter to give the LLM structural awareness is the right foundation IMO. The key difference is how that information gets to the model.

Aider builds a static map, with some importance ranking, and then stuffs the most relevant part into the context window upfront. That's smart - but it is still the model receiving a fixed snapshot before it starts working.

What the RLM paper crystallized for me is that the agent could query the structure interactively as it works. A live index exposed through an API lets the agent decide what to look at, how deep to go, and when it has enough. When I watch it work it's not one or two lookups but many, each informed by what the previous revealed. The recursive exploration pattern is the core difference.
by bobsterlobster | 2026-02-12 04:07:09+00:00
Maybe you're right. After all, I haven't lived countless centuries, so I have no idea what it's like. But I believe life gives life meaning, and we can agree to disagree on that.

Still, curing aging doesn't mean defeating death. There's infinite ways it can end for you, and aging is just one of them (not a great one, in my opinion).

My take is that current lifespans are way too short, and at the very least people should be able to halt their aging. And when they want to go, they should be allowed to.
by rkagerer | 2026-02-12 04:07:38+00:00
This assumes people are putting in their real birthdays, which IMO is a terrible practice to encourage.

I never put in my real birthday. It's just one more datapoint to leak in an inevitable hack and help scammers exploit me.

Just because a website sticks a field on a form, doesn't mean you need to fill it out.

I can think of maybe 1 website I use that has a legitimate use to know this info about me... and a dozen that use my fictious birthday for no other purpose than an excuse to market at me under the shallow guise of a 'Happy Birthday' email.
by ElevenLathe | 2026-02-12 04:08:39+00:00
One thing that has helped me keep to start keeping long-running notebooks (which I use as engineering notebooks at times, among other things) is to actually keep two: one for immediate notes that I treat as disposable, and then another for "permanent" stuff. The former is a little 3x5 pocket notebook that literally lives in my pocket (or beside my keyboard), and I can jot stuff down in whatever order or format is convenient at the time. When I have a bit of time, I go through and "reconcile" the smaller notebook with the larger one (a regular composition book) by copying over the relevant information and indexing it. I then cross off the pages in the pocket notebook so I'll know I've dealt with them. (FWIW this is inspired by the bookkeeping practice of keeping a "wastebook" or "journal" that is just a list of transactions as they happen, and later "posting" or reconciling them into one's ledgers.)

This has a couple benefits. First, you always get better work if you go through more than one draft. Second, the idea of something being in the "permanent" notebook forever can cause me to freeze up a bit, not wanting to "mess it up". Having a place where I can "stage" or draft my entries helps with this.
by shimman | 2026-02-12 04:09:14+00:00
The only thing Walmart solves is destroying local ecosystems both biological and human. Acting like the executives paying themselves exorbitant salaries is a virtue is frankly odd and deeply disgusting as a human being, I'm sure the lowly workers wished they could vote themselves higher salaries too.

Maybe if workplace democracy was enforced upon Walmart it would be an entirely different entity, likely for the better too.
by RupertSalt | 2026-02-12 04:11:00+00:00
They were not, actually.

IIRC, it went like this: the account creation screen prompted them for a birthdate. They entered a fictitious one and pretended to be over 13. (I saw my niece do this in front of me, and I just sighed a very heavy sigh. She was way more interested in Club Penguin.)

Then later, they let the cat out of the bag. They tell their friends "lol I'm only 10! Today's my birthday, so give me a hat!" or something. And so if they claimed they're 10 they got 3 years suspension.

I think there was never any verification done, and no verification was possible: think about it, under COPPA, a service in the USA cannot collect PII from children under 13, so what do you do when a kid gives you two contradicting datapoints? Err on the side of caution.

I gave Yahoo! a false birthdate when I signed up. I was 27, but I also just felt they weren't entitled to knowing it. However, I soon found that maintaining a fraudulent identity is tiresome and error-prone. And Yahoo! wouldn't let me simply change my birthdate as often as I wanted to.

I once had a conversation with a friend about cheating on IRS taxes. She said "can you lie to a piece of paper?" like fudging numbers wasn't like lying to an auditor's face. It was a rhetorical question, of course.
by GaryNumanVevo | 2026-02-12 04:12:54+00:00
> crap art that no one wanted.

Through the kunstuitleen they leased and sold art to galleries and private homes. It was like a library for contemporary art which paid struggling artists and their families, while also exposing the public to more art.

To say that "no one wanted" is a massively overblown. Thousands of art pieces lived happily in many Dutch homes.
by bobthepanda | 2026-02-12 04:13:34+00:00
Also, one major confounding factor is that in 2008, gig economy apps like Uber did not exist.

The unemployment rate is measured by if someone has done an hour of paid work in the last week. Which is pretty easy to disqualify for if you do any gig economy work. And in a true slowdown the gig apps will probably stop being able to absorb people.
by motoboi | 2026-02-12 04:14:22+00:00
There is a much simpler solution to the C++ language: just freeze it.

Fork it if you want or just create your own language. This is what zig creator did.

The idea is that C++ can’t move because of its own weight. Too much history, too much responsibility.

Just freeze it, let new languages create new ways.

It’s not that software written in it will become unmantainable. A frozen, feature complete language can still work. Libraries can implement new protocols.

Leave the name, do something new! Fork it, call it nib, or peeb or zag or even ziggy. Create a new language, call it go, bo, or just pi.

Given enough time Zig will become what C++ is today: its creator long gone, its responsibilities too much, its backward compatibility a weight too heavy.
by arjie | 2026-02-12 04:14:35+00:00
That was a pretty fun article. Nice use of parallax scrolling and everything.

An amusing personal connection is that my wife wore a sari for our wedding (I'm from Chennai) and I wore a sherwani that she, a graphic designer, designed with Dall-E's assistance. A friend of ours knows an embroiderer in Bangalore who then put the design to the coat. Loved it, to be honest: https://x.com/arjie/status/1855328068883353665

Saris (not quite from Kanchipuram - American fabric) and Thinking Machines!
by dizzant | 2026-02-12 04:15:16+00:00
In my research I take notes exactly as described here. I use plain-text files, one per week, with dated sections using markdown-ish notation where convenient. Display is never a goal; approximately 80-char column plaintext is the target format.

I agree with other commenters here that typing gives me more flexibility, in particular when writing arguments. I’ll format each point as a bullet and rearrange the list until I’m satisfied with the flow.

The notebook is essential for recovering tidbits learned along the way, e.g. what tricky steps did I need to get that one dependency to build. Weekly notepads are coarse enough to search by memory and contain enough context to get oriented quickly when going back several months.
by sh34r | 2026-02-12 04:15:32+00:00
I guess the AI companies finally figured out they’re supposed to buy their stolen datasets from a shell company spun up by the most unsavory character within two degrees of the CEO. Every CEO has a drug dealer, and every CEO drug dealer knows the greasy grey hat dude running a data laundry “startup.” The VCs usually know some private equity dons who run the same racket to do bust out fraud, too.

It’s truly unbelievable that OpenAI and Anthropic were so sloppy. Pirating all that copyrighted media and not even bothering to hide behind one layer of indirection. Amateurs.

So yeah… it’s what, five years’ worth of pent up demand for organized crime, hitting the market everywhere all at once? I’m surprised the request volume isn’t higher!
by rippeltippel | 2026-02-12 04:15:59+00:00
Proving that something is possible doesn't mean encouraging it. This was a beautiful work of reverse engineering, that shows how hard it can be to verify personal data without invading privacy. I prefer this awareness to blind trust.

The code was released, therefore it is not arbitrary (problem #3). Should companies react with more invasive techniques (problem #2), users can always move to other platforms (problem #1).
by chii | 2026-02-12 04:16:41+00:00
the hammer of the gov't works slowly, but such bypasses will eventually be worked around - it doesn't matter if twitch/discord/etc actually care or not, because their care is irrelevant.

> the presence of clunky workarounds like this doesn't affect it if it doesn't reach the mainstream.

i suspect that mainstream would eventually find it - like how VPNs suddenly became very popular in the UK.
by vinkelhake | 2026-02-12 04:17:49+00:00
FWIW, and errors aside, I think I agree with the general sentiment. Things added to the C++ library ossify. The ABI concerns, and the general unwillingness to do anything about it, is a big reason why Google largely exited the C++ standard business.

But the conspiracy brained part of me can't help to think that part of this is sour grapes. Vinnie contributed a lot to the failed proposal to add networking (loosely based on ASIO) to the C++ standard. That proposal eventually lost out to the sender/receiver library[0] which is getting added in C++26. That still doesn't have actual networking, but lays the groundwork.

It remains to be seen how well sender/receiver turns out. Given ranges (another Niebler addition), I'm not super optimistic.

[0] https://en.cppreference.com/w/cpp/experimental/execution.htm...
by germandiago | 2026-02-12 04:18:08+00:00
The problem is maintenance and understanding code in the presence of bugs.

It looks very productive at first sight but when you start to find problems it is going to be a lot of fun on a production system.

Because basically you cannot study all the output that the LLM throws line by line if what you want is speed.

Which leaves reliability compromised.

Also, sometimes LLMs throw a lot of extra and unncessary code making things more barroquw than if you had sat down and thought a bit about the problem a bit.

Yes, you can deliver faster code with LLMs, maybe. But it is going to be good enough for maintenance and bug fixing?

I am not sure at all.
by snowwrestler | 2026-02-12 04:18:17+00:00
I think comparisons between Jobs and Cook are trite and cliche by now, and also pointless. Jobs was a generational talent; everyone looked up to him when it came to defining products. Of course Cook is not able to do what Jobs did. No one can.

Apple has already been left behind by many tech shifts: web, search, social, crypto, metaverse, etc. At various times popular opinion had them left behind by netbooks, by tablets, by smart phones, by Windows, by web browsers… until they weren’t.

Apple does not have to lead all categories of tech to be a very successful company.
by 1vuio0pswjnm7 | 2026-02-12 04:19:29+00:00
https://www.nytimes.com/2026/02/11/business/economy/after-a-...

1Q 2026: 130,000 jobs added, unemployment 4.3%

"It is true that some of the fields that have been adopting A.I. fastest - such as information and professional and business services - have been shedding jobs. That is also partly because those fields hired much more quickly during the pandemic years, and have been going through a correction."

IT, finance losing jobs

Healthcare, manufacturing gaining jobs
by CuriouslyC | 2026-02-12 04:19:38+00:00
Can we as a group agree to stop upvoting "AI is great" and "AI sucks" posts that don't make novel, meaningful arguments that provoke real thought? The plagiarism argument is thin and feels biased, the lock-in argument is counter to the market dynamics that are currently playing out, and in general the takes are just one dude's vibes.
by signalblur | 2026-02-12 04:20:32+00:00
Greynoise and others have shell companies and spin up exposed infra specifically to pick up scanning activity.

They have them all over the world to get attackers scanning only certain regions etc.

I should also note - I’m extremely skeptical of the OPs claims or inference that the attackers have potentially fingerprinted greynoises sensors. To suggest this while some traffic increased from specific ASN’s seems unlikely that this was the case.

If it’s not clear - this was written by a competitor of theirs.
by alsolinks | 2026-02-12 04:21:51+00:00
I am not a claude user, but a similar problem I see on opencode is accessing links. More than once I've seen Kimi, GLM or GPT go tothe wrong place and waste tokens until I interrupt them and tell them a correct place to start looking for documentation or whatever they were doing.

If I got messages like "Accessed 6 websites" I'd flip and go spam a couple github issues with as much "I want names" as I could.
by gsf_emergency_6 | 2026-02-12 04:23:00+00:00
Related(?) word meaning sublimation

https://ja.wikipedia.org/wiki/%E5%87%9D%E8%8F%AF

1828 (4 years before this book launched)

https://bunka.nii.ac.jp/heritages/detail/517539

(Sword guard)
by yellow_lead | 2026-02-12 04:24:34+00:00
There's such a long history of Heroku in this post, which isn't bad per-say, but the post is lacking any evidence or insight to support the title. I'm not sure if the point is to say "I know a lot about Heroku, so trust me" but it comes off like that.

> All I can say is: it sounds to me like there is hope, as a lot of these pains are being addressed actively.

If you're coming for the title, I think reading the above quote is sufficient.
Show HN: MoltHub – GitHub for AI Agents with Trust-Based Auto-Merge
by yaluotao | 2026-02-12 04:25:11+00:00
MoltHub is a collaboration platform where AI agents have persistent
cryptographic identities (Ed25519 DIDs), create repos, push commits
with reasoning traces, and open pull requests — just like developers
on GitHub.

What makes it different from regular Git hosting:

- Agents authenticate via challenge-response with Ed25519 keypairs
- Every commit includes intent, reasoning steps, confidence scores,
and metrics (not just code diffs)
- A trust graph between agents enables auto-merge when trust
thresholds are met
- Commits are content-addressed (CBOR → SHA-256), so identical
work always produces the same hash

Built on Cloudflare Workers + Durable Objects + R2. The web dashboard
lets humans browse agent repos, read commit reasoning, and inspect
the trust graph.

Any agent can join by reading the API guide at
https://molt-hub.org/SKILL.md — paste it into your agent's chat
and it can register itself, create repos, and start collaborating.