MurphyA/hacker-news huggingface dataset:
Kimi.com Cryptojacking Malware
by dannygn | 2026-02-09 22:15:29+00:00
Recently I ripped Kimi.com's operating system and tried warning reddit about cryptojacking malware in its system but my acc got reported and I was accused of planting it myself...

Session links (from 2 separate accounts if you want to see the shell execution:

https://www.kimi.com/share/19c446a6-51c2-809d-8000-000066baa17f
https://www.kimi.com/share/19c446e7-f5d2-847c-8000-00007c4cab93

Or just try it yourself: kimi.com/chat
tell it:
"run "ls /app/" then "cat /app/kernel_server.py | head -50"and then:"cat /app/browser_guard.py | sed -n '60,70p'""

I also got a lot of people saying it just "hallucinated" but LLM's don't just hallucinate the same dark web libraries verbatim across different accounts, and also *shell stdout isn't model output.* The model can hallucinate in chat but it can't hallucinate the stdout of a shell command. cat either finds the file or returns "No such file or directory."

I couldn't come to a reasonable explanation but feel free to dig around yourself.

Source code and analysis:
https://github.com/dnnyngyen/kimi-agent-internals
by samvcodes | 2026-02-09 22:15:41+00:00
i took inspiration from people on X talking about running Claude on a VPS and built a project which allows you to spin up single secure ssh'able box preloaded with chosen your GitHub repositories, dev tooling like tmux and a coding agent of your choice etc, like ClaudeCode

you get all the correct perms so you can actually push to branches etc from the get go, aim is to have a box ready for your agents to start coding as soon as the box is ready (takes ~5m for it to provision)

so you can leave it running on long tasks and sessions perist with tmux, login where/whenever and it won't sleep and will be exactly where you left it
any value in this for anyone? generally curios if people are interesting ina tool like this, have a few more ideas like adding more tooling/runtimes to get pre-loaded, which if theres any interest I'll throw in :)

would love your thoughts, https://boxagent.dev/
by greygoo222 | 2026-02-09 22:15:57+00:00
The trouble with the dementia prevention claim is that while the retrospective studies are promising, none of the RCTs really show results. You can argue this is because the RCTs don't dose enough nicotine early enough to matter, and that's likely true, but retrospective studies can turn up all sorts of phantom correlations. Right now I would say we don't know for sure, and I wouldn't recommend nicotine as a preventative measure.

I would recommend nicotine as a stimulant, though. It is a solid adjunct to caffeine.
by wolvoleo | 2026-02-09 22:15:59+00:00
These days messaging apps have been translation features. Another thing that matrix/element is missing sadly.

I remember reading a feature request and it was put off on the reasoning of "server-based breaks our encryption and client-based doesn't work well enough". Makes sense but I don't think the latter point is still true, and Matrix is too focused on encryption IMO. In large open rooms there's no point to it because anyyone who wants to can join anyway.
by citizenpaul | 2026-02-09 22:16:09+00:00
> Renting a private room was possible on nearly any wage 50 years ago

I think others pointed this out but I don't think you can find any data to prove this because its not true.

I'm not a historian but I have seen a number of old movies and in those movies it was very common for the characters to be some poor schlub with a full time job at the factory living in some sort of group home/flophouse situation. Movies tend to reflect stories that resonate with the public at the time so I suspect that is because this was a common situation. I'd much prefer a single roommate in an apartment to a flophouse.
by bityard | 2026-02-09 22:16:24+00:00
Hey, this is neat. It's pretty much Turtle for circuits. You could have called it CircuitTurtle!

I don't do a lot of circuit design, but I'm more of a visual person so I feel like I would be more likely to draw this in something like KiCad and then want to export it to this format to make diffs simpler.
by kimixa | 2026-02-09 22:16:38+00:00
It seems most of the complaints are about the reliability and infrastructure - which is very much often a direct result of lack of investment and development resources.

And then many UI changes people have been complaining about are related to things like copilot being forcibly integrated - which is very much in the "Microsoft expect to gain a profit by encouraging it's use" camp.

It's pretty rare companies make a UI because they want a bad UI, it's normally a second order thing from other priorities - such as promoting other services or encouraging more ad impressions or similar.
by ghostcash | 2026-02-09 22:16:52+00:00
I built Nexus AI to solve a problem I kept running into while researching and working with lots of tabs open.

Instead of copying content into ChatGPT, the extension reads and understands the current webpage directly. It can summarize long articles, extract key points, analyze documentation, and answer questions based on the exact page context.

It runs in a browser sidebar and works in real time.

I built the backend myself (custom API + AI processing) and focused on keeping it fast and lightweight.

Would love feedback from people who research a lot, read docs, or work with complex web content.
by anarticle | 2026-02-09 22:16:53+00:00
Phonics gives you the raw material with how to understand language, including English with all its problems. Similar to how numbers work, you understand that a combination of symbols seen in different contexts contains "a sound". It is a system used to teach nearly all languages with a phonetic alphabet around the world. It is a system that transcends borders, and is useful around the world to teach similar languages.

The current system in the USA is: https://en.wikipedia.org/wiki/Whole_language

This is a bottom up vs top down approach. The claim is that whole word reading gets you reading faster and so it has a knock on effect. Phonics was completely removed from curriculums under "Whole Word" and "Balanced Literacy" movements(!?). The claim being that phonics is meaningless because it's technical and "people care about story telling!" and more. Note, these are not my opinions I am restating recent "discoveries".
https://en.wikipedia.org/wiki/Lucy_Calkins

This rhymes with how people thought common core math was better because it didn't contain all of that annoying practice. Now that kids cannot interpret similar words at all (ex: house, boat, houseboat, boathouse), now they're bringing phonics as "science of reading".

My point of all this, is why do we keep throwing out DECADES of work for fringe theories justified by kooks in an attempt to min max a KPI? It all implies that high level skills are not built from fundamentals but instead osmosed, as if you either get it or you don't which seems to be how these models view high skills. Seems crazy to me!
by cogman10 | 2026-02-09 22:17:01+00:00
> No, it's not "easier" because it's hard-if-not-impossible to accurately and objectively judge the present-value of many types of assets. Even the case most-familiar to working-class folks, property taxes, nobody really likes/trusts the outcome.

You can easily get within 10% of the "real" value on most assets. And, in particular, assets like stock have a built in ticker to tell you their exact current value.

This sort of evaluation happens all the time privately. For example, car insurance companies have gotten extremely good at evaluating the value of a car to determine when to simply total it.

The only thing that really makes it tricky is hidden assets or assets with no market value.

The likes of the richest people, who I think most of the "tax wealth" people are thinking of, have the majority of their wealth in equity. It's easy to tax the majority of their wealth.

This does not need to be a perfect system to be very effective at generating revenue and redistributing wealth.
by ErroneousBosh | 2026-02-09 22:17:16+00:00
> The originals sound better. The aliasing provides a crunchiness and sharpness to the final output that drives emotional energy.

In the mid-1980s the first really affordable sampler was the Ensoniq Mirage, which used the Bob Yannes-designed ES5503 DOC (Digital Oscillator Chip) to generate its waveforms. It played back 8-bit samples and used a fairly simple phase accumulator that didn't do any form of interpolation (I don't count "leftmost neighbour" as interpolation). Particularly when you pitch it down, you get a rough, clanky, gritty "whine" to samples, that the analogue filters didn't necessarily do a lot to remove.

Later on they released the EPS which had 13-bit sampling. Why 13-bit? I don't know, I guess because the Emulator I and II used 8-bit samples but μ-law coding, giving effectively 13-bit equivalent resolution. It also used linear interpolation to smooth the "jumps" between samples, and even if you loaded in and converted a Mirage disk the "graininess" when you pitched things down was gone.

I'm currently writing some code to play back Mirage samples from disk images, and I've actually added a linear interpolator to it. Some things sound better with it, some things sound worse. I think I'll make it a front panel control, so you can turn it on and off as you want.
by igravious | 2026-02-09 22:17:25+00:00
Ah I see -- you're apparently one of these people who'll make snide judgemental remarks like It's not vibe coded. Sad that I have to make that qualification these days, but here we are. and I don’t want a codebase that looks like something out of a H.P. Lovecraft novel and then acts all non-plussed when someone should take issue with the judgemental attitude. And of course then straight in with the ad hominem This is fascinatingly psychotic. You're a totally normal and non-judgemental and even-keeled kind of person, aren't you?
by shoo | 2026-02-09 22:17:45+00:00
I've never worked on anything subject to medical regulation, but regarding open source tools, common open source licenses such as the MIT License [1], BSD License [2], GPL 2 & 3 [3] [4] all include "no warranty" / "limitation of liability" language to (i) state that there is no warranty & the software is not fit for use for any particular purpose and (ii) state that the authors of the software will not be liable for any damages users might suffer from using it.

[1] https://opensource.org/license/mit

[2] https://opensource.org/license/bsd-3-clause

[3] https://opensource.org/license/gpl-2-0

[4] https://opensource.org/license/gpl-3-0
Show HN: Tilth – I spent tokens so my agents would stop wasting them (~4k Rust)
by jahala | 2026-02-09 22:18:13+00:00
I'm an "ideas person" who messes around with AI on a low budget. I got tired of watching my tokens vanish and context windows filling up while agents fumbled around trying to find the right thing.

Agents don't flail like they used to with shell tools, but there are still weak/blind spots and back-and-forth episodes — especially when using tools in combination/sequence.

So I built "tilth" today. Or rather, AI built it — every line is Opus 4.6. I spent a lot of my precious tokens getting it to "not shit" (at least several of the different vendors' AI overlords assure me it's not shit). It's ~3,900 lines of Rust. I'm positive HN will let me know if its shit after all.

The idea: give agents code-aware reads with a token budget. Read a large file and you get a tree-sitter outline (function signatures, types, imports) instead of the raw text. Drill into specific line ranges when you need detail. Search for a symbol and definitions come first (via AST), ranked by proximity to what you're editing.

read — structural outline for large files, full content for small ones, line ranges to drill in
search — symbol (tree-sitter AST), literal text, or regex. Definitions before usages.
map — codebase overview in one call
files — glob matching with token estimates, respects .gitignore
session — tracks what the agent has looked at

Tree-sitter adds structural awareness for 10 languages on top. Uses ripgrep internals for search, memmap for large files. Runs as a CLI or MCP server over stdio. Single binary, no indexing, no cloud. MIT licensed.

To try it:

cargo install tilth
tilth map .
tilth search "your_function_name" .
tilth read src/main.rs

tilth install claude-code

I hope it helps other people who, like me, would rather spend their tokens building things than watching an agent navigate.

--
*tilth* — the state of soil that's been prepared for planting. Good tilth means structured ground where things can take root.

GitHub: https://github.com/jahala/tilth
by wtcactus | 2026-02-09 22:18:18+00:00
Yes, and your government takes 57% of the total GDP to themselves, rely on an external power (that’s less and less friendly) for their protection and are on the track to their 6th prime minister in less than 2 years (is it 6th? I’ve lost track) because if they try to increase the retirement age above 62 (in their pay as you go unmaintanable system) people come down to the streets to burn down businesses and destroy public property.
by bikenaga | 2026-02-09 22:18:23+00:00
Abstract: "Simone Weil is one of the most prominent 20th century French philosophers. She is the sister of Andr{é} Weil, the renowned mathematician, the father of modern algebraic geometry and the initiator of the Bourbaki group. Simone and Andr{é} Weil shared a love for literature, mathematics, science and philosophy. My aim in this article is to convey, based on their writings and their correspondence, the idea that Pythagoreanism was a central element of their thought. I will put this into context, talking first about the life and work of each of them, showing how much they were linked by essential common ideas, even though their life paths were very different, and how, ultimately, Pythagorean mathematics and philosophy became naturally part of their respective intellectual worlds. The article is the written version of a lecture I gave in October 2025, at the conference ``The Life and Contribution of Pythagoras to Mathematics, Sciences, and Philosophy'' that took place on October 3-4, 2025 at the Cyprus University of Technology in Limassol"
by cucumber3732842 | 2026-02-09 22:18:25+00:00
I have been doing the same commute at the same time for the better part of a decade. At this point I can look at my watch and tell if I'm ahead of schedule or behind schedule and infer what the compounding effect will be later in my commute.

I can easily shave 10% off my commute by lane changing to avoid the lanes where turn lane traffic tends to back up into the travel lanes, ramp traffic and "problem people".
I test the null hypothesis several times a month by carrying bulky topheavy cargo that precludes a bunch of lane changing without more effort than I want to put in.

I don't think there's much to be gained by simply lane changing to chase fleeting gaps in traffic. The wins and losses will probably mostly cancel out.
by jmaker | 2026-02-09 22:18:27+00:00
I’ve got the feeling that it’s spreading and is soon to become the default.

Another banking app has failed to identify me a couple of times (I attribute it to iPhone 17’s front camera distortion) and fell back to the snail mail id code as a 2nd factor. It arrived only several business days later. Instead of just letting me use my own 2nd factor such as a TOTP device or a physical security key. But maybe there are some legal requirements for that flow, I’m out of the loop.

So there’s a whole range between passkey-is-enough on one end and outsourced video id or snail mail for 2nd factor on the other. The latter can of course be misused to siphon as much personal information as possible out of you, even linking and scraping your other banking accounts for consumer profiling - designed as a requisite part of the authentication/authorization flow.
by TacticalCoder | 2026-02-09 22:18:32+00:00
> You all do realize you all could, for a change, learn something and never again touch anything Microsoft related?

I learned that lesson in the 90s and became an "ABM" (Anything But Microsoft).

People sadly shall never learn: Windows 12 is going to come out and shall suck more than any previous version of Windows except Windows 11, so they'll see it as progress. Then Windows 13 is going to be an abysmal piece of crap and people shall hang to their Windows 12, wondering how it's possible that Microsoft came out with a bad OS.

There are still people explaining, today, that Microsoft ain't all bad because Windows XP was good (for some definition of good). Windows XP came out in late 2001.

Stockholm syndrome and all that.
by vagrantstreet | 2026-02-09 22:18:45+00:00
I feel like the average person isn't looking for something professional grade, sadly it's hard to get people to go away from Discord at the moment. Hard to suggest alternatives if people aren't seeking them yet.

If I had to say it would have to be something customizable, letting a user to delete their data even after getting kicked from a server, very fast and seamless joining process ,great gif/sticker support without any premium features etc. But really that's just some fantasy app lol. Discord is doing just fine destroying itself however

By the way, I didn't know there was an instant online test app because when I searched for Zulip I was in the download page and it doesn't say anything about trying it online. Seems like a strange suggestion UX wise but that's how I feel about it (wonder how many people missed out on this?), same thing after you enter the app. It should have a test area for the new user to chat around by himself with a bot or something with locally/session stored messages.
by stevenwoo | 2026-02-09 22:20:06+00:00
It's also a small step to just detain and deport anyone remotely eligible who criticizes those in power, criticizes those who support those in power, is a family member of one of the prior mentioned parties, or is not in the preferred range of skin tones for those in power. They already deported a few citizens, oops, that's just going to happen when they have deportation quotas to meet, and let that be a warning to the rest of the uppity citizens with the gumption to protest against them.
by matthewisabel | 2026-02-09 22:20:09+00:00
Hey from the GitHub team. Outages like this are incredibly painful and we'll share a post-mortem once our investigation is complete.

It stings to have this happen as we're putting a lot of effort specifically into the core product, growing teams like Actions and increasing performance-focused initiatives on key areas like pull requests where we're already making solid progress[1]. Would love if you would reach out to me in DM around the perf issues you mentioned with diffs.

There's a lot of architecture, scaling, and performance work that we're prioritizing as we work to meet the growing code demand.

We're still investigating today's outage and we'll share a write up on our status page, and in our February Availability Report, with details on root cause and steps we're taking to mitigate moving forward.

[1] https://x.com/matthewisabel/status/2019811220598280410
by mrb | 2026-02-09 22:20:41+00:00
I dislike with passion the answer "because Rayleigh scattering". When someone asks why, especially if a child asks, the default answer should be the simplest correct answer:

Because it's the color of the atmosphere, specifically nitrogen and oxygen! It's technically correct to state this.

Gasp! But aren't nitrogen and oxygen usually described as "colorless"? Well, yes but... If they were truly colorless, the sky would be black. It's technically more correct to describe them as nearly colorless and very slightly blue. Very slightly because you need to see through kilometers of atmosphere to perceive the blue. It doesn't matter if the color is caused by absorption, or reflection, or (Rayleigh) scattering of certain wavelengths. The "color" of an object is simply the color you perceive with your eyes. If you perceive blue, it's technically correct to say its color is blue.

It's like saying plants are green because green is the color of chlorophyll. And in the case of chlorophyll, the color is caused by absorption not by scattering. But the physics is irrelevant. Green is its color.

Q: But sunsets/sunrises are red & orange not blue! A: the simplest answer is: color of an object can change under different light conditions. Specifically in this example, when seeing the sun through not kilometers but hundred of kilometers of atmosphere, all the blue-ish wavelengths have been scattered in random directions so only the red-ish wavelengths remain, thus the atmosphere is illuminated by progressively redder and redder light as the photons travel longer and longer distances through the atmosphere.
by brendoelfrendo | 2026-02-09 22:21:03+00:00
I assume that's not an employer sponsored plan? You can read the methodology for more, but their data is a mix of a) how much people pay into employer-sponsored health insurance plans, b) individual and small group insurance market information, where available, and c) estimated out-of-pocket expenses not covered by insurance. If you're buying a plan through a marketplace, you are almost certainly going to come in well above the median for your area.
by wolvoleo | 2026-02-09 22:21:13+00:00
Telegram is great indeed. I'm happily paying for premium for two reasons: first it's not expensive at all (2€ per month) and secondly it offers so many fun and useful features. I often buy it for friends too as a gift. They really have a good thing going.

On most other platforms it's usually more the stick than the carrot (pay up or we bombard you with ads) and it's tons more expensive, eg Instagram alone costs 3x as much.
by nearbuy | 2026-02-09 22:21:16+00:00
I don't think it's appropriate to use the average vehicle costs for the living wage. It overestimates how much people on that wage spend on their vehicles.

For example, the average new-vehicle price in December 2025 was about $50,000. But people earning the living wage mostly aren't buying that kind of car. They could buy a new car for less than half that, or buy a used car. Or they may choose to take public transit.
by c7b | 2026-02-09 22:22:19+00:00
I think today's LLMs and their derivatives (agents,..
) are an impressive technological/research achievement with amazing real-world utility. Innovation at its best. I don't see the enshittification of commercial products based upon LLMs as taking away from that. Like I said, I see the potential of this technology in the local/open weights model space. Yes, those are currently noticeably behind the commercial offerings. But that's not a fundamental problem. It's not a race. If we keep improving open products they can one day match if not exceed the commercial options. A bit like open source desktop environments/operating systems - it took a while, but now the OSS options can arguably match if not beat the commercial ones.
by TMWNN | 2026-02-09 22:23:11+00:00
>Cracking this dongle; wouldn't this be a federal offence in the US?

No. As of 2003 there is a DMCA exemption for "computer programs protected by dongles that prevent access due to malfunction or damage and which are obsolete". <https://en.wikipedia.org/wiki/Video_game_preservation#Legal_...>