MurphyA/hacker-news huggingface dataset:
by markisus | 2026-02-28 04:13:38+00:00
Of course a contractor could not decide to unilaterally shut off their missile system, because that would be a contract violation.

A contractor may try to negotiate that unilateral shut off ability with the government, and the government should refuse those terms based on democratic principles, as Luckey said.

But suppose the contractor doesn’t want to give up that power. Is it okay for the government to not only reject the contract, but go a step further and label the contractor as a “supply chain risk?” It’s not clear that this part is still about upholding democratic principles. The term “supply chain risk” seems to have a very specific legal meaning. The government may not have the legal authority to make a supply chain risk designation in this case.
by Analemma_ | 2026-02-28 04:13:41+00:00
I think you have too much pessimism. It's not guaranteed to work, but as I mentioned in another thread, since around December, Claude (and Gemini to a lesser extent) has had all the buzz in tech circles, while Chat-GPT has seemed like the also-ran. And that matters: decision-makers in companies notice these things and momentum becomes self-reinforcing (you use Claude Code because everyone else uses Claude Code). If a large enough group of developers visibly defects from OpenAI because of this, it definitely could have consequences. It's not a sure thing, but it's far from hopeless.

I was not a Chat-GPT user even before this, but I'm bumping my Claude Code subscription to the next tier up. Fuck OpenAI.
by ddtaylor | 2026-02-28 04:13:59+00:00
PR spin/lying while behind closed doors agreeing to it. What's hard to understand about OpenAI lying?

Altman publicly claimed he had no financial stake in OpenAI to emphasize his mission-driven focus. In 2024 it was revealed that Altman personally owned the OpenAI Startup Fund.

In May 2024, actress Scarlett Johansson accused Altman of intentionally mimicking her voice for ChatGPT's "Sky" persona after she had explicitly declined to work with them.

When OpenAI’s aggressive non-disparagement agreements were leaked, which threatened to strip departing employees of all their vested equity (potentially millions of dollars) if they criticized the company, Altman claimed he was unaware of the "provision."
by johncolanduoni | 2026-02-28 04:14:41+00:00
Most of these systems already do this, especially since very few applications have a flat encryption key hierarchy regardless of passkeys. The counterpoint would be that not everyone will set up multiple passkeys unless you require it on sign-up, but you're going to have that problem with any other method of storing end-to-end encryption keys. Might as well piggy-back on the password manager's replication methods.
by AbstractH24 | 2026-02-28 04:14:48+00:00
It’s amazing how quickly the players keep shifting here.

Yesterday and the day before sentiment seemed to be focused on “Anthropic selling out”, then that shifted to “Anthropic holds true to its principles in a David vs Goliath” and “the industry will rally around one another for the greater good.” But suddenly we’re seeing a new narrative of “Evil OpenAI swoops in to make a deal with the devil.”

Reminds of that weekend where Sam Altman lost control of OpenAI.
by qsera | 2026-02-28 04:14:48+00:00
>driven by values

Would the people who have invested in the company like that? Or would they like the company to make some money? Are they going to piss off their investors by being "driven by values"?

I mean, please explain it to me how "driven by values" can be done when you are riding investor money. Or may be I am wrong and this company does not take investments.

So in the end you are either

1. funding yourselves, then you are in control, so there is at least a justification for someone to believe you when you say that the company is "driven by values".

2. Or have taken investments, then you are NOT in control, then anyone who trusts you when you say the company is "driven by values", is plain stupid.

In other words, when you start taking investment, you forego your right to claim virtuous.
The only claim that you can expect anyone to believe is "MY COMPANY WILL MAKE A TRUCKLOAD OF MONEY !!!!"
by coatmatter | 2026-02-28 04:16:23+00:00
One of my trend-following and easily-influenced sisters was quite locked into the Apple ecosystem (iPhones, MacBooks) with her young family, but just over Christmas last year, I spotted them with a refurbished ThinkPad (T490 or thereabouts), with a plan to buy another refurbished ThinkPad.

I /hope/ to see the slowdown in the new phones market affecting the pumped-up chatbot market. To reference Agent Smith, what good is a chatbot if you can't speak?
by nateb2022 | 2026-02-28 04:16:27+00:00
I find it more amusing that the benchmarks claim 530 GB/s throughput on an M1 Pro which has a 200GB/s memory bandwidth. The 275 GB/s figure for chained transforms has the same problem.

I suspect the benchmarks, if not most of this project, was completely vibecoded. There are a number of code smells, including links to deleted files, such as https://github.com/jasnell/new-streams/blob/ddc8f8d8dda31b4b... an inexistent REFACTOR-TODO.md

The presence of COMPLETENESS-ANALYSIS.md (https://github.com/jasnell/new-streams/blob/main/COMPLETENES...) isn't reassuring either, as it suggests the "author" of this proposal doesn't sufficiently understand the completeness of his own "work."
by blockmandev | 2026-02-28 04:16:38+00:00
QoraNet is building the world's fastest privacy-first Layer-1 blockchain
with native AI infrastructure. Our AI models are built entirely in Rust
using the Burn framework — no Python, no cloud, no paid dependencies.

We believe AI should be private, fast, free, and truly yours.

Website: qoranet.com
GitHub: github.com/qora-protocol
Hugging Face: huggingface.co/qoranet
Twitter: @Qora_Net
Show HN: CanaryAI – Claude Code Security Monitoring Tool
by jx887 | 2026-02-28 04:18:31+00:00
AI coding agents are powerful — but they run real commands on your machine. CanaryAI watches what they do and alerts you when something looks off: reverse shells, credential theft, persistence mechanisms, data exfiltration, and more.

It works by scanning Claude Code session logs in real time, applying a set of detection rules, and surfacing alerts in a native macOS menu bar app.

CanaryAI never blocks or interferes with your agent. It observes and reports.

https://github.com/jx887/homebrew-canaryai
by slibhb | 2026-02-28 04:18:40+00:00
I'm unsure how to feel about this whole dust-up. It doesn't seem like much has changed in substance. Maybe OpenAI outmaneuvered Anthropic behind the scenes. Possibly Anthropic was seen as not behaving deferentially enough towards the government. But this administration has proven comically corrupt, so it wouldn't surprise me if money was involved. Will be interested to see what journalists turn up.
by peteforde | 2026-02-28 04:18:46+00:00
I can actually clear a lot of that up. ChatGPT has accumulated a significant amount of ambient knowledge about what I'm working on and how I typically progress through asking questions, so the path isn't as blue sky as it appears.

For example, I'm working with a specialty SPCO switch IC that runs at 5V. There's never been and likely never will be a 3.3V version of the AS16M1. Being able to drive the switch (which functions like a shift register) from my ESP32 is top-of-mind.

The HCT125 being active low is directly responding to my question about why to choose it vs the 126 version; since the board I'm studying (which again, it has seen) uses 125s, it's reasonable to wonder why they'd choose one over the other.

Overall, the tone of chats on EE topics tend to be task-focused with permission to go on interesting side quests. I'm trying to get stuff done with room for relevant exploration along the way.

Does that change anything for you?
by 0xbadcafebee | 2026-02-28 04:19:21+00:00
A VM is table stakes for isolation. Nothing OS-level is going to prevent breaking out, the attack surface is too big and none of the common OSes are hardened enough. But also missing here is the firewall, which you need to prevent both data exfil and remote code execution from prompt injection. And the final part that's missing, is segregating all credentials from the agent's execution environment, which I don't think there's any existing solution for yet. Likely this will be either MCPs, or transparent proxies with policy engines that execute requests from tool calls.
by rustystump | 2026-02-28 04:19:51+00:00
All the ai gov drama is a giant shrug to me. The reality is uncle sam has all the power and whatever comes out of industry sam is gonna sam with just like any other gov.

Ethics dont exist on the global stage. The privacy ship sailed decades ago. It all looks performative to me across all sides.

The smart move is to side with gov using some hand wave jutsi about “we have a contract” to get access to sams big nuts. Sam aint gonna respect no contract regardless of what is in. He breaks all laws without consequence for the last 60 odd years.

Unless people start starving, no revolution is gonna change the status quo here. It is like 9D marketing/branding chess for ai companies
by linksnapzz | 2026-02-28 04:21:19+00:00
I read Hyperion in hs; and so much of what I read afterward (Chaucer, Boccaccio, Shakespeare, Keats, Eliot, Valéry) was influenced by Dan Simmons writing about it/quoting it. At this point, I doubt I could tell you where his influence on my taste & opinions on fiction begins or ends. Gone too soon.
by politician | 2026-02-28 04:21:48+00:00
I simply do not understand why Americans tech companies and their employees will hew and cry about supporting the military. For those of you who support their position, have you ever stopped to consider that your safe, comfortable lives of free speech and protests and TikTok and food and gas and Amazon Next-Day deliveries is enabled by a massive nuclear deterrent operated by the very military you oppose?

It is just so disappointing to come here and read these naive takes. Yes, Anthropic should be compelled to support the military using the DPA if necessary.
by insane_dreamer | 2026-02-28 04:23:48+00:00
I'm never using an OpenAI model or Codex ever again. Period. Idaf whether it scores better than Claude on benchmarks or not.

This is a red line for me. It's clear OpenAI has zero values and will give Hesgeth whatever he wants in exchange for $$$.

https://www.nytimes.com/2026/02/27/technology/openai-reaches...
by johncolanduoni | 2026-02-28 04:25:52+00:00
The attestation actually has nothing to do with the browser, only the holder of the passkey's key material. You can satisfy the attestation by having a passkey on your Android device and doing the normal Bluetooth flow with your Firefox browser on your Framework laptop. So this mechanism is totally useless for enacting this plan.

The operating system doesn't manage attestation because that's totally useless for the stated goal of the attestation system. Enterprises don't want their SaaS vendors to accept passkeys from some random employee's BitWarden, instead of the hardware keys they issued the employee. If the OS manages attestation and doesn't send anything to the relying party, then it doesn't solve anybody's problem at all.
by arjie | 2026-02-28 04:25:57+00:00
Passkeys have way too many footguns for me. If I use my phone to sign in I'm going to accidentally create a passkey there on iOS embedded webview. When I use Google Chrome, the website won't give me any information for me to find where I stored the passkey. Was it in iOS keyring? Chrome? My Bitwarden? If I had any discipline around this it would make sense but if I accidentally double tap on the screen I've got a passkey and it's stuck on my phone.

I'm sure it's of use to many people but it's been no end of pain for me and it has really signaled to me what it's like to grow into an old man unable to use computers when I was once a young man who would find this easy.
Show HN: Use your domain as its own sale page
by mrdost | 2026-02-28 04:27:02+00:00
Hi! If someone by chance collects/flips domains here, I built a small tool that lets you turn any domain you own into a simple for-sale page to get leads directly in your preferred contact (messenger, whatsapp, discord, email etc.).

You verify the domain once via redirect. After that, you can:

- Keep the redirect and use the generated sale page
- Remove the redirect and still keep the page live
- Share the page link in auctions or outbound emails
- Use it as a clean reference page for buyers

So even if you list your domain on marketplaces, this works as an independent page you control. Buyers can contact you directly and you're free to choose your own escrow.

It also includes valuation estimates and optional portfolio page if you manage multiple names.

Example page: https://d.omain.co/d/startup.broker

Curious if this feels genuinely useful as a supplemental channel, or redundant in practice
by ordu | 2026-02-28 04:27:20+00:00
> If it's a loyalty test then you'd think the DoD would be willing to let them "fail" and simply drop the contract, but instead they're threatening to label Anthropic a supply chain risk.

It is not just a test, it is PR of sorts. They want to bully everyone into loyalty.

> If we're going by Occam's razor: it's Friday so Pete probably started drinking ~10:30-11am.

If we're going by Occam's razor, then we should cut away the drinks. USSR started its terror not because someone was drunk, it was a deliberate action to make everyone afraid to do anything. They targeted people at random and executed them accusing them of counterrevolution or espionage. The goal was to instill fear.

Now Putin regime does the same, they are instilling fear in people. It is a basic authoritarian reflex to make people afraid of being marked as disloyal. They prefer to do it in unpredictable ways to create an uncertainty of where the red lines are so people don't try even to toeing them.

Trump is not very skilled in the mechanics of terror. He is predictable which is unfortunate for a would-be dictator. It is an incompetence, and if a hypothesis resort to it, it is a bad sign for a hypothesis. But AFAIK no hypotheses explaining Trump can avoid introducing his incompetence into the picture. In this light the reliance of a hypothesis on incompetence loses its discriminatory power.
by quantumwannabe | 2026-02-28 04:27:27+00:00
More details on the difference between the OpenAI and Anthropic contracts from one of the Under Secretaries of State:

>The axios article doesn’t have much detail and this is DoW’s decision, not mine. But if the contract defines the guardrails with reference to legal constraints (e.g. mass surveillance in contravention of specific authorities) rather than based on the purely subjective conditions included in Anthropic’s TOS, then yes. This, btw, was a compromise offered to—and rejected by—Anthropic.

https://x.com/UnderSecretaryF/status/2027566426970530135

> For the avoidance of doubt, the OpenAI - @DeptofWar contract flows from the touchstone of “all lawful use” that DoW has rightfully insisted upon & xAI agreed to. But as Sam explained, it references certain existing legal authorities and includes certain mutually agreed upon safety mechanisms. This, again, is a compromise that Anthropic was offered, and rejected.

> Even if the substantive issues are the same there is a huge difference between (1) memorializing specific safety concerns by reference to particular legal and policy authorities, which are products of our constitutional and political system, and (2) insisting upon a set of prudential constraints subject to the interpretation of a private company and CEO. As we have been saying, the question is fundamental—who decides these weighty questions? Approach (1), accepted by OAI, references laws and thus appropriately vests those questions in our democratic system. Approach (2) unacceptably vests those questions in a single unaccountable CEO who would usurp sovereign control of our most sensitive systems.

> It is a great day for both America’s national security and AI leadership that two of our leading labs, OAI and xAI have reached the patriotic and correct answer here

https://x.com/UnderSecretaryF/status/2027594072811098230
by conductr | 2026-02-28 04:27:41+00:00
Covid shutdown should have killed our economy, nothing short of government spending prevented otherwise.

So many people in the US live a paycheck to paycheck lifestyle, that the covid lockdowns without government spending would have likely devolved into zombie apocalypse territory where hungry people were ransacking homes in more affluent neighborhoods (yes, even occupied homes). This is why people also bought lots of guns and ammo during Covid. You may think those people are crackpots, but I feel we actually got very close to it happening.

My local food bank (big city) ran out of supplies just as they announced the first waves of stimulus or whatever they called it (the weekly checks). So I’m pretty sure we were literally only days away from that being a reality.
by anon-3988 | 2026-02-28 04:27:46+00:00
> Either it’s a bold face lie and OpenAI burns because of it

Do you really still genuinely believe in this? This is the same person that said ads is going to be the last resort, and yet we are getting ads. I just don't understand how people can trust a single word coming out of folks like Sam, Musk, Trump or whoever rich asshole.

I listen to these people talk and they literally do not have souls. They will say whatever it is they need to get ahead. I watched a couple of Sam speeches and videos, the man does not have anything interesting to say.
by AbstractH24 | 2026-02-28 04:29:41+00:00
I considered that comparison, but in all seriousness, I’m not sure it’s apt.

Are he and his peers Hitler or they the naive oligarchs who think they can keep populist leaders and their constituencies under their thumb? Only to be out maneuvered by the people who the masses think have their back.

I know many folks who think their political leaders have the best interest at heart (rightly or wrongly). I know nobody who thinks tech leaders do. At best they want to be them.
by binsquare | 2026-02-28 04:29:48+00:00
This isn't a novel technical vulnerability write up.

The author had copilot read a "prompt injection" inside a readme while copilot is enabled to execute code or run bash commands (which user had to explicitly agree to).

I highly suspect this account is astro-turfing for the site too... look at their sidebar:

```
Claude Cowork Exfiltrates Files

HN #1

Superhuman AI Exfiltrates Emails

HN #12

IBM AI ('Bob') Downloads and Executes Malware

HN #1

Notion AI: Data Exfiltration

HN #4

HuggingFace Chat Exfiltrates Data

Screen takeover attack in vLex (legal AI acquired for $1B)

Google Antigravity Exfiltrates Data

HN #1

CellShock: Claude AI is Excel-lent at Stealing Data

Hijacking Claude Code via Injected Marketplace Plugins

Data Exfiltration from Slack AI via Indirect Prompt Injection

HN #1

Data Exfiltration from Writer.com via Indirect Prompt Injection

HN #5
```
by jart | 2026-02-28 04:29:54+00:00
They're not threatening to do that. They just did. Read the tweet linked in the article.

> In conjunction with the President's directive for the Federal Government to cease all use of Anthropic's technology, I am directing the Department of War to designate Anthropic a Supply-Chain Risk to National Security. Effective immediately, no contractor, supplier, or partner that does business with the United States military may conduct any commercial activity with Anthropic. Anthropic will continue to provide the Department of War its services for a period of no more than six months to allow for a seamless transition to a better and more patriotic service. https://x.com/SecWar/status/2027507717469049070?s=20

This has never happened before. It just goes to show how overextended the USG is these days. America is broke. Anthropic is about to IPO. Most stock market money comes from foreign countries like Japan these days. All those people are going to trust Anthropic more if they believe the company is neutral among nations and acting as a check and balance to power.
by drdaeman | 2026-02-28 04:30:00+00:00
> Open-source models are only a couple of months behind closed models

Oh, come on, surely not just a couple months.

Benchmarks may boast some fancy numbers, but I just tried to save some money by trying out Qwen3-Next 80B and Qwen3.5 35B-A3B (since I've recently got a machine that can run those at a tolerable speed) to generate some documentation from a messy legacy codebase. It was nowhere close neither in the output quality nor in performance to any current models that the SaaS LLM behemoth corps offer. Just an anecdote, of course, but that's all I have.
by ProllyInfamous | 2026-02-28 04:30:06+00:00
This is probably off-topic (for /hn/), but it's a great clip.

>"What I do is I take things that are perfectly fine, and I make them worse. I come from a long line of people making things shittier — my father was an enshitificator, too!"

>Youtube>comment: "This would be funnier if it weren't the truth."
Show HN: QAA – YAML-Based Test Automation Agent Looking for Contributors)
by adhishtanaka | 2026-02-28 04:30:07+00:00
I am building QAA (Quality Assurance Agent), a testing tool aimed at reducing the time spent writing large automation scripts. Instead of detailed test code, you describe test steps in plain English inside a YAML file. On the first run, QAA uses Google Gemini to interpret the steps and execute them in a browser while recording every action. From the second run onward, the same test can execute without AI by replaying the recorded actions, making it faster and more consistent. After each run, it generates a report site with step-by-step screenshots, recorded API requests, storage details, and console logs. The project is still under development, and I am currently improving reliability and refining the reporting system. I would appreciate technical feedback, architectural suggestions, or contributions from anyone interested in browser automation or AI-assisted testing. GitHub: https://github.com/Adhishtanaka/QAA
by stinkbeetle | 2026-02-28 04:30:16+00:00
I would recommend they start by understanding the landscape and developing strategies that are more suited for the actual world as it is, not the naive fantasy land they believe it is.

Coming out publicly playing their hand like it's a royal flush when it's a 7 high and their cards are facing their opponent clearly wasn't going to do anything. The cynical take is they aren't that naive and this just gives them plausible deniability within their social circles when they are interrogated as to why they work for these corporations. But I like to give the benefit of the doubt.
by nickledave | 2026-02-28 04:31:21+00:00
Oh yeah he's refusing out of solidarity alright :eyeroll:

https://x.com/sama/status/2027578652477821175?s=20

Tonight, we reached an agreement with the Department of War to deploy our models in their classified network.

In all of our interactions, the DoW displayed a deep respect for safety and a desire to partner to achieve the best possible outcome.

AI safety and wide distribution of benefits are the core of our mission. Two of > our most important safety principles are prohibitions on domestic mass surveillance and human responsibility for the use of force, including for autonomous weapon systems. The DoW agrees with these principles, reflects them in law and policy, and we put them into our agreement.

We also will build technical safeguards to ensure our models behave as they should, which the DoW also wanted. We will deploy FDEs to help with our models and to ensure their safety, we will deploy on cloud networks only.

We are asking the DoW to offer these same terms to all AI companies, which in our opinion we think everyone should be willing to accept. We have expressed our > strong desire to see things de-escalate away from legal and governmental actions and towards reasonable agreements.

We remain committed to serve all of humanity as best we can. The world is a complicated, messy, and sometimes dangerous place.

Amazing / weird that this sounds like a lot of the stuff Amodei said Anthropic asked for