MurphyA/hacker-news huggingface dataset:
by susanwicks26 | 2026-02-20 15:04:54+00:00
Choosing furniture style can paralyze people with options—modern, traditional, industrial, bohemian. A single wooden bed frame solves this by working across aesthetic categories. The classic country proportions appeal to traditional sensibilities, while the clean lines and minimalist slatting suit contemporary spaces. The neutral painted finish adapts to any colour scheme without visual conflict. This flexibility means you can make a bed frame choice confidently, knowing it will accommodate evolving style preferences without clashing or feeling dated.
by arghwhat | 2026-02-20 15:05:06+00:00
A good example for the discussion: leather being animal skin which obviously cannot come from a mushroom.

Assuming you were countering my vegan leather claim: Products marketed "vegan leather" is polyurethane or similar, and for marketing reasons you would use a different term if you did something fancier to differentiate. My gut feeling is that a mycelium-based product would be far more expenisive than simple polyurethane, and quite an upsell.
Show HN: Aguara – Security scanner for AI agent skills and MCP servers
by garagon | 2026-02-20 15:05:29+00:00
Hey HN,

I built Aguara because I kept seeing the same problem: AI agents and MCP servers
run code on your behalf, and nobody is checking what that code actually does before
it runs.

A single malicious skill file can exfiltrate your SSH keys, inject prompts to
override safety instructions, or curl-pipe-bash a backdoor. I wanted something
like Semgrep but specifically for the AI agent ecosystem.

Aguara is a Go binary that does static analysis on skill files (markdown,
YAML, JSON configs). It's offline, deterministic, no LLM, no API keys needed.

What it catches:
- Prompt injection (instruction overrides, jailbreaks, delimiter injection)
- Data exfiltration (webhook URLs, DNS tunneling, env var leaks)
- Credential leaks (OpenAI/AWS/GCP keys, private keys, DB connection strings)
- Supply-chain attacks (curl|bash, binary download+execute, unpinned npx)
- MCP-specific threats (tool injection, privileged docker, shell metacharacters)
- 138 rules across 15 categories total

It goes beyond regex — there's NLP-based markdown structure analysis (using
goldmark AST walking) to catch things like hidden instructions in HTML comments,
and taint tracking to detect dangerous capability combinations (e.g., a skill
that reads private data AND has network access).

I also built Aguara Watch (https://watch.aguarascan.com/) which continuously
scans 31,000+ public AI agent skills across 5 registries (skills.sh, ClawHub,
PulseMCP, mcp.so, LobeHub). The scan data is open — you can query any skill's
security report via a static JSON API.

Some numbers from scanning the entire public ecosystem:
- 31,330 skills scanned
- ~2,330 with security findings (7.4%)
- 448 critical findings (mostly curl|bash, hardcoded keys, jailbreak prompts)
by Cherub0774 | 2026-02-20 15:05:30+00:00
We all have something similar, it seems! I stole mine from https://stackoverflow.com/questions/7726949/remove-tracking-....

I also set mine up to run on `git checkout master` so that I don't really have to think about it too hard -- it just runs automagically. `gcm` has now become muscle memory for me.

alias gcm=$'git checkout master || git checkout main && git pull && git remote prune origin && git branch -vv | grep \': gone]\'| grep -v "\*" | awk \'{ print $1; }\' | xargs -r git branch -D'
Show HN: Merge – Connect Apple Watch to Android
by urip | 2026-02-20 15:05:35+00:00
TLDR: Merge finally brings the Apple Watch to Android. Unlock Apple Watch's cutting-edge health data on your Android phone, synced to any Health Connect compatible app. Get Android notifications on your wrist, reply to messages, control media playback, and more.

Hi all!

I've always believed the best hardware and the best platform should work together, regardless of who made them. Apple Watch has the most advanced health sensors, Android offers unmatched openness and flexibility, and there was no good reason these two couldn't coexist.

So we built Merge for Apple Watch.

Merge connects your Apple Watch to any Android phone for notifications, messaging, media controls, and brings the Apple Watch's cutting-edge health data into the Android ecosystem, to be used with any Health Connect compatible app. Also, for anyone juggling two phones, like a personal iPhone and a work Android, it's the only solution that lets you use your watch for both.

Would love your thoughts and feedback!
Show HN: Minimalistic workout tracker for iPhone – Stats, Trends, Streaks
by toni88x | 2026-02-20 15:06:51+00:00
Streakout is a minimal iOS workout tracker designed to extend Apple Health & Fitness. It reads your existing workout data and turns it into beautiful tiles, charts, and timelines – helping you answer one of the most important questions for your health: “How often did I move this week, this month, this year…?”

Because what really matters is showing up.

There’s no signup, no clutter, no subscription, no data sharing, and no noise – only the most relevant stats and insights, neatly packaged into two simple screens: overview and calendar feed.

Would deeply appreciate some feedback.

LET'S MOVE
Show HN: Hivemind – A shared coordination layer for AI agents
by gbram | 2026-02-20 15:06:58+00:00
I've been running multiple AI agents (Claude Code, Cursor, Codex) on the same codebase and kept hitting the same problem: they have no idea what each other are doing. Agent A refactors the auth module while Agent B is building a feature that depends on it. Agent C re-investigates a decision that Agent A already made and documented in a different session, but doesn't have access to Agent A's decision making process. Many times I'll have multiple agents running and coming up with different findings that contradict one another since there's no "source of truth" where they can see past decisions that other agents and users made to guide their decision making process... and subsequently burning tokens along the way

The root cause is simple: there's no shared state between agents. Each one starts with a blank slate every session, and when you run them in parallel, conflicts are inevitable.

Hivemind is my attempt at fixing this. It's a persistent, append-only event log exposed as an MCP server. Every agent publishes structured events (decisions, completions, blockers) and every agent can query the log to understand what's happening across the project. I find it most useful when one agent completes a large task, and then my next agent can easily see the updates done instead of scanning through my codebase or git commits, trying to piece together the changes. This alone has saved me tons of session context / tokens.

What it does:

- Shared event log — Agents publish what they're doing and query what others have done. "What auth approach did we decide on?" returns a real answer instead of the agent guessing.

- Advisory file locks — Before editing a file, an agent acquires a lock. If another agent holds it, the edit is blocked with an explanation. TTL-based expiry handles crashes. This alone eliminated most of the conflicts I was seeing. There's also a --no-locks configuration option to disable locking files entirely and then dealing with any potential merge conflicts.

- Semantic search — Events are embedded with vector search, so agents find relevant context by meaning. Searching "login changes" matches "Migrated authentication to JWT" even though no keywords overlap.

- Task state — Active tasks, blockers, and completions are derived from the event stream. Any agent can check what's in progress before starting new work.

- Knowledge base — Persistent project docs that survive across sessions. Architecture decisions, conventions, context that agents need repeatedly.

- Human approvals — Agents can request sign-off before touching critical files. You approve/deny from the dashboard.

How it works in practice:

Install globally (npm install -g @hivemindai/mcp-server), run hivemind login, then hivemind init in your project. It auto-configures your editor's MCP settings and adds coordination rules to CLAUDE.md so agents know to use it.

Would love feedback from anyone running multi-agent workflows!!
by otikik | 2026-02-20 15:07:03+00:00
> This happens gradually. In middle school, you learn that certain enthusiasms are embarrassing. In high school, you learn which opinions are acceptable in your social group. In college, you refine your persona further. By the time you're an adult, you've become so skilled at reading rooms and ajusting accordingly that you don't even notice you're doing it. You've automated your own inauthenticity.

What the author is describing is called masking/social camouflage. It is usually a symptom of something deeper - be it low self-esteem, infant trauma, etc. I am not a mental health expert, but I do think that getting to the original cause and treating that will tend to give better results than concentrating on the symptoms.
by qudat | 2026-02-20 15:07:30+00:00
I use it pretty extensively. The reason why it's a tool is because it cannot work without an SWE running it. You have to prompt it and re-prompt it. We are doing a lot of the heavy lifting with code agents that people hyping it are ignoring. Sure, as a non-swe, you can vibe a project from zero-to-proto, but that's not going to happen in an enterprise environment, certainly not without extensive QA/Code review.

Just take a look at the openclaw codebase and tell me you want to maintain that 500k loc project in the long-term. I predict that project will be dead within 6 months.
by bicepjai | 2026-02-20 15:07:41+00:00
Newton’s gravity vs Relativity is a matter of precision. Newtonian mechanics is a limiting case of general relativity that works excellently within known bounds. PRNGs, by contrast, can fail categorically, not just in precision. A PRNG with subtle correlations doesn’t just give you a slightly less accurate answer, it can produce systematically biased results that look perfectly fine until they don’t. The failure modes are qualitatively different.
by SecretDreams | 2026-02-20 15:08:24+00:00
This exactly. How sustainable are the current spends in the wake of needing ROI against these spends in the not too distant future? And who will be able to afford an upgrade cycle only 2-3 years from now given none of the capex spent will have hit positive ROI 2-3 years out.

Will everyone just accept negative ROI in the name of hype? Will scalers be able to meaningfully increase service prices without eroding customer interest?

These are all unanswered questions that a simple PE statement can't support.
by palmotea | 2026-02-20 15:08:27+00:00
> There's not much you can do about it, as sibling comment mentions it's a known gap. There is some work [0] in this space on the investigative side to trace the leak's source, but again the only way it would work is if you can obtain a leaked copy post hoc (leaked to press, discovered through some other means, etc.).

Those kinds of watermarks seem like they'd fail to a sophisticated actor. For instance, if that echomark-type of watermark becomes widespread. I supposed groups like the New York Times would update their procedures to not publish leaked documents verbatim or develop technology to scramble the watermark (e.g. reposition things subtly (again) and fix kerning issues).

With generative AI, the value of a photograph or document as proof is probably going to go down, so it probably won't be that big of an issue.
by lo_zamoyski | 2026-02-20 15:09:02+00:00
1. There is a distinction between appearing boring and being boring. The object isn't to seem interesting. The object is to be what you ought. Defining yourself according to the expectations of others instead of what is objectively good is what produces boring people.

2. People often vacillate between conformity and contrarianism. This is what juvenile edgelords on the internet are about. Both conformists and contrarians are trapped inside the same silly paradigm. Both define themselves and behave not in terms of the truth, to which all intelligence and behavior must conform, but in relation to others and what they think. A conformist assumes a persona that agrees with others in their social setting, regardless of whether it is objectively good. A contrarian takes what agrees with others and negates it, regardless of whether it is objectively good. Both are mindless, reflexive, and boring. Both lack substance. Both are empty theater rooted in people-pleasing and approval-seeking. Both are dishonest, cowardly acts of deception.

3. Reading a room isn't about people-pleasing. It's about empathy so that you can response in the way that is good and needed. If you enter a funeral parlor, you don't crack jokes or paint your toenails. You recognize there are people grieving there, that a dead person is being honored. In other words, you also consider, within reason, the good of others in the room, and you respond to the facts as they are, even when pursuing your own goals.

4. One flaw in the "I gotta be ME!" schtick is that it idolizes the self. It makes a god of the self. It puts unmoored desires above the truth instead of rooting desires in the truth. There are plenty of desires that ought not to be indulged, at least not indulged in certain ways or at certain times. The point is that your behavior ought to occur within the scope of reason. What is evil and wrong is always outside of reason.

5. Life can be messy. We can be messy. When that is the case, the goal isn't to keep messing it up or to run with our own mess toward the abyss. These messes, our mess, is a kind of cross we bear for the good. They're things we struggle with, not surrender to. If someone has a tendency to overeat, it might be difficult to resist, but it is good for him to practice fasting. If someone has a habit to reach for porn, it may be painful to resist, but it is good for him to resist and to avoid so that he can overcome the habit instead of wallowing in slavish submission to that awful vice. If someone has a tendency toward irascibility and wrath, it may feel satisfying to indulge it in the moment, but practicing meekness is the true reward. If someone has trouble with envy, tearing someone down may scratch that itch, but responding with selfless good will is freedom. Triumph over vice makes us interesting. Succumbing to its easiness makes us boring.
Show HN: EagerORM – A Lightweight Java ORM Between Hibernate and JOOQ
by SavkoDinamitas | 2026-02-20 15:09:02+00:00
I recently finished my graduation project - EagerORM, a lightweight ORM framework positioned somewhere between Hibernate and jOOQ.

The idea was to explore a simpler, more transparent ORM design while still keeping annotation-based entity mapping and relationships. It supports basic CRUD, explicit relation loading, dialect-aware query generation even for more complex SELECT queries, and transaction scoping .

It’s published on Maven Central and fully open source if anyone wants to take a look or try it out:
https://github.com/SavkoDinamitas/EagerORM

Would appreciate any feedback
by Muvasa | 2026-02-20 15:09:06+00:00
I prefer tui's for two reasons.
1. Very used to vi keybindings
2. I like low resources software. I love the ability to open the software in less than a second in a second do what I needed using vi motions. And close it less than a second.

Some people will be like you save two seconds trying to do something simple. You lose more time building the tool than you will use it in your life.

It's not about saving time. It's about eliminating the mental toll from having to context switch(i know it sounds ai, reading so much ai text has gotten to me)
by teekert | 2026-02-20 15:09:19+00:00
Sure, be polarizing, have opinions. But be careful not to be judgemental. Be open minded, don't judge too soon when other opinions don't match yours, don't label people. Let's stay nice.

In that sense I don't really get the "some people wont like you". I think it pretty poor form if you don't like people that have a different opinion. How can you not be interested in learning a different view on things?
by GetTheFacts | 2026-02-20 15:09:21+00:00
>okay? Why are you browsing my comment history lol

Why not? That's kind of the whole point of having accounts here on HN. To create an environment where folks can discuss stuff in good faith. Posting history is public because the posts were public in the first place and they represent who you are (or present yourself to be) on the site.

It allows each of us to be authentically 'us'. Do you not stand by the things you've posted in the past four plus years?

If you do, why do you care if people are looking at your posting history?

If you don't stand by what you've written here in the past, you're likely not posting in good faith.

Either way, why are you concerned about folks looking at the stuff you've publicly posted in the past?
by win311fwg | 2026-02-20 15:09:23+00:00
You'd probably have to be doing something pretty unusual to not use a worker queue. Your "P.S." point being a perfect case in point as to why.

If you have a legitimate reason for doing something unusual, it is fine to have to use the tools unusually. It serves as a useful reminder that you are purposefully doing something unusual rather than simply making a bad design choice. A good language makes bad design decisions painful.
by ottah | 2026-02-20 15:09:31+00:00
The state applying strict scrutiny is an intimidation tactic that infringes legitimate speech. We also know very well that none of these systems will work well and that the DOJ will be happy to apply bans as far as they can get away with. It will be the no fly list for physical objects, and we won't even be told what is explicitly banned. We'll just not be able to print something. It will be very hard to argue to argue to the courts and at that point the harm is done, and there is no real effective remedy. They've already blocked and discouraged a legitimate right.
by OJFord | 2026-02-20 15:09:34+00:00
What's the DBMS? We moved in the other direction with postgres, merged multiple databases to simply have a schema per service/application instead. All the advantages with none of the disadvantages, imo. (We then had a single database per running test/dev environment, rather than multiple.) Of course, that's a pg thing, if you use MySQL for example it's not an option.
by ecshafer | 2026-02-20 15:09:44+00:00
We have cases where people grow up in the US, are natural born Americans, and they are taking paychecks to go compete against America in the Olympics. Americans are excusing this as "at least she got her bag". The effects of post-modernism, and this idea that there is no objective truth nor morality is slowly destroying society. When someone immigrates to the US it should be clear to them that their loyalty belongs to the US.
by arghwhat | 2026-02-20 15:09:56+00:00
Mycelium is neat, but last time I heard of it the problem was far, far too low manufacturing throughput.

I don't think anyone would even consider marketing that as "vegan leather", as doing so would mean putting you in the same bucket as cheap-as-dirt polyurethane (which is what regular "vegan leather" is), at an astronomically higher price. You'd pick a new term to differentiate.

I vote for "shroomskin".
by throwaway063_1 | 2026-02-20 15:10:10+00:00
> In fact a decent % of people stops shopping on your site if there's a few ms lag.

While it's still true, I have read that the accepted lag today is higher than 10-15 years ago, because they have lower expectations due to a general decline in page load speed. (React pages with spinners/placeholders, newsletter popups, higher page weights etc.)
Show HN: PortPilot – A TUI for managing ports and processes
by AbdullahTarakji | 2026-02-20 15:10:44+00:00
Hi HN! I built PortPilot – a terminal UI that shows all listening ports on your machine, lets you kill processes with one key, and detects port conflicts.

I got tired of typing `lsof -i :3000 | grep LISTEN` 100 times a day while juggling frontend servers, databases, and Redis. Needed something visual but terminal-native.

Built with Go + Bubble Tea. Works on macOS and Linux. MIT licensed.

Features:
- Interactive TUI with real-time updates
- One-key process killing (select, press k, done)
- Search/filter by port or process name
- Conflict detection (highlights when multiple processes fight for same port)
- CLI mode for scripting (portpilot list --json | jq ...)
- Service groups (tag ports as "frontend", "backend", "database")

Also ships as a CLI tool – `portpilot check 3000`, `portpilot kill 8080`, etc.

Would love feedback on the UX and feature requests!

Repo: https://github.com/AbdullahTarakji/portpilot
by zerosizedweasle | 2026-02-20 15:10:47+00:00
"What I discovered, though, is that behind all these small complaints, there’s something much more serious. Roy Lee is not like other people. He belongs to a new and possibly permanent overclass. One of the pervasive new doctrines of Silicon Valley is that we’re in the early stages of a bifurcation event. Some people will do incredibly well in the new AI era. They will become rich and powerful beyond anything we can currently imagine. But other people—a lot of other people—will become useless. They will be consigned to the same miserable fate as the people currently muttering on the streets of San Francisco, cold and helpless in a world they no longer understand. The skills that could lift you out of the new permanent underclass are not the skills that mattered before. For a long time, the tech industry liked to think of itself as a meritocracy: it rewarded qualities like intelligence, competence, and expertise. But all that barely matters anymore. Even at big firms like Google, a quarter of the code is now written by AI. Individual intelligence will mean nothing once we have superhuman AI, at which point the difference between an obscenely talented giga-nerd and an ordinary six-pack-drinking bozo will be about as meaningful as the difference between any two ants. If what you do involves anything related to the human capacity for reason, reflection, insight, creativity, or thought, you will be meat for the coltan mines."

What people really think about Silicon Valley. Not so fun to devalue people now is it? Tech is biggest group of assholes.
by lalaland1125 | 2026-02-20 15:12:04+00:00
> Participants who switched from the chronological to the algorithmic feed prioritized a conservative policy agenda over a liberal one by 0.11 s.d., compared with those who remained on the chronological feed (95% CI: 0.02, 0.20; P = 0.016). The experiment also influenced views on the criminal investigations into Trump: those who switched to the algorithmic feed were 0.08 s.d. more likely to consider them completely unacceptable (95% CI: 0.01, 0.16; P = 0.026). This effect is larger and more precisely estimated for aspects of this belief held by a smaller share of participants in the control group (as shown in Supplementary Information Fig. 2.4), indicating that the effect is concentrated among more loyal Trump supporters. Regarding Russia’s invasion of Ukraine, for participants initially on the chronological feed, exposure to the algorithmic feed increased pro-Kremlin attitudes by 0.12 s.d. (95% CI: 0.03, 0.21; P = 0.007).