MurphyA/hacker-news huggingface dataset:
by BrenBarn | 2026-02-15 23:52:11+00:00
I think that is the crucial question. Often we lump together malice with "reckless disregard". The intention to cause harm is very close to the intention to do something that you know or should know is likely to cause harm, and we often treat them the same because there is no real way to prove intent, so otherwise everyone could just say they "meant no harm" and just didn't realize how harmful their actions could be.

I think that a journalist using an AI tool to write an article treads perilously close to that kind of recklessness. It is like a carpenter building a staircase using some kind of weak glue.
by shiroiuma | 2026-02-15 23:52:38+00:00
>I'm from EU, so ymmw. I simply don't tip.

I guess you've never been to Germany.

Last time I was there (last year), I tried just giving small "trinkgeld" tips (round up to nearest Euro) and the servers were PISSED. I've never seen such rude service.

So why do EU people always say there's no tipping in the EU? This clearly isn't true, at least not any more.

When I traveled in the EU in the 2010s, it wasn't like this at all. WTF is going on over there?
by apparent | 2026-02-15 23:53:59+00:00
I've listened to tens of hours of NotebookLM, and this doesn't even seem close. If someone had played his voice for me and asked if it sounded like any LLM/bot I was aware of, I would have said no. It would not have even occurred to me that they were thinking of NotebookLM.

As @crazygringo said, David's voice is lower. I think it might have some of the same harmonics, but it has some lower ones too, which make the overall sound come across as lower-pitched. I'm not using technical terminology here, so perhaps someone can jump in with the appropriate terms.
by Kim_Bruning | 2026-02-15 23:54:09+00:00
We're taking the rest of my statement as accurate then? O:-)

Fine, so in addition to the fact that this whole action SHOULD be prima facie illegal in Europe; for the FRAND part (which is -to be fair- the weaker part of my argument, because this shouldn't be happening in the first place) :

* Forum shopping in Munich is at least somewhat unfair

* Implementors went $0.03, Uk court set interim rate of $0.365, now nokia is going for $0.69? We can argue unreasonable [1][3]

* Hisense settled at undisclosed terms, Acer and Asus were injuncted, so that counts towards discriminatory [2]

[1] https://www.juve-patent.com/cases/us-firms-secure-asian-impl...

[2] https://www.juve-patent.com/cases/hisense-settles-global-dis...

[3] https://ipfray.com/munich-i-regional-court-enjoins-computer-...
by pibaker | 2026-02-15 23:54:20+00:00
If you want to complain about the state of modern web, you can just do it. You don't need to spin up a story about how the old internet was faster than it actually was.

This is the same pattern you see in politics when people on all sides (even the nominally progressive ones) lie to each other about how great the olden days were, when in reality it's all about their dissatisfaction with the present day.
by merlindru | 2026-02-15 23:54:39+00:00
i think your self reflection here is commendable. i agree on both counts.

i think the silver lining is that AI seems to be genuinely good at finding security issues and maybe further down the line enough to rely on it somewhat. the middle period we're entering right now is super scary.

we want all the value, security be damned, and have no way to know about issues we're introducing at this breakneck speed.

still i'm hopeful we can figure it out somehow
by IgorPartola | 2026-02-15 23:55:14+00:00
I was recently doing some very specific web scraping of some very public very static documents. About 25% of them use a soup of divs with hashes for class names. Not a <main> or <article> or <section> in sight. I am fine with the idea of what tailwind does but like at least using semantic tags where appropriate could be a thing.
by gz5 | 2026-02-15 23:55:30+00:00
Congrats on progress.

These are differentiating from most VPN and zero trust:

+ fully self-hostable open source

+ avoid ACL complexity (default closed architecture)

+ sovereign identity-based

OpenZiti is similar in those – how do you compare and contrast the two since very few others share those differentiators (I am an OZ maintainer)?
by xvector | 2026-02-15 23:57:07+00:00
Hey, as a security engineer in AI, I get where you're coming from.

But one thing to remember - our job is to figure out how to enable these amazing usecases while keeping the blast radius as low as possible.

Yes, OpenClaw ignores all security norms, but it's our job to figure out an architecture in which agents like these can have the autonomy they need to act, without harming the business too much. I have OpenClaw set up in my sandbox and it works wonderfully. I get the benefits without the security drawbacks.

So I would disagree our work is "on the way out", it's more valuable than ever. I feel blessed to be working in security in this era - there has never been a better time to be in security, especially AI or agent security. Every business needs us to get these things working safely, lest they fall behind.
by wk_end | 2026-02-15 23:57:51+00:00
Let's throw on one more: consumers had lost faith in Sega. The Sega CD, 32X, and Saturn (in the US) were all abandoned by the company (for understandable reasons, but still). Why shell out another $200 for yet another system which was going to be prematurely dropped in a couple of years? Which, of course, was exactly what happened.
by acdha | 2026-02-15 23:57:56+00:00
Okay, can you express the “legal and cooperation loopholes Apple has put behind those” clearly enough for me to understand what you mean? Are you alleging that iCloud E2EE is compromised? Are you saying that Apple promised RCS would do something more than the carriers designed it to do? It’s hard to assess vague, unsourced claims.
by oceanplexian | 2026-02-15 23:58:24+00:00
This is going to sound crazy but I felt it was super degraded this morning.

CC was slow and the results I was getting were subpar having it debug some easy systems tasks. Later in the afternoon it recovered and was able to complete all my tasks. There’s another aspect to these coding agents: the providers can randomly quantize or lobotomize models based on their capacity, so the model you’re getting may not be the one someone else is getting, or the same model you used yesterday.
Launched Book Digest on PH – learned that users want 3x more depth
by erichjef | 2026-02-15 23:58:30+00:00
I launched Book Digest (AI book summaries) on Product Hunt a few days ago.

Clear feedback: summaries were too short (~800 words). People expect Blinkist-level depth (2500+ words).

Spent 2 days debugging OpenAI JSON parsing, Prisma database persistence, and token limits. Then regenerated 450 books
overnight with an improved AI prompt.

Result: 2-3x deeper summaries with detailed chapters, insights, and action items.

Demo (no signup): https://book-digest.com/books/6c8e5031-1c55-4bdd-8c11-ae5338f374c7?ts=1

Key lesson: Launch fast, but listen to feedback and iterate quickly. Users will tell you exactly what's missing.

Tech stack: Next.js, Postgres, OpenAI GPT-4o-mini, Stripe.

Happy to answer questions about the technical challenges (the database persistence bug was particularly tricky).
by vor_ | 2026-02-15 23:59:00+00:00
Respectfully, I find this to be an unwarranted positive reaction to have toward this situation. What other action could Ars possibly take as a journalistic business? The quotes are indisputably false. This is hardly a praise-worthy action to take. It's the expected and required action.

With regard to editorial review, an editor didn't catch the error. The target of the false quotes had to register on Ars and post a comment about it. To top it off, more than one Ars commenter was openly suspicious that he was a fake account. Only when some of the readers checked for themselves to see that the quotes were indeed falsified did it gain attention from Ars staff.
by zamalek | 2026-02-15 23:59:21+00:00
> being left behind (“I still can’t bring myself to vibe code. I have to at least skim every diff. Meanwhile this guy is joining OpenAI”).

I don't believe skimming diffs counts as being left behind. Survivor bias etc. Furthermore, people are going to get burned by this (already have been, but seemingly not enough) and a responsible mindset such as yours will be valued again.

Something that still up for grabs is figuring how how to do full agenetic in a responsible way. How do we bring the equivalent of skimming diffs to this?
by rgbrenner | 2026-02-15 23:59:25+00:00
But the security risk wasnt taken by OpenClaw. Releasing vulnerable software that users run on their own machines isn't going to compromise OpenClaw itself. It can still deliver value for it's users while also requiring those same users to handle the insecurity of the software themselves (by either ignoring it or setting up sandboxes, etc to reduce the risk, and then maybe that reduced risk is weighed against the novelty and value of the software that then makes it worth it to the user to setup).

On the other hand, if OpenClaw were structured as a SaaS, this entire project would have burned to the ground the first day it was launched.
by sbochins | 2026-02-15 23:59:27+00:00
At the end of the day, he built something people want. That’s what really matters. OpenAI and Anthropic could not build it because of the security issues you point out. But people are using it and there is a need for it. Good on him for recognizing this and giving people what they want. We’re all adults and the users will be responsible for whatever issues they run into because of the lack of security around this project.
by toofy | 2026-02-16 00:00:47+00:00
what evidence are you looking for?

there is absolutely evidence a government agency is using palantir. the very beginning of the article:

> New York City’s public hospital system is paying millions to Palantir ... automated scanning of patient health notes to “Increase charges captured from missed opportunities,” contract materials reviewed by The Intercept show.

later it explains:

> Palantir’s contract with New York’s public health care system allows the company to work with patients’ protected health information, or PHI ... Palantir can “de-identify PHI and utilize de-identified PHI for purposes other than research,” the contract states.

so a government agency is allowing palantir access to private health information to use for other purposes other than research.

again, i dont know what kind of evidence you're looking for, but much of the conversation ive seen revolves around those two pieces of the article.

those two pieces of "evidence" i find to be terrifying considering what we know about palantir and its founders/leaders. and again, it seems entirely appropriate for the discussions to happen from the "evidence" the article puts forward.

the government should not be sharing private health information with private corporations "...for purporses other than research" and it absolutely shouldnt be using those data brokers sidestep warrantless data collection.

if you think the government should be able to amass enormous dossiers on all of its citizens, thats fine, you're entirely within your right to want tyranny, but we're also allowed to think this directional shift is absolutely terrifying.
by shiroiuma | 2026-02-16 00:01:59+00:00
I'm going to "third" this advice (though not the Plex part). Jellyfin is fantastic. Yes, you have to be careful which devices you use it on, because the client app isn't available for all smart TVs, but you can get around that by just buying a GoogleTV stick (like the $30 one from Onn) and plugging that into your TV; then you can install the JF app on it through the Play store (or even sideload it if you really want). I did this for my wife's parents, and it works great, and my own parents' Roku TV has the JF app in its store already.
Show HN: Clawty - Text your Claude Code from anywhere
by ryannampham | 2026-02-16 00:02:43+00:00
I vibecoded a tool I desperately needed called Clawty, a tool to text your Claude Code from your phone.

I realized that I needed this type of tool when I was not wanting to get out of my bed and send another prompt to Claude Code, so I vibecoded up this tool in a day.

I literally went out to eat pho and texted my clawty, and it got some documentation work done. And no, I do not know if or how it differs from OpenClaw because I do not use OpenClaw in the first place. It's open source so feel free to check out the code, make some PRs, and improve Clawty.
by lyu07282 | 2026-02-16 00:03:03+00:00
What the fuck are you talking about, they are well known to not be transparent about their private contractor dealings.

https://www.statewatch.org/analyses/2025/behind-closed-doors...

https://www.heise.de/en/news/How-Europol-is-cozying-up-to-Mi...
by PaulDavisThe1st | 2026-02-16 00:03:36+00:00
There is a reason that most people do not use interpreted languages, or languages with garbage collection, for audio synthesis and DSP.

It's great that it works, and it may well work 99% of the time. And it may have been a great learning experience/platform, so congrats for that.

But it's important for people to understand why this is generally the wrong toolset for this sort of software development, even when it can be so much fun.

Python and other interpreted languages (Lua excepted, with conditions), and languages like Swift that have GC, cannot ensure non-blocking behavior in the code that need to runs in realtime. You can paper over this with very large audio buffers (which makes the synth feel sluggish) or with crossed fingers (which work a surprising amount of the time). But ultimately you need a language like C/C++/Rust etc. to ensure that your realtime DSP code is actually realtime.

Despite Apple pushing Swift "for everything", even they still acknowledge that you should not write AudioUnit (or any other plugin formats) using Swift.

Meanwhile, have fun with this, which it looks like you already did!
by Joel_Mckay | 2026-02-16 00:03:53+00:00
In general, "any conceivable LLM" was the metric based on current energy usage trends within the known data-centers peak loads (likely much higher due to municipal NDA.) A straw-man argument on whether it is asymptotic or not is irrelevant with numbers that large. For example, 75% of a our galaxy energy output... now only needing 40% total output... does not correct a core model design problem.

LLM are not "AI", and unlikely ever will be due to that cost... but Neuromorphic computing is a more interesting area of study. =3
by jnaina | 2026-02-16 00:04:02+00:00
Damn. I just installed OpenClaw on my M2 Mac and hopped on a plane for our SKO in LAX. United delayed the plane departure by 2 hours (of course) and diverted the flight to Honolulu. And Claw (that's the name of my new AI agent) kept me updated on my rebooking options and new terminal/gate assignments in SFO. All through the free WhatsApp access on United. AND, it refactored all my transferred Python code, built a graph of my emails, installed MariaDB and restored a backup from another PC. And, I almost forgot, fixed my 1337x web scrapping (don't ask) cron job, by CloudFlare-proofing it. All the while sitting in a shitty airline, with shitty food and shittier seats, hurtling across the pacific ocean.

The future is both amazing and shitty.

Hope OpenClaw continues to evolve. It is indeed an amazing piece of work.

And I hope sama doesn't get his grubby greedy hands on OpenClaw.
by andyferris | 2026-02-16 00:05:10+00:00
I don't know. It's more of a sharp tool like a web browser (also called a "user agent") - yes an inexperienced user can quickly get themselves into trouble without realizing it (in a browser or openclaw), yes the agent means it might even happen without you being there.

A security hole in a browser is an expected invariant not being upheld, like a vulnerability letting a remote attacker control your other programs, but it isn't a bug when a user falls for an online scam. What invariants are expected by anyone of "YOLO hey computer run my life for me thx"?
by ilamont | 2026-02-16 00:05:41+00:00
Former technology journalist here.

If you want to experiment with reported news using untested tools that have known quality problems, do it in a strictly controlled environment where the output can be carefully vetted. Senior editor(s) need to be in the loop. Start with something easier, not controversial or high-profile articles.

One other thing. If the author cut corners because he's too sick to write, but did so anyway because he thought his job would be in jeopardy if he didn't publish, maybe it's time for some self-reflection at Ars regarding the work culture and sick leave/time-off policies.
by mschuster91 | 2026-02-16 00:07:13+00:00
> when they were willfully obstructing federal agents from doing the job they were assigned.

Even if one assumes that to be true: there might have been a case for an arrest, but not for firing into a moving vehicle that is forbidden even under ICE guidelines, and certainly not for unloading a whole magazine worth of ammunition into an unarmed person.

I stand by my judgement: both cases were extrajudicial killings and clear enough in their intent to be called executions.
by DrewADesign | 2026-02-16 00:07:32+00:00
I think you should give your gut instinct more credit. The tech world has gotten a false sense of security from the big SaaS platforms running everything that make the nitty gritty security details disappear in a seamless user experience, and that includes LLM chatbot providers. Even open source development libraries with exposure to the wild are so heavily scrutinized and well-honed that it’s easy even for people like me that started in the 90s to lose sight of the real risk on the other side that. No more popping up some raw script on an Apache server to do its best against whatever is out there. Vibe coded projects trade a lot of that hard-won stability for the convenience of not having to consider some amount of the implementation details. People that are jumping all over this for anything except sandbox usage either don’t know any better, or forgot what they’ve learned.
by skybrian | 2026-02-16 00:07:35+00:00
I believe the idea is that it's not local. It's a very large file on an HTTP server (required for range requests) and you don't want to download the whole thing over the network.

Of course, since it's on an HTTP server, it could easily handle doing multiple requests of different files, but sometimes that's inconvenient to manage on the server and a single file would be easier.

Maybe this is downstream of Gwern choosing to use MediaWiki for his website?
by corford | 2026-02-16 00:07:38+00:00
I live in Europe and my city has had a large, very noticeable uptick of American expats arriving over the last two years. Conversely, I have never known my European friends and acquaintances to be as bearish on the US as they are right now (no one I speak to has the slightest interest in moving stateside and two friends who both emigrated to the US years ago are seriously considering moving themselves and their families back to Europe)
by yencabulator | 2026-02-16 00:07:44+00:00
Yeah. 100% this. Remember, Ceph's storage nodes are called OSD, as in Object Storage Daemon.

The biggest reasons to not use Ceph are:

- You plan on using <=30 disks on <=3 computers. Some of the petabyte scale stuff is just in the way at that scale. Even more so if you're looking at a single computer.

- You don't have at least fractional ops staff that will look at a dashboard regularly. In this world, you're better off using a cloud service.

- You're 100% satisfied with the S3 interface and will never want anything else than its write-once objects. Ceph's writable object support won't gain you anything in that world, and genuinely makes the distributed systems problems involved much harder. Ceph was architected as a distributed filesystem and excels as a networked block store for virtual machines. Ceph can do S3-compatibility, but another implementation can cut off a big chunk of the functionality and provide just S3-compat, and simpler can be better.

I doubt many software projects mentioned in this conversation have gone through the extensive stress testing with glitching nodes while trying to maintain performance that Ceph has; simple systems can be too simple. Ceph is quite well battle-hardened by now. Ceph's dedicated QA hardware pool is likely bigger than many competing projects have tried as a cluster size!

Disclaimer: ex-Ceph-developer.
by Trasmatta | 2026-02-16 00:08:15+00:00
I've been feeling this SO much lately, in many ways. In addition to security, just the feeling of spending decades learning to write clean code, valuing having a deep understanding of my codebase and tooling, thorough testing, maintainability, etc, etc. Now the industry is basically telling me "all that expertise is pointless, you should give it up, all that we care about it is a future of endless AI slop that nobody understands".
by zahlman | 2026-02-16 00:08:19+00:00
I sort of managed to get it working under 3.10 (and it would probably work considerably further back) but the output was a bit wonky, especially when trying to play multiple notes quickly or simultaneously. I had to patch a couple of things related to type annotations in synth/gui/app.py to make it run without MIDI support.

Overall neat concept. I've thought about playing around with sounddevice myself and the code here offers quite a bit of guidance.

Do you plan to put a license on this? Would you be interested in a PR to make a wheel (installable as an application with uv or pipx) from it? Also, I didn't play around with the patches, but it seems to me like they could be refactored to be data-driven.
by expedition32 | 2026-02-16 00:08:23+00:00
Back in the day there were these Star Wars games. Now obviously Mark Hamill costs money and he wasn't going to come back for anything less than a Disney "offer you can't refuse" pay check.

So they got someone who could fake it pretty well.

Ofcourse fast forward in 2026 an actor automatically sells off their face, voice and soul when they sign a contract in perpuity.
by prism2 | 2026-02-16 00:08:24+00:00
AI coding agents learn your project conventions, parameters, and lessons during a session. Then the session ends and it's all gone. Switch to a different agent and you re-explain everything.

stato captures what the agent learned into validated Python modules on disk:
stato crystallize: agent writes structured .stato/ modules (skills, plan, memory, context)
stato validate: 7-pass compiler checks before writing to disk
stato bridge: generates CLAUDE.md, .cursorrules, or AGENTS.md that agents read automatically

Four transfer paths: across sessions (files persist on disk), across projects (snapshot/import archives), across platforms (Claude Code/Cursor/Codex from one source), and from web AI to coding agents.

Also: composition algebra (snapshot, slice, graft, merge), privacy scanner (19 patterns catch API keys before sharing), package registry, and resume after /compact.

A/B tested: asked the same question with and without .stato/ files. With stato, agents gave detailed project-specific answers. Without, they didn't recognize the tools.