MurphyA/hacker-news huggingface dataset:
by pydry | 2026-02-25 13:58:22+00:00
There are plenty of european hosts (e.g. hetzner) and with payments systems the technology is rarely the problem it's the politics. I imagine EPI will have no problem succeeding.

The major problem Europe has (mentioned in the draghi report) is with industrial competitiveness and strategy and access to cheap energy.

With the former it's not like the US is doing any better though. I dont think anybody in the west even has an industrial strategy.
by nullocator | 2026-02-25 13:58:29+00:00
These AI companies and billionaires won't learn any lessons, but I hope the likes of Marc Andreessen stop getting treated intelligent well reasoned actors in the media and on podcasts when they bitched and moaned about the Biden administration overstepping. If someone thinks the pragmatic approach to resisting reporting requirements and export controls is to cozy up with the devil who will force you into worse capitulations or just seize your whole company, then that someone (looking at you Marc) is a fucking moron.
by blendergeek | 2026-02-25 13:58:31+00:00
Apple originally announced they would bring Mac Pro production to the US in 2013.

The two articles you share are one from CNN saying apple was moving production back to China after 6 years in the US and second from apple a few months later saying they were keeping it in the US.

You put the article from September before the article from June to create a narrative that only a few months passed between Apple's announcement of US production and CNN debunking it. The only issue is that the CNN article was 3 months _before_ Apple's rebuttal.
by lejalv | 2026-02-25 13:58:41+00:00
Can proprietary software (SAP) be truly sovereign, though?

On the one hand, nothing stops SAP from behaving like Oracle for the sake of shareholder value. On the other hand, even SAP could be bought by Blackrock or Peter Thiel, and back to US dependence.

Am I missing something about SAP that precludes these scenarios?
by df2dd | 2026-02-25 13:59:14+00:00
Appreciate the response. I agree that non-determinism isnt a bad thing. However LLMs are being pushed as the thing to replace much of the deterministic things that exist in the world - and anyone seen to be thinking otherwise gets punished e.g. in the stock market.

This world of extremes is annoying for people who have the ability to think more broadly and see a world where deterministic systems and non-deterministic systems can work together, where it makes sense.
by tucnak | 2026-02-25 13:59:20+00:00
CodeAct is one way to abstract away some things, and bring others to the forefront. Especially when it comes to anything requiring a sidecar for mTLS, or something agents must be aware of, like error handling for whenever some call fails deep inside the stack. Troubleshooting access issues is key, during tool development and when using said tool in production, too. For many, many things, CodeAct is simply superior to naive calling conventions that you see around MCP clients, think OpenAPI.
by magicalist | 2026-02-25 13:59:26+00:00
> In the united states the first amendment of the constitution makes it so that any public usage of camera tech cannot be controlled by the state

I'm repeating a comment of mine from another thread, but this is not true. Both recording the audio of a conversation that you aren't party to and deriving biometrics from video without consent are both broad categories that are regulated depending on the state you're doing the "public usage" in.
Show HN: Md files as B2B AI agent sandbox – no production data needed
by rolodexter2023 | 2026-02-25 13:59:52+00:00
We've been running B2B and SMB pilots at Toggle and kept hitting the same wall: "we need access to your data" kills momentum immediately — legal, IT, compliance reviews, weeks of delay.

Our workaround: .md files + live browser telemetry.

OpenClaw agents reason over .md files natively. Toggle streams real browser sessions into those files automatically — projects, focus patterns, context switches — so the sandbox stays live without touching any production system. A pilot contact gets a working prototype that feels real because it's built on their actual work behavior, not synthetic data.

What surprised us: the UX signal from .md prototypes is good enough to make real product decisions. By the time a customer graduates to full integration, we already know which workflows to automate and which data connections actually matter.

Full technical writeup covers the pipeline, file architecture, and when this approach breaks down:
- Pipeline: https://publish.obsidian.md/frogy/30+Frogy+Telegram+Beta+Pro...
- Architecture: https://publish.obsidian.md/frogy/30+Frogy+Telegram+Beta+Pro...
- Pilot playbook: https://publish.obsidian.md/frogy/30+Frogy+Telegram+Beta+Pro...

Happy to answer questions on the architecture or the approach.
by ua709 | 2026-02-25 13:59:58+00:00
When politicians talk about the decline in manufacturing what they mean is jobs. I work in American manufacturing and there are tons of amazing projects happening but the decline in jobs is real. Especially low skilled jobs, This trend will only continue and I doubt any politician, regardless of thier background, can change that. And I’m not sure it’s a bad thing as it means manufacturing productivity is increasing

The main reason it’s so political is the drop in number of jobs has been huge, and too fast for many to adjust. Automation has come fast.

“ Manufacturing employment declined from 17.3 million in January 2000 to a low of 11.5 million in December 2009, a drop of 33% over the decade. Compared to the peak of 19.5 million in 1979, manufacturing employment had declined approximately 41% by 2009.”

https://blog.uwsp.edu/cps/2025/01/29/u-s-manufacturing-emplo...
All New adobaRo – an execution-focused AI for global content workflows
by adobaro | 2026-02-25 14:00:06+00:00
Hi HN,

We launched All New adobaRo, an execution-focused AI system for structured global content workflows.

Instead of treating AI as a prompt-response tool, we treat it as a workflow executor.

The system operates through a structured loop:

Objective → Plan generation → Coordinated execution → Feedback iteration

Architecture includes:

• A planning layer that decomposes expansion goals into executable tasks
• A localization engine (translation, subtitle alignment, metadata adaptation)
• Platform-specific alignment logic
• Automated publishing workflows
• A feedback loop based on performance signals

The goal is to move from “generate content” to executing and operating content pipelines.

We’d appreciate technical feedback, especially around orchestration, trust boundaries and failure modes in semi-autonomous execution systems.

Happy to answer questions.

https://adobaro.com
by jonhohle | 2026-02-25 14:00:06+00:00
I don’t think most modern file systems have any limit to the depth of nested directories, that’s not how directory trees work. There are other limits like the number of objects in the file system. The ability to reference an arbitrary path is is defined by PATH_MAX, which is the maximum string length. You can still access paths longer than string length, just not in a single string representation.
What are the best coping mechanisms for AI Fatalism?
by johnb95 | 2026-02-25 14:00:15+00:00
Your kids forwarded you Matt Shumer's Something Big Happened article. Your feed exploded with the Citrini 2028 Global Intelligence Crisis and its artful, immutable chain reactions. The key leaders of the AI labs struggle openly with the morality of what they are building as their safety leaders quit in frustration. Policy leaders strive to regulate AI as if it were atomic weapons (thanks Oppenheimer).

What are the best psychological coping mechanism for this stage of the S-curve?

Asking for a generation...
by BrunoVT1992 | 2026-02-25 14:00:32+00:00
Generate GUIDs / UUIDs (v4 and v7) with custom formatting, encoding and one-click copy.
Do it all online inside your browser for free. No API calls needed. No data sent anywhere.

A GUID (Globally Unique Identifier) also called a UUID (Universally Unique Identifier), is a 128-bit identifier standardized by RFC 4122 and RFC 9562. It is designed to be globally unique, meaning no two GUIDs / UUIDs are expected to ever collide. Even when generated on different machines or at large scale.

GUIDs / UUIDs are widely used in databases, APIs, cloud services, distributed systems and software applications where reliable unique identifiers are essential. Their extremely low collision probability allows developers to create unique IDs without relying on a central authority or database lookup. Making them ideal for fast and scalable applications.
by christalingx | 2026-02-25 14:00:40+00:00
A new privacy-first API We redesigned our API — now the official version — to handle token compression with privacy at its core. We only require your AgentReady key. Your LLM API key stays yours — we never see it:

-------------------------------------------
import requests, os
from openai import OpenAI

# Step 1: Compress messages with AgentReady
res = requests.post("https://agentready.cloud/v1/comp...",
headers={"Authorization": "Bearer ak_live_116e......"},
json={"messages": [{"role": "user", "content": your_text}]})
compressed = res.json()["messages"]

# Step 2: Send to YOUR LLM with YOUR key
client = OpenAI(api_key=os.environ["OPENAI_API_KEY"])
response = client.chat.completions.create(model="gpt-4o", messages=compressed)
-------------------------------------------

Here's everything else we shipped:

- Optimized compression — the new API compresses data more efficiently, reducing token usage further.

- OpenClaw integration — AgentReady now works seamlessly with OpenClaw.

- Benchmark page — we created a benchmark page AgentReady — Make the Web Readable for AI Agents

- PIP & NPM packages — integrate AgentReady directly into your Python or JavaScript projects with a single install.

- Token usage tracking — better visibility into how your tokens are being used.

- Self-hostable version (coming soon) — compress tokens entirely on your local machine. Nothing leaves your environment. The only external call is a license key check against our server.

------------------------------------------

Get started in seconds We also streamlined the sign-up flow — you can now register and get your API key in less than 10 seconds here:

https://agentready.cloud/quick-key

-------------------------------------------
You can find everything else here:

homepage: https://agentready.cloud/

docs: https://agentready.cloud/docs/quickstart
by TimorousBestie | 2026-02-25 14:01:00+00:00
> Fact check websites are tankie propaganda.

Notice that this doesn’t contradict your link being shoddy. Blindly reiterating Russian propaganda is very patriotic of you.

> But this particular point about air to air missiles is well attested.

Please don’t pretend that I was disputing the expected range of the PL-17; that’s clearly not the point I raised.

That said, even your shoddy source doesn’t make the connection you imply between Chinese manufacturing and the development of the PL-17. Do you know something specific about Chinese military procurement (perhaps from a credible source)?
by adamtaylor_13 | 2026-02-25 14:01:14+00:00
That's a bummer. I was looking forward to testing this, but that seems pretty limiting.

My current solution uses Tailscale with Termius on iOS. It's a pretty robust solution so far, except for the actual difficulty of reading/working on a mobile screen. But for the most part, input controls work.

My one gripe with Termius is that I can't put text directly into stdin using the default iOS voice-to-text feature baked into the keyboard.
by jqpabc123 | 2026-02-25 14:01:20+00:00
And why does everyone shop Amazon?

Because Wal-Mart can't figure out inventory.

If Wal-Marts web site says a product is available for local pickup, the odds are pretty good that it's not.

I know this from experience --- and from Wal-Mart employees who tell me, "Don't believe the web site".

The useless trip to Wal-Mart costs me more than Amazon. So I just buy it on Amazon and avoid the exercise in futility.

Someone wake me up when this changes.
by Jashwanth01 | 2026-02-25 14:01:35+00:00
That’s a fair question... I wrote the implementation and experiments myself. I did use an LLM to refine and structure the README for clarity, but the design, benchmarking, and validation are my own... By (production ready), I mean the system has been validated beyond just accuracy metrics. It has been benchmarked against GBMs and linear models under the same settings for both regression and classification, with competitive results. I’ve also measured batch and single-query latency, including p95 inference time, and tested memory usage under CPU only constraints. It’s been scale-tested into the low millions of samples on limited RAM, with stable behavior across multiple runs and consistent accuracy. And it’s not yet deployed in a live environment this post is partly to gather feedback.. but the claim is based on reproducibility, API stability, deterministic inference, and performance validation. If you think there are additional criteria I should meet before calling it production-ready, I’d genuinely appreciate the feedback..
by embedding-shape | 2026-02-25 14:01:40+00:00
> I don't understand. What is Google Search Console, and should I add all my domains there right now?

Google's way of tying real identifies of people to domains, without making it explicit.

Basically, your domain will be weirdly treated by a bunch of entities, none the less Google themselves, if you don't add your domain there (or some other Google property).

Especially with less common TLDs, like .online, they really want to be able to tie it to some identity, so unless you add it there, eventually your domain ends up on some sort of blacklist, in the case of the author it seems they used the "Google Safe Browsing" blacklist to get the author to involve Google somehow.
by alkonaut | 2026-02-25 14:03:00+00:00
I don't mind anyone taking my photo in a public place. That was always legal. It's what's done with it that could be illegal. E.g. if they use my photo in a commercial without my consent? Illegal.

If it was also illegal to (for example) input a photo of someone non-consenting into any kind of AI model or post it to any other online service? Then I don't see much problem.
by mark_l_watson | 2026-02-25 14:03:11+00:00
This seems like a really solid idea: using an environment variable in command line tools and small apps to control output for AI vs. human digestion. Even given efficient attention mechanisms, slop tokens in the context window are bad.

I also like a discussion in this thread: using custom tools to reduce the frequency of tool calls in general, that is, write tool wrappers specific for your applications or agents.
Show HN: VaultSandbox – Real SMTP testing that works on localhost (Apache 2.0)
by vaultsandbox | 2026-02-25 14:03:29+00:00
Hi HN,

I posted VaultSandbox two months ago and the main feedback was AGPL concerns. I've listened: it's now Apache 2.0. I've also overhauled the local experience to make it "just work" on localhost with zero config.

VaultSandbox is a self-hosted SMTP receiver and programmable debugger. It bridges the gap between "it sent" and "it was delivered" by simulating production-grade email lifecycles. It is architected for parallel testing: each test runs in its own isolated inbox with dedicated webhooks and chaos settings...no state leaks.

What’s New:
-Local-First: Encryption (TLS) and email auth (SPF/DKIM) are now optional toggles. On localhost, they are off by default so you can test instantly.
-Chaos Mode: Trigger greylisting, latency, or specific SMTP errors per-inbox to test your app's resilience.
-Webhooks & Spam Scores: Inbox-scoped webhooks and integrated spam scoring (via rspamd) to predict deliverability before you send.
-Instant DNS (vsx.email): Any public IP running VaultSandbox gets a subdomain with pre-configured MX, SPF, DKIM, and DMARC records for high-fidelity testing.
-Deterministic Testing: Use our SDKs to "wait" for emails based on specific criteria instead of using sleep() in your tests.

Workflow:
1-Start local: One container gives you SMTP, Web UI, and SDKs.
2-Scale to production: Deploy to a public IP to test real flows from SES/SendGrid with the same test code. No mocks, just reality.

Repo: https://github.com/vaultsandbox/gateway (Apache 2.0)
Quick start: https://vaultsandbox.dev/deployment/local-development/

What would it take for you to switch from your current email testing setup?
by rolodexter2023 | 2026-02-25 14:03:40+00:00
Author here. Happy to go deep on any part of this. The part I'd most like to get feedback on from this community: the decision to use .md files over a proper vector store or database. We made that call for prototyping speed and human readability, but I'm curious if anyone has hit the ceiling on this approach earlier than we did.

The honest tradeoffs we found: .md works until you need real-time external data or write actions back to production. For pure read/reason workflows in a productivity context, it's held up better than expected.

Also happy to discuss the browser telemetry architecture — specifically how we handle session classification without capturing page content.
by bhekanik | 2026-02-25 14:03:57+00:00
The worktree isolation is clever, but I'm curious about the security model when you're running multiple agents in parallel with shell access.

In my experience running CLI-based agents, the biggest risk isn't the agent "going rogue" in the sci-fi sense — it's context window drift during long sessions. Agent compacts its history, loses track of which worktree it's in, and starts editing files in the wrong branch. Or worse, running tests against the wrong database.

Git worktrees help with file isolation, but they share the same .git directory and can still interfere with each other during concurrent operations (rebases, reflog contention). Have you run into this with 5+ parallel agents?

The native CLI approach is smart for staying current with provider features, but it does mean you're trusting each provider's sandboxing. Some are better than others. Claude Code's allowlists are reasonably paranoid; others less so.

Nice to see someone building tooling for this workflow rather than trying to replace the terminal entirely.
by JSR_FDED | 2026-02-25 14:04:03+00:00
Of all the Microsoft products, Excel is going to be the hardest to replace. Firstly, it's critical in many organisations. We all know you shouldn't run your business on a spreadsheet, but everyone does. Just a tiny difference in how data is handled, an unsupported macro, a missing formula...the whole deck of cards collapses.
Secondly, while people only use 20% of its features, everyone uses a different 20%.
by tsoukase | 2026-02-25 14:04:29+00:00
An open source replacement of proprietary SW is very easy in the beginning but becomes hard quickly. You grab a Linux distribution and the App that match the functionality at best and call it a day. But the next day a bunch of problems arise: some features are not implemented, the UI is not ergonomic, the stability is not there and when updates come, the situation goes overboard. The billions of dollars don't start software, they end it polished and consumer ready.
by verma6uc | 2026-02-25 14:04:32+00:00
This is exactly what we're seeing building Glue. Writing code got cheap but understanding a codebase didn't — it might have actually gotten harder because there's more of it. We built Glue for the PM and EM who needs to answer "what does this codebase actually do?" without reading every file the AI just generated. The problem isn't generation anymore, it's comprehension and ownership. Curious if others are building tooling around this.
by alkonaut | 2026-02-25 14:05:02+00:00
It's inconvenient to make people criminals over night with new regulation, but it's by no means impossible to do so.

I can't install a Ring doorbell if it takes a picture of the street outside my house. That was preexisting regulation (about surveillance cameras requiring permits for public spaces). Of course, people who now install Ring doorbells DO often record the street. But that's more a matter of enforcing the law.
by ashish-barmaiya | 2026-02-25 14:05:18+00:00
Hi HN,

I’m currently building a zero-knowledge digital inheritance platform called SecureVault. While designing the threat model, I kept running into a fundamental flaw with standard audit logs: they only prove internal consistency.

If a sophisticated attacker (or a rogue admin) gets full access to my Postgres database, they could easily delete the last 10 events, forge 10 new ones, recompute the hashes, and present a perfectly "valid" log.

I needed cryptographic proof of log integrity for SecureVault, so I stepped back and built Attest to solve it. It’s an open-source, multi-tenant audit logging service that makes history rewrites mathematically detectable.

It works by combining strict cryptographic hash chaining (every event hashes the previous one) with a background worker that periodically anchors the "Chain Head" to an external, append-only system (like Git). To rewrite history without detection, an attacker would have to compromise both the database and the external Git repository simultaneously.

The core trade-off: To guarantee strict serializability and a linear hash chain, writes are serialized per project. This means it maxes out around 25-30 writes/sec per project due to optimistic locking contention. It is intentionally built for high-assurance security events where integrity matters more than raw throughput.

I would love to hear your brutal, honest feedback on the architecture, the threat model, or better ways to handle the optimistic locking approach without sacrificing strict ordering.

Happy to answer any questions!
by shit_game | 2026-02-25 14:05:18+00:00
> Not adding the domain to Google Search Console immediately. I don't need their analytics and wasn't really planning on having any content on the domain, so I thought, why bother? Big, big mistake.

I'm not particularly familiar with SEO or the massive black box that is Google Search - is this really as critical as the author makes it seem? I have both .lol and .party domains, both through porkbun (and the TLDs seem to be administrated by Uniregistry and Famous Four Media, respectively), and both are able to be found on Google Search. It seems like this preemtive blacklisting would be the result of some heuristics on Google's end; is .online just one of the "cursed" TLDs like .tk?
by vardhanaditya | 2026-02-25 14:05:49+00:00
I built FeedDoc after getting frustrated with uploading entire documents
to AI chats when I only needed a few pages.

It's a Chrome extension with a side panel where you upload a PDF,
PowerPoint, or Word file, pick a page range, and it generates a new
sliced file and attaches it directly into the chat box of whatever AI
platform you're on — ChatGPT, Claude, Grok,T3 Chat.

The interesting technical bit: attachment works by reconstructing the
file as a File object in the content script and using the DataTransfer
API to set it on the platform's file input element, then firing the
appropriate change and input events so the React app picks it up. No
clipboard involved. For files over 50MB it falls back to
chrome.storage.session to avoid hitting Chrome's IPC message size limit.

PDF slicing uses pdf-lib entirely in the browser. PPTX manipulation
goes directly into the ZIP structure using JSZip since PPTX is just a
ZIP archive. DOCX page slicing is best-effort based on explicit page
break markers in the XML — true page count is render-dependent so that
one comes with a disclaimer.

Everything runs locally. No backend, no server, no data collection.
Files never leave the device.

Chrome Web Store: https://chromewebstore.google.com/detail/nfnkfjkapoekmlldcii...
Website: https://feeddoc.adityavs.tech/
GitHub: https://github.com/adityavardhansharma/FeedDoc

Happy to answer questions on the implementation.