MurphyA/hacker-news huggingface dataset:
by irq-1 | 2026-02-23 23:13:38+00:00
Seems like this only helps large (heavy) websites with consistent content. The real world examples are all large, like YouTube, Amazon, etc...

Small JSON responses that compress to <1k would fit in a single packet, so I don't see the advantage of going from "65 bytes with normal Zstandard compression, vs 28 bytes when using the past response as a dictionary - 57% smaller."
by xklondon | 2026-02-23 23:14:20+00:00
Most informal obligations between people follow a predictable sequence, but we rarely model them explicitly, so default rates tend to be high.

Will lowering the barriers to settlement reduce default?

IOU Wallet protocol (schematic) at a high level:
→ A creates obligation
→ B accepts
→ B settles
→ A confirms settlement

We built a small web app that treats this as a protocol using trust as consensus mechanism. It helps both parties to record, remind and to settle open obligations.

This is still early and experimental.
I’m curious whether HN sees this as:

- A real modeling gap in social tooling?
- Something people intentionally keep ambiguous?

grateful for feedback
by fc417fc802 | 2026-02-23 23:14:22+00:00
Personally I wouldn't want to expose a child to "the algorithm" ie recommendations. It turns up useful stuff but (IMO) the stream contains an unacceptable concentration of radioactive waste and becomes increasingly concentrated if you click on any of it.

I might suggest explaining this to him, providing a uBlock filter to sanitize the page, and requiring use of said filter.
by mixdup | 2026-02-23 23:14:58+00:00
eventually people will figure out what is safe to let AI build-and-run without supervision, and what level of problem do you need to actually understand what's under the hood, audit what it does, how to maintain it, etc

I need a way to inventory my vintage video games and my wife's large board game collection. I have some strong opinions, and it's very low risk so I'll probably let Claude build the whole thing, and I'll just run it

Would I do that with something that was keeping track of my finances, ensuring I paid things on time, or ensuring the safety of my house, or driving my car for me? Probably not. For those categories of software since I'm not an expert in those fields, but also it's important that they work and I trust them, I'll prefer software written and maintained by vendors with expertise and a track record in those fields
by john_strinlai | 2026-02-23 23:15:24+00:00
>You? Only people that politically agree with you?

the next sentence after they mention "necessary trouble" is literally:

"But that only goes as far as to be my opinion."

they are just stating their opinion.

everyone decides when the time for "necessary trouble" is individually, based on their accumulated experience, opinion, etc. no arbiter required, just a critical mass of people with aligning opinions.
by eigen-vector | 2026-02-23 23:15:54+00:00
Yeah, right now it's closer to "triage for non-experts" than "full teaching tool," and l agree there's an awkward middle where it assumes you recognize some concepts (flows/ports/latency) while trying to help with the drilldown.

The direction I want to push it in is exactly what you're describing; make it a learning tool, where each detector/view answers:
1) What am I seeing? (plain language)
2) Why might it matter?
3) What's the next click?
4) What term should I learn? (glossary link)

If you're about to teach a Wireshark module next week, two super useful things would be:
• 3-5 common lab prompts you give students (e.g.
"identify the DNS failure," "find the top talker,"
"spot a TCP reset," "why is this slow?")
• one small pcap you already use (or even just describe its scenario)

I can tune Overview/Weird/Explain around those and make the guided layer feel like the main product rather than a thin overlay.
Also: if your students are GUl-only early on, that's a good callout - I should improve the README to frame Babyshark as "guided analysis," not
"terminal is easier than GUI."

I'm also happy for your students to get hands on by sending PRs for things they wish are intuitive from the get go.
by integralpilot | 2026-02-23 23:15:59+00:00
I don't see open source as having "competitors". If someone wants to make a fork and use AI to write code (which I also think wouldn't be very useful, as there's no public documentation and everything needs to traced and RE-ed), they are welcome to. We're interested in upstreaming though, which means we need to make sure the origin of code and licence is all compatible and acceptable for mainline, and don't want to infringe on Apple's copyright (which they may enforce on a fork with less strict rules than ours).
by singhsanjay12 | 2026-02-23 23:16:03+00:00
I wrote this after seeing cases where instances were technically “up” but clearly not serving traffic correctly.

The article explores how client-side and server-side load balancing differ in failure detection speed, consistency, and operational complexity.

I’d love input from people who’ve operated service meshes, Envoy/HAProxy setups, or large distributed fleets — particularly around edge cases and scaling tradeoffs.
by tsimionescu | 2026-02-23 23:16:06+00:00
Many of my school colleagues started smoking around 10-11 years old. All of us had tasted alchol by then, and some of them were definitely drinking the occasional beer. Older kids sometimes brought porn magazines in school and would show younger kids too (still talking about pre-highscool here). Now, this was childhood in Romania in the 1990s and early 2000s, soon after the fall of communsim, so maybe not so applicable everywhere else, but still - I doubt that there is any problem for a resourceful 8-10 year old even today to get some of these things.
by slopinthebag | 2026-02-23 23:16:10+00:00
> I didn’t write any piece of code there. There are several known issues, which I will task the agent to resolve, eventually. Meanwhile, I strongly advise against using it for anything beyond a studying exercise.

Months of effort and three separate tries to get something kind of working but which is buggy and untested and not recommended for anyone to use, but unfortunately some folks will just read the headline and proclaim that AI has solved programming. "Ubiquitous hardware support in every OS is going to be a solved problem"! Or my favourite: instead of software we will just have the LLM output bespoke code for every single computer interaction.

Actually a great article and well worth reading, just ignore the comments because it's clear a lot of people have just read the headline and are reading their own opinions into it.
by bsjaux628 | 2026-02-23 23:16:12+00:00
What SKG movement want, in short terms, is that game developers/publishers of live service games and online only games be forced, once the games is no longer supported, to provide tools, software, executables to the community to keep the game going. They are using the banner of consumer protection and a public EU initiative to force the EU politicians to debate and come up with a solution.

The drama mostly stems from the fact that the head of the movement is a gamer with no knowledge of either software development or game development, so he has a VERY simplistic view of how a game server-client works and thinks that developers just have a .exe executable running from a raspberry pi that can be uploaded to github and that's it. When people with knowledge call out that there are TONS middleware used to develop a game with their own licenses and that a server nowadays is more than a single machine, he just says: well, this movement is no retroactive so new games will be develop with that in mind and automatically every software vendor will be fine with distributing their code so that everyone can keep playing.

While I support the spirit of the movement, this will ultimately end up with a warning label in a box because real life has more nuances.
by stagas | 2026-02-23 23:16:15+00:00
Thank you! The idea is to build full tracks, hence in the app you will find a timeline and a minimap, and there are builtin tools like labels/timeline functions to make arrangements over time. The DSP is state-of-the-art, i'm doing codegen of all the permutations of scalar/audio parameter inputs so the execution is always optimal. There is still room for improvement of course.
by dtf | 2026-02-23 23:16:16+00:00
Why does this page include this code?

https://github.com/huseyinstif/CVE-2026-2441-PoC

CVSS 8.8 (High) | Actively Exploited in the Wild | Renderer RCE (Sandboxed)

A use-after-free vulnerability in Google Chrome's Blink CSS engine that allows a remote attacker to execute arbitrary code inside the browser sandbox via a crafted HTML page.
by einpoklum | 2026-02-23 23:16:21+00:00
AI didn't write a driver for him. He ported the Linux driver to FreeBSD with some assistance from an LLM.

What's more interesting to me is the licensing situation when this is done. Does the use of an LLM complicate it? Or is it just a derivative work which can be published under the ISC license [1] as well?

[1] : https://en.wikipedia.org/wiki/ISC_license
by mixdup | 2026-02-23 23:16:39+00:00
I know people have done truly amazing things with AI lately, but I feel this in my bones. Almost every demo I see is like, uh, I don't need these extremely simple things in my life automated. I can just go to Delta and buy a plane ticket. I actually want to write my own email to my mom or wife. Of course a demo is just a demo, but also come on
Show HN: AppIconKitchen – Free AI app icon generator I built for indie devs
by rickyLee_coder | 2026-02-23 23:17:06+00:00
Hey HN,

I built AppIconKitchen (https://www.appiconkitchen.com) - a free AI-powered app icon generator.

Background: I'm an indie dev and needed an app icon for my side project. Looked around at existing tools:
- Most charge $10+ per icon
- Require creating an account just to try
- Don't export proper Xcode/Android Studio ready assets

So I spent a weekend building my own solution.

What it does:
- AI generates icons in 4 styles (clay/flat/mac/pixel)
- One click exports complete iOS AppIcon.appiconset with Contents.json
- One click exports Android mipmap folders with adaptive icon layers
- Includes Web/PWA icons in the same export
- Free, no signup, no limits

Tech: Next.js 15, TypeScript, Replicate's Flux model, Cloudflare R2 storage.

Honestly built it for myself but thought others might find it useful. Would love feedback from the HN community - especially if something's broken or could be improved.

Link: https://www.appiconkitchen.com/

If anyone has feature requests or wants to know how it works under the hood, happy to share more details.
by adrianwaj | 2026-02-23 23:17:34+00:00
...unless they have an agent "IT Guy" who can either do it for them or show them what to do. Perhaps UIs will change and be designed half for a human operator, and half for the IT Guy to copilot with them.

The person with zero technical skills could start learning primitive technology: youtube.com/@primitivetechnology9550 - living off the land really is the job for the unemployed. We've done it before! As long as there is a safe place to actually do it and a planet that can support it. Those'll be the problems.
by Bender | 2026-02-23 23:18:24+00:00
Anyone can help me?

Not likely anyone here. Best case would be a lawsuit if you feel the cost is worth it but even then the nodes are probably destroyed and re-used and depending on what was in the AUP/ToS legal action may be futile but that would require your lawyer talking to their legal department.

Getting the data back is unlikely and is a common rough life lesson about automating and testing backups. Exception would be if the most important data you need was publicly available and happened to be mirrored by the Wayback Machine [1]. Unlikely they would have anything useful to import into a database.

If I had to guess what happened the site was probably compromised and serving up something bad so they knee-jerk reacted by nuking the servers which their AUP/ToS may permit them to do unless you had a counter-signed business contract with them but I am not a lawyer and this is not legal advice.

[1] - https://archive.org/advancedsearch.php
by tkiolp4 | 2026-02-23 23:18:29+00:00
My point is: such apps wouldn’t need to exist if agents can provide in the future the same functionality for a fraction of the cost. Sure if ticketmaster is here to stay forever and keep their app up to date, we can keep using it. But what about new products? Would companies decide to build a single fixed app that all the users have to use, instead of, well, not building it? Sure the functionality would still need to be provided by the company (e.g., like offered in the form of an api), so they keep getting profit.

It’s like we usually say: companies should focus on their core value. And typically the ui/ux is not the core value of companies.
by hiciu | 2026-02-23 23:18:40+00:00
It is literally TLS in a trench coat with some json sprinkled on top.

Where I think we are not in agreement the question of "who to trust" and "for what purposes".

Are you going to trust me when I tell you that I'm over 18 if I provide you with the document signed by my cousin, Honest Ahmed?

Are you going to trust me when I show you the document signed by my government?

(this is the trick question, you don't have a choice, law says you must; there's a list of who you need to trust and for what purposes; like a certificate root store in your browser)
by Nextgrid | 2026-02-23 23:18:56+00:00
In my opinion, if something isn’t actually an error, you modify your logging to not log it as an error. Your error logging/alerting pipeline should always stay clean.

If something shows up in there, you should only have 2 options: 1) it’s an actual error and you fix it and make sure it never happens again, or 2) it’s not an error and then you fix it by adjusting the log level to make sure it isn’t one.

If someone suggests an “error budget” on my watch they get the door. You can have a warning budget (and the resources to adjust the log levels or remediation protocols to fix said “errors”) but actual errors should remain errors - otherwise they’re delivering broken software and that’s not what I’m paying them for.

Of course, companies who have the common sense to do this already do it and nobody in their right mind would suggest an “error budget”, but for those that don’t they have a serious problem that needs to be rectified.

The danger otherwise is that you’re making your observability pipeline useless if “errors” no longer actually mean errors. That’s really bad because now it opens the door to actual errors being ignored until it’s too late and then remediation is more costly.
by ssl-3 | 2026-02-23 23:19:29+00:00
Except...

In this case, they didn't really work from the chip's published documentation. They instead ultimately used a sorta-kinda open-book clean-room method, wherein they generated documentation using the source code of the GPL'd Linux driver and worked from that.

That said: I don't have a dog in this race. I don't really have an opinion of whether this is quite fine or very-much not OK. I don't know if this is something worthy of intense scrutiny, or if it should instead be accepted as progress.

(It is interesting to think about, though.)
by rjh29 | 2026-02-23 23:20:08+00:00
In case you didn't know they're using a lot of third-party libraries now for pretty major things: libcurl for http, Skia/Harfbuzz for rendering, libxml, OpenSSL, ffmpeg, etc:

https://github.com/LadybirdBrowser/ladybird/tree/8017f8a7ed3...

The core browser engine, JS/CSS/layout etc will always be original.
by yndoendo | 2026-02-23 23:20:31+00:00
A solution to the problem was developed in the late 90s / early 2000.

Games allowed for personally hosted servers and the ability to connect to them. This is how original Call of Duty, Counter Strike, Quake III, Doom 3, Enemy Territory, and more worked. A person did not have to create a user account with the company that produced the title.

Modern day games require an user account for their services and you are only allowed to connect to their servers without being able to self-host.

Self-hosting was very beneficial during dial up days because the local ISP could run the server to reduce connection latency.

Games like Battlefield Bad Company 2 is a great example of how bad it has become.
by mv4 | 2026-02-23 23:20:56+00:00
"Among the 37 percent of adults who would not have covered a $400 expense completely with cash or its equivalent, most would pay some other way, although some said that they would be unable to pay the expense at all. For those who could cover the expenses another way, the most common approach was to use a credit card and then carry a balance, and many indicated they would use multiple approaches. However, 13 percent of all adults said they would be unable to pay the expense by any means (table 21), unchanged from 2022 and 2023 but up from 11 percent in 2021"

https://www.federalreserve.gov/publications/2025-economic-we...
by fc417fc802 | 2026-02-23 23:21:25+00:00
Your first example, no. That is a threat of violence and is illegal literally everywhere (even in the US). However it does not become "violence" until you commit a physical act.

Your second example is inciting public panic. Again, not violence. And again, illegal literally everywhere (at least AFAIK).

> serious physical harm that's resulting directly from your action

That's the thing, the panic was the direct result. The physical harm was indirect. Once again, words have meanings.

Perhaps you should seek to learn more about the law. You might find that, in addition to words having meaning, society has been dealing with "problematic" behaviors for as long as it has existed and is honestly pretty well equipped for it in general. These things have been catalogued extensively. Referring to everything as "violence" is no better than labeling every other crime "terrorism".
by casey2 | 2026-02-23 23:21:28+00:00
Japan is a highly literate population, so anybody using a Japanese website can read Japanese. Literacy among the English speaking world is much poorer. Growth metrics push large companies into minimalist design for both habit forming and accessibility reasons.

Most of the sites shown are the equivalent of a weekly ad. You have an interest cut off, and you show that limited set of information. Since Japan is a very "low trust" society I'd assume most people just think minimalist sites look like a scam startup venture.
by wenngle | 2026-02-23 23:21:44+00:00
Is this article AI-generated?
https://www.pangram.com/history/f421130b-eefc-4f8c-b380-da0a... . I find it worrying that authors don't disclose the amount of AI assistance used in drafting and editing upfront. It sets a worrying precedent where everything is AI unless proven otherwise.
by torginus | 2026-02-23 23:21:53+00:00
I'm not quite up to date what LFP batteries cost nowadays, but I remember it's in the $70ish range - so for a respectable 80kWh, it'd only cost $5.6k out of the total. Considering you can get something like a new Corolla for $20k-ish, if the EV minus battery costs the same as a fully fledged ICE car, you could have a $25-27k car with a quite generous battery.
by MarkusQ | 2026-02-23 23:22:13+00:00
You're begging the question. Why does it need to talk to a web front end or app? Why does any appliance need this? (I know they all claim to need it, but it isn't at all clear why this (supposedly) needs to be the case.)

For that matter, I'm unclear why there needs to be a setup process. I understand that this may be key to the vendor's business model, but that's their need, not something the products needs, and certainly nothing I need.
by uniq7 | 2026-02-23 23:22:19+00:00
If companies are required to verify age, then it's in their interest to store all tokens, just in case they are ever accused of not verifying it.

The Swiss E-ID system stores people identifiers and token status lists in their so-called "Base Registry". From https://swiyu-admin-ch.github.io/technology-stack/#credentia...

> Decentralized Identifiers (DID) developed by the W3C represent an identifier standard that provides a subject-controlled method for identifying individuals, organizations, or objects online. In the swiyu Trust Infrastructure, DIDs are utilized as a standard identifier for issuers and verifiers. They are centrally hosted on the swiyu Base Registry.

> In this protocol, the trusted authority issues certifications (“trust statements”) concerning the identity (i.e., who is the real-world identity controlling a DID) and legitimacy (i.e., who is allowed to issue or verify credentials of a specific VC schema) about an entity as SD-JWT VC and publishes these trust statements in the trust registry.

> Token Status Lists are signed, maintained and published by the credential issuers but hosted on the Base Registry.
by jonlong | 2026-02-23 23:23:54+00:00
Apple may not design for repairability, but what you are saying is not true. I have personally purchased and installed genuine replacement displays on MacBooks with no involvement from Apple.

Apple publishes repair guides for this (e.g., https://support.apple.com/en-us/120768) as does iFixit. Genuine parts are available for purchase and tools are available to rent by individuals (see https://support.apple.com/self-service-repair, which specifically mentions display replacement). Skill and patience are required; replacement by Apple is not.
by doomslayer999 | 2026-02-23 23:24:00+00:00
Car culture in general is an abomination to civil rights. You are tracked by the government, forced to shell out money to predatory insurance companies, and can basically be illegally searched and seized at any point on the roadway. I hope that chinese e-bikes/e-motos will get good enough to where I can use them as my primary form of transport.
by analog31 | 2026-02-23 23:24:03+00:00
I think it helps to think in terms of keeping up with the demands of school without crushing their curiosity and interest. In my generation, at least where I grew up, school was less competitive and college admissions more laid back. We were at the tail end of when the people who worked on the line at Ford’s earned more than many college graduates. We had no idea what would happen next.

Today parents are freaked out because math scores are a sorting hat for college admissions and lucrative careers. Yet they don’t use math in their own careers, and many of them hate it.

My neighbor, who is a retired high school math teacher, told me that the kids who shine in advanced math are not the ones whose parents treated math as a series of competitive milestones. I started out “slow” in math, and my K-12 math grades were highly variable (to put it kindly), but eventually graduated cum laude as a math major while also becoming a fairly competent jazz musician.

My parents were both scientists, but loved the humanities. I think you can show your own interest and curiosity when talking to your kids about math, or helping them with their lessons. Rather than suggesting that you’re not “math people”, admit that it’s being taught in a new way and that you’re going to re-learn it along with them because it’s fun.

I would restructure school math if it were up to me, though I’m cautious about wholesale introduction of computers for the many reasons discussed in this thread. One idea for your kids is to explore some non-school math topics as they show an interest, such as pure logic, proofs, and computation.
by adolph | 2026-02-23 23:24:32+00:00
Yes, afaik authentication is performed by applications at L7 and as such flows via Internet protocols like anything else.

All kinds of laws are applied to services provided via Internet. For example, once upon a time people said collecting sales tax was an insurmountable problem and a disaster for ecommerce. Time passes and what do you know, people figured out ways to comply with laws.