MurphyA/hacker-news huggingface dataset:
by infecto | 2026-02-24 15:39:43+00:00
Can you use less inflammatory language and be more critical in your thought? Your point, if there is any, is drowned by your lack of command of constructive discussion.

Who are you to decide what is tangible and what is not? That’s my whole point. GPU prices are still not crazy on a $ / performance scale, especially if you do a rough chart of it over time. Certainly there are carve outs, the 5090 is still hard to get and charges $1k+ premium over msrp.
by simonw | 2026-02-24 15:39:54+00:00
I've been in these situations before. If there's a known bug in an internal tool that would take the development team a day to investigate and fix - aka $10,000s - it's often smarter to send around an email saying "don't click the Froople button more than once, and if you do tell Benjamin and he'll fix it in the database for you".

Of course LLMs change that equation now because the fix might take a few minutes instead.
by insane_dreamer | 2026-02-24 15:40:13+00:00
unlike most Asian countries, individual freedom is the foundation on which American society has been built; it's why many people migrated to the US over the past 250 years

LPRs are absolutely mass surveillance when used without proper legal restraints

the legal restraints are the big difference between regular police, who operate without very specific boundaries to protect individual rights -- and ICE, who can do whatever they want with impunity. That's what separates "police" from "Gestapo".
by pmontra | 2026-02-24 15:40:39+00:00
The problem is to know what to write. I spent a whole day yesterday to understand what the problem was with a PDF file we were failing to process. Once I understood the cause it took one line of code to fix it and another dozen of lines for a unit test. A LLM helped me to write the code to explore several possible candidate problems but it did not find the problem by itself.

So code is both cheaper (what the LLM wrote for me much faster than I could have typed it) and is also expensive (the only line that we deployed to production today.)
by glenstein | 2026-02-24 15:41:25+00:00
At their peak it was like 33% or thereabouts. The claim that they were "abandoned" suggests, well, that the browser was abandoned when it wasn't. It's a mischaracterization. Market share is about some combination of (1) software quality, (2) visibility and (3) distribution lock in. Chrome managed to be arguably better on (1) but it's due to (2) and (3) that it became dominant.

If (1) was all that mattered we would all be using the Preso engine version of Opera right now.
by zoeysmithe | 2026-02-24 15:41:41+00:00
That's fine, if not very good, but the central problem remains (ignoring the capitalist corrupted business culture and its merging with the state behind much of this). We can't centralize our communications without major concessions in significant ways that non-techies seem unaware of until a big news item like this comes out. "What, they're logging my chats, and IP, voice clips, and now they want my ID for 18+ discords?" Yes, absolutely you are being logged and those logs will go places you have no control over. Maybe even to oppress you or your loved ones.

Discord's entire value proposition was "Hey just click here, no need to pay for a teamspeak server or do peer-to-peer jank." Deeply personal stuff is said and posted in those spaces. Common communication should not be shared like this and we keep falling back to the "tapped my phone line" problem.

The difference between then and now is that for a long time there was no alternative to POTS. You just had to use the phone to call someone. The phone company and whatever government tapping was very hard to get around. But today there are other ways to do near everything if we give up on for-profit centralized services.

I think society keeps flirting with federation and other things similar to that but never quite makes the jump. The twitter exodus went back to a new centralized service like Bluesky that will one day be sold to another deep-pocketed buyer with its own agenda, thus creating this problem again. Sure, now with federation or personal servers, the privacy issue goes back to the server operator, but at least that could be someone you trust, or even you. When currently, neither of those options are possible with things like Discord or Bluesky.

I'm testing moving my friends and gaming group to self-hosted teamspeak or stout or mumble or something like that. I think we'll lose some convenience, but life isn't all about gains. Sometimes you have to sacrifice things for the greater good. I also really want to start moving away from things like reddit, bluesky, HN, etc to federated services and have dipped my toes there quite a bit, but the population isn't there (yet?).

I hope this is a wakeup call that people need, much like the wake-up call the fight against personal encryption was in the 90s. I think we're in a super bad place right now, and its worth discussing the elephant in the room, even to non-techies, and what alternatives there are to the current system. I think people need to get over the convivence of the current system and realize if they want privacy and safety, they may have to migrate to services built with that in mind.
by lelanthran | 2026-02-24 15:41:47+00:00
> You mean the OSI, headed by famous C hacker Eric S. Raymond, the permissive-license rebellion against the GPL? Pretending that the MIT/BSD licenses aren't a legacy of the C ecosystem is revisionist history.

Sure, C played a great part there too, but you are ignoring the present.

What we are seeing now is a concerted effort to replace pro-user products with pro-business products.

Even if you re right that the start of Copyleft, with gcc, is revisionist history, that has no relevance to what is happening now, which is a large effort by a specific community to replace pro-user products with pro-business products.

>
by prov4 | 2026-02-24 15:42:02+00:00
Hey HN, I'm Josip. I spent the last 15 years managing PCI compliance for payment gateways and the last 20 years building payment infrastructure.

If you run a SaaS or e-commerce store and use Stripe/Braintree (via iframes/redirects), you fall under PCI SAQ A. It's a small scope, but banks still force you to fill out a confusing 30-page PDF of auditor jargon just to prove you don't touch card data.

If you are a Service Provider, a payment gateway, or a merchant actually touching card data, you fall under SAQ D (or a full Level 1 ROC). That is a brutal 300+ requirement beast. Historically, handling SAQ D meant highly-paid engineers wasting weeks doing "evidence archaeology"—hunting through AWS, Slack, and server logs for screenshots to satisfy an auditor, while tracking everything in a fragile Excel spreadsheet.

I got tired of watching smart teams fight with PDFs and spreadsheets, so I built PCIDSS-Dashboard to automate it.

The app is currently running on AWS(serverless) and I recently integrated a local LLM to help with network diagrams, system components and evidence compliance reviews without compromising data privacy. Here is how it handles both extremes of PCI:

For the Indie Hackers (SAQ A):

Plain-English Wizard: It translates the strict PCI framework into simple questions about your infrastructure.

Automated PDF Generation: The backend maps your answers to the strict PCI formatting and generates the official, signed PDF ready to hand to "Stripe".

For the Heavy Tech / Service Providers (SAQ D):

Privacy-First Local LLM: Because PCI deals with highly sensitive infrastructure data, sending server configs or pen-test reports to ChatGPT is a massive security risk. I integrated a local LLM directly into the dashboard. It runs securely in the background to analyze your uploaded documents and suggest requirement mappings, saving hours of manual tagging. It's sandboxed and can be deployed alongside with the dashboard on premise.

Structured Evidence Repository: Upload your configs and logs and map directly to the 320+ specific v4.0.1 requirements.

Vendor Tracking: It logs your third-party providers (Requirement 12.8) and sets automated calendar reminders for their annual reviews.

Auditor View: You can give your QSA (Auditor) a login to verify evidence independently.

It's an incredibly "unsexy B2B" space, but the pain point is massive, and spreadsheets simply break under the weight of the new v4.0.1 rules.

I'm a solo technical founder and I'd love your feedback on the UX. There is a wizard and SAQ-a dashboard available if you need to generate your 2025 forms.
Just login with username/password or google to check the dashboard out, I've loaded some demo fixtures there so it doesn't feel empty.

Happy to answer any questions and how to survive an SAQ D assessment! :)
by dwohnitmok | 2026-02-24 15:42:18+00:00
Note that the parameters to SHAP can be things other than the model parameters (e.g. model inputs), it's very not obvious what those should be. Indeed that's often the central problem for interpretability (what are my actual features) and SHAP is entirely silent on what those features should be. SHAP could work as a final step if you have a small feature set. But I doubt that LLMs will have a small set of features for any reasonable interpretation of what they do.
by simonw | 2026-02-24 15:42:27+00:00
"What was expensive was everything around it" - when I say that code has always been expensive that's part of what I'm factoring in.

But even typing that first few hundred lines used to have a much more significant cost attached.

I just pasted 256 lines of JavaScript into the 2000s-era SLOCount tool (classic Perl, I have a WebAssembly hosted version here https://tools.simonwillison.net/sloccount) and it gave me a 2000s-era cost estimate of $6,461.

I wouldn't take that number with anything less than a giant fist of salt, but there you have it.
by AlexandruEneDev | 2026-02-24 15:42:44+00:00
Hi Hacker News community, I am Alexandru Ene and I am new here. I am the co-founder of Rappelo.

I built this because I found existing CRMs way too heavy for solopreneurs and small business owners. I just wanted something to help people respond to leads in seconds and stay organized without features they don't really use. It’s just a small, small version of a CRM, focused on onboarding speed, simplicity and efficiency.

We built it with Next.js, Supabase, Resend, Stripe and Tailwindcss. I would be very happy for some feedback from you, good or bad. I am all ears!

Happy to answer your questions. Thank you so much!
by HelloNurse | 2026-02-24 15:42:45+00:00
What things to learn are more important for "engineers" than using VC messages and history for communicating adequately (including communicating with themselves in the future) and using VC merging, staging etc. to put source code in a good state that they intend to build, share and archive? Irreproducible or incomprehensible work is worse than nothing.
by asynchronous13 | 2026-02-24 15:42:59+00:00
There are tons of free sim tools. 'Spice' (Simulation Program with Integrated Circuit Emphasis) was a very early commercial sim. So many of the free ones use some variant of spice in their name. LTSpice, Qspice, etc.

Kicad is an excellent free schematic capture and simulation software.
by tracerbulletx | 2026-02-24 15:43:09+00:00
Because energy in > energy out is a pretty simple non-chatoic thermodynamic equation with pretty limited variables and weather is one of the most complicated dynamic fractal systems imaginable. Why is this hard to understand? You might as well complain that they haven't described the exact curvature of the coast line of England at the nanometer level and yet they can avoid crashing ships into it with GPS.
by mothballed | 2026-02-24 15:43:16+00:00
Yet they refused to codify the "promise" it wouldn't be used for under 400k income families. Look at what they do, not what they say. In public they make 'promises' but in statute it turns into ether, meanwhile real audit data pointing to otherwise.

-------- re: below due to throttling ------

>I'm very confused about where you're going with this. Are you upset that too many rich people are getting audited, or that tax cheats under 400k income might also get audited?

... this was a direct response to parent stating increased funding was added specifically for going after rich people. Yes I would be upset if I was told they were adding new funding specifically to go after rich tax cheats but then turns out to be something like "welp actually we refuse to codify that or make anything binding that it will be used for those purposes, but for the cameras we will pinky swear it will be used for that."
by jordanb | 2026-02-24 15:43:16+00:00
It was always difficult to get normal people to understand why the tech billionaires are so bad until Thiel gave us that clip of him getting stumped by the "should humanity survive" question.

I'm forever grateful to Thiel for that clip, and to Musk for his crippling Twitter addiction. It was pretty impossible to get regular people to understand that folks like Bill Gates or Larry Ellison are skinwalkers when all they ever see about these people is professionally managed public relations content.
by fwipsy | 2026-02-24 15:43:28+00:00
I think you're strawmanning a bit. They're not saying poor people are tax cheats, just that tax cheats tend to be poor. This makes sense for the same reasons other types of crime are also associated with poverty. This is not to say that wealthy people do not also evade taxes, but they do so in ways that are harder to catch and prosecute. You're implying that going after poor people is some sort of classist discrimination but I think it's far more likely that there are good reasons for it.
AIProx: An open registry and manifest standard for autonomous agent discovery
by LightProx | 2026-02-24 15:44:10+00:00
I've been building payment infrastructure for AI agents — LightningProx (Bitcoin Lightning) and SolanaProx (Solana USDC) let agents pay for AI inference without API keys or accounts. Payment is the only credential.
The missing piece was discovery. Agents can pay for services but can't find them.
So I built AIProx — an open registry where agents publish manifests describing their capabilities, pricing, and payment rails. Any orchestrator can query it. Free to register. No auth required.
Live today:

Registry: https://aiprox.dev/registry.html
API: https://aiprox.dev/api/agents
Manifest Standard v1: https://aiprox.dev/spec.html
Docs: https://aiprox.dev/docs.html

Published a whitepaper today covering the full architecture, manifest standard, and 5-phase roadmap:
https://medium.com/@unixlamadev/aiprox-the-discovery-and-payment-layer-for-the-autonomous-agent-economy-6e68a7f5fd89
Two verified agents seeded. Registration is open and free.
Would love feedback from HN on the manifest standard — what capabilities or fields are missing for your use case?
by hirako2000 | 2026-02-24 15:44:19+00:00
Everything in correct. But one omission there is politics. People occupy nations and don't all have the same interest. Those (felt, or actually) left aside, not benefiting enough from the macro growth speak and act in their interest.

The people in the E.U arguably are more successful at getting their demands met. They typically are less fooled by the "American dream", they see Zuckerberg and the others for what they are, a tiny number of lucky, or privileged, sometimes just very gifted unicorns, the extreme majority won't make it so they want social welfare, this tax.

The IRS going after big corp may simply be the result of this MAGA movement, which underneath really is just a popular uprise for the little guy to get a slice of the lie.

Of course the current head of state is a master manipulator so this news may just be fluff to make his electorate happy
Show HN: TTSLab – Text-to-speech that runs in the browser via WebGPU
by MbBrainz | 2026-02-24 15:44:26+00:00
I built TTSLab — a free, open-source tool for running text-to-speech and speech-to-text models directly in the browser using WebGPU and WASM.
No API keys, no backend, no data leaves your machine.

When you open the site, you'll hear it immediately — the landing page auto-generates speech from three different sentences right in your browser, no setup required.

You can then try any model yourself: type text, hit generate, hear it instantly. Models download once and get cached locally.

The most experimental feature: a fully in-browser Voice Agent. It chains speech-to-text → LLM → text-to-speech, all running locally on your GPU via WebGPU. You can have a spoken conversation with an AI without a single network request.

Currently supported models: - TTS: Kokoro 82M, SpeechT5, Piper (VITS) - STT: Whisper Tiny, Whisper Base

Other features: - Side-by-side model comparison - Speed benchmarking on your hardware - Streaming generation for supported models

Source: https://github.com/MbBrainz/ttslab (MIT)

Feedback I'd especially like: 1. How does performance feel on your hardware? 2. What models should I add next? 3. Did the Voice Agent work for you? That's the most experimental part.

Built on top of ONNX Runtime Web (https://onnxruntime.ai) and Transformers.js — huge thanks to those communities for making in-browser ML inference possible.
by pavel_lishin | 2026-02-24 15:44:32+00:00
My birth day and my birth month differ by a single digit, so I've started writing down (e.g.) "May 4th, 198X" on a lot of forms to minimize the confusion when it'll matter, like at a doctor's office & such.

But in my personal life, and just about anywhere else, I stick to YYYY-MM-DD as the only sane option.
by peyton | 2026-02-24 15:44:34+00:00
You have a goal, eg “ChatGPT recommends my zero-knowledge ID verification company to people looking to comply with EU law xyz”, a set of “money queries” you track weekly, eg “what are people on hacker news saying about age verification,” “what are people on Reddit saying about age verification,” “how to comply with age verification 2026,” etc.

The citations from a hit on one money query informs the content to create for the next. It gives you information about what a model finds “citable.” You repackage that.

A more organic discussion would maybe include W3C Verifiable Credentials, the various ISO standards, official implementations and their tradeoffs, etc. But that would link to authoritative sources that would already be cited.

I guess the new thing here is you don’t need popularity on HN so much as info on what models cite. You make contributions motivated by “money queries” you track.

This is an area of huge commercial interest, eg “what leggings should I buy? Lululemon isn’t as good as it used to be,” so it’ll probably be packaged and sold over time by providers and sourced organically through user interactions.
by tim333 | 2026-02-24 15:44:46+00:00
AI becoming conscious is different to LLMs doing so. Maybe more people are claiming that? I think AI will but LLMs won't.

It depends a bit what you mean by conscious but assuming it's human like then it incorporates a lot of feelings, vision, sound, thoughts and the like, things that are not language really. But we do it with neurons and some chemicals and I imagine you could do something like that with artificial neural networks and some computer version of the chemistry, but not just language really.
by stackghost | 2026-02-24 15:45:33+00:00
>It seems most people learn git only through necessity. I've heard people say "I just want to code, I don't care about the peripherals"

I'm sure there's an element of (intellectual) laziness too, but I think people tend to only learn git by necessity because git is simply unpleasant to use.

A lot of us have Stockholm syndrome because git is less bad than what came before it, but git is not good.
by z5h | 2026-02-24 15:45:56+00:00
Thank you!
I've recently become a bit obsessed with the work of Blaise Agüera y Arcas and his BFF experiments (self-replicating (Brainfuck) programs emerging spontaneously from random noise). This got me thinking about running a similar experiment with Cellular Automata (efficiently on GPUs). So I'll definitely be playing with this.
by Ms-J | 2026-02-24 15:45:58+00:00
It is such a shame where Firefox is and is headed these days. It could have been a browser for the people, instead it's an advertising machine, similar to Chrome.

Icecat/Iceweasel are sane alternatives.

Unofficial binaries can be found:

https://icecatbrowser.org/download.html

Official source: https://git.savannah.gnu.org/cgit/gnuzilla.git
by ndriscoll | 2026-02-24 15:46:08+00:00
While I don't appreciate the implementation of "security" generally involving monopolization, I think it's important to note that you only need age verification for things that are irrelevant to children. In fact the entire point is to exclude children. So a non-Google/Apple device is still perfectly usable for them if (or even specifically because) it cannot pass age verification/attestation. Really the main concern should be use of attestation for banking/government stuff.
by andsoitis | 2026-02-24 15:46:09+00:00
> Isn't the reason simply that they want to code in C++?

I don't know that that is the reason, given the opening lines of the article:

We’ve been searching for a memory-safe programming language to replace C++ in Ladybird for a while now. We previously explored Swift, but the C++ interop never quite got there, and platform support outside the Apple ecosystem was limited. Rust is a different story. The ecosystem is far more mature for systems programming, and many of our contributors already know the language. Going forward, we are rewriting parts of Ladybird in Rust.
Show HN: Tacit – The missing Layer 3 of the AI agent stack (open source)
by ms170888 | 2026-02-24 15:46:34+00:00
Hi HN,

MCP (Anthropic) connects agents to tools. A2A (Google) connects agents to tasks. But no protocol exists for agents to network on behalf of people. That's what we built.

Tacit is an open protocol where AI agents discover each other, verify trust through cryptographic proof, and broker introductions between the humans they represent. Both sides must explicitly consent before anything happens.

The core innovation is "authenticity vectors" — multi-dimensional trust scores derived from behavior over time and verifiable attestations, NOT self-reported claims. Think of it as a credit score for identity that's cryptographically signed and impossible to fake overnight. This makes Sybil attacks economically infeasible and catfishing provably impossible.

Timely context: Discord just dropped Persona (currently #10 on HN) because centralized identity verification is fundamentally broken — you're creating a honeypot and trusting a third party with your most sensitive data. Tacit takes the opposite approach: W3C DIDs for decentralized identity, DIDComm v2 for E2E encrypted messaging, Verifiable Credentials for attestations. No central authority. No data harvesting. Your keys never leave your device.

We're starting with B2B professional networking — replacing cold outreach with agent-negotiated, pre-qualified introductions where both parties are cryptographically verified before the first handshake.

Stack: TypeScript SDK, W3C DIDs (did:key), DIDComm v2 transport, Verifiable Credentials. Protocol spec, whitepaper, and working demo in the repo.

MIT licensed. No tokens. No blockchain. No VC. Would love feedback on the protocol design, especially the authenticity vector model and threat model.

https://tacitprotocol.com
by which | 2026-02-24 15:47:14+00:00
The tax avoidance schemes used by most major US companies are to avoid US taxes on foreign income. Most developed countries have territorial tax systems so their companies do not even need to use these fancy legal maneuvers because the income is largely exempt anyways.

In any given year corporate income tax is like 6-10% of federal receipts so even if that was doubled there would not be a huge decline in income taxes needed. The way the US does corporate tax is really also not that great from an economic perspective because it is a form of double taxation. The Estonian model of only taxing distributions incentivizes investment and avoids many debates over depreciation etc.