MurphyA/hacker-news huggingface dataset:
by slongfield | 2026-02-24 01:19:09+00:00
This isn't new.

"The Productivity Paradox" is what they called it when people were skeptical that computer would end up finding a place in the office. There are articles from the 90s complaining about how much people are spending on buying computers for no real impact on productivity https://dl.acm.org/doi/10.1145/163298.163309
by slg | 2026-02-24 01:19:11+00:00
This post exists in that Poe's law purgatory of it being impossible for someone without the proper context to know whether this is sarcastically mocking OpenClaw or an attempt at defending OpenClaw against some of the bad press it has received due to people not understanding the risks involved. Because the comments here are responding of if this post is a sane reasonable take, but I read it and just see a laundry list of restrictions you need to put on OpenClaw listed one after another until you get to the point in which the software is effectively useless.
by k310 | 2026-02-24 01:19:17+00:00
I don't like taking the phone out of its slipcase any more than necessary.

(It's a small phone and perfectly fits a very old camera case that holds some adapters in a pocket)

Any more than to pay. The advantage to paying with the phone is that through regular but not constant use, I am very unlikely to misplace it.

As noted, I sometimes do both. I think that my old shopping app fell by the wayside (as apps sometimes do) and I never replaced it.
by magicalhippo | 2026-02-24 01:19:38+00:00
He did an interesting cover[1] of Elton John's Rocket Man[2] back in 78.

That cover was later remixed into this[3] piece of internet gold (IMHO).

[1]: https://www.youtube.com/watch?v=8wI4jMxveyI

[2]: https://www.youtube.com/watch?v=r_QZe8Z66x8

[3]: https://www.youtube.com/watch?v=-IffZh3V8oQ
by toofy | 2026-02-24 01:19:40+00:00
many people i know personally who, to this day deny covid was real, they personally knew people who died or were hospitalized and ventilated. yet they still deny it was real.

one of my family members who was in a coma for over a month and in the hospital for months still denies it was covid despite multiple doctors telling him otherwise. some people live in a very real state of denial entirely separated from reality.

sadly i’m not sure the person you replied to is too far off.
by lo_zamoyski | 2026-02-24 01:19:53+00:00
> that's not how immigrant communities see themselves.

Whoa, who's talking about immigrant families? Immigrant families came from somewhere else. That's their identity, because it's where they came from. But if your family has been here for a few generations, then I have news for you: you're not immigrants!

> I do in fact know the perecentages of my national makeup. Nobles know their ancestry down to the smallest detail, is somebody really tacky for knowing that technically they are 1/4th Italian?

The game of percentages is absurd to begin with. It's one thing to know you have some ancestors from Japan. It's another to say "I am 12.5% Japanese!" What the hell does that even mean? When noble families recognize their ancestry, first off, they don't make ridiculous claims of percentage. No nobleman says "I am 1/16 Catalonian". They'd laugh at you. "You mean to tell me your culture is 1/6 Catalonian?" Second, they don't identify with the culture of an ancestor if it has no presence and reality for them. The British royal family has German roots (and like all European royal families, a complicated web of ancestry spanning virtually all of Europe in some way or another), yet they don't claim to be German or Hessian. It would be absurd. They're the British royal family, and much of them have been the British royal family for some time!

(I do recognize cultural identity as complex, of course, more complex than how many people see it, but it's complex when the cultural dimensions are actually real, not fabricated by the imagination.)

> I don't think attacking somebody's identity is ever fair; it costs you nothing but is everything to them.

But it's not their identity. It's a pretense. If some distant ancestor's cultural origin is everything to someone, then you're proving the absurdity of of the whole thing.

Like I say, it's a socially-accepted form of cosplaying.
by levkk | 2026-02-24 01:20:15+00:00
I would say, over 100 Postgres connections, consider getting a connection pooler. Requests per second is highly variable. Postgres can serve a lot of them, as long as you keep the number of server connections low - that's what the pooler is for.

You can use pgbench to benchmark this on local pretty easily. The TPS curve will be interesting. At first, the connection pooler will cause a decrease and as you add more and more clients (-c parameter), you should see increasing benefits.

Ultimately, you add connection poolers when you don't have any other option: you have hundreds of app containers with dozens of connections each and Postgres can't handle it anymore, so it's a necessity really.

Load balancing becomes useful when you start adding read replicas. Sharding is necessary when you're approaching the vertical limit of your cloud provider (on the biggest instance or close).
by ericd | 2026-02-24 01:21:03+00:00
All those racks of Nvidia machines might not pay off for the companies buying them, but I have a hard time believing that people are still questioning the utility of this stuff. In the last hour, Opus downloaded data for and implemented a couple of APIs that I would’ve otherwise paid hundreds a month for, end to end, from research all the way to testing its implementation. It’s so, incredibly, obviously useful.
by gck1 | 2026-02-24 01:22:07+00:00
This looks very similar to what I'm doing. Few questions:

- How do you adress spec drift? A new feature can easily affect 2 or 3 specs. Do you update them manually? Is a new feature part of a new spec or you update the spec and then plan based on spec changes?

- How do you address plan drift? A plan may change as implementer surfaces some issues with the spec for example.
by fred_is_fred | 2026-02-24 01:22:11+00:00
Their own particular reasons are that utilities don't like chaos. Utilities plan on 30+ year time scales. They've planned to close these plants (which are uneconomical) for years and know when Trump leaves, this order also ends. So instead of an orderly planned closure of the plants, they get chaos. They also don't just buy coal at the market, they have long term contracts which now need to come back.
by JoshTriplett | 2026-02-24 01:23:06+00:00
> For a taste: I wish we didn’t need lifetime annotations, somehow. I wish rust had first class support for self borrows, possibly via explicit syntax indicating that a variable is borrowed, and thus pinned. Unpin breaks my brain, and I wish there were ways to do pin projections without getting a PhD first. I wish for async streams. I wish async executors were in std, and didn’t take so long to compile. I could go on and on.

I would like all of that as well. I think we can do much of that in Rust. I would love to see self-borrows available, and not just via pinning; I would also like relative pointers. I would like people to almost never have to think about pin or unpin; one of my rules of thumb is that if you see Pin or Poll, you've delved too deep, and nobody should need those to write almost any async code, including the interiors of trait implementations and async runtime implementations. And I would absolutely like to see async iterators, async executors, and many kinds of async traits in the standard library.

I also think there are plenty of things we are unlikely to get to even in an edition, and that might never happen without a completely different language. I'm not sure if we'll find a path to doing those in Rust, or if they will be the domain of some future language that makes different trade-offs.
by slg | 2026-02-24 01:23:41+00:00
>That isn’t actually true though, right now everyone has a hard dependency on a cloud service. That is currently sold to them at deep discount by companies that are losing billions.

Isn't that a huge red flag? If customers are being given this product at a discount and it still isn't showing a positive ROI for them, what makes people think it will improve once we're charged full price?
by mvkel | 2026-02-24 01:24:18+00:00
Good question! It serves as a bootstrap for each module design file (effectively a deeper expansion of what is defined in the PRD). Once you have (at least) design files for each module, PRD is no longer necessary. It usually ends up being inaccurate after the brainstorming phases, which change fundamental bits of the wiring that the initial brainstorm wouldn't cover.
by cowboylowrez | 2026-02-24 01:24:41+00:00
I posted my plan forward but essentially kids get a whitelist at best. For example, a kid friendly access device allows a network connection to a vpn server certified safe for kids and then take it from there with whitelisted destinations. Blacklists are just whackamoles.

https://news.ycombinator.com/item?id=47122715#47131415
by peter_d_sherman | 2026-02-24 01:25:41+00:00
>"But an approach that’s immediately and broadly applicable today—and for which we’re releasing several new products—is based on what we call

computation-augmented generation, or CAG.

The key idea of CAG is to inject in real time capabilities from our foundation tool into the stream of content that LLMs generate. In traditional retrieval-augmented generation, or RAG, one is injecting content that has been retrieved from existing documents.

CAG is like an infinite extension of RAG

, in which an infinite amount of content can be generated on the fly—using computation—to feed to an LLM."

We welcome CAG -- to the list of LLM-related technologies!
by KennyBlanken | 2026-02-24 01:26:08+00:00
Exhibit A: Homebrew.

"We're geniuses! God's gift to Mac open source and software development! but sudo is leeeee haaaaard, so we'll just add a ton of directories in /opt that are owned and writable by the user account, and then add them to the user's path, with higher priority than system binary paths! What could possibly go wrong? YOOOOLOOOOOOO!!!!!!"
by cortesoft | 2026-02-24 01:27:14+00:00
Maybe? But you could make the same argument that programmers today aren't "experts" at computers because they don't know how to build CPUs.

There is no reason to believe you can't gain expertise while still using higher and higher level abstractions. Yes, you will lose some of that low level expertise, but you can still be an expert at the problem set itself.
by lordofgibbons | 2026-02-24 01:27:17+00:00
Pardon my ignorance, but doesn't a byte-by-byte output recreation of the C++ code in Rust defeat the whole purpose of using Rust? For one, would it be idiomatic Rust anymore? Also, if there's a (non-memory related) vulnerability in the C++ code, would it be possible for that to be introduced in Rust too?
by frenchtoast8 | 2026-02-24 01:28:26+00:00
The security team at my company announced recently that OpenClaw was banned on any company device and could not be used with any company login. Later in an unrelated meeting a non technical executive said they were excited about their new Mac Mini they just bought for OpenClaw. When they were told it was banned they sort of laughed and said that obviously doesn't apply to them. No one said anything back. Why would they? This is an executive team that literally instructed the security team to weaken policies so it could be more accommodating of "this new world we live in."
by mothballed | 2026-02-24 01:28:46+00:00
A lot of them were captured for things like simply having an F91W watch and also being proximal or familial to a terrorist. They were initially wanted but then once 'cleared' the problem became once accused as a terrorist no country on earth wanted to take them even if they were cleared as likely innocent.

Obviously it was also politically infeasible to admit them into the general US.
by Lalabadie | 2026-02-24 01:28:59+00:00
I would argue that the leadership and financial support behind AI (in its current form) does not have the patience or level-headedness to treat it as a long-term change, and is very much trying an all-or-nothing approach to making a long shift happen in a few years instead, or burn through nation-level budgets trying.

To my eyes, the problem is not the productivity gain arriving slowly, but the immediate draining of funding from virtually all other areas of innovation.
by Terr_ | 2026-02-24 01:29:00+00:00
It's a "Motte and Bailey" system [0], where the extreme "AI will do everything for you" claim keeps getting thrown around to try to get investors to throw in cash, but then somehow it transmutes into "all technologies took time to mature stop being mean to me."

To be fair, it isn't necessarily the same people doing both at once. Sometimes there are two groups under the same general banner, where one makes the big-claims, and another responds to perceived criticism of their lesser-claim.

[0] https://en.wikipedia.org/wiki/Motte-and-bailey_fallacy
by ryandrake | 2026-02-24 01:30:02+00:00
> Connectivity providers should allow that. Most home routers don't get a static IP, or even a globally routable IPv4 at all. Or even a stable IPv6.

At least we still have DDNS which solves the static IP problem. I've been using it for at least 10-15 years and my home network has always been resolvable over DNS. I guess I'm lucky that I've always had an ISP that handed out publicly routable IPv4 addresses. I think if I joined an ISP where I got some internal node on the ISP's 10.x.x.x network, I'd immediately cancel my service.
by pezezin | 2026-02-24 01:30:23+00:00
Do you actually use Japanese websites on frequently? Because I do live in Japan, and I hate their websites with a passion. Go use any Japanese online shop; the purchase flows are usually absurdly convoluted, and they are so information dense that sometimes you don't know what you are actually going to purchase. It is one of the reasons I rarely use Rakuten anymore...
by gsf_emergency_6 | 2026-02-24 01:30:53+00:00
That comes from a same place--

"not-losing" is so much a part of your core "Polish-Italian" identity that you can't see that "secrecy" is a big part of ... SV's? Or can you?

They, like you, have rationalized^W legitimized it so long ago that this core identity might be already beyond the sunset.. I don't know what would be the corporate governance manifestation of "psychedelics" ;)
by lioeters | 2026-02-24 01:31:07+00:00
> LNG is an operationg system primarly for the good old Commodore64 home-computer. There also is a native version for the successor Commodore128. Ports to other 6502/6510 driven 8Bit Computers are possible but not yet started. LUnix started in 1993 and reached the internet in 1994.

That is old-school cool.
by ascarola | 2026-02-24 01:31:09+00:00
NIST is requesting public input on security practices for AI agent systems -
autonomous AI that can take actions affecting real-world systems (trading bots,
automated operations, multi-agent coordination).

Key focus areas:
- Novel threats: prompt injection, behavioral hijacking, cascade failures
- How existing security frameworks (STRIDE, attack trees) need to adapt
- Technical controls and assessment methodologies
- Agent registration/tracking (analogous to drone registration)

This is specifically about agentic AI security, not general ML security - one of
the first formal government RFIs on autonomous agents.

Comments from practitioners deploying these systems would be valuable.

Deadline: March 9, 2026, 11:59 PM ET
Submit: https://www.regulations.gov/commenton/NIST-2025-0035-0001

Priority questions (if limited time): 1(a), 1(d), 2(a), 2(e), 3(a), 3(b), 4(a),
4(b), 4(d)

Full 43-question RFI at link above.
by burkaman | 2026-02-24 01:31:31+00:00
Yes a whitelist makes a lot of sense, I don't know why I didn't think of that. Seems like it would be doable to blanket allow office supplies, gas, uniforms, etc. and then declare that anything else, even if it's free, must be approved by the public. If it's something uncontroversial then you can just update the ordinance.

Donations would be less of a problem with this system in place, but I still think it would be irresponsible to accept a donation without a plan to pay for it in the future if donations stop, and I also wouldn't want officers to feel indebted to some rich guy.
by samaltmanfried | 2026-02-24 01:31:58+00:00
Like many Americans, I am from a European immigrant background. For what it's worth, I have spent a lot of time in x-land, and I speak x-ish. But I am an American. My ethnicity is mixed. I grew up in America. You would never know my heritage unless I told you, which I probably never would. Because I hate hearing the "Me too! I'm x-ish too!" spiel from another American who can't even pronounce their own surname correctly.
by cpill | 2026-02-24 01:32:08+00:00
I wonder how hard a distributed search algorithm would be to build into a web server? I guess it would be open to bad actors, but there would also be a way to stop that, distributed moderation?

I made a content management system (CMS) for some friends years ago which was very easy to use. It's main paradigm was: 1 folder = 1 page. This was very easy for anyone to manage. Files in the folder were rendered in sort order so you could have an image followed by some markdown etc Was so easy to use I never got anyone (mostly non-technical artists) asking how to change something on their site. Most ppl understand how to organise their content as files and folders. It is the easiest UI I've ever seen for a CMS i.e. no UI :P
Was going to expand it to read files from a Dropbox folder so they didn't even need FTP but life...
It was in PHP, which at the time, all ISPs supported. Setup was: copy code, change files/folders in `/content` dir and your away.
by sachaa | 2026-02-24 01:33:26+00:00
Thanks for the feedback. This is a proof of concept, not production-hardened software, and the README should be clearer about that.

To your questions:

- 1. The CryptoKey is extractable: false, so JS can't export the raw key material, it only exposes encrypt/decrypt operations. It won't stop a full XSS attack on the same origin, but it does prevent casual inspection of IndexedDB/DevTools. Defense in depth, not a silver bullet.

- 2 & 4. You're right, the fetch_url tool and javascript eval in the worker both have unrestricted network access. A confirmation step for outgoing requests is worth adding. Good callout.

- 3 Honest oversight, no reason the Telegram token shouldn't get the same treatment. Will fix.

Updating the security language in the README to be more accurate about the threat model. PRs welcome if anyone wants to tackle sandboxing the JS tool (iframe with a null origin is one approach).
by fragmede | 2026-02-24 01:33:38+00:00
Harder, but not impossible. You 3d print a jig for a solenoid and a relay so you can warm/cold reboot the laptop, get a pizerow setup and configured to be a keyboard you can control over SSH, a webcam watching the screen, a hardwired Ethernet port, a second computer to manipulate the Device Under Test (aka the MacBook/laptop with a missing whatever driver). Even though waiting on Claude Code doesn't hit flow state if you've only got one project going, setting things up so it can run with it is still fun, for specific and rather nerdy definitions of fun.
Ask HN: How do you handle API rate limits in production?
by rjpruitt16 | 2026-02-24 01:35:07+00:00
I'm building data pipelines that sync data from various third party apis. We constantly hit 429 rate limits, and our janky retry system fails regularly.
For those running production data syncs or microservices calling external APIs heavily:

How do you handle rate limiting across multiple workers?
Do you use circuit breakers, retry libraries, or something custom?
How do you prevent retry storms when 100 workers all hit the same rate limit?

Curious what's working at scale.
by npunt | 2026-02-24 01:35:56+00:00
I think you vastly underestimate the importance of fiction. Fiction may be the best canvas for creative and abstract thought, the place where possibility is explored and the 'what' and 'why' is established, without being mired in details. Before we invented things, we thought of things to invent, and in those moments we were writing fiction.

Technical writing is 'how', and that's being absolutely consumed by AI. When AIs can build anything, the question of what we should build and why is the most important.
by margalabargala | 2026-02-24 01:35:57+00:00
This is sort of a distinction without a difference.

Any long-running human society will over time crystallize into some structure that resembles having a legal system. When people say a place is "lawless" it doesn't mean someone can just murder their neighbor in broad daylight for no reason, and all the other neighbors just shrug and say "well, gee, darn, I guess there was no law against that".

The real meaning behind the original comment I replied to is that in both the lawless and tyrannical governments, it really comes down to "might makes right". In the "lawless" society, anyone can gain might and use violence against others if they have accumulated enough power. In the tyrannical society, the State has gained this power and uses is capriciously and unpredictably.

The question is really "would you rather the main source of potential violence against you be the armies and police of a dictator, or would you rather have to deal with your local warlord, while having the potential to become your local warlord?".
by henrikschroder | 2026-02-24 01:36:46+00:00
The weirdest part is that they stop tracing back the second they hit someone interesting, as if nothing interesting happened before that person. If their great-great-grandfather was Scottish, they then assume everyone before him was 100% super duper Scottish, and that that has conferred "cultural traits" through some weird-ass blood magic or something.

But Europeans are diverse mutts as well.

I'm Swedish. But my last name is 100% German, easily recognisable as a German name, super common. Because my paternal ancestor immigrated from Germany in the 1600's and brought the name with him. My mother's maiden name was Czech, also very easily recognisable as such, and my uncle and my cousins have that name as well.

But I would never in a million years call myself German. I am not German. I am not Czech. My cousins aren't Czech. All of our parents were born in Sweden. All of our grandparents were born in Sweden. The vast majority of our great-grandparents were born in Sweden. We are all 100% Swedish.

The idea that I would call myself German because of my last name is completely ridiculous, but that is exactly what these cosplaying Americans are doing, even though they don't speak German, and I do. My dad speaks fluent German. My maternal grandfather spoke fluent German. I have so much more claim to "German-ness", whatever that is, than these cosplayers, and I wouldn't dream of doing it.

And then they bleat about how their great-great-whtaever was German, and because of that they "feel so connected to the Alps".
by grogers | 2026-02-24 01:36:49+00:00
It's not your main point, but I can't help but point out that artificial diamonds ARE diamonds. Cubic zirconia is a different mineral. Usually the distinction is "natural" vs "lab grown" diamonds.

When computers have super-human level intelligence, we might be making similar distinctions. Intelligence IS intelligence, whether it's from a machine or an organism. LLMs might not get us there but something machine will eventually.
by linsomniac | 2026-02-24 01:37:05+00:00
Agreed, it fits well within his range and it's IMHO a really great cover of Common People.

I also really enjoy _That's Me Trying_: https://youtu.be/vjGaqFrF5Fw?si=eq_VSQXnxqXQ_Kyg

and _Real_: https://youtu.be/hsKfZ3wvLkE?si=l7FdbGCX_u8ep0Ie