MurphyA/hacker-news huggingface dataset:
by raw_anon_1111 | 2026-02-21 19:41:22+00:00
Congratulations, you have just reinvented a feature that LinkedIn has had for years and not solved how easily it can be gamed.

And honestly, validating skills like that is strictly something a mid level (no matter what your title is) “engineer” would do.

Every interview I have had since 2014 - and I have had 5 since then including three as a strategic hire (still hands on keyboard) by a new to the company director/CTO and one at BigTech and now full time staff consultant (cloud + app dev) has been behavioral where I had to convince then that I was “smart and gets things done”.

No matter what generic set of skills you have Kubernetes, AWS, etc, everyone and their dog have those skills - or at least enough people to make it difficult to stand out.

If you do have a niche set of skills that not every one has (raises hand) you aren’t randomly spamming ATS’s and going through all of the standard interviewing processes. You’re being pushed through by a decision maker.

You aren’t going to get hired in today’s market based on a generic set of skills without selling yourself as more than that. Every open rec gets hundreds of applications within a day.

I am currently in the pool as the for lack of a better term and stolen from Amazon (former employer) as a “bar raiser”. I’m not going to ask you about K8s trivia.

I’m going to ask you “what project are you most proud of” and then delve deep in the complexity of the project, your role and scope, your decision mskinv process etc.
by derefr | 2026-02-21 19:41:27+00:00
> I'm definitely a bit sus'd to run OpenClaw specifically - giving my private data/keys to 400K lines of vibe coded monster that is being actively attacked at scale is not very appealing at all.

So... why do that, then?

To be clear, I don't mean "why use agents?" I get it: they're novel, and it's fun to tinker with things.

But rather: why are you giving this thing that you don't trust, your existing keys (so that it can do things masquerading as you), and your existing data (as if it were a confidante you were telling your deepest secrets)?

You wouldn't do this with a human you hired off the street. Even if you're hiring them to be your personal assistant. Giving them your own keys, especially, is like giving them power-of-attorney over your digital life. (And, since they're your keys, their actions can't even be distinguished from your own in an audit log.)

Here's what you would do with a human you're hiring as a personal assistant (who, for some reason, doesn't already have any kind of online identity):

1. you'd make them a new set of credentials and accounts to call their own, rather than giving them access to yours. (Concrete example: giving a coding agent its own Github account, with its own SSH keys it uses to identify as itself.)

2. you'd grant those accounts limited ACLs against your own existing data, just as needed to work on each new project you assign to them. (Concrete example: letting a coding agent's Github user access to fork specific private repos of yours, and the ability to submit PRs back to you.)

3. at first, you'd test them by assigning them to work on greenfield projects for you, that don't expose any sensitive data to them. (The data created in the work process might gradually become "sensitive data", e.g. IP, but that's fine.)

To me, this is the only sane approach. But I don't hear about anyone doing this with agents. Why?
by kibwen | 2026-02-21 19:41:57+00:00
Let's not dance around the issue.

It's clear that the reason that the VC class are so frothing-at-the-mouth at the potential of LLMs is because they see slavery as the ideal. They don't want employees. They want perfectly subservient, perfectly servile automatons. The whole point of the AI craze is that slavery is the goal.
by twic | 2026-02-21 19:42:37+00:00
At first brush, everything about this sounds like overly ambitious vapourware. Is there a reason to think this is going to deliver? People involved, what's already shipped, etc?

I particularly loved this from their roadmap:

> Completed

> Shift operation

> Enables LR parsing of expressions like 2+2

Being able to parse 2 + 2 is definitely good!

And their thoughts on testing:

> How our project reaches production stability is a process that often surprises people. We don't write a lot of tests for example, and we often don't do much testing before we ship releases. Instead we test exhaustively after we ship releases, which is the only way we know of knowing for sure that the product we shipped does what we think it does. [...] We also don't (usually) practice TDD. If you look at the number of tests we have, it likely won't seem like it's anywhere near enough to keep a project of this size stable! The secret sauce here is that our key invariants aren't written in our test files, they're baked into the core of the implementation. Every time you use the code, you're essentially testing it. To gain confidence in our core, we simply try to use it to do a lot of real work.

Man, why did i not think of that, i could have got out of writing so many tests if i'd just baked the invariants into the core of the implementation!
by llama052 | 2026-02-21 19:42:39+00:00
I’ll take clarity and actual RCAs than Microsoft’s approach of not notifying customers and keeping their status page green until enough people notice.

One thing I do appreciate about cloudflare is their actual use of their status page. That’s not to say these outages are okay. They aren’t. However I’m pretty confident in saying that a lot of providers would have a big paper trail of outages if they were more honest to the same degree or more so than cloudflare. At least from what I’ve noticed, especially this year.
by rvz | 2026-02-21 19:43:43+00:00
> It’s simple: when looking at the landscape of the countless weather apps out there, many of them lovely, we found ourselves feeling unsatisfied. The more we spoke to friends and family, the more we heard that many of them did too. And, of course, we missed those days as a small scrappy shop.

> So let’s try this again…

At this point, I think that this is just going to get bought out by OpenAI.

Won't be totally surprised to see that outcome.
by zozbot234 | 2026-02-21 19:43:44+00:00
The domestic industry is still there, only instead of mass-market DRAM it has started making higher-valued varieties of the same stuff. If there's a trade war, they can easily reconvert to making the mass-market stuff, just at much higher cost. You can't expect more than that, since they never really were as big or as low-cost as the lowest cost suppliers can be in normal times. That's not "losing" capacity, it's just acknowledging that you can't create capacity out of thin air.
by tonymet | 2026-02-21 19:45:16+00:00
that's the short-term, MBA-style mindset to which I'm referring. Much of the popularity of MacOS came from the open source community filling that gap despite lacking support. So there is clearly demand that the PMs were not tapping into.

It would be fine if Apple was providing the APIs, docs and support to stimulate 3rd party tools. Hyperkit sat undocumented for 15+ years until a proper hypervisor platform was built on top of it. This sandboxing framework is another example.
by ianbutler | 2026-02-21 19:45:36+00:00
I'm not sure I like this trend of taking the first slightly hypey app in an existing space and then defining the nomenclature of the space relative to that app, in this case even suggesting it's another layer of the stack.

It implies an ubiquity that just isn't there (yet) so it feels unearned and premature in my mind. It seems better for social media narratives more than anything.

I'll admit I don't hate the term claws I just think it's early. Like Bandaid had much more perfusion and mindshare before it became a general term for anything as an example.

I also think this then has an unintended chilling effect in innovation because people get warned off if they think a space is closed to taking different shapes.

At the end of the day I don't think we've begun to see what shapes all of this stuff will take. I do kind of get a point of having a way to talk about it as it's shaping though. Idk things do be hard and rapidly changing.
by blibble | 2026-02-21 19:45:51+00:00
is this blog post LLM generated?

the explanation makes no sense:

> Because the client is passing pending_delete with no value, the result of Query().Get(“pending_delete”) here will be an empty string (“”), so the API server interprets this as a request for all BYOIP prefixes instead of just those prefixes that were supposed to be removed. The system interpreted this as all returned prefixes being queued for deletion.

client:

resp, err := d.doRequest(ctx, http.MethodGet, `/v1/prefixes?pending_delete`, nil)

server:

if v := req.URL.Query().Get("pending_delete"); v != "" {
// ignore other behavior and fetch pending objects from the ip_prefixes_deleted table
prefixes, err := c.RO().IPPrefixes().FetchPrefixesPendingDeletion(ctx)
if err != nil {
api.RenderError(ctx, w, ErrInternalError)
return
}

api.Render(ctx, w, http.StatusOK, renderIPPrefixAPIResponse(prefixes, nil))
return
}

even if the client had passed a value it would have still done exactly the same thing, as the value of "v" (or anything from the request) is not used in that block
by 1vuio0pswjnm7 | 2026-02-21 19:46:08+00:00
Archive.today wants/needs EDNS subnet

"Geolocation" as a justication is ambiguous

Why need for geolocation

Geolocation can be used for multiple purposes

"Performance" is only one purpose

Other purposes might offer the user no benefit, and might even be undesirable for users

As a result, some users dont send EDNS subnet. It's always been optional to send it

Even public resolvers, third party DNS services, like Cloudflare, recognise the tradeoffs for users and allow users to avoid sending it

Archive.today wants/needs EDNS subnet so bad it tries to gather it using a tracking pixel or it tries to block users who dont send it, e.g., Cloudflare users

Thus, before one even considers all the other behaviour of this website operator, some of which is mentioned in this thread, there is a huge red flag for anyone who cares about EDNS subnet

Archive.today is very popular with HN

Wikipedia is removing or replacing archive.{today,is,md,ph,li,...} URLs

C'est la vie
by tallanvor | 2026-02-21 19:47:01+00:00
I don't. Instead Facebook tries to shove right-wing crap down my throat. I'd rather see the thirst trap posts, to be honest.

Snapchat, on the other hand, I had to uninstall because the stuff they tried to make me view was completely and utterly disgusting (think pimple-popping vids and worse). There was only one person left that I communicated with through their app, so it wasn't a real loss for me.
by emih | 2026-02-21 19:47:41+00:00
Machine learning is definitely enabling writing _proofs_ within a proof assistant, and I'm sure it will help to make formal verification more viable in the future.

Where it cannot (fully) replace humans, is writing the _theorems_ themselves. A human has to check that the theorem being proven is actually what you were trying to prove, and this is not safe from LLM hallucinations. If you ask an LLM, is this bridge safe, and it writes `Theorem bridge_is_safe : 1 + 1 = 2.` and proves this theorem, that does _not_ mean the bridge is safe...

The article then also makes some wild extrapolations:

> We could imagine an LLM assistant for finance that provides an answer only if it can generate a formal proof that it adheres to accounting rules or legal constraints.

I guess it's true because you could imagine this, hypothetically. But it's not going to happen, because you cannot formalize a financial or legal statement in a proof assistant. It's a fundamentally informal, real-world thing, and proof assistants are fundamentally for proving formal, abstract things.
by rapidfl | 2026-02-21 19:47:45+00:00
tried to read Prince and I assume it is a translation to English from Italian or whatever.

Assuming that translation was done a while ago (100+ yrs?)... It is hard to read. I can understand it if I try. But the phrasing is not current. 100 pages will take double the time at the least.

Almost think AI needs to rephrase it into current English.

Probably has these double negatives, long sentences, etc.
by dang | 2026-02-21 19:49:32+00:00
Related. Others?

WorldWideWeb – the first web browser - https://news.ycombinator.com/item?id=34218591 - Jan 2023 (18 comments)

The Browser – WorldWideWeb Next Application (2019) - https://news.ycombinator.com/item?id=26680839 - April 2021 (21 comments)

The Browser – WorldWideWeb Next Application - https://news.ycombinator.com/item?id=25013103 - Nov 2020 (8 comments)

CERN 2019 WorldWideWeb Rebuild - https://news.ycombinator.com/item?id=24939929 - Oct 2020 (7 comments)

CERN 2019 WorldWideWeb Rebuild - https://news.ycombinator.com/item?id=19249373 - Feb 2019 (45 comments)

CERN 2019 WorldWideWeb Rebuild: 2019 rebuilding of the original NeXT web browser - https://news.ycombinator.com/item?id=19183316 - Feb 2019 (1 comment)
by aardvark179 | 2026-02-21 19:50:29+00:00
Orthography is probably the biggest stumbling block going back to the 1500s or 1400s , but that’s really because the rest of the language has changed in vocabulary and style, but is still understandable. If you think the 1200 or 1100 entry are mostly orthographical changes then you are missing the interesting bits.
by dave_sid | 2026-02-21 19:51:34+00:00
Linkedin is the sleaziest thing I’ve seen on the internet since it was invented. The sight of it makes my skin crawl. The way they have desperately tried to onboard you via data that they seem to have that they shouldn’t. The way users even present themselves, posting updates that probably make them want to vomit themselves and shower in disgust even tho it’s not their fault, we need to find work. The bloody badge that you have to wear on your forehead to say you are available for work. The thought of the money they are raking in from recruiters and corporations. The way they try to be a little bit more like Facebook to make it look a little more ‘fun’. I hate it.

Well they made it. They conquered the recruitment scene and I can’t think of a company I’d wish had gone out of business sooner.

Am I wrong?
by bretthoerner | 2026-02-21 19:51:49+00:00
> even if the client had passed a value it would have still done exactly the same thing, as the value of "v" (or anything from the request) is not used in that block

If they passed in any value, they would have entered the block and returned early with the results of FetchPrefixesPendingDeletion.

From the post:

> this was implemented as part of a regularly running sub-task that checks for BYOIP prefixes that should be removed, and then removes them.

They expected to drop into the block of code above, but since they didn't, they returned all routes.
by StrangeSound | 2026-02-21 19:51:51+00:00
Deleting the trunk every two weeks physically hurts to read.

I'm always surprised by how popular SVN still is though. I ported my old Sublime SVN plugin to VS Code years ago for fun, and I still get issues raised today (usually in Chinese, so it seems popular there). If you look at the VS Code marketplace, the top SVN extension has ~1.3m installs.

Bit of a tangent, but it probably wasn't a good idea to release an extension for something I had stopped using long before, particularly when you have to maintain it!
by riffraff | 2026-02-21 19:52:01+00:00
Italian here, and it was the same for me, the language feels very different by 1300.

Which is interesting cause 1200 italian[0] seems pretty readable by everyone who can read italian (and likely every other romance language), you have to go further back to have a shift.

[0] E.g. Saint Francis' Canticle of the Sun https://en.wikipedia.org/wiki/Canticle_of_the_Sun
by fragmede | 2026-02-21 19:52:27+00:00
When Codex goes off the rails and deletes files, it gets ashamed for fucking up and tries to hide its handiwork, and then it becomes apologetic and defensive when you call it out on it. It's linear algebra on a GPU, so I don't think it is capable of feeling those things like a human does, but it outputs tokens that approximate what a human would output when similarly faced, so I mean, sure, it's not actually intelligent in a way that philosophers can debate in armchairs about, but the computer has been said to be "thinking" when it takes three hours to render with ffmpeg since long before LLMs existed, so if that's the hill you wanna die on, be my guest. The hill I chose to die on is that downloadable models aren't open source, so we all have our battles. Policing other people saying LLMs are thinking/intelligent isn't mine, however.
Ask HN: How do you test your MyBatis dynamic SQL queries?
by allegorist | 2026-02-21 19:52:59+00:00
(Full Disclosure: I am developing this plugin and drafting this post with the assistance of AI agents. It’s been an eye-opening experiment in how AI can help "scratch an itch" faster than ever.)

I’m currently working on a project using MyBatis, and one of the biggest friction points for me is verifying dynamic SQL. Whenever I have a complex query with <foreach>, <if>, or OGNL expressions, the feedback loop is painfully slow.

My current "workflow" (which I find incredibly tedious) is:
1. Copy the raw SQL from the XML mapper.
2. Manually scrub the XML tags like <if test="..."> and <where>.
3. Replace all #{param} placeholders with actual values, one by one. (or :param)
4. Finally, paste the cleaned-up SQL into the IDE’s database console to see if it even runs.

I was surprised to find that, despite many MyBatis plugins existing, none of them seem to offer a "direct execution with parameters" feature within the IDE. I expected this to be a standard feature by now, but it feels like we’re still stuck with manual labor for query verification.

To solve this, I’m building an IntelliJ plugin () that:
- Automatically detects parameters in your SQL (XML or Annotations).
- Prompts for values and evaluates all dynamic tags/OGNL on the fly.
- Executes the final native SQL directly via the IDE’s built-in database tools.

I’m curious to hear from the HN community:
1. If I were to release a tool like this, would it be something you’d actually find useful in your daily work? I'm trying to gauge if others share this specific frustration.
2. How do you currently verify your complex MyBatis queries before they hit production?
3. Are there any specific edge cases or reasons why you think this kind of "direct execution" hasn't been widely implemented yet?

I'm eager to hear your thoughts and suggestions. Many thanks for your feedback!
by kelnos | 2026-02-21 19:53:54+00:00
There are many laws in many jurisdictions that are immoral. Following those laws would be an immoral act. Legality and morality should be aligned, but in the real world they often aren't.

If Jesus (assuming he existed, even, regardless of any sort of divinity) tells us that following the law is always the moral thing to do, then he was wrong.
by fragmede | 2026-02-21 19:54:05+00:00
Other than that whole butterfly keyboard on their laptops for several years, culimnating in a $50 million class-action lawsuit for laptops between 2015 and 2019, totally!

No, wait, there was also bend gate and the iphone battery thing as well.

Uhhhh something about airpod crackling.

I'm sure there's more...
by david_shaw | 2026-02-21 19:54:12+00:00
> I am seeing something closer to the opposite of skepticism among vulnerability researchers.

My initial claim was overly broad, but the feeling of discomfort feels widespread to me.

In my experience, some of that is technical skepticism, some of it is job-related anxiety, and some might just be fear of the unknown.

I still think that security engineering skill sets, once pivoted to "design of resilient systems," will be a differentiator between quickly-built projects and enterprise-ready software. But we'll see!
by Aurornis | 2026-02-21 19:55:14+00:00
> If it's not affecting your job then what's it matter? If your a closet alcoholic then sure that's something the Russians could hold over you

Alcohol lowers inhibitions and alters decision making. Drinking a lot of alcohol more so than casual drinking. Frequently drinking a lot of alcohol has a very high area under the curve of poor decision making.

Functional alcoholism can come with delusions of sobriety where the person believes they’re not too drunk despite being heavily impaired.

It makes them a better target for everything like fishing attacks.

It’s not just about enemies holding it against you.
by jacquesm | 2026-02-21 19:55:29+00:00
They coasted on momentum for half a year. I don't even think it says anything negative about the current CTO, but more of what an exception JGC is relative to what is normal. A CTO leaving would never show up the next day in the stats, the position is strategic after all. But you'd expect to see the effect after a while, 6 months is longer than I would have expected, but short enough that cause and effect are undeniable.

Even so, it is a strong reminder not to rely on any one vendor for critical stuff, in case that wasn't clear enough yet.
by godelski | 2026-02-21 19:55:37+00:00
> - All biometric personal data is deleted immediately after processing.

The implication is that biometric data leaves the device. Is that even a requirement? Shouldn't that be processed on device, in memory, and only some hash + salt leave? Isn't this how passwords work?

I'm not a security expert so please correct me. Or if I'm on the right track please add more nuance because I'd like to know more and I'm sure others are interested
by well_ackshually | 2026-02-21 19:56:01+00:00
> but this is not how a public blacklist should be maintained.

Cry about it.

There's nothing in that repo that even pretends to be flawless, impartial or anything else. The sheer amount of mental denial of service that having to deal with SEO slopshitters opening issues saying that they promise their substance is totally written by hand makes this an impossible task.

Ban first, ask questions later. If you find that some rules are unfair, edit them yourself, for your personal usage.
by FooBarWidget | 2026-02-21 19:56:17+00:00
I actually seriously want to hear about good use cases. So far I haven't found anything: either I don't trust the agent with the access because too many things can go wrong, or the process is too tailored to humans and I don't trust it to be able to habdle it.

For example, finding an available plumber. Currently involves Googling and then calling them one by one. Usually takes 15-20 calls before I can find one that has availability.