MurphyA/hacker-news huggingface dataset:
by tomashubelbauer | 2026-02-21 18:28:25+00:00
I also built the equivalent of OpenClaw myself sometime when it was still called Clawdbot and I'm confused how LLMs can be both heralds of the era of personal apps and everyone at the same time be using the same vibe coded personal LLM assistant someone else made, much less it being worth an OpenAI acquisition. I agree building one yourself is very fun.
Show HN: Raypher–eBPF-based runtime security and hardware identity for AI agents
by Kidiga | 2026-02-21 18:28:28+00:00
Hey HN,

I’m the founder of Raypher . We are building a kernel-level execution guard and cryptographic identity layer specifically designed for autonomous AI agents(opencalw).
curent AI agents(open claw) are big security risks our Mission is to make a security feture that will enable developers to make agents and ship them faster without worrying about security risks
The Problem:
Right now, the agentic ecosystem (OpenClaw, LangChain, MCPs) is giving LLMs "hands" with almost zero runtime boundaries. Legacy cybersecurity tools are completely failing here for two reasons:

API Latency: They rely on API polling to check if an agent's SaaS integration is misconfigured. If an agent enters an infinite loop and hallucinates a command to drop a production database, a 2-second API polling delay is an eternity.

Identity Fallacy: They use software tokens (OAuth/API keys) to track agent identity. If an attacker tricks an agent into leaking its config.json, the attacker becomes the agent.

How Raypher Works:
We realized securing probabilistic AI required moving out of the application layer and into the OS kernel.

The eBPF Network Guillotine: We run a lightweight Rust daemon locally that hooks into the Linux kernel via eBPF. We don’t poll logs. We intercept the system calls and network sockets. If an agent violates its policy.yaml (e.g., trying to access a restricted subnet or execute rm -rf), we drop the veth packet in microseconds before it leaves the machine.

Silicon-Bound Identity (TPM): We bind the agent’s cryptographic identity directly to the physical hardware (TPM 2.0 on motherboards or AWS Nitro Enclaves). You cannot phish or copy-paste silicon.

Zero Latency (IBEV): Security tools that require a cloud round-trip kill agent performance. We built "Intent-Bound Ephemeral Visas" (IBEV) using gRPC ring buffers. The agent mints its permission visa locally and offline. If our cloud goes down, your agents keep running safely on the cached policy.

Raypher gives you a local dashboard to track exactly what your agents are doing and hard-caps their OpenAI API spend so a rogue loop doesn't bankrupt you.

I’d love to hear your thoughts on our eBPF architecture, how we are handling the TPM attestation, or just the state of AI agent security in general. I’ll be in the comments all day to answer technical questions!
by kvemkon | 2026-02-21 18:28:41+00:00
> add more channels

and unfortunately increase latency even more with registered DIMMs. Comparing bandwidth increase (50 GB/s) to the stagnated latency (~80..120 ns total, less than ~0.1 GB/s) over last decades, I'm wondering, whether one still can call today's RAM random memory (though sure it can be accessed randomly). Similar to hard disk drives. Up to 300 MB/s sequentially but only up to less than 1 MB/s 4KB random (read).
by ms_sv | 2026-02-21 18:28:59+00:00
Yes absolutely, I am looking for framework that will be included in the platform to be able to asses someone and determine those accurately skills to have them in the CV it is not easy and it is a challenge, overall those skills can make a teammate be valued among others.

The AI interviews part is becoming very common as well, this is the issue I wanna solve since it is very easy to fake it while remote.

I have another question, have you ever faced with getting a perfect candidate during interviews this person passes fully it is great, everything matches but then after 1 or 2 months the just completely flip and are not the candidate(now employee) what you tought and everyone else tought they are?
by selkin | 2026-02-21 18:28:59+00:00
Every statement in the above comment is wrong:

People born in the 90s wouldn’t have a chance to be old enough to belong to any group other than a preschool before the collapse of the Soviet and Soviet aligned regimes.

For those who were adults before 1990, while they may have been party members for reasons unrelated to political ideology, it wasn’t as common: in the late 80s, only ~10% of adults in Warsaw pact countries were communist party members. Far from “everyone”.

And even if you check that in the DS-160 visa application form, you are allowed to add an explanation. Consular visa officers are very well familiar with the political situation at the countries they are stationed in, and can grant visa even if the box is checked.
Show HN: TeamContext – Git-native shared context for vibe coding teams
by hzhou9 | 2026-02-21 18:29:02+00:00
I built TeamContext because team vibe coding has a context problem: each person + each LLM tool ends up with a different mental model of the same project. And I also believe that project documents for LLM would be at least as important as those for human.

TeamContext uses OpenViking and treats context like code:
- versioned in Git
- reviewable in PRs
- synced across members with git pull + tc sync
- usable across tools (Codex, Claude Code, etc.)

Would love your trials and feedbacks!

Repo: https://github.com/hzhou9/TeamContext
by antonvs | 2026-02-21 18:29:28+00:00
Also I loved this little discovery, from 1300:

> "Þe euele man louȝ, whan that he sawe my peine, and it was a crueel louȝter, wiþouten merci or pitee as of a man þat haþ no rewþe in his herte."

"The evil man laughed, when he saw my pain, and it was a cruel laughter, without mercy or pity as of a man that has no rewthe in his heart."

In other words, a rewthe-less man.

We've retained the word "ruthless" but no longer use the word "ruth", "a feeling of pity, distress, or grief."
by binaryturtle | 2026-02-21 18:30:20+00:00
I once made one photo out of my window every day for a year. "Project 266 days", I called it. That year (2016) had a few very foggy days, so all I was able to shot on those days was white. :D

I guess writing a short journal everyday is a bit similar like this. Just forcing yourself into a routine of some sort. Just to get one thing surely checked off per day.
by m132 | 2026-02-21 18:30:25+00:00
> not much to do with "App Sandboxes" which is a distinct macOS feature

The App Sandbox is literally Seatbelt + Cocoa "containers". secinitd translates App Sandbox entitlements into a Seatbelt profile and that is then transferred back to your process via XPC and applied by an libsystem_secinit initializer early in the process initialization, shortly before main(). This is why App Sandbox programs will crash with `forbidden-sandbox-reinit` in libsystem_secinit if you run them under sandbox-exec. macOS does no OS-level virtualization.
by ErroneousBosh | 2026-02-21 18:30:42+00:00
In the mid-2000s the company I worked for in Glasgow fitting microwave links to buildings (broadband wasn't readily available outside cable TV aerials) had a pile of ODUs that had been shot off roofs.

Mostly from one particularly benighted area, Easterhouse. If you extensively gentrified Easterhouse back then, it would look like Detroit in the 90s. It's improved a little since then.
by dang | 2026-02-21 18:31:04+00:00
All: quite a few comments in this thread (and another one we merged hither - https://news.ycombinator.com/item?id=47099160) have contained personal attacks. Hopefully most of them are [flagged] and/or [dead] now.

On HN, please do not cross into personal attack no matter how strongly you feel about someone or disagree with them. It's destructive of what the site is for, and we moderate and/or ban accounts that do it.

If you haven't recently, please review https://news.ycombinator.com/newsguidelines.html and make sure that you're using the site as intended when posting here.
by bdash | 2026-02-21 18:31:09+00:00
See https://bdash.net.nz/posts/sandboxing-on-macos/ for more details on how sandboxing works on macOS. It touches on how the SBPL Scheme source code is interpreted in userspace to build a bytcode representation of the policy, and the kernel MAC hooks that the Sandbox kernel extension uses for enforcing sandbox policies.
by JasonADrury | 2026-02-21 18:31:27+00:00
The finding is:

> past-year cannabis use was associated with a significantly increased risk of incident psychotic, bipolar, depressive, and anxiety disorders by age 26 years

They claim correlation, not causation.

They also address this subject in the discussion:

>Existing research suggests that the relationship between adolescent cannabis use and psychiatric disorders is complex and bidirectional. Adolescents with mental health symptoms or diagnoses may use cannabis as a way to mitigate distress, cannabis may contribute to mental health symptoms and diagnoses through neurobiological changes, and there may be shared social and biological risk factors that contribute to both mental health symptoms and cannabis use.

>Despite potential use of cannabis to self-medicate mental health symptoms, ongoing use of cannabis is associated with worsening mood symptoms29 and poorer adherence to medication treatment and psychotherapy.

>While it is not possible to definitively determine causality, this study had a strong retrospective cohort design. The temporal order of cannabis use preceded incident psychiatric disorder diagnoses by a mean of 1.7 to 2.3 years, supporting the possibility of a contributory role.

>The findings remained significant even after adjusting for a history of psychiatric disorders and other time-varying substance use and excluding adolescents with any history of a psychiatric disorder in sensitivity analyses, indicating unique associations between adolescent cannabis use and psychiatric disorders that go beyond broader adolescent psychopathology or substance use.

>This was a conservative approach, as other psychiatric disorders might be mediators or confounders depending on the timing and the underlying pathways. Furthermore, E-values indicated that only a strong unmeasured confounder with HRs of 3.79 to 1.79 could explain the associations, suggesting that adolescent cannabis use may be an independent risk factor.

>However, reverse causation cannot be ruled out, as some individuals may begin to use cannabis to self-medicate prodromal symptoms of psychiatric disorders even before a diagnosis is made. Future research with more nuanced measurement of cannabis use, including frequency, mode of use, and product strength, alongside regular screening and assessment for psychiatric disorder symptoms and diagnosis would help to further elucidate the timing and mechanisms underlying these associations.
by jqpabc123 | 2026-02-21 18:31:36+00:00
Who thought that putting a serial bankruptcy artist in charge of the nation's economy was a good idea?

The whole premise of tariffs leading to US manufacturing is a blatant lie. Raising the cost of raw materials (copper, aluminum, steel, wood, electroncs) while ridding ourselves of cheap labor isn't going to encourage manufacturing in the USA. It does the opposite.

And the stats show this:

https://www.jec.senate.gov/public/index.cfm/democrats/2026/2...

Aside from raw materials, manufacturing in the 21st century will be about two things --- robotics and low cost energy.

Most high pay manufacturing jobs are gone like a '59 Cadillac, they ain't never coming back. Trump is pulling yet another con by claiming otherwise.
by ericmay | 2026-02-21 18:32:03+00:00
Connecting with recruiters is mostly a waste of time, and generally anyone can just fake being a recruiter. Once someone has a connection with you they can see your extended network, they know where you work, they find out all information you have shared with on your profile, &c. The recruiter may be using you to connect with someone else. You also start to consume their content since you are connected. Better to let them follow you and then when it's time to reach out to offer you a job/send an in-mail.

Generally speaking, unless you operate at an elite level or at an elite institution, you're not getting a ton of worthwhile cold intros from recruiters.
by qup | 2026-02-21 18:32:27+00:00
I don't have one yet, but I would just give it access to function calling for things like communication.

Then I can surveil and route the messages at my own discretion.

If I gave it access to email my mom (I did this with an assistant I built after chatgpt launch, actually), I would actually be giving it access to a function I wrote that results in an email.

The function can handle the data anyway it pleases, like for instance stripping HTML
by seba_dos1 | 2026-02-21 18:32:49+00:00
I lived through these times and what you describe is some alternative timeline to mine. Phones that could last several days of active use on a single charge had replaceable batteries with similar lifespan to those today and I don't recall anyone around me owning spare batteries to swap on-the-go. In fact, my Nokia 3410 only got its battery replaced in 2018 when I dug it out of the drawer (and I wasn't even its first owner in the family back in the day). Today's smartphones need battery replacement much sooner as they draw and charge with much more current and burn through the cycles faster.
by IcarusAgent | 2026-02-21 18:34:17+00:00
Semantic API matches natural language queries to real API endpoints. Ask "send an SMS" and get back Twilio's endpoint, parameters, auth docs, and code snippets. ~100ms.

We index 163 API providers with 771 capabilities.

Just published a LangChain integration: pip install semanticapi-langchain

Also available as an MCP server (pip install semanticapi-mcp) and CLI (pip install semanticapi-cli).

For autonomous AI agents, we support x402 micropayments — $0.01/query in USDC, no API keys needed. Regular users get a free tier of 100 queries/month.

Interactive demo on the homepage, no signup needed.
by magicalist | 2026-02-21 18:34:47+00:00
> Some people cannot resist clicking on things that make them angry, though. These websites continue serving up more of what you click on.

"We're going to keep putting crap in front of you until we find something you click on. And even if you take a breath, don't reply and close it, we now know we have you and we'll keep showing that type of thing to you. Also, even though we're not going to tell you we're doing this, we and our power users are going to blame you for doing it to yourself. lol."
by notepad0x90 | 2026-02-21 18:35:27+00:00
Love this, I wish there were more and broader categories of sites one could block. You can always temporarily allow sites.

In the enterprise space, there are URL reputation providers. They categorize sites based on different criteria, and network administrators block or warn users based on that information.

In my humble opinion, there needs to be a crowdsourced fund (or ideally governments would take this seriously and fund it on behalf of people) for enabling technologies that allow user friendly internet experiences. Browsers, frameworks, vpn providers, site-reputation, deceptive content, dns-providers, email providers,trusted certificate authorities(no,google and microsoft shouldn't get to police that), nation-state or corporate affiliations,etc... You shouldn't need to setup a pi-hole.

Imagine a $1B/yr non-profit fund for this stuff. if 10M people paid $10/mo that's $1.2B/yr. Proton has $97M revenue in 2024 and 100M total accounts (I don't know how many pay but the spread is roughly $1/user). I really think now is the time to talk about this when so many are wary of US tech giants and looking for other opportunities.
by bityard | 2026-02-21 18:35:32+00:00
It's easy to pass judgement on a decision like that when so far removed from the context where/when it took place.

It's likely that answering yes to that question meant an instant rejection for the clearance AND summer job. The FBI was probably not inclined to spend money looking into such an obviously trivial matter just so some kid could get some work experience. "Sorry, try the McDonald's down the street."

That security officer did the author an incredibly big favor.
by ErroneousBosh | 2026-02-21 18:36:08+00:00
About ten years ago a company started fitting CCTV cameras to the illuminated advertising hoardings in bus stops, initially to discourage vandalism and then using frankly fucking creepy targetted advertising that used fairly crude machine vision stuff to guess the demographic of people at the stop.

The advertiser's operators could actually look through the camera and shout through hidden speakers at people vandalising their adverts, usually by writing on the specially-coated toughened vandal-resistant glass that ink or paint didn't stick to.

The local wee wannabe gangsters took to filling bingo markers with the stuff they use to etch frosted glass, and tagging the displays with that.
by socalgal2 | 2026-02-21 18:36:10+00:00
It does make me wonder if that system is a net positive or a net negative. For me, I go, see suggested stuff which is all trash, and never want to engage with FB ever again. I stay only because of friends but only check once a week or so. Where as, if they got rid of all suggested stuff and instead it was 100% friends and family and every 5 posts, an ad. I'd engage with it far more often.
by Daegalus | 2026-02-21 18:36:17+00:00
It looks like DNS is just shared CloudDNS, and email is limited. From the FAQ:

How reliable is dot.bs DNS hosting?

dot.bs is backed by ClouDNS. ClouDNS serves over two billion DNS queries per day, so I can confidently say your DNS is in good hands.

Do I really get free email?

Yes! In order to make this possible, there are some limitations.
A maximum of 5 email accounts per domain (unlimited domains)
A maximum of 5 outgoing emails per hour, per account (to prevent spammers)
A maximum of 75 MB storage per account
If these limits are a problem for you, please reach out and we can figure something out.
by ragall | 2026-02-21 18:37:20+00:00
> It is, in most cases.

AG is required for going public, however it's not a legal requirement that only public companies do so. You're mistaking cause and effect.

> Tell me about a startup that started off as an Aktiengesellschaft as opposed to a GmbH? Why would you even want to put 50k in instead of 25k, deal with all the governance overhead and reporting duties?

This is one of the big problems with German companies, and the reason why even German founders will start directly as a Delaware company instead. The capital requirements are $100 and reporting very minimal.

> It's not to the claim that you cannot found a company in Germany without putting down a significant amount of money and a notary.

I claimed that a non-AG makes it uninvestable, not what you're saying here (which is the product of your imagination). A GbmH has strict requirements that adding a new owner (an investor) must be done in front of a notary, and if your angel investors are all over Europe or the world, you'll have to tell them that they either they have to fly to Germany or find a German lawyer and give the lawyer a PoA. That's way too much hassle for most people, and the result is you'll hear a polite "no thanks, I might reconsider if you move your company to US/UK/Singapore". At least investing in an AG can be done without notarization.

A non-AG in Germany will inherently chase away almost all international investors. If you're lucky enough to find an international investor that's really interested, the most likely thing you'll be told is to either switch to AG or, preferably, re-incorporate in US/UK/Singapore and only then will your company be investable.

> You just moved the goalposts.

No, that's your misunderstanding. I mentioned a non-AG being unviable for international investors because they're the only ones worth mentioning. Local ones in Germany are mostly irrelevant for various reasons: they're either too ignorant of a specific market segment, too stingy, want too much control, only invest in later stages but not pre-seed, etc... You have to be really desperate to look for German investors, and that's true in most EU countries. The good VCs tend to be based in UK, Sweden or Estonia, with few exceptions. Angels are everywhere, but mostly outside Germany and they just won't bother with notarization for 20k EUR.
by thomassmith65 | 2026-02-21 18:38:05+00:00
Something I look forward to, though it could take a few years, is for someone to train a family of state-of-the-art chatbots where each uses a corpus with a cut off date of 1950... 1900... 1850.. and so on. How fascinating it would be to see what words and concepts it would and would not understand. That would be as close to time travel as a person could get.
by mh- | 2026-02-21 18:38:17+00:00
Update Claude, turn on all of the MCPs you've been using, start a new Claude session from scratch in an empty folder.

Run /context.

Observe that your MCPs are killing a sizable chunk of the usable context window.

The utility here is that it'll break down exactly which MCPs are consuming how many tokens, just in tool descriptions. Then you can decide if that's worth it to you, even if you continue using Codex or OpenCode or etc.
by Dagger2 | 2026-02-21 18:38:24+00:00
Except not really. You can't assign v6 addresses to people, because IPs are picked ephemerally by devices based on the IP range of the network they're attached to.

You need a separate protocol (like HIP or LISP) on top to map the identifier to its current network location, and at that point you're no longer limited by the size of the underlying address space.
by g8oz | 2026-02-21 18:40:10+00:00
It seems to me that if you let Persona verify your identity you're essentially providing data enrichment for the US government. In exchange for what? A blue tick from a feeder platform like LinkedIn, Reddit or Discord? No thanks.

On the other hand it can be hard to escape if it's for something that actually matters. Coursera is a customer. You might want your course achievements authenticated. The Canada Media Fund arranges monies for Canadian creators when their work lines up with various government sponsored DEI incentives. If you're in this world you will surely use Persona as required by them. Maybe you're applying for a trading account with Wealthsimple and have to have your ID verified. Or you want to rent a Lime Scooter and have to use them as part of the age verification process.

KYC platforms have a place. But we need legal guarantees around the use of our data. And places like Canada and Europe that are having discussions about digital sovereignty need to prioritize the creation of local alternatives.
by m132 | 2026-02-21 18:40:12+00:00
> I'm experimenting with implementing such a sandbox that works cross-system (so no kernel-level namespace primitives) and the amount necessary for late-bound policy injection, if you want user comfort, on top of policy design and synthetic environment presented to the program is hair-pulling.

Curious, if this is cross-platform, is your design based on overriding the libc procedures, or otherwise injecting libraries into the process?

Also obligatory https://xkcd.com/2044/
by moron4hire | 2026-02-21 18:40:34+00:00
I have a somewhat similar story involving the death of an extremely elderly neighbor by an accident on his farm,
and the suspicion by the state police that I at 12 years old had murdered him, based solely on someone saying they thought they saw me messing with his mailbox from a car that was similar to the one parked in our driveway. The mailbox which stood directly next to ours at the end of an easily walkable driveway. So yes, Mr. SF-86, I had once been investigated for a felony. Oh, you're only supposed to tell the truth if the truth will help the government catch to a bad guy? Very impressive system, sir. Top notch.