MurphyA/hacker-news huggingface dataset:
by motbus3 | 2026-02-18 20:30:32+00:00
Edit: This ended up being such a big text. Sorry.

I guess I agree but I want to add to your point is that, this tech is inexpensive.

And unfortunately, not in the sense where it is related to the real value of a product or need for it, but as a market condition.

But, to me, it seems that it will be more expensive anyway.

I see these possibilities:
1. Few companies own all the technology. They cut the men in the middle and they have all kinds of super apps and will try to force into that ecosystem

2. Or, they succeeded in the substitution, they keep the man in the middle but they control whom will have access and how much it is going to be charged. The goal in this case will be to be more expensive to kickstart an engineering team than using the product and ofc, their goal will be to reach that threshold.

3. They completely fail, these businesses plateau'ed and they can't make it a better condition to subvert the current balance and take the market. This could happen if a big financial risk materialize or if they get stuck without big advancements for a long time and investors starts to demand their money back.

I think we are going this 3rd route. We are seeing early signals of nonsense marketing strategy selling things that are not there yet. We see all of them silencing ethics and transparency teams.
The truth is that they started to stack models together and sell as one thing which is much different from what they sold just a year and a half ago.
I am not saying this couldn't be because this is really the best model, but because they couldn't scale it up even more now, even 18 months after the previous gen of giant model releases.

The truth is that they probably need to start capitalising now because the crisis they are causing themselves might hurt them bad.

We saw this decline or every bubble popping. They need to sell it too much so they can shift the risk from being on top of their money to be on top of someone else's money, and this potential is resold multiple times as investors realise the improvements are not coming.
Until there is only the speculators dealing with this sorta of business, which will ultimately make those companies to take unpopular stupid decisions like it happened with bitcoin, super hero movies, NFT and maybe much more if I could think about it.
by ollybrinkman | 2026-02-18 20:30:36+00:00
The MCP ecosystem crystallizes this problem perfectly. When you connect an agent to an MCP server, you're not granting scopes — you're granting capabilities. Most MCP server implementations don't differentiate between 'list' and 'delete' at the authorization layer; they're a single connection with all tools available.

This is a design collision: OAuth was built around the assumption that a human reviews scopes once and an app uses them predictably. Agents break both assumptions — they operate continuously and make decisions non-deterministically.

The approach I've found most promising: treat each tool invocation as a separate authorization event with its own budget constraints and resource limits, rather than relying on a session-level grant. It's more overhead, but it changes the threat model substantially — 'this agent can make 100 read-only API calls per hour' is a much safer primitive than 'this agent has read access.'
by mikkupikku | 2026-02-18 20:30:56+00:00
> If you're the type who likes LLM coding because it now enables you to do lots of projects you've had in your mind for years, you're also likely the sort of person who'll like OpenClaw.

I'm definitely the former, but I just can't see a compelling use for the latter. Besides manage my calendar or automatically responding to my emails, what does OpenClaw get me that claude code doesn't? The premise appeals to me on an aesthetic level, OpenClaw is certainly provocative, but I don't see myself using it.
by storus | 2026-02-18 20:30:58+00:00
The point is that LLMs can only replicate what existed somewhere, they aren't able to invent new things. Once humans lose their edge, there won't be any AI-driven progress, just a remix of existing stuff. That was the hollowing out I mentioned. Obviously, even these days there is tech that looks like magic (EUV lito etc.) but there are at least some people that understand how it all works.
by 8cvor6j844qw_d6 | 2026-02-18 20:32:07+00:00
Unless you're proposing never touching OpenClaw, how will you set it up to your satisfaction in terms of security?

> stealing your API keys is the last thing I'd worry about

I don't know, I very much prefer the API credits not being burned needlessly.

Now that I think of it, is there ever a case where an Anthrophic account is banned due to the related API keys being misused?
by BeetleB | 2026-02-18 20:32:13+00:00
You don't need to give OpenClaw access to personal stuff. Yes, people are letting it read email. Risky, but I understand. But lots of others are just using it to build stuff. No need to give it access to your personal information.

Say you want a bot to go through all the HN front page stories, and summarize each one as a paragraph, and message you with that once a day during lunch time.

And you don't want to write a single line of code. You just tell the AI to set it all up.

No personal information leaked.
by alexgarden | 2026-02-18 20:32:26+00:00
You're absolutely right that AuthZ is the foundation — scoped permissions and short-lived tokens are table stakes. We're not trying to replace that.

AIP operates one layer deeper. It reads the agent's reasoning trace and compares it to the behavioral contract. So when an agent considers calling the payments API — even though your AuthZ layer would block it — AIP flags that as a boundary violation before the call is ever attempted.

Why that matters: an agent that keeps trying doors it can't open is telling you something. The AuthZ layer blocks each attempt, but nothing in that system flags the pattern. AIP catches the drift and gives you a signal to act on — revoke the deployment, retrain, or escalate.

Think of it as: AuthZ is the locked door. AIP knows someone keeps trying the handle.

The Alignment Card maps naturally to AuthZ policy — permitted actions become scopes, forbidden actions become deny rules, escalation triggers become approval workflows. They're complementary layers, not competing ones.
by enraged_camel | 2026-02-18 20:32:32+00:00
>> Security vulnerabilities are bad but the blast radius is limited to the person who gets pwnd

No? Via prompt injection an attacker can gain access to the entire machine, which can have things like credentials to company systems (e.g. env variables). They can also learn private details about the victim’s friends and family and use those as part of a wider phishing campaign. There are dozens of similar scenarios where the blast radius reaches well beyond the victim.
by SpicyLemonZest | 2026-02-18 20:32:35+00:00
Or we will ban OpenClaw, as many jurisdictions ban fireworks, and start filing CFAA cases against people whose moltbots misbehave. I'm not happy about that option, I remember Aaron Swartz, but it's not acceptable for an industry to declare that they provide a useful service so they're not going to self-regulate.
by MarsIronPI | 2026-02-18 20:32:35+00:00
True. By the time I upgraded from my X200 (fantastic machine, noticeably outdated), the lack of software support for hardware decoding H264 was noticeable. Also being stuck with OpenGL 2.1 isn't the best either.

I don't know what I'll do if and when my X230 stops being sufficient. If I could buy an Apple motherboard in an X200 chassis I'd do it in a heartbeat.
by dbdr | 2026-02-18 20:32:52+00:00
One difference is that it's an incredibly hard problem to check whether your C code is memory safe since every single line of your code is a risk. On the other hand, it's easy to at least assess where your supply vulnerabilities lie (read Cargo.toml), and you can enforce your policy of choice (e.g. whitelist a few specific dependencies only, vendor them, etc).
by networked | 2026-02-18 20:33:15+00:00
I don't think there is a client that will let me connect to 9front from Android, is there?

I see what you mean in this and the other comment. With 9front, you rely less on issuing commands to remote machines because you can directly access their resources. It's worth keeping in mind when comparing Plan 9 and Unix from a Unix user's perspective.

Being able to pick large fonts on the server isn't the same as leaving the fonts up to the client. When I use terminal emulators, SSH, and tmux, I can switch between different clients with different resolution, pixel density, and screen orientation and have the text display acceptably on each (minus text reflow for history, which is an issue).

> I consider the Sam regular expresions far more powerful than the vi keys themselves.

I agree, structural regular expressions seem like a better version of vi commands. It was reasonably easy to make some complex edits in https://github.com/martanne/vis when I tried it, and it felt like I'd only scratched the surface. I could see myself still using vis if it had tabs like Vim. (Tabs are a non-goal for vis.)
by aadarshkumaredu | 2026-02-18 20:33:21+00:00
Fair enough. If the substance reads generic, that’s on me.

The intent wasn’t to produce volume, it was to frame the economic layer of the discussion. Whether written with or without AI assistance, the argument still stands or falls on its logic.

What’s more interesting to me is how quickly “AI slop” becomes shorthand for structured reasoning. As these tools become common, separating low-effort output from thoughtful analysis is going to matter more, not less.

Ironically, this ties back to the original question about bubbles. If AI-generated content becomes abundant and cheap, signal will only survive where there’s clear economic or technical grounding behind it.

I’m spending a lot of time thinking about that boundary right now, especially in developer-facing systems where quality and constraint adherence actually matter. The difference between fluff and production-grade behavior is becoming very measurable.

Curious how others here distinguish between shallow AI-assisted output and work that’s actually grounded in systems thinking.
Show HN: Data Processing Recipes for Edge Computing and AI Agents
by TheIronYuppie | 2026-02-18 20:33:29+00:00
Hey HN,

I'm David, CEO of Expanso. Today we're launching Expanso Skills — a catalog of 200+ production-ready data processing pipeline recipes for AI agents.

The problem: Every team rebuilds the same data processing primitives from scratch. PII scrubbing, log aggregation, GDPR routing, schema enforcement, dead letter queues. Each time, slightly broken. Each team, from zero.

What we built: Reusable, composable pipeline recipes that run on Expanso Edge (our open-source distributed compute layer). Think npm packages, but for data processing.

A few examples:
- `remove-pii` — Strips sensitive fields before data reaches your AI agent
- `parse-logs` — 1,000 raw log lines → 1 structured JSON digest (99.9% reduction)
- `cross-border-gdpr` — Routes data based on jurisdiction automatically
- `dead-letter-queue` — Capture and retry failed pipeline messages
- `fan-out-kafka` / `fan-out-s3` — Distribute processed data to multiple destinations
- `enforce-schema` — Validate and coerce incoming data before it hits downstream services

Install and run in under 2 minutes:
expanso skill install remove-pii
expanso skill run remove-pii --input ./customer-data.csv

Why this matters for AI agents: Most agent frameworks assume agents can query whatever they want. That's a security and compliance disaster. Skills enforce least-privilege at the infrastructure level — agents never see raw data, only filtered, purpose-fit outputs.

Product Hunt: https://www.producthunt.com/products/expanso-skills?utm_sour...

Happy to answer anything — architecture, specific skill implementations, edge deployment. Ask away.
by dylan604 | 2026-02-18 20:33:31+00:00
That's the problem with address type of systems is that they expect the object at that location to always be at that location. How do you encode the orbital speed, radius of orbit for not just the object, but also the object it is orbiting will need the same info as it is also in motion, then that object's parent galaxy's motion. Ugh, now I need a nap to calm down a bit.
by pjmlp | 2026-02-18 20:33:56+00:00
You are missing the part that PowerShell has exactly a Xerox PARC like experience, first with PowerShell Integrated Scripting Environment, nowadays the same experience is available in VSCode.

Replicating the experience of using something like Smalltalk transcript window.

Of course Windows has SSH support, it needs to interoperate with UNIX, given that UNIX won the server room.

No need for SSH to talk with Windows Core/Nano, it can be done via Web GUI administration, or PowerShell remoting.
by rbanffy | 2026-02-18 20:34:10+00:00
I’m concerned not everyone have their base colors set sensibly - as in “there’s no guarantee the base garish RGB green is green on this machine”. Maybe the right thing would be to put the color closest to a base color on the corresponding corner of the RGB cube, but that’s also not ideal - I have had terminal palettes that were all green or all orange/red, or the green/yellow of EL displays.

Maybe applying the saturation of the base set across all the generated palette would also work.
by krapp | 2026-02-18 20:34:14+00:00
If you believe the submitter should understand every change they're proposing, then you should be against AI code. The entire premise behind AI coding is to not have to understand, or even care, about the code you generate.

It would take less time for a competent developer to write any non-trivial PR themselves than it would for a vibe coder to have an AI generate it then learn it well enough (and test it well enough, assuming they aren't also testing with AI which you probably are) to be able to submit it.

AI code is the reason Godot and every other open source project is going to have to stop public PRs and only allow them from a team of vetted submitters. FOSS is going to have to go proprietary just to survive.
by aadarshkumaredu | 2026-02-18 20:34:29+00:00
That’s fair. If formatting alone is enough to trigger dismissal, there’s not much I can do about that.

Bullet points aren’t an AI signature, they’re just a way to compress structure. If the argument is wrong, I’m happy to debate it. If it’s right, the formatting shouldn’t matter.

The economics of subsidized infrastructure vs. sustainable pricing is the core claim. That’s the part worth engaging with.
Show HN: Sniptail – Turn Slack into a team interface for AI coding agents
by Justkog | 2026-02-18 20:34:38+00:00
Hi HN,

I built Sniptail — an open-source bot that lets you run AI coding agents (Codex / Copilot CLI) against real repos directly from Slack or Discord.

Instead of AI living only inside one developer’s IDE, Sniptail turns it into a team-facing layer:

- Mention the bot and ask how a feature works
- Run commands to ask, plan or implement collaboratively
- Generate repo reports
- Open lightweight PRs

All against explicitly approved repos.

Flow:

Slack/Discord → job queued in Redis → worker clones repo → agent runs → report or PR link posted back in-thread.

It’s self-hosted, repo-scoped, and modular (chat channel, agent, git provider are separate layers).

Not trying to replace Copilot/Codex/CC, the worker runs it on your behalf.

Repo:

https://github.com/Justkog/sniptail

If the project gains traction, the idea is to support:

- more agents (Claude Code, Open Code, …)
- more channels (Telegram, Microsoft Teams, …)
- more git services (Bitbucket, Azure Repos, …)

Feel free to try it, let me know if you find it actually useful!

Happy to go deep on architecture if helpful.
by tasuki | 2026-02-18 20:34:47+00:00
> The way it's supposed to work is you don't touch the terminal colors but instead configure the program to use different colors.

That makes sense, but... seems infeasible in practice? "The program"? I tell you what program I need to configure: all of them! Ideally even the programs I'm not even using yet.

I think I'll continue doing it my wrong way then: redefining the meanings to mean less/more contrasty. That allows me to effortlessly switch the terminal between light[0] and dark[1] backgrounds. I've done worse things: I also hijacked a part of the 256-colors-cube for my own purposes...

[0]: https://github.com/tasuki/dotrc/blob/master/.config/kitty/so...

[1]: https://github.com/tasuki/dotrc/blob/master/.config/kitty/so...
Ask HN: Why do so many people dislike the Opera browser?
by tavro | 2026-02-18 20:34:55+00:00
i have noticed that Opera tends to get a surprisingly negative reaction in technical communities. but i have not yet seen a clear and technically grounded explanation that justifies the level of dislike. from what i can tell, common criticisms seems to be that the company was acquired by a Chinese consortium or a questions about privacy.

what are your strongest technically accurate arguments against using Opera in 2026?
by mmcclure | 2026-02-18 20:34:59+00:00
Very cool! I've been using Termius for a while. Overall positive, but my one complaint is that the interactions can be pretty tedious using it with TUIs like Claude Code. I like the gesture-based movement, excited to try that in practice.

I use Tailscale SSH, so one very small bit of feedback is that it took me a second to realize I just needed to put a dummy password in to actually get to the connection.
by lambda | 2026-02-18 20:35:16+00:00
I've literally just gotten Minimax M2.5 set up, the only test I've done is the "car wash" test that has been popular recently: https://mastodon.world/@knowmadd/116072773118828295

Minimax passed this test, which even some SOTA models don't pass. But I haven't tried any agentic coding yet.

I wasn't able to allocate the full context length for Minimax with my current setup, I'm going to try quantizing the KV cache to see if I can fit the full context length into the RAM I've allocated to the GPU. Even at a 3 bit quant MiniMax is pretty heavy. Need to find a big enough context window, otherwise it'll be less useful for agentic coding. With Qwen3 Coder Next, I can use the full context window.

Yeah, I've also seen the occasional tool call looping in Qwen3 Coder Next, that seems to be an easy failure mode for that model to hit.
by hnuser123456 | 2026-02-18 20:35:40+00:00
And recent DESI data suggests that dark energy is not constant and the universe will experience a big crunch in a little more than double its current age, for a total lifespan of 33 billion years, no need to get wild with the orders of magnitude on years into the future. The infinite expansion to heat death over 10^100 years is looking less likely, 10^11 years should be plenty.

https://www.sciencedaily.com/releases/2026/02/260215225537.h...
by BeetleB | 2026-02-18 20:36:14+00:00
The article doesn't really list any cool things people are using it for.

> "Forget bots messing with Github and posting to social media." Why should we forget that?

Go back 20 years, and if HN existed in those days, it will be full of "Forget that peer to peer is used for piracy. Focus on the positive uses."

The web, and pretty much every communication channel in existence magnifies a lot of illegal activity (child abuse, etc). Should we singularly focus on those?
Show HN: AsdPrompt – Vimium-style keyboard navigation for AI chat responses
by contrary2belief | 2026-02-18 20:37:26+00:00
I use Claude everyday (no joke) and kept getting annoyed by the same thing: selecting text from responses with the mouse. Overshoot, re-select, copy, click input, paste. Especially bad in long conversations where you want to reference something from 30 turns ago.
asdPrompt is a Chrome extension that adds hint-based navigation (like Vimium) to AI chat interfaces. Cmd+Shift+S activates the overlay, hint labels appear next to every text block. Type a letter to select a block, then keep typing to drill down: block → sentence → word. Enter copies, or you can press an action key (e, d, x) to inject a follow-up prompt ("elaborate on [selection]") directly into the chat input.

Works on claude.ai, chatgpt.com, and gemini.google.com. Adapts to light/dark themes. Free. Built the initial MVP in 2 days using Claude Code — the adapter architecture, NLP segmentation pipeline, and Playwright test harness would have taken a month without it.

Tech details for the curious: site-specific DOM parsers behind an adapter interface, text segmentation via compromise.js with regex fallbacks for technical content (paths, camelCase break NLP libraries), bounding rectangles calculated via Range API + TreeWalker, overlay isolated in Shadow DOM. Tested with Playwright visual regression.

The landing page has an interactive tutorial where you can try the full drill-down mechanic without installing. Happy to talk about the implementation.
by kibwen | 2026-02-18 20:37:31+00:00
> both of these are not the case in practice though

No, people routinely write Rust with no third-party dependencies, and yet people do not routinely write C code that is memory-safe. Your threat model needs re-evaluating. Also keep in mind that the most common dependencies (rand, serde, regex, etc) are literally provided by the Rust project itself, and are no more susceptible to supply chain attacks than the compiler.
by jacquesm | 2026-02-18 20:37:50+00:00
HN wants Firefox but with better stewardship and fewer misdirected funds.

Mozilla - wrongly - believes that the majority of FF users believe in Mozilla's hobby projects rather than that they care about their browser.

That's why - as far as I know - to this day it is impossible to directly fund Firefox. They'd rather take money from google than to be focusing on the one thing that matters.
by a123b456c | 2026-02-18 20:37:52+00:00
It's also possible that users could misuse the reporting system, in order to get other users' accounts suspended.

Requiring N distinct reports of a suspension reason would seem to reduce misuses of the reporting system.

The 17-reports threshold might have been found to balance type-1 and type-2 errors, as account removals are costly actions when made in error or as a result of reporting-system misuse.
by UntitledNo4 | 2026-02-18 20:38:24+00:00
I tried this with a project I’m currently working on with Claude to see how it compares to what I’m already doing.

I think it’s interesting and asked good questions, but that it would be more suitable for non-developers who really don’t know where to start. For me, it missed some of the aspects that that I was able to spec myself as an experienced developer.

I’m not going to use it myself, but I wish you the best of luck.