MurphyA/hacker-news huggingface dataset:
by SpicyLemonZest | 2026-02-25 16:30:19+00:00
If the EU announced that non-EU entities aren't subject to GDPR, I think that would substantially defuse and perhaps entirely eliminate the conflict. Their current guidance is precisely the opposite (https://gdpr.eu/what-is-gdpr/): "the GDPR applies to you even if you’re not in the EU". They even have a details page to make sure it's 100% clear (https://gdpr.eu/companies-outside-of-europe/): if you're a Colorado company with more than 250 employees, selling mainly to other Colorado businesses, the GDPR applies to you in full and the EU claims the authority to levy fines against you for violations.
by DiogenesKynikos | 2026-02-25 16:31:23+00:00
My cousin was a Holocaust survivor, and he was utterly disgusted with what Israel was doing to Gaza - all the way back in 2014, before Israel completely leveled it and killed more than 20,000 children.

You keep comparing the Palestinians to the Nazis, which is utterly shameless, especially given that you support the side that has committed mass murder of tens of thousands of defenseless civilians and that holds millions of people under an apartheid regime.
GPT Bot Ignoring Robots.txt on my cloudflare worker
by white_viel | 2026-02-25 16:31:40+00:00
TLDR: GPT Bot is systematically accessing my private ubuntu mirror, ignoring the robots.txt

Today in the morning I woke up to the following message from Cloudflare about my quota usage on Cloudflare workers

>> Your account has reached 75% of its daily requests limit for Cloudflare Workers and/or Pages Functions

This is unusual as only have one worker on my Cloudflare account that proxies my apt repos for my personal PC to specific upstream services. As much as the domain is public, it is not posted anywhere and only used for my home PCs.

So i get the Cloudflare worker logs and see about 160k requests in the last 24 hours, up from barely 24(yes 24 in total) to various packaged via my proxy.

Extracted part of the logs is as below

>> {
>> "headers": {
>> "accept": "/",
>> "accept-encoding": "gzip, br",
>> "cf-connecting-ip": "74.7.227.53",
>> "cf-ipcountry": "US",
>> "cf-ray": "9d388b074b38d3be",
>> "cf-visitor": "{"scheme":"https"}",
>> "connection": "Keep-Alive",
>> "from": "gptbot(at)openai.com",
>> "host": "XXXXXXXXXXXXXXXXX.brotich.workers.dev",
>> "referer": "https://XXXXXXXXXXXXXXXXX.brotich.workers.dev/ubuntu/pool/universe/z/zephyr/",
>> "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)",
>> "x-forwarded-proto": "https",
>> "x-openai-host-hash": "103003167",
>> "x-real-ip": "74.7.227.53"
>> }
>> }

as you can see, the request is from GPTBot that collect training data.

Now the annoying bit:
- according to openapi, they respect robots.txt. I have this set up on my domain as follows

>>> # BEGIN Cloudflare Managed content
>>>
>>> User-agent: *
>>> Content-Signal: search=yes,ai-train=no
>>> Allow: /
>>>
>>> User-agent: Amazonbot
>>> Disallow: /
>>>
>>> User-agent: Applebot-Extended
>>> Disallow: /
>>>
>>> User-agent: Bytespider
>>> Disallow: /
>>>
>>> User-agent: CCBot
>>> Disallow: /
>>>
>>> User-agent: ClaudeBot
>>> Disallow: /
>>>
>>> User-agent: Google-Extended
>>> Disallow: /
>>>
>>> User-agent: GPTBot
>>> Disallow: /
>>>
>>> User-agent: meta-externalagent
>>> Disallow: /
>>>
>>> # END Cloudflare Managed Content

This is just a hobby project, and I have put safeguards on Cloudflare to prevent scarping by bot. there is nothing of value in there. it's just a proxy for my own use.

why say you respect robots.txt if you dont?
by Imustaskforhelp | 2026-02-25 16:32:26+00:00
https://tld-list.com/ Try looking at this website with cheapest renewal rate and removing second country TLD (so only Top level)

In my opinion, .de , .ovh , .uk or personally my country's .in (yes OVH has their own TLD that you can use)

.de is one of the more interesting domains to me personally even though I am not german.
Show HN: Live iOS 26.3 exploit detection (CVE-2026-20700) – Multi-region C2
by JackCity | 2026-02-25 16:32:29+00:00
Public release of *ZombieHunter*, a forensics tool detecting live exploitation of CVE‑2026‑20700 (dyld memory corruption) in iOS 26.3.
Analysis of sysdiagnose archives shows identical exploit shells showing different C2 endpoints:

US Device 1 → 83.116.114.97 (EU/US)
US Device 2 → 101.99.111.110 (CN)

The rogue dyld_shared_cache slice triggers overflow via malformed `mappings_count`, executes shellcode (BL #0x15cd), and applies an AMFI bypass (`DYLD_AMFI_FAKE`) enabling unsigned code persistence.
Apple PSIRT + CISA were notified; public disclosure follows.

Sample: https://drive.google.com/file/d/1rYNGtKBMb34FQT4zLExI51sdAYR...
SHA256 artifact: ac746508938646c0cfae3f1d33f15bae718efbc7f0972426c41555e02e6f9770

Usage: `python3 zombie_auditor.py sysdiagnose_xxx.tar.gz` (Needs capstone)

Reproducible PoC confirms CVE‑2026‑20700 bypass, AMFI neutralization, and live C2 connectivity in production iOS 26.3.
by crote | 2026-02-25 16:32:34+00:00
Sure, until their "smart filters" start considering GCP-hosted websites as pre-verified and small self-hosted websites as malicious. You know, like they have been doing with email?

Chrome is big enough that a website owner can't afford a false positive on their malware list, just like they can't afford to have all their email end up in spam for all Gmail users.

Due to their near-monopoly Google also has no incentive to avoid adding false positives to their blocklist - provided they don't accidentally block high-profile targets. And if a CxO is screaming over your shoulder that your website has been blocked, arguments about "false positives" aren't very compelling: they'll just demand you move off the "shitty basement provider" and switch to "proper hosting, like the Google Cloud"...
by lkjdsklf | 2026-02-25 16:33:07+00:00
tmux/screen is literally less work to use than this thing.

You need to learn to type less than a dozen total characters including the command.

Not to mention a lot of terminals automatically integrate with tmux so you don’t have to do anything but open the terminal.

Sure, different tools for different people. And if you want to use a new fangled triangular wheel they just invented, no one’s going to stop you

It’s still a triangular wheel at the end of the day
by shit_game | 2026-02-25 16:33:07+00:00
The issue with creating some hidden maturity heuristic for accounts is that it will be gamed just the same as any other, except that using age alone is the simplest heuristic to game. You can simply do nothing for incrimental periods of time and then begin testing aged accounts to roughly determine what the minimum age an account must reach to become "trusted".

Bot prevention is a very difficult constant game of cat and mouse, and a lot of bot operators have become very skilled at determining the hidden metrics used by platforms to bless accounts; that's their job, after all. I've become a big fan of lobste.rs' invitation tree approach, where the reputation of new accounts rides on the reputation of older accounts, and risks consequence up the chain. It also creates a very useful graph of account origin, allowing for scorched earth approaches to moderation that would otherwise require a serious (and often one-off) machine learning approach to connect accounts.
by rtsam | 2026-02-25 16:33:16+00:00
I think that is the idea. They shouldn't exist without a prompt mitigation path.

In other words, if you can't deal with the false positives in a timely manner. You SHOULD be liable for the damages.

I can't build a budget car put together in an unsafe manner. Then complain I can't compete due to all the peoples cars crashing and blowing up and suing me.
by bee_rider | 2026-02-25 16:33:33+00:00
700 is actually a pretty good sample size unless you are looking at some tiny crosstab, or there’s some skew (which you won’t naively scale your way out of anyway).

It is also interesting to note that the comparison is between recent comments and recent comments by new users. So, I guess this would take care of the objection that em-dashes (a perfectly fine piece of punctuation) have just been popularized by bots, and now are used more often by humans as well.

Maybe there is a bot problem. Seems almost impossible to fix for a site like this…
by chrisweekly | 2026-02-25 16:33:41+00:00
I view it as a long-overdue exit ramp for maintainers of Next.js-based webapps to extricate themselves from its overly-opinionated and unnecessarily-tightly-coupled build tooling. Being stuck on webpack/rspack and unable to leverage vite has been a huge downside to Next.js. It's a symptom of Vercel's economic incentives. This project fixes it in one fell swoop. I predict it hurts Vercel but saves Next.js.
by stackbutterflow | 2026-02-25 16:33:43+00:00
First link

> The wife of a Conservative councillor has been jailed for 31 months after calling for hotels housing asylum seekers to be set on fire.

Saying she was put in jail for social media posts is like saying a murderer was jailed for breathing air.

Meanwhile a US citizen was jailed for a meme quoting Trump after Kirk death.

https://edition.cnn.com/2025/12/17/politics/retired-cop-jail...
by less_less | 2026-02-25 16:34:27+00:00
The laptop keyborad is good enough, but I'd enjoyed using the Kineses before. I moved long distance and the Kinesis was bulky and didn't make the cut for things to haul. Once I was settled I started looking to set up a proper office again, and that included a keyboard. But I didn't find one that was enough better than a laptop keyboard to get regular use.
by marginalia_nu | 2026-02-25 16:34:28+00:00
I have sent them an email a few days ago about the state of /noobcomments.

This wasn't really a intended as an "wow, dang is sure sleeping on the job", more than an interesting observation on the new bot ecosystem.

I also feel like there's a missing discussion about the comment quality on HN lately. It feels like it's dropped like crazy. Wanted to see if I could find some hard data to show I haven't gone full Terry Davis.
Tell HN: Amazon Removing Option to Restrict 3rd Party Seller Gift List Purchases
by toomuchtodo | 2026-02-25 16:34:43+00:00
Email contents:

You're receiving this notice because you have one or more Amazon Lists that are shared with others and have a delivery address set up. We're writing to inform you about an upcoming change to Amazon Lists. Starting March 25, 2026, we will remove the option to restrict purchases from third-party sellers for list items. When this change takes effect, gift purchasers will be able to purchase items sold by third-party sellers from your lists and your delivery address will be shared with the seller for fulfillment. This change will provide gift purchasers with access to a wider selection of items when shopping from your lists.

Important note: When gifts are purchased from your shared or public lists, Amazon needs to provide your shipping address to sellers and delivery partners to fulfill these orders. During the delivery process, your address may become visible to gift purchasers through delivery updates and tracking information. To help protect your privacy, we recommend using a PO Box or non-residential address for any list you share with public audiences.

Below are your recently used shared and public lists. For each list, you can go to “Manage List” to review sharing settings or update delivery addresses.
Show HN: Match – A pattern matching language that replaces regex
by hollowsolve | 2026-02-25 16:34:52+00:00
I built Match, a pattern matching language designed to replace regex. Instead of cryptic escape sequences, you describe patterns in plain English.

Example — matching an email address:

email: username then "@" then domain

username: one or more of (letter, digit, ".", "_", "-")

domain: one or more of (letter, digit, "-") then "." then between 2 and 6 letters

Key differences from regex:

- Human-readable grammar syntax
- Full parse trees with named extractions
- No backtracking, no ReDoS by design
- Composable grammar modules (use "module" (rule1, rule2))
- Zero dependencies, ~15KB

Available on npm (@hollowsolve/match). Docs, playground, and examples on the site.

GitHub: https://github.com/hollowsolve/Match
by disgruntledphd2 | 2026-02-25 16:35:00+00:00
> the economies of France and Germany being propped up on life support by government spending

The US government is running (and has been for at least a decade now) a substantial deficit, which is basically propping up the economy with government support.

> there's more political turmoil at the horizon

Again, look to your own house. Even if you ignore all the Trump noise, the attempted politicisation of the Fed is very dangerous for the US economy.

> Asia?

Asia & Europe. It's beyond absurd that the US stock markets have 65% of total value, and was never going to last forever. All this craziness from the government is just speeding up something that was always going to happen.
by marssaxman | 2026-02-25 16:35:18+00:00
There's a moderately novel programming tool I have dreamed of having for several years. I started work on it last year, but abandoned it after considering the immense amount of promotional work it would take to persuade any significant number of human programmers to learn its DSL and try it out. It's too big a project to be worth building for myself alone.

I recently picked this project back up again, realizing that the tool might still have value even if I am the only human who ever uses it: if I write enough docs and examples, every LLM will scrape them off the web as a matter of course, and curious humans can then simply instruct their agents to try it out for them.
by nicoburns | 2026-02-25 16:35:26+00:00
I find that these kind of optimizations are usually more about technical architecture than leetcode. Last time I got speedups this crazy the biggest win was reducing the number of network/database calls. There were also optimisations around reducing allocations and pulling expensive work out of hot loops. But leetcode interview questions don't tend to cover any of that.

They tend to be about the implementation details of specific algorithms and data structures. Whereas the important skill in most real-world scenarios would be to understand the trade-offs between different algorithms and data structures so that you pick an appropriate off-the-shelf implementation to use.
by kulparth | 2026-02-25 16:35:26+00:00
I’ve found most “intelligence” products fall into one of three buckets:

* expensive but opaque (e.g. Bloomberg Terminal)
* fast but noisy (Twitter/X)
* thoughtful but opinion-heavy (Substack)

What I actually wanted was cause-first analysis — not just what happened, but what mechanism produced it, and what that implies downstream.

So I started building something for myself: a daily pipeline that ingests ~15 public sources (PubMed, FRED, financial APIs, news feeds, etc.) via scheduled Python scrapers, then synthesizes each domain into a structured briefing using an OMIT framework:

* Origin (what triggered this?)
* Mechanism (how does it propagate?)
* Impact (what changes?)
* Trajectory (what happens next?)

Forcing the model to fill those fields seems to shift it away from headline summarization toward causal reasoning.

Each morning the system generates briefings across geopolitics, markets, AI/tech, supply chains, and biotech — writes them to MongoDB and a GCS-hosted JSON CDN simultaneously. The frontend loads from CDN on first paint to avoid cold-start latency; the API refreshes silently in the background.

The UI uses the same data stream to render:

* compact “signal” rows (machine-generated)
* editorial rows (headlines, excerpts, bylines)

The OMIT tags effectively create a structured metadata layer on top of the content — next step is exposing those as filters (e.g. query by mechanism type or trajectory horizon).

It’s a solo project and has been running unattended for the past few week. I genuinely don’t know if this is useful beyond my own workflow — curious if others here would want something like this, or if I’m just reinventing RSS with extra steps.
by compressedgas | 2026-02-25 16:35:34+00:00
I have a list of questions that I wrote up earlier.

Is Gryt pronounced as Grit?

So does Gryt ever leak the IP of a client to other clients connected to the same server? (Specifically this means that it never uses direct P2P between clients.)

Can, if I have a server, have it proxy my connections to other servers, so that my IP is only seen by my server, but my server's IP is seen only by the other servers?

Can clients be identified by public key? (Rather than user name and password.)

Is the audio and video end to end encrypted?

Does the Gryt desktop client support multiple windows?

Does the desktop client support making the window vertically narrow?

Does the video streaming support a mode that does not apply a blur to the video as Discord does in its Screenshare mode so that the pixels on a screen are shown on other screens exactly?

Do you have plans on replacing MinIO as it is no longer supported as open source?
by joe_mamba | 2026-02-25 16:35:45+00:00
>It's funny how the BBC makes one mishap

It's not a mishap to intentionally create disinformation in order to slander someone. Mishap is when I spill my drink on someone.

And it's not only one "mishap", the BBC has a documented history of bias and cover-ups, where the government and state agencies like MI5 since WW2, dictate their narrative. It's not a more objective source of truth as other media out there.

>and we hear about it for months.

Because the likes of the BBC, The Guardian, etc, consider themselves beyond reproach, when in fact they've been infected with the same partisan misinformation disease as the like sof Fox news, except in the other political direction.
by duxup | 2026-02-25 16:35:48+00:00
I've certainly noticed the summary posts.

I'll actually post a comment or question and I'll get a reply with a bit of a paragraph of what feels like a very "off" (not 'wrong' but strangely vague) summary of the topic ... and then maybe an observation or pointed agenda to push, but almost strangely disconnected from what I said.

One of the challenges is that yeah regular users don't get each other's meaning / don't read well as it is / language barriers. Yet the volume of posts I see where the other user REALLY isn't responding to the other person seems awfully high these days.
by MisterTea | 2026-02-25 16:36:07+00:00
> a Foxconn factory in China woke up about 8,000 workers when the glass screens arrived at midnight

Yea must be really amazing living a crowded factory dorm room with suicide safety nets under the windows only to be abruptly woken up because some schmuck in California demands his precious phones be assembled. Must be a wonderful gig.
by Marsymars | 2026-02-25 16:36:10+00:00
> Can you share more specifics on how you go about doing that?

I buy multi-year put options, there's some fuzziness around the appropriate strike price and number of options for a given long position, but effectively I'm paying the option premium to limit my downside risk.

> Do you do that for your long non-ETF positions too?

No, my non-ETF positions are negligible.
by arjie | 2026-02-25 16:36:25+00:00
I just don’t want to risk an account ban like I’ve heard others describe. But if it’s working for you that’s awesome! Saves a lot of money! I don’t mind the cost personally for the value.

Though you do have a point that OpenAI said their subscription is usable in third party apps so I should be using it then. Good point.
by disgruntledphd2 | 2026-02-25 16:36:32+00:00
Again, non dollar investors are flat since start of 2025. This isn't just politicisation (although that's part of it), it's that other markets are doing better than the US for now.

This will be a slow process, but the direction seems pretty clear (I fully expect to see a major economy introduce capital controls within the next twenty years).
by throwaw12 | 2026-02-25 16:37:10+00:00
> Where would you expect this to fail?

Haven't organized large meetups, but for regular enterprise companies this could be a difficult to buy decision, because you have ChatGPT + bunch of connectors which can get company policies.

This could be good idea for event companies who regularly schedule things, but even for them, probably difficult to justify the value when you have access to ChatGPT and other connectors
by MontyCarloHall | 2026-02-25 16:37:44+00:00
I'm willing to bet you don't full-on YOLO vibecode like the lead Claude Code developer, running 10 Claude Code sessions in parallel to push 259 pull requests that modify >40k lines of code in a month [0]? There is zero chance any of that code was rigorously reviewed.

I use Claude Code almost every day [1], and when used properly (i.e. with manual oversight), it's an amazing productivity booster. The issue is when it's used to produce far more code than can be rigorously reviewed.

[0] https://www.reddit.com/r/ClaudeAI/comments/1px44q0/claude_co...

[1] https://news.ycombinator.com/item?id=45511128
by tibbar | 2026-02-25 16:37:53+00:00
To be clear, it's absolutely impossible for OpenAI and the others to stop. The valuation and honestly the global markets depend on them staying leveraged to the hilt. So they're not going to stop. However, the point is that the models are genuinely useful and people pay for them, and if we reset the timeline with a company that has just the current proprietary models, they could turn a profit. That might involve charging more than they do now, etc. But this is much different than OpenAI, specifically, trying to turn a profit today, which wouldn't work for many reasons.

But also, "profitable inference" IS a thing! "Gross margin" is important and meaningful, even if a company has other obligations that mean it's overall not profitable.
by bakszy | 2026-02-25 16:37:56+00:00
I kept running into the same friction loop: tweak a prompt, spin up the
project, wait for deps, re-run the script, get an error, try again. Each
cycle was 8+ minutes. At 20 iterations a day that's a real chunk of time
gone before I've learned anything useful.

So I built PromptFast — a browser-based prompt playground that skips all
of that. You open it, paste a prompt, and run it against whichever model
you want in under 5 seconds.

The features I use constantly:

- 13+ models across OpenAI, Anthropic, and Google — switch in one click
- Dynamic variables ({{tone}}, {{recipient}}) so you can test multiple
scenarios without rewriting
- Side-by-side model comparison — great for deciding between GPT-4o and
Sonnet on a specific task
- Token and cost breakdown per run — helps avoid surprise bills
- File upload context (PDF, DOCX, CSV, XLSX, JSON) — useful for
document-heavy prompts
- System prompt field + prompt history so you can reload and iterate
on past runs

Your API keys are encrypted client-side (AES-GCM) and never stored on
my server. The backend is FastAPI + LangGraph; the frontend is Next.js.

It's a paid tool (€5/mo, or €45/yr, or €95 lifetime) — no free tier
currently, though you can try the demo on the landing page. Still early
days and happy to hear what's missing or broken.

https://promptfast.app
by wongarsu | 2026-02-25 16:38:10+00:00
The issue is that LLMs adopt a very particular style that is a mix of being very polished (em-dash, lists-of-three, etc) that is reminiscent of marketing copy, and some quirks picked up from the humans curating the training data somewhere in Africa

If AI was writing like everyone else we wouldn't be talking about this. But instead it writes like a subset of people write, many of them just some of the time as a conscious effort. An effort that now makes what they write look like lower quality