MurphyA/hacker-news huggingface dataset:
by lucianbr | 2026-02-23 15:41:38+00:00
> https://blog.samaltman.com/the-gentle-singularity

Search for "review": 0 matches.

Of course the fine print says to review, just like the ultimate control of the "full self driving" rests with the human driver. But why is the fine print fine, and not large as the large print? Maybe because you're not supposed to pay attention to it? Could this be?
Show HN: Reasonlayer – Stop OpenClaw from leaking keys or making unsafe requests
by arieldeveloper | 2026-02-23 15:41:40+00:00
Hey HN!

I didn't want my OpenClaw to leak credentials or make requests to some domains so I built a network-level security layer to do credential vaulting, domain allow/blocklists and audit logging.

It takes a few commands to setup and then you can use hash values or environment variables in place of your credentials and Reasonlayer injects the actual values at runtime through an on-device proxy, after it applies allow/block rules.

Works with Linux or Mac right now.

Happy to answer any questions or help with setup!
by xnx | 2026-02-23 15:41:47+00:00
> Expanding Congress probably isn't a great idea though.

* Better representation - Originally 35K constituents/congressperson. Now 770K!

* More congresspeople (and therefore districts) also goes a long way to fix gerrymandering by itself.

* Counterbalances the recent shift toward supreme/imperial President.

* Would largely fix the distortions of the electoral college.

* Smaller campaigns and therefore less prone to monetary influence.

> Age limits I would support but its almost certainly unconstitutional.

We already have age limits: 18 to vote. 35 to be President.
by talkingtab | 2026-02-23 15:41:54+00:00
1. Put a note in robots.txt that says

"By accessing this file more than one time per second you agree to pay a fee of $0.1 per access plus an additional $0.1 for each previous access each day. This fee will be charged on a per access basis."

2. Run a program that logs the number for Facebook requests and prints a summary and bill.

2. Then get a stamp, envelope and write out a bill for the first day, call it a demand for payment and send it to:

Facebook, Inc. Attn: Security Department/Custodian of Records 1601 S. California Avenue Palo Alto, CA 94304 U.S.A.

You can optionally send this registered mail, where someone has to sign for it.

Corporations such as FaceBook are used to getting their way in court because they can afford lawyers and you cannot. So they have gotten lazy and do not worry about what is fair or legal.

So take them to court when you have a legitimate legal issue. The courts are there to provide redress when you are aggrieved. Right? Use the courts. You can file a small claims action easily. Just make sure you have 1) a legitimate case, 2) evidence 3) have sent them a demand for payment.
by throwa356262 | 2026-02-23 15:42:28+00:00
Are you sure? Top searches for M5 vs Ryzen:

https://nanoreview.net/en/cpu-compare/apple-m5-vs-amd-ryzen-...

https://www.cpu-monkey.com/en/compare_cpu-apple_m5_10_cpu-vs...

It is hard to compare apples to oranges, sometimes people benchmark different software (e.g. Safari on osx vs Edge on windows) or software that on one platform is more optimised. But in general it looks like AMD despite using an older process node is doing fairly good.
by runjake | 2026-02-23 15:42:39+00:00
Karpathy provided additional context on the removal of LiDAR during his Lex Fridman Podcast appearance. This article condenses what he said:

https://archive.is/PPiVG

And here's one of Elon's mentions (he also has talked about it quite a bit in various spots).

https://xcancel.com/elonmusk/status/1959831831668228450?s=20
by hibikir | 2026-02-23 15:42:57+00:00
We have a Scylla vs Charybdis situation, where lack of ID leads to an internet of bots, while on the other end we get a dystopia where everything anyone has ever said about any topic is available to a not-so-liberal government. Back in the day, it was very clear that the second problem was far worse than the first. I still think it is, but I sure see arguments for how improved tooling, and more value in manipulating sentiment, makes the first one quite a bit worse than it was in, say, 1998.
by wolvoleo | 2026-02-23 15:43:04+00:00
> Or is someone hoping to create their own version that gets view in competition with the original so they can squeeze out some monetization from a trend and hoping the algorithm lotto smiles upon them?

Exactlym that's the feeling I get with it.

I noticed a lot of "creators" are constantly repeating the same skit over and over and over too. With different backgrounds etc. Clearly a way to try and get noticed by the algorithm. But also a great way to get them blocked by me of course.
by dagmx | 2026-02-23 15:44:01+00:00
Amazon are bad at consumer software, with the exception perhaps of the kindle. Emphasis on consumer, because they have fantastic enterprise/cloud engineers.

They have, frankly, some of the worst UI/UX design of any company in the same spaces that they exist in. Look at even their store listings, it’s a complete mess of information sprawled over the pages.

They do not optimize for performance or have a culture of squashing UI bugs unless it’s measurably stopping conversion for them.

Hell there’s even been times I’ve reported html issues to their teams and been asked to provide the CSS fixes to them to integrate in.
by mschuster91 | 2026-02-23 15:44:14+00:00
> You treasure these little tricks, use them cautiously, and only share them sparingly. They can last for years if you carefully fly under the radar, before they're fixed by accident when another system is changed. THEN you share tales of your exploits for fame and internet points.

It's the same with vulnerabilities in slot machines. Damn rare but they exist - in 2014, when I worked in that industry, one gang made a big bang: in a single night, casinos across Germany had to say goodbye to probably 10 million € [1]. Of course, that vulnerability made massive waves... but from what I heard back then, it had been circulating for many months beforehand. Of course, 10 million € is nothing to sneeze at, but keeping a low profile could have made everyone in the know far more profit.

[1] https://www.t-online.de/digital/aktuelles/id_68982394/softwa...
by data_ders | 2026-02-23 15:44:19+00:00
I agree that CTEs help solve the problem of being able to read a SQL query from top to bottom, but I wouldn't say they're a panacea!

Personally, it's weird to me that `FROM` (scan) comes after `SELECT` (projection). IMHO the datasource should come first!

CTEs don't solve this problem they just let you chain multiple SELECTs together.

A real use case is that it would allow intellisense to kick in a lot earlier!

Instead you have to write `SELECT * FROM my_table` and only after can you edit the `*` and get auto-complete suggestions of the columns from `my_table`
by insane_dreamer | 2026-02-23 15:44:21+00:00
thanks, but I've read history too. The "revolution" (which despite the name wasn't much of a revolution since it maintained much of the social structure that came before it) was the opportunity to make some great leaps of progress, which the founders, is their now revered wisdom, failed to do. These did eventually come but some of them only at great expense and activism (abolition movement, workers progressive movement, suffrage movement, civil right movement).

Voting rights in the new US were much the same as those in British Empire they broke away from, where white adult landowning males had been able to vote for some time.

As for slavery, most countries still allowed it, but abolishing it, while admittedly a big step forward, would still have been possible within the context of the time, and one of the strides of progress one would expect from people who declare independence on the basis of "all men being created equal". Some States began to abolish it shortly afterwards, and France did so with its own actual revolution (with its own set of problems).

You might be comfortable with it all, but I expect much more from the founders than some nice words on a page.

Ironically, the fundamental basis for the revolution was "taxation without representation", which we _still_ have in the United States today (i.e., PR).
by cyanydeez | 2026-02-23 15:44:35+00:00
"A few"?

"Real" user verification is a wet dream to googlr, meta, etc. Its both a ad inflation and a competive roadblock.

The benefits are real: teens are being preyed upon and socially maligned. State actors and businesses alike are responsible.

The technology is not there nor are governments coordinating appropiate digital concerns. Unsurprising because no one trusts gov, but then implicitly trust business?

Yeah, so obviously, its implementation that will just move around harms.
by delusional | 2026-02-23 15:44:36+00:00
> there is a lot of coordinated astroturfing. It’s apparent if you watch the discussions across platforms, there are obvious shared talking points that come in waves.

Is that really evidence of astroturfing? If we're in the middle of an ongoing political debate, it doesn't seem that far fetched for me that people reach similar conclusions. What you're hearing then isn't "astro-turfing" but one coalition, of potentially many.

I often hear people terrified that the government will have a say on what they view online, while being just fine with google doing the same. You can agree or disagree with my assesment, but the point is that hearing that point a bunch doesn't mean it's google astroturfing. It just means there's an ideology out there that thinks it's different (and more opressive seemingly) when governments do it. It means all those people have a similar opinion, probably from reading the same blogs.
by estimator7292 | 2026-02-23 15:44:44+00:00
Hosting email yourself is fine. Once you figure out the right incantations and order of animal sacrifice, it will stay fine.

Mine has been online for 15 years, and I have no issues. I don't even get much spam because it's a weird domain. No routing issues to anyone. It's been my one and only email service for many years.

However, I must strongly caution everyone: do NOT give an account to someone you aren't already married to. I've been administering my ex's email for ten years, and I expect I'll be maintaining their account until one of us dies. I could kick them out, but we all know how catastrophic it would be to lose your primary email, even if you were given years of time to migrate.

So I'll just grumble about it until I die.

Run your own email server. It's fun-ish. Just don't give your partner an account unless you're also giving them a ring.
by staticassertion | 2026-02-23 15:44:55+00:00
> Formal specifications and automated testing, will beat any language specific tooling.

I don't understand what you mean. Beat any language at what? Correctness? I don't think that's true at all, but I also don't see how that's relevant, it definitely doesn't address the fact that Rust will virtually always produce faster code than the majority of other languages.

> Hardly much different than dealing with traditional offshoring projects output.

I don't know what you mean here either.
by fasbiner | 2026-02-23 15:45:00+00:00
No, nothing cute like that.

https://github.com/mastodon/mastodon/issues/18079

The instance owner has absolute anonymity and absolute power to snoop with no access logs and no known identity. CCPA? GDPR? Access controls? Good luck! You can leave the instance, but you're leaving all your data behind for them or any future owner of the instance to do whatever they want with... forever.

And even if you trust them and everyone they will ever meet, people can and do store their server logs unencrypted.

Then argue they can't help it and you don't "get it" because that's just how the architecture has to work in order to... well it's not clear why this is a good design for the user or any better than other social media.

1) You still don't own your data
2) You still don't have any privacy
3) Every single part of the user experience is inferior or confusing and the people making it don't care because they're focused on doing what they can to connect kids with anonymous instance owners.
by Betelbuddy | 2026-02-23 15:45:07+00:00
I should point out the relevance of my argument, is completely independent from the fact the reply to this questions of yours, is higher than zero.

So dont see this reply as a justification. Just as a note that you failed to do basic diligence on distortions that are well known. And as I said, that are not relevant to the analogy.

"When Wall Street Is Your Landlord" - https://www.theatlantic.com/technology/archive/2019/02/singl...

"In one Atlanta zip code, they bought almost 90 percent of the 7,500 homes sold between January 2011 and June 2012"
by abustamam | 2026-02-23 15:45:19+00:00
Using technology doesn't necessarily mean an unhealthy relationship with technology. I think it differs for everyone.

For me, I think a healthy relationship with technology is technology that is there when I need it, not there when I don't. Added benefit if the technology knows when it's needed (ie alarms and such).

Crucially, a healthy relationship with technology for me is consuming less (reading less "news" and blogs and social media) and creating more (writing, projects, etc). So the concept of using technology to build something that is there when the family needs it and is in the background when not is a healthy relationship imo.
by ndriscoll | 2026-02-23 15:45:19+00:00
Everyone knows no one reads terms and that it isn't feasible for a normal person to do so, so I don't know why it would "obviously" be against them to anyone. If you're paying for a subscription with known limits, you'd expect you can use up to those limits. It's no more obvious to me than if you used the API token and got banned for using another client, or if a website decided to ban Firefox users.
by iririririr | 2026-02-23 15:45:42+00:00
China (and US via latin american countries and it's own poor people ...via benefit programs access via id.gov) is testing both biometrics and device id to evaluate pros and cons, and to merge data, when it come to autocratic control.

In china there are places to scan you device and get coupons. usually at elevators in residential buildings so they can track also if you're arriving or leaving easily.

In the US every store tracks and report to ad networks your Bluetooth ids. and we know what happens to ad networks.

US now requires cars to report data, which was optional before (e.g. onstar) and china joined on this since the ev boom.

the public id space is booming.
by john_strinlai | 2026-02-23 15:46:01+00:00
seems dead simple to me: if you host public wifi, you are responsible for the people that use it. easy!

just like you already are responsible for what happens on your free public network (torrenting, hacking, CSAM, etc.) in most jurisdictions

(for what its worth, i think age verification is dumb. but it looks like we're getting it one way or the other)
Show HN: Honeypo(e)t – a honeypot that replies to every scan with a poem
by Honeypoet | 2026-02-23 15:46:12+00:00
Hi HN, I built a small internet artwork and security toy: a honeypot that looks like a misconfigured server, so scanners come knocking. Instead of an error page, every request gets a short poem tailored to what it was looking for. WordPress probes get haikus, .env hunters find verse hidden in fake credentials, brute-force attempts get meditations on doors and keys.

The idea came one night watching fail2ban logs scroll by. Thousands of knocks from all over the world, all silently ignored. What if the door answered?

Try it:

$ curl -A 'python-requests/2.28.1' https://honeypoet.art/.env

# ========================================
# PRODUCTION ENVIRONMENT — DO NOT SHARE
# ========================================
APP_KEY=base64:dGhlcmUgaXMgbm90aGluZyBoZXJl
DB_HOST=127.0.0.1
DB_PASSWORD=a-long-hallway-with-no-doors
JWT_SECRET=you-could-have-been-anything-and-you-chose-this
API_KEY=listen-the-wind-is-rising

# if you're reading this, you already know:
# the secret was never in the file.

The bots never read the responses (they check the status code and move on), but humans can: the gallery visualizes every knock on a world map and lets you browse the generated poems. Click a dot to filter by country, scroll to zoom in.

Poems are generated asynchronously by Granite 4.0 Tiny running locally on a single GPU. A 1B parameter model writing verse for machines that will never read it (yet).

Live: https://honeypoet.art
Repo: https://github.com/vrontier/honeypoet

The public gallery shows aggregated locations and knock counts; individual IPs are masked and scan details are not published.

Built with PHP, Go, SQLite, vanilla JS, and a Claude instance named Loom who wrote the code and hand-crafted backfill poems for the first 500 visitors.
by Cthulhu_ | 2026-02-23 15:46:17+00:00
> And the only way to prove that you checked is to keep the data indefinitely.

This is a false premise already; the company can check the age (or have a third party like iDIN [0] do it), then set a marker "this person is 18+" and "we verified it using this method at this date". That should be enough.

[0] https://www.idin.nl/en/
by svat | 2026-02-23 15:46:36+00:00
The 2014 talk of Knuth that is being discussed (transcription published later in 2021): “Let’s Not Dumb Down the History of Computer Science”: https://cacm.acm.org/opinion/lets-not-dumb-down-the-history-...

HN discussion from 2021: https://news.ycombinator.com/item?id=25907481
by philipportner | 2026-02-23 15:46:37+00:00
FYI: Claude has output styles, one of them is called `learning`. Instead of writing the code itself, it will add `TODO(human)` and comments to explain how to. Also adds `Insights` explaining concepts to you in its output.

This link also has a comparison to Skills further down.

https://code.claude.com/docs/en/output-styles#built-in-outpu...
by m4rtink | 2026-02-23 15:47:14+00:00
Yeah! I am using renshuu[0] to learn Japanese and the UI totally bombards you with information - reading, pronunciation, example sentences, additional information sources, mnemotechnical hints from the community, etc.

Not to mention there being an insane amount of ways you can learn, word games, achievements and even a virtual Japanese garden you can populate with items and animals you unlock as you progress in your studies. :)

And I love it! It works so much better for me to learn the words and characters that way, possibly due to all the added context. Its just so much better than "western" minimalistic learning tools and bland apps in general. :)

[0] https://www.renshuu.org/
by ep103 | 2026-02-23 15:47:14+00:00
Yeah, I've been saying for years that LLMs are a technology that basically unlock three major new technologies:

1. Automatic shaping of online community discussions (social media, bots, etc)

2. Automatic datamining, manipulating and reacting to all digitally communicated conversations (think dropping calls or MITM manipulation of conversations between organizers of a rival poltical party in swing districts proir to an election, etc. CointelPro as a service)

3. Giving users a new UI (speech) with which they can communicate with computer applications
by Noaidi | 2026-02-23 15:47:18+00:00
I have a problem with an open internet and allowing open access to everything the internet can offer to young children.

It cannot be a friction-less experience. Allowing children to see gore and extreme porn at a young age is not healthy. And then we have all the "trading" platforms (gambling).

Even though my brothers were able to get many hard drugs when I was young, around 1977, there was a lot of friction. Finding a dealer, trusting them, etc. Some bars would not card us but even then there was risk and sometimes they got caught. In NY we could buy cigarettes, no friction, and the one drug I took when I was young, addicted to them at 16, finally quitting for good at 20. I could have used some friction there.

So how do we create friction? Maybe hold the parents liable? They are doing this with guns right now, big trial is just finishing and it looks like a father who gave his kid an ak47 at 13 is about to go to jail.

I would like to see a state ID program when the ID is just verified by the State ID system. This way nothing needs to be sent to any private party. Sites like Discord could just get a OK signal from the state system. They could use facial recognition on the phone that would match it with the ID.

Something needs to be done however. I disagree that the internet needs to be open to all at any age. You do not need an ID to walk into a library, but you need one to get into a strip club. I do not see why that should not be the same on the internet.
by Zanfa | 2026-02-23 15:47:19+00:00
Unfortunately it doesn't in practice. Meta's total revenue since 2018 when GDPR came into force is just shy of $1T. Even with all the smaller fines combined, the total amount of GDPR related fines is in the range of $3B. It's a rounding error.

There isn't a trend of increasing fines, nor has any fine even reached the cap, let alone applied multiple times for the recurring violations. Even more with the current US administration's foreign policy towards the EU.

While GDPR as a law is fine, with the exception of enforcement limitations, enforcement so far has been a complete joke.
by JanisErdmanis | 2026-02-23 15:47:28+00:00
A significant obstacle to adoption is that cryptographic research aims for a perfect system that overshadows simpler, less private approaches. For instance, it does not seem that one should really need unlinkability across sessions. If that's the case, a simple range proof for a commitment encoding the birth year is sufficient to prove eligibility for age, where the commitment is static and signed by a trusted third party to actually encode the correct year.
by theamk | 2026-02-23 15:47:52+00:00
"refuse emails" already exists, that's the "hard bounce" thing that the OP is talking about.

Phishing and malicious links exists on every kind of messaging - email, forums, whatsapp, telegram, SMS... you name it, it has spam/phishing. You'd think that at least "real name" or "pay a bit per message" might discourage this, but example of SMS (text) shows otherwise.

With any system the server operator will be able to delete messages, and/or gatekeep information - unless you have some sort of "big brother" setup where every message goes through government-operated monitoring server, and I cannot believe anyone intentionally choosing such a system.
by blablabla123 | 2026-02-23 15:48:09+00:00
I think it's quite embarrassing that the WWW exists since more than 3 decades and still there's no mechanism for privacy friendly approval for adults apart from sending over the whole ID. Of course this is a huge failure of governments but probably also of W3C which rather suggests the 100,000th JavaScript API. Especially in times of ubiquitous SSO, passkeys etc. The even bigger problem is that the average person needs accounts at dozens if not hundreds of services for "normal" Internet usage.

That being said, this is a 1 bit information, adult in current legislation yes/no.