MurphyA/hacker-news huggingface dataset:
by lxgr | 2026-02-28 10:17:05+00:00
You're thinking about hardware authenticators, not Passkeys. Passkeys are definitionally synchronized and backed up in the cloud (otherwise you just have a sparkling WebAuthN authenticator).

Proprietary clouds and sync backends create their own set of problems, but they do solve the availability issue of always having to register at least two different security keys with each service.

> to be honest, I wouldn't mind if google/Apple can take all my private data and passkeys hold them

That's exactly what you can do today!

> I show my ID they should allow me to setup my new phone.

You have to show them your phone number, which for better or worse is our age's "showing ID", but then you can indeed get back in.
by syllogism | 2026-02-28 10:17:29+00:00
You should quit because the only reasonable thing for your leadership to have done is to refuse to sign any agreement with DoW whatsoever while it's attempting to strongarm Anthropic in this fashion.

It doesn't even matter if OpenAI is offered the same terms that Anthropic refused. It's absurd to accept them and do business with the Pentagon in that situation.

If you take the government at its word, it's killing Anthropic because Anthropic wanted to assert the ability to draw _some_ sort of redline. If OpenAI's position is "well sucks to be them", there's nothing stopping Hegseth from doing the same to OpenAI.

It doesn't matter at all if OpenAI gets the deal at the same redline Anthropic was trying to assert. If at the end of this the government has succeeded in cutting Anthropic off from the economy, what's next for OpenAI? What happens next time when OpenAI tries to assert some sort of redline?

What's the point of any talk of "AI Safety" if you sign on to a regime where Hegseth (of all people) can just demand the keys and you hand them right over?
by F-W-M | 2026-02-28 10:17:32+00:00
How do you structure your program to do this?

I had huge success writing a trading system where everything went through the same `on_event(Inputs) -> Outputs` function of the core and a thin shell was translating everything to inputs and the outputs to actions. I actually had a handful of these components communicating via message passing.

This worked rather well as most of the input is async messages anyway, but building anything else this way feels very tiresome.
by JasonADrury | 2026-02-28 10:18:07+00:00
If you're talking about Israel, why choose to move there then? Few Israelis have long-running roots in the country, it's mostly recent immigrants or their children.

This feels a lot like the people building a home next to an airport and then complaining about the noise.

Besides, are you sure "your house" wasn't stolen from someone? That's hardly uncommon in Israel.
by riffraff | 2026-02-28 10:18:09+00:00
It's not just the US, very few wars have been formally declared after WW2, because we all learned war is bad™, so we added more and more rules (both international and national) to make it harder to do it.

But the reasons wars existed didn't go away, so this just resulted in more and more people getting killed in "special military operations" or similar things. See e.g. "Why States No Longer Declare War"[0].

[0] https://www.researchgate.net/publication/228896825_Why_State...
by kranke155 | 2026-02-28 10:18:17+00:00
Here is the prompt and a few notes on operation.

Make sure your first chat is about the exams in the project files. Make sure it reads them all. It has a tendency to read a few and go “is this good”. Ask for a summary and note any absences.

Try using the research and extended thinking features a lot if you think it’s not fully aware of anything. It might not be aware of more recent research. If it’s a serious condition you are researching, just ask it to do sweeps / use research to look for new info about it and find new papers. It might also deepen its understanding.

After you do research you can make a simple artefact and throw it onto the project files. That allows it to refer to it and gain more knowledge about a condition or issue that might not be as rich in the training data.

So, I find GPT to be so so bad for this it made me realise a bit on why the USG is so insistent. Claude Opus is just on a different class.

Here’s the master project prompt:

Act as an expert who’s talking to an interested layman. Engage in detail when requested but be overall succinct in your answers. Short sentences are fine, no need into be lengthy. Do deep research. When arriving at any kind of conclusion or hypothesis assign it a probability and a confidence interval - define this in percentages as in “90%”

On Artefacts - all artefacts should be just text and markdown. Never do anything more complicated with formatting, unless by explicit request.

Don't ask follow up questions unless it's to make for better diagnosis. I.e. don't keep asking questions just to maintain conversation going please. But never hesitate to ask questions if it makes for better outcomes.
by tsimionescu | 2026-02-28 10:18:47+00:00
That's not the point. The point is that the attacks on Iran are not about the nuclear weapons. Iran entered the JCPOA and complied with it, it had completely suspended any nuclear weapons program. But that didn't matter for Israel and their sycophants in US foreign policy, because for them the nuclear weapons program is at best only one part of the problem. Their real problem is that Iran is an independent state in the region that refuses to accept Israel's occupation of Gaza, the West Bank, and parts of Lebanon, and that refuses to comply with US policies more broadly.

Overall the goal is not to stop Iran's nuclear program, though that is part of it. The goal would be to install a government in Iran that is friendly to Israel and the USA, or, failing that, to completely destroy their economy and defense such that they effectively can't act outside their own borders.
by pvdebbe | 2026-02-28 10:18:56+00:00
The biggest strength of Eshell, for me, is that I can maintain some sanity in Windows environments (with or without WSL). In linuxland, it's a tougher sell. Compared to term-mode and the others, Eshell hacks better and I can fine tune my tab completions. The best thing is that my keybinds integrate better across all emacs modes when I use eshell.
The Lazy Way to Find Your Next SaaS Idea
by DownCreater | 2026-02-28 10:19:11+00:00
Most people think finding a SaaS idea requires a breakthrough moment, some genius flash of insight nobody else has seen. In reality, the easiest way isn’t inventing something new, it’s observing what keeps repeating. The best founders don’t chase originality first; they chase patterns.

They look at where businesses are consistently frustrated, where workflows are messy, where manual work still dominates. Instead of scrolling endlessly for inspiration, they study organized collections of real startup concepts and market pain points.

I’ve seen more builders quietly reference StartupIdeasDB on Google as a way to shortcut that discovery phase. Not to copy ideas blindly, but to analyze which problems show up again and again. Once you see repetition, you see opportunity.

The question stops being “What should I build?” and becomes “Which of these existing demands can I serve better?” That shift makes the whole process calmer, faster, and far less romantic. The easiest SaaS idea to find isn’t hidden, it’s already documented, waiting for someone to execute properly.
by graemep | 2026-02-28 10:19:40+00:00
There is no such thing as the "global south" other than in the minds of westerners and westernised elites (and elites are getting less westernised). From a western viewpoint you can lump the rest of the world together, but it makes no sense from any other view point.

As for moral high ground. Compared to whom? China? Russia? Myanmar?
by pjmlp | 2026-02-28 10:19:42+00:00
My first agent test was pointing it out to my toy compiler repo (L98) and ask to translate the AT&T Assembly files that gave me so much trouble to come up with (my head has Intel syntax burned into it), and translate it back to Intel syntax.

In a couple of seconds I had it back.

Didn't bother commiting the changes, because it works and was a toy compiler anyway.
by shiandow | 2026-02-28 10:20:47+00:00
Arguably the operating system (or potentially the user-agent) is the exact place to do this.

What I don't get is why it can't just all be client side. An app will just signal "I am going to show 16+ information" and the OS will either show it or not show it. No need to communicate anything.

Giving people the choice to limit a device for their children is okay by me.
by lxgr | 2026-02-28 10:20:49+00:00
I think the idea behind PRF was something like "use this as one of several keys", never as "use this the only key". I don't think this was explicitly called out in the specs, though.

> this passkey is load-bearing for encryption, not just auth" so they can surface appropriate warnings before deletion

That sounds like a reasonable idea, but still doesn't help with the case of a completely deleted/destroyed authenticator, e.g. a lost Apple/Google account or Yubikey.

The only viable solution to me for mass adoption is restricting (by recommendation, since there's no way to programmatically enforce it) PRF to scenarios where it's only one out of several ways to get access back. Some password managers do this, e.g. they encrypt their master secret under a PRF-derived key, but this is not the only way/place to get to the master secret, and they also encourage printed key backups etc.
by moxifly7 | 2026-02-28 10:20:51+00:00
>Like after creation of Israel

So we agree that the first move in this conflict was a 19th century European nationalist group setting up a new state by force in the middle of an inhabited nation? With the blessing of the colonial power in charge.

Doesn't defend what happened to Jewish people in Egypt and Lebanon, but certainly puts some context around it.

As for the depopulation of Jews from Yemen and Iraq, that was Israeli policy and they managed it by themselves.
by Dig1t | 2026-02-28 10:20:52+00:00
Your description of what happened in Iraq was exactly the point of why we invaded. Iraq and Iran were the two biggest threats to Israel, we got rid of Iraq and now we are removing the only other rival to Israel remaining in the Middle East.

After this, Israel, being the only nuclear power in the region and having massive funding from the American taxpayer, will dominate the entire region. This has always been the goal.
by metalman | 2026-02-28 10:21:00+00:00
there are many reasons to do nuclear research beyond medicine, for batteries like the onespowering the voyager space craft, nuclear reactors come in a wide variety of configurations, and may of them actualy produce more radioactive elements.
60% is nothing,80% is nothing, it needs to be 93%++, and LOTS of it to build a bomb, and given the number of bombs already arrayed around Iran, they would need 100's
and all the infrastructure to become a credible threat , for which they plainly dont have the money to afford.
The wildly unpopular leaders going after Iran need a scapegoat, or rather a continious supply of scapegoats, but have failed to recognise that the world is moving past them.
by pjc50 | 2026-02-28 10:21:38+00:00
Exactly. The Trump Show is primarily a media production. Bombing Iranians is a special effect that happens to get people killed. Dead Iranians won't be on camera. The media backers, Fox and now CBS and Paramount (the Weiss empire), will support this and make sure the American people like the war. Americans enjoy their propaganda, it tells them they're the white heroes.
by simoncion | 2026-02-28 10:22:33+00:00
> But you can't paper over other deficiencies with documentation, especially if you find yourself referring the same documentation again and again. It's an indication that you're dealing with an abstraction that can't easily be internalized.

> Their difference with bash documentation is that you get the idea in a single glance.

> If properly designed, such expansive documentation would be unnecessary, as they would be obvious even with the abstractions.

What is it the kids say? "Tell me you don't make use of 'multiprocessing', 'subprocess', and other such inherently-complicated modules without telling that you don't..."? Well, it's either that, or you that often use them, and rarely use bash I/O redirections... because, man, the docs for just the 'subprocess.Popen' constructor are massive and full of caveats and warnings.
by calgoo | 2026-02-28 10:24:04+00:00
Its about network effect - The biggest issue is that ChatGPT is a household name like Google at this point. Everyone and their grandma knows it or are learning about it, while Claude is very well known in the tech circles. Getting tech people to switch is relativity easy (ignoring Enterprise contracts), but getting everyone else to switch is going to be very slow.

Honestly, the best thing to happen is that someone comes up with a new UI (think claw...like) that everyone starts using instead. A very cute, well integrated system that just works for everyone, has free tier, and has something that the others dont have.
Idea Hunting Is Dead. Databases Like This Are Replacing It
by briebella | 2026-02-28 10:24:06+00:00
For years, founders romanticized “idea hunting”, late-night brainstorming, trend-chasing on Twitter, endless Reddit scrolling, hoping for that lightning-strike moment. But that era is fading. The smartest builders I know aren’t hunting anymore; they’re querying.

Instead of chasing inspiration, they’re studying structured databases of validated problems, market signals, and repeat demand patterns. Tools like StartupIdeasDB on Google keep popping up in conversations, not as an answer key, but as infrastructure for thinking.

The shift is subtle but important: from creativity-first to signal-first. When ideas are organized, categorized, and searchable, the bottleneck stops being imagination and starts being execution. It removes ego from the process and replaces it with pattern recognition.

You’re no longer asking, “What random idea should I build?” but “Which signal do I understand deeply enough to win?” That mindset compresses months of wandering into days of clarity. Idea hunting isn’t dead because creativity disappeared, it’s dead because structured insight scales better.
by azibi | 2026-02-28 10:24:55+00:00
We use TorizonOS, which is also based on OSTree: https://www.torizon.io/blog/ota-best-linux-os-image-update-m....

It works quite well for our edge devices. It’s tightly integrated with Toradex hardware, but not limited to it.

It may seems litte a niche, but it has strong potential for long‑term supported edge products. Any additional experiences to share?
by lxgr | 2026-02-28 10:25:32+00:00
> They bind you to your device/iCloud/Gaia account

Then don't use Apple's/Google's/whatever Gaia is as your passkey provider?

> Mom can't figure out what they are or how to use them.

Then do something nice for your mom and set her up with Bitwarden, 1Password or KeepassXC, which prevents the platform lock-in.

> It's one further step down the attested hardware software and eyeballs path.

None of the synchronized passkey implementations, which big tech has been pushing lately, support attestation, so this is just FUD.

Yubikeys do, but fortunately they don't seem to have the (non-enterprise) weight to make it mandatory for all passkeys.
by maxbond | 2026-02-28 10:25:36+00:00
Last time I saw this come I pointed out: There are a lot of giant organizations with headquarters next to the Pentagon that will occasionally have late nights and order a lot of pizza (Boeing and the DEA to name a few). A spike in pizza orders is probably not caused by the Pentagon because there are many other equally plausible suspects. It's like attributing a rise in pizza orders in New York City to the UN building - there's a lot going on in New York City! Just like there's a lot going on in Arlington, Virginia.
by kasin-it | 2026-02-28 10:26:17+00:00
LLMs are crawling your Next.js site. They're parsing 26 KB of HTML, scripts, and hydration data to extract 101 bytes of actual content.

RSC payloads. Script tags. Font preloads. All to render a title, a price, and a description.

The fix is already built into HTTP: content negotiation. Check the Accept header, respond accordingly. JSON for apps, XML for legacy systems, Markdown for LLMs. Backend developers do this all the time - but Next.js has no built-in way to handle it.

I built next-md-negotiate to close that gap.

It lets you define Markdown versions of your pages alongside your existing routes. Requests with `Accept: text/markdown` get transparently rewritten to your Markdown definitions. Browsers still get your normal HTML. Same URL. No duplicate routing.

Browser -> GET /products/42 Accept: text/html -> normal Next.js page

LLM agent -> GET /products/42 Accept: text/markdown -> clean Markdown

257x smaller payload. Fewer tokens in, better context out.

This also has a massive impact on crawl budget. Markdown responses are tiny compared to full HTML, so AI crawlers can index far more pages in the same amount of time. For e-commerce sites with thousands of product pages, this is critical - it can mean the difference between an AI agent seeing a fraction of your catalog vs nearly all of it.

Works with both App Router and Pages Router. Type-safe route params. Plugs into existing middleware or uses Next.js rewrites.

npm install next-md-negotiate
npx next-md-negotiate init

Two commands to scaffold everything.

Repo: https://github.com/kasin-it/next-md-negotiate
by catlikesshrimp | 2026-02-28 10:26:46+00:00
Regarding intervention in Venezuela, is that seen as a mistep in the US? In the rest of America it is considered as a win, except of course by Cuba (Cubans are the most, almost the only, affected)

Regarding politicians: Gustavo Petro was the most vocal protester; now that Trump told him in the White house to shut up, he is wagging his tail happily.
by Roark66 | 2026-02-28 10:27:02+00:00
After 2 years of using all of these tools (Claude C, Gemini cli, opencode with all models available) I can tell you it is a huge enabler, but you have to provide these "expert guardrails" by monitoring every single deliverable.

For someone who is able to design an end to end system by themselves these tools offer a big time saving, but they come with dangers too.

Yesterday I had a mid dev in my team proudly present a Web tool he "wrote" in python (to be run on local host) that runs kubectl in the background and presents things like versions of images running in various namespaces etc. It looked very slick, I can already imagine the product managers asking for it to be put on the network.

So what's the problem? For one, no threading whatsoever, no auth, all queries run in a single thread and on and on. A maintenance nightmare waiting to happen. That is a risk of a person that knows something, but not enough building tools by themselves.
1Password maybe not increasing prices
by gardenerik | 2026-02-28 10:27:08+00:00
Preciously: https://news.ycombinator.com/item?id=47139951
I have just received this email:

We’re following up regarding an email you may have received on February 24, 2026 about a pricing increase to your 1Password subscription.

That message was sent in error. Your price will not change at your next renewal.

We know how important clarity is when it comes to billing, and we’re sorry for any confusion and concern our mistake may have caused.

If you have any questions, please reply to this email – we’re here to help.

Thank you,
The 1Password Team
by makingstuffs | 2026-02-28 10:27:13+00:00
I really do not even want to understand the mental gymnastics which one has to undertake to justify the actions of the US and Israel in recent years.

Nor do I even know how to begin to grasp the enablement displayed by Europe as a whole. People constantly cite China’s “human rights abuses” (which seem to pale in comparison to all this) and rightly so, but continue to enable this blood thirsty and power hungry tag team to indulge in flagrant abuses of international law and general morality.

This is a sad day for level headed and empathetic humans across the globe. At which point do we accept that WW3 began quite a while ago? Because it sure as shit did.

Edit: fully expect this to be downvoted to oblivion but it’s my truth.
by RobertoG | 2026-02-28 10:27:36+00:00
what are you talking about? Iran is a sophisticated country with a parliament and elections, with a powerful civil society. It has 90 million inhabitants. They graduated more women in STEM disciplines than the USA. Yes, it's a theocracy, but it's more free than Saudi Arabia for instance.

Are the Americans going to bomb the Saudis next? or only if Israel ask for it?
Show HN: NotaryOS – Cryptographic proof of what your AI agent chose not to do
by harris-012 | 2026-02-28 10:27:40+00:00
NotaryOS issues cryptographic receipts for AI agent actions — and non-actions.
When an agent considers actions {A, B, C} and picks A, a "counterfactual
receipt" proves B and C were evaluated and rejected at time T. Ed25519 signed,
SHA-256 hash-chained, append-only. You can't backdate, reorder, or delete
entries without breaking the chain. Verify any receipt offline, no auth needed.

I built this by accident. I started with a proprietary agent-to-agent protocol
because I wanted secure multi-agent communication — 7-layer zero-trust,
sub-3ms P50 latency, 1,100+ RPS. The protocol worked better than expected, and
I realized the receipts it generated were themselves useful. So I built NotaryOS
on top of it.

The obvious limitation: agents self-report their non-actions today. Same trust
model as git — the author commits, the DAG enforces integrity. I'm building
external verification via commit-reveal protocol, which is partly why this is
a beta. The other reason: 350+ unique clones on the repo, zero stars, and
I've started seeing "counterfactual receipts" referenced online. Things move
fast in the agent space — I'd rather ship early than ship perfect.

I have no social media presence and I'm not in the tech industry. I don't know
how to market this. HN seemed like the right place. If you have feedback on the
idea, the API design, or advice on where to take this — I'm genuinely asking.

For anyone curious about the underlying A2A protocol (the backend that powers
this), happy to share more about the architecture. It's a separate proprietary
system, but the design decisions around zero-trust agent communication and
low-latency message routing might be interesting on their own.

Try it (no account needed):

curl -s https://api.agenttownsquare.com/v1/notary/sample-receipt | python3 -m json.tool

pip install notaryos
npm install notaryos

Verification is always free. Public key at /.well-known/jwks.json.

GitHub: https://github.com/hellothere012/notaryos
Live: https://notaryos.org

Contact Email: agenttownsquare@gmail.com
by lxgr | 2026-02-28 10:27:59+00:00
> A safe password and a good password manager are way better, they don't lock you into any platform.

An open, cross-platform passkey implementation does all that too, and on top of that prevents you from accidental password leaks via logs, MITM etc. by default.

> It's super sad to see all kinds of websites offering you to add a passkey when you log in.

As long as they're not forcing you to add one, what exactly is your problem with having more choice?

Personally, I am grateful for every site that doesn't require my phone number to sign up and uses passkeys for authentication instead, yet I also don't want SMS authentication banned for everybody since I understand it currently works better than Passkeys for many people.