MurphyA/hacker-news huggingface dataset:
by packetlost | 2026-02-21 01:01:42+00:00
But that's not the only problem.

To illustrate, I'll share what I'm working on now. My companies ops guy vibe coded a bunch of scripts to manage deployments. On the surface, they appear to do the correct thing. Except they don't. The tag for the Docker image used is hardcoded in a yaml file and doesn't get updated anywhere unless you do it manually. The docs don't even mention half of the necessary scripts/commands or implicit setup necessary for any of it to work in the first place, much less the tags or how any of it actually works. There are two completely different deployment strategies (direct to VM with docker + GCP and a GKE-based K8s deploy). Neither fully work, and only one has any documentation at all (and that documentation is completely vibed, so has very low information density). The only reason I'm able to use this pile of garbage at all is because I already know how all of the independent pieces function and can piece it together, but that's after wasting several hours of "why the fuck aren't my changes having an effect." There are very, very few lines of code that don't matter in well architected systems, but many that don't in vibed systems. We already have huge problems with overcomplicated crap made exclusively by humans, that's been hard enough to manage.

Vibe coding consistently gives the illusion of progress by fixing an immediate problem at the expense of piling on crap that obscures what's actually going on and often breaks exiting functionality. It's frankly not sustainable.

That being said, I've gotten some utility out of vibe coding tools, but it mostly just saves me some mental effort of writing boring shit that isn't interesting, innovative, or enjoyable, which is like 20% of mental effort and 5% of my actual work. I'm not even going to get started on the context switching costs. It makes my ADHD feel happy but I'm confident I'm less productive because of the secondary effects.
by lucb1e | 2026-02-21 01:02:21+00:00
You don't need to retrieve other people's data to demonstrate the vulnerability.

It's readily evident that people have an account with a default password on the site for some amount of time, and some of them indefinitely. You know what data is in the account (as the person who creates the accounts) and you know the IDs are incremental. You can do the login request and never use the retrieved access/session token (or use a HEAD request to avoid getting body data but still see the 200 OK for the login) if you want to beat the dead horse of "there exist users who don't configure a strong password when not required to". OP evidenced that they went beyond that and saw at least the date of birth of a user on there by saying "I found underage students on your site" in the email to the organization

If laws don't make it illegal to do this kind of thing, how would you differentiate between the white hat and the black hat? The former can choose to do the minimum set of actions necessary to verify and report the weakness, while the latter writes code to dump the whole database. That's a choice

To be fair, not everyone is aware that this line exists. It's common to prove the vulnerability, and this code does that as well. It's also sometimes extra work (set a custom request method, say) to limit what the script retrieves and just not the default kind of code you're used to writing for your study/job. Going too far happens easily in that sense. So the rules are to be taken leniently and the circumstances and subsequent actions of the hacker matter. But I can see why the German the rules are this way, and the Dutch ones are similar for example
by overgard | 2026-02-21 01:02:54+00:00
Every couple of months or so I log in, and it's just depressing. I basically see zero posts from friends, it's just a lot of weird content I never signed up for. The weird thing is they send me a ton of emails saying "So and so posted such and such", so presumably people still exist in my network that post things, but Facebook conspires to prevent me from seeing it once I'm actually on the site.
by al_borland | 2026-02-21 01:03:03+00:00
Using Microsoft or Google products for an office suite is generally a company decision. Where I work, we use Excel, and the rest of the MS Office suite. Any time we have interns I have to drill this into their head, as they continuously try and use Google Docs. This is a problem, because it can mean sensitive information goes to an untrusted server not bound by company security policies. It would also mean employees using their personal Google accounts would retain company information after leaving the company. These things are bad.

If the CFO is saying to use Excel, you use Excel. This isn't the hill to die on, and fighting it makes a horrible first impression if you're new.
by fzeroracer | 2026-02-21 01:03:32+00:00
This has nothing to do with the actual problem, which is Flock itself.

The fact that Flock controls all of the cameras, all of the data and said data is easily accessible means police and the state have access to information that they should only get with a warrant. A business having a camera storing video data that's completely local isn't an issue. A business having a camera which is connected to every other business that has a camera is.
by rvz | 2026-02-21 01:03:35+00:00
> Its software. Without an external randomness source, its 100% deterministic excluding impacts of hardware glitches. This...isn’t debatable.

I don't think anyone would even go as far as to include all deep neural networks which are indeed a large scale collection of neural networks as being "100% deterministic"; regardless of their architecture. Not even you yourself and I can explain transparently why it sometimes works or doesn't work the way it does especially with any inputs. (Which adverse inputs can really mess up the model).

But first of all, the entire sentence that you should be quoting for complete context is:

>> You have not shown how a large scale collection of neural networks irrespective of their architecture is more deterministic when compared to a 'compiler' and only repeating a known misconception of tweaking the temperature to 0 which does not bring the determinism you claim it brings with LLMs [0] [1] [2], otherwise you would not have this problem in the first place.

So given this "100% determinism" you just said, surely that means that LLMs can replace a traditional compiler which needs this said determinism, since that LLMs are so useful for such a use case in production?

Then, as we practically test this, all of this quickly falls into my secondary point:

>> By even doing that, the result of the outputs are useless anyway. So this really does not help your point at all.

Again, there is just no point with repeating such myths from AI boosters that deep neural networks like LLMs are '100% deterministic'; even with temp=0 tweaks and in the practical sense.
Show HN: Universal ROS bridge for AI agents – control robots with LLMs
by webthree549 | 2026-02-21 01:04:09+00:00
I built Agent ROS Bridge to solve a problem I kept hitting: connecting AI agents (LLMs, autonomous systems) to real robots running ROS is painful.

ROS is powerful but has a steep learning curve for AI/ML folks. Writing custom bridges for every integration wastes time. This gives you a universal solution.

What it does:
• Single decorator turns Python functions into ROS actions/services/topics
• Auto-generates type-safe message classes from .msg/.srv files
• Built-in gRPC + WebSocket APIs for remote control
• Works with ROS1 and ROS2 (tested on Humble/Jazzy)
• Zero boilerplate — focus on robot logic, not middleware

4 Dockerized examples included:
• Talking Garden — LLM monitors IoT plants
• Mars Colony — Multi-robot coordination
• Theater Bots — AI director + robot actors
• Art Studio — Human/robot collaborative painting

pip install agent-ros-bridge
by Spivak | 2026-02-21 01:04:13+00:00
The moment Congress authorizes that the Executive may use discretion then the Executive can effectively levy taxes. They may be wielding a bat owned by someone else, but who swings it is ultimately what's important.

Now I'm generally of the opinion that Congress shouldn't be allowed to give the Executive discretion but seems no one agrees with that and Congress would rather let the Executive write "not quite laws" on their behalf.
by MegaDeKay | 2026-02-21 01:04:26+00:00
Yep. There are no exclusives anymore, not even timed ones. Those releases that aren't Day 1 on Playstation now is only because they were too far along in development to make that happen. This is part of their "Everything is an XBox" mantra, giving people pretty much zero incentive to buy XBox hardware right now.
by tsunamifury | 2026-02-21 01:05:18+00:00
I think you're assuming a lot of nonsense here out of some sort of insecurity or obsession with your pet theory.

Chinese is different, more contextual and metaphorical, requiring more 'fuzzy' linguistics to say the same thing.

Thats its... thats all. And I challenge anyone who works across china and US like I do to not agree. Beyond that you're just going off on your own made up missions of stupidity. Really re-read your train of thought and think about how wandering nonsense it becomes with assumed things I didn't say.
by Nevermark | 2026-02-21 01:05:20+00:00
> This isn't a technology issue. Regulation is the only sane way to address the issue.

It is actually both a technology and regulation/law issue.

What can be solved with the former should be. What is left, solved with the latter. With the best cases where both consistently/redundantly uphold our rights.

I want legal privacy protections, consistent with privacy preserving technology. Inconsistencies create technical and legal openings for nefarious or irresponsible powers.
by subpixel | 2026-02-21 01:05:37+00:00
Find a book in a public school library that should not be shown to children, that’s so horrible it will warp minds.

Is it conceivable that some librarian went off their meds and put a pornographic manga title on the shelf? Yea. But what we are talking about are books that are selected by educators getting banned because they represent ideas that small minds are threatened by.
by 0xbadcafebee | 2026-02-21 01:06:09+00:00
I want Google to lock down their platform. Hardcore locked down. So locked down you can't do anything with it at all. Because people need motivation to do something hard.

Android has been a bloated walled garden for years. It should have been like a PC w/Windows or Linux: anyone should be able to make an app (any way they want), publish it, let anyone who wants to download it & run it. But that was never the plan. The plan was to provide a moat to allow mobile telephone operators (& Google) to dictate what users were allowed to do with their phones. Imagine your ISP having total control over your desktop computer. Or killing a website, or program, because the ISP doesn't like it.

It is insane that we, the people giving them the money and agency to do this, that we've allowed this to be the status quo. We need to do something about it. We need to kill Android. And from the ashes, make a new platform that works for us, and not for a corporation's profits and anti-competition.
by yourapostasy | 2026-02-21 01:06:54+00:00
Money and fame. Lots of money and fame.

There is no shortage of Olympic hopeful elite athletes every four years, despite the incredibly small pool of competitors at each Games.

Same for musicians.

This kind of Winner-Take-All Economics or Superstar Market is what capital wants in their ideal world in markets with near-zero marginal costs of distribution. Even if software creation in the long-term does not fall to this kind of labor market, LLM's can establish a "market can be irrational longer than you can stay solvent" dynamic where capital can run the labor market like this for software for a generation or three before having to face the reflexivity music, like they did for US manufacturing.
by kevincox | 2026-02-21 01:07:25+00:00
I mostly agree with your points.

> > That users won't be able to install what they want

> No, sideloading will still work, but it won't work if the APK isn't signed by someone in the Google developer registry.

So the user can't install what they want. They can only install stuff signed by developers Google has "approved".

Yes, in the happy situation this is everything except for developers that Google has revoked. But technically it is only approved developers.
by beders | 2026-02-21 01:08:27+00:00
This never-ending whining about oooh but my data ... for a service that you can use for free is nauseating.

This is a for-profit company running this service. It ain't free to operate.

If you don't like that, go elsewhere.

If there is one thing that has been a resounding success on the internet it is this: free services that you pay for with your clicks.
Just look at the plethora of free services you get.

In no other economy would that be even remotely possible.
by Aloisius | 2026-02-21 01:09:27+00:00
> When it imposes a new government on countries (like Iraq) it chooses a parliamentary system.

I'd avoid reading too much into this. The US simply tries to avoid making too many major changes to the system of government and Iraq was familiar with a parliamentary system already.

The Empire of Japan was a parliamentary semi-constitutional monarchy. Today it is a parliamentary constitutional monarchy. That doesn't mean the US loves kings/emperors.

By contrast, the Dominican Republic stayed as a presidential system.
by konaraddi | 2026-02-21 01:10:14+00:00
> Taalas’ silicon Llama achieves 17K tokens/sec per user, nearly 10X faster than the current state of the art, while costing 20X less to build, and consuming 10X less power.

Insane gains, makes me excited for the future. Imagine Opus-like responses in <1 second.

I suspect power efficiency will be nearly entirely offset by increased usage but it’s more bang for watt.
by nodesocket | 2026-02-21 01:10:22+00:00
There is 100% insider-trading and manipulation of prediction markets. It's absurd some of the markets that are created. The most glaring example was this years super bowl halftime show. They had markets on songs Bad Bunny would sing, which song he would sing first, etc. You're telling me the thousands of people who had access to practices and information would not wager on this?
by dataflow | 2026-02-21 01:11:12+00:00
> especially as engineers who make their living by creating intellectual property and probably wouldn’t want to see control of it seized randomly

The premise of your question seems surprising.

1. In what sense the DMA enables seizure of control of intellectual property? I haven't heard of seizure being part of this.

2. In what sense DMA does so randomly? The DMA's rules seem to be written down, not random. Where are you seeing randomness?

Also:

3. One intention of regulation is that you don't want one (or a few) entities, regardless of what they are, to gain too much power over your citizens' lives. They want power to be distributed, just like to America's 3 branches of federal government were designed to distribute power. Could you explain what specifically you find difficult to understand about people finding it immoral to give a single entity too much power?
by mindslight | 2026-02-21 01:11:15+00:00
0. Removing the nonsensical doctrines Presidential immunity the Supreme Court has created out of whole cloth, and drastically curtailing all pardon ability with something like requiring the approval of Congress.

(yeesh, I can't believe I forgot that. I started thinking about reforming sovereign immunity, concluded that was something more fine-grained that Congress could do that didn't need to be in the Constitution, and moved on)
by yndoendo | 2026-02-21 01:12:57+00:00
I have and watched it about four months ago.

Israel wouldn't take the Bradley Fighting vehicle because this know it was bad just by looking at it but the Pentagon doubled down and flawed designs.

Reminds me not to get tunnel focused with-in a company and keep looking around to see what outsiders are doing.

The talk about the AR-15 being flawed but not why. 1) Sold as a firearm that did not need to be cleaned and maintained which is 100% false. 2) It was a gas based system that push the debris in the barrow into the chamber. This is why Vietnam solders would place condoms over the end of the barrow. It took years to move it to the gas piston system which people use now.
by rvz | 2026-02-21 01:13:23+00:00
Fixing an outage is the same thing.

No person would admit to the outage that happened, but you will see them screaming that they are at $FAMOUS_COMPANY.

Anthropic has so many outages (every week)[0], that if there were a Polymarket, you could easily make millions for when another incident happens.

[0] https://status.claude.com/
by egonschiele | 2026-02-21 01:15:39+00:00
So much of Reddit is brain rot now, it's unbelievable. A sample of subreddits: /r/memzy, /r/evilwhenthe, /r/JustMemesForUs.

Seriously, if I was in charge of these companies, I'd shut this shit down. I know it drives clicks, but do we want to live in a world where people consume this garbage? And not just a few people!
by ianbutler | 2026-02-21 01:16:12+00:00
Nothing, do that! It's not just about Show HN. If you're asking for feedback you're clearing a lot of the problem right there. These are not who I'm talking about. You cultivate some measure of taste right there actually, just by trying to learn about the people you are potentially building for. I am talking about people who post here, reddit, twitter, reddit again etc etc and never ask for feedback they assume their stuff is a gift to the rest of us.
Show HN: I created a beautiful number animation library for React Native
by WingenderA | 2026-02-21 01:16:24+00:00
Hi!

I've been frustrated with the fact that the beautiful NumberFlow library for web (link) is not available on React Native - a platform that I think is much more animation native than the web is. And there are no alternatives of the same quality available. So I reimplemented it myself, basically from the ground up.

Introducing Number Flow React Native.

I am aiming for this to be the best number animation library for React Native.

- Beautiful animation easing directly inspired by web NumberFlow
- Supporting both Native and Skia versions
- Full i18n support for locales, things like compact or scientific notations, etc.
- TimeFlow component for timers and counters
- Custom digit bounding for things like binary
- Supporting 37 different numeral systems such as Arabic, Thai, and many others
- A dedicated, shared worklet mode for as much FPS as possible perfect for sliders or gestures for example
- Built on top of React Native Reanimated v3+
- Also supports web via Expo Web

Please check out the docs: https://number-flow-react-native.awingender.com/docs
And star it on GitHub if you like it: https://github.com/Rednegniw/number-flow-react-native

Let me know what you think!
by ajuhasz | 2026-02-21 01:16:51+00:00
Some of the more magical moments we’ve had with Juno is automatic shopping list creation saying “oh no we are out of milk and eggs” out loud without having to remember to tell Siri becomes a shopping list and event tracking around kids “Don’t forget next Thursday is early pickup”. A nice freebie is moving the wake word to the end. “What’s weather Juno today?” becomes much more natural than a prefixed wake word.
by lucb1e | 2026-02-21 01:17:12+00:00
> If someone could and would steal valuables, it seems highly unlikely that he/she/it would notify you before doing it.

after* doing it. Though I agree with your general point

Note the parts in the email to the organization where OP (1) mentions they found underage students among the unsecured accounts and (2) attaches a script that dumps the database, ready to go¹. It takes very little to see in access logs that they accessed records that they weren't authorized to, which makes it hard to distinguish their actions from malicious ones

I do agree that if the org had done a cursory web search, they'd have found that everything OP did (besides dumping more than one record from the database) is standard practice and that responsible disclosure is an established practice that criminals obviously wouldn't use. That OP subsequently agrees to sign a removal agreement, besides the lack of any extortion, is a further sign of good faith which the org should have taken them up on

¹ though very inefficiently, but the data protection officer that they were in touch with (note: not a lawyer) wouldn't know that and the IT person that advises them might not feel the need to mention it
by shakna | 2026-02-21 01:17:17+00:00
Being able to change stylesheets, disable or enhance various JavaScript scripts, add notes and annotations, and other things, is exactly the idea of a user agent.

The user makes a request, and then does whatever they like with the answer. Not just whatever is sensible, but whatever they want to do.

If that concept somehow became accepted again... I think the accessible web might well become a solved problem, rather than an endless slog.
by AlotOfReading | 2026-02-21 01:17:28+00:00
The US government has been pretty good about cleaning up the UXO it knows about, which means what's left is the UXO it doesn't know about. You'll find it near most of the current and former testing ranges, particularly Yuma Proving Ground where there's trails leading right from the adjacent BLM land into areas with potential UXO. The only real barriers are a few signs and the law.
by tombert | 2026-02-21 01:17:34+00:00
It's not a terrible idea, but I'm not sure how that would work logistically.

When I use Codex to do vibe coding stuff, I don't usually have one big prompt, I usually have it do small things piecemeal and I iterate with it later. Maybe I'm using it wrong but it tends to be more "conversational" and I think that would be harder to share, especially considering I'll do things over dozens of sessions.

I suppose I could keep an archive of every session I've ever opened with Codex and share that, but thus far I haven't really done that.

Granted, I don't really share my stuff with "Show HN".
by xyzzy_plugh | 2026-02-21 01:18:22+00:00
Truly, what purpose does this serve? Defining a hierarchy without using is injecting immediate debt. Just introduce it when stuff goes there! If you really insist then at least put something in the folder. It doesn't take much effort to make the change at least a tiny bit meaningful.

Better yet just do the work. If you want make a commit in a branch that's destined to be squashed or something, sure, but keep it away from the shared history and certainly remove it when it's not needed anymore.
by willis936 | 2026-02-21 01:18:27+00:00
Loss is admitting defeat when you have a mature hardware team, decades of fans, and a brand that was born from, and reached its heights, from really connecting with what people want. That's fertile ground that got doused in salt. At some point you just have to admit that people don't want what they don't want. No reality distortion field will make people want crap games made without love bloated to the gills in microtransactions. Microsoft would rather shut the whole thing down than admit that though.
by aryonoco | 2026-02-21 01:19:10+00:00
I did this last year. Reluctantly. And using iOS still hurts. But it’s better than that Google crap.

I developed my own Android ROMs from 2009-2011, complete with my own tuned kernel. I ran the local Android developers MeetUp group and evangelised Android development. When Honeycomb launched I helped OEMs test their beta firmware. For free.

But as Google has become certified Evil, the direction of Android has been very clear. In practice I honestly can’t say it’s now any more open than iOS. Except it has a lot more avenues for Google to mine your data to sell ads. And the quality of third party apps on it is decidedly worse.

I thought long and hard about getting a Linux phone. But I need a good camera on my phone to take random snaps of kids/pets/etc. And the Linux phones just aren’t there.

I hate the shitty duopoly we have ended up with. But I now realise that the openness of x86 and pc as platform really was an accident of history.