MurphyA/hacker-news huggingface dataset:
by emaste | 2026-02-24 19:06:23+00:00
A lot of Linux kernel drivers are permissively licensed, or dual-licensed with a choice of GPL and a permissive license. This is especially common for vendor-developed drivers. From a hardware vendor’s perspective, broad license compatibility directly supports adoption: the more operating systems, hypervisors, and embedded environments that can incorporate the driver code, the wider the potential market for the hardware itself.
by TYPE_FASTER | 2026-02-24 19:06:43+00:00
In the story, they implemented table (building) and row (floor) level permissions simultaneously. So you had to swipe into the building, then in the elevator to get the elevator to stop at your floor.

I guess I could see contention possibly happening as described if everybody arrived almost simultaneously and both swiping points had very high latency. But why not keep the door checkpoints armed and disable the elevator swipes? That makes me think it's a contrived example.
by bombcar | 2026-02-24 19:06:52+00:00
https://support.apple.com/guide/icloud-windows/set-up-icloud...

> After you set up iCloud for Windows, you can use iCloud Passwords to access your passwords in Google Chrome, Microsoft Edge, or Firefox using a browser extension. You can also manage your passwords in the iCloud Passwords app.

Could be worth a try.
by marcprux | 2026-02-24 19:06:56+00:00
I am the author of the letter and the coordinator of the signatories. We aren't saying "nuh uh, everything's fine as it is." Rather, we are pointing out that Android has progressively been enhanced over the years to make it more secure and to address emerging new threat models.

For example, the "Restricted Settings"¹ feature (introduced in Android 13 and expanded in Android 14) addresses the specific scam technique of coaching someone over the phone to allow the installation of a downloaded APK. "Enhanced Confirmation Mode"², introduced in Android 15, adds furthers protection against potentially malicious apps modifying system settings. These were all designed and rolled out with specified threat models in mind, and all evidence points to them working fairly well.

For Google to suddenly abandon these iterative security improvements and unilaterally decide to lock-down Android wholesale is a jarring disconnect from their work to date. Malware has always been with us, and always will be: both inside the Play Store and outside it. Google has presented no evidence to indicate that something has suddenly changed to justify this extreme measure. That's what we mean by "Existing Measures Are Sufficient".

[^1]: https://support.google.com/android/answer/12623953

[^2]: https://android.googlesource.com/platform/prebuilts/fullsdk/...
by mikestew | 2026-02-24 19:07:05+00:00
There is no reason for this increase except the fact that they know people are too lazy to migrate away.

They're not wrong. I'm a geeky guy with a tech resume as long as your arm, and I'd really rather do something else beside research how to export 1PWD data to something else, then import to $TOOL_OF_CHOICE. I'm sure it's not all that hard, and maybe that's part of the problem: it's monkey work, not an interesting technical challenge, right up there with "clean the gutters".
by ctoth | 2026-02-24 19:08:23+00:00
I don't want to assume you didn't read the article, but this isn't really about the database engine. It's about the shadow schema that has grown up around the format. The database switch would serve as a flag day to unify things. It won't be a permanent fix, nothing at this scale ever is, and we'll probably need another migration in a few decades. Still worth doing.
by krapp | 2026-02-24 19:08:27+00:00
Seeing someone still enthusiastically carry water for the pedo in chief in 2026 is like seeing a dodo bird in the wild.

Bro I hope you're getting paid for this because otherwise your talents are going to waste. There are, like, only a dozen true believers left and they're all pedophiles and psychopaths just trying to avoid the inevitable. What are you still fighting for? The storm isn't coming.
by c22 | 2026-02-24 19:09:48+00:00
Technology is a force multiplier. When large, powerful, institutions adopt technology they can use the leverage to suppress liberty. (Though not all do to the same extent.)

However, large institutions are also slow to move, grow, and change. At the leading edge of technological adoption small groups and individuals can use the amplified power to resist supression.

The trick is to remain at the leading edge and to remind early adopters of the power they wield. If enough of us fight for liberty many institutions will follow.
by keeda | 2026-02-24 19:10:42+00:00
I'm imposing but could you try these runs again with this small change: Simply append “Make sure to check your assumptions.” to the question.

Note, it does not mention what assumption specifically. In my experiments, after the models got it wrong the first time (i.e. they weren't "patched" yet) adding that simple caveat fixed it for all of them except the older Llama models.

This is not the first time I've observed this; I found the same when the Apple "red herrings" study came out.

If these gotcha questions can be trivially overcome by a simple caveat in the prompt, I suspect the only reason AI providers don't include it in the system prompt by default is as a cost optimization, as I postulated in a previous comment: https://news.ycombinator.com/item?id=47040530
by atonse | 2026-02-24 19:11:01+00:00
That doesn't matter. It's not like we use 100% of our brain capacity for driving.

In fact, that's why radio/music/podcasts thrive. Because we're bored when we drive. We have conversations, etc. We daydream.

As long as the skills relevant to actually driving are on parity with humans, the rest doesn't matter.

In fact, in a recent podcast, Musk mused that you actually may have a limit of how smart you want a vehicle model to be, because what if IT starts to get bored? What will it do? I found that to be an interesting (and amusing) thought exercise.
by hamdingers | 2026-02-24 19:11:22+00:00
Wouldn't work very well as a phone though. The networks a 2012 phone support no longer exist. 2G and 3G are both fully shut down where I live. Even if you specifically got a 4G phone from 2012 it might not support VoLTE, so you'd be unable to make calls.

As a wifi internet device it would work but I'm not sure that's what OP is going for.
by fuzzfactor | 2026-02-24 19:11:37+00:00
No matter how long they have been working on something like this, you might just have something more advanced here.

Out of 101 interested developers, I can't image that all of them are also students.

A few may even be very experienced professionally, maybe even doing a good job working for a well-paying company.

I would take it as a compliment :)
by aliljet | 2026-02-24 19:11:42+00:00
The path to declaring yourself accredited is uniquely easy. Just say it. The whole space is deeply unregulated and unaudited. What makes it insane is that those middleman are making a small fortune exploiting this loophole protecting large companies from being forced to go public. The number is 2000 private investors. Rest assured, more than 2000 individuals have money in Stripe today. It's a total scam.
by 4midori | 2026-02-24 19:11:56+00:00
In response to a data request, Persona says:

Hi there,

Thank you for reaching out to Persona.

Please note that Persona primarily operates as a "service provider" or "processor" for its customers. We act as a "business" or "controller" only for specific services, such as identity verification for LinkedIn, FoxCorp, and Reusable Persona. To learn more about how Persona manages your personal data, please refer to our privacy notices, which can be accessed through the following link: https://withpersona.com/legal/privacy-notices

If you wish to exercise your privacy rights related to services where Persona is a "service provider" or "processor," please contact the entity using our service, as they are the "controller" of the data. We will assist the relevant customer to fulfill your data subject rights, but we do not handle such requests directly on their behalf.

For any privacy rights request related to services where Persona acts as a "business" or "controller," including identity verification for LinkedIn, FoxCorp, Reusable Persona, and personal data related to our sales, marketing activities, or website browsing on withpersona.com, please use our Data Subject Request (DSAR) available at the following link: https://withpersona.com/dsar

For all other inquiries, we will respond as soon as possible.

###

TL;DR we're not responsible, go talk to LinkedIn.
by scottious | 2026-02-24 19:12:19+00:00
Once you get over the hump and develop a certain amount of cardiovascular fitness, it stops being unpleasant and stressful.

The real problem is that most people don't feel like this is true. It really takes a solid 6ish months of earnest effort (AT LEAST 3x per week, probably more) to develop cardiovascular fitness. For some people, it'll take even longer.

I run an average of 6 days per week for the past 10+ years. At this point running is just about the easiest thing I do, it doesn't take any mental fortitude at all to do it. It wasn't always that way though, I used to dread it.
by hollow-moe | 2026-02-24 19:12:35+00:00
I don't know if this could count as "corrupting": I made the mistake of syncing my keepassxc database to my macbook with finder webdav client (nextcloud backend) it read the file alright but when I tried to write a new secret it helpfully wrote an empty file in place, wiping nextcloud file versions in the process.
Thankfully, Nextcloud was smart enough to move the previous file in the trash bin and I could restore it.
It seems keepassxc "save" procedure here was to delete the old file and replace it with a new one and something went catastrophically wrong in the process ?
Looking at the settings there's is a parameter for this method for particular circumstances but I didn't enable it back then. Now I just have a second database only on this mac synced to icloud and never letting it near my nextcloud again.
by Kwpolska | 2026-02-24 19:13:10+00:00
> So rather than risking sync issues uploading your 20MiB KDBX file on every minor change, you can upload just the 4KiB or so comprising that data.

Why is your KDBX file 20 MiB? It seems you are storing something that is not actually a good fit for a password manager, and expecting the entire world to change around you instead of storing those files in a more appropriate place.
by mothballed | 2026-02-24 19:13:17+00:00
The people that get convicted seems to be either rich people blatantly evading taxes or people that write entire books about not paying taxes. Last I looked at the data for a normal person to get convicted just for running late on payments you basically have to tell the IRS to go fuck themselves and then brag about it publicly and stir up enough people they have to make an example out of you so no one else gets ideas. I'm sure there's odd other examples but they seem to be rare.

By and large the IRS wants to squeeze you for what they can get, not burn up a bunch of public resources convicting people and hindering their ability to earn more money for the IRS.
by kube-system | 2026-02-24 19:13:35+00:00
Yeah, it is -- you're asking for restrictions on pieces of hardware unrelated to the original software other than the fact that someone decided to install it on there.

How would you feel if a piece of hardware came with a license prohibiting software developers from using encryption to secure their systems?

The root of the issue here is that phone hardware landscape is effectively a duopoly. It is an antitrust issue. Trying to use software licenses to do this 1) won't be effective because the duopoly will never use them, and 2) is like going around your ass to get to your elbow. Even if it did work it wouldn't get to the root of the issue. The law needs to fix the fact that almost all phones on the planet are controlled either directly or indirectly by two companies.
by copx | 2026-02-24 19:13:36+00:00
I remember when so-called "expert systems" written in Prolog or LISP were supposed to replace doctors. Then came the (first) AI winter after people realized how unrealistic that was.

Nowadays LLMs are supposed to replace doctors.. and that makes even less sense given that LLMs are error-prone by design. They will hallucinate, you cannot fix that because of their probabilistic nature, yet all the money in the world is thrown at people who preach LLMs will eventually be able to do every human job.

The second AI winter cannot come soon enough.
Show HN: GenogramAI – Create Genograms in Seconds
by veritas9 | 2026-02-24 19:13:47+00:00
Genograms are family trees used by therapists to map relationships, trauma patterns, and medical history across generations. They're incredibly useful. They're also a pain to make.

I built GenogramAI so you can just describe your family in plain English and get a properly formatted genogram in seconds. No learning specialized software. No manual dragging of symbols.

Therapists, social workers, and med students have been our early users — but honestly anyone curious about their family dynamics can use it.

https://genogramai.com
by Centigonal | 2026-02-24 19:14:06+00:00
Well, it's not exactly a fair comparison, since they're comparing a volume number with GDP, which is total value produced in a year. Volume numbers are usually much bigger than production numbers, since money moves around a lot.

If I pay a restaurant $200 for dinner and my three friends each venmo me $50 for their share, then the exchanged volume was $350, but only $200 worth of value was generated.
by staticassertion | 2026-02-24 19:14:18+00:00
It's just trade-offs. If you have a lot of data, s3 is just the only option for storing it. You don't want to pay for petabytes of storage in Dynamo or Postgres. I also don't want to manage postgres, even RDS - dealing with write loads that S3 handles easily is very annoying, dealing with availability, etc, all is painful. S3 "just works" but you need to build some of the protocol yourself.

If you want consistently really low latency/ can't tolerate a 50ms spike, don't retain tons of data, have <10K/s writes, and need complex indexing that might change over time, Postgres is probably what you want (or some other thing). If you know how your data should be indexed ahead of time, you need to store a massive amount, you care more about throughput than a latency spike here or there, or really a bunch of other use cases probably, S3 is just an insanely powerful primitive.

Insane storage also unlocks new capabilities. Immutable logs unlock "time travel" where you can ask questions like "what did the system look like at this point?" since no information is lost (unless you want to lose it, up to you).

Everything about a system like this comes down to reducing the cost of a GET. Bloom filters are your best friend, metadata is your best friend, prefetching is a reluctant friend, etc.

I'm not sure what I'm building. I had this idea years ago before S3 CAS was a thing and I was building a graph database on S3 with the fundamental primitive being an immutable event log (at the time using CRDTs for merge semantics, but I've abandoned that for now) and then maintaining an external index in Scylla with S3 Select for projections. Years later, I have fun poking at it sometimes and redesigning it. S3 CAS unlocked a lot of ways to completely move the system to S3.
Add drip email system with onboarding and coverage milestone emails
by nishiohiroshi | 2026-02-24 19:14:20+00:00
After you install GitAuto, you get a sequence of emails walking you through setup - but only the ones you actually need. Already merged the setup PR? That email gets skipped. No coverage data yet? The sequence pauses until there is. Hit 50%, 80%, or 90% coverage? You'll hear about it. Each email checks your actual state before deciding to send.
by jonahx | 2026-02-24 19:14:20+00:00
Few claims in the social sciences are more fully settled. I don't think you could find a researcher in the world at a major university making that claim that randomly selected children could be reliably turned into world-class mathematicians with enough training.

> How else would you explain the Polgar sisters?

Genetics is the obvious explanation. The father was clearly very intelligent.

Also to clarify: I agree that training and effort can have large effects, and that focusing on them is a good strategy. Over-believing in them is probably a good bias, even. But the idea that everyone is more or less the same except for effort is ridiculous.
by lukeschlather | 2026-02-24 19:14:36+00:00
It's a single XML file. Zip sounds like the worst of both worlds. You would need a new schema that had individual files at some level (probably at the "row level.") The article mentions SQLCipher which allows encrypting individual values separately with different keys. Using different keys for different parts of a kdbx sounds ridiculous, but I could totally imagine each row being encrypted with a compound key - a database-level key and a row-level key, or using PKI with a hardware token so that you don't need to decrypt the whole row to read a single field, and a passive observer with access to the machine's memory can't gain access to secrets the user didn't explicitly request.
by keeda | 2026-02-24 19:14:38+00:00
> They'll eventually train it to answer this specific question, and then it will perform worse in some other aspect.

Not necessarily. Simply asking models to "check your assumptions" -- note, without specifying what assumptions! -- overcomes a lot of these gotcha questions. The reason it's not in their system prompts by default is I think just a cost optimization: https://news.ycombinator.com/item?id=47040530
by duskwuff | 2026-02-24 19:14:44+00:00
> Automatically updating screenshots

By running the software and getting it into an equivalent state to the original screenshot? Impressive if true.

On the other hand, if you're just "updating" the screenshot by making the AI model imagine what it would look like with some code changes - that's worse than useless; it's likely to end up generating screenshots that won't match any released version of your software at all.
by mmooss | 2026-02-24 19:14:44+00:00
There are a only handful of prodigies regardless of what we're talking about, but I think that is a misguided way to look at the situation:

If my GP comment is true to some significant degree, it matters for people who are prodigies. It matters for the world, which benefits from the prodigies.

But I don't want to underemphasize the first or overemphasize the second. These are human beings, which is the overwhelming issue. They have the same needs and same importance as everyone else. That means we don't want to disregard their needs either because they are unusual and therefore more expensive to nurture, or because the world benefits from them and and doesn't care about their individual needs or thinks their needs can be sacrificed.

And on a similar basis, it has strong implications for all the other kids in the world, who need stable, loving, nurturing family.
by zeroxfe | 2026-02-24 19:15:20+00:00
> At some point you need to treat people as adults, which includes letting them make very bad decisions if they insist on doing so.

The world does not consist of all rational actors, and this opens the door to all kinds of exploitation. The attacks today are very sophisticated, and I don't trust my 80-yr old dad to be able to detect them, nor many of my non-tech-savvy friends.

> any more than it would be acceptable for a bank to tell an alcoholic "we aren't going to let you withdraw your money because we know you're just spending it at the liquor store".

This is a false equivalence.
by etothet | 2026-02-24 19:15:33+00:00
I've been a mostly happy 1Password customer with a Family plan for quite some time. This may cause me to jump ship.

My biggest issue with 1Password has been 1) how intrusive it can be in the browser, especially on mobile when it's too proactive to show its dropdown and just gets in the way of my experience. I know this is challenging because a mobile device is a small screen, but it is incredibly frustrating. 2) how bad the Safari extension. It regularly fails to load at all.

Aside from that, while you're absolutely correct - 1Password is still relatively inexpensive, let's look at the improvements thet mention:

1. Automatic saving of logins and payment details

Isn't this what 1Password has always done or am I misunderstanding?

2. Enhanced Watchtower alerts

I haven't seen any of these alerts ever help me.

3. Faster, more secure device setup

This I have noticed. It is very convenient

4. AI-powered item naming

This is weak sauce. I don't care for "AI" to help me name my logins/accounts/etc.

5. Expanded recovery options

I'm not sure what this is and how it's different than what they've always offered on a Family plan.

6. Proactive phishing prevention

Fine, I guess.
Show HN: Open-source EU AI Act compliance layer for AI agents (8/2026 deadline)
by shotwellj | 2026-02-24 19:15:45+00:00
We built AIR Blackbox — open-source compliance infrastructure for AI agents targeting the EU AI Act enforcement deadline on August 2, 2026.
If you're deploying LLM-based agents (LangChain, CrewAI, AutoGen, OpenAI Agents SDK) into production, the EU AI Act requires tamper-evident audit trails, human oversight mechanisms, data governance controls, and injection defense — for any system classified as high-risk.
Most teams we've talked to either don't know about the deadline or assume their existing logging is enough. It's not. Article 12 specifically requires logs that regulators can mathematically verify haven't been altered. Article 14 requires the ability to interrupt agent execution. Article 15 requires defense against prompt injection and data poisoning.
What we built:

Trust layers for LangChain, CrewAI, AutoGen, OpenAI Agents SDK, and RAG pipelines — each is a pip install that hooks into your existing agent code with ~3 lines of setup
HMAC-SHA256 tamper-evident audit chains — every agent decision, tool call, and LLM interaction gets logged to a chain that regulators can verify
ConsentGate — risk-classifies tool calls and blocks critical operations until approved
InjectionDetector — 15+ weighted patterns scanning prompts before they reach the model
WriteGate + DriftDetector (for RAG) — prevents knowledge base poisoning and detects retrieval anomalies
Compliance scanner — pip install air-compliance && air-compliance scan ./my-project tells you exactly which articles you're missing

Everything maps to specific EU AI Act articles (9, 10, 11, 12, 14, 15). Zero vendor lock-in, Apache 2.0, zero core dependencies on the trust layers.
The scanner is probably the fastest way to understand where your gaps are. It takes about 3 seconds to run on a typical project.
GitHub: https://github.com/airblackbox
PyPI: pip install air-compliance
Happy to answer questions about what the EU AI Act actually requires for AI agent deployments — we've read the full regulation and mapped it to specific technical controls.
by throwway120385 | 2026-02-24 19:15:46+00:00
Also included drinking from the fountain or sitting in seats or eating at a restaurant with people colored differently from you. I wonder what we're going to make "antisocial" in the next 50 years and whether or not we'll be punishing people for things we'll consider benign again in 75 years. The whole "let's surveil everything to stop all antisocial behaviors" might be going too far just like the idea that everyone should open carry to reduce crime.
by orbital-decay | 2026-02-24 19:16:27+00:00
But how is neuroplasticity relevant to consciousness, whatever it is?

>Their technology and architecture fundamentally prevents them from learning.

No? There's in-context learning which is actual learning, it's sample-efficient, and the result can be stored for a learning pipeline. Yes it's ludicrously crude and underpowered compared to neuroplasticity, but that's another question, there's nothing fundamental about this.