MurphyA/hacker-news huggingface dataset:
by Aristarkh | 2026-02-17 02:51:10+00:00
Treating generated code in unknown languages as a black box creates significant risk, particularly regarding security vulnerabilities or race conditions that functional tests often miss. If that unvetted code causes data corruption or a production outage, how do you handle the immediate remediation and liability without the internal expertise to debug it? Have you considered using a secondary, distinct model specifically prompted to act as an adversarial "inspector" to critique the architectural decisions of the first? I'm curious if you rely solely on end-to-end testing or if you implement strict sandboxing to limit the blast radius of code you can't manually review.
by julianeon | 2026-02-17 02:51:22+00:00
I've been giving this a lot of thought. This is my take.

First: the audience is NOT software devs. Because as you've surely noticed if you are a software dev, you can do most of the things that OpenClaw can do; if it offers improvements, they seem very marginal. You know, "it makes web apps" I can do that; "it posts to Discord programmatically" I can code that; etc. Maybe an AI code buddy shaves a few minutes off but so what. It's hard to see what the hoopla is about, for a dev.

However, if you're a small business owner of some kind, where "small business" is defined by headcount (not valuation - meaning this can include VC's), it really seems like it's been a big unlock.

For a person like that, adding a 10k/mo expense is a natural move. And, at that price point, an AI service for 2k/mo is more than competitive: it's a savings.

The other part is that I think a lot of people have gotten used to human-in-the-loop workflows, but there's a big step up if you can omit the person.

Combining this w/the observation above, there were a lot of small business owners who were probably stymied by this problem: they had a bunch of tasks across departments that were worth like $2k/mo to do but couldn't fill (not enough in salary, couldn't be local). AI fits naturally for that use case. For them, it works.
by westurner | 2026-02-17 02:51:37+00:00
The IETF spec lists a number of justifying use cases. SXG was rejected then for a number of reasons IIUC

Browsers check SRI integrity hashes if they're there

There's HTTP-in-RDF, and Memento protocol. VCR.py and similar can replay HTTP sessions, but SSL socket patching or the TLS cookie or adding a cert for e.g. an archiving https proxy is necessary

Browser Devtools can export HAR HTTP archives

If all of the resource origins are changed to one hostname for archival, that bypasses same origin controls on js and cookies; such that the archived page runs all the scripts in the same origin that the archive is served from? Also, Browsers have restrictions on even inline JS scripts served from file:/// urls.

FWIU Web Bundles and SXG were intended to preserve the unique origins of resources in order to safely and faithfully archive for interactive offline review.
by FireBeyond | 2026-02-17 02:51:40+00:00
This is another of those "no idea how to fix it says only country where it's a problem" type issues.

The only two countries where direct-to-consumer prescription advertising is legal are the US and New Zealand, and my belief/understanding from my time living in Australia was that informal or other trade agreement negotiation pressure from the US was at least one of the reasons for that.

> The "placebo effect" may contribute to a success of a drug. Maybe drug ads help start this psychological process through the visuals in their ads.

So in theory, US responses to medications should be notably better than in other countries, right?

> I'd say they don't really explicitly mislead

I'd disagree - in the realm of mental health drugs, many ads have such vague handwaving as to be useless (where to me is that the misleading intent is to get you asking your doctor about a specific drug regardless of what's going on) - "Do you have trouble starting your day? Cymbalta could help! Ask your doctor! Eli Lilly can help with the cost!"
Show HN: Purely Vibe Coded Asmongold Simulator
by spirodonfl | 2026-02-17 02:51:58+00:00
I hate AI (as it currently is and currently is used) and I've avoided doing a purely vibe coded project for a long time. Any time I even attempted to vibe code for a few minutes, I immediately felt disgust.

For research purposes, I gave this a proper go and created an Asmongold Simulator game.

My opinion hasn't changed on "vibe coding"
by Aristarkh | 2026-02-17 02:52:14+00:00
Moving agent execution off localhost makes sense for parallel workflows, but giving an LLM direct provisioning power is terrifying from a billing perspective. If the agent gets into a retry loop or hallucination spiral, it could easily spin up expensive GPU instances (like that B200 example) without tearing them down. Do you enforce hard budget caps or instance-count limits at the API key level to prevent runaway provisioning? Also, how do you handle SSH key lifecycle management—are keys rotated per session to ensure no lingering access remains if the teardown command fails?
by bmurphy1976 | 2026-02-17 02:52:16+00:00
Well, then our disagreement is that I feel we were already going at 1000km/h. Nowhere did I say we should keep doing this or it was a good thing or we should ignore it. My point is simple: we already needed stop a long time ago.

Let me re-use your analogy. We were already driving off a cliff, and we are trying to blame the fact that we're pushing on the gas and accelerating however we're ignoring that we were already heading that way and brake lines were cut.
by Beestie | 2026-02-17 02:52:30+00:00
I can't help but notice the exact wording of FB's response - or rather what they didn't say.

If someone asks me to do them a favor, I have basically three options for a reply:

• I can and I will;

• I can but I won't; or

• I am not able to.

FB's answer was not option 3.
by gerash | 2026-02-17 02:52:34+00:00
I'm sorry this sounds like hyperbole to say the least.

idk about their accuracy but "error free"?

Also do you understand the amount of compute and network bandwidth necessary to index and track billions of people by processing exabytes of streaming footage constantly with heavy computer vision models. who's integrating all these different camera systems to start with?

These claims sound like they come from someone who hasn't done these things in real life.

Tangentially, it seems like Israel tech scene has so many players involved in spyware/malware and surveillance.
by aristofun | 2026-02-17 02:52:57+00:00
This (elderly) is the ultimate UX test that most products and apps and websites fail miserably. Modern UX is a joke.

I wonder how we got so low from standing on the giants shoulders in the early days (I still miss my Sony Clie Palm OS organizer as being superior in its main goal organizing than any ios app I've tried after that).

Were we working for too long inside our comfy IT bubble echo chamber?

Or is it just a general quality problem and 2% law? With design just being more sensitive and more overlooked area (there is not much opportunities for innovation there to hype and inflate your CV with).
by Aristarkh | 2026-02-17 02:53:08+00:00
The DOM-native architecture is a clever way to bypass API integration, but it introduces significant operational risk regarding state management. Since this agent executes checkouts and form fills, a hallucination here isn't just wrong text—it’s potentially an erroneous charge or data loss. How do you handle liability or remediation if the agent misinterprets a UI element and executes an unwanted transaction? Does the script enforce a "human-in-the-loop" confirmation step for high-stakes actions like payment submission, or is the goal full autonomy regardless of confidence levels?
by add-sub-mul-div | 2026-02-17 02:53:47+00:00
We don't know if it will take the form of a net drop in headcount at all, or if white collar labor will be broadly replaced with the same headcount of low paid fungible AI operators.

But we can say that mass displacement of labor in one form or another is the goal because it's the only way to explain the amount of investment that's going into it.
by carlual | 2026-02-17 02:53:56+00:00
This closely aligns with what I expect ZenStack could help in the AI era, which you could tell from the two demos I created :

-[MCP](https://zenstack.dev/blog/database-to-mcp)

-[Agent](https://zenstack.dev/blog/ai-agen)

From my experience, a declarative and flexible AuthZ layer is the cornerstone of everything.
by Aristarkh | 2026-02-17 02:54:10+00:00
Using progressive disclosure with Codex is a fascinating way to handle complexity, but game physics are notoriously difficult to validate via text-based checklists. Since collision detection and movement can be subtle or visual, how did your Playwright setup distinguish between "working" mechanics and edge cases like glitching through walls? I'm curious if the Implement -> Evaluate loop ever got stuck cycling on a specific bug where the agent couldn't satisfy the test criteria without human intervention. Did you have to define specific tolerance thresholds for the physics engine to prevent false positives in the evaluation phase?
by belorn | 2026-02-17 02:54:32+00:00
I would hazard a guess that the facial recognition will limit the search scope to people associated (to some degree) with your friends account and some threshold of metrics gathered from the image. I doubt it is using a broad search.

With billions of accounts, the false positive rate of facial recognition when matching against every account would likely make the result difficult to use. Even limiting to a single country like UK the number could be extremely large.

Let say there is a 0.5% false positive rate and some amount of false negatives. With 40 million users, that would be 200 000 false positives.
by King-Aaron | 2026-02-17 02:55:46+00:00
> I believe shopping malls often use such signals (wifi, bluetooth) to track what your travel pattern through the mall is.

I worked for a company about 18 years ago where we did just this. We also sold the technology to car dealerships who were very interested in our silent salesman stuff where you could tie interactions with your web campaign directly to the person walking past the dealership and preload the salesman with all their details.

Grubby stuff nearly two decades ago.
by MisterTea | 2026-02-17 02:56:14+00:00
Right but I'll be honest, I've never thought about looking up the people I've dated in the past. No one really talked about it when I was younger. I don't remember my mother telling me to do criminal background checks on people I'm seeing.

Happened to me. Went out with somebody who turned out to be a serial shop lifter who operated with a small gang of other shop lifters. Everything looked fine up front until they disappeared when we had plans without contact for days. Thought I was ghosted. Turns out they were arrested.

A friend went out with someone who destroyed his car after he broke up because she was violent twords him. He had to get a restraining order. A friend of his dug up a link to a FL police site. Turns out she did a little time down there for assaulting another woman, beating her with a coat rack during a fight. He never thought to look her up either and she seemed nice at first. Shit happens. Don't blame the victim for not being paranoid that everyone they're dating might be a criminal. Especially when there are damn good liars out there.
by parpfish | 2026-02-17 02:56:56+00:00
in the age of LLM-built side projects... what's the right venue for sharing these things with other people?

i feel like the expectations for a "Show HN" project are too high for a passing around a silly little toy that I had the robot throw together. product hunt is for things that are actual products/businesses. so maybe you throw it in a targetted subreddit for a niche interest group?

seems like there should be a marketplace for silly little side-projects, but i'm not sure how you keep it from getting overrun
by raw_anon_1111 | 2026-02-17 02:57:13+00:00
The ROI is from all of the junior developers you don’t have to hire to do the grunt work.

I work in consulting and I would have had to scope projects with myself as the lead and at least a couple of juniors to do the grunt work while I do some of the work myself and do the tech lead type work. Now I can do it all myself.
by thunderbong | 2026-02-17 02:57:15+00:00
Looks to me that the issue is with the PR process, not with open-source.

From the article -

> It's gotten so bad, GitHub added a feature to disable Pull Requests entirely. Pull Requests are the fundamental thing that made GitHub popular. And now we'll see that feature closed off in more and more repos.

I don't have a solution for this, I'm pointing to the flaw in the assumption that AI is destroying open-source.
by Aloisius | 2026-02-17 02:58:35+00:00
It reads like textbook mind reading to me.

The author does not actually know why people write with poor spelling/grammar nor truly how others would interpret them writing with with poor spelling/grammar.

They have a guess, but there are any number of alternate reasons why someone might write poorly. They could be technologically illiterate, fat fingered, easily frustrated, mirroring their children, need glasses, careless, etc.
by Cycl0ps | 2026-02-17 03:00:19+00:00
I’m in agreement with the blog post. I’ve been treating AI more like a tool and less like a science experiment and I’ve gotten some good results when working on my various side projects. In the past much of my time was taken up by research and learning the various little parts of how everything works. What starts as a little python project to play around with APIs ends with me spending 5 hours learning tkinter and barely making any API calls.
by dworks | 2026-02-17 03:01:24+00:00
I built an RLM workflow as a coding agent skill:
https://github.com/doubleuuser/rlm-workflow

It has two differences:
1. It does not store chat history, reasoning traces etc, only workflow artifacts (requirements, codebase analysis, implementation plan, etc). I frankly do not believe those things are relevant.
2. It is significantly simpler and more lightweight, using only markdown files
by itypecode | 2026-02-17 03:01:34+00:00
AI code review can be useful, but I always review the code it produces, coupled with intentional prompting with detailed tasks.

> But I wouldn't run my production apps—that actually make money or could cause harm if they break—on unreviewed AI code.

I hope no one is actually letting unreviewed code through. AI can, and _will_ make mistakes.

Nowadays > 90% of my code tasks are handled by AI. I still review and guide it to produce what I intended to do myself.
Show HN: Stop Losing LangGraph Progress to 429 Errors
by rjpruitt16 | 2026-02-17 03:01:42+00:00
Hey HN, I built this because I kept losing progress in LangGraph workflows when OpenRouter or OpenAI returned 429s.
The problem: You're 7 steps into an agent workflow. Step 7 hits a rate limit. Everything crashes. Restart from step 1.
Client-side retries don't help at scale:

100 workers all retry independently → retry storm
Sequential fallbacks are slow (try OpenRouter, wait 5s, try Anthropic, wait 5s)
No coordination across instances

So I built a coordination layer that:

Races multiple providers simultaneously (OpenRouter + Anthropic + OpenAI)
Coordinates retries across all workers (no retry storms)
Resumes workflows via webhooks (idempotent keys = checkpoints)

It runs on Fly.io's anycast network + BEAM for distributed coordination.
Architecture deep dive: https://www.ezthrottle.network/blog/making-failure-boring-ag...
Happy to answer questions about the approach or why BEAM made this possible when other languages would struggle.
by jason_oster | 2026-02-17 03:02:26+00:00
> This is literally the Gell-Mann Amnesia Effect in action.

Absolutely! But there is some nuance, here. The failure mode is for an ambiguous question, which is an open research topic. There is no objectively correct answer to "Should I walk or drive?" given the provided constraints.

Because handling ambiguities is a problem that researchers are actively working on, I have confidence that models will improve on these situations. The improvements may asymptotically approach zero, leading to ever increasingly absurd examples of the failure mode. But that's ok, too. It means the models will increase in accuracy without becoming perfect. (I think I agree with Stephen Wolfram's take on computationally irreducibility [1]. That handling ambiguity is a computationally irreducible problem.)

EWD was right, of course, and you are too for pointing out rigorous languages. But the interactivity with an LLM is different. A programming language cannot ask clarifying questions. It can only produce broken code or throw a compiler error. We prefer the compiler errors because broken code does not work, by definition. (Ignoring the "feature not a bug" gag.)

Most of the current models are fine-tuned to "produce broken code" rather than "compiler error" in these situations. They have the capability of asking clarifying questions, they just tend not to, because the RL schedule doesn't reward it.

[1]: https://writings.stephenwolfram.com/2017/05/a-new-kind-of-sc...
by jacquesm | 2026-02-17 03:02:48+00:00
So, I had a friend. Had because he's dead. He did this work for a decade and a half and then couldn't deal with it anymore. In that time he put countless assholes behind bars. At some point he stopped responding to my emails so I called the unit and they were absolutely devastated, this guy was the backbone of their operation, the one with by far the most computer experience of all of them. RIP Ronald.

It is very hard to imagine what the life of someone on the frontline is like, the ones that are really battling online scum. So take that 'think of the children' thing and realize that there are people who really do think of the children and it is one of the hardest jobs on the planet.

Quote from TFA:

"The BBC asked Facebook why it couldn't use its facial recognition technology to assist the hunt for Lucy. It responded: "To protect user privacy, it's important that we follow the appropriate legal process, but we work to support law enforcement as much as we can."

So, privacy matters to FB when it is to protect the abusers of children. How low can you go...
by rectang | 2026-02-17 03:02:52+00:00
> Frankly, I hope the mother was also charged.

Would you want her charged if she didn't even know?

There is nothing in the article suggesting that the mother conspired with her boyfriend, or that she even knew he was a sex offender. I can imagine a scenario where the mother blames herself for not knowing and is utterly destroyed by misplaced guilt. Who knows what actually happened? The article wasn't about that.
by nextaccountic | 2026-02-17 03:05:18+00:00
If the json has a natural key, you can add a json index pointing to it, at least in postgres. But this will probably have worse performance characteristics than adding a separate key column.

Also natural keys suck - if a bugged json comes with repeated key (or no key at all) you will be unable to save it to process it further (well unless you have a separate table to save them). Also some jsons won't be keyed

But storing something with no index at all is probably okay if you don't plan to query much (or if the dataset is tiny)
by LgWoodenBadger | 2026-02-17 03:06:41+00:00
“because it is possible to have race conditions surface even within a single database query.”

This brought back awful memories of MS SQLServer and JDBC. Way back when, maybe Java 1.5 or so, SQLServer would deadlock between connections when all they were doing was executing the exact same statement. Literally. Not the same general statement with different parameters.
by belter | 2026-02-17 03:06:53+00:00
He is a Nutter...As daft as they come...Mad as a box of frogs...Not the full shilling...

"Peter Thiel warns the Antichrist and apocalypse are linked to the ‘end of modernity’ currently happening—and cites Greta Thunberg as a driving example" - https://fortune.com/2026/02/04/peter-thiel-antichrist-greta-...
by zdragnar | 2026-02-17 03:07:20+00:00
Back when my wife and I were renting, we only found out our landlord was on the list because his parole officer stopped by and asked if he'd informed us as he was legally required to do.

We moved out rather quickly after that. If we were in a situation where we had to rent again, and went with an individual renting their own house rather than a company, checking out the registry is on the checklist of things to do.
by dakolli | 2026-02-17 03:07:26+00:00
I actually have zero clue what Sorcerer's apprentice is, or what you're getting at. I never said that it isn't useful for dumb tedious tasks that don't require much thought.

I was talking about critical tasks where human nuance is important, just because an LLM can produce a result, does not mean that the result is great. Not everything people work on are "features" delivered via http handlers.

I don't understand this new paradigm where everyone wants to brag about how quick they get X amount of work done. Its the long standing belief of pretty much any quality builder that quick != quality, and quick usually isn't necessary. I'm glad your KPIs are great though and your product is getting 2 months of features every two days... The world needs this!
by hattmall | 2026-02-17 03:08:16+00:00
I mean if you take now, from a year ago, vs a year ago from two years ago and then once more vs two years ago to three years ago, you wouldn't see the idea of a plateau in effectiveness or not?

I still have several projects I developed in mid 2024 where I felt the AI was really close but not quite good enough for production, and almost two years in they haven't gotten appreciably better to where I would be able to release an actual application.
by C6JEsQeQa5fCjE | 2026-02-17 03:08:27+00:00
The carnage was too documented for too long of a period of time for those words of yours to warrant a serious response. I know that the only way to possibly attempt to repair your image is to relentlessly repeat the bullet points over and over again and hope that the new generations hear more of your words and less of actual documented reporting, but there is no reason for the rest of us to dignify such attempts of yours with a serious discussion about what are now established facts. While you're staring at that mirror, try to find a semblance of a soul somewhere deep if any still exists there. Collectively.
by itishappy | 2026-02-17 03:08:56+00:00
The two views aren't necessarily in conflict. I don't appreciate Facebook's use of facial recognition technology, but they built it. I'm extremely disappointed they proceeded to use this technology to influence elections while fighting against making the data available to law enforcement. I understand this may not have been intentional on their part, but the result is the same, and I was not at all surprised by it.
by WalterBright | 2026-02-17 03:09:54+00:00
It's a free country and you can dress as you please.

But people will judge you by how you dress, and you will miss opportunities as a result, and you'll never know that this is happening.

As I mentioned earlier, people do react to me differently depending on how I dress. And I've known many people who align with your views on this, and they've all wondered why opportunity passed them by (or they realized they needed to change).

Can I ask: suppose you were charged with a crime. Your lawyer showed up in track shorts. Would you get another lawyer? I sure would.