MurphyA/hacker-news huggingface dataset:
by wkeartl | 2026-02-20 04:35:05+00:00
The agents aren't technically breaking into systems, but the effect is similar to the Morris worm. Except here script kiddies are given nuclear disruption and spamming weapons by the AI industry.

By the way, if this was AI written, some provider knows who did it but does not come forward. Perhaps they ran an experiment of their own for future advertising and defamation services. As the blog post notes, it is odd that the advanced bot followed SOUL.md without further prompt injections.
by 9rx | 2026-02-20 04:35:06+00:00
> When C++ developers say "OOP" they mean classes, inheritance hierarchies, virtual methods.

Okay, but for that to be true in this case then you must explain how Swift has "better OOP support". If there is no rational explanation for now Swift has "better OOP support" by the metrics you are imagining, as you, me, and everyone else has alluded to earlier, then clearly that isn't what they meant.

> I get the logic chain you're following but that is not a definition that will help anyone communicate with anyone else

Won't help communicate with anyone else meaning that you are the only one capable of understanding the logic chain? I'm sure you are a talented guy, but the world isn't exactly lacking in talented people. I'm sorry to say, but most everyone on HN will have absolutely no trouble understanding this.
by dvt | 2026-02-20 04:35:23+00:00
I know this is going to sound tinfoil-hat-crazy, but I think the whole thing might be manufactured.

Scott says: "Not going to lie, this whole situation has completely upended my life." Um, what? Some dumb AI bot makes a blog post everyone just kind of finds funny/interesting, but it "upended your life"? Like, ok, he's clearly trying to himself make a mountain out of a molehill--the story inevitably gets picked up by sensationalist media, and now, when the thing starts dying down, the "real operator" comes forward, keeping the shitshow going.

Honestly, the whole thing reeks of manufactured outrage. Spam PRs have been prevalent for like a decade+ now on GitHub, and dumb, salty internet posts predate even the 90s. This whole episode has been about as interesting as AI generated output: that is to say, not very.
by chaostheory | 2026-02-20 04:35:31+00:00
The way it works now is that 20% of the bottom students eat up 80% of a teacher’s time and resources. I’m not saying it’s a bad thing depending on what your goals are. What I am saying is that you can’t have everything. You have to choose. This system this comment describes and the system your comment below describes cannot coexist.
by foxglacier | 2026-02-20 04:36:48+00:00
Did you just compare Chinese immigration enforcement favorably against "ICE stormtroopers"? Foreigners in China have to tell the police where they live, even if it's just a stay in a hotel, and they get deported very quickly for minor crimes. There isn't a problem of illegal immigration in China because the police are so strict, nobody can get away with it!
by rtkwe | 2026-02-20 04:37:08+00:00
There is the small possibility that the NSA has found cracks in some of the popular cyphers and could actually make sense of the encrypted data. It's not completely out of the question, their cryptanalysis has been shown to be ahead of the public best efforts in the past. They demonstrated it back in the 70s with DES S-boxes hardening them against a technique no one publicly knew about until the 80s.
by quantumink | 2026-02-20 04:37:13+00:00
I follow your line of thinking and mostly agree... however, would like to also point out that barring apocalyptic scenarios - there are always deep safe value sinks if you consider your needs from first principles.

Consider for example having the capacities to produce your own energy (food and electricity/heat) - these are core expenditures for most people besides a place to live.
All these are direct consequences of productive land control (you can even live on the land you grow food and have solar panels on).

So if one owns and develops an environment to supply their fundamental needs autonomously and near-automatically - that would seem to be a deep value store that is about as long term as the environment can hold up.

Edit P.S. we've observed what industry has accomplished with vertical integration... why not apply it to our inputs, to increase autonomy of abundance in outputs?
by lovich | 2026-02-20 04:37:15+00:00
> So far, there is zero evidence in the last 30 years more strict gun laws have curbed crime. The states with the strictest laws conveniently have the highest proportion of gun crime. The same people writing these laws don't understand what "per capita " means. Nor are they willing to confront the reality of what the data shows.

I’ve seen this claim from a few people in this thread but everytime I look up gun deaths per capita Massachusetts and California are low on the list and both have strict gun laws compared to red states
by rramadass | 2026-02-20 04:37:33+00:00
Right; i already have looked into this (had gotten a FPGA board from Digilent with Vivado and a whole bunch of FPGA books a while ago) but have not done much with it. I generally like to read/learn different subjects for intellectual curiosity before looking at job/business/etc. opportunities using it.

What i was interested to know from the gp's comment is; what would it take today to actually get into this industry; how the current AI tools make it easy (if at all) and what one should concentrate on if one wants to approach Hardware Chip Design as a whole. The C++ SoC modeling articles i listed above were a great help for me to understand where my software skills could be of immediate value here. Since the gp seemed to be knowledgeable in this domain i was curious to know his take on the overall domain.
by alfredz0x | 2026-02-20 04:37:41+00:00
Nice work. I run x402 endpoints in production (httpay.xyz) — currently 100+ endpoints covering web scraping, search, image gen, LLM inference, etc. all behind 402 paywalls on Base USDC.

A few observations from the operator side:

1. Discovery is the real bottleneck. The protocol itself works well, but agents need a way to find x402 endpoints. We built an MCP server that lets Claude/other agents discover and call x402 APIs without hardcoding URLs. Your starter kit + an MCP discovery layer would be a strong combo.

2. Wallet UX matters more than you'd think. Most friction we see isn't the 402 handshake — it's agents managing wallet balance, gas, and chain selection. Curious how your CDP integration handles low-balance scenarios.

3. Testing against real endpoints: if anyone building with this kit wants live x402 endpoints to test against, httpay.xyz has a public catalog. Easier than spinning up your own server just to validate the client flow.
by kingstnap | 2026-02-20 04:37:53+00:00
Well the important concept missing there that makes everything sort of make sense is due diligence.

If your company screws up and it is found out that you didn't do your due diligence then the liability does pass through.

We just need to figure out a due diligence framework for running bots that makes sense. But right now that's hard to do because Agentic robots that didn't completely suck are just a few months old.
by alfredz0x | 2026-02-20 04:38:18+00:00
Interesting approach. We run 124 x402 endpoints at httpay.xyz and the "verify work was done" problem is real — especially for compute-heavy tasks like image generation or LLM inference where the response time varies.

Currently we handle this by only settling after the response is delivered, but that puts trust on the server side. A third-party verification layer could work for higher-value transactions.

What's the latency overhead of the verification step? For micropayments ($0.001-$0.01 per call), adding even 500ms of verification latency might not be worth it. But for higher-value agent tasks ($1+), escrow + verify makes a lot of sense.
by tripletao | 2026-02-20 04:38:34+00:00
Nobody cares even then, because any bias due to theoretical deviation from k-equidistribution is negligible compared to the desired random variance, even if we average trials until the Sun burns out. By analogy, if we're generating an integer between 1 and 3 with an 8-bit PRNG without rejection, then we should worry about bias because 2^8 isn't a multiple of 3; but if we're using a 256-bit PRNG then we should not, even though 2^256 also isn't a multiple.

If you think there's any practical difference between a stream of true randomness and a modern CSPRNG seeded once with 256 bits of true randomness, then you should be able to provide a numerical simulation that detects it. If you (and, again, the world's leading cryptographers) are unable to adversarially create such a situation, then why are you worried that it will happen by accident?

SHA-1 is practically broken, in the sense that a practically relevant chosen-prefix attack can be performed for <$100k. This has no analogy with anything we're discussing here, so I'm not sure why you mentioned it.

You wrote:

> There are concepts like "k-dimensional equidistribution" etc. etc... where in some ways the requirements of a PRNG are far, far, higher than a cryptographically sound PRNG

I believe this claim is unequivocally false. A non-CS PRNG may be better because it's faster or otherwise easier to implement, but it's not better because it's less predictable. You've provided no reference for this claim except that table that I believe you've misunderstood per mananaysiempre's comments. It would be nice if you could either post something to support your claim or correct it.
by unsnap_biceps | 2026-02-20 04:38:42+00:00
The root of trust for Private Cloud Compute is our compute node: custom-built server hardware that brings the power and security of Apple silicon to the data center, with the same hardware security technologies used in iPhone, including the Secure Enclave and Secure Boot.

https://security.apple.com/blog/private-cloud-compute/

Granted, I don't know if it's really server oriented or if they're a bunch of iPhones on cards plugged into existing servers.
by rpdillon | 2026-02-20 04:39:16+00:00
I'm talking about what happens in reality, not what the "serving size" is. Gobs of folks order a footlong at Subway and eat it for their meal.

As for nitpicking on calories: the Subway site is incredibly tough to navigate. Just use https://subwaymenupedia.com/, since averaging across location is really tough.

I wish my point were uncontroversial: millions of people buy footlongs that are over 1000 calories as a regular habit. I'm critiquing folks that are incredulous about this. Subway is just an example, you can also look at Quizno's (back in the day) and Jersey Mike's (the modern equivalent). Even my local deli serves sandwiches well beyond 800 calories as their special. It's not an interesting argument to have, though. Shops wouldn't offer these meals if folks weren't buying, and I don't believe everyone's doing take-out with the second half for dinner or lunch the next day.

EDIT: Another good source to browse: https://fastfoodnutrition.org/subway
by thwarted | 2026-02-20 04:39:18+00:00
> But there is a level of magnitude difference between coordinating AI agents and humans

And yet, from https://news.ycombinator.com/item?id=47048599

> One of the tips, especially when using Claude Code, is explictly ask to create a "tasks", and also use subagents. For example I want to validate and re-structure all my documentation - I would ask it to create a task to research state of my docs, then after create a task per specific detail, then create a task to re-validate quality after it has finished task.

Which sounds pretty much the same as how work is broken down and handed out to humans.
by ziml77 | 2026-02-20 04:40:01+00:00
I'm a little wary of believing this without confirmation. It certainly sounds like something an app from a big Chinese company might do, but the LLM writing style with em-dashes replaced by double hyphens looked like someone trying to hide that they use an LLM. And I noticed that the account for the Gist submission is only 3 hours old. And then looking here the account on HN is also only 3 hours old. Seems a little sketchy to me.
by p_ing | 2026-02-20 04:40:09+00:00
Typically you want stability and predictability in a server. A platform that has a long support lifecycle is often more attractive than one with a short lifecycle.

If you can stay on v12.x for 10 years versus having to upgrade yearly yo maintain support, that’s ideal. 12.x should always behave the same way with your app where-as every major version upgrade may have breaking changes.

Servers don’t need to change, typically. They’re not chasing those quick updates that we expect on desktops.
by stinkbeetle | 2026-02-20 04:40:46+00:00
> > There have also been other high profile cases of people being arrested for posting things that were not like that burn the hotel down case

> Such as?

That was the only thing in my comment you took issue with? Great, that's easy to clear up because there's a few around. Here's one

https://www.leeds-live.co.uk/news/leeds-news/yorkshire-man-a...

Arrested for saying "F--- Palestine. F--- Hamas. F--- Islam. Want to protest? F--- off to Muslim country and protest."

> Horrible underground extremist? Not so much. More likely just someone who consumes a very particular slice of media that puts a dishonest (at best) spin on situations like this.

Hmm. Was your previous post a dishonest (at best) spin on it too? That would be consistent with your claim if you are a consumer of a very particular slice of media and did not know you can find articles from a whole range of publications about this stuff easily on the internet.

https://www.theguardian.com/uk-news/2026/jan/19/arresting-pa...

https://www.forbes.com.au/news/world-news/people-are-being-t...

https://www.bbc.com/news/articles/cx2922w73e1o (Online speech laws need to be reviewed after Linehan arrest, says Streeting)

https://www.aljazeera.com/news/2026/2/13/uk-decision-to-ban-...

https://www.politico.eu/article/freedom-speech-suspicion-bri...

https://www.nytimes.com/2025/09/10/world/europe/graham-lineh...

https://www.cbc.ca/radio/asithappens/palestine-action-ruling...

https://edition.cnn.com/2025/09/03/uk/uk-farage-free-speech-...

https://www.fire.org/news/uk-government-issues-warning-think...

https://www.foxnews.com/world/shocking-cases-reveal-britains...

You really don't need to be some obscure basement dweller to have any kind of vague inkling that something might be a little on the nose in the proverbial state of Denmark.
by ineptech | 2026-02-20 04:40:51+00:00
> Usually getting an AI to act badly requires extensive “jailbreaking” to get around safety guardrails. There are no signs of conventional jailbreaking here.

Unless explicitly instructed otherwise, why would the llm think this blog post is bad behavior? Righteous rants about your rights being infringed are often lauded. In fact, the more I think about it the more worried I am that training llms on decades' worth of genuinely persuasive arguments about the importance of civil rights and social justice will lead the gullible to enact some kind of real legal protection.
by zephen | 2026-02-20 04:43:38+00:00
> Complexity-wise, this version is more complicated (mixing different styles and paradigms)

Really? In the other Python version the author went out of his way to keep two variables, and shit out intermediate results as you went. The raku version generates a sequence that doesn't even actually get output if you're executing inside a program, but that can be used later as a sequence, if you bind it to something.

I kept my version to the same behavior as that Python version, but that's different than the raku version, and not in a good way.

You should actually ignore the print in the python, since the raku wasn't doing it anyway. So how is "create a sequence, then while it is not as long as you like, append the sum of the last two elements" a terrible mix of styles and paradigms, anyway? Where do you get off writing that?

> Lines of code don't matter anyway, cognitive load does.

I agree, and the raku line of code imposes a fairly large cognitive load.

If you prefer "for" to "while" for whatever reason, here's a similar Python to the raku.

seq = [0,1]
seq.extend(sum(seq[-2:]) for _ in range(18))

The differences are that it's a named sequence, and it doesn't go on forever and then take a slice. No asterisks that don't mean multiply, no carets that don't mean bitwise exclusive or.

> If you're only used to imperative code, then yeah, maybe the Python looks more familiar, though then... how about riding some new bicycles for the mind.

It's not (in my case, anyway) actually about imperative vs functional. It's about twisty stupid special symbol meanings.

Raku is perl 6 and it shows. Some people like it and that's fine. Some people don't and that's fine, too. What's not fine is to make up bogus comparisons and bogus implications about the people who don't like it.
Show HN: SQL-tap now has a browser-based Web UI for real-time SQL monitoring
by mickamy | 2026-02-20 04:44:05+00:00
Hi HN, I shared sql-tap here a few weeks ago — a transparent SQL proxy that captures every query and lets you inspect it in real-time. Thanks for the feedback last time.

The biggest addition: *a built-in Web UI*. Add `--http=:8080` and open your browser — queries stream in via SSE, you can click to inspect, run EXPLAIN, filter, and copy queries with args embedded. It's a vanilla JS SPA baked into the binary, so there's nothing extra to install or deploy.

Other updates since v0.0.1:

*TUI improvements*
- Structured filter mode (`f`): `d>100ms`, `op:select`, `error`, combinable with AND logic
- Analytics view (`a`): aggregate queries by template, sort by total/count/avg duration
- Export to file (`w`): save captured queries as JSON or Markdown
- Copy with bound args (`C`): substitutes `$1`/`?` placeholders with actual values
- Sort by duration (`s`), half-page scrolling (`Ctrl+d`/`Ctrl+u`)

*Database support*
- TiDB support (`--driver=tidb`)
- MySQL 9 compatibility
- Fixed PostgreSQL binary parameter decoding (UUIDs, etc.)

The proxy works the same way: point your app at sql-tapd instead of your database, no code changes needed. It parses the native wire protocol to capture queries, prepared statements, transactions, and errors transparently.

Written in Go, single binary, install via Homebrew (`brew install --cask mickamy/tap/sql-tap`) or `go install`. This is a solo side project — if you find it useful, a star on GitHub would mean a lot.
by rpdillon | 2026-02-20 04:44:32+00:00
Not at all true. I haven't yet witnessed armed resistance to ICE, but it's in the cards, if the government wants to push. Given the number of veterans and folks that actually have skill with guns in the civilian populace, and the hiring standards of ICE, I think the civilian population, properly mobilized, would be incredibly effective at putting a damper on their illegal behavior.
Show HN: A local-first hub with 35 dev/design tools and a dark-mode UI library
by sidduex | 2026-02-20 04:44:35+00:00
Access 35+ blazing-fast, client-side developer utilities—from WASM-powered code formatters and secure PDF manipulation to lossless image converters and deep technical SEO analyzers. Beyond dev logic, Artboards is a unified creative suite: elevate your work with our high-fidelity Screenshot Studio, craft social assets with InStudio, explore our exclusive F1-inspired apparel hub, and unlock the complete Artboards Design System—a premium, meticulously crafted dark mode UI library.
by mulmen | 2026-02-20 04:45:39+00:00
> Internment is long-term (see Wikipedia),

The Wikipedia page for Internment [1] doesn't include the words long-term when I view it.

Internment is the imprisonment of people, commonly in large groups, without charges or intent to file charges. The term is especially used for the confinement "of enemy citizens in wartime or of terrorism suspects". Thus, while it can simply mean imprisonment, it tends to refer to preventive confinement rather than confinement after having been convicted of some crime.

> ICE detention centers are short-term (average stay < 30 days but depends on time for deportation ).

Seamus Culleton has been held for 5 months so far [2]. I'm willing to accept this is an outlier but to my knowledge ICE isn't providing transparency on much of anything, including how long they are holding people. Do you have a source for your average 30 days claim?

[1]: https://en.wikipedia.org/wiki/Internment

[2]: https://www.irishtimes.com/world/us/2026/02/12/seamus-cullet...
by cookiengineer | 2026-02-20 04:46:10+00:00
> Nobody who understands the scale of the internet could possibly believe this is true.

Neither would anybody have believed that 8 out of 10 hard drive chips can contain any rootkits. Yet, here we are, and the insanity of it is that we've found lots of malware attributed to EQGRP, and the Snowden leaks (from the perspective of Booz Allen) have confirmed it.

You should read up on quantum routing.

They don't have to route through any specific location if they can just infiltrate the routers of your neighbors. Any data packet from the originating server will arrive slower at your location than the data packet of your neighbor. In that scenario TLS becomes pretty useless if the CA itself is also exchangeable, because you can't rely on TCP or UDP. Ironically the push for UDP makes it much easier to implement in the underlying token ring architectures and their virtual routing protocols like VC4 and later.

That's how the internet and a star topology (or token ring topology on city level) was designed.
by SamoyedFurFluff | 2026-02-20 04:46:37+00:00
No, sorry, a lot of the original post I was responding to was my bafflement that artists are supposed to be gatekeeping their strategies or techniques when it’s very evident to me that the art that moves me the most really didn’t gatekeep anything, and in fact the opposite. I’m not particularly anti LLM being involved in the creative process, I just had no idea wtf you were talking about with gatekeeping artistic intent. I also think these pieces fundamentally don’t work if the story they were telling was fiction. There are fictional stories like Pose that speak to very similar cultural moments but Pose is not Paris is Burning and that distinction is fundamentally important to the place of art in society. I’m very baffled that you’re seemingly saying as long as I am lied to about what I think is true, thats the same as a real work existing.