MurphyA/hacker-news huggingface dataset:
by upboundspiral | 2026-02-27 19:52:35+00:00
The problem with laptops is that UEFI is a shadow operating system that keeps running after boot, with a bunch of security vulnerabilities. Furthermore all Intel / AMD chips have a microprocessor state called SMF which if you trigger it basically gives you carte blanche to do whatever you want.

"Trusted Boot" is a meme on x86. If you really want something like that you need to do what Oxide Computer is doing and rip out UEFI for good and implement your own secure boot chain.

Qubes is great but at the end of the day cannot protect against evil maid attacks to the level that pixel or apple phones can. Its great at making sure a browser exploit cannot steal your banking credentials you have open in a different virtual machine but cannot overcome the limitations of the platforms it builds off of.

So I understand why the GrapheneOS folks do what they do.

See also: "X86 considered harmful" by the founder of Qubes OS (posted in 2015!)

https://blog.invisiblethings.org/papers/2015/x86_harmful.pdf
by dadro | 2026-02-27 19:53:35+00:00
The recent releases of OpenClaw have made running it on docker/podman much easier. I've been running it on a stand alone Lenovo Thinkcentre running inside docker. For my needs the setup works well. There are some limitations like hardware and filesystem access with my workstation (macbook) but largely solvable and I like the isolation. For locking it down further, particularly on the network level someone recently released https://nono.sh/ which seems promising. I've been using https://clawchat.dev/ on my macbook for chatting with the openclaw agent. It is rough around the edges but gets the job done.
Show HN: OpenAI to Buy Babuger.com for $1B? (Just Kidding, I Built It)
by lyuata | 2026-02-27 19:54:42+00:00
The Reality: They didn't. But the tech is real. I’ve been building an AI SDR platform and I wanted to share the stack with the HN crowd.

The Project: Babuger
Babuger automates the entire outbound/inbound lifecycle. It trains on your best rep's scripts to qualify leads, handle objections, and book meetings 24/7.

The Problem: Traditional SDR teams are expensive ($150k/yr), have high turnover, and ignore "dead" leads.

The Solution: One human orchestrator managing 20+ specialized AI agents.

The Result: 90% task automation and 70% response rates on neglected pipelines.

The Tech Stack
I kept it modern and modular to handle complex multi-step reasoning:

Agent Orchestration: LangGraph. This was crucial for handling non-linear conversation flows (loops, conditional routing, and state management) that standard DAGs can't touch.

LLM Framework: LangChain. Used for prompt templating, output parsing, and integrating various toolsets (Gmail/Cal.com/HubSpot).

Frontend: Next.js. Managed the dashboard, live email thread previews, and real-time pipeline analytics.

Why I’m Posting
I’m looking for the "HN stress test." Is the agentic approach with LangGraph the right move for scaling to 10k+ interactions/mo, or should I be looking at a more custom state machine?

Check it out: Babuger.com
by cess11 | 2026-02-27 19:54:44+00:00
If one enjoys the Hyperion books, then it is highly likely one would also enjoy the Ilium books.

It's nice that he ruminated on these old stories these books riff on without being smug about it.

It's sad that he didn't manage to resist the fear based, fiercely reactionary politics of the last quarter of a century or so.
by masklinn | 2026-02-27 19:55:36+00:00
> Does such thing even exist?

AFAIK no. There are default stack sizes, but they're just that, defaults, and they can vary on the same system: main thread stacks are generally 8MiB (except for Windows where it's just 1) but the size of ancillary stacks is much smaller everywhere but on linux using glibc.

It should be possible to get the stack root and size using `pthread_getattr_np`, but I don't know if there's anyone bothering with that, and it's a glibc extension.
by autoexec | 2026-02-27 19:56:06+00:00
If AI were actually capable of delivering on the promises driving the bubble, the next generation of children won't grow up to get jobs at all unless they're serving or cleaning up after trillionaires, or selling their bodies. Thankfully, there's basically zero chance of AI delivering on those promises. It'll continue to be useful sometimes, in some ways, to some people, but I'm less than optimistic that most people will be feel like what they've gained was worth what they lost and that includes most CEOs.
by FarmerPotato | 2026-02-27 19:56:24+00:00
I, too, find it confusing. The "German cognate is closer" is not helpful!

I think the ö is significant. It could correspond to English ē, but not ei, -ine.

Under sʜᴇᴇɴ, Partridge [1] states that OE scēne, scȳne are related to G schön, from PIE *skauniz "Ultimately, to E sʜᴏᴡ."

I think we have two compartments here:

1. ö/ē words - schön, E shown, shewn. Under Partridge [1] sʜᴇᴇɴ

2. ei words - G schein and E shine. OE scīnan, under Partridge [1] sᴄᴇɴᴇ

[1] My favorite reference: Eric Partridge: _Origins: A Short Etymological Dictionary of English_. More concise than the OED, and you can carry it.

As an English speaker, I'm delighted by the borrowing "ser schön". It is the highest grade in English catalogs of ancient coins. "Shiny" is not a good quality in ancient coins!
by thewebguyd | 2026-02-27 19:57:42+00:00
As a last resort when all other options have failed? Yeah, if you value democracy and don't want to bend the knee and live under an authoritarian state. Ammo box is listed last for a reason, of course, all other avenues should be pursued first.

But that doesn't change the fact that the government isn't going to stop itself from overstepping the constitution, that duty falls with the people via protest, voting, lawsuits, and as a last resort, use of force.
by sgillen | 2026-02-27 19:57:58+00:00
Not sure if I agree with the christian references being incidental ... the first book is literally a retelling of the The Canterbury Tales, all the characters are on a pilgrimage. there are a bunch of religious groups with at least one being central to the story, there are cross shaped parasites that grant eternal life.

I still think you can enjoy it without caring much about religion.
by johnnyanmac | 2026-02-27 19:58:07+00:00
There's loads of funding. But the ones funding Qt and GTK aren't parties interested in things like cohesion or design standards. They just needed a way to deliver their product to the user in a faster way than maintaining 2-3 OS platform apps. Wanting that shipping velocity by its nature sacrifices the above elements.

The remnants of the dotcom era for web definitely helped shape it in a more design contentious way, in comparison. Those standards are created and pushed a few layers above that in which cross platform UI's work in.
by ASalazarMX | 2026-02-27 19:58:28+00:00
Both replies to your question give you the two sides. It is a scary, stupid thing to give your house keys to, but it is also very interesting like two trains crashing.

Maybe a middle ground would be isolating it like the article suggests, and poking it with a stick (giving it limited, or newly created accounts) to see what it can do?
by tedd4u | 2026-02-27 19:58:29+00:00
I should also link Tim Cook's comments on "why China" from a talk in China at a Fortune event. https://www.youtube.com/watch?v=2wacXUrONUY

Transcript:

There's a confusion about China — let me at least give you my opinion. The popular conception is that companies come to China because of low labor cost. I'm not sure what part of China they go to, but the truth is China stopped being the low labor cost country many years ago. That is not the reason to come to China from a supply point of view.

The reason is because of the skill, and the quantity of skill, in one location, and the type of skill it is. The products we do require really advanced tooling, and the precision that you have to have in tooling and working with the materials that we do, are state-of-the-art, and the tooling skill is very deep here.

You know, in the US, you could have a meeting of tooling engineers, and I'm not sure we could fill this room. In China, you could fill multiple football fields. It's that vocational expertise that is very deep, very very deep here. And I give the education system a lot of credit for continuing to push on that, even when others were deemphasizing vocational. Now, I think many countries in the world have woken up and said, you know, this is a key thing and we've got to correct that. But China called that right from the beginning.
by warkdarrior | 2026-02-27 19:58:49+00:00
Which regulations? F-Droid seems to be governed by Dutch law (see https://commonsconservancy.org/dracc/0039/ ). Do they have laws prohibiting all apps with any violence or promiscuity?

(As an aside, if they indeed had to follow some Dutch law and remove Bible and Quran apps, maybe F-Droid can be hosted by freedom.gov, US govt's new anticensorship portal..)
by goku12 | 2026-02-27 19:59:04+00:00
> I don't think 2>&1 ever made any sense.

It's not that hard. Consider the following:

$ command &2>&1

The shell thinks that you're trying to run the portion before the & (command) in the background and the portion after the & (2>&1) in the foreground. There is just one problem. The second part (2>&1) means that you're redirecting stderr/fd2 to stdout/fd1 for a command that is to follow (similar to how you set environment variables for a command invocation). However, you haven't specified the command that follows. The second part just freezes waiting for the command. Try it and see for yourself.

$ command 2>1

Here the shell redirects the output of stderr/fd2 to a file named 1. It doesn't know that you're talking about a file descriptor instead of a filename. So you need to use &1 to indicate your intention. The same confusion doesn't happen for the left side (fd2) because that will always be a file descriptor. Hence the correct form is:

$ command 2>&1

> I think shell language is simply awful.

Honestly, I wish I could ask the person who designed it, why they made such decisions.
by gogopromptless | 2026-02-27 20:00:45+00:00
This is the article I send to people when they bang on about LLMs being just dumb parrots. Parrots can still be put amazing use [1] as this blue light heuristic shows. When I re-read this story now it feels completely natural to mentally replace young consultant with LLM and the story reads the same. I could totally see AI being applied in this boilerplate way.
by jugg1es | 2026-02-27 20:00:54+00:00
this is exactly what I mean though. Instead of the community building a better tool that we collectively contribute to and work with, genAI is going to silo all the good stuff with individual developers and teams instead. Because its so cheap to create these tools, no one is going to bother publishing new ones for everyone, so we will essentially be stuck with what we have forever now.
by yakkomajuri | 2026-02-27 20:01:15+00:00
I think this is pretty standard and similar to approaches that are evolving naturally (I've certainly used very similar patterns).

I'd be pretty keen to actually hear more about the Unikraft setup and other deeper details about the agent sandboxes regarding the tradeoffs and optimizations made. All the components are there but has someone open-sourced a more plug-and-play setup like this?
by tliltocatl | 2026-02-27 20:01:57+00:00
Because the kernel is the irreplaceable piece. None of what GNU did is: there are numerous implementations of coreutils and shells and at least one non-GNU production-quality compiler toolchain (clang-llvm), a few alternative libcs. And many distribution do actively use the non-GNU parts. But none of this is useful without the kernel that is compatible with computers people have. And the only usable kernel we have is Linux (while BSDs are out there too, they take a much different tightly-integrated approach to userspace).
by marcelglaeser | 2026-02-27 20:02:03+00:00
Hi HN, I'm the developer. I built this because I spent years grep-ing through massive SQL dumps to extract specific tables for local development and testing.

DumpCleaner is a native Swift/SwiftUI app that streams SQL files so memory stays low (~50MB even for 50GB+ files).

What it does:

• Drag in a .sql or .sql.gz file
• Pick tables, statement types (CREATE, INSERT, DROP), or filter columns
• Auto-detects MySQL, PostgreSQL, SQLite, SQL Server
• FK dependency detection + correct INSERT ordering
• Export a clean, filtered dump

Currently in beta — would love feedback: https://testflight.apple.com/join/bCj4h5yy

Happy to answer any questions about the architecture or streaming parser.
Show HN: AO – Deploy Python agents without managing production infrastructure
by mrtng | 2026-02-27 20:02:39+00:00
I built AO because I kept seeing teams spend weeks wiring up custom infra, only to get something hacky that doesn’t even scale, simply to run an agent in production instead of focusing on the agent logic.

AO lets you deploy python agents (currently langchain and langgraph) with a single command: ao deploy. It packages your code, handles the infrastructure, and you get automatic retries + backoffs, state persistence between crashes, scheduling, versioning, and more.

No more custom glue code. Just focus on the agent logic.

Would love feedback from anyone who has dealt with this pain. Happy to answer any questions.
by KronisLV | 2026-02-27 20:03:06+00:00
> No, you see this line or argumentation on every post critical of LLM's deficiencies. "Humans also produce bad code", "Humans also make mistakes" etc etc.

So your reading of this is that it's a deflection of the shortcomings?

My reading of it is that both humans and LLMs suck at all sorts of tasks, often in slightly different ways.

One being bad at something doesn't immediately make the other good if it also sucks - it might, however, suggest that there are issues with the task itself (e.g. in regards to code: no proper tests and harnesses of various scripts that push whoever is writing new code in the direction of being correct and successful).
by Sharlin | 2026-02-27 20:03:16+00:00
"Stede", besides German Stadt, Swedist stad, etc. is cognate to English stead, fossilized and now only occuring in the adverb "instead"/"in (someone's) stead" and a few compounds such as "farmstead" and "steadfast" (literally meaning "standing firmly (in place)"). "Steady" is of course also related.
by MetaWhirledPeas | 2026-02-27 20:03:24+00:00
> I'm not alone in finding the specific emphasis on drawing the line at domestic surveillance a bit odd

We've always been OK with this in the pre-AI era. (See the plot line of dozens of movies where the "good" government spies on the "bad" one.) Heck we've even been OK with domestic surveillance. (See "The Wire".) Has something changed, or are we just now realizing how it's problematic?
by smithoc | 2026-02-27 20:04:08+00:00
> Please correct me if I’m wrong.

You are, about pretty much all of this.

Being a market maker doesn't provide any special information. I'm guessing someone misunderstood something like Level II quotes (https://www.investopedia.com/articles/trading/06/level2quote...) as being information that hedge funds / investment banks / pros have that retail traders don't... but it's just semi-public information that anyone can pay for access to.

Jane Street also isn't doing pump and dumps, they're not in crypto discord channels hyping some coin or running bot farms of twitter accounts to talk up some stock.

They run several different types of trading that might interact with other people attempting pump & dumps though, which could impact in either direction- plausibly they might do a momentum trade that follows the direction of movement or they might recognize a price discrepancy happening and trade against it.

More accurately, they have complex models pulling in many, many signals to inform trading, and I'm being a bit reductionist to categorize it as these two things.
by lII1lIlI11ll | 2026-02-27 20:04:27+00:00
> Next time someone says “what a waste of a brain”, respond with “how much money are you willing to contribute monthly to distribute to “top talent” so that they can “work on more important things”?

Answer seems to be "approximately zero". One of those people has already suggested in another comment thread that the way to incentivize brilliant minds to work on “greater good” projects is to... raise their taxes so they wouldn't be able to properly monetize their skills anywhere. How dare they want financial security instead of toiling for big pharma for cheap?!
by realharo | 2026-02-27 20:05:24+00:00
"Local history" is a very popular feature in the JetBrains IDEs (just search HN comments), and I remember similar tools appearing on HN several times in the past (for example https://news.ycombinator.com/item?id=29784238), so clearly there is demand for such functionality (or at least was in the past, when almost all code edits were manual).
by brotchie | 2026-02-27 20:05:31+00:00
The way I solved this was that my open claw doesn't interact directly with any of my personal data (calendar, gmail, etc).

I essentially have a separate process that syncs my gmail, with gmail body contents encrypted using a key my openclaw doesn't have trivial access to. I then have another process that reads each email from sqlite db, and runs gemini 2 flash lite against it, with some anti-prompt injection prompt + structured data extraction (JSON in a specific format).

My claw can only read the sanitized structured data extraction (which is pretty verbose and can contain passages from the original email).

The primary attack vector is an attacker crafting an "inception" prompt injection. Where they're able to get a prompt injection through the flash lite sanitization and JSON output in such a way that it also prompt injects my claw.

Still a non-zero risk, but mostly mitigates naive prompt injection attacks.
by dyukqu | 2026-02-27 20:05:34+00:00
This reminds me of my all-time-favourite HN comment[0] (and a life lesson too):

This idea is captured nicely in the book "Art and Fear" with the following anecdote:
"The ceramics teacher announced on opening day that he was dividing the class into two groups. All those on the left side of the studio, he said, would be graded solely on the quantity of work they produced, all those on the right solely on its quality.

His procedure was simple: on the final day of class he would bring in his bathroom scales and weigh the work of the “quantity” group: fifty pound of pots rated an “A”, forty pounds a “B”, and so on. Those being graded on “quality”, however, needed to produce only one pot – albeit a perfect one – to get an “A”.

Well, came grading time and a curious fact emerged: the works of highest quality were all produced by the group being graded for quantity. It seems that while the “quantity” group was busily churning out piles of work – and learning from their mistakes – the “quality” group had sat theorizing about perfection, and in the end had little more to show for their efforts than grandiose theories and a pile of dead clay."

[0]https://news.ycombinator.com/item?id=22105478
by johnnyanmac | 2026-02-27 20:05:36+00:00
The issue lies in who enforces it. In theory, that's congress with the ability to impeach and convict members of SCOTUS.

I've also thrown around ideas in my head of state SC's chief justices having a channel to court marshal a SCOTUS and eject them with a supermajority ruling. Or a band of federal judges. But there's so much more involved there I haven't begun to consider.
by TiMagazine | 2026-02-27 20:06:21+00:00
Look, magnesium worked great for me, but here's the thing, it's wildly different for everyone. Your results depend on how deficient you actually are, what's going on with your hormones, cortisol levels, all that stuff. I'm not a doctor, obviously, but I've noticed it matters a lot.
I tried magnesium glycinate and felt super relaxed. Citrate gave me a different vibe. Oxide did nothing. But that's me. Other people might get completely different results.
There's also other stuff out there, Kava, Valerian root, Ashwagandha, Passionflower, CBD, L-Theanine. Some work for relaxation, but honestly, the effects vary wildly too. And some of them can actually do the opposite depending on the person. It's impossible to generalize, really.
My take? You gotta study yourself and experiment. See what actually works for you. If you're willing to take some minor risks and test things out, you'll probably figure out what helps. But don't expect a one-size-fits-all answer.
by charcircuit | 2026-02-27 20:06:24+00:00
Shoulder surfing for passwords is a tiny concern compared to how much these measures hurt ux. I am happy that the current trend is now to also let the user toggle off the * to see what you actually typed.

I don't know if these were added but to match security of other graphical password fields after submitting the password the terminal should clear the starts and while the password is being inputted it should protect the window so it can not be screen recorded.
by traceroute66 | 2026-02-27 20:06:45+00:00
> Curious, what is learned doing rounds that isn't taught in med school, that ChatGPT could benefit from?

Seriously ? ¯\_(ツ)_/¯

The textbooks are the theory.

The hospital wards are the practice.

The hospital wards are what shows you that the human body is complex and many times things don't happen like the textbook says it will.

And then there's the ICU, pediatric, geriatric and mental health wards where the patient often cannot even describe their symptoms ...
by globular-toast | 2026-02-27 20:07:07+00:00
A girl I was infatuated with told me to read Hyperion when I was in my early 20s. Never read a book to try to win someone's affections. It won't work, but what's worse is you won't even enjoy the book.

I read a lot of SF and just last year I thought it was about time I gave it another go. I couldn't put it down. Almost couldn't believe what I was reading, it was so good. Continued to read the other three and it was just a good all the way through. Was quite sad when I finished and it was all over.

It now has a permanent place in my library. I expect I'll enjoy it even more on my next reading. I can only dream of giving people as much joy as an author like Simmons.
by shad42 | 2026-02-27 20:07:16+00:00
There is a cost associated with each investigation (that the Mendral agent is doing). And we spend time tuning the orchestration between agents. Yes expensive but we're making money on top of what it costs us. So far we were able to take the cost down while increasing the relevance of each root cause analysis.

We're writing another post about that specifically, we'll publish it sometimes next week
by salawat | 2026-02-27 20:07:52+00:00
Huh. So the legacy of "worse is better" from the old Gen X days is starting to bite us in the ass due to the authenticity tax it represents when combined with an increasingly ossified corporate business structure that sees maximization of value extraction and minimization of cost(via maximized automated sampling of the environment) as the primary KPI rather than delivering increases in QoL through good service/quality goods to customers at good prices, good treatment and working conditions for workers, and maintaining good relationships with suppliers and business partners?

Say it ain't so!
by burnt-resistor | 2026-02-27 20:07:55+00:00
Bash and zsh also allow, and modern Borne-compatible shells (sh) might too:

echo >&2 error_message

On Linux, /dev/std* requires the kernel to do file name resolution in the virtual file system because it could point to something nonstandard that isn't a symlink to something like /proc/self/fd/XX and then the kernel has to check that that should hopefully point to a special character device.