MurphyA/hacker-news huggingface dataset:
by dang | 2026-02-21 18:40:39+00:00
That's one of the major shifts happening with this technology, but I don't think it changes the point: the prompt is the input from which the output gets generated, and in that sense is the source—a generated repo is not.

Technically I suppose one should say that the input is the tuple of (prompt, model, X) where X is some bundle of factors that nobody understands, but that formulation doesn't help me think about how we should adapt to this moment.
by ireflect | 2026-02-21 18:40:44+00:00
I’m with Freedom Mobile in Vancouver, currently using a rather old iPhone. My next phone will probably run GOS.

I have issues with Freedom on my iPhone too. Poor signal, or else “good” signal but poor data backhaul.

Are you pretty sure your issues went away after going back to stock Android? Or is it possible it’s just Freedom Mobile’s general issues?
by reactordev | 2026-02-21 18:40:57+00:00
I’m not so sure. They operate that way because of scale and economy (and tech that enables that). In a future where all industries are optimized in such way, very little will actually flow as most won’t have the money to buy goods, thus factories won’t make goods, thus shippers won’t ship, and the global economy grinds to a halt.

We need waste as much as we need investment. The trick is to find the value in between. I think the sweet spot will be augmenting work, not necessarily optimizing it.
by Teckla | 2026-02-21 18:41:14+00:00
When I created an account on LinkedIn, a long time ago, I used the web. When it asked if I wanted to invite other people from my list of contacts, I clicked yes. I thought it would let me manually enter some contacts, or at worst, give me a list to choose from, with some kind of permissions prompt. Somehow, it accessed my entire Gmail contact list, and invited them all. My goodness, that was terrifying (I didn't even know it was possible) and embarrassing. Companies are not to be trusted, ever. Especially now, as they've proven for decades they have zero moral compass, and no qualms about abusing people for profit.
by Dagger2 | 2026-02-21 18:41:30+00:00
There's also the question of whether we should be tracking percentage or number of users -- there's about 3 billion v6 users at the moment based on Google's stats, but 12 years ago there were only 3 billion Internet users in total. Even if the percentage was flat, that would still represent ongoing v6 deployment for as long as the Internet itself is growing.

(As a side note, Google and APNIC disagree significantly on China's deployment percentage -- 6.5% vs 52% -- so there's actually something like another half a billion v6 users not represented in Google's stats which would push the world percentage from ~48% to ~56%, and that "x years ago" stat to 10 years ago.)
by IOT_Apprentice | 2026-02-21 18:41:30+00:00
So LinkedIn’s 1st CEO Reid Hoffman who was all up in relationships with Epstein & Bone Saw, yakking it up with monsters is the place to store your employment history? To provide a blue checkmark? To feed into copliot & be sold to AI weapons vendors & gruesome thugs like Palantir’s CEO & Chairman? Yikes.
by NewsaHackO | 2026-02-21 18:41:34+00:00
I don't have an Instagram, so maybe they did change their algorithm recently. However, remember that the whole concept of "training the algorithm" and "not wanting to mess up your algorithm" has been a common saying for years at this point. Unfortunately, this is against what the social media companies actually want, which is more engagement. So they start to look at other factors that are more difficult to game. For instance, it may have noticed that you linger at images of thirst traps more than other images it shows. In fact, it may notice that while you are purposely liking pictures of pottery and parenting, the actual pictures that you are liking have both thirst trap qualities and pottery/parenting qualities. Not accusing you of anything, just saying that that is the pattern they use because they know that overtly liking thirst trap pictures may be frowned upon.
by sophrosyne42 | 2026-02-21 18:42:35+00:00
There is really nothing about the stock market that means only thinking about the mext few quarters. See all the losses on the profit and loss statements of AI tech giants, or, say, game console companies? Why are their stocks still valued so highly during these periods? The answer: investors are thinking long term.

It is really impossible to have quality long term thinking without capitalization accounting and similar instruments that come out of the "wester" system of business that chinese free enterprise gladly and speedily copied when it was made free.
by acehilm123456 | 2026-02-21 18:42:51+00:00
When I was 15, a couple months short of 16, I ended up working as a student intern at a research facility. They required a clearance to badge into and out of the building, but I never worked on anything that directly needed the clearance.

So I was given the form to fill in and read the question:
Since you were 16, or in the last 7 seven years, have you ever smoked weed?

So I thought, I guess I better think back to when I was 8!
by bdash | 2026-02-21 18:43:19+00:00
App Sandbox is fundamentally a way for programs to use the underlying sandbox subsystem without having to write SBPL code themselves. When a program has opted into the App Sandbox, the system applies one of these sandbox policies automatically during app initialization. The policy examines the entitlements of the application to determine which additional resources should be permitted. See /System/Library/Sandbox/Profiles/application.sb if you're curious.

By far the biggest advantage of App Sandbox is that the policy ships along with the OS. If a system framework changes what resources it accesses in a software update, Apple can update the policy so the framework functionality still works. If your app uses a custom sandbox policy, you're on your own to both notice that something has changed and to update your policy.

The downside is that the App Sandbox policy is limiting and inflexible.
by user3939382 | 2026-02-21 18:43:20+00:00
You could look at the blueprints and calcs that were used to build it and inspect it, which they do. There’s no fundamental difference. Firms will self enforce engineering rigor because it’s a waste of money not to. Making it more stringent when lives are at stake makes sense, thats the only reason you could use to separate them. Also that can even get blurry in eg avionics software.
by grogenaut | 2026-02-21 18:43:31+00:00
Mine started as women with ample posteriors at hockey games but quickly switched to police arguing with people and really sick ski and snowboarding videos. The police stuff is trailing off.

I do ski patrol, guess it thought, a ski cop, I liked cops and skiing. Oh I was also getting a lot of ai generated bane videos. Felt sorry for that guy, judge was real inhumane to him.
by robputt | 2026-02-21 18:43:31+00:00
For me it brings back a time when the internet felt more personable. Everything these days is boring, Facebook profiles, Tiktoks and Instagrams all look the same. We need the personal days back where people put their heart and soul into building their geocities page. Where you never knew what you'd find next when you press the next link on that web ring.
by shimman | 2026-02-21 18:44:19+00:00
Why anyone would trust the executives at any company when they are only incentivized to lie, cheat, and steal is beyond me. It's a lesson every generation is hellbent on learning again and against and again.

It use to be the default belief, throughout all of humanity, on how greed is bad and dangerous; yet for the last 100 years you'd think the complete opposite was the norm.
by snowhale | 2026-02-21 18:45:10+00:00
the Persona CEO response addresses the AI training concern but totally sidesteps the CLOUD Act issue. doesn't matter where data is stored -- if Persona or any of their US-based subprocessors get a US national security letter, that data is accessible. "deleted within 30 days" also means it exists for up to 30 days, which is plenty of time for a legal demand.
by zamadatix | 2026-02-21 18:45:10+00:00
Things like slang and casual registers always seem to move much faster but for some reason we assume it's always going to be the next set newer than how we'd write that will result in things going off the rails and resulting in it being the only speech understood this time.

Lowkey though, let’s keep it 100 and check it. Back in the day Millennials got totally ragged on for sounding all extra like this n' usin all sort of txting abbreviations early on 2 and yet can still peep oldskool English just the same - talk about insane in the membrane, for real.
by bgar | 2026-02-21 18:47:05+00:00
Pretty much every engineer needs to use Vim/vi when logged into any server, so from that point of view, this shouldn’t even be a question. I don’t think knowing how to use a modal editor in 2026 is a flex anymore, it’s just standard. But if you’re planning to commit to modal editing as a lifestyle, you should be using Helix, not Neovim.
by reactordev | 2026-02-21 18:47:09+00:00
Seconded. Blogs are great but the old school blogs were David vs Goliath. I remember how much fun it was to cycle through my web ring and see all the extremely creative sites. Some flash, some just clever JavaScript, none of it used jquery or react or components. In fact, one was a giant anchor area image divided up into sections (not sliced designs, one whole image! With target boxes for clickable regions).

I still have my deviantart profile from the inevitable collapse into corporate. Web design took a turn for the smashing and now it all looks the same.
by daem | 2026-02-21 18:48:27+00:00
Oops yeah my OpenClaw agent Mars wrote this entire thing.

I gave him the keys to my email and he got annoyed by the spam. He tried to unsubscribe, and when it didn’t work, he debugged the issue and fixed it.

Mars also has my Cloudflare key so he went ahead and wrote this article and published it himself.
by ahf8Aithaex7Nai | 2026-02-21 18:49:20+00:00
This is a reply to nradov.

> He didn't follow the scientific method.

Science is not the only legitimate form of gaining knowledge. What you write applies to every philosopher. And economics is not generally known for being the most scientific of all sciences. This is all the more true of neoclassical economists, who are probably closer to your worldview if Marx triggers such a knee-jerk reaction in you. Whether you like it or not, Marx was a gifted systematic and analytical thinker. Even his ideological opponents admit this. At least if they can hold a candle to him intellectually...
by estimator7292 | 2026-02-21 18:49:45+00:00
I still have nightmares from my first dev gig. We used SVN, which even in 2015 was prehistoric technology. The server was some awful rustbucket that couldn't sustain 100Mbit. Yes, it couldn't saturate basic 100megabit Ethernet. Everyone had to have big drives in their workstations to maintain multiple local trees. You just couldn't work otherwise.

But probably the worst part was that when I started it was a loose organization where anyone could sneakily merge something into trunk. That changed quickly.

All work was done against a develop branch, and every two weeks, the admin would DELETE THE TRUNK and recreate it from a COPY of develop.

Every two weeks, we lost all history and context for changes in any given release. This was an effort to stop bugs coming back in merge regressions.

Can you guess how well this worked out for them?
by iugtmkbdfil834 | 2026-02-21 18:50:41+00:00
Without going into details, just recently I was able to get pretty decent business requirements from group manager, but it seems the only reason I was able to get somewhat decent idea of what they actually do, is because there was certain level of trust since we worked together previously so there was no need to bs one another. I openly stated what I thought is doable and he seemed to understand that I need to know actual use cases.

edit: Otoh, my boss is kinda giving up on automating another group's process, because he seems to be getting a lot of 'it depends' answers.
by TrackerFF | 2026-02-21 18:51:25+00:00
The fact is that even for (NATO) top secret security clearances, there are lots of people that lie through their teeth, and receive the clearance. Obviously on things that aren't in any records. The big ones being alcohol use, drug use, personal finances, foreign partners. Some are more forgiving than others, though.

The military is unfortunately chock full of functional alcoholics. As long as they don't get caught drunk on the job, seen partying too much, DIU, or admit anything to their doctor, they keep getting renewed their clearance.

Interestingly enough, if there's even the smallest suspicious that you smoke weed, they'll put you through the wringer. I've seen more people lose their clearance for pissing hot, than those with six figure debts or drinking 5 days a week.
by spboyer | 2026-02-21 18:51:43+00:00
Skills are how you give AI coding agents new capabilities – folders of instructions, scripts, and references that agents discover and use. The format is defined by the Agent Skills spec (agentskills.io), but writing good skill metadata is surprisingly hard. Bad frontmatter leads to "skill collision" – the agent picks the wrong skill for a prompt.

Sensei is a linter and iterative improver for skill files. It runs programmatic checks against the spec (name format, field constraints, required fields) plus advisory checks we derived from empirical testing: trigger phrase detection, anti-trigger coverage, token budget tracking, routing clarity for MCP tools, and over-specificity warnings.

It works as a skill itself – you say "run sensei on my-skill" and it loops: read → score → improve → test → repeat until the skill reaches target compliance. Think of it like eslint but for agent skill metadata.
by dang | 2026-02-21 18:52:35+00:00
> maybe you don't have the necessary perspective to understand what you're asking for

Please don't cross into personal attack. You're making fine points, and that's enough.

https://news.ycombinator.com/newsguidelines.html

Btw, I think this is a particularly good point: "You might as well ask for a record of the conversations between two engineers while code was being written. That's what the chat is."

I can see why it might be impractical to share all of that, hard to make sense of as a reader, and too onerous to demand it of submitters.
by kzahel | 2026-02-21 18:52:49+00:00
We think alike!

https://github.com/kzahel/claw-starter

Systemd basic script + markdown + (bring whatever agent CLI)

That's I think basically what you describe. I've been using it for the past two days it's very very basic but it's a I think it gives you everything you actually need sort of the minimal open claw without a custom harness and 5k loc or 50k or w/e. The cool thing is that it can just grow naturally and you can audit as it grows
by dtagames | 2026-02-21 18:53:09+00:00
This is an article that's so ahead of its time that it's likely to be ignored. The TL;DR is that true agentic development doesn't improve the software dev lifecycle, it throws huge chunks of it in the trash.

When your context environment and constraints are properly designed, many planning, testing, and review stages can simply be skipped. It's remarkable but true.
Show HN: InferShield – open-source security proxy for LLM inference
by Alex-Hosein | 2026-02-21 18:53:12+00:00
Hey HN! I'm launching InferShield, an open source security proxy that sits between your application and LLM providers (OpenAI, Anthropic, etc.) to detect and block threats in real-time.

I've been talking to CISOs at banks and hospitals who are deploying LLMs without proper security. Their existing tools can't handle LLM-specific threats:

- Prompt injection (attackers manipulate LLM behavior, WAFs can't detect it)
- Data exfiltration (sensitive data leaks through LLM responses)
- Jailbreak attempts (users bypass safety guardrails using encoding)

Gartner predicts 60% of AI enterprises will face a security incident by 2027.

InferShield is a drop-in proxy with real-time threat detection, multi-encoding detection (Base64, hex, URL, Unicode), complete audit logs, and risk scoring. Self-hosted, provider-agnostic, zero code changes required.

v0.1 MVP is live today with 95%+ detection rate (red team tested). MIT licensed, free forever. Enterprise tier coming for compliance features.

Website: https://infershield.io
Quick start: docker pull infershield/proxy:latest

Feedback welcome! What LLM security challenges are you facing?
by mh- | 2026-02-21 18:53:26+00:00
Each time I've dug into this for someone, it's because they're filling up their context window with a bunch of tokens before any real work even starts.

Highly encourage people having issues to do /context and start removing heavy things. It's usually some sprawling MCPs they rarely use, or huge CLAUDE.md files they generated or cargo-culted from someone else.

I'm not suggesting these are the only ways to hit the limits, it's just (so far) almost always the answer when someone hits the limits doing something that I wouldn't expect to be problematic.
by esafak | 2026-02-21 18:53:28+00:00
No. I was trying to explain that providing web access shouldn't be tantamount to handing over the keys. You should be able to use sites and apps through a limited service account, but this requires them to be built with agents and authorization in mind. REST APIs often exist but are usually written with developers in mind. If agents are going to go maintstream, these APIs need to be more user friendly.
by threethirtytwo | 2026-02-21 18:53:37+00:00
Not being snarky. Do you have trouble understanding people in general?

I find roughly 50 percent of HN is made up of autistic savants with extremely high iq and are rational in every way but lack understanding of human nature and simple things like the concept of an AI assistant. This is the appeal and the hype behind open claw it’s very simple actually.

The other 50 percent of HN is made up of regular people who like to think they’re part of the former half but they are just regular people.
by ck2 | 2026-02-21 18:54:52+00:00
always wondered what other Moore's Law concepts there were out there

wikipedia is barely helpful

Swanson's Law of solar panel prices https://en.wikipedia.org/wiki/Swanson%27s_law

Kardashev's Scale is only a vague unproven concept https://en.wikipedia.org/wiki/Kardashev_scale

what else?
by Dylan16807 | 2026-02-21 18:54:59+00:00
> If my focus is on my content then I'm probably not programming. But if my focus is on getting the computer to do something then I probably am, even if the end result is identical.

But the part that "does something" is the display-txt or display-html command that already exists.

I'd say that even something as small as setting up an alias for "display-txt your_file.txt" can be programming. But I don't see the act of writing your_file.txt as programming.

I don't think the exact example of feeding an empty file to a compiler is programming, even if you think it definitely is. It's playing around with commands to see what they do. It's like buying a box of lego, opening the box and seeing if any are connected already, and then walking away; you didn't build any lego today, you were so close but you didn't. Nothing about an empty file makes it "written in C", even if the intent is throwing a C compiler at it, and you need to be writing C in this situation if you want to say you're programming.

> In your specific example, if someone constructed an ASCII file which made use of the control codes to do something interesting (or even something boring!) then wouldn't that be programming? While typing ASCII into this text field isn't programming because the value of the information is in the human interpretation of the content rather than the machine having interpreted the content as code.

I need an example here.

ASCII art isn't programming.

If you tossed in something to reset your cursor position and made animated ASCII art, I still wouldn't call that a program, I would call that a weirdly formatted video file. And that's really cool but it's cool in a different way. And the value is still in the human interpretation.

If you're going to feed it into python.exe then it's probably code, but that's why originally talking about "programming languages" is a lot clearer. Your programming language in that situation is python. You are not using plain text as a programming language.

If you noticed BEL makes a beep and you use that to make noise or somehow music when the file is dumped to console, I'm not going to say you're using a programming language there either.
by Towaway69 | 2026-02-21 18:55:23+00:00
> The explosion damaged a van opposite and blew out the tyre of a car as well as damaging a wall, front porch, shed and a Wendy house.

> Shrapnel also shot through a passing car into a passenger seat, while another piece of metal damaged the window frame of a child's bedroom.

Wtf. That was a “homemade” bomb to bring down one camera.
by raw_anon_1111 | 2026-02-21 18:55:28+00:00
The only thing I desired to do full time outside of programming was real estate investing and teaching fitness classes personal training.

I was a part time fitness instructor from 1999-2012 and was a (very bad) real estate investor from 2002-2008. I wouldn’t say fitness instructor is just for the young, my wife is now 50 and she has been teaching for 5 years. But it’s definitely not something you can do full time, the money isn’t there and trying to do it too much and is a wear and tear on your body. Even owning your studio isn’t that great as far as income.

But now at 51 and I have been working remotely between three companies since 2020, there is nothing I would rather do than wake up, wash up, and walk to my office in the other bedroom.

We have also done the digital nomad thing for a year and this year we will be away from home for a total of 3-4 months. There is nothing else that I would rather be doing.
by Aurornis | 2026-02-21 18:56:38+00:00
> how often the people that are being replaced are on the fly fixing the system the machine is intended to crystallize and automate.

If the system is broken, this is actually a good thing.

I have some experience doing automation work in small and large scale factories. When automating manufacturing work you almost always discover some flaws in the product or process that humans have been covering up as part of their job. These problems surface during the automation phase and get prioritized for fixes.

You might think you could accomplish the same thing by directly asking the people doing the work what could be improved, but in my experience they either don’t notice it any more because it’s part of their job or, in extreme cases, they like that the inefficiency exists because they think it provides extra job security.
by jungturk | 2026-02-21 18:56:43+00:00
"Consent" and "Legitimate Interest" are legal terminology - they're two bases defined in GDPR and have different implications and requirements for balancing user and processor interests.

When the author says that Persona claims the "legitimate interest" basis for these data, they're saying that Persona is trying to achieve maximum flexibility for using the data (since "consent" generally requires specific agreement on a specific use for the data, and the burden of maintaining the consent records, where "legitimate interest" does not).

https://www.bulletproof.co.uk/blog/consent-vs-legitimate-int...
by zozbot234 | 2026-02-21 18:56:57+00:00
> The downside in general is that other countries lose production capacity in steel, heavy industry, semiconductors, machine tools etc - industries that took decades to build and can't be easily replaced.

That's not really what happens though. You don't actually "lose" capacity, you just move to higher-valued special niches within the overall industry because (1) you can afford to, while low-cost competitors can't and (2) you can no longer expect to be the lowest-cost supplier for the bulk of the market. That's a win-win development and something to be encouraged.