MurphyA/hacker-news huggingface dataset:
by miroljub | 2026-02-26 11:02:54+00:00
> What is really making MCP stand out is:

> - oauth integration

I don't see a reason a cli can't provide oauth integration flow. Every single language has an oauth client.

> - generalistic IA assistants adoption. If you want to be inside ChatGPT or Claude, you can't provide a CLI.

This is actually a valid point. I solved it by using a sane agent harness that doesn't have artificial restrictions, but I understand that some people have limited choices there and that MCP provides some benefits there.

Same story as SOAP, even a bad standard is better than no standard at all and every vendor rolling out their own half-baked solution.
by nextlevelwizard | 2026-02-26 11:02:59+00:00
Subtle things like the guy in CSI Miami talking about how good Subway is for 5 minutes?

Of course stuff in the world influences me, I am still a human. Still I have never clicked an ad and bought something. I simply don't get who would. Same as with the super market placing candy and stuff next to the cashier to get people to buy more, I have never been swayed by those because when I go to the store I am always on a mission and know before hand what I am buying.

It would be cool to see all the times I have been influenced into buying something because of subconscious advertisement, but that's kind a impossible so all I can do is deny it and of course all marketing people will say that I am wrong.

And we can argue forever what counts as an advertisement. For example I recently bought a new mouse pad, I wasn't particularly looking for a specific one, just something fun and bright and as I was browsing a web store they had a cool design for half off and I bought it. Maybe that was targeted advertisement, but I had already made the decision to buy a new mousepad and had been browsing on and off for few weeks, so was it really? I would argue not.
by cucumber3732842 | 2026-02-26 11:03:30+00:00
You know what the V in VOC stands for right?

Hint: It doesn't stand for "there forever"

Nobody here wants to just let big business do whatever and turn the rivers weird colors again or go back to smog but it's very clear that the current regulatory system is not suitable and is hurting us.

It boggles the mind that someone could honestly (by which I mean dishonestly and malice are far simpler explanations) step into this conversation and be like "no, this is all fine and well, god forbid someone start spraying cars in a shop in the desert without jumping through all most of the same expensive hoops that make it not worth it down town (and would make it doubly not worth it out in the desert).

And it's not just autobody work. There's all manner of necessary economic activity that's being kept out or made artificially expensive in this manner.
Lessons from running Debezium and Kafka at ~1k tables
by heywalter | 2026-02-26 11:03:51+00:00
Debezium + Kafka worked fine for us in PoC.

It got messy after ~1,000 tables.

Schema changes every week. Connectors restarting more often than expected. Backlog recovery during peak traffic could take hours.

CDC wasn’t the hard part. Managing the system around it was.

Curious how others handle this at scale.

Details here: https://medium.com/@guichenchen/why-we-replaced-debezium-kafka-in-our-large-scale-real-time-pipeline-84a06a07e53b
by atfzl | 2026-02-26 11:04:03+00:00
Not just YC. I got this email today:

Hey, I found your GitHub profile and thought you might find this useful.

I've been building Omniget, a desktop downloader that works with YouTube, Udemy, Hotmart and 1000+ other sites. It's open source and built with Rust and Tauri.

The part I'm most proud of: you don't even need to open the app. Just press a hotkey and it grabs whatever video you're watching.

I've been working on this for a while now, even got an artist to design a mascot. I'm shaping the app based on feedback from people who actually use it, so if you have any thoughts I'd love to hear them.

Here's the repo: https://github.com/tonhowtf/omniget

Thanks for your time!

Tonho
Show HN: Sidekick – See what your AI coding agents are doing
by cal_lopez | 2026-02-26 11:04:20+00:00
I use Claude Code, OpenCode, and Codex CLI every day. They're great at writing
code, but I have no idea what they're doing while they work. Tokens burn with no
visibility, context fills up silently, and when a session ends everything the
agent learned is gone.

Sidekick is a VS Code extension and standalone terminal dashboard that sits
alongside your AI coding agent and shows you what's happening in real time.

Try it:

VS Code: search "Sidekick Agent Hub" in the extension marketplace
CLI: npm install -g sidekick-agent-hub && sidekick dashboard

It auto-detects
which agent you're running.

What it shows you:

- Live token and cost tracking with burn rate
- Full tool call timeline — every file read, write, bash command
- Session mind maps (force-directed graph in VS Code, tree in terminal)
- Destructive command alerts (rm -rf, force push, drop table)
- Decision log and knowledge notes that persist across sessions
- Session export to markdown, JSON, or text

It also does inline completions, code transforms, and commit messages using your
existing Claude subscription or API key — but the monitoring is the part I think
is missing from the ecosystem.

Works with Claude Code, OpenCode, and Codex CLI.

GitHub: https://github.com/cesarandreslopez/sidekick-agent-hub
Docs: https://cesarandreslopez.github.io/sidekick-agent-hub/

MIT licensed, TypeScript. Happy to answer questions about the architecture or
anything else.
by iainmerrick | 2026-02-26 11:05:07+00:00
For better or worse, he’s mostly know in the “street/urban art” world (which is much bigger than graffiti). And one of the features of a lot of the art in that scene is high technical mastery paired with “low” / populist motifs and composition.

That's an interesting distinction. I hadn't really noticed that but it makes a lot of sense.

I suppose Banksy would be close to the crossover point between those two worlds? The ideas and the chutzpah are the main attraction, but generally 'low' populist motifs, without high technical mastery. Someone you could either look up to or sneer down on from either side.
by kaizenb | 2026-02-26 11:06:09+00:00
I open-sourced a set of 7 agent instruction files that define a multi-agent workflow for AI-assisted development.

Each agent has a narrow role with hard constraints: the Coordinator delegates but cannot edit files. Implementors execute single tasks and report back. The Verifier only approves with concrete evidence per acceptance criterion. The PR Shepherd polls CI and review comments in a loop until the PR is merge-ready.

Core idea: separation of concerns. The agent that writes code is never the agent that checks it. Work is split into parallel waves (2-4 non-overlapping tasks), verified per wave, then verified again at the end.

The agents are plain markdown files — no framework, no dependencies. Install with npx agent-system init or just copy the files you want.

GitHub: https://github.com/boraoztunc/agent-system
by pscanf | 2026-02-26 11:06:39+00:00
I was also spammed (twice) by voice.ai.

You mention GDPR, which also "applies" to me, though I wonder if what they're doing is actually illegal. I mean, after all, I'm putting my email on GitHub precisely to give people a way to contact me.

Of course, I do that naïvely, assuming good faith, not expecting _companies_ to use it to spam me. So definitely what they're doing is, at the very least, in poor taste.
by netsharc | 2026-02-26 11:07:07+00:00
Your examples are ridiculous though.. The meaning of "[G]esundheitszeugnis" can be derived if you understand the 2 words.

Meanwhile, a Bahnhof would be a "Yard/square of lanes" if one didn't get taught that it's "train station". Although I suppose anyone learning German will quickly learn that "Bahn" is something to do with trains. Unless it's Autobahn. Or Schwimmbahn.
by Downtown_5 | 2026-02-26 11:07:36+00:00
I recently came across a project from a friend inspired by early internet experiment 'the Million Dollar Homepage' - an extremely simple idea that somehow turned into unpredictable collective outcomes.

It made me wonder whether something like that could still work in today’s algorithm-driven internet.

The concept is basically a shared pixel canvas where anyone can buy a single pixel and attach it to anything — a personal site, project, image, music link, or whatever they want to leave online.

There’s no ranking system, feed, or recommendation algorithm involved. Everyone gets exactly the same amount of space for the same price, which feels oddly different from how visibility usually works online now.

From what I can tell, it uses Stripe for payments and a realtime backend to manage pixel ownership and updates.

What I find interesting is the emergent behavior aspect — whether people end up using it as advertising space, personal expression, internet graffiti, or something completely unexpected.

Curious what others think: could this kind of collective internet experiment still work today, or was it very much a product of an earlier web era?
by jacquesm | 2026-02-26 11:07:36+00:00
Coincidentially, last night, and I'm not pulling your leg! But to be fair that's the first time in much more than a decade. I don't normally work with such huge files and this was one very rare exception. I also nearly crashed my machine by triggering the OOM killer after naively typing 'vi file' without first checking how large it had become. I'm working on a project that I probably should run on a more serious machine but I don't feel like moving my whole work environment from the laptop that I normally use.
by inigyou | 2026-02-26 11:07:54+00:00
Allowing private companies to do anything they want, when there are only a few large private companies, makes them a shadow state. Europe is much more willing to restrict companies from becoming shadow states. If they make a law that says bank transfers must be used for large payments (or if that becomes de facto true) they also make a law that says banks must give accounts to everyone.
by ValentineC | 2026-02-26 11:07:58+00:00
> These emails indicate that those companies scrape people's Github activity, and if they notice users contributing to repos in their field of business, send marketing emails to those users without receiving their consent. My guess is that they use commit metadata for this purpose.

There are likely marketing email datasets floating around the internet that contain email addresses scraped from commit metadata.

I use a catchall with a specific Git client (not GitHub) email address, and found spam and phishing emails being sent there quite a few times.
by armchairhacker | 2026-02-26 11:08:02+00:00
I remember this being discussed a while ago

https://news.ycombinator.com/item?id=9332418 (11 years ago)

https://news.ycombinator.com/item?id=20660624 (7 years ago)

https://news.ycombinator.com/item?id=27855152 (5 years ago)

https://news.ycombinator.com/item?id=30900237 (4 years ago)

Seems it’s a reoccurring issue
by ChrisMarshallNY | 2026-02-26 11:09:41+00:00
I’m not especially bothered by this [yet -AI is likely to make this worse]. It’s a fairly insignificant component of my spam catcher. At least, it’s a bit focused.

Every day, I get deluged with hundreds of spam and scam emails, often because some knucklehead entered my email in a form (either accidentally, or as a throwaway red herring).
Show HN: Anonymize LLM traffic to dodge API fingerprinting and rate-limiting
by clawshield | 2026-02-26 11:09:47+00:00
As a heavy user of OpenClaw and various LLM clients, I’ve started noticing a disturbing trend: API providers are getting much better at "identifying" us. It’s not just about the API key anymore—it's your IP, your request timing, and your client’s specific HTTP fingerprint.

Anthropic’s recent reports on "distillation-pressure" and the community whispers about "silent" rate-limiting for specific IP ranges got me thinking: Why am I giving OpenAI/Google my home IP with every single prompt?

What I Built:
I built Claw Shield. It’s a privacy layer for OpenClaw (and potentially any OpenAI-compatible client) that implements Oblivious HTTP (OHTTP).

How it works:
Instead of a direct connection, Claw Shield uses a double-blind architecture:

The Client (OpenClaw Plugin) encrypts your request using HPKE.

The Relay (Cloudflare) sees your IP but cannot see your request content.

The Gateway (Your CF Worker) sees your request content but cannot see your IP.

The Model Provider sees the request coming from Cloudflare’s edge infrastructure, not you.

Why this is better than a simple VPN/Proxy:

Zero Trust: Even the Relay can't log your prompts, and the Gateway can't log your identity. You don't have to trust me or the relay provider.

Fingerprint Reduction: By standardizing the traffic through OHTTP/BHTTP, we strip away the unique signatures that providers use to identify "third-party client" traffic.

Open Source & Self-Hostable: Both the Relay and Gateway are lightweight Cloudflare Workers you can deploy in 1 click.

Status:
Verified working for Gemini and OpenAI. Supporting Anthropic and others via providerTargets.

Repo: https://github.com/xinxin7/claw-shield
by Pinkert | 2026-02-26 11:10:16+00:00
Using a v3 onion address as both the cryptographic identity and the NAT traversal layer is such a clean architectural choice. No STUN/TURN servers, no hole punching, you just boot the script and Tor handles routing.

For those who use Tor regularly for things other than web browsing: how bad is the real-world latency for pushing a ~20KB Opus audio chunk over Tor these days? Are we talking a 2-3 second delay, or is it much worse?
by codexhaus | 2026-02-26 11:11:45+00:00
You're reading. You hit a word you don't know. You stop, open a dictionary, lose your flow. Or worse, you skip it and forget forever. Skiaskia flips this. Capture the word in 10 seconds, stay in your book. When you're done reading, unlock your words. Spaced repetition brings them back until they're yours. Offline dictionary. No account required. Built by a reader who kept losing words mid-page.
by bob1029 | 2026-02-26 11:12:07+00:00
What are the chances this isn't intentional to some extent? This wouldn't be the first time we've traded downstream legal trouble for short term gains.

Making AI utilization appear to go up is the only thing that matters right now if you're in the boardroom at one of these companies. Whether or not that utilization was actually intended by the customer is entirely irrelevant. From here, the only remaining concern is mitigating legal issues which google seems to be immune to.
by rustyhancock | 2026-02-26 11:12:35+00:00
> Exclude Countries -- Exclude specific countries from your Tor circuits. Presets for Five Eyes, Nine Eyes, and Fourteen Eyes alliances, or enter custom country codes. Uses ExcludeNodes with StrictNodes in the torrc.

Interesting that people do this, I wonder how much it improves security? Afterall, any serious surveillance would involve running relays and exits in foreign lands.
by bkolobara | 2026-02-26 11:12:45+00:00
This looks awesome! I remember the Mitchell tweet, it was like a week ago? I'm super impressed how much functionality you managed to push out so fast. Crazy times.

And I very much agree with Mitchell that the repository page needs improvement. If it's a public repository I'm exploring, I scroll always down through the files to see the README. If it's a repository I'm maintaining I'm either clicking on commits, PRs or issues. All this information should be right there on the first page! Most of the realestate is occupied by the file view, something I never cared about.

I have also been working on improving the experience for myself with https://lubeno.dev, and have been thinking for the last year how GitHub can be improved. I started specifically with Pull Requests, borrowing some ideas from other platforms, like stacked PRs. One feature that I'm very proud of is the possibility to see an interdiff when someone changes the code I commented on. You can instantly tell if the issue was addressed instead of getting an <outdated> tag on the comment and hunting down the latest changes. Would really love to see more innovation when it comes to forges. It looks like GitHub set the standard 20 years ago and everything else is a 1:1 copy of it.
by sonofhans | 2026-02-26 11:12:49+00:00
This comment is a love letter to electric guitar. I adore it. Consider reading “Desolation Road” by Ian McDonald. I don’t want to spoil any of it, and perhaps science fiction isn’t your cup of tea, but at one point there is a character on Mars with a 700-year-old strat, and you can tell Ian McDonald loves the guitar as much as you do.
by ben_w | 2026-02-26 11:14:29+00:00
> I know this is a foreign concept to some, but you can have a backbone.
Challenge it in court. Move the company to a different jurisdiction. Burn everything down and refuse to comply.

Challenge in court is fine, even healthy.

Threatening to burn everything down and refuse to comply might well work; simply daring Trump to a game of Russian Roulette about this popping the bubble that's only just managing to keep the US economy out of recession, on the basis that he TACOs a lot, I can see it working in a way it wouldn't if he were a sane leader making the same actual demands just for sane reasons.

Move the company to a different jurisdiction? That would have worked if AI was a few hundred people and a handful of servers, as per classic examples of:

At the height of its power, Kodak employed more than 140,000 people and was worth $28 billion. They even invented the first digital camera. But today Kodak is bankrupt, and the new face of digital photography has become Instagram. When Instagram was sold to Facebook for a billion dollars in 2012, it employed only 13 people. Where did all those jobs disappear? And what happened to the wealth that all those middle class jobs created?

- Jaron Lanier, "Who Owns the Future?", https://www.goodreads.com/work/quotes/21526102-who-owns-the-...

But (I think) now that AI needs new data centres so fast and on such a scale that they're being held back by grid connection and similar planning permission limits, this isn't a viable response.

They can be burned down, but I think they can't realistically be moved at this point. That said, I guess it depends on how much Anthropic relies on their own data centres vs. using 3rd parties, given Amazon's announced AWS sovereign cloud in Europe?
by zozbot234 | 2026-02-26 11:14:29+00:00
This is not applicable to most programming scenarios since the cache gets trashed unpredictably during context switches (including the user-level task switches involved in cooperative async patterns). It's not a true scratchpad storage, and turning it into one would slow down context switches a lot since the scratchpad would be processor state. Maybe this can be revisited once even low-end computers have so many hardware cores/threads that context switches become so rare that the overhead is not a big deal. But we are very far from anything of the sort.
by cousin_it | 2026-02-26 11:15:20+00:00
Interestingly, to me Hendrix and Knopfler feel kinda like creative opposites. Knopfler plays much cleaner and with much more variety, he has written many songs that are catchy in different ways (which is almost impossible for any musician), he basically achieves every goal that a beginner musician could choose to chase. And yet his stuff feels like a creative dead end, a dreary road leading to adult contemporary. While Hendrix has no songs to speak of and only one sloppy screechy sound, but it's the sound that launches a thousand bands and feels inspiring even now. Maybe the lesson we're supposed to learn is that we shouldn't choose what goal to chase, we should just feel it.
by jamiecode | 2026-02-26 11:15:37+00:00
SQLite as the persistence layer is a good call. I use a similar pattern for agent state - SQLite for queryable knowledge, a flat JSON file for current task state, and the context window only for the current turn.

One thing worth knowing: if you need the agent to update the DB from multiple processes (common with cron-based agents that might overlap), WAL mode is essential. Without it you get lock contention that kills reliability.

Does Context Harness handle concurrent read/write access, or is it designed for single-agent use?
by dpitkevics | 2026-02-26 11:17:05+00:00
totally agree with the idea of a SaaS boilerplate to ship faster; i've been there trying to bolt auth and billing onto a prototype and it kills momentum. first, map the single core user journey you'll validate on day one - signup, upgrade to paid, the primary action, and the confirmation - then only build the pages and API routes needed for that path. keep integrations stubbed behind feature flags so you can demo and run end-to-end smoke tests before wiring everything, and reuse a basic pricing plus invoice flow so you don't invent that wheel. fwiw i used a starter kit that had auth and payments preconfigured (Vibe Coding Starter Kit) and it saved me about a week of wiring Stripe and email, letting me focus on the product UX.
Show HN: Tablex – Your wedding seat arrangement tool
by postatic | 2026-02-26 11:17:44+00:00
Hey HN.

I built Tablex (https://www.tablex.pro
), a web app to make wedding seating arrangements less painful (well any seating arrangement really).

My friend's getting married in September, thought I'd help him out knowing how it was a bit tricky to sort this all out.