MurphyA/hacker-news huggingface dataset:
by delBarrio | 2026-02-26 20:32:46+00:00
Hi and thanks so much for the valuable research!! I know it has been asked a lot here already, and probably some in-deep reading would help figure that out by myself. But I’ve noticed that you used Cisco 9130 APs, and noticed only part of the attack work on those. So wanted to ask whether you tested those with just IP based network separation, or also the VLAN-based one? Also, since you’ve mentioned the findings have been communicated to the vendors and the WiFi alliance alike, may I ask you to maybe share a CVE number here? I (as probably a lot of us here), use some of the hardware mentioned for personal goals/hobby in my home setup, and find it fun to keep that setup reasonably protected for the sake (fun) of it. Much appreciated!
by jalmond87 | 2026-02-26 20:32:51+00:00
I’ve spent the last week building a research framework to track the global AI infrastructure buildout—not the apps or hype, but the physical stuff: data centers, chips, cables, energy, and humanoid robots.

The goal was to create a document where every factual claim is sourced and every inference is labeled. I call it a 'Confidence System' (Tier 1-4). You can verify or challenge every data point.

What's inside:
• Verified CapEx figures from Amazon, Google, Meta, Microsoft (totaling ~$600B for 2026).
• The 'Three Interpretations' framework (Escaped Orchestrator / Natural Acceleration / Emergent Intelligence).
• Geopolitical specialization (Pax Silica vs. BRICS parallel infrastructure).
• Peer-reviewed research on multi-agent AI behavior.

Why I'm posting: I have no credentials or social media following. I'm just someone who wanted to map this. The sourcing is my only credibility.

All sources are linked directly in the article or via the Google Docs source repository I built alongside it. I'd greatly value the HN community's critical feedback—especially on any claims I've misrepresented or gaps in the framework.
by margalabargala | 2026-02-26 20:32:56+00:00
We'll just have to agree to disagree.

It appears that your understanding of AI code generation reflects the state of 1-2 years ago. In which case of course it seems like what people are describing as reality, feels 1-2 years away.

> There is a gigantic chasm of difference between "80% of code they produce could be created by AI" and "80% of commits they produce could be created by AI".

This is exactly the goalpost moving I am talking about. I said 80% of code could be AI-written, you agreed, and followed up with "oh but it doesn't matter because now we're measuring by % of commits".
by ApolloFortyNine | 2026-02-26 20:33:21+00:00
Imo it just proves there's a 99% chance a standard distro has a current zero day in it.

If a state actor (it almost has to be a state actor at the time frame they were operating under) could put in this much effort once, they clearly could afford to do it X times. And when you look through the history of communications from the author, it just reads like 'another day at the office'.
by tsss | 2026-02-26 20:33:32+00:00
They're already very cheap, almost free when you buy used. I got one for $50 that makes pretty good prints. For $300 you can buy an Elegoo Centauri Carbon that is a really high end consumer printer. Don't forget that we're talking about CNC machine tools with precision movements here. An entry level manual milling machine from Precision Matthews in Taiwan will cost you $250 shipping alone. Even good linear rails by themselves are more than $300 on ebay. A lot of innovation has been happening in the 3D printer space to make all these machine components cheaper which has also benefited other applications like hobbyist milling.

Nowadays, we are so used to all the injection molded plastic crap, and also so much poorer, that we can't understand why precisely manufactured products made from solid metal or wood are so expensive.
by bhouston | 2026-02-26 20:33:44+00:00
> Isn’t that the opposite of what he’s saying?

The quote was from 2022 for the first pivot to AI to prevent it from becoming a terminator style entity. The last pivot was not in the quote but is the topic of this current Hacker News post, where takes credit for dropping the safety pledge:

"That decision included scrapping the promise to not release AI models if Anthropic can’t guarantee proper risk mitigations in advance."

I expect the next pivot will be that we need to allow the US military to use Anthropic to kill people because otherwise they will use a less pure AI to kill people and our Anthropic is better at only killing the bad guys, thus it is the lesser evil.
by NiloCK | 2026-02-26 20:33:46+00:00
I'll be interested to hear stories - down the line - from the participants in the the LLM SEO war [1].

Interesting that tailwind won out decisively in their niche, but still has seen the business ravaged by LLMs.

[1] https://paritybits.me/copilot-seo-war/
by bb88 | 2026-02-26 20:34:09+00:00
I personally like the emdash -- I've been using for years -- I'm not an AI -- And I will continue to use it in the future with the "(not ai)" annotation. I will fight for the freedom -- for me and for others -- to use the emdash however I please.

I thought "Code is Law". So now crypto bros want to fight this out in TradLaw just like the TradFi institutions do?
by godtoldmetodoit | 2026-02-26 20:34:09+00:00
As someone who runs a small dev agency, I'm very interested in research like this.

Let's say some Doctor decides to vibecode an app on the weekend, with next to 0 exposure to software development until she started hearing about how easy it was to create software with these tools. She makes incredible progress and is delighted in how well it works, but as she considers actually opening it up the world she keeps running into issues. How do I know this is secure? How do I keep this maintained and running?

I want to be in a position where she can find me to get professional help, so it's very helpful to know what stacks these kinds of apps are being built in.
by kvinogradov | 2026-02-26 20:34:19+00:00
I am one of https://wikimediaendowment.org/benefactors (donated years ago), and now I am totally unhappy with what is happening with Wikipedia. It has been an important lesson learned.

To keep a nonprofit efficient and impactful, it is crucial for its governance to have skin in the game; otherwise, there will be no long-term alignment of interests. More details on why and how we implement this at the Open Source Endowment: https://kvinogradov.com/osendowment
by carlmr | 2026-02-26 20:35:09+00:00
It's never that explicit, it's more the things that nobody takes care of, because it's nobody's job. The bigger the company, the more jobs fall through the cracks, that should be taken care of, but lack an explicit role in the hierarchy.

There's usually a small handful of people that care more than they should, keeping the company afloat, but it's despite the company's policies, not because of them.
by don-code | 2026-02-26 20:35:31+00:00
This is one of the reasons I hung onto my Treo for so long. It was so much faster to do... well, basically anything that the device was capable of. With the physical keyboard, you actually didn't need to take the stylus out very often, either.

Calling Mark: (power on) (phone key) M-A (send) - hitting the phone key automatically brought up the dialer, which did double duty as contact search.

Adding a new event to the calendar: (power on) (calendar key) (enter) - and just start typing; you could navigate the fields with the up and down arrows.

Opening the calculator: (power on) (home key) C-A (enter) - the launcher was filterable with the keyboard.
by KPGv2 | 2026-02-26 20:35:52+00:00
All this being said, I think comparing the art market and popular music markets is foolish. 12yo boys aren't buying emerging mixed-media artists. But they are picking Spotify songs.

When I buy art, I have often spoken with the artist in the past couple days, or I am aware of their history and story and how they developed their art as a response to some other movement or artist collective.

It's rare for people to buy art just bc oil paints go brrrrrm
by LarsDu88 | 2026-02-26 20:35:55+00:00
Vibe coding isn't so much a movement as a big fat tool that was air dropped from space after the megacorps decided to dump billions of dollars into LLMs and LLM companies.

It's like comparing Christianity to water wheels or gay pride to to the Saturn V rocket. It's just not really analogous in any way.

I do agree with the author about commoditization, however.

The most likely outcome is that software will be commoditized and software developers commoditized even harder. If we still need software engineers to prompt, you'll find plenty of people in India able to do those tasks, not necessarily with great quality until they too are replaced by better AI.

This whole situation inspired me to actually dive harder into Maker type stuff such as learning how to design PCBs, but one thing I found is that this TOO is very close to being automated by AI. To actually get hardware made, even prototyping PCBs, you NEED to go to China, and the Trump tariffs cut into the cost of doing these activities hard.
by travelyesim | 2026-02-26 20:36:03+00:00
That's what they mentioned in the initial email: "We recently identified payments on your Stripe account for Travely eSIM that don't appear to have been authorised by the customer, meaning that the owner of the card or bank account didn't consent to these payments.". I do have 3DS enabled + Strict Radar rules + custom backend to auto block fraud users + manual review and refund for suspicious payments. It is weired after investing in integration with Stripe and doing everything possible to have a good account that you get blocked without a notice.
by itmitica | 2026-02-26 20:36:10+00:00
I did the exact same thing! Uncanny.

I agree with models being better at different tasks: gemini-cli is superficial, codex is stubborn as a mule and dependable, claude-cli just wants to get something working and done. qwen-cli, Qwen, in general, has a tendency to pendulate too much.

I also reduced the team to two, codex and claude, for me.
by barefootford | 2026-02-26 20:36:15+00:00
Really impressive work guys! It seems like YC has funded a few companies attacking this but I think you all might have the best approach so far. Behind the scenes is the agent just editing using text/annotated timelines? I feel like the move is probably text for roughcut/narrative, then a vlm for digesting the initial roughcut, then adding broll and fixing timing issues. Feel free to steal my FCP xml generator. https://github.com/barefootford/buttercut
by pradn | 2026-02-26 20:36:18+00:00
One of the odd things people do with tech is taking someone else's random projections at face value?

What does it mean to say "we were promised flying cars", or "every city would have micro-factories, that 3D printing would decentralize production"?

The people creating these narratives may a) truly believe it and tried to make it a reality, but failed b) never believed it at all, but failed anyway, c) or be somewhere else on this quadrant of belief vs actuality.

Why not just treat it as, "a prediction that went wrong". I suppose it's because a narrative of promise feels like a promise, and people don't like being lied to.

It's a strange narrative maneuver we keep doing with tech, which is more future-facing than most fields.
by cvoss | 2026-02-26 20:36:36+00:00
I don't follow your argument. Why must we have the ability to "delete" sub-expressions?

Consider a computational model that, rather than work by successively rewriting an expression over and over in a way that honors some equivalence relation over expressions, it works by explicitly building the sequence of such expressions. In that kind of system, every computational state properly contains the previous state. Things grow and grow and never get "deleted". Yet such a system can clearly be universal.
by Raviteja_ | 2026-02-26 20:36:50+00:00
I open sourced Sentinel Protocol today.

52,069 lines of code. 81 security engines. 9 runtime dependencies. MIT.

It's a local proxy that sits between your app and any LLM (OpenAI, Anthropic, Gemini, Ollama) and enforces PII protection, injection defense, output scanning, and a full audit trail completely on your machine. Zero cloud calls for security work.

One command: npx --yes --package sentinel-protocol sentinel bootstrap --profile paranoid --mode enforce --dashboard
by fuzzfactor | 2026-02-26 20:36:58+00:00
With Windows 11, all the stuff going on in the background and so much new excess disk I/O just dwarfs that of Windows 10 on the same hardware.

And that was orders of magnitude more than W98.

Your SSDs are getting hammered like never before.

The first time you open the new, sluggish replacements for old standbys they take way more time to load, but then if you don't turn off the PC completely they are already in memory lots of times so they pop up faster in subsequent times, and with simple things like Calculator the actual calculation is not any slower than it was in 1998.

At least as long as your PC hardware is 20X as fast :\
by oskarkk | 2026-02-26 20:37:00+00:00
IMO putting an important number in your post/comment, and not providing a source for that number, is also kind of low effort. If you verified the number before writing, you already had the source ready and you could just put it in the comment. If you wrote the number from memory, not checking if your memory is correct is low effort (but you can also warn the readers that the number is from memory, that's better). If you're intentionally misrepresenting what the number means in your comment (and giving the source would contradict the meaning of your comment), or just giving a number that "feels right" or a number that you know is wrong, then it's low effort and a lie.

I try to verify important numbers and facts in what I read, and seriously, there's so much fake or misrepresented info everywhere, on every political side, that it's depressing, and it makes me don't believe literally anything without a source, unless I verify it myself. Of course when someone provides a source, I often look into the source, and sometimes it turns out that the text misinterpreted/misrepresented the meaning of the source. On Wikipedia, I also check if what is written is actually in the source, because sometimes the editor writes his own opinion while only loosely basing the text on a source (or basing it on nothing).

Verification can take some time, and that's the effort passed from the author of unsourced claim to its many readers, unless they just trust it or ignore the claim.

When I write anything I try to include sources for important things. If I wouldn't include a source, and someone asked "Source?" I wouldn't think "what an annoying guy", I'd think "oh, I could have linked that in the first place". And I usually upvote "Source?" comments (unless it's a thing that anyone can check in 30 seconds). I usually double-check the facts in what I'm writing, and many times I almost wrote something from memory that wasn't true, but looking for a source saved me from that.
by jawilson2 | 2026-02-26 20:37:06+00:00
Agreed! Like Pharaoh's Dance on Bitch's Brew, Davis doesn't come in for like 4 minutes. Same with In A Silent Way. He just lets the band groove for a while, THEN takes the lead.

In Davis' autobiography, he mentions trying to work with Jimi. I don't think it would have worked really, but who knows. Jimi was completely self taught, while Miles went to Juliard, I don't see how they would have communicated musically, literally. Like, if Miles tells Jimi to try a diminished chord here, or some modal scale there, Miles would have ended up doing a LOT of teaching along the way. And I say this as a guitarist of 30+ years who loves both of them.
by matheusmoreira | 2026-02-26 20:37:25+00:00
They're not gonna put LLM nonsense in the freaking calculator, right?

> It looks like you're trying to calculate averages. Would you like help with that?

> Did you know Microsoft™ Office™ Excel™ has a formula for that? Rent Microsoft™ Office™ Excel™ today! Only $200/month in a perpetual payment plan!

What a time to be alive.
Show HN: Neural-open.nvim – Neural network powered Neovim file picker
by dtormoen | 2026-02-26 20:37:46+00:00
neural-open.nvim is a Neovim plugin that integrates with Snacks.nvim that trains a neural network to rank files based on your navigation patterns using features like fuzzy-finder match scores, file access frecency, and directory structure. It trains a small multi-layer perceptron and updates the network for a few iterations each time you choose a file to learn your preferences.

I made this because I always felt other file search solutions never fully match my flow and could learn more from how I use them to be better. It was also a fun little side project to help me remember some of the details of the math in deep learning that had gotten a little stale over time.
by db48x | 2026-02-26 20:38:06+00:00
Oh, that, lol. (With the paywall I just figured they were moaning about ICE; that’s been the more popular topic of late.)

They’re moaning about the fee because it will work. Visas are supposed to be issued to the best of the best, to entice them to come to the US to work, or to foreign workers who can fill jobs that no American can be found for. But we both know how easy that is to abuse.

The employers who hire cheap foreign labor to replace Americans at ordinary jobs won’t pay that fee; it’ll be cheaper to pay an American $120k than to pay an Indian $50k with the extra $100k application fee. That solves that problem in one easy stroke.

Meanwhile the AI company who is paying a million a year and expecting to earn a hundred million or more per employee will pay the application fee in a heartbeat. They’re after profits that are literally 1000× higher than the fee, so the fee is irrelevant. Of course they’ll grumble about government overreach while telling their HR manager to write the check, but it won’t actually slow them down.
by XorNot | 2026-02-26 20:38:26+00:00
I mean, sure? But I don't do that. For city driving OsmAnd makes a sensible route which sticks to main roads whereas Google Maps was getting so bad me and my wife stopped using it because it's choices were bafflingly weird, and would do things like "make 8 turns down residential streets, then obviously make a turn across the busy 4 lane main road you could've already been driving on".

Google Maps for whatever reason routes like a residential street and turn can be negotiated at exactly the speed limit the whole way through.
by MrDarcy | 2026-02-26 20:38:49+00:00
> Looks at the scores of Ycombinator startups that wrote a shitload of awful code and failed.

This can also be restated as, look at all the startups that wrote a shitload of awful code and succeeded.

That’s an indicator code quality doesn’t matter at macro scales. We already knew this though even if we didn’t explicitly say it. It’s more about organization, coordination, and execution than code.
by vablings | 2026-02-26 20:38:58+00:00
>But they are not built and maintained autonomously by the all mighty benevolent skynet, all working 100% on renewable energies abundant at geological scale.

No but they are significantly cheaper than an employee, A robot can pick up something and move it from A to B for upwards of 10 years. The programming and setup are a fraction of the time a robot can operate reliably

I cannot stress to you how reliable and little maintenance is required for a $60,000 fanuc robot.
by PaulHoule | 2026-02-26 20:39:06+00:00
One odd distinction is between social networks where the notifications are really notifications about people engaging with you (Mastodon, Bluesky, Facebook, Instagram. Tumblr) and ones where it is mainly spammy events that they blend in so you get a double-dose of spammy algorithmic feed items (LinkedIn, Threads)

One think that has me LFAO about LinkedIn is that normal social networks chime you when somebody responds to your content, LinkedIn chimes you when you post something, just to reinforce that it's a step lower on the food chain.
by Humanista75 | 2026-02-26 20:39:15+00:00
I’m so glad you like it! Regarding what you said about dragging the piece... I get how convenient that is, but I don’t know, I feel these 'micro-pleasures' every time I draw the piece with my finger. It’s like you have more control over the game, and it also slows down the pace a bit, which makes you think more about your next move. I feel like those few seconds you spend drawing the piece make the gameplay more thoughtful and strategic. Don’t you think?
by Loving4o | 2026-02-26 20:40:17+00:00
Hi, I've talked to GPT-4o more than 1.5 million words counted prompts and answers together. I would recognize this model inside hundreds or thousands of other models because of this very special tone. Could you imagine setting up an environment where one can change system prompt and insert own talk history for testing purposes? I'd like to test if I can make it answer the same way it did before if getting the right system prompt including memories and the right context. Would free me and others from having to set up own API programs... Interested?
by dvt | 2026-02-26 20:40:45+00:00
Yeah that comparison doesn't pass the smell test. Blockchain/crypto were purely financial instruments and for better or worse, a new financial instrument is very different than a new tech innovation; tbh there was a thin veneer of tech when it comes to crypto/blockchain, but the magic was because of the money, not because of the tech.

AI is different because the magic clearly is because of the tech. The fact that we get this emergent behavior out of (what essentially amounts to) polynomial fitting is pretty surprising even for the most skeptical of critics.
by mckn1ght | 2026-02-26 20:40:48+00:00
I use delta for quick diffs in a shell (along with the -U0 option on git-diff), but in my claude workflow, i have a 3 pane setup in tmux: :| where the right side is a claude session, the top left is emacs opened to magit, and the bottom left is a shell. Magit makes navigating around a diff pretty easy (as well as all the other git operations), and I can dive into anything and hand edit as well.
by Animats | 2026-02-26 20:41:02+00:00
Plating operations are a huge headache. They have corrosive plating baths. They have to do some chemical processing on site to neutralize the corrosive chemicals and get them down to a neutral pH.

Some years ago, a plating company in San Jose dumped a plating bath into the sewer system. This was so toxic that it killed the bacteria that reduce organic sludge at the sewerage plant. This knocked the whole plant offline, releasing untreated sewerage into the bay. The lower bay was toxic for a week. It's normally swimmable. San Jose was fined by the EPA. The plating company was heavily fined by San Jose.

It's a good sewerage plant. The output is drinkable, and if you take the tour, you're offered some to drink. Some of the output is used for irrigation. In a severe drought emergency, water could be fed back into the water system. They've never had to do that, but in a big drought a few years ago, things got close to that point.

San Jose, which is more of an industrial city than most people realize, still has plating companies. Here's an inspection report for one of them.[1] This one was releasing too much chromium.

[1] https://19january2017snapshot.epa.gov/www3/region9/water/pre...