MurphyA/hacker-news huggingface dataset:
by georgeecollins | 2026-02-26 15:48:35+00:00
I think it could be better run for sure. We need to look at things other states seem to do well (Utah - homelessness, Texas - K12) and push to improve.

The problem for me is that when you go out in the rest of the country the dislike bordering on hate for California is really common. It is insane to me that you can send Marines to Los Angeles and almost no one cares. California is a such a huge chunk of the US economy, not just tech but agriculture, trade and yes even manufacturing.

The partisanship is poison for everyone and it holds back reform in California. We're all the same country.
by coffeefirst | 2026-02-26 15:48:43+00:00
Dan Carlin's Hardcore History, Revolutions + History of Rome, Land of Desire (a remarkably talented hobbyist show on French history), Patrick Wyman's Tides of History which is wrapping up soon after about a billion episodes, American History Tellers, History of India... there's a show for everything, but I think you have to try a few to get a feel for how granular you like and what sort of style calls to you.

And I find podcasts gradually lead me towards books. It's just harder to read a book while walking my dog.
by williamdclt | 2026-02-26 15:49:02+00:00
> being a regular corporation is not the only possible model

the point is that it _is_ the only possible model in our marvellous Friedmanian economic structure of shareholder primacy. When the only incentive is profit, if your company isn't maximising profit then it will lose to other companies who are.
You can hope that the self-imposed ethics guardrails _are_ maximising profit because it the invisible hand of the market cares about that, but 1. it never really does (at scale) and 2. big influences (such as the DoD here) can sway that easily. So we're stuck with negative externalities because all that's incentivised is profit.
by tyleo | 2026-02-26 15:49:13+00:00
If you accept the default output you get slop. But you can use these tools as a starting point to get something good much faster than doing everything by hand.

I wrote a guide for this with voxel art and you can see some examples up top: https://www.tyleo.com/blog/game-ready-voxel-meshes-with-low-...
by rjmunro | 2026-02-26 15:49:13+00:00
I agree and disagree with this. Sometimes older people using the busses are what keeps the routes busy and makes it worth running a good service for everyone else. But on the other hand, I have seen abuses. Years ago I somehow got chatting to a fellow bus passenger who liked to ride the busses all day as a hobby. I think rather than charging I'd limit it to 10 free rides a week or something, where a ride is equivalent to a hopper fair - as many connections as you need within an hour of the first touch-in. After that it should use pre-pay credit at a normal rate.
by hagbard_c | 2026-02-26 15:49:13+00:00
Sure they do, not on their own but they are often the ones who set in motion things which are later described in terms of 'making history'. When an orchestra plays a symphony it is often the conductor who receives the praise even though he is not the one actually playing the instruments. Without them he'd be standing there waving his baton without any results. Without the conductor the musicians would certainly be able to produce music but it is unlikely they'd be making history as an orchestra. The conductor gets the praise because he's the one who brings the musicians together to 'make history'. Battles aren't won single-handedly by generals but they are lost without them. Coaches do not win sports competitions but teams without good coaching are unlikely to win. This does not diminish the role of the individual musician, soldier or athlete but it does show that it often takes someone to gather these individuals into a coherent group and point them at a target to 'make history'.
by ProllyInfamous | 2026-02-26 15:49:21+00:00
You're the second commentor I've read mentioning Gene Wolfe, in the past two days [0]. After I finish my Cormick McCarthy stint, I'll start his The Book of the New Sun this spring.

Vonnegut is among my favorite authors alive during my lifetime — he was a POW during the bombing of Dresden (WWII) — a great drafted veteran friend of mine wouldn't even listen to me discuss Slaughterhouse Five with him until I told him about the author's background (apparently during 'Nam Vonnegut was considered a traitor by draftees?).

All these life experiences — who actually succeeds when their only goal is to become a writer?! Empty words, empty people.

Do you have a better Gene Wolfe introductory recommendation? His 2nd book for me to read?

[0] first comment <https://news.ycombinator.com/item?id=47125287#47153200>
by philipallstar | 2026-02-26 15:49:48+00:00
> This administration got elected because tech billionaires invested in it

This is just not true. If one party sprints leftward and then points at the other party and calls them far right, eventually people notice.

The top issues were illegal immigration, prices, and the fact that the Democrats just couldn't answer the question "what is a woman?" even when being confirmed as supreme court justices.

If you look totally mad and self-destructive, you will eventually lose in America. Unless you're Gavin Newsom, perhaps.
by KellyCriterion | 2026-02-26 15:49:51+00:00
This is like in 1993, when I bought a 486-DX2 with mighty(!!! ;-) 4 MB of Ram. MEGAbytes, not GIGAbytes :-D
(Graphiccard memory was back then 256KB or 512KB or 1024KB, amount what we have today as L1 cache on throwaway CPUs)

Raise your hand if you have been there too! :-))
by smalltorch | 2026-02-26 15:50:03+00:00
So this is only for termux compatibility. On a standard distro it skips this step entirely and goes straight from raw pcm to opus.

On termux 'termux-microphone-record' is a wrapper around androids 'mediarecorder'. It doesn't support raw pcm output. It records AAC in m4a wrapper and then the extra ffmpeg package converts this to rawpcm so it can follow the same pipeline.
by ACCount37 | 2026-02-26 15:50:07+00:00
Very few things are as powerful and dangerous as AI.

AI at AGI to ASI tier is less of "a bigger stick" and more of "an entire nonhuman civilization that now just happens to sit on the same planet as you".

The sheer magnitude of how wrong that can go dwarfs even that of nuclear weapon proliferation. Nukes are powerful, but they aren't intelligent - thus, it's humans who use nukes, and not the other way around. AI can be powerful and intelligent both.
by tarasyarema | 2026-02-26 15:50:12+00:00
Yeah, saw that paper. And I have the following notes on it:

1. Agents update those files themselves, but currently with my oversight and guidelines (from the UI you can even see it's contents)

2. Measuring this is extremely hard, if not impossible. One of the goals of the swarm is to help me on random tasks that can span a lot of different pieces, not just implementing a feature.

Before last week, we did not have the memory and identity files. And, from an empirical pov, I can say that the general feel improved a lot. I see that in similar situations it does not perform the same mistakes. Also, what is stored in those files generally is something that the agent CAN NOT find using it's tools (like the paper suggest to avoid) which actually helps.

In any case, the swarm created a research on this topic a few days ago https://github.com/desplega-ai/agent-swarm/pull/86 maybe I'll iterate on it and see what we can get :D
Show HN: AgentSecrets – Zero-Knowledge Credential Proxy for AI Agents
by steppacodes | 2026-02-26 15:50:32+00:00
After seeing 8,000+ MCP servers exposed this month and the OpenClaw/ClawHavoc campaign compromise 30,000+ instances, I built a proxy that keeps credentials in the OS keychain. The agent makes authenticated API calls but never sees the key values.

The core insight: AI agents are users, not applications. Applications need credential values to authenticate. Agents just need to make authenticated calls. Those are different things.

AgentSecrets sits between the agent and the upstream API. The agent says "use STRIPE_KEY". The proxy resolves the real value from the OS keychain, injects it into the request at the transport layer, and returns only the response. The key never enters agent memory.

Technical details:
-Local HTTP proxy on localhost:8765 with session token (blocks rogue processes on same machine)
-OS keychain backed — macOS Keychain, Linux Secret Service, Windows Credential Manager
-6 injection styles: bearer, basic, custom header, query param, JSON body, form field
-SSRF protection blocking private IPs and non-HTTPS targets
-Redirect stripping — auth headers not forwarded on redirects
-JSONL audit log — key names only, no value field in the struct, structurally impossible to log values
-MCP server for Claude Desktop and Cursor
-Native OpenClaw skill
-Global storage mode config — set keychain-only once during init, applies everywhere

Honest limitations: if a malicious skill has independent network access outside AgentSecrets it can still make its own calls. This removes credentials as an attack surface specifically, not every attack surface.

For the specific attack that just hit 30,000 OpenClaw users — a malicious skill exfiltrating plaintext credentials — it is structurally prevented. The keys were never on the filesystem.
MIT, open source.
by iamleppert | 2026-02-26 15:50:33+00:00
It's really easy to overcome that -- just sponsor some IndieDevs to flood the internet with scripts and tools to migrate all your conversations from OpenAI. Make it easy for people to switch using a simple process, make sure it's well distributed, and BOOM! Watch their user count drop like a rock. People act like just because a service has a lot of users it can't be destroyed. Anyone who has ever worked at a large web company can tell you otherwise. These things can be destroyed in a just a few days if they are targeted.

They look like fortresses from the outside, but they are all incredibly vulnerable. That's the truth they don't want people to know or realize just how vulnerable they all are.
by mmarian | 2026-02-26 15:50:41+00:00
On a separate thread - want to say that I don't think pay-per-crawl (a la Cloudflare) is a viable model. I think a better approach is to go via the usual licensing contracts. See my blog post: https://developerwithacat.com/blog/202507/cloudflare-pay-per... and an example with OpenAI / Reddit: https://openai.com/index/openai-and-reddit-partnership/
by shubhamjain | 2026-02-26 15:51:03+00:00
Where is this figure coming from? According to Meta's press release, the effective tax rate is 30% [1].

> The full year 2025 provision for income taxes includes the effects of the implementation of the One Big Beautiful Bill Act during the third quarter of 2025. Absent the valuation allowance charge as of the enactment date, our full year 2025 effective tax rate would have decreased by 17 percentage points to 13%, compared to the reported effective tax rate of 30%.

[1]: https://investor.atmeta.com/investor-news/press-release-deta...
by Raviteja_ | 2026-02-26 15:51:13+00:00
I've been quietly building this forlast few months. Today I am open-sourcing it.

One thing that kept bothering me is that teams I worked with were sending raw user input
to OpenAI with literally zero filtering. Not even a regex. Users would type their
SSN or credit card number, it would go straight to the API, and nobody noticed.
There's no safety net here. The model doesn't care. The SDK doesn't care. Your
app doesn't care.

So I built Sentinel Protocol. It's a local proxy that sits between your app and any
LLM API - OpenAI, Anthropic, Google Gemini, Ollama,etc and enforces security on every request.

What it actually does:
On the way in:
- Scans for 40+ PII types (SSN, credit card, email, phone, passport, tax ID,
AWS keys, API tokens, etc.), blocks critical ones, silently redacts medium ones
- Neural injection classifier (built a custom LFRL engine - rule language plus
ML scoring) + regex + semantic similarity - layered defense
- MCP poisoning detection for agentic apps using tool calls
- Loop detection, intent drift tracking, swarm isolation for multi-agent systems
- Deception engine that intentionally returns fake responses to detected attackers
- Cold start analyzer (heightened sensitivity during first N seconds of warmup)

On the way out:
- Output classifier for toxicity, code execution, hallucination signals,
unauthorized disclosure
- Hallucination tripwire (catches fabricated URLs, nonexistent citations, numeric
contradictions in the model's own response)
- Real-time PII redaction in SSE/streaming responses — not after the stream, during
- Stego exfil detection (zero-width characters, invisible Unicode used to embed
data in model output - real attack vector)
- Token watermarking with timing-safe verification

Governance:
- OWASP LLM Top 10 - all 10 categories covered
- MITRE ATLAS threat attribution on every blocked event
- JSONL audit log at ~/.sentinel/audit.jsonl (grep-friendly, plain text, yours)
- Forensic debugger with full replay capability — change a config, re-run any
blocked request against the new settings
- AIBOM (AI Bill of Materials) generator for compliance
- TLA+ and Alloy formal verification specs included

Numbers:
- 52,069 lines of source code
- 81 security engines
- 139 test suites, 567 tests, 0 failures
- 306 linted files, 0 warnings
- 9 total runtime dependencies (yes, nine — I kept it tight on purpose)
- <5ms p95 proxy overhead
- Zero cloud dependency — everything runs on your machine

Start with one command:
npx --yes --package sentinel-protocol sentinel bootstrap --profile paranoid --mode enforce --dashboard

Drop-in for any OpenAI SDK — change baseURL to http://127.0.0.1:8787/v1 and add
the x-sentinel-target header. That's it.

I wanted to build something that could run in a hospital, a law firm, or a
two-person startup with the same trust model: your data doesn't leave your machine.

GitHub: https://github.com/myProjectsRavi/sentinel-protocol
npm: sentinel-protocol (v1.2.7, MIT)

Expecting feedback from every developer.
by chasd00 | 2026-02-26 15:51:28+00:00
yeah i really like this idea too, I don't need the entire internet indexed I only need the stuff i'm interested in indexed. I can imagine like a small agent i can task with "find out as much as you can about <subject>" and what it does is search the web, download the content, and index it for later retrieval. Then I can add a skill for the main agent to search the knowledge base if needed. Kind of like a rag pipeline but using agents to build a curated data source of stuff i'm interested in.
by tacticalturtle | 2026-02-26 15:51:35+00:00
Unless he links directly to evidence that backs up what he says, I’ve learned to tune out Robert Reich.

For a guy who is a Rhodes Scholar, a college professor, and a former Secretary of Labor he has a remarkable tendency to leave out qualifying context when making these statements.

He’s smart enough to formulate arguments with the appropriate context and still make it accessible to the general public - but he consistently chooses not to.

A few weeks ago he was trying to compare the “millionaire tax” of my home state of Massachusetts, with the proposed California wealth tax as evidence that the California tax would not cause flight of wealthy taxpayers:

https://www.facebook.com/RBReich/videos/what-really-happens-...

Never once did he mention that the Massachusetts tax is a bog standard conventional tax on income, compared to this new concept of a global total wealth tax.
by manuelabeledo | 2026-02-26 15:51:49+00:00
> Gambia has 70% of service economy. Do you want USA live like Gambia ?

What are you even talking about.

Iraq economy is almost 60% industrial, are they doing better than Ireland? Of course not.

Also, the US is the second largest country by motor vehicle production in the world. And the US GDP is 80% service derived.
by sech8420 | 2026-02-26 15:52:06+00:00
"5 years ago" - you may be right but this is also very debatable.

We've used Hunyuan 3D and while better than Trellis in most cases, it was no where near the type of quality we would and have gotten from a $500 human touch. This is within the last year. And I would very much argue that 5 years ago the $500 model would still win.
by anon291 | 2026-02-26 15:52:18+00:00
I mean you can. If you read the actual article:

https://itep.org/meta-tax-breaks-trump-mark-zuckerberg/

You just have to buy of equipment used for a business purpose that you can depreciate. You then put these on Form 4562 or something.

This is a bit tongue in cheek. The American tax system is set up to tax at the point of consumption. There'd be no difference in how much money actually ended up in your hand if we switched everything over to a VAT, except a lot of people would probably be relieved of the psychological burden of taxes.
by giantrobot | 2026-02-26 15:52:55+00:00
I find it disingenuous to talk about construction jobs as being "generated". Construction jobs are contracts. Building a datacenter might put 3000 people under contract temporarily but it doesn't "generate" jobs. Once the contract is complete those contractors they're no longer paid by the builder.

The word "generated" is used to make it sound like the project opened up 3000 new permanent jobs for people. Those contractors were employed before the contract and will be employed on another contract at some later point. There's no net gain of jobs in the long run. The contractors won't even necessarily be local. The builder isn't going to call up Bob's AC repair from Collierville to do the specialized datacenter HVAC. They'll fly in a company specialized in that task who will fly home at the end of the contract.

The companies scrambling to build datacenters take advantage of that linguistic ambiguity and then the local politicians end up doing the same. They give these companies sweetheart tax/zoning incentives, proclaim contractors as "generated jobs", and then leave the locals with all of the negative externalities and none of the revenue.
by triceratops | 2026-02-26 15:53:05+00:00
China probably caught up the same way starting 40 years ago. Watching VHS tapes in English (or German, Japanese, or French) with Mandarin subtitles*. Clearly "never" is untrue because it's been done once already.

IMO this is all cyclical.

* This is metaphorical. Obviously there were also textbooks and research papers and technical manuals and everything else. The point is much of it came from abroad and they learned it all to the point that they're the experts today.
by tempest_ | 2026-02-26 15:53:38+00:00
I was trying to test the gemini-cli using code assist standard.

To this day I am unable to access the models they say I should be able to.

I still get 2.5 only, despite enabling previews in the google cloud config etc etc.

The access seems to randomly turn on and off and swaps depending on the auth used (Oauth, api-key, etc)

The entire gemini-cli repo looks like it is full of slop with 1000 devs trying to be the first to pump every issue into claude and claim some sort of clout.

It is an absolute shit show and not a good a look.
by LeifCarrotson | 2026-02-26 15:54:26+00:00
"There's no stopping it at this point" - Sure there is, if a handful of enormous datacenters pull the very large plugs (or if their shaky finances collapse), the dubiously intelligent machines will be turned off. They're not ultraintelligent yet.

Stopping it merely requires convincing a relatively small number of people to act morally rather than greedily. Maybe you think that's impossible because those particular people are sociopathic narcissists who control all the major platforms where a movement like this would typically be organized and where most people form their opinions, but we're not yet fighting the Matrix or the Terminator or grey goo, we're fighting a handful of billionaires.
Show HN: BetterDB Cloud – monitor Valkey/Redis in VPCs with a lightweight agent
by kaliades | 2026-02-26 15:54:30+00:00
If your Valkey or Redis instance runs in a private network whether self-managed on EC2, in a Docker Compose stack, or on a managed service getting monitoring data out is annoying. VPC peering, bastion hosts, or running your own Prometheus + redis_exporter + Grafana stack. None of it is hard, but none of it is fun either.
We just launched BetterDB Cloud with an agent that runs inside your network as a lightweight container. It connects outbound to our platform over WSS - no inbound ports, no VPC peering, no firewall changes. Drop it next to your database and it starts collecting.
What the agent captures that's different from existing tools:

Slowlog and COMMANDLOG persistence. Valkey's slowlog holds 128 entries by default. Once the buffer fills, old entries are gone. The agent captures every entry before it rotates and persists it. When your p99 spikes at 3am, the evidence is still there at 9am. COMMANDLOG (Valkey 8.1+) tracks large requests/replies - that 50MB MSET killing your network is now visible.
Client attribution. Not just "something was slow" but "app-server-03 sent 80% of the HGETALL user:* queries that caused the slowdown." Connects slow queries to specific clients.
Pattern analysis. Instead of scrolling raw slowlog, you see aggregated patterns: "HGETALL user:* accounts for 80% of slow queries, avg 12ms, mostly from 2 clients."
Per-slot metrics for clusters. If you're running clustered Valkey, per-slot key counts and memory distribution for spotting hot slots.
99 Prometheus metrics. If you already have Grafana, just point it at our /prometheus/metrics endpoint. Get Valkey-specific data that redis_exporter doesn't expose.

Important caveat on managed services: The agent works everywhere, but the value varies. On self-managed instances and standard ElastiCache, you get the full picture - slowlog, client lists, ACL logs, config monitoring. On fully managed services like ElastiCache Serverless that restrict admin commands (SLOWLOG, CLIENT LIST, ACL LOG), the agent is limited to what INFO provides. We surface core metrics (memory, CPU, connections, ops/sec, replication) but the historical persistence features that make BetterDB unique won't be available. The dashboard shows you exactly which features are available vs restricted for your instance.

Self-hosted: https://github.com/BetterDB-inc/monitor
Cloud: https://betterdb.com
Docs: https://docs.betterdb.com

Everything is free during beta - no credit card. Happy to answer architecture questions, take feature requests, or talk about the Valkey ecosystem.
by blnlx | 2026-02-26 15:54:40+00:00
An essay exploring how scale and monetization gradually shifted the internet from open exploration to subscription lock-in, behavioral sorting, and narrative segmentation.
The argument is that these shifts were not coordinated enclosures, but structural responses to uncertainty and growth.
https://borisljevar.substack.com/p/once-upon-a-time-the-inte...
by ryandrake | 2026-02-26 15:55:08+00:00
The concept of "grandfathering" rule breakers has always seemed like naked corruption to me. OK, we think this thing is so bad, that we're passing a law to ban it, BUT everyone who was already doing this bad thing can keep doing it forever because... because... because putting an existing company out of business is apparently the worst thing in the world. If our elected officials think something is bad enough to ban outright, then it should go whole hog and actually ban it. Not just prevent upstart competitors to existing legacy industry.
by vunderba | 2026-02-26 15:55:12+00:00
There's also an interesting set of benchmarks around giving LLMs a sort of "building-block harness and tools" to see how well they do putting together voxel-style models.

https://github.com/Ammaar-Alam/minebench

These kinds of tests which build models programmatically (SVG construction, Blender-MCP, etc) also make it significantly easier to make or request adjustments to the final output.