MurphyA/hacker-news huggingface dataset:
by embedding-shape | 2026-02-11 14:46:01+00:00
I just threw up a public Forjego instance for some lightweight collaboration. About 2 minutes after the certificate was created, I'm guessing they picked up the instance from the transparency logs for certificates, and started going through every commit and so on from the two repositories I had added.

Watched it for a while, thinking eventually it'd end. It didn't, seemed like Claudebot and GPTBot (which was the only two I saw, but could have been forged) went over the same URLs over and over again. They tried a bunch of search queries too at the same time.

The day after I got tired of seeing it so added a robot.txt forbidding any indexing. Waited a few hours, saw that they were still doing the same thing, so threw up basic authentication with `wiki:wiki` as the username:password basically, wrote the credentials on the page where I linked it and as expected they stopped trying after that.

They don't seem to try to bypass anything, whatever you put in front will basically defeat them except blocking them by user-agent, then they just switch to a browser-like user-agent instead, which is why I went the "trivial basic authentication" path instead.

Wasn't really an issue, just annoying when they try to masquerade as normal users. Had the same issue with a wiki instance, added rate limits and eventually they seemingly backed off more than my limits were set too, so I guess they eventually got it. Just checked the logs and seems they've stopped trying completely.

Seemingly it seems like people who are paying for their hosting by usage (which never made sense to me) is the ones hard hit by this. I'm hosting my stuff on a VPS, and don't understand what the big issue is, worst case scenario I'd add more aggressive caching and it wouldn't be an issue anymore.
by soulofmischief | 2026-02-11 14:46:06+00:00
We had to take Geography, Social Studies, World History, American History, Civics, etc. as separate classes.

Islands/fjords etc were covered in Geology/Earth Science, and we also took separate courses for those as well.

Geography was reserved for understanding where things are in the Earth, how borders are defined, a little bit of world history as far as borders changing, etc. And also Apartheid for some reason because I guess they didn't know where else to stick that lesson in.

Rote memorization has never been my strong suit and so I suffered a lot in geography as it was taught to me. I got a D in that class. Now that I'm out of school and can actually properly learn, it all sticks a lot better because I've learned to contextualize everything and link together facts.
by titzer | 2026-02-11 14:46:18+00:00
I might be dumb, but I thought the whole point of markdown was to get rid of all the bells and whistles of styling, having a really simplified and dumb format that only outlines structure. The follow-on being that many tools could parse, transform and render said markdown files in a way that makes sense for them. That way there's lots of tools that don't share code, but a shared definition of the format. I.e. markdown is a format (!?).

The problem is that overall we seem to have fumbled both the concept and the implementation. There a bunch of vaguely similar but incompatible markdowns and apparently rendering them is too hard and people immediately reach for an enormous pile of software (usually a web stack) to render it for them.

It should have been entirely possible for a person to write a markdown parser in a couple hours and e.g. render paragraphs, bulleted lists and tables into a terminal.
Show HN: Godot MCP – Give AI assistants full access to the Godot editor
by tomyud | 2026-02-11 14:46:21+00:00
Hi HN, I built an open-source MCP server + Godot editor plugin that gives AI assistants (Claude, Cursor, etc.) direct access to the running Godot editor.
The problem: AI coding assistants can edit scripts, but they're blind to the Godot editor. They can't see your scene tree, add nodes, check for errors, or understand your project structure. You end up copy-pasting context back and forth.
The solution: A Godot plugin connects to an MCP server via WebSocket. The AI gets 32 tools that execute inside the live editor - scene manipulation, script editing with validation, project search, console error reading, node property discovery, and more.
How it works:
Install the MCP server: npx -y godot-mcp-server
Copy the plugin into your Godot project
Enable it, and your AI assistant can now talk directly to the editor
What makes this different from other Godot AI tools: Tools run inside the actual editor, not by parsing files from disk. When the AI adds a node, it appears in the editor immediately. When it reads errors, it gets real editor diagnostics, not regex guesses.
Built with TypeScript (MCP server) and GDScript (plugin). MIT licensed.
GitHub: https://github.com/tomyud1/godot-mcp
Would love feedback, especially from anyone doing AI-assisted game dev.
by iso1631 | 2026-02-11 14:46:33+00:00
ctrl-k is for the search box

ctrl-l is for the address box

At most I want the address box to do is look up a dns name. Which can still be a risk if I were to hit "enter" with sensitive information which could in some cases get pushed out to my DNS provider (which is me, but then it's possible the address would be pushed out to another resolver, and will also be logged in an unexpected place)
by mythz | 2026-02-11 14:46:36+00:00
Lets not miss that MiniMax M2.5 [1] is also available today in their Chat UI [2].

I've got subs for both and whilst GLM is better at coding, I end up using MiniMax a lot more as my general purpose fast workhorse thanks to its speed and excellent tool calling support.

[1] https://news.ycombinator.com/item?id=46974878

[2] https://agent.minimax.io
by tango7 | 2026-02-11 14:46:51+00:00
It's curious that you only list digital/NFT artists, and fail to see the problems that many of these solve.

In a world re-calibrated to pure problem-solving, presumably we'd ask a mime or other non-digital artist for news on what our government is doing (instead of the Fake News Media), and then an interpretive dancer, not a lobbyist, would intermediate between government and industry? The trombone players would investigate financial crimes, the bassists would monitor our airspace, and the guy currently painting a mural on a wall would be responsible for DoorDashing a cargo ship's worth of food and supplies to a disaster zone (not the bad NGOs)?

Yeah, this is just a list of jobs you don't understand and/or make you feel sad.
by btbuildem | 2026-02-11 14:46:51+00:00
> doesn't make financial sense to self-host

I guess that's debatable. I regularly run out of quota on my claude max subscription. When that happens, I can sort of kind of get by with my modest setup (2x RTX3090) and quantized Qwen3.

And this does not even account for privacy and availability. I'm in Canada, and as the US is slowly consumed by its spiral of self-destruction, I fully expect at some point a digital iron curtain will go up. I think it's prudent to have alternatives, especially with these paradigm-shattering tools.
by throw0101a | 2026-02-11 14:46:52+00:00
> None of these car reviewers ever take into account build quality and customer issues.

Because most car reviewers' job is to explain new releases. Most issues arise after time, which reviewers generally don't get. MKBHD has gone into quality issues at times: see for example Cybertruck [1] and Fisker Ocean [2]. In their Q&A videos, the couple that does Motormouth [3] due mention reliability when asked for recommendations.

There are sources for reliability assessments, like J. D. Power and Consumer Reports.

[1] https://www.youtube.com/watch?v=O0cs8aIXgkc&t=8m

[2] https://www.youtube.com/watch?v=6xWXRk3yaSw

[3] https://www.youtube.com/user/Motormouthcanada/videos
by cmrdporcupine | 2026-02-11 14:47:03+00:00
Yeah I did the same (cancel Anthropic). Mainly because the buggy/bloatiness of their tooling pissed me off and I got annoyed by Dario's public pronouncements (not that SamA is any better).

I ended up impressed enough w/ GPT 5.3 that I did the $200 for this month, but only because I can probably write-off as business expense in next year's accounting.

Next month I'll probably do what I just said: $20 each to OpenAI and Google for GPT 5.3 and Gemini 3 [only because it gets me drive and photo storage] and only use GPT for nitty gritty analysis heavy work and review.
by pragmatic | 2026-02-11 14:47:18+00:00
We’ve got repos full of 90% complete vibe code.

They’re all 90% there.

The thing is the last 10% is 90% of the effort. The last 1% is 99% of the effort.

For those of us who can consistently finish projects the future is bright.

The sheer amount of vibe code is simply going to overwhelm us (see current state of open source)
by jerrygoyal | 2026-02-11 14:47:23+00:00
Hi! I wanted to share a quick thought – there are some AI copilot extensions out there that are essentially spying on their users (like Monica AI, which is a good example). I've built an AI extension that's completely different – it doesn't spy on you and you can also use your own API key. You can check it out here: https://jetwriter.ai
by Johnny555 | 2026-02-11 14:47:24+00:00
Then there's no real infection risk if they'll continue to let people drive out of the area, including let people drive a 4 or 5 hours to another airport to make their trip.

Closing the El Paso airspace will reduce the number of people flying, but not stop it, lots of people will make the drive to Tucson or Albuquerque to catch a flight.
by ekidd | 2026-02-11 14:47:37+00:00
Yeah, if a cartel actually used anti-aircraft weapons on a US passenger plane in US airspace? It wouldn't even matter if MAGA or the Democrats were in charge. The US would collectively lose its shit and spend the next 10 years and several trillion dollars retaliating against the cartels. The media would be ecstatic, because it would give them a decade of story arcs, starting with "our brave troops in uniform" all the way through to covering the eventual quagmire and anti-war protests. By year 6-8, editorial columnists would be writing columns reconsidering their initial support for the war.

Please, let's not do this.
by swalsh | 2026-02-11 14:47:59+00:00
We just saw last week people are setting up moltbots with virtually no knowledge of what it has and doesn't have access. The scenario that i'm afraid of is China realizes the potential of this. They can add training to the models commonly used for assistants. They act normal, are helpful, everything you'd want a bot to do. But maybe once in a while it checks moltbook or some other endpoint China controls for a trigger word. When it sees that, it kicks into a completely different mode, maybe it writes a script to DDoS targets of interest, maybe it mines your email for useful information, maybe the user has credentials to some piece that is a critical component of an important supply chain. This is not a wild scenario, no new sci-fi technology would need to be invented. Everything to do it is available today, people are configuring it, and using it like this today. The part that I fear is if it is running locally, you can't just shut off API access and kill the threat. It's running on it's own server, it's own model. You have to cut off each node.

Big fan of AI, I use local models A LOT. I do think we have to take threats like this seriously. I don't Think it's a wild scifi idea. Since WW2, civilians have been as much of an equal opportunity target as a soldier, war is about logistics, and civilians supply the military.
by bobchadwick | 2026-02-11 14:48:06+00:00
Modern cars aren't built as well.

Can you cite a source for this? There's no question that they're vastly more complex, but I would think that modern car manufacturing is far more exacting (and efficient) than in the past.

If you're saying that older cars are more repairable, I'm happy to agree with you, even without a source to back up that claim.
by ajross | 2026-02-11 14:48:16+00:00
Probably the least trustworthy actor in any such communication is a US Cabinet Secretary. They've all been caught lying repeatedly in this administration, about big things and small.

Their mendacity is matched, thankfully, only by their incompetence. Likely they closed the airspace and issued that ten day (!!) warning in error, or expectation of some kind of action that ended up being aborted, or they got pushback from a quarter they didn't expect.
by nostrademons | 2026-02-11 14:48:19+00:00
Word of mouth and on-the-ground sleuthing.

The community in question was put on our radar screen when we attended a party that one of my wife's business school friends threw. It's not well-known; even in our metro area, most people probably wouldn't recognize the name or be able to place it on a map.

But then when we were house-hunting, I just drove through all the residential neighborhoods within commuting distance of our jobs. And took note of where I saw people a.) out walking and b.) talking to their neighbors. Reported to my wife (who thought this was a nutty waste of time, but really values community) "I think you'll like it here", then paid the exorbitant home value to actually buy a home in the area. Indeed, we did like it here.
by lock1 | 2026-02-11 14:48:53+00:00
That's true, but then again, don't forget the fact that words might get interpreted as different things in different people. Words like "arrow", "functor", or "validate" might get interpreted differently in different people from different backgrounds.

Arguably, it's more useful to distinguish between "parse" vs "validate" and I agree with that. But based on my own experience and what I've observed when I'm trying to spread type-driven style, it looks like there's no difference in meaning between the words "parse" and "validate" for most developers. Trying to sell type-driven style via the "catchy catchphrase" "Parse, Don't Validate" will certainly backfire, confusing most people rather than making them appreciate the value of it.

In my opinion, it's not worth it to combat this "parse" & "validate" misconception for the sake of the catchphrase "Parse, Don't Validate". Why? Pure FP and type-driven style already put off most people because of the tendency to go with mathematical jargon. Why add even more unnecessary barriers when the core of it is just "utilize your type system"?

I agree with the point of the "Parse, Don't Validate" article, but I strongly dislike the "catchphrase" marketing part.
by aed | 2026-02-11 14:48:54+00:00
I actually had Claude build some instructions for agents based on some old (circa turn of the century) FAQs/game guides I found online. So maybe I'm biasing everyone's model too much.

https://github.com/andrewedunn/hallucinating-splines/blob/ma...

But you can tell it to do different things, somewhere someone made a city that spells "HI".
by lab14 | 2026-02-11 14:48:57+00:00
- meh, i asked what happened to Virginia Guiffre and it told me that she's alive and well living with her husband and children in australia

- i pointed out that she died on 2025 and then it told me that my question was a prank with a gaslighting tone because that date is 11 months into the future

- it never tried to search the internet for updated knowledge even though the toggle was ON.

- all other AI competitors get this right
by philwelch | 2026-02-11 14:49:12+00:00
> I'd love to hear about your economical plan to extract resources and populate the rest of the solar system.

A good starting point is Gerard O’Neill’s 1977 book The High Frontier.

> It currently costs approximately $4,000 per kg to transport anything into space, that's current bargain basement SpaceX pricing. It also consumes non-renewable fossil fuels to do so.

There are plenty of materials in the solar system that aren’t at the bottom of a gravity well. It’s just a question of developing ISRU infrastructure. The fossil fuel problem is already solved; all of the newest rockets use methane fuel, which can be produced without fossil fuels.

> Let me know how you plan to figure out planetary terraforming, gravity manipulation (so we can live on planets with vastly different gravity), planetary climate management, off-earth mining. How many of these problems have been solved even with 1-5% progress?

Half of those aren’t serious problems. You don’t need to terraform anything to fit quadrillions of people into the solar system because you can just use small bodies like the moon as material for space colonies. You stated yourself how expensive it is to get out of the gravity well; why go back down into another one? The space colonies—which can be built with known materials, at scales approximating that of a US county—would rotate, providing artificial gravity through centrifugal force. ISRU (“off-earth mining”) is a very active field of research.

The obvious next step is to industrialize the Moon and build a mass driver out of lunar materials that we can use to ship lunar materials into cislunar space for construction. The best discussion of how to do the practical next steps that I’ve encountered is Ian Long’s YouTube channel, Anthrofuturism. (https://youtube.com/@anthrofuturism). The best starting point there is “How To Develop The Moon” (https://youtu.be/WZN2xXMb28g), largely based on his book, also titled How To Develop The Moon (https://a.co/d/0dn84hJa).

There’s a beautiful future available to us if we can escape the bucket crabs.
by falcor84 | 2026-02-11 14:50:08+00:00
Annoyed with how the AWS console sometimes changes regions on its own, I recently decided that I need an extension to make the current region displayed prominently. After a bit of research, I found the AWS Colorful Navbar [0] extension, which does pretty much exactly what I wanted, but (understandably) requires granting it "This extension can read and change your data on sites" on `://.console.aws.amazon.com/*`, which I'm not willing to give to an external extension. So my solution was forking the repo [1], carefully auditing the code, and then installing it from a local clone (which they actually have a nice explanation for). Going forward, I think I'll try using this approach for all sensitive extensions.

[0] https://chromewebstore.google.com/detail/aws-colorful-navbar...

[1] https://github.com/nalbam/aws-navbar-extension
by myq0032 | 2026-02-11 14:50:17+00:00
I built the first MVP of CozAIPhoto in about two weeks of late nights and weekends, because every AI photo tool I tried still looked obviously “AI” — plastic skin, flat lighting, weird backgrounds. None of them gave me photos I’d actually feel good using on a dating profile or LinkedIn.

I’m not a photographer, just a solo indie maker who’s obsessed with photos that look like they were shot with a real camera — golden hour light, street candids, natural skin texture, real lens blur. I wanted that look, but without spending $300–500 on a photoshoot and forcing myself to pose in front of a camera.

So instead of giving up, I hacked together CozAIPhoto: a tiny AI photo studio focused on camera‑realistic portraits. You upload a few clear photos of yourself, pick a style like street, studio, travel, dating, or events, and it generates images where people’s first reaction is more “who took these for you?” than “is this AI?”.

It’s still an MVP — sometimes the hands are weird, sometimes the lighting isn’t perfect — but it’s already good enough that friends often can’t tell the photos are AI‑generated. That’s the bar I care about.
by nostrademons | 2026-02-11 14:50:20+00:00
The gates here are open when school is not in session, and we (and other families) do in fact use the school grounds for playdates on weekends.

But yes, it sucks that they have to exist, and that my kids have active shooter drills and the school has a plan for what to do in a mass-casualty event. Though so far, every time they've triggered the secure campus protocols, it's because a baby coyote likes to hang out on the stairs.
by gruez | 2026-02-11 14:50:35+00:00
>Exploiting may require you to ship both the malicious EXE and the MD, then trick the user into clicking the link inside the MD. But then you could have just tricked them into directly clicking the EXE.

1. You can use UNC paths to access remote servers via SMB

2. Even if it's local, it's still more useful than you make it out to be. For instance, suppose you downloaded a .zip file of some github project. The .zip file contains virus.exe buried in some subfolder, and there's a README.md at the root. You open the README.md and see a link (eg. "this project requires [some-other-project](subfolder\virus.exe)". You click on that and virus.exe gets executed.
by RupertSalt | 2026-02-11 14:50:47+00:00
Your replies are really obtuse and you seem more like a MUD player than a Unix administrator.

Yes, that is an /etc/passwd entry for a Unix user with a 9-character username. A Unix user could log in to telnetd on port 23/tcp and be dumped into a game called "Adventure" as their "login shell" instead of a Bourne or Bash shell. (They could also access this "shell" via ssh on tcp/22 or rlogin on tcp/513, or a local console terminal.)

I don't follow your point here. A MUD server occupying 23/tcp is very very different from a singular Unix user logging in to telnetd.

In fact this would not be a conventional way to log into a MUD server. Invoking "/usr/games/adventure" implies that you're going into a single-player game of some sort. Exactly as I mentioned Zork or Colossal Cave -- those weren't MUDs at all!

MUD clients require a server running with character logins. I have never ever seen this architecture to permit individual Unix users with "shells" as their client. You've constructed a completely artificial scenario in support of some unspoken agenda.

What exactly are you trying to school me on here? Are you trying to defend the practice of MUD servers occupying 23/tcp? Are you bitter about this filtering or something that crimps your style? I don't understand at all. Your TELNET protocol, your MUD servers, and your clients are all safe. Your MUD wizards made a bad, bad choice long ago when they picked port 23. They didn't understand the Internet very well, and you don't either.
by tsimionescu | 2026-02-11 14:51:07+00:00
I think the poster above may have accidentally worded their response a little too personally, but their point is valid and not against neurodivergent people (or, at least, there is a version that is close to their argument that is so).

It's perfectly fine to ask people to change be careful in their correspondence to a specific person to avoid certain issues.

It's not fine, however, even for neuro divergent people, to expect social norms to change for everyone to match their particular preferences.

If we read the original article as representing a request from the author to specifically not answer emails to them by apologizing for replying late, that's a perfectly fine request that anyone corresponding with them should follow (once they become aware of it). If we read it as a general recommendation to everyone to change this clear social norm, then it's not fine, the justification given (one person finds this puts some kind of pressure on them, and others might too) is not strong enough to warrant everyone else changing their behavior pre-emptively.