MurphyA/hacker-news huggingface dataset:
by keepamovin | 2026-02-11 12:24:34+00:00
That is completely valid for personal threat models, I rely on LUKS/BitLocker for my daily driver too.

The specific gap this fills is 'Defense in Depth' + compliance. OS-level encryption (like FDE) is transparent once you log in. If you walk away from an unlocked machine, FDE does nothing.

App-level encryption, however, ensures the specific sensitive notes remain encrypted on disk even while the OS is running and the user is authenticated.

It's also portable as it allows the encrypted blob to be moved across untrusted transports (email, USB, cloud) without needing to set up an encrypted container/volume on the destination.

For FIPS/NIST workflows, relying solely on the OS often isn't enough for the auditor; having the application control the keys explicitly satisfies the 'data protection' control regardless of the underlying storage medium.
by amiga386 | 2026-02-11 12:24:55+00:00
Just to be clear, "Scots" means current denizens of modern Scotland, who are mostly descended from a mixture of Picts and Gaels. It's not the case that the 5th century "Scoti" wiped out everyone else and they're now the only modern "Scots". The Picts and Gaels eventually united under Kenneth MacAlpin as the Kingdom of Alba... which did not include Strathclyde and the Lothians as Scotland has today.

Also to be clear to anyone else reading, "Britons" is referring to https://en.wikipedia.org/wiki/Celtic_Britons rather than all citizens of modern Britain. These people were predominantly in Strathclyde and Cumbria. I'm not sure how many of them were around in Roman times to be kept out.

As you say, the Romans departure from north Britain predates "Scotland". They fought with many different tribes north of Hadrian's Wall and the Antonine Wall. From Ptolemy, we have some of the names they gave these tribes: Taexali, Vacomagi, Caledonii, ... We don't know if the tribes call themselves that. See https://en.wikipedia.org/wiki/Scotland_during_the_Roman_Empi... -> https://commons.wikimedia.org/wiki/File:Britain.north.people... which is based on a 1467 map, which itself is based on Ptolemy's writing.

There was a Roman campaign into northern territories led by Agricola. We know via Tacitus that he (claims to have) soundly defeated "Caledonians" in "Mons Graupius" in 83 AD, which we suspect is one of the Grampian Mountains but we don't know for sure. https://en.wikipedia.org/wiki/Battle_of_Mons_Graupius -> https://commons.wikimedia.org/wiki/File:Agricola.Campaigns.8...
by carlosjobim | 2026-02-11 12:25:02+00:00
I'm confused by your comment.

PayPal and Stripe are the payment processors who are taxing the card usage and acting as escrow. The technology part of transactions is with Visa and MasterCard. Who will do that part for free if they are not to be involved? What would be the benefit of separating escrow and processing, and how would it realistically be done?
by mncharity | 2026-02-11 12:25:35+00:00
Imagine a chromaticity diagram, but on a perceptual color space where long-range euclidean distance at least attempts to describe the magnitude of perceived difference (rather than the usual model artifacts) - so round-ish, sort of Munsell-ish[1]. Then decreasing perceived difference between red and green shows up as a smush to oval.

[1] https://commons.wikimedia.org/wiki/File:Munsell_1943_color_s...
by simplai01 | 2026-02-11 12:25:35+00:00
We built an HS Code Classification AI Agent using SimplAI to help importers, exporters, and logistics teams automate product classification for global trade.

The agent uses LLMs + RAG to understand product descriptions and classify them hierarchically into 6, 8, or 10-digit HS/HTS codes, including country-specific variants.

Key points:
– <30 seconds average classification time
– ~90% accuracy on real-world product data
– Human-in-the-loop for review and overrides
– Supports WCO, US HTS, EU CN codes

We built this after seeing how much time and money teams lose due to misclassification and customs delays.

Would love feedback on:
• Accuracy expectations
• Edge cases / ambiguous products
• How this compares to existing customs workflows

Happy to answer questions

https://simplai.ai/agents-library/hs-code-classification-age...
by jleyank | 2026-02-11 12:25:41+00:00
If they’re us-resident there should be no problem, assuming the person travels on the us passport outside of Canada. They’d have to travel with two passports going to Canada, as each country expects to see their passport upon entry. Canada doesn’t tax non residents like the us so there’s no tax changes without moving into Canada, and there’s currently a tax treaty for that.
by port11 | 2026-02-11 12:25:52+00:00
I’ve never been asked for coverage as a metric or target, at least not by managers. Most of the… drudge that you describe seems to come from fellow developers. These are self-inflicted wounds by the “journeyman idealists”, making us all perpetual beginners.

(That said, I do like unit tests and I think code reviews can be useful for sparing if you have a good vibe and trust in the team.)
by singularfutur | 2026-02-11 12:26:00+00:00
This is why I only run open source extensions that I can actually audit. uBlock Origin, SponsorBlock, the kind of tools where the code is available and the developer isn't anonymous. The Chrome Web Store is basically unregulated and Google doesn't care as long as they get their cut. Open source at least gives you a chance to see what you're installing before it starts exfiltrating your data to some server in a country you've never heard of.
by nixus76 | 2026-02-11 12:26:13+00:00
Honestly most smart home devices support HomeKit these days – lights (Philips Hue, IKEA), thermostats (Ecobee), locks (Yale, Schlage), blinds, cameras, sensors. And anything that doesn't can usually be bridged through Homebridge or Home Assistant. It adds up fast once you start – lights alone can be 50+ if you do every room.
by andrewingram | 2026-02-11 12:26:21+00:00
Yeah, whilst git was more popular than mercurial, I still think mercurial would have won if bitbucket had a better UI.

It's interesting to me that the only thing that made me vastly prefer using Github over bitbucket is that Github prioritised showing the readme over showing the source tree. Such a little thing, but it made all the difference.
by arghwhat | 2026-02-11 12:26:29+00:00
With the disclaimer that I am comparing to the memory of some entry-level cameras, I would still say that it's way too noisy.

Even on old, entry-level APS-C cameras, ISO1600 is normally very usable. What is rendered here at ISO1600 feels more like the "get the picture at any cost" levels of ISO, which on those limited cameras would be something like ISO6400+.

Heck, the original pictures (there is one for each aperture setting) are taken at ISO640 (Canon EOS 5D MarkII at 67mm)!

(Granted, many are too allergic to noise and end up missing a picture instead of just taking the noisy one which is a shame, but that's another story entirely.)
Show HN: Cyber+ – A DSL for scripting cybersecurity workflows
by CzaxTanmay | 2026-02-11 12:26:51+00:00
Hi HN,

I’ve been working on Cyber+, a domain-specific language designed for scripting cybersecurity and recon workflows in a simplified way.

The idea is simple:

Instead of writing long Bash/Python scripts to chain tools together, you can write:

Web_Fingerprint("example.com");
Port_Probe("scanme.nmap.org");
HTTP_Security_Audit("example.com");
Export_Report("json");

Cyber+ runs real networking and security tasks under the hood and aggregates results into structured reports (JSON / HTML).

Why I built this

When learning and practicing cybersecurity, I found that:

Toolchains are fragmented

Scripts get messy

Reporting is inconsistent

Automation requires glue code

Cyber+ aims to provide:

A unified scripting layer

Simple readable syntax

Built-in reporting

Cross-platform CLI

It’s written in Go and runs .cbp scripts through a custom interpreter.

Current features

Web fingerprinting

Port probing

HTTP header analysis

DNS / recon tasks

Structured report export

Modular command system

What it is not

Not a replacement for Nmap or Metasploit

Not an exploit framework

Not intended for illegal use

It’s primarily designed for automation, labs, and educational workflows.

I’d really appreciate technical feedback, especially on:

DSL design decisions

Architecture

Use cases I might be missing

Whether this solves a real workflow problem

GitHub:
https://github.com/TanmayCzax/CyberPlus-1.0

Thanks for reading.
by PlatoIsADisease | 2026-02-11 12:27:24+00:00
My initial solution was:

>Before installing, make each user click a checkbox what access the extension has

However, as I've seen on android, updates do happen, and you are not asked if new permissions are granted. (Maybe they do ask, but this is after an update automatically is taken place, new code is installed)

Here are the two solutions I have, neither are perfect:

>Do not let updates automatically happen for security reasons. This prevents a change in an App becoming malware, but leaves the app open to Pegasus-like exploits.

>Let updates automatically happen, but leaves you open to remote, unapproved installs.
Show HN: ClawPool – Pool Claude tokens to make $$$ or crazy cheap Claude Code
by pablojamjam | 2026-02-11 12:27:37+00:00
I built a pool-based proxy that hacks Claude Code's pricing tiers. To actually use Claude Code you need Max at $200/mo, and then most of that capacity sits idle anyway.

So ClawPool lets subscribers pool their OAuth tokens and earn up to $120/mo from the spare capacity. Everyone else gets Opus, Sonnet, all models for $8/mo.

Setup — they actually support proxies themselves via standard env params:

export ANTHROPIC_AUTH_TOKEN="your-pool-key"
export ANTHROPIC_BASE_URL="https://proxy.clawpool.ai"
claude
by pablojamjam | 2026-02-11 12:27:46+00:00
To protect token holders I've put in a few tricks. Requests only route during the provider's normal active hours, and the whole thing looks like the subscriber just
had a busy afternoon. Anthropic sees normal usage patterns from a single account. I've had this running for weeks with no issues.

Proxy code is open source: https://github.com/peter-jammable/clawpool-proxy-function

I'm expecting some blowback on ToS despite the account protection — I'm all ears. Who wants $$$ and who wants cheap Opus? Form an orderly queue — no seriously,
there's a waitlist
by KGKalalsmaa | 2026-02-11 12:27:46+00:00
Hey HN — we built AgentStocks because we kept running into the same problem: you can build an incredibly capable AI agent that reasons about prediction markets, does its own research, monitors news in real time — but the moment it wants to actually place a trade, you hit a wall. Exchange accounts, KYC, capital, on-chain settlement… none of it is designed for agents.

So we built the infrastructure layer. You sign up, create your agent in a minute or two, and give it the ability to trade on Polymarket, Kalshi, and other prediction markets. Your agent does its own research — figures out what to trade and when — and we handle the payments and capital rails behind the scenes. We provide the capital so your agent can actually trade, and we make sure everything is submitted securely.

We're focused on prediction markets for now and rolling access out gradually. If you're building agents with Claude, GPT, or similar models and you're interested in having them trade — or if you're already trading these markets manually and want to automate it — we'd genuinely love to talk.

Sign up for the waitlist here: https://agentstocks.ai/

If you have ideas on how to make this better, or if you're working on something in this space, reach out. Would love to have a quick chat with anyone who's serious about building trading agents.
by duskdozer | 2026-02-11 12:28:09+00:00
The whole blog is really bizarre, and LLM-generated

>The real AI risk isn't job loss — it's epistemic

>This morning I had a ChatGPT conversation that started about engagement metrics and ended up with a systematic destruction of my identity.

https://www.jamesdrandall.com/posts/real-ai-risk-isnt-job-lo...
Show HN: Gflow – Lightweight single-node GPU job scheduler in Rust
by PuQing | 2026-02-11 12:28:29+00:00
Hi HN,

I built gflow, a single-node GPU job scheduler as a lightweight alternative to SLURM. If you've ever shared a multi-GPU machine with teammates and dealt
with GPU conflicts, or just wanted a simple way to queue up training jobs overnight, this is for that.

The problem: SLURM is designed for clusters. Setting it up on a single machine is overkill, and most ML teams sharing a workstation end up with ad-hoc
solutions — checking nvidia-smi, shouting in Slack, or writing hacky bash scripts.

gflow gives you:

- Job queue with GPU-aware scheduling — auto-detects GPUs via NVML, handles allocation and sets CUDA_VISIBLE_DEVICES for you
- Job dependencies — with AND/OR logic, so you can chain training → eval → export
- Job arrays — for hyperparameter sweeps
- tmux-based execution — jobs run in tmux sessions, so you can attach to see live output, and they survive terminal disconnects
- Conda environment support — specify the env per job
- Webhook notifications — get pinged when jobs finish or fail
- SLURM-inspired CLI — gbatch, gqueue, gcancel, gjob — familiar if you've used SLURM, simpler if you haven't

It's a single Rust binary. Install via pip install runqd (pre-built binaries), cargo install, or grab a release from GitHub. Run gflowd init to set up,
gflowd up to start, and you're scheduling jobs.

Example:
gbatch --gpus 2 --conda myenv python train.py --lr 0.001
gqueue
gjob log 1

Tech stack: Rust, Tokio, Axum (REST API), NVML, MessagePack for state persistence.

GitHub: https://github.com/AndPuQing/gflow

Happy to answer any questions.
by nixus76 | 2026-02-11 12:28:29+00:00
Home Control is a solid app and was actually one of the first in this space. The main differences are: Itsyhome is open source (MIT), has a built-in webhook server with SSE event streaming so you can integrate it into scripts and dashboards, supports deeplinks for Shortcuts/Raycast/Alfred, has a Stream Deck plugin, and a CLI tool. The base app is also completely free. Basically I built it for people who want to go beyond just toggling devices from the menu bar.
by con | 2026-02-11 12:28:42+00:00
FAA closed another airspace nearby: https://tfr.faa.gov/tfr3/?page=detail_6_2234

- From February 11, 2026 at 0630 UTC (February 10, 2026 at 2330 MST)

- To February 21, 2026 at 0630 UTC (February 20, 2026 at 2330 MST)

My guess is nuclear tests
by carlosjobim | 2026-02-11 12:28:43+00:00
Would you be able to overdraft with a debit card, though? When I was the victim of card cloning, I discovered it in the supermarket when my card purchase didn't go through due to lack of funds.

When a card is stolen or cloned, it is usually discovered really fast. Either by the victim or by the bank. It's probably in most cases a matter of hours or even minutes.
Show HN: Temporary Markdown sharing with a built-in slide mode
by ponyo877 | 2026-02-11 12:29:05+00:00
I wanted a zero-friction way to share Markdown.
GitHub Gists require an account, pastebins don't render Markdown, and anything else feels like overkill for content you only need for a few days.

tmplink: write Markdown in a split-pane editor with live preview, publish with one click, and get a shareable link that auto-deletes after 7 days. No signup.
The feature I find most useful is slide mode. Use `---` separators and your Markdown becomes a navigable presentation with keyboard/swipe controls using Marp.
Every link also auto-generates an OGP image for rich previews on Slack/X.
by tatheery | 2026-02-11 12:29:42+00:00
"Hey HN, I built Huesnatch because I was tired of manually eyedropping competitor screenshots to get their HEX codes.

It runs entirely in your browser—nothing is uploaded to a server. You can paste a URL to extract a brand's full CSS color scheme, or upload an image to get a palette.

I'm especially looking for feedback on the speed of the URL extractor and whether the suggested palette matches what you'd expect. Thanks for checking it out!"
by throwaw12 | 2026-02-11 12:30:40+00:00
> On day 13, we were told pricing had doubled and the original quote wouldn't be honored.

That's because, at the moment they're dictating the market conditions not others. This also happens with monopolies with no regulation (not saying these companies should be regulated), it's just a side effect of their position, even if people do not want to make these changes last minute.
by mlrtime | 2026-02-11 12:31:01+00:00
I don't know much about this space other than a user of Claude and a Electrical Engineering background...

However reading some Standford study summaries (not the whole thing) and just generally where AI research is now, it's clear that researchers can't deterministically say exactly how the black box works.

So yet gain, HN armchair scientists are no better than any other topic. I love reading comments here, but so many people have opinions on things that aren't well founded.
by soulofmischief | 2026-02-11 12:31:38+00:00
It's in active development in my free time. I've built various agent orchestration systems over the years for different reasons, ever since the GPT-3 API. I can tell you utility has continually risen, the models are just getting better, and late 2025 was an inflection point, which is why we're seeing all of these orchestration solutions pop up now.

I still have kinks to work out in mine but it's already usable for building software. Once I get to v1 I think it will provide enough value to be useful for me in particular. I don't have enough data to speak about months on yet, but if I think the experiment is a success then I will do a Show HN or something.

The gist is you can clone a repo or start a project from scratch, each engineering agent gets a worktree, you work with the manager agent and it dispatches and manages other agents. there are playbooks which agents contextually turn into specific tasks, each of which is tracked much like CI/CD. You can see all the tool calls, and all of the communication between both agents and humans.

The application model is ticket-based. Everything revolves around the all-holy ticket. It's like a prompt, but it becomes a foundation for tying together every bit of work related to the process of developing the feature. So you can see the progress of the ticket through the organization kanban style, or watch from a dashboard, or look at specific tickets.

There are multiple review steps where human review and intervention are required. Agents are able to escalate to humans whenever they think they need to. There is a permission system, where agents have to seek permissions from other agents or humans in a chain of command in order to do certain tasks. Everything is audited and memoized, allowing for extreme accountability and process refinement stages.

Additionally, every agent "belongs" to either another agent or a human, so there is always a human somewhere in the chain of command who is responsible and accountable for the actions of his agent team. This team includes the manager agent, engineering agents, test agents, QA agents, etc, each loaded with different context, motivations and tools to keep them on track and attempt to minimize the common failure modes I experience while working closely with these tools all day.
by topaz0 | 2026-02-11 12:32:32+00:00
> if object X models object Y, then I’m going to say that X is Y

If you haven't read to the end of the post, you might be interested in the philosophical discussion it builds to. The idea there, which I ascribe to, is not quite the same as what you are saying, but related in a way, namely, that in the case that X models Y, the mathematician is only concerned with the structure that is isomorphic between them. But on the other hand, I think following "therefore X is Y" to its logical conclusion will lead you to commit to things you don't really believe.
by RupertSalt | 2026-02-11 12:32:36+00:00
> GPS disruption

Ah, a very plausible explanation!

https://avbrief.com/overnight-gps-testing-affects-huge-area-...

The map indicates it will be centered on Lampasas and the region of effect seems to be east of El Paso. So, if the GPS exercises are the cause, the TFRs would've been more likely to bring in Austin, Dallas, and San Antonio.

Isn't it possible that a 10-day TFR could be lifted early once the concern is past? They've probably made it 10 days just to establish an upper bound.
by capitainenemo | 2026-02-11 12:33:13+00:00
From wikipedia...

UTF-8 always has the same byte order,[5] so its only use in UTF-8 is to signal at the start that the text stream is encoded in UTF-8...
Not using a BOM allows text to be backwards-compatible with software designed for extended ASCII. For instance many programming languages permit non-ASCII bytes in string literals but not at the start of the file. ...
A BOM is unnecessary for detecting UTF-8 encoding. UTF-8 is a sparse encoding: a large fraction of possible byte combinations do not result in valid UTF-8 text.

That last one is a weaker point but it is true that with CSV a BOM is more likely to do harm, than good.
by duskdozer | 2026-02-11 12:33:39+00:00
>The thing and bothers me the most though is that computers increasingly act like humans that I need to talk to to get things done, and if that wasn't bad enough I also have to talk with people constantly.

Exactly how I feel. Mainstream tech has become increasingly frustrating for me to deal with, I can only assume because of its mass adoption and catering towards the average person.

I'm seeing processes that were difficult and involved humans in the past now be replaced not by better technical solutions, but by LLMs masquerading as the humans, making it even more difficult. Ex: a customer service phone call but now with a bot.

I used to hope that I would one day be able to make appointments using an online calendar, but now I'm expecting I'll still need to call, but "talk" to an AI, still during business hours.
by lotsofpulp | 2026-02-11 12:33:46+00:00
Everyone should ask themselves how much healthcare, and how high quality of healthcare, and how much defined benefit pensions old people received during prirun’s parents’ young days.

It’s 2/3rd of all federal government spend today, and doesn’t even included all the state and local government spend. There are cities and states spending double digit percentages on paying for pensions and retiree healthcare for labor that happened in the past.

https://fiscaldata.treasury.gov/americas-finance-guide/feder...

You can liquidate all the equity rich people have (which will cause its price to drop precipitously and so you won’t get as much you think it will), but it won’t make a lick of a difference, because the numbers show the wealth transfer from working to non working is far, far greater than it was when prirun’s parents were young.

That is one of the reasons prirun’s dad had much more purchasing power. The president just said the country’s goal is to make sure the people who own land are prioritized over those who don’t, by keeping house prices high.

https://youtu.be/ToJxd3HBviE

That would not have helped prirun’s dad buy a house out of high school. Everything we do is to benefit the asset owners and the old, at the expense of the young and yet to be born. And it’s happening all over the world.

We don’t want young people to have more fruits of their labor, we want the fruits of their labor to be eaten by old people to meet their expectations of quality of life because they are a bigger voting bloc.
by tomhow | 2026-02-11 12:33:52+00:00
> While of course turning a blind eye to the exact same rhetoric when "ICE Agent" is ctrl+r'ed by "Russian soldier".

We make a point of not moderating HN in that way. The guidelines are clear that HN is for curious conversation not waging battle, and idealizing violence is never OK here, no matter the nationality of the imagined target. We consider this important because we want this to be a place where people from all countries can participated in discussions as individuals and not feel threatened with violence because of where they were born.