MurphyA/hacker-news huggingface dataset:
by Hizonner | 2026-02-24 15:11:52+00:00
IPFS doesn't even try to do any kind of anonymity or censorship resistance. In a practical sense it's probably worse than BitTorrent, although neither one of them is up to the task. Actually resilient data distribution is hard, and I don't think there are any systems that have all the needed elements.

... and if you create one, they can, and it's starting to look like they will, outlaw using it, regardless of what you use it for.
by rabf | 2026-02-24 15:12:00+00:00
My concern is that it will make developers even more lazy when optimising their code. What one hand giveth the other takes away. When has any advancement in the hardware not led to the same or worse software performance in few years time? There surely must be a name for this paradox. This will not result in you getting 1000fps. You will end up with the same `acceptable` refresh rates with worse rendering through novel hacks.
by ThrowawayR2 | 2026-02-24 15:12:16+00:00
Previous postings within the last day:

- I am a 15-year-old girl: the vile misogyny that confronts me on social media (theguardian.com)
17 points by Anthony-G 18 hours ago | 7 comments | https://news.ycombinator.com/item?id=47128245

- I am a 15-year-old girl. Social media is full of vile misogyny (theguardian.com)
13 points by smallpipe 1 day ago | 6 comments | https://news.ycombinator.com/item?id=47120892
by gmcquillan | 2026-02-24 15:12:27+00:00
We built a tool that catches migration regressions before production by replaying real query traffic against shadow databases.

The blog post walks through a concrete example: a missing index that causes a 92x regression on a core query path. Staging misses it because it has 100 rows instead of 25k. Scry catches it because it replays actual production queries at real data scale.

You can replay this exact scenario locally in under 2 minutes:

scry demo
Install: https://github.com/scrydata/scry-cli/releases

The demo spins up a source Postgres, applies a migration with a missing index, replays captured traffic, and shows you the regression report. No cloud account needed — everything runs locally.

Happy to answer questions about the architecture (transparent PG proxy for query capture, CDC replication for shadow databases, NATS for event streaming).
by rao-v | 2026-02-24 15:13:20+00:00
+1 this does seem to be a genuine attempt to actually build an interpretable model, so nice work!

Having said that, I worry that you run into Illusion of Conscious issues where the model changes attrition from “sandbagging” to “unctuous” when you control its response because the response is generated outside of the attribution modules (I don’t quite understand how cleanly everything flows through the concept modules and the residual). Either way this is a sophisticated problem to have. Would love to see if this can be trained to parity with modern 8B models.
Show HN: Microgpt-ts – Full GPT in 500 lines of TypeScript, zero dependencies
by sdubois | 2026-02-24 15:13:49+00:00
I ported Karpathy's microgpt [1] to TypeScript. It implements a complete GPT-2 architecture (autograd, tokenizer, multi-head attention, RMSNorm, and Adam optimizer), all in ~500 lines with zero runtime dependencies. It runs natively in the browser, no Python runtime or backend needed.

You can try it in the playground: https://microgpt-ts.vercel.app/playground

There are preset datasets (baby names, Pokemon, company names, movie titles, etc.) or you can paste your own text. The playground shows live loss curves as the model trains, and you can step through generation one token at a time to see the probability distribution at each step.

One difference from Karpathy's original is style. His microgpt is a single Python script optimized for brevity. This version splits the code into a few small files, types everything, and uses named helper functions (dotProduct, transpose, mean) instead of terse one-liners. The tradeoff is a bit more code, but it's easier to read and follow.

I built it up following the same progression as the blog post: bigram count table, then MLP with manual gradients, then autograd, single-head attention, multi-head + layer loop, and finally Adam. Each step is a separate PR and tag on GitHub [2] so you can follow along or check out any snapshot.

[1] https://karpathy.github.io/2026/02/12/microgpt/

[2] https://github.com/dubzdubz/microgpt-ts
by TacticalCoder | 2026-02-24 15:13:59+00:00
One question is: does the US wants to keep its big tech leader ship or not? Thankfully for the US the EU is nowhere in tech (biggest market cap is SAP and it's tiny compared to the US giants). But China is becoming big and quickly.

RAM makers are going to feel the heat from China soon. Batteries makers. China is eating the world with its EVs. Drones, etc.

If you're not nice with your corporations, they incorporate elsewhere: that's why the EU is nowhere in tech. Insane taxes since forever and a very strong anti-entrepreneurship mindset (in the EU you're a loser if you tried and fail, for example).

Companies like Meta, Google, MSFT, Apple, etc. should receive medals and thanks from the US government for the insane amount of money they syphon of the other countries and the wealth they create for the US.

Some countries are understanding this: in the UAE for example Dubai is now the world's busiest airport in the world for international passenger traffic. Some countries really fucked up big times to allow this to happen. Dubai is also now a very important hub for commodities trading. And diamonds: Antwerpen/Anvers (Belgium) used to be the city where the most diamonds exchanged hands, now it's... Dubai.

There is such a thing as competition between nation states and at some point entrepreneurs simply pick the best place to launch their businesses. And having the IRS using "tactics" to say that Meta owes them tens of billions does not send a nice message to people wondering in which country it's best to incorporate.

I now live in the country with the 2nd or 3rd highest GDP per capita in the world and that requires a mindset where businesses are welcome, entrepreneurs are welcome and the IRS doesn't feel like they're out there to get you at any cost.

And I'm here because I voted with my feet, my wealth and the future wealth I was going to create.
by artlessbfa | 2026-02-24 15:14:02+00:00
The year is 2026. Silicon Valley has been overrun.

Massive, bloated Series-B unicorns are roaming the streets of SF. They have zero revenue, thousands of employees, and their founders are fully vested. The entire ecosystem is collapsing under the weight of EU Regulations and lethal Return-to-Office mandates.

There is only one solution: Maude.

She is a rogue vibe coder armed with nothing but a laptop, oversized headphones, and a devastating arsenal of Zero-Shot Prompts.

Your objective is simple: Disrupt the bloatware. Vaporize the unicorns.

The Survival Guide:

The Arsenal: Fire Zero-Shot Prompts to destroy valuations.

H100 GPUs: Hoard 10 of them to temporarily achieve AGI God Mode.

The Diet: Survive on $14 toxic-positivity Matchas and 5-second bursts of unhinged rapid-fire from your Byn pouches.

The Threats: Avoid the RTO scanners and EU Regulation hurdles at all costs. They are instant death.

If you are currently employed at a pre-profit, post-Series-C startup, please be advised: Maude is approaching rapidly, and your severance package will not save you.

Play the simulator. Learn the routes. Prepare for disruption.
by addaon | 2026-02-24 15:14:03+00:00
See the other replies — think physical units. An aircraft velocity is a three-vector, but not all three vectors are aircraft velocity. There are probably many different aircraft velocity types, but taking a typical one (NED alignment, mm/s scaling, some particular precision), the type is the set of three vectors that can, for example, be meaningfully added to each other. It makes sense to add two aircraft velocities; it does not make sense to add an aircraft velocity and a pixel color (another three vector), so they are observably different types.
by baueric | 2026-02-24 15:14:31+00:00
All responses are so focused on exact predictions. We have high certainty that 50% of flips will be tails over long enough timespan. We don't know what any single flip will be. Climate science works the same way. But climate is not a coin, let's say it's a multisided die and it appears the sides are changing sizes as we compare data year over year.
Show HN: Tiny-parquet – JavaScript lib to read/write Parquet in 326KB of WASM
by Nikitaita | 2026-02-24 15:14:53+00:00
Built a JS library for reading and writing Apache Parquet files that actually fits on edge runtimes (CF Workers, Vercel Edge, Deno Deploy, etc.)

326KB total, zero dependencies, two functions: readParquet and writeParquet.

Flat schemas only — no nested types. Great for logs, events, analytics. ~100KB write takes ~5ms, ~20 MB/s throughput.

Been running it in production with millions of events per day. Rust/WASM core is ~440 lines.

npm install tiny-parquet

https://github.com/nktrchk/tiny-parquet
by skeeter2020 | 2026-02-24 15:15:41+00:00
This is not my experience. Claude has been happily generating code over the past week that is full of implicit any and using code that's been deprecated for at least 2 years.

>> Maybe the last 10 years saw so much more modern code than the last cumulative 40+ years of coding and so modern code is statistically more likely to be output?

The rate of change has made defining "modern" even more difficult and the timeframe brief, plus all that new code is based on old code, so it's more like a leaning tower than some sort of solid foundation.
by joe_mamba | 2026-02-24 15:15:42+00:00
>The answer was negative, but I was happy.

For sure it was a nice experience. Nowadays is getting super rare to get human written rejection emails anymore, let alone to kids.

>but maybe it learned me that asking doesn't cost anything, and that the worst thing that can happen is getting a negative answer?

Yeah, but what do you think happens when every kid from the UK asks McLaren for a student job? What happens when everyone from India asks McLaren for a student job?

A kid every couple of months asking you for a job is cute and adorable, 5000 kids asking you for a job per month is a nuisance.

The truth is that this attitude of "it doesn't hurt to ask" only works in high trust societies where all inquiries are done only in good faith, but doesn't scale at all when everyone on the planet starts doing it via "spray-and-pray" and it just quickly becomes spam and overwhelms their capacity to actually read and reply to messages of people who might be genuinely qualified, so we get the issue I mentioned at the start where all messages from applications now first go through ATS and AI bots instead of actual humans.
by Aachen | 2026-02-24 15:15:55+00:00
> maybe third time could be the charm: it's for preventing XSS holes

That information is in the question, so sadly no this still doesn't make sense to me because I don't understand any scenario in which this is what the developer wants. You always still need more code (to filter the right tags) or can just use textContent (separating data and code completely, imo the recommended solution)

> Maybe you meant .innerHTML? .innerText AFAIK doesn't try to parse HTML (why would it?)

No, I didn't mean that, yes it does, and no I don't know why it is this way. If you don't believe me and don't want to check it out for yourself, I'm not sure what more I can say to help the conversation
by KK7NIL | 2026-02-24 15:16:10+00:00
> If the metric is publication and citation count and funding is awarded by panels of experts, how is that better than cutting out the flawed metric and continuing to award funding via panels of experts?

I agree it's not perfect but that's still several steps removed from "Billy is one of us, he should get that tenured position" and, as this article shows, it requires openly unethical behavior, which others can recognize and eventually prosecute (even if that isn't being done often enough).

It's almost like saying "well corruption happens anyways so why do we even criminalize it and have public hearings? Just skip those bits and openly auction votes instead".
by 100agsh16 | 2026-02-24 15:16:42+00:00
> the cost for DRAM memory has increased up to 500% since September 2025

How to ruin the entire Internet, software engineering and personal servers just because some billionaire man children watched Star Trek 30 years ago.

They are coming for everyone, including those who promote this AI nonsense here and who will be disposed of first, because they are the least competent.
by owlbite | 2026-02-24 15:16:50+00:00
I think the current generation of tools have a long way to go before I trust any numerical algorithm they implement, based on our recent experiments trying to make it implement some linear algebra by calling LAPACK. When we asked it to write some sparse linear algebra code based on some more obscure graph algorithms it produced some ugly stepchild of dijkstra's algorithm instead, which needless to say did not achieve the desired aim.
by jerf | 2026-02-24 15:17:09+00:00
If I'm reading this right,

.setHTML("<h1>Hello</h1>", new Sanitizer({}))

will strip all elements out. That's not too difficult.

Plus this is defense-in-depth. Backends will still need to sanitize usernames on some standard anyhow (there's not a lot of systems out there that should take arbitrary Unicode input as usernames), and backends SHOULD (in the RFC sense [1]) still HTML-escape anything they output that they don't want to be raw HTML.

[1]: https://www.rfc-editor.org/rfc/rfc2119
by Hizonner | 2026-02-24 15:17:10+00:00
You have to trust someone to verify age.

You don't have to trust somebody not to track how the resulting credential is used. And that is what "zero knowledge" means. It means that after you finish the protocol, nobody has learned anything but what they were supposed to learn (in this case, "the person at the other end of this connection is over 18"). If it leaks anything else about the person, it's not zero knowledge. If somebody learns which of the issued credentials was used, it's not zero knowledge. If parties can collude to get information they're not supposed to get, it's not zero knowledge.

It's a technical term of art, not some politician's bullshit. And it isn't complicated to understand.
by mothballed | 2026-02-24 15:17:13+00:00
>..withdrawn directives to auditors to crack down on aggressive tax shelters..

The above might be a salient point, but as for the 1/4 auditors lost and the rest:

The low income (under 25k) with EITC, were the largest audited group with 298,485 of 626,204 audits performed in 2022. The rest of those earning under 200k had 250,391 audits.[]
48% of audits were under 25k income w/ EITC. 87% of audits were people under 200k income.

Kind of interferes with the idea these audits were all about going after the "rich buddies." They were way more about going after the poor than they were about going after the rich.

[] IRS management audit reports obtained via FOIA by via TRAC / https://tracreports.org/reports/706/
by wmeredith | 2026-02-24 15:17:17+00:00
> A refund is a deterministic business rule — order exists, within return window, amount matches. That decision shouldn't be made by an LLM at all.

I feel like this is the real key. LLMs are good at some things and bad at others. Deterministic logic (e.g. don't ever do "x") is not one of them.
Dev jobs up 10% YoY while other jobs down 5.8%. What do you see on the ground?
by mrborgen | 2026-02-24 15:17:40+00:00
According to data from FRED, US software development job listings are up 10% YoY from Feb 2025 to Feb 2026.

In the same period, overall job postings are down 5.8%.

I find this striking as these two graphs have directionally mirrored each other since 2020. It's only the last year they seem to be diverging. (Software jobs both rose and crashed harder as a consequence of the ZIRP/covid era, but if you squint the two graphs are quite similar).

This is quite the narrative violation, as software is one of the professions most often assumed to be eaten up by AI. But it looks like there's just so much software to build and maintain that the software dev job market is healing faster than the overall job market.

I'm curious to hear what you all are seeing on the ground? Have hiring at your companies started picking up since last year?

Sources:
https://fred.stlouisfed.org/series/IHLIDXUSTPSOFTDEVE
https://fred.stlouisfed.org/series/IHLIDXUS
See both graphs side-by-side for Feb 2025-Feb 2026: https://x.com/twitter/status/2025890393166917857
by rebane2001 | 2026-02-24 15:18:22+00:00
I think x86 is still good because it's easily understandable. If I say it's an 8086 emulator, people who aren't familiar with the 8086 aren't gonna go "oh so like an older version of the same x86 on my computer". And "Show HN: CSS program that emulates a CPU that's a member of the x86 family" doesn't roll off the tongue.

I don't think calling it x86 is misleading, and this is coming from the perspective of someone who dabbles in rev and pwn of x86.
by durabullhq | 2026-02-24 15:18:26+00:00
Hey everyone,

If you’ve ever run BullMQ at scale, you know the struggle. Monitoring queues often feels like flying blind unless you’re constantly refreshing some basic UI that feels like it was made in the early 2000s, digging through Redis keys manually or managing a complex setup within your codebase just to gain visibility into your queues.

My team and I got tired of the "lag" between our background jobs and our visibility into them. We wanted something that felt like a pro-tier observability tool but specifically for BullMQ.

So we built Durabull.

What makes it different:

Real-time Metrics: No refreshing. See active/failed/completed jobs as they happen.

Deep Failure Debugging: Full stack traces, attempt history, and one-click bulk retries.

Worker Monitoring: See exactly what your workers are doing in real-time.

Multi-Connection: Switch between Prod, Staging, and Dev environments in one UI.

Redis Explorer: Built-in tool to inspect the underlying data structures.

The "Catch": There isn't one. We aren't VC-backed. We’re just engineers who love the BullMQ community. It’s completely free and open-source.

GitHub: https://github.com/durabullhq/durabull
X: https://x.com/DurabullHQ
Website/Documentation: https://durabull.io
by nogridbag | 2026-02-24 15:18:31+00:00
These letters matter a lot to kids. I sent my video game idea to Nintendo as a little kid and I had the same reaction seeing that envelope from Nintendo in the mailbox addressed to me. I think it was also a bit more special pre-internet as these companies felt a bit more magical and mysterious. You can only read about them through video game magazines and see their names in the credit scenes at the end of the games. Unless you were one of those weird kids that called Nintendo Power helpline of course!

I remember also receiving that weird VHS tape from Nintendo in the mail: https://www.youtube.com/watch?v=rJzIc_c1PvE

I have no idea how I received that, but it was so cool!
by 0_____0 | 2026-02-24 15:18:46+00:00
Invisible wavelengths can absolutely hurt your retina, but as wavelengths go farther beyond visible, your eye begins to not focus them properly on the retina, so the risks change. E.g. with 1550nm IR (common in telecom, sometimes in LIDAR) the risk of eye damage is to the surface of the eye rather than to the retina. Short wavelengths like UV will be absorbed by the lens at near-UV, and then eventually just be absorbed at the surface at shorter wavelengths.

I think it would be a cool exercise to figure out how much optical power you would see at, idk, 5cm from your illuminator. I assume it's a shortwave IR close to visible light, so you can assume it will focus like visible light, more or less.

Ideally you'd use an optical power meter but you could get a first pass by looking at the circuit and seeing how many mW pass through each LED, applying a conservatively high efficiency factor of W_optical/W_electrical, projecting that into a radiated cone for each LED and multiplying the power received on a dilated pupil sized spot at 5cm by the number of emitters.

Then you have to work out what the irradiance at the retina is once the light is focused. The hazard criteria include a time factor, so you'll have to decide if you/foxes would like to stare directly into the beam for 10 seconds? Or for the entire duration of your meditation session.
by baptisteallain | 2026-02-24 15:19:10+00:00
I kept seeing the same pattern when I check vibe coded site (what I do every day) founders ship apps built with Cursor, Lovable or Bolt, get their first users, celebrate and have exposed API keys, broken auth, and injectable endpoints sitting in production... I have found at least 30+ API key... I like shipping fast but I don't like that kind of behavious with security.

The LLMs are great at making things work. Indeed they're not optimized for making things safe. And most vibe coders don't have a security background, so they don't know what to look for.

So I built a scanner (before Claude does it) specifically for this: you drop your URL, it runs a set of checks, and returns a prioritized list of vulnerabilities with severity levels. The idea is to make it actionable not just "you have a problem" but "here's the exact prompt to fix it in Cursor/lovable."

Free to scan. First vulnerability shown for free, full report behind a paywall.

What's your current approach to security when you vibe code something and push it live? Tbh I am really curious if this is a problem people are actually solving or just ignoring.
by mort96 | 2026-02-24 15:19:47+00:00
When I said Mozilla's market share has been going downhill for most of my life, that counts the 2010-2015 market share losses. I don't think anything 2020-present retroactively caused the losses in 2010; on the other hand, I think Mozilla has been mismanaging Firefox since before 2010. I can't recall a period of more than a few years where Mozilla hasn't done some egregious mistake which alienates chunks of its user base.
by BlitzGeology91 | 2026-02-24 15:19:56+00:00
> There are no self-destruct mechanisms put into games.

That’s not accurate. I used to play the Android version of EA Tetris [1]. I liked the game so much that I paid to remove ads from it. One day, I opened the game, and the game told me that I wasn’t allowed to play it unless I installed an update for it. I installed the update, and launched the game again. The game then told me that I would not be allowed to play it after a specific date. After that date passed, I tried opening the game again, and it refused to let me play the game.

For more examples of games that contain self-destruct mechanisms, see the Stop Killing Games wiki [2].

[1]: <https://tetris.wiki/Tetris_(2011,_Electronic_Arts)>

[2]: <https://stopkillinggames.wiki.gg/wiki/Dead_game_list>
by keraf | 2026-02-24 15:20:09+00:00
Used to have my VPS' with OVH a few years back but noticed the performance was significantly worse than similarly priced Hetzner ones. Not sure if that changed.

Regarding alternative VPS providers, Infomaniak in Switzerland have decent prices on their Lite range [0]. I'll stick with Hetzner but if I move some day, I might try them out.

[0] https://www.infomaniak.com/en/hosting/vps-lite