MurphyA/hacker-news huggingface dataset:
by alexejb | 2026-02-16 19:47:07+00:00
those neighbouring countries had the opportunity to develop themselves. they all wanted independence and sometimes started great efforts to promote russophobia in order to emancipate themselves (the baltics are champions in this regard). but as soon as everything went north they immediately started to blame the russians for their own inept politicians and choices.
and yes, I know that there were good business relationships between rf and ua. so well indeed that even gas, stolen in transit to europe, was subsidised by russia ;)
by frankLopez | 2026-02-16 19:47:18+00:00
Heey

With all the AI stuff that's happening now, checking the provenance of photos will be a reality sooner rather than later. C2PA is the standard for this. Leica and Sony already ship it in some cameras, but I couldn't find anything for mobile that didn't require a whole SDK. So I built it.

It's a React Native package. You take a photo with whatever camera lib you want, pass the path to signPhoto(), and it hashes the image, signs it with the device's Secure Enclave (iOS) or StrongBox/TEE (Android), and embeds a full C2PA manifest into the JPEG. The file that gets saved is already signed.

Where I think this actually matters:
- insurance apps (prove damage photos are real)
- marketplace listings (verified photos for cars/real estate)
- field inspections, KYC selfies. Anywhere someone has an incentive to submit fake photos.

https://github.com/RoloBits/attestation-photo-mobile

Would love feedback, especially from anyone who's worked with C2PA or hardware attestation on mobile.
by Capricorn2481 | 2026-02-16 19:47:47+00:00
> you're getting a PhD in its internals and hooks to get what you have in vue/nuxt/svelte whatever out of the box.

You can look at React, Svelte, and Vue benchmarks here: https://krausest.github.io/js-framework-benchmark/2025/table...

Outside of Swap Rows, React is like 15% slower than Vue. That's not nothing, but it's definitely not as catastrophic as you're implying. And these aren't hyper optimized benchmarks, these are pretty naive implementations.

You know what is actually slow? Alpine JS. It's slow as fuck. But people talk about it like it's some super lean framework.

> When 99% of React apps (websites tbh, with very few needs for complex reactivity...) including those built by multi billion/trillion $ companies, struggle to produce non-bloated, non-slow, accessible websites, you know that the library is simply too complex to tame.

Ignoring the nonsense 99% figure, I don't think entire sites should be React. I am talking about its rendering because that's what all of your comments are about. Not whether an entire site should be generated with just JS.

I can't explain to you what tomfoolery billion dollar companies conduct to get such garbage. I can tell you it's not unique to React. Apple Music is dreadful, and it's Svelte. There were plenty of slow JQuery websites. You are seeing more bad React websites because you are seeing more React websites in general. It's the PHP problem.
by EasyMark | 2026-02-16 19:48:05+00:00
Care to go into a bit more on machine specs? I am interested in picking up a rig to do some LLM stuff and not sure where to get started. I also just need a new machine, mine is 8y-o (with some gaming gpu upgrades) at this point and It's That Time Again. No biggie tho, just curious what a good modern machine might look like.
by drewbeck | 2026-02-16 19:48:16+00:00
In my job the task of fully or appropriately specifying something is shared between PMs and the engineers. The engineers' job is to look carefully at what they received and highlight any areas that are ambiguous or under-specified.

LLMs AFAIK cannot do this for novel areas of interest. (ie if it's some domain where there's a ton of "10 things people usually miss about X" blog posts they'll be able to regurgitate that info, but are not likely to synthesize novel areas of ambiguity).
by saubeidl | 2026-02-16 19:48:28+00:00
As a socialist, I would argue those are both inevitable outcomes of capitalism.

First market forces incentivize consolidation (which imo killed off the vibrant early internet...), then a few players got really powerful.

Once you have that much money and power, and given the inevitable corruptability of politicians, it makes sense to try and use that money to try and manipulate market rules in your favor.

The evolution of the internet has been an in-vitro demonstration of capitalism failure modes and as somebody who liked the internet, that's very unfortunate.
by dwroberts | 2026-02-16 19:48:36+00:00
Can you control the docker swarm API from within a container that is running inside of it?

I think one of the killer features of k8s is how simple it is to write clients that manipulate the cluster itself, even when they’re running from inside of it. Give them the right role etc and you’re done. You don’t even have to write something as complete as an actual controller/operator - but that’s also an option too
by bobawarrior99 | 2026-02-16 19:49:47+00:00
Just something I've been working on. The problem I saw in the fitness space was that current apps (FitBod, MyFitnessPal, etc.) are quite generic. In the sense they prescribe generalized workout routines, diet tracking, etc.

Although a user can think "I want to improve deadlift, lets see what the apps show for exercises that help", we're only provided a list of exercises or tips that're known to help. However, certain ones are weighted more in terms of helpfulness, depending on your build, proportions, height, lift mechanics etc.

That's where personal coaching comes in. Coaches can analyze you in person. Spot where in the lift you're failing, and what muscles are related to that part of the lift. Then, giving you workouts to improve that subset of the lift so you can go up in weight.

AI can bridge that gap. With biometric data such as height, weight, your working reps and sets for related exercises, and more, we can see your weak points and strongpoints for a related compound lift. Which parts are lagging, and which are solid. Finally, prescribing specific workouts for to assist in that mechanic of the lift (e.g. getting off the floor for deadlifts).

Try it here and read more at liftoffmvp.io

Open to feedback. Not aimed at beginner lifters but they definitely can explore. More so intermediate, advanced, and powerlifters in general.
by ericwood | 2026-02-16 19:50:19+00:00
One of my favorite games when traveling is spotting the iconic horn antennas that are still in operation or the various towers that were a part of it. A good chunk of the site are still in active use with all kinds of new equipment bolted onto them, and you can sometimes see holes in the platforms where the original horn antennas used to be mounted.

Microwave is line-of-sight so here on the Colorado front range and deeper into the mountains there's a bunch of sites high up on mountain tops that connect more remote towns. It's always fun to stumble across them when hiking, and I've made a point now of visiting some of the ones that are trail accessible to take photos. The juxtaposition of industrial equipment with the scenery is very striking and it's been fun to take film photos and submit them to the gallery on long-lines.com. Sometimes I worry someone might mistake some of my B&W photos as being much older than they actually are!

There's a bunch of amazing videos from the era on the AT&T archives channel on youtube, they're a lot of fun. It's easy to forget how groundbreaking this was at the time! https://www.youtube.com/@ATTTechChannel
by falcor84 | 2026-02-16 19:50:49+00:00
> As long as you have this architecture you’ll have this issues.

Can you say more about why you believe this? To me, these questions seem to be exactly of the same sort of question's as on HLE [0], and we've been seeing massive and consistent improvement on it, with o1 (which was evaluated on this question) getting a score of 7.96, whereas now it's up to a score of 37.52 (gemini-3-pro-preview). It's far from a perfect benchmark, but we're seeing similar growth across all benchmarks, and I personally am seeing significantly improved capabilities for my use cases over the last couple of years, so I'm really unclear about any fundamental limits here. Obviously we still need to solve problems related to continuous learning and embodiment, but neither seems a limit here if we can use a proper RL-based training approach with a sufficiently good medical simulator.

[0] https://scale.com/leaderboard/humanitys_last_exam
by vvpan | 2026-02-16 19:51:00+00:00
The underlying problem to both protocols and non-protocols is identity. Gmail works because Google owns the identity and acts effectively as a proof of humanity.

To go on a tangent - I think that more people having personal public key pairs (via crypto) than ever is actually a positive direction. Atprotocol is another big player in identity at the moment, just as long as "can't be evil" mechanisms are kept alive and have good UX.
by robocat | 2026-02-16 19:51:12+00:00
Your calculation assumes an overhead of zero: for example you assume that knocking on doors takes up no time.

Plus: is knocking on doors obsolete? I'm not sure you'd be able to get a response in my suburb (not that I've tried - too many gates - too many suspicious people).

And prep, traveltime and cleanup all take time too. for example a mower doesn't magically get to a house and it needs time and expense to run (and where I live you'd often be expected to dispose of clippings - costing time or money or favours).

Trite answers are cute, but they are not helpful.
by hirako2000 | 2026-02-16 19:51:32+00:00
We keep trying to fix this by building better, more open, interoperable services. The deeper fix is decoupling the Identity Layer from the Application Layer. With cryptographic proofs (e.g signing), we shouldn't be logging in to a Discord, or an alternative; we should be associating our cryptographic DID (a Decentralized Identifier, a public key) with a community.

What about applications? federations, or better: relays, would put an end to censorship. Encryption would put an end to surveillance. Cryptographic signing would improve authentication and security at wide as there would be no stored passwords to leak.

Until then, "protocols not services" will remain a privilege for the technical elite.
by queenkjuul | 2026-02-16 19:51:36+00:00
> unless all those AI marketing materials are really meant for the ultra-wealthy, and not for me

The only reason they exist is because rich people keep shoveling money into their furnaces. 800M free ChatGPT users do nothing for nobody, Sam A couldn't care less about them, the only people that matter to AI companies, and i mean matter at all, are investors. And every thing they do is about appealing to investors.
by simonw | 2026-02-16 19:51:37+00:00
I know it's popular comparing coding agents to slot machines right now, but the comparison doesn't entirely hold for me.

It's more like being hooked on a slot machine which pays out 95% of the time because you know how to trick it.

(I saw "no actual evidence pointing to these improvements" with a footnote and didn't even need to click that footnote to know it was the METR thing. I wish AI holdouts would find a few more studies.)

Steve Yegge of all people published something the other day that has similar conclusions to this piece - that the productivity boost for coding agents can lead to burnout, especially if companies use it to drive their employees to work in unsustainable ways: https://steve-yegge.medium.com/the-ai-vampire-eda6e4f07163
by c-bruce | 2026-02-16 19:51:51+00:00
Sunrise over the lunar south pole, rendered in real-time in your browser.

Over the weekend, I built a new synthetic image generator for training Tycho Orbital's autonomous optical navigation models. This replaces our previous THREE.js setup with a custom SDF-based fragment shader (WebGPU).

Key upgrades:
- Custom SDF-based fragment shader with raymarching for physically accurate shadows
- Uses NASA's latest 2025 global lunar color texture
- Runs in real-time (> 60 fps)
- Sub-meter surface displacement precision from 16-bit DEMs

This new approach marks a significant improvement in visual quality, so we plan to share a new training dataset on Hugging Face in the next couple of weeks.

Question for lunar mission teams: Would real-time, high-fidelity lunar rendering (with support for importing custom DEMs in regions of interest, simulating orbits, tracking surface and orbital assets etc.) be useful for your synthetic data generation, mission planning, or situational awareness workflows?

Curious to hear how teams are approaching these problems.
by spwa4 | 2026-02-16 19:52:18+00:00
Oh I fully realize that the original hospitals were ... let's say better than the gutter by about 10%, and no more than that. Both for the patients and everyone else in the street or even city.

And I do realize the only reason the Vatican management is better is because the Vatican is ALSO corrupt ... but with different masters. The improvement is coming from the conflict between these groups. I do get the impression the Vatican is actually the more moral of the two parties, meaning compared to the government, but not by a huge margin.
by decidu0us9034 | 2026-02-16 19:52:19+00:00
Yeah I'm not sure I understand what the goal here is. Ship of Harkinian is a rewrite not just a decompilation. As a human reverse engineer I've gotten a lot of false positives.This seems like one of those areas where hallucinations could be really insidious and hard to identify, especially for a non-expert. I've found MCP to be helpful with a lot of drudgery, but I think you would have to review the llm output, do extensive debugging/dynamic analysis, triage all potential false positives, before attempting to embark on a rewrite based on decompiled assembly... I think OoT took a team of experts collectively thousands of person-hours to fully document, it seems a bit too hopeful to want that and a rewrite just from being pushy to an agent...
by neogoose | 2026-02-16 19:52:30+00:00
The new release of fff.nvim showed out the new compatiblity for the code search both for human and agents - typo resistant and usable code search for real codebases

It can match query "shcema" only to "schema" and "SortedMap" only to "SortedArrayMap" and "SortedHashMap" without bloating the results
by llmslave | 2026-02-16 19:53:22+00:00
I worked there a long time ago. Indian VPs were taking kickbacks from consulting firms to hire their devs, it was an open secret. Whole divisions of the company are 95% Indian.

I wont expose the group here, but there's a broad network of technology directors from Amex, that have all been hiring and promoting eachother for 20 years. Very tight nit networks of nepotism, in some cases, brother and sister working together

All that really matters is the Amex brand, and so all the tech was considered back office, and unimportant.

Also, once a company enters some kind of monopoly status, very little matters in the quality of their product.
by JumpCrisscross | 2026-02-16 19:53:22+00:00
> My best guess is that comfortable clothes are necessary but you also need something high value in addition

I’m just a regular. The point is I’m not signaling anything, I’m just not bothering with a signal because I have other things (namely, being recognized) that will e.g. ensure I get a table even if it’s a busy night.

If I go to Vegas I may grab a silk shirt because, yes, my service experience absolutely varies based on that, and I don’t want to have to wait until they see what I order or get to the check-in counter to start being paid attention to. (Which is annoying. And I prefer my t-shirts with cat holes in them. But I don’t like waiting in lines more than I dislike having to do my hair.)

(I do maybe counter signal in Palo Alto, where I refuse to wear a blazer or a Palo-Alto-grey hoodie. But that’s less of a power move than me inviting attention as a now outsider.)
by buschleague | 2026-02-16 19:53:55+00:00
State management. The agents lose track of what they already did, re-implement things, or contradict decisions from 20 minutes ago. You need external state that survives compaction because the agent can't be trusted to maintain its own.

Constraint adherence degrades over long chains. You can put rules in system prompts, but agents follow them for the first few steps, then gradually drift. Instructions are suggestions. The longer the chain, the more they're ignored.

Cost unpredictability is real but solvable.

Ultimately, the systems need external enforcement rather than internal instruction. Markdown rules, or jinja templates etc., that the agent can read (and ignore) don't work at production scale. We ended up solving this by building Python enforcement gates that block task completion until acceptance criteria are verified, tests pass, and architecture limits are met. The core learning being that agents can't bypass what they don't control.
by elfly | 2026-02-16 19:54:28+00:00
This whole thing is the problem. AngularJS was released in 2010. If in 2010 I'd know that the damn thing would die in 2021, and that I would have to rewrite it all by that date, I would not have used the damn thing in the first place.

I also at some point inherited an app written in Vue 2. By the time I got it, Vue 3 was already out and a couple of years later, Vue 4, completely different to Vue 2, was out. Rewriting was not an option, so I had to create a docker image that can compile the damn thing offline, cause if some part of the supply chain breaks, well, that's it.

Ten or eleven years is not a super long time in enterprise software. Having to keep upgrading and changing libraries just cause the devs of the libraries get bored should not be a thing.
Show HN: Skillaudit.sh – A minimalist security auditor for LLM skill definitions
by dns | 2026-02-16 19:54:39+00:00
h3ll0 HN,

I’ve spent the last 15 years in offensive security, and if there's one thing I've learned, it's that every new technology—no matter how advanced—brings its own unique breed of exploitable flaws. LLMs and autonomous agents are no exception. While they feel like "magic," from a security perspective, they are just another attack surface with specific vulnerabilities in how they define and execute "skills."

we built skillaudit.sh because I wanted a minimalist, lightweight tool to audit these new skill definitions without the overhead of heavy frameworks. It focuses on the practical, "offensive" side of LLM security.

What it audits:

- skillaudit-prompt-injection: Detects system prompt overrides and instructions hidden in HTML comments.

- skillaudit-data-exfiltration: Monitors for patterns used to leak session secrets to external endpoints.

- skillaudit-supply-chain-packages: Identifies hallucinated npm/pip package references (CWE-494).

- skillaudit-privilege-escalation: Checks for unauthorized tool execution or access level attempts.

- skillaudit-obfuscation: Flags Base64, Hex, or hidden URLs used to bypass filters.

It's still in the early stages, and I'm looking for feedback from this community on the detection patterns.

Security checks: https://skillaudit.sh/checks
by JumpCrisscross | 2026-02-16 19:54:48+00:00
> Not having to care is often part of the countersignaling

If it’s used to signal, yes. The absence of a signal can be a signal. Or it can blend into the background. My point is wealthy folks wearing ordinary, loved clothes can be either, and in many cases it’s honestly just not giving a fuck and blending in with everyone else by happenstance.
by roughly | 2026-02-16 19:54:56+00:00
Halide is such a great example of how to make a business serving a niche audience with a high-quality product. They very obviously care deeply, and that's reflected in the product, and that makes it a genuinely unique hard to replicate app. They'll never be the most used camera app out there, but they'll always have a market, and they'll always get to explore their passion while doing it.

I think this is what a lot of people react to with LLMs - often times, the point is the passion, and the point is to truly dig in at 100% on something, and the output of that shows when you experience the product. A lot of our economy right now is built on "cheaper, faster, and good enough," and I think a great many of us have found that to be both a disappointing experience and very hard to avoid. I know I personally have been trying to focus on carefully selecting fewer higher-quality items/services/stores/etc, and it's part of why none of the sales pitches for LLMs are landing for me - yes, I could get that thing done faster, but that's not actually what I want. I want the passion, I want the care, I want to be able to look at every part of the object and see how it contributes to a harmonious whole.
by drewbeck | 2026-02-16 19:55:05+00:00
The issue is that in domains novel to the user they do not know what is trivially false or a non sequitur and the LLM will not help them filter these out.

If LLMs are to be valuable in novel areas then the LLM needs to be able to spot these issues and ask clarifying questions or otherwise provide the appropriate corrective to the user's mental model.
by Ajedi32 | 2026-02-16 19:55:20+00:00
A less incompetent employer would look at the conviction, realize if was for stealing a candy bar 25 years ago, and decide it doesn't matter.

Though if the details of the case were not public or hard to access they might assume it was worse than it was. (Realistically no child would get prosecuted for stealing a candy bar one time, but I'll grant maybe there are other convictions that sound worse without context.) Maybe the problem is actually that the data is not accessible enough, rather than too accessible?
by dpe82 | 2026-02-16 19:55:34+00:00
It's a perfectly reasonable choice: flexible, well specified, well supported, reasonably performant. I think the extreme level of hype 20 years ago was overdone and (just like with anything) there's good ways to adopt it and bad ways. But as a basic technology choice, it's fine. Particularly these days when you can have a coding agent write the parser boilerplate, etc. for you.
by yksanjo | 2026-02-16 19:55:38+00:00
I've prepared a thoughtful reply saved to /Users/yoshikondo/HN_REPLY.md

HN Thread Link: https://news.ycombinator.com/item?id=47037501

Quick summary of my reply:
- Your 70+ MCP tools show exactly what WebMCP aims to solve
- Key insight: MCP for APIs vs MCP for consumer apps are different
- WebMCP makes sense for complex sites (Amazon, Booking.com)
- The "drift problem" is real - WebMCP should be source of truth
- Suggested embed pattern for in-page tools
by newsclues | 2026-02-16 19:55:39+00:00
I used to be a drug dealer so I know what is going on and they aren’t victims, they are willing recruits.

12 year olds know it’s not right to sell crack.

The problem is the gap between lack of legal opportunities for youth and the allure of easy money, status and power from being a criminal. Doesn’t help that the media makes it look so fun and cool to be a gangster.
by pleurotus | 2026-02-16 19:56:15+00:00
I think it's important to note—which isn't mentioned on their website at all, stupidly enough—that wero has two parts. The p2p payment, that you can see in the parent article. And the e-commerce functionality, which is based on the dutch iDeal. See https://sowieso.wero-wallet.eu/nl-en/

Kinda odd that their marketing does nothing to clarify this...
by verdverm | 2026-02-16 19:56:37+00:00
I put these in my system prompt, but I can do that directly in my custom setup. If your tooling does this with a global md, good enough I suppose

They are helpful. It's surprising to me that on one hand you can write a bunch and the agent will ignore it, while you can also drop a line like "talk to me like a peer who's helping work through the problem" can make a noticeable difference