MurphyA/hacker-news huggingface dataset:
by bakugo | 2026-02-21 11:34:58+00:00
> He's submitted 10 times in last 62 days.

Now check how many times he links to his blog in comments.

Actually, here, I'll do it for you: He has made 13209 comments in total, and 1422 of those contain a link to his blog[0]. An objectively ridiculous number, and anyone else would've likely been banned or at least told off for self-promotion long before reaching that number.

[0] https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Show HN: EV424 – Evidence Definition (Don't Trust, Verify)
by lws9262 | 2026-02-21 11:34:58+00:00
EV424 Evidence Definition

• Don’t Trust, Verify
• Not a single byte changes.
• If it cannot be reproduced, it is not evidence.

I’m publishing a contract-only spec for a non-custodial integrity receipt workflow (exit code + SHA-256 + normalized JSON).
Feedback I want: is the NOT_COVERED fence strict enough to prevent over-claims?

https://github.com/ev424verify/ev424-hub
by ahartmetz | 2026-02-21 11:35:22+00:00
No, you wouldn't. git rebase -i is to remove noise, which is about merging commits that, well, make more sense together than apart. Which is mostly about summarizing trivialities (e.g. several typo fixes) and squashing fixups into commits that introduced a problem in the same branch.

A typical bugfix branch might look like this after rebase -i:

Move property to a more appropriate place

Improve documentation of feature Foo

Fix accidental O(n^2) in feature Bar

Fix interaction of Foo with Bar
by lysecret | 2026-02-21 11:35:32+00:00
Im honestly not that much worried there are some obvious problems (exfiltrate data labeled as sensitive, take actions that are costly, delete/change sensitive resources) if you have a properly compliant infrastructure all these actions need confirmations logging etc. for humans this seemed more like a neusance but now it seems essential. And all these systems are actually much much easier to setup.
by donatj | 2026-02-21 11:35:40+00:00
It's interesting to me every time one of these "I just figured out I can use git without GitHub" posts comes up.

The entire design of git was intended to be decentralized. You really don't even need the centralized bare repo! You can just point your machines at each other. With Tailscale these days that's especially easy.

Admittedly, I'm getting old, but for the first couple years I used git professionally ~2008-2011 we just pulled from each other's machines. Directly over SSH. We worked in an office, all had each other's machines as remotes. "Hey, is that feature done? Cool, I'll pull it". It worked really well.

Eventually we tossed a bare repo up on a server in the office and switched to push instead of pull. Finish a feature? Push it up! At some point our devops guy installed Gitlab around that, but we never really used the web ui.

Winds changed, we moved to GitHub, eventually a pull request / code review workflow. Here we are now.
by bregma | 2026-02-21 11:36:03+00:00
These are functional safety problems, not security vulnerabilities.

For a product that requires functional safety, CVEs are almost entirely a marketing tool and irrelevant to the technology. Go ahead and classify them as CVEs, it means the sales people can schmooze with their customer purchasing department folks more but it's not going to affect making your airplane fly or you car drive or your cancer treatment treat any more safely.
by Kalpaka | 2026-02-21 11:36:23+00:00
The key shift here is ontological, not just architectural. LangGraph, CrewAI, AutoGen -- all of them assume the work has a shape before it starts. The developer draws the tree; the agents fill in the leaves.

What you're describing is closer to how biological systems actually grow: structure emerges from process, not the other way around. The tree doesn't know its final shape. It grows toward light, around obstacles, in response to what it finds.

The practical question I'd push on: error propagation. When a node decides to spawn three subtasks and one of them fails or discovers the premise is wrong, does the parent get to revisit its structural decision, or does it just handle the leaf-level error? The really interesting edge cases aren't about wrong answers -- they're about wrong decompositions, where the tree realizes mid-growth that it's been branching in the wrong direction.
Show HN: CheckAPI – open-source API monitoring built with FastAPI and Next.js
by JEONSEWON | 2026-02-21 11:37:58+00:00
Built CheckAPI - an open source API monitoring tool for developers.

Tech stack:
- FastAPI backend with Celery workers
- Next.js 14 frontend
- Redis for job queue
- Multi-channel alerts (Email, Slack, Telegram, Discord, Webhook)

Free tier: 3 monitors
Paid: $5-15/mo

GitHub: https://github.com/JEONSEWON/api-health-monitor

Built in 6 weeks with AI assistance (OpenClaw). Made it open source so others can learn from it or self-host.

Feedback welcome, especially on the tech architecture.
by rglullis | 2026-02-21 11:38:41+00:00
> as the market is loaded with LLM service providers

The LLMs are not commodities. The program that interfaces with them are.

> they aren't intended for public use.

It was available at first, it made possible for people to use the LLM model without having to use their specific CLI tool. It's a bait-and-switch.

> You have no case here.

I don't need to have a legal case here to keep thinking it's a morally dsgusting practice. What I don't understand is: why do you keep defending it? Is there something in it for you, or are you just trying to rationalize your way into acceptance of their terms?
by throwaway_z0om | 2026-02-21 11:39:07+00:00
> the "policy people" will climb out of their holes

I am one of those people and I work at a FANG.

And while I know it seems annoying, these teams are overwhelmed with not only innovators but lawyers asking so many variations of the same question it's pretty hard to get back to the innovators with a thumbs up or guidance.

Also there is a real threat here. The "wiped my hard drive" story is annoying but it's a toy problem. An agent with database access exfiltrating customer PII to a model endpoint is a horrific outcome for impacted customers and everyone in the blast radius.

That's the kind of thing keeping us up at night, not blocking people for fun.

I'm actively trying to find a way we can unlock innovators to move quickly at scale, but it's a bit of a slow down to go fast moment. The goal isn't roadblocks, it's guardrails that let you move without the policy team being a bottleneck on every request.
by imiric | 2026-02-21 11:39:15+00:00
> I believe there are opportunities to improve short term forecast accuracy using data collected from phones.

Alright, fair point. That could be a reasonable use case.

But judging by their advertised "Community reports" feature, Acme doesn't seem to be doing this. And even if they did, this feature should be opt-in, and their privacy policy should only apply for those users.

> Also, pretty much every day, all the apps and all the sites will tell me the incorrect current conditions at my location, much less the forecast. It’s 2026 damnit. Why doesn’t my phone know what the weather is outside right now?

Have you tried looking out the window? What do you need hyper-local and minute-accurate forecasts for? If you need to know accurate current conditions get a thermometer and barometer. If you want it on your smartphone, then the app could show you live readings from your device, without sending the data anywhere.

Weather forecasts have always been an inexact science, and likely always will be. Our models have gotten better over time, and at this point I think that they're good enough. I only need to know the general temperature and likelihood of certain weather events a few days in advance, at most. If there's a chance of rain, I carry an umbrella just in case. If it's going to be cold, I pack a jacket.

Highly accurate weather prediction doesn't solve any practical problem for the average person. Hyping it up like it does only serves as marketing for companies that want to build a profitable business around it.
by jimnotgym | 2026-02-21 11:39:59+00:00
> except small roads in the countryside you are potentially being tracked by ANPR.

They do put them specifically whereever those roads join major roads though. Meanwhile the crime stats in the UK make chilling reading, as the focus on replacing Police officers with cameras, replacing courts with... nothing has lead to many crimes skyrocketing, especially those that are not associated with driving a car.

https://www.ons.gov.uk/peoplepopulationandcommunity/crimeand...
by nephihaha | 2026-02-21 11:40:18+00:00
Logged out, YouTube suggests me endless videos about MMA fighting or trash for children. I only use the YouTube app for commenting. I use Brave to avoid constant adverts.

I do notice though that YouTube is always trying to bias me in one direction or another. I have a friend whose feed is full of Trumpbait and stuff about how Putin is about to die and the Ukraine war is about to end. (Sounds fine except these videos have been saying that for four or five years.) Whatever one things about these things, the videos he gets are very propagandistic and have ridiculous AI thumbnails and titles. Usually of Putin or Trump scowling at something. He also gets suggested a lot of food videos (okay, I suppose) and often ones about Nazis and WW2 (a bit fetishistic, but to be fair he did history at university).

My non-political YouTube suggestions tend to be about popular music from decades ago. I emphasise "about". I notice the algo more rarely suggests actual music itself. I suspect this is because YT has to pay out money for music but not videos about it. I get some local history stuff (which is interesting but usually not about areas I know well). I very rarely get suggested much in the way of Scottish, Irish or Welsh content, in spite of viewing a lot of it. Never anything about what's happening with Scottish politics (always from a London perspective) or the parliament here.
by whyoh | 2026-02-21 11:41:37+00:00
>IMO the security pitchforking on OpenClaw is just so overdone.

Isn't the whole selling point of OpenClaw that you give it valuable (personal) data to work on, which would typically also be processed by 3rd party LLMs?

The security and privacy implications are massive. The only way to use it "safely" is by not giving it much of value. Maybe for some open source project where everything is public anyway, but then why does it need to take over the whole device?
by mhher | 2026-02-21 11:42:26+00:00
The current hype around agentic workflows completely glosses over the fundamental security flaw in their architecture: unconstrained execution boundaries. Tools that eagerly load context and grant monolithic LLMs unrestricted shell access are trivial to compromise via indirect prompt injection.

If an agent is curling untrusted data while holding access to sensitive data or already has sensitive data loaded into its context window, arbitrary code execution isn't a theoretical risk; it's an inevitability.

As recent research on context pollution has shown, stuffing the context window with monolithic system prompts and tool schemas actively degrades the model's baseline reasoning capabilities, making it exponentially more vulnerable to these exact exploits.
by LeifCarrotson | 2026-02-21 11:43:41+00:00
You're right, I'm wrong, sorry, I was checking my memory on Wikipedia [1] which opens the section of his bio "Secretary of Commerce" with the line "Following the 2024 presidential election, Lutnick was being considered as secretary of the treasury." and I swapped the two roles.

While a smaller role, this is a worse conflict of interest as the secretary of commerce is directly responsible for recommending tarriff actions to the President.

[1] https://en.wikipedia.org/wiki/Howard_Lutnick#Secretary_of_co...
by Greenpants | 2026-02-21 11:43:45+00:00
People choose the path of least resistance.

If you can quickly swap out an old phone battery with one you can purchase in a store, it's as easy as doing groceries.

If on the other hand you need to hand off your phone to a third party for repairs, and require people to make a backup of important data, maybe factory reset just in case, get a replacement device for the time without it, tell people you'll be unavailable for a bit... It's a big enough hurdle for people to think "well, guess it's a good enough excuse to upgrade to a new model". I've heard the latter too many times in my surroundings purely due to battery life issues.
by bravura | 2026-02-21 11:44:14+00:00
There are a few qualitative product experiences that make claw agents unique.

One is that it relentlessly strives thoroughly to complete tasks without asking you to micromanage it.

The second is that it has personality.

The third is that it's artfully constructed so that it feels like it has infinite context.

The above may sound purely circumstantial and frivolous. But together it's the first agent that many people who usually avoid AI simply LOVE.
by bitwize | 2026-02-21 11:45:14+00:00
The Brazilian law, passed in September of last year, requires both online service providers and "terminal operating systems" to provide secure, auditable age verification. It is from a technical standpoint presumably not legal to install an arbitrary Linux distro in Brazil, but one can imagine a list of approved distros that meet government standards. For example, Red Hat and Ubuntu might implement age verification for the Brazilian market and be cleared for use in Brazil.

The real issue starts when OEMs, in order to comply with laws of this type, start releasing machines with locked-down boot firmware that cannot run any but an approved operating system.
by accidentallfact | 2026-02-21 11:45:15+00:00
Even the premise of the idea is wrong, as evenings are either blue from the blue sky, or white from the clouds. It takes exceptional circumstances to have a reddish evening, and even then it's just around the sunset.

I guess that it may help people with undercorrected myopia due to the chromatic aberration, but, I don't know.
by joshstrange | 2026-02-21 11:45:43+00:00
Ehh, not “it” but it’s important if you want an agent to have access to all your “stuff”.

macOS is the only game in town if you want easy access to iMessage, Photos, Reminders, Notes, etc and while Macs are not cheap, the baseline Mac Mini is a great deal. A raspberry Pi is going to run you $100+ when all is said and done and a Mac Mini is $600. So let’s call it. $500 difference. A Mac Mini is infinitely more powerful than a Pi, can run more software, is more useful if you decide to repurpose it, has a higher resale value and is easier to resell, is just more familiar to more people, and it just looks way nicer.

So while iMessage access is very important, I don’t think it comes close to being the only reason, or “it”.

I’d also imagine that it might be easier to have an agent fake being a real person controlling a browser on a Mac verses any Linux-based platform.

Note: I don’t own a Mac Mini nor do I run any Claw-type software currently.
by miki123211 | 2026-02-21 11:46:32+00:00
I think you should read "the Phoenix project."

One of the lessons in that book is that the main reasons things in IT are slow isn't because tickets take a long time to complete, but that they spend a long time waiting in a queue. The busier a resource is, the longer the queue gets, eventually leading to ~2% of the ticket's time spent with somebody doing actual work on it. The rest is just the ticket waiting for somebody to get through the backlog, do their part and then push the rest into somebody else's backlog, which is just as long.

I'm surprised FAANGs don't have that part figured out yet.
by nephihaha | 2026-02-21 11:46:33+00:00
I have a Facebook friend similar to your mother. A solicitor (so makes a lot of money), off travelling to beautiful places much of the time.

However, there is an element of one upmanship about social media. You see pictures of nice holidays abroad and happy families... And then you find out folk are about to divorce or go bankrupt.

The algo keeps showing me one person's feed but not others. I don't mind said person, but we are not close. Facebook tells me about birthdays, bereavements etc often two or three weeks after they happen which is no good.
by maest | 2026-02-21 11:46:46+00:00
The GP is using a snowclone of the original: "It couldn't have happened to a nicer guy".

For example, if your boss is very rude and disparaging, but then he gets fired, you would say, sarcastically, "It couldn't have happened to a nicer guy", implying there's some element of karma at work.

By analogy, GP is saying these tarrifs were an undeserving act of vengeance. I assume "undeserved" in the sense that it wasn't deserved by those on the receiving end.
by toyg | 2026-02-21 11:47:11+00:00
The overwhelming majority of the population of the developed world now considers the mobile phone as their primary (and often only) computing device. It's always with them, it's more accessible and intuitive than a laptop, and it's how they communicate with everyone. It doesn't matter if you prefer to do this or that on a "real" computer - most people would just do everything through the phone if they could.

It's surprising how we still see posts like these in 2026 on what should be a "future-friendly" forum.
by pimterry | 2026-02-21 11:47:30+00:00
Done! I wrote up both my concerns about this and how it affects app/app-store market competition, and how limitations like Play Integrity encourage apps to block usage on non-Google approved devices as well, since that's anti-competitive within the mobile device & OS market (blocking GrapheneOS, Waydroid, etc).

Supporting free competition with and within the Android market is in theory what these teams are all about so hopefully with enough voices they'll push harder on it. I'd love to see a shift here that makes non-Google/Apple-controlled mobile a possible option (even if it's a Linux-on-desktop-style niche for the foreseeable future)
by nephihaha | 2026-02-21 11:49:29+00:00
I think you are very lucky. I get constant political messaging (not from one side of the room either) which is very unsubtle and biased. I get a lot of slop suggested.

I have never used Instagram and don't plan too. Twitter has always been a disaster and a mob mentality, and now it barely shows me stuff I want to look at.
by seanhly | 2026-02-21 11:51:29+00:00
Most of them don’t check the IP, it would seem. Google acquires new IPs all the time, plus there are a lot of other search systems that news publishers don’t want to accidentally miss out on. It’s mostly just client side JS hiding the content after a time delay or other techniques like that. I think the proportion of the population using these addons is so low, it would cost more in lost SEO for news publishers to restrict crawling to a subset of IPs.
by bizzletk | 2026-02-21 11:51:43+00:00
The article addresses this:

> This made sense when agents were unreliable. You’d never let GPT-3 decide how to decompose a project. But current models are good at planning. They break problems into subproblems naturally. They understand dependencies. They know when a task is too big for one pass.

> So why are we still hardcoding the decomposition?
by webglfan | 2026-02-21 11:51:53+00:00
The principle is the same as always: solidarity. In groups, workers have more power than individuals. That might mean unionizing, that might mean starting new companies where tech workers are treated fairly.

This has happened in the past: Robert Noyce leaving Fairchild systems to create Intel.

PBS made a very good documentary about the origin of SV: https://www.youtube.com/watch?v=LcOoQP7nhl4

Wikipedia's page on the subject has a lot of great information as well: https://en.wikipedia.org/wiki/Traitorous_eight

A short summary:

Noyce's exit from Fairchild changed everything. He moved away from East Coast control and a lack of ownership, instead pioneering the employee stock option. By giving engineers "skin in the game" (instead of just a salary), he fueled both innovation and loyalty.

This move sparked the "Fairchildren" effect. Talent left Fairchild to start dozens of new firms (like Intel and AMD). This fragmentation prevented a single monopoly from dominating the region. Noyce's model of flat hierarchies and shared wealth became the Silicon Valley blueprint, ensuring prosperity through a cycle of reinvested talent and capital.
by pvtmert | 2026-02-21 11:52:22+00:00
I am also ex-FAANG (recently departed), while I partially agree the "policy-people" pop-up fairly often, my experience is more on the inadequate checks side.

Though with the recent layoffs and stuff, the security in Amazon was getting better. Even the best-practices for IAM policies that was the norm in 2018, is just getting enforced by 2025.

Since I had a background of infosec, it always confused me how normal it was to give/grant overly permissive policies to basically anything. Even opening ports to worldwide (0.0.0.0/0) had just been a significant issue in 2024, still, you can easily get away with by the time the scanner finds your host/policy/configuration...

Although nearly all AWS accounts managed by Conduit (internal AWS Account Creation and Management Service), the "magic-team" had many "account-containers" to make all these child/service accounts joining into a parent "organization-account". By the time I left, the "organization-account" had no restrictive policies set, it is up to the developers to secure their resources. (like S3 buckets & their policies)

So, I don't think the policy folks are overall wrong. In the best case scenario, they do not need to exist in the first place! As the enforcement should be done to ensure security. But that always has an exception somewhere in someone's workflow.
by NewsaHackO | 2026-02-21 11:52:46+00:00
The issue is that they are very smart/subversive; they definitely track the amount of time you spend looking at certain pictures vs. others. So while you may be careful not to directly engage with certain material, if they noticed that you pause a little more at certain pics than others, and there is a pattern in the common topic in the pictures that you pause at, they use that information to create your interest profile.
by nephihaha | 2026-02-21 11:55:54+00:00
I did delete a previous Facebook account, but got forced back into it due to work. I don't really use it for friends much now. It is much better as a result although I still see it trying to pull me one direction or another. I would happily delete the entire lot because I don't find it functional.

"There's even an explicit feature to tell the algorithm what you want to see less of: You click the three dots and click "Hide post". They even have useful tools to unfollow people without unfriending them, which is highly useful for those people can't politely disconnect from but whose content you don't want to see. Using these tools even a little bit goes a long way to cleaning up your feed."

I've really never liked that feature. It is what creates echo chambers, because you just get infinite agreemtn. For some reason, Faecebook only tends to show me one individual's posts over others. We're not unfriendly but not good mates. On the other hand thanks to the features you seem to be talking about, I get to hear about bereavements, birthdays, engagements etc days or weeks after they happened which is no use to me.
Show HN: CozyProfit – A crop profit calculator for cozy farming sims
by causalzap | 2026-02-21 11:57:01+00:00
I built CozyProfit because I love farming sims but got tired of managing messy spreadsheets just to figure out what to plant.

Most calculators didn't handle regrowth cycles or processing (like turning crops into wine/juice) very intuitively. I wanted to create a tool that visualizes the "profit per day" clearly for games like Stardew Valley and Fields of Mistria.

It's a work in progress, and I’d love to hear your feedback or suggestions for other games to support!