MurphyA/hacker-news huggingface dataset:
by lozf | 2026-02-17 12:17:31+00:00
Some information about this leaked 3 years ago (February 2023), see:

https://cdn.xcancel.com/pic/orig/64D3E63614C36/media%2FHBUh4...

via

https://xcancel.com/BasedTorba/status/2023560958023450771
by Tharre | 2026-02-17 12:18:34+00:00
> a zero-day in the closed source firmware from Qualcomm will probably screw you anyway.

All the devices that GrapheneOS supports implement a clear separation of the baseband and the CPU in the form of SMMU, ARMs version of IOMMU. So a zero-day in the baseband does not immediately screw you - unless the code on the CPU side also contains vulnerabilities or there is a major flaw in the SMMU implementation that somehow breaks isolation.
by habinero | 2026-02-17 12:18:58+00:00
No. I see this mistake everywhere. You're confusing "knowing everything" or "making assumptions" with "mental maps". They are not at all the same thing.

The benefit of libraries is it's an abstraction and compartmentalization layer. You don't have to use REST calls to talk to AWS, you can use boto and move s3 files around in your code without cluttering it up.

Yeah, sometimes the abstraction breaks or fails, but generally that's rare unless the library really sucks, or you get a leftpad situation.

Having a mental map of your code doesn't mean you know everything, it means you understand how your code works, what it is responsible for, and how it interacts with or delegates to other things.

Part of being a good software engineer is managing complexity like that.
Show HN: Proxima – local open-source multi-model MCP server (no API keys)
by Zen4bit | 2026-02-17 12:20:01+00:00
I built Proxima, an open-source MCP server that runs locally and lets you orchestrate multiple AI providers in one workflow. I used it to run a multi-model “dev team” experiment (planning → coding → review → fixes). Looking for feedback on architecture, MCP tool design, and reliability/observability.

If you want, I can tailor the title to be more HN-friendly based on whether you’re submitting as link post (GitHub) or text post (write-up).
by franga2000 | 2026-02-17 12:20:48+00:00
But that's my point, what one irreplacable app/service do people rely on? The only thing that comes to my mind is messaging apps, but even there, almost everyone I need to talk to is reachable on at least one other app. I have multiple taxi apps because I compare prices and availability, like any reasonable consumer should. I have two banks, but even if I didn't, I can pay by cash or card, not just phone. If I need to make a bank transfer, I can go to a branch or do it online. I have two map and navigation apps because they have different strengths and weaknesses. My email is accessible by browser if the app breaks.

I'm not doing this on purpose, I just now scrolled through my app list looking for one app that would actually fuck me up if I lost it in an instant. There are none. And I'm not currently even running graphene or anything else, just a stock Samsung.
by MattJ100 | 2026-02-17 12:21:40+00:00
Yes, definitely. To me, the idea of a chat server that doesn't federate is as absurd as setting up an email server that doesn't federate. I understand that today people know more contacts with email addresses than XMPP addresses, but if we ever want to free ourselves from the current walled gardens, we need to stop treating chat as something that only happens in walled gardens.

Some people get worried about the idea of "federation", thinking that it somehow means their server is less private, and their data is being spread across a mesh of servers, and stuff like that. That's true in some decentralized/distributed chat protocols, but not in XMPP. Connections between servers only happen on-demand, similar how when you send email between different email providers, they will connect to each other to deliver the messages.

However we do have a feature which allows disabling federation access for specific accounts, for example to prevent kids from communicating with anyone outside their own Snikket server. This is a feature I want to expand on, so that you can permit communication with a limited number of approved contacts on other servers.
by topocite | 2026-02-17 12:21:43+00:00
The article just reminds me that I hate modern journalism and try to not read any news articles.

Hyperbolic attention grabbing headline followed by appeal to authority, appeal to authority, appeal to authority, counter opinion appeal to authority that the previous appeal to authority might all be wrong.

So wide reaching and all over the place, the reader and can pick from the menu on what point they want to use as confirmation of what they already believe to be true. Then the article can be cited in a type of scientistic, mostly wrong, gossip.

IMO a complete waste of time.
by estearum | 2026-02-17 12:22:18+00:00
Ah yes, much better to just assert your own perception of what they believe, even in contradiction to their stated words and visible actions.

Sometimes people just believe insane shit.

"Standard religious orthodoxy for major religion but stated explicitly in relation to modern events" isn't even on the outer perimeter of insane. In principle, billions of people believe most of what Thiel believes.

It's just unusual to hear an allegedly smart person actually say it out loud in earnest, because when you do, a smart person realizes that in fact mainstream religious views (any Abrahamic religion's apocalypse lore) are fucking insane.

But that's just reason to think Thiel has some more courage, more confidence, or less to lose than your standard intelligent Christian. All of which is obviously true. It is not reason to believe he doesn't earnestly believe basic tenets of his own religion, which you have provided no evidence for.

> He took pride in "befriending" both Røed-Larsen (architect of the Oslo agreement, moderate on Israel) and Noam Chomsky (big Israel critic) at the same time he was shooting the shit with ethnic supremacists.

There's literally nothing even contradictory in this, so not sure what you think this demonstrates. One can simultaneously be friends with all of the above characters -- in earnest.
by drecked | 2026-02-17 12:22:20+00:00
You’re right.

The only reason you see Indians is because Indians knly hire Indians. It can’t be anything else.

Completely unrelated, have you walked into a non nuclear/biomedical engineering engineering department in any IS college in the past 2 decades? I’m guessing those are also filled with Indians because their managers are insisting that only Indians can study engineering.
by ylk | 2026-02-17 12:24:08+00:00
> The baseband can do a lot, it has dma

There's an IOMMU:

> Is the baseband isolated?
> Yes, the baseband is isolated on all of the officially supported devices. Memory access is partitioned by the IOMMU and limited to internal memory and memory shared by the driver implementations. [...]

https://grapheneos.org/faq#baseband-isolation

> GrapheneOS cannot really influence this, but hardened_malloc could conceivably help.

They can and do, see above. But I don't see how hardened_malloc is related to the baseband doing DMA.
by jbreckmckye | 2026-02-17 12:26:48+00:00
One of the great benefits of AI tools, is they allow people to build stuff, even if they have no ideas or knowledge.

One of the great drawbacks of AI tools, is they allow people to build stuff, even if they have no ideas or knowledge.

It used to be that ShowHN was a filter: in order to show stuff, you had to have done work. And if you did the work, you probably thought about the problem, at the very least the problem was real enough to make solving it worthwhile.

Now there's no such filter function, so projects are built whether or not they're good ideas, by people who don't know very much
by CGMthrowaway | 2026-02-17 12:26:59+00:00
There was a fair bit of discussion on whether LLMs count as a Skinner box delivering intermittent variable rewards that induce compulsive behavior. Most people seemed to think it wasn't quite as bad as a slot machine (I mean really, what could be worse than a slot machine?)

Today I realized skinner boxes are in plenty of innocuous, non-gambling places though. If you are chatting someone on Teams or wherever, and the three dots appear, you will hover over the chat box for a far longer time waiting for a response, than you would otherwise if that feature wasn't there. Without the three dots, you would probably just move on to your next task, and return once you got the reply notification. The three dots are worse than chat notifications in that sense.
by codethief | 2026-02-17 12:27:08+00:00
I've used GrapheneOS on a Pixel 3a, 5, 8 and 10 Pro so far and it's worked really well. I couldn't imagine going back.

The only things I'm missing (which don't exist in other OS'es either):

- Being able to configure contact scopes in such a way that the app in question only gets access to the phone numbers of the contacts belonging to the label I specified, e.g. "WhatsApp", nothing more. Yes, one can of course add contacts' phone numbers to the contact scopes "by hand" but 1) there is a limit on the number of contacts/phone numbers configured this way, and 2) AFAIK there is no way to back up that list.

- Being able to install browser extensions in Vanadium.

- Being able to configure multiple VPNs at once, e.g. for Tailscale, ad filtering, blocking HackerNews during times when I should be doing something more productive :) etc., especially since the Vanadium browser doesn't support extensions (see above). I was hoping that the Rethink app might implement something like this (https://github.com/celzero/rethink-app/issues/1047) but it doesn't look like it's coming and it'd probably be much better to do this at the OS level.
by chris_sandor | 2026-02-17 12:28:10+00:00
I recently taught a 1-hour class on generative AI at my daughter’s school. My ambitious goals were: (i) live demos of image and video generation; (ii) incorporate all students (40) and teachers (5) into the generations. Almost everything worked out! You can read more in blog: https://drsandor.net/ai/school/
by aatd86 | 2026-02-17 12:29:22+00:00
There will be more of it where it does not matter.
Maybe eventually with times.
At the moment, in my experience, most systems rely on hyperlinear semantics. Especially scalable ones.
Current llms cannot physically handle this at the moment. Maybe with biological or quantum (sic) computing.

But even then it is quite impressive.

Concretely in my use case, off of a manual base of code, having claude has the planner and code writer and GPT as the reviewer works very well.
GPT is somehow better at minutiae and thinking in depth. But claude is a bit smarter and somehow has better coding style.

Before 4.5, GPT was just miles ahead.
by the_harpia_io | 2026-02-17 12:30:33+00:00
the lines-viewed thing is cool for tracking progress but honestly the bigger problem I keep running into is that AI PRs look perfectly reasonable line by line. like the code reads fine, passes linting, tests pass - and then you realize it introduced a dependency you didn't need or there's a subtle auth bypass because the LLM pattern-matched from some tutorial that didn't handle edge cases. splitting into smaller commits helps but doesn't fully solve it because each commit also looks fine in isolation. I think we need better tooling around semantic review - not just did you read every line but did anyone actually verify the security properties didn't change. been spending a lot of time on this problem lately and tbh the existing static analysis tools weren't built for this pattern at all, they assume a human wrote something wrong not that an AI wrote something plausible but subtly broken
by domh | 2026-02-17 12:30:39+00:00
This is similar to Deno Sandbox[1] which was announced a couple of weeks back. Apparently also something similar is done with fly.io's tokenizer[2][3]

[1]: https://deno.com/blog/introducing-deno-sandbox

[2]: https://news.ycombinator.com/item?id=46874959

[3]: https://github.com/superfly/tokenizer
by birdsongs | 2026-02-17 12:30:53+00:00
> even in my late 30s I can still easily pick up new skills outside my field of expertise as long as I start with the basics that could also be picked up by a high-schooler

Same age and same experience. I am learning my third language, after acquiring my second to a fluent level in my early 30's (by living in a country where it's spoken). But it's an entirely different character set, and has nearly zero cognates. I'm sure some skills transferred from my second language learning but I'm massively enjoying it and don't feel bogged down.

I think a lot of it is managing my mental energy, I look at it as a finite per-day resource replenished by sleep. If I have a mentally heavy workday, or overly emotional day, I know my language skills will be sub-par and don't try too hard. I also approach my learning in the morning, when I have an excess of this energy, because my job will do a good job of getting it close to zero, regardless of the starting point.

I think we don't give enough credence to the mental toll of an adult life and corporate job, and how much that takes from us, versus when we were young.
by alexhans | 2026-02-17 12:32:12+00:00
I had a similar experience trying to get feedback on my attempt to help different role families adopt AI evals as a common language (hands on tutorial or tool comparison).

https://news.ycombinator.com/item?id=47026263

I attribute it mostly to my own inability to pitch something that is aimed for many audiences at once and needs more UX polishing and maybe a bit on timing.

It's tough when you're not looking to sell a product but moreso engage in a community without going the twitter/bluesky route (which I'll bregudgingly may start using).

Maybe evals is a problem that people don't have yet because they can just build their custom thing or maybe it needs a "hey, you're building agent skills, here's the mental model" (e.g. https://alexhans.github.io/posts/series/evals/building-agent... ) and once they get to the evals part, we start to interact.

In any case, I still find quite a lot of cool things in SHOW HN but the volume will definitely be a challenge going forward.
by pelzatessa | 2026-02-17 12:33:06+00:00
I think that the main problem is that android has a lot of weird modifications that are not consistent with the rest of linux distros. The user data is suddenly in /data instead of /home, theres no package manager, no systemd (for better or worse), and there's hella lotta security gotchas, for example call recording is impossible without root as far as I know. I'm not saying that Android is not hackable, but it's a different type of hackability than desktop linux, you have to learn it all over again and in my opinion it's much harder to master than desktop linux.

I've been on ubports for 3 years and while it also has some weird caveats like read only rootfs, no working package manager (due to read-only fs. however ubports has pretty cool support for lxc containers where you can use apt). Due to chronic lack of time I haven't been able to sit down on my phone to play with it a bit (for example id like to install waydroid), but it seems a lot easier than android. For example, while there isn't an app for call recording, some guy worked around it by writing a systemd user service as a workaround[1]. This is exactly the type of thing I'm thinking about when talking "linux phone".

For me as a linux user, the difference if ubports was a human, I'd think that perhaps they were sick, whereas if android was a human, i'd shoot them in the face :)

[1] https://forums.ubports.com/post/75157
by sinnsro | 2026-02-17 12:33:19+00:00
The statement holds true for a broad set of companies and management styles. I speak from personal experience: the wrong incentives are always there, and they run counter to many things listed by Deming. The obsession with "financial impact" is there with varying degrees, even in functions where it is hard to quantify said impact.

It might not apply to R&D-heavy companies, but we do see engineering companies pivoting into more finance-oriented management. Boeing is one such case and look at the damage.
by enraged_camel | 2026-02-17 12:33:27+00:00
I don't think that's the moral of the story at all. It's already challenging enough to review the output from one model. Having to review two, and then comparing and contrasting them, would more than double the cognitive load. It would also cost more.

I think it's much more preferable to pick the most reliable one and use it as the primary model, and think of others as fallbacks for situations where it struggles.
by apothegm | 2026-02-17 12:33:52+00:00
Yes. The current obsession with high contrast in LED screens absolutely contributes to fatigue. It’s fantastic for sunny locations or for watching films. But absolutely terrible for eye strain when trying to read in the absence of direct sunlight.

I use an app that lets me pump up the brightness and contrast to see clearly when the sun is out but decrease brightness and contrast below even what the monitor thinks is it’s zero-point at night because even that zero point is far too bright.
by damnitbuilds | 2026-02-17 12:33:56+00:00
So far, all I see on OpenClaw is hype from AI fans promoting the use of OpenClaw to people but only AI fans posting about actually using it to do stuff, and the stuff it does seems to automate stuff I don't need automating.

It makes me think of Home Automation, fine if you are the sort of hobbyist who can be bothered to set it up and keep it running, but more trouble than it's worth for most people.
by birdsongs | 2026-02-17 12:35:03+00:00
Oh! Sorry, you described the current state of things so well I assumed you were close to the project.

Here is the github repo where banking app compatibilities are tracked: https://github.com/PrivSec-dev/banking-apps-compat-report

And it's rendered to a page here: https://privsec.dev/posts/android/banking-applications-compa...
by backscratches | 2026-02-17 12:35:08+00:00
I commented elsewhere but GrapheneOS on Pixels actively siphon resources from Google and is arguably a good protest against google.

They subsidize Pixel hardware (to incentivize users to adopt their spyware OS), you (buying used obviously) take their subsidized hardware and do not repay them by using their spyware, replacing it with Graphene. Only google loses. Their hardware is technically very good otherwise (in fact no other hardware fits the strict graphene security requirements).
by sensanaty | 2026-02-17 12:35:21+00:00
Most of these AI-guiding "techniques" seem more like reading into tea leaves to me than anything actually useful.

Even with the latest and greatest (because I know people will reflexively immediately jump down my throat if I don't specify that, yes, I've used Opus 4.6 and Gemini 3 Pro etc. etc. etc. etc., I have access to all of the models by way of work and use them regularly), my experience has been that it's basically a crapshoot that it'll listen to a single one of these files, especially in the long run with large chats. The amount of times I still have to tell these things to not generate React in my Vue codebase that has literally not a single line of JSX anywhere and instructions in every single possible file I can put it in to NOT GENERATE FUCKING REACT CODE makes me want to blow my brains out every time it happens. In fact it happened to me today with the supposed super intelligence known as Opus 4.6 that has 18 trillion TB of context or whatever in a fresh chat when I asked for a quick snippet I needed to experiment with.

I'm not even paying for this crap (work is) and I still feel scammed approximately half the time, and can't help but think all of these suggestions are just ways to inflate token usage and to move you into the usage limit territory faster.
by giancarlostoro | 2026-02-17 12:36:06+00:00
> The biggest usecase for AGENTS.md files is domain knowledge that the model is not aware of and cannot instantly infer from the project. That is gained slowly over time from seeing the agents struggle due to this deficiency.

This. I have Claude write about the codebase because I get tired of it grepping files constantly. I rather it just know “these files are for x, these files have y methods” and I even have it breakdown larger files so it fits the entire context window several times over.

Funnily enough this makes it easier for humans to parse.
by halturin | 2026-02-17 12:36:06+00:00
New release brings mTLS, NAT traversal, distributed leader election, and SSE support.

Key highlights:

- 21M+ msg/sec locally, ~5M msg/sec over network

- Distributed Pub/Sub: 2.9M msg/sec delivery to 1,000,000 subscribers across 10 nodes

- New Leader actor with Raft-inspired consensus for distributed coordination

- Metrics actor for Prometheus integration out of the box

- Spawn time control, shutdown timeout, pprof labels for debugging stuck processes

- Critical bug fix for Link/Monitor exits in network layer

Also shipped completely rewritten documentation with new guides on building clusters, message versioning, and debugging distributed systems https://docs.ergo.services

Full changelog: https://github.com/ergo-services/ergo?tab=readme-ov-file#cha...
by Palmik | 2026-02-17 12:36:15+00:00
I would pay for a solution that aggregates these alternative payment systems that aren't tied to VISA and Mastercard and their rules.

Wero, RuPay, WeChat Pay / AliPay, Crypto (through 3p like coinbase or directly), etc.

And handles them in nice and unified API, with hooks for subscriptions, etc. (taking into account that some payment methods do not support recurring payments, so there should be some hook to send an email to the customer to renew manually, etc.)
by b112 | 2026-02-17 12:37:04+00:00
Not in Spain. I can access my bank's website but I can't do anything without their bank app. Even sometimes they require to confirm my identity using their app in order to access their website.

I've seen this elsewhere, and it's absolutely ridiculous.

Why?

Because in almost all cases, the apps may only be installed with Google Play, and require the framework to work correctly. And that means?

If you are not in good standing with Google, you cannot bank!!

I cannot stress how inane it is, to have Google or Apple as the gatekeeping to identify verification. How not having an active, in good standing account with one of these two, means you cannot bank.

And it's happening more and more.

Meanwhile, banks -- which tend to make billions in profits quarterly, do this to save on infrastructure costs. They do it so they don't have to stand up their own push servers, or have an app which doesn't require firebase.

Well cry me a river, boo-hoo Mr Banker, I'm not even remotely interested in you saving on infra-structure costs at the loss of autonomy. And on top of this, many banks are reducing hours, closing branches, claiming that they don't need them.

Leaving absolutely no other choice.

This sort of thing should be illegal. Being in Spain, but requiring a US megacorp to tell your own bank, that you're you.
by wishfish | 2026-02-17 12:37:33+00:00
I'm in the same boat. Bought a 9 Pro XL and had to return it. Hope their OEM will use DC dimming for the screens or have an IPS option.

In the meantime, I use a Motorola G Power 2024 which has IPS. I'm very much a non-expert but made a minor hobby out of trying to de-google it as much as possible.

Never signed into Google with it. Using NetGuard with a whitelist to prevent most of the phoning home. Uninstalled or disabled most built-in apps. The apps I use are installed via either Obtanium or Fdroid. Have Dropbox from Aurora. Use Motorola's private space for keeping some data and apps in a separate, supposedly secure locker.

I'm sure this doesn't come close to GrapheneOS's security level but it's the best I can do within the limitations of this device. It was a fun mini-project. NetGuard is invaluable for this purpose. Almost feels like the phone is truly mine.