MurphyA/hacker-news huggingface dataset:
by duozerk | 2026-02-18 17:34:56+00:00
I read this often, and I guess it could be true, but those kinds of transaction would presumably go through DNM / forums like BF and the like. Which means crypto, and full anonymity. So either the buyer trusts the seller to deliver, or the seller trusts the buyer to pay. And once you reveal the particulars of a flaw, nothing prevents the buyer from running away (this actually also occurs regularly on legal, genuine bug bounty programs - they'll patch the problem discreetly after reading the report but never follow up, never mind paying; with little recourse for the researcher).

Even revealing enough details, but not everything, about the flaw to convince a potential buyer would be detrimental to the seller, as the level of details required to convince would likely massively simplify the work of the buyer should they decide to try and find the flaw themselves instead of buying. And I imagine much of those potential buyers would be state actors or organized criminal groups, both of which do have researchers in house.

The way this trust issue is (mostly) solved in drugs DNM is through the platform itself acting as a escrow agent; but I suspect such a thing would not work as well with selling vulnerabilities, because the volume is much lower, for one thing (preventing a high enough volume for reputation building); the financial amounts generally higher, for another.

The real money to be made as a criminal alternative, I think, would be to exploit the flaw yourself on real life targets. For example to drop ransomware payloads; these days ransomware groups even offer franchises - they'll take, say, 15% of the ransom cut and provide assistance with laundering/exploiting the target/etc; and claim your infection in the name of their group.
Show HN: Supervisor IDE – Command center for coding agents in complex projects
by nexroo | 2026-02-18 17:34:57+00:00
Hey Hacker forum,

I'm trying to build the most complete IDE for vibe coding, by this i mean a command center to manage contexts, permissions, skills, apps and tasks in complexe project with multiples codebase and knowledge sources.

The release is now live :

- Layered project/app/agent/task context with smart automatic injection

- Specialized agents with scoped permissions, skills, context, access

- Global agent that spawn sub agents to solve specific tasks

- Permissions management for each agent and app assignements

- Persistent multi-agent background sessions, you can close chats and just get notified

- No need for chat : the write a kanban task, agent pick it, review, automated git branche and worktrees to avoid messy workspace, automatic PR creation on validation

- Kanban task planning from agent, with files to be modified, risks,...

- Create audit task that render markdown to feed your knowledge base for your projects and futur tasks

- Per-task token & cost breakdown

You can join on discord to discuss: https://discord.gg/2R3GJYWg

In the futur i want to build a real entreprise grade solution, with collaborative feature and fine grained permissions and costs management.

As well as connections for knowledge base, more compatiblity, better visualization, agents flows and many more ideas.

I need your feedback on the solution or even the idea, thanks hackers !
by homarp | 2026-02-18 17:34:58+00:00
This was an interesting read:
https://gizmodo.com/right-to-compute-laws-are-spreading-acro...

this part in particular:

Like right-to-work laws that frame themselves as protecting individual freedom, critics warn that right-to-compute statutes could, in practice, primarily benefit large corporations by limiting the ability of states and local governments to regulate AI projects.
by marojejian | 2026-02-18 17:35:02+00:00
Despite having read a lot about the Fed, I still get confused about how to interpret its balance sheet.

So please correct me, but my current understanding is it's actually pretty simple: when it goes up, it's creating "money." But hard to square what the effect on inflation is. Sure, inflation eventually occurred. But arguably nothing came of the massive increase post GFC for more than a decade.
by vuldin | 2026-02-18 17:35:02+00:00
I agree with this statement. Kimi K2.5 is at least as good as the best closed source models today for my purposes. I've switched from Claude Code w/ Opus 4.5 to OpenCode w/ Kimi K2.5 provided by Fireworks AI. I never run into time-based limits, whereas before I was running into daily/hourly/weekly/monthly limits all the time. And I'm paying a fraction of what Anthropic was charging (from well over $100 per month to less than $50 per month).
by hearsathought | 2026-02-18 17:35:30+00:00
> When we realised that in order to live in a society we’d need things like laws, democracy, courts, human rights, and so on.

That's odd because the prononents of laws, democracy, courts, human rights, etc have shown to be not so civil. So I ask again which centuries?

> We, as a species, are still working on that and civilisation seems both imperfect and poorly distributed.

So no centuries? You made shit up?
by Stanzin7 | 2026-02-18 17:35:38+00:00
Hey guys, I built ExtensionShield: a Chrome extension scanner that does detailed static analysis and flags privacy + compliance-breach signals then produces an evidence-backed score.

It’s open-core/partially open source, so you can inspect what goes into scoring (the enterprise compliance rulepacks are closed because they change often).

I’d love QA help (edge cases, false positives/negatives) and advice on what signals thanks a lot )
by nazcan | 2026-02-18 17:35:48+00:00
> having a main branch allows a casual observer(management) to browse your project in the gui and see what is currently live.

I never found this very compelling. What is main in that world is not the source of truth, and it's rare to have a system atomically in one state or the other - but normally there are progressive rollouts. And if you ever need to rollback in production, I assume no one is changing where main is.

> I like the opportunity to force a second set of testing, and code review. Especially if the team is big enough that you can have different people doing code review for each branch.

To be explicit for code review, do you mean there is (1) main, (1) development, and then a bunch feature branches - and that there is review when merging into development and main? Having a two-tiered review process seems extremely difficult to do - versus just having more reviewers on the first merge - especially dealing with merge conflicts and needing to merge again into development.

> You can also have your CI/CD do longer more thorough testing while merging to main vs development.

I think it's fair to do more testing later. I think the equivalent I'm used to (which is pretty close, so not a huge difference), is only building releases from the commit that passed the bigger/slower tests.

But also, assuming there are multiple deployments coming from one repo, if you block merging into main, that means you'd be blocking on all tests passing - while release branches for a given product can select a subset of tests when deciding on release candidates.

> If it's a project with a single deployment, version tagging is kind of pointless, it's much easier to just use a branch to reflect what is live, and roll back to a merge commit if you have to. Then you can still merge directly to main in the event of a hotfix.

I think it's worth maintaining the flexibility of how many releases come from a repo. Needing to fork repos just because you want another deployable release in the future seems painful to me.
by joering2 | 2026-02-18 17:36:53+00:00
I wasn't voting for Trump, but if you have a credible evidence that "Trump is a pedophile" then you should immediately go to your nearest police station and report it. Otherwise you might be found in a lot of legal trouble for aiding and abetting "a pedophile" even if unintentionally.

With that being said, I don't think you know much about how litigations work. Buying 100 top law firms and having I presume all those lawyers working on your case does not help you win your case; judges do not get intimidated by the law firm you use. And that's like saying drinking 100x more protein will get me muscles 100x faster.

Trump trying to put Mark in jail is all that needs to happen for a starter. He could cost his company billions; once they done with FB and all the political power then can rain, the stock would be some 80% down. Mark would be worth 90% of what he has now and would be radioactive for any future business endeavors. I mean it should be clear at this point that President of USA does have a power to destroy your life and/or business. He doesn't need to put you in prison to end your life. And Mark wouldn't pay $1 million bribe if he would think otherwise.
by beAbU | 2026-02-18 17:37:34+00:00
There are so, so, so many companies operating in this space right now. You list two that have given up. A quick google brings back at least a dozen operations that appear to be still ongoing.

BMW Personal Pilot, Merc Drive Pilot, and Honda Sensing Elite are Level 3 automation tech you can buy right now. Tesla is still at level 2!!

Whether Tesla is going to be the first to achieve true autonomy or not is a toss-up. And and regardless of who achieves it, the rest will be very very short on their heels.
by infogulch | 2026-02-18 17:37:47+00:00
Does GNL support pleats, tucks, and darts? These sewn features help make flat cloth conform to curves in the body. The terms don't seem to be mentioned explicitly in the repo, though maybe they can be implemented with the existing notation.

https://en.wikipedia.org/wiki/Pleat | https://en.wikipedia.org/wiki/Tuck_(sewing) | https://en.wikipedia.org/wiki/Dart_(sewing)
by araujo88 | 2026-02-18 17:37:52+00:00
I built HookInbox after spending 4 hours debugging a Stripe webhook that was failing with “signature verification failed.”

The tool shows exactly why verification fails:
– timestamp too old
– wrong secret
– middleware modifying the raw body
– algorithm mismatch (SHA-1 vs SHA-256)

Verification runs client-side (Web Crypto API), so secrets never leave your browser.

The core verification logic is open source:
https://github.com/HookInbox/hookinbox-verify

Would love feedback from people who’ve fought webhook debugging in production.
Show HN: Agent Paperclip: A Desktop "Clippy" That Monitors Claude Code/Codex
by fredrussias | 2026-02-18 17:38:45+00:00
Hi HN

I built a small desktop companion that monitors CLI AI coding agents so you don’t have to stare at the terminal during long tasks.

It shows when the agent is done, needs input, and the current token/context usage (useful to know when it’s about to compact). It’s fully local + free + open source:
https://github.com/fredruss/agent-paperclip

It supports Claude Code via hooks and Codex CLI by watching local session files. Default sticker pack is a small Clippy nod (no affiliation, Microsoft please don't sue me).

Next on the to-do list: multi-session visibility.

Would love feedback / issues / stars.
by chrsw | 2026-02-18 17:38:53+00:00
If much of your value is tied up in reputation, as Apple's is, I don't see how you can rush into AI in its current state. It's too risky. If Grok tweets something racist, yeah that's bad but people will move on. If an agent on someone's iPhone leaks sensitive personal information or drains their bank account on mistaken purchases, that's a massive hit on Apple's rep.
by iseletsk | 2026-02-18 17:39:55+00:00
What article is not mentioning is this, for the US:

Private sector: + 687,000

Government sector: – 319,000

Total: + 181,000

---

The government sector doesn't produce virtually anything that counts toward GDP, so GDP growth relates not to 181k of total employment growth but to 687k of private-sector growth.
So, no, this is not about eliminating jobs and a few people getting rich.
It is about statistcs, and lying to force the agenda.
by kbolino | 2026-02-18 17:39:56+00:00
The rarity of use is a chicken-egg problem, though. The hardware makers consider it a waste because the software doesn't use it, and the software makers won't use it because it's not widely supported enough. Apple and Qualcomm not supporting it at all on any of their hardware tiers just exacerbates it. I think this is a good explanation for why mobile devices lack it, and even why say a MacBook Air or Mac Mini lacks it, but not why a MacBook Pro or Mac Studio lacks it.

It does seem like server hardware is adopting SVE at least, even if it's not always paired with wider registers. There are lots of non-math-focused instructions in there that benefit many kinds of software that isn't transferable to a GPU.
by freeAgent | 2026-02-18 17:39:58+00:00
I’m sad because the WiFi on my M1 MBA is dying/dead and there’s no way to replace it without swapping the whole “logic board.” Apple also doesn’t support any USB WiFi adapters in recent versions of MacOS, so it’s now tethered to a wired network connection. I’m just waiting for the M5 refresh to hit at this point. Anyway, all that’s to say that at least some M1 hardware is going to to the trash heap soon :(
by thornewolf | 2026-02-18 17:40:18+00:00
For the comment from "Is Show HN dead? No, but it's drowning", the article author editorializes

"One of the great benefits of AI tools, is they allow anyone to build stuff... even if they have no ideas or knowledge.

One of the great drawbacks of AI tools, is they allow anyone to build stuff... even if they have no ideas or knowledge."

into

"One of the great benefits of AI tools is they allow anyone to build stuff, even if they have no ideas or knowledge. One of the great drawbacks is they allow anyone to build stuff."

which removes the rhetorical effectiveness of the comment (and also breaks the promise of a quotation). I recommend that OP represents the source exactly.

____

I now see that this article contains multiple GPT-isms
by rozap | 2026-02-18 17:40:36+00:00
I've seen it rationalized by saying you should be moving jobs every year or so, because if you're not doing that, then you're not growing. I've always thought of this as a sort of Julius coping mechanism. On some level, I think a Julius views a non-Julius as a stagnant old gray beard who rejects the "growth mindset".

To be clear: I've never seen people who follow this strategy contribute anything of value, and it's the biggest red flag on a resume. You learn and grow more by seeing things through.
by pjmlp | 2026-02-18 17:41:13+00:00
Nope, in UNIX proper syscalls and libc overlap, that is how C and UNIX eventually evolved side by side, in a way one could argue UNIX is C's runtime, and hence why most C deployments also expect some level of compatibility with UNIX/POSIX.

Linux is the exception offering its guts to userspace with guarantees of stability.
I'm Building OpenClaw Skills for Nonprofit RBM Logic Models
by vassilbek | 2026-02-18 17:41:20+00:00
For years, I have worked in results-based management, supporting nonprofit and development programs through manual activities design and implementation.

After that, I began using a dedicated GPT tool to support this work and improve consistency in early-stage analysis and drafting, for example
https://lnkd.in/dbmBAXMB

I have now created and am actively piloting the next step with OpenClaw autonomous sub-agents, including this focused skill for nonprofit RBM logic model development: https://lnkd.in/dYuhhN8r

This is an early-stage effort, but the objective is practical. Maybe I will build a set of specialized agents for development consulting workflows, with a clear human-in-the-loop approach for expert validation and decision quality.

There are still many unresolved challenges on the horizon, from data confidentiality and security to governance and accountability. At the same time, the direction of development is clear, and this shift is unlikely to stop.

The long-term direction is to help digitize core consulting processes, from problem definition and theory of change to indicators, assumptions, risk logic, and adaptation planning, while maintaining methodological rigor.

If you work in development programming, M&E, or RBM system design, I would be glad to exchange experience and test relevant use cases.
You can also follow my technical work and experiments here:
https://lnkd.in/d_RwMaFp
by dzonga | 2026-02-18 17:41:33+00:00
I loved my pixel 3a - it did the work

then I upgraded to a 6a - overheating, battery exploded - google refused to change it coz it was bought in the uk - while I'm now in the US - as if I didn't trade my US bought 3a for a pixel 6a in the UK - some android version brought 2 photo apps - so I recovered some via the cloud - lost others

finally gave up and moved back to using an iPhone - transition was easy - I recovered everything that was left intact on my iPhone SE before switching to a Pixel 3a

so yeah f*k google phones
by AndrewKemendo | 2026-02-18 17:41:42+00:00
Looks like the ramifications of elite overproduction are starting to actually manifest everywhere!

> And while the polarizing nature of social media can perpetuate a sense of crisis and despair, these platforms are too disjointed for a unifying figure to emerge and seize power.[50] Turchin predicted that the resolution to this crisis will occur in the 2030s and will substantially change the character of the United States.[34]

https://en.wikipedia.org/wiki/Elite_overproduction
by PaulHoule | 2026-02-18 17:42:00+00:00
Get over your FOMO:

I walked into that room expecting to learn from people who were
further ahead. People who’d cracked the code on how to adopt AI at scale,
how to restructure teams around it, how to make it work. Some of the
sharpest minds in the software industry were sitting around those tables.

And nobody has it all figured out.

People who say they have are trying to mess with your head.
by rowanG077 | 2026-02-18 17:42:08+00:00
If I have learned one thing it's is that current corporate strategy is no guarantee for the future. If you want to purchase a laptop now and want a great linux experience, then the M2 Is a great option. But don't assume that M(n+1) will ever get support.

This reasoning is essentially just as true for any other laptop maker Dell, Lenovo, Asus, Framework, HP etc might also decide to bomb linux support at any time.
by charcircuit | 2026-02-18 17:42:12+00:00
Money is not a moat since you can buy money (debt) or sell equity for money.

>The thing I launched last week is called Kith — a paid, invite-only social network

Social networks already is an existing competitive space and making it both paid and invite only obviously will hurt its adoption. I wouldn't have been surprised if this failed to get users even if it was free and even if this was preLLM. A brand new social network doesn't truly solve users problems.
by brigade | 2026-02-18 17:42:17+00:00
ARM favored wider ILP and mostly symmetric ALUs, while x86 favored wider and asymmetric ALUs

Most high-end ARM cores were 4x128b FMA, and Cortex-X925 goes to 6x128b FMA. Contrast that to Intel that was 2x256b FMA for the longest, then 2x512b FMA, with another 1-2 pipelines that can't do FMA.

But ultimately, 4x128b ≈ 2x256b, and 2x256b < 6x128b < 2x512b in throughput. Permute is a different factor though, if your algorithm cares about it.
by delta_p_delta_x | 2026-02-18 17:42:23+00:00
Indeed. Anything documented has a function wrapper. `NtCreateFile` is a function wrapper for the syscall number, so any user-mode code that has `NtCreateFile` instead of directly loading the syscall number 0x55 will be stable. The latter might not. In fact, it is not; the number has increased by 3 since Windows XP[1].

One could probably produce some sort of function pointer loader library with these tables, but at that point... Why not just use the documented APIs?

[1]: https://github.com/j00ru/windows-syscalls/blob/8a6806ac91486...
by horsawlarway | 2026-02-18 17:42:49+00:00
This is absolutely true, but also not that important.

Again - I'm not saying "All SaaS products are going to immediately go away". In the same way that all desktop purchases didn't immediately dry up in response to mobile apps.

But some customers are extremely price sensitive. And some customers who aren't price sensitive now, become price sensitive at some point.

Most new entrants to an existing market explicitly don't win by trying to engage the large enterprise customers. It's a shitshow of misaligned interests, checklist style purchasing decisions, unreasonable demands, custom solutions, etc...

They win by being a decent product at a decent price point for the 1 to 10 seat company range. The people who are both buying and using the software personally. With their own money, not a corporate card.

Eventually, the SaaS catering to enterprise has to actually explain their value to those users, and often it's basically zero: they're more expensive because they have all that cruft enterprises need, not because they're a better value for solo/small business.

So the legacy player starts to see serious churn. Retention becomes problematic. New user growth slows. Prices have to go up to maintain existing profits, which just drives more small folks away.

And then a decade later you have an overpriced enterprise only solution, which may absolutely still have a couple of large customers who won't switch, but who is otherwise essentially a legacy product on the road to death.

And then the enterprise customers start looking at why they spend so much compared to the other vendors for a legacy product, and they start bleeding away too.
by nickelpro | 2026-02-18 17:43:23+00:00
It's original meaning was days since software release, without any security connotation attached. It came from the warez scene, where groups competed to crack software and make it available to the scene earlier and earlier. A week after general release, three days, same-day. The ultimate was 0-day software, software which was not yet available to the general public.

In a security context, it has come to mean days since a mitigation was released. Prior to disclosure or mitigation, all vulnerabilities are "0-day", which may be for weeks, months, or years.

It's not really an inflation of the term, just a shifting of context. "Days since software was released" -> "Days since a mitigation for a given vulnerability was released".
by trashb | 2026-02-18 17:43:32+00:00
This assumes the market is not oversaturated. It does not work if there are only a couple of people trying to find a place to eat in a street with 30 similar well maintained and staffed restaurants.

Correct me if I'm wrong but, you may be thinking of restaurants where their defining factor is "having a very creative atmosphere", which will not suit all customers. However it is a differentiating factor which will serve a big audience that is under served in a location filled with "boring well maintained and staffed restaurant".

In my view the creativity comes in in finding solutions to a problem, in a oversaturated market the problem may be "how do I persuade customers to come to my restaurant instead of my competitor?". And following that question may be (in the restaurant example) "what can I offer that is under served in the current market?" The solution to that may be "a biker cafe" or "an overpriced "creative" restaurant where the waiters are terrible and the chef is even worse" (perhaps even rude on purpose).

Additionally I assume you want the restaurant to grow. If you want the restaurant to just survive the bar is lower and you may be able to do that by doing the same everyone else is doing as long as you meet the minimum.
by fainpul | 2026-02-18 17:43:55+00:00
Richard Nixon: "I'm not a crook." [1]

Bill Clinton: "I did not have sexual relations with that woman, Ms. Lewinsky." [2]

Donald Trump: let's not even start.

I find it weird that institutions still insist the people they question must swear to tell the truth. It obviously doesn't help. Quite the opposite, it makes the liers look stronger (until they're caught).

[1] https://en.wikipedia.org/wiki/Watergate_scandal

[2] https://en.wikipedia.org/wiki/Clinton%E2%80%93Lewinsky_scand...