MurphyA/hacker-news huggingface dataset:
Show HN: Tamper-proof work verification with Ed25519 and RFC 3161 TSA
by sudeshss | 2026-02-20 11:53:20+00:00
Built a mobile app that generates cryptographically verifiable proof of completed service work. Before/after photos hashed with SHA-256, signed with Ed25519, timestamp anchored via freetsa (RFC 3161 compliant), GPS coordinates embedded.
Client side verification only. No backend trust required. Signatures verified locally in an ephemeral memory sandbox. Any tampering in photos, timestamps, GPS or metadata immediately invalidates the signature.
Stack: React Native, Golang, Ed25519, SHA-256, RFC 3161 TSA, AI work narratives via Groq.
Built for the gig economy trust problem. Target markets: contractors, cleaners, delivery, property management.
Looking to sell full IP and source code. mozar.t@yahoo.com
by tecleandor | 2026-02-20 11:53:24+00:00
I'm on INWX but trying to get out, as pricing is quite expensive for regular TLDs. A .com domain goes for about €18 with taxes and all that stuff.

And the situation for autorenewal is terrible. At least when using their Spanish site (inwx.es) they cannot do autorenewal billed directly to your credit card or Paypal account, you have to previously add credit to your account "balance" and leave it hanging there until your next renewal.

Somebody mentioned openprovider.com and I'm taking a look because it looks interesting.
Show HN: From Clawdbot to OpenAI: Dissecting the supply chain that sold out
by agentic-wiki | 2026-02-20 11:53:28+00:00
What started as a viral "Mac Mini" enthusiast project ended with a Valentine's Day "hard launch" of its founder joining OpenAI.

But the real story isn't the hiring—it's the supply chain decay.

I’ve audited the technical strata of the transition, specifically focusing on:

CVE-2026-25253 (The 1-Click RCE): How missing WebSocket origin validation allowed any website to hijack a local agent and exfiltrate host credentials.

The "ClawdHub" Poisoning: How an unvetted "skills" marketplace became a delivery mechanism for AMOS infostealers while the community was distracted by name changes.

Vibe-Coding vs. Engineering: Why building agents with "root-by-default" and no permission boundaries made this project a lethal liability for the 60k+ developers who starred it.

This post is a forensic look at the "Lethal Trifecta" of agentic AI: Root access, untrusted content exposure, and missing gates.
by jleyank | 2026-02-20 11:53:40+00:00
It’s going to be, err, fun living in a world of one-off, hard to debug software that’s overly large and complex and regenerated from time to time. Ad and behaviour data is great and wonderful but remember the goal is software that’s easy enough to use to provide an advantage in its use. Most companies aren’t interested in “running software”. They’re interested in something else, and hoping the software improves on pencil and paper. Or older, familiar software.

And brittle software will just drive customers away. And as the parent states, software can be easily replaced by the next alternative.
by gus_massa | 2026-02-20 11:53:43+00:00
It's about a preprint a few years old, the title miss the conditional: If/once they can make a tokamak, they will be able to make some gold. IIRC the calculation of how much gold they will get was not obviously wrong, but until I see the tokamak in production and I see how much gold they get I'll be skeptical.
by FieryTransition | 2026-02-20 11:53:49+00:00
If it's not reprogrammable, it's just expensive glass.

If you etch the bits into silicon, you then have to accommodate the bits by physical area, which is the transistor density for whatever modern process they use. This will give you a lower bound for the size of the wafers.

This can give huge wafers for a very set model which is old by the time it is finalized.

Etching generic functions used in ML and common fused kernels would seem much more viable as they could be used as building blocks.
by embedding-shape | 2026-02-20 11:53:52+00:00
> It's funny because I kind of noticed that

It's less funny when you consider that you were very confident about it, yet now it seems you haven't even bothered to run the model yourself, as you'd notice how different the quality of responses were, not just the speed.

Kind of makes me ignore everything else you wrote too, because why would that be correct when you surely haven't validated that before writing it, and you got the basics wrong?
by datsci_est_2015 | 2026-02-20 11:54:15+00:00
I think the proportion of new software that is novel has absolutely plummeted after the advent of AI. In my experience, generative AI will easily reproduce code for which there are a multitude of examples on GitHub, like TODO CRUD React Apps. And many business problems can be solved with TODO CRUD React Apps (just look at Excel’s success), but not every business problem can be solved by TODO CRUD React Apps.

As an analogy: imagine if someone was bragging about using Gen AI to pump out romantasy smut novels that were spicy enough to get off to. Would you think they’re capable of producing the next Grapes of Wrath?
by flamboyant_ride | 2026-02-20 11:55:00+00:00
I would say I'm maybe marginally more productive with Vim. But as you said, with advent of tools like Claude Code, where one hardly types, I don't think it really matters.

FWIW, I think it's one of the last areas of the software world that gives me true joy. I would suggest to give a try for simple that reason.
by gaigalas | 2026-02-20 11:55:37+00:00
That is not exactly true. The brain does a lot of things that are not "pattern recognition".

Simpler, more mundane (not exactly, still incredibly complicated) stuff like homeostasis or motor control, for example.

Additionally, our ability to plan ahead and simulate future scenarios often relies on mechanisms such as memory consolidation, which are not part of the whole pattern recognition thing.

The brain is a complex, layered, multi-purpose structure that does a lot of things.
by Applejinx | 2026-02-20 11:56:11+00:00
That assumes logic. It is a thing of language. Whether it 'knows' anything is somewhat irrelevant: just accusing someone or something of being unfair is an action taken that doesn't have to have a logic chain or any principles behind it.

If you gave it a gun API and goaded it suitably, it could kill real people and that wouldn't necessarily mean it had 'real' reasons, or even a capacity to understand the consequences of its actions (or even the actions themselves). What is 'real' to an AI?
by roenxi | 2026-02-20 11:56:21+00:00
No, it is censorship. IP protection would be punishing the pirates after they do something illegal. I think what you're sensing is that it is censorship in support of intellectual property rather than censorship aiming at political repression.

There's something similar in RealityVoid's comment where it is identified that EU law promotes censorship, but that is discounted because the understanding is it in aid of privacy rather than politically motivated. Although given Europe's rich history of sliding into authoritarianism that does seem like an optimistic take on where the European elite are heading. A part of political censorship is making it hard for people to realise that popular political viewpoints are being censored and providing cover by claiming the censorship is for some good cause would be pretty routine.
by stephenr | 2026-02-20 11:56:31+00:00
> Why don't our overworked, underpaid open-source developers license their software with something to the effect of "If you make more than $1,000,000, pay me.

Because that isn't open source, and is arguably not enforceable anyway.

How do you define "make $1M"? There are mega corporations with billions in revenue that somehow have a negative tax bill each year, so clearly taxable income isn't a reliable indicator.

Conversely a non profit organisation may have several million in donations/income but spend all of it on their charitable causes.

So clearly net revenue isn't a reliable indicator either.

If you don't want to release software under a licence without monetary terms, then don't. No one is forcing you to do that.
by ACCount37 | 2026-02-20 11:56:57+00:00
Strange that they raised money at all with an idea like this.

It's a bad idea that can't work well. Not while the field is advancing the way it is.

Manufacturing silicon is a long pipeline - and in the world of AI, one year of capability gap isn't something you can afford. You build a SOTA model into your chips, and by the time you get those chips, it's outperformed at its tasks by open weights models half their size.

Now, if AI advances somehow ground to a screeching halt, with model upgrades coming out every 4 years, not every 4 months? Maybe it'll be viable. As is, it's a waste of silicon.
by 3rodents | 2026-02-20 11:57:01+00:00
Are any companies doing this sharing the code being produced or some example Pull Requests? I am wondering if a lot of the human review is substantive or rubber stamping - as we see with long Pull Requests from humans. I know I would half-ass a review of a PR containing lots of robot code. I assume stripe has higher standards than me but would be nice to see some real world examples.
by lyfeninja | 2026-02-20 11:57:12+00:00
Well you're about to do one of the hardest tasks any human can do, which is raise a child. It takes a ton a patience, care, and work to do it right.

You're company will hopefully be tuned into this and be reasonable and show you some grace through a life changing experience. You also need to be kind to yourself through the journey. You will have to make adjustments, but it will be worth it.

As for imposter syndrome, everyone puts their pants on one leg at a time. Just keep learning and doing your best and you'll be fine. The fact you're asking this question at all is a good sign.

Congratulations!
Show HN: OkaiDokai, tool-level firewall for OpenClaw, Claude Code and Codex
by cedel2k1 | 2026-02-20 11:57:13+00:00
Hey HN, Sascha here, developer of OkaiDokai. Like many others, I fell in love with OpenClaw, but was longing for more control over what it can do without interrupting its autonomous, agentic nature. OkaiDokai solves this for me by allowing me to set up my own rule set of what is allowed by default, what is not, and what it should ask permission for. It comes with a hosted API, web and native apps including push notifications (with quick-response support), plugins for OpenClaw and Claude Code, and soon Codex.

I'm still working on getting the apps onto the App Store (currently on TestFlight and Android beta channels), as well as giving the rule engine and UI a bit more love. It should be good enough for a quick test if anyone dares to try it!

I just created a new Discord server (https://discord.gg/M25cCwJ5x7), so please say "hello" if you’d like to give it a go and provide me with any feedback you have. I'm adding new features and improvements pretty much around the clock right now. I'm also planning to release the source code under the Sustainable Use License soon, as I think it's important to get more eyes on it and allow others to contribute should they want to.

Thanks for reading :)
by zozbot234 | 2026-02-20 11:57:27+00:00
Low-latency inference is a waste of power. If you're going to the trouble of making an ASIC, it should be for dog-slow but very high throughput inference. Undervolt the devices as much as possible and use sub-threshold modes to save further power and minimize leakage losses, but also keep working in fine-grained nodes to reduce areas and distances. The sensible goal is to expend the least possible energy per operation, even at increased latency.
by toldnotmywrath | 2026-02-20 11:58:30+00:00
I don't know if this happens to anyone else but on reading LLM-generated text I did not prompt, my eyes do incredibly quick saccades from start to middle to end in always around <1-2s no matter the length of the text.

It's entirely involuntary, I am just unable to care. It's almost always justified because the text in question is always painfully bloated, and repetitive.

The LLM-text you posted could have been (given I didn't read it carefully):

"Skill issue. Iterate on the output, never accept what you receive on the first pass"

Instead we get the standard:

- Agree with the user

- Lackluster simile

- Actual content

- Not X, Y. X, not Y.
by carlosjobim | 2026-02-20 11:58:54+00:00
Yes, and one of the strongest of those nets is limited liability for companies, which I think almost all industrialized countries have, no matter their degree of socialism/capitalism.

The other strong safety net needed is a fluid labour market with high wages for workers, meaning people can take risks and if it doesn't work out, they find a well paying job easily.

And of course health care has to be cheap in this "ideal society".
by antonyh | 2026-02-20 11:59:32+00:00
As a Brit/European, would I notice or care if fbi.gov was blocked via consumer internet providers? I'd probably not notice if *.gov was blocked. I'm fairly sure government-level internet provisioning has a very different set of restrictions to the general population for those who need access to US Gov services, in the same way that I'm sure the Chinese state itself isn't subject to the rules of the Great Firewall.
by stego-tech | 2026-02-20 11:59:37+00:00
I still believe this is the right - and inevitable - path for AI, especially as I use more premium AI tooling and evaluate its utility (I’m still a societal doomer on it, but even I gotta admit its coding abilities are incredible to behold, albeit lacking in quality).

Everyone in Capital wants the perpetual rent-extraction model of API calls and subscription fees, which makes sense given how well it worked in the SaaS boom. However, as Taalas points out, new innovations often scale in consumption closer to the point of service rather than monopolized centers, and I expect AI to be no different. When it’s being used sparsely for odd prompts or agentically to produce larger outputs, having local (or near-local) inferencing is the inevitable end goal: if a model like Qwen or Llama can output something similar to Opus or Codex running on an affordable accelerator at home or in the office server, then why bother with the subscription fees or API bills? That compounds when technical folks (hi!) point out that any process done agentically can instead just be output as software for infinite repetition in lieu of subscriptions and maintained indefinitely by existing technical talent and the same accelerator you bought with CapEx, rather than a fleet of pricey AI seats with OpEx.

The big push seems to be building processes dependent upon recurring revenue streams, but I’m gradually seeing more and more folks work the slop machines for the output they want and then put it away or cancel their sub. I think Taalas - conceptually, anyway - is on to something.
by palata | 2026-02-20 12:00:11+00:00
It does not surprise me that people choose the path of least resistance. I find it sad that they happily connect everything to Google/Apple.

What surprises me is that it is a "conversion killer". So if you ask people to create an account, it's sooooo very hard for them that they will just leave. And spend the next 30 minutes scrolling TikTok, I guess?
by machardmachard | 2026-02-20 12:00:46+00:00
Language as Distributed Node Graph on iR³ Foundation

From Post 878: iR³ pure flux foundation

From Post 830: Language as node graphs

From Post 893: Local apps in meatspace

The app: iR³Pidgins = Language processing using pure flux architecture

Result: Universal communication via distributed language graphs, ~300 lines
by srdjanr | 2026-02-20 12:00:49+00:00
Regarding safety, no benchmark showed 0% misalignment. The best we had was "safest model so far" marketing speech.

Regarding predicting the future (in general, but also around AI), I'm not sure why would anyone think anything is certain, or why would you trust anyone who thinks that.

Humanity is a complex system which doesn't always have predictable output given some input (like AI advancing). And here even the input is very uncertain (we may reach "AGI" in 2 years or in 100).
by fnord123 | 2026-02-20 12:01:36+00:00
On thing that troubles me is that code reviews are also an educational moment for seniors teaching juniors as well as an opportunity for people who know a system to point out otherwise undocumented constraints of the system. If people slack on reviews with the agent it means these other externalities suffer.

Are being handling this at all? Is it no longer needed because it gets rolled into AGENTS.md?
by gas9S9zw3P9c | 2026-02-20 12:01:59+00:00
Where is the detail? Examples? Something concrete? I don't think it is, but it does read like LLM generated content marketing. Lots of generic statements everyone knows. Yes, dev environments are helpful. Have been for 20 years. Yes, context and rules are important for agents. Surprise.

TLDR "look we use AI at Stripe too, come work here"
by cdcluv | 2026-02-20 12:02:33+00:00
Despite a lot of education, I don’t know the immune system well, because it’s complex.

However, it’s my understanding that when the body is in a state of readiness due to its infection (from a cold, flu, etc.) the effects of this (such as fever, inflammation, and general immune response) could potentially could guard the body against other types of infections that the body perhaps doesn’t have resistance to. So while I think a universal vaccine sounds great, I’d try it, and I’d want others I know that have dust allergies, etc. to try it, and because we’ve had friends and family die from the flu, I’m still a little suspicious that this could open the door for other types of disease we’ve not been having to deal with.
by duskdozer | 2026-02-20 12:03:47+00:00
I think it is outdated honestly. It's no longer a fringe activity to spend most of your socializing time on the internet/social media, especially so mid 20s and under.

>57% of Gen Zers want to be influencers
>...
>Nearly half, 41% of adults overall would choose the career as well, according to a similar Morning Consult survey of 2,204 U.S. adults.

https://www.cnbc.com/2024/09/14/more-than-half-of-gen-z-want...
by jwakely | 2026-02-20 12:04:24+00:00
It's a valid concern, and one that was raised on reddit a few times too.

But if you're building an open and fair model, I hope you're not just sucking up the entire web and training it on endless stolen data, DoS'ing open source projects constantly. If you just send out crawlers to consume everything, expect some poison. So maybe don't build models that way.
by antonyh | 2026-02-20 12:05:57+00:00
I'm in the UK and can't access https://imgur.com/ - an American service that now refuses to serve content to Britain because "On September 30, 2025, Imgur blocked users from the United Kingdom in response to a potential fine from the Information Commissioner's Office regarding its handling of children's personal data". I presume that means OSA.

It does lend credibility to the blocks when it's US companies trying to dodge fines while mishandling PII. The suggestion of using a US freedom gov to dodge US-based self-censorship is as ironic as it is stupid when the real solution is pay the fine and handle the data properly.
by blitzar | 2026-02-20 12:06:06+00:00
I find working with Ai a lot like working with a junior employee... with the junior employee they learn and get better (skill level and at dealing with me) but with Ai the mentoring lessons reset once you type /clear

Skills are a positive development for task preferences, agents.md for high level context, but a lot of the time its just easier to do things the way your Ai wants.
by hackrmn | 2026-02-20 12:06:09+00:00
Every time Web Components is being fronted, one has to duly inform the reader that Apple _rightfully_ refuses to implement what in my humble opinion is at least one broken piece of the specification that if implemented -- and it is implemented faithfully by Chrome and Firefox browsers -- in principle breaks the Liskov's Substitution Principle:
* https://lists.w3.org/Archives/Public/public-webapps/2013OctD...
* https://lists.w3.org/Archives/Public/public-webapps/2016JanM...
To be fair, this only concerns so-called "custom elements" that need inheriting existing HTML element functionality, but the refusal is well explained IMO. Meanwhile everyone else is just chugging along, like it tends to happen on the Web (e.g. History API giving way to Navigation API that in large part was designed to supercede the former).

To all of the above I might add that without "custom elements" Web Components is severely crippled as a feature. If I want to sub-class existing functionality, say a `table` or `details`, composition is the only means to do it, which in the best style on the Web, produces a lot of extra code noone wants to read. I suppose minimisation is supposed to eliminate the need to read JavaScript code, and 99% of every website out there features absolutely unreadable slop of spaghetti code that wouldn't pass paid review in hell. With Web Components that don't implement "custom elements" (e.g. in Safari) it's a essentially an OOP science professor's toy or totem. And since professors like their OOP theory, they should indeed take Liskov's principle to heart -- meaning the spec. is botched in part.
by ijonis | 2026-02-20 12:06:27+00:00
I run multiple content-heavy sites and got tired of one thing: there was no
deterministic way to validate with the AI agent whether my content was actually optimized. Not
"probably fine" — actually checked against concrete rules, both for traditional
search and for AI search engines.

SEO linters exist, but they're either paid SaaS, not automatable, or ignore
the structural patterns that LLMs use when deciding what to cite. So I built
one.

geo-lint is a CLI with 92 rules: 32 SEO (table stakes — titles, descriptions,
headings, slugs, canonical URLs, schema, the works), 35 GEO rules specifically
for AI citation readiness, 14 content quality checks inspired by Yoast, and
the rest for technical and i18n validation. We extensively researched the
current state of GEO and AEO to make sure the rules reflect what actually
gets content cited by ChatGPT, Perplexity, and Google AI Overviews — not
outdated advice.

The design principle: the linter is deterministic, the AI agent is creative.
Same content in, same violations out, every time. The agent does the fixing.

In practice, I install it in a project, paste one prompt into Claude Code or
Cursor:

Run npx geo-lint --format=json, fix every violation using the suggestion
field, re-run until the output is [].

And walk away. The agent reads the JSON violations, edits the files, re-lints,
loops — no manual input. When it finishes, the content is validated for both
traditional search ranking and AI citation. One command, both outcomes, across
an entire site.

Every rule outputs a machine-readable suggestion field that tells the agent
exactly what to change. The JSON has no formatting, no ANSI colors — pure
structured data. Works with Markdown/MDX out of the box, extensible to Astro,
HTML, or any CMS via custom adapters.

This is extracted from the toolchain I use on production client content at my
agency. MIT licensed, zero peer dependencies, TypeScript.

Happy to answer questions about GEO patterns, what makes content citable by
LLMs, or how the agentic loop works in practice.