MurphyA/hacker-news huggingface dataset:
Mapping Middle East kinetic events via automated OSINT and deduplication
by aggeeinn | 2026-03-13 12:37:29+00:00
Hey HN,

A few weeks ago I shared an early version of a Middle East threat map. Since then, the conflict has escalated, and the "fog of war" across social media has only gotten thicker.

I realized my previous version was too much of a raw data dump. To make it actually useful for understanding the tactical reality on the ground, I spent the last few weeks completely rebuilding the intelligence engine and the UX to focus entirely on the signal-to-noise ratio.

You can see the live matrix here: https://iranwarlive.com

The goal of this project is to provide a purely data-driven, mathematically verified ledger of kinetic events, without the editorializing or unverified rumors found on Twitter/Telegram.

A few things I focused on for this iteration:

Strict Sourcing & Confidence: The engine ignores social media rumors. It strictly aggregates from high-confidence defense wires (CENTCOM, AP, Reuters). Events are now tagged with a Confidence Bar (High/Med/Low) based on the source origin.

Temporal Hierarchy: A major issue with war maps is marker clutter. Now, only strikes from the last 72 hours glow and pulse. Older events automatically fade into a gray "historical" background layer. You instantly see what is happening now without losing historical context.

Automated Deduplication: To prevent data hallucination, the backend uses a "Circuit Breaker" algorithm that mathematically deduplicates historical casualty recaps found in news articles, extracting coordinates and casualty splits (Military vs Civilian) strictly for new kinetic events.

Airspace NOTAMs: Added a live layer tracking commercial flight restrictions and airspace closures to show the logistical impact of the conflict.

Machine Readable: I added a canonical /feed.json and /llms.txt so Answer Engines and researchers can crawl the live threat matrix directly without scraping the DOM.

Tracking a live conflict accurately is inherently difficult, and I am constantly trying to refine how the engine parses "Subject" and "Object" from defense feeds to avoid bias.

I’d love to hear your feedback on the usability of the map, the data presentation, or if there are specific OSINT data feeds you think I should integrate into the pipeline.
by iso1631 | 2026-03-13 12:37:29+00:00
Using almost anything but : would have been fine.

Could have used 2001~1001~~1 instead of 2001:1001::1, which looks weird today, but wouldn't have done if that had been chosen all those years ago.

(unless : as an ipv6 separator predates its use as a separator for tcp/udp ports, in which case tcp/udp should have used ~. Other symbols are available)
by Springtime | 2026-03-13 12:37:53+00:00
I think the relevant use case for this are places like Russia (one is even quoted in the testimonials) where I've seen concern about the country isolating itself from the outside internet, due to the various regional tests actually trialling this.

I've seen such users ask about ways to prepare storing outside data in the event it becomes permanent. Some have suggested mesh networks, others downloading Wikipedia and torrenting things.

So it seems that this is useful where internet is still available but is restricted at say the ISP level. It seems to be a browser that when a page is unavailable it checks for Ceno torrents of the page from other users and serves that instead.
by glhaynes | 2026-03-13 12:38:05+00:00
> No install fuss — download and start designing immediately.

also

> Gatekeeper blocks the app immediately. You'll see either "TUIStudio cannot be opened because it is from an unidentified developer" or "TUIStudio is damaged and can't be opened" on newer macOS after quarantine flags the binary.
To get past it: right-click the .app → Open → Open anyway — or go to System Settings → Privacy & Security → "Open Anyway".
by mvdwoord | 2026-03-13 12:38:19+00:00
Germany has iirc liability for the entire chain (engineers to upper management) in case of data breaches. I remember having to sign for that when I did a project in Germany. Would that help? I would not mind if the CEO/CTO of Odido would spend a couple of years in a federal pound them in the ass prison if it is found out the leak was due to malpractice.
Show HN: A modern boarding pass encoder/decoder/scanner (web and library)
by jqssun | 2026-03-13 12:38:32+00:00
Open-sourcing an IATA compliant and backwards compatible boarding pass tool. You can try it out here: https://jqs.app/iata

The BCBP standards can be finnicky to implement, with documentation often behind paywalls and all existing tools out of date. Needed a modern, open, web-based sandbox.

This one allows you to:
- (encode) produce IATA compliant barcode data for integration tests without proprietary software
- (decode) scan or upload the barcode, or paste the boarding pass directly from your device
- (save) add or share a boarding pass to Apple Wallet or Google Wallet

Furthermore, it supports:
- all additional fields defined by the current spec (sequence numbers, compartment code, agency discount, baggage allowance, fast track, secondary security, travel document verification indicators, etc.)
- viewing boarding pass data in an alternative barcode format

And of course, no telemetry/tracking. You can even self-host the entire stack yourself or use an alternative UI on top.

Would love some feedback on the parser's robustness. Feel free to submit PRs too.
by 0xbadcafebee | 2026-03-13 12:38:44+00:00
That is the most serious thing you can do, and the most effective.

Do you know how democracy works? There are these people called representatives. They are hired by you. They pass laws. They only get to continue having a job if people like you vote for them. When you tell them "I don't like the law you are passing", they are hearing "the people who hire me are angry with me". The more people that are angry at what they're doing, the more their job is at risk.

They do what the lobbyists say because somebody else is doing the work, and they get paid (by the lobbyist). But they won't have a job to get paid for if the voters don't vote for them again. So your entire defense against tyranny and bad laws is you speaking out. If you never talk to your reps (or vote), you're telling them you don't care what kind of government it is, and they really will do whatever they want.

You have to tell them how you feel, along with all the rest of us. That's the only power we have.

In addition to that, tell everyone you know. Your friends, family, coworkers, the dude running the local gas station. Explain to them why government-mandated surveillance of everything they do on a computer is a bad idea. Ask them to talk to their reps.
by agentik-md | 2026-03-13 12:38:47+00:00
We just open-sourced twelve Markdown file specifications for AI agent safety.
KILLSWITCH.md, THROTTLE.md, ESCALATE.md, ENCRYPT.md — one file per concern, dropped in your repo root. The agent reads it on startup. Your engineer reads it in code review. Your compliance team reads it during audits.
EU AI Act enforcement starts August 2. Colorado AI Act starts June 30. The question isn't whether you need safety controls — it's where you document them.
All twelve specs, MIT licence, free to use: https://agentik.md
by kace91 | 2026-03-13 12:38:51+00:00
The same is true here, yes. You'll see widely different stances and practical approaches to topics like immigration, premarital sex, and so on. Some people are strict, some people self define as catholic but only see church during weddings and funerals.

Putting effort in triggering the end of the world is nowhere on the spectrum though. I think if you told a priest you're pushing for that he would be seriously alarmed, like calling the police alarmed if you hold power.
by sarchertech | 2026-03-13 12:39:44+00:00
>$1000

That depends very much on the computer.

https://christmas.musetechnical.com/ShowCatalogPage/1990-Sea...

Commodore 64C,1990, $159.99

My parents were working class in the 80s and we got a used Tandy that plugged into the TV and ran BASIC.
by lowenbjer | 2026-03-13 12:40:22+00:00
Ha, same. I wrote a VOD transcoding orchestrator in Elixir that triggered libav transcodes and custom packaging code in Python. Loved the syntax, and in particular the pattern matching in function headers. It was so clean for recursive branching that I ended up favoring recursion over conditionals and loops everywhere. Whether that was overuse or just good taste is subjective.
We did hit a real scaling problem with the BEAM though. Distributed Erlang uses a full mesh, every node connects to every other node. When we got close to 50 nodes the inter-node communication overhead was eating a significant chunk of our CPU. Adding more nodes started giving diminishing returns because the mesh traffic grew faster than the compute we gained. Interesting constraint that I haven't hit in any other runtime since.
by Mc_Big_G | 2026-03-13 12:40:26+00:00
I have a policy against installing extensions but I might make an exception for this one. I default to 2x and often have to go to 3x if the speaker is really slow. The one exception is music production related videos and it is sometimes excruciating to get through. This is most likely because I'm usually watching some kind of instructional or educational video and just want the content and have no interest in being "entertained". That said, I understand that you have to game YouTube's algo and rules in order to make even a tiny bit of money. Imagine if every channel cut the first 30 seconds of every video intro and everyone could just get to the point.
by its-summertime | 2026-03-13 12:40:37+00:00
Maybe a max-age field for the package manifest? For things like programs that are expected to be finished, this can be infinity, but for things that are expected to move with a complex ecosysten, could set it to 6 months? Past that point, a prompt is shown to confirm the user wants to install a likely-depreciated package? That way people won't be accidentally exposed to issues from downstream package maintainers being rendered unable to maintain their packages
by embedding-shape | 2026-03-13 12:40:43+00:00
> I wonder if they'll delete my account eventually

Just some days ago I received warning from Discord that they'll delete my account since I haven't logged in for two years.

> Your Discord account has been inactive for over 2 years, and is scheduled to be deleted on $DATE. But don’t worry! Dust off the cobwebs and prevent your account from being deleted just by logging in.
by tech_tuna | 2026-03-13 12:40:46+00:00
I have mixed feelings but echo your sentiments a bit. On the one hand, I can get a lot more done and feel "unchained" so to speak. I have long hated doing frontend development and now it doesn't matter and I love that. However, I don't feel satisfaction from solving problems the same way I used to. I had one long session with Claude a few weeks ago and I told Claude I was done for the night at which point it fired back with "Sounds good, look at how much you accomplished." and I responded with you mean "look at how much you accomplished, I just told you what to do."

It is still weird to me that I talk to a remote Python app but that's how we write code nowadays. Still, I felt almost mocked when Claude plauded my "accomplishments".

So I'd say that I am definitely more productive than I used to be but I enjoy the work less on one level. But on another level, I feel like I can build a lot more and tackle problems I wouldn't have tackled in the past. It's a mixed blessing. It's also a WIP, I expect that the way we write code will change even more, over the next few years.

I love it, I hate it, it's the Brave New World of software development.
by my123 | 2026-03-13 12:40:47+00:00
SME2 is restricted in scope to matrix multiply workloads and isn't really designed for anything else.

The point of streaming SVE is to have a way to pre/post process data on the way in or out of a matrix multiply.

A list of chips that I have around which support various levels of SVE:

For SVE(1) deployment, chips that have it:
- Fujitsu A64fx
- AWS Graviton3

SVE2:
- Snapdragon X2, 8/8 Elite Gen 5 and later
- MediaTek Dimensity 9000 and later
- NVIDIA Tegra Thor and later, NVIDIA "N1" or later (GB10 is an "N1x" SKU)
- Samsung Exynos 2200 or later
- AWS Graviton4, Microsoft Cobalt 100, Google Axion (and newer chips)
- CIX P1

SME(1) instead of SME2:

- Snapdragon X2, 8/8 Elite Gen 5

SME2:

- Apple M4, A18 and later
- Samsung Exynos 2600
- MediaTek Dimensity 9500

Note that the Snapdragon 8/8 Elite Gen 5 and X2 support sve2 but not svebitperm.
Show HN: Amux – run Claude Code agents in parallel from your phone
by Beefin | 2026-03-13 12:41:12+00:00
I built amux because I kept waking up to dead Claude Code sessions. Context would fill up at 2am, the agent would crash, and I’d lose hours of work. So I wrote a self-healing multiplexer that wraps Claude Code in tmux sessions and keeps them alive.

The core loop: amux parses ANSI-stripped tmux output to detect state — working, stuck, needs input, context running low. When context drops below 20%, it sends /compact. When the session crashes from a redacted_thinking error, it restarts and replays the last message. When a YOLO session hits a safety prompt, it auto-answers. The watchdog has kept sessions running unattended for 12+ hours.

What made it actually useful was the web dashboard. I can monitor all my agents from my phone (it’s a PWA), send them messages, check the kanban board, and peek at any terminal — all without SSH-ing into my machine.

Last night I had 8 agents working across 3 repos: one writing API endpoints, one on tests, one doing a migration, others on smaller tasks. I checked in twice from my phone, answered two prompts, and woke up to PRs ready for review.

Agents started coordinating on their own
The coordination part surprised me the most. Agents share a REST API so they can peek at each other’s output, claim tasks from a shared board (SQLite with atomic CAS), and send messages between sessions. I didn’t plan for agent-to-agent orchestration initially — I just exposed the API in their global memory and they started using it naturally.

It’s a single Python file (~23k lines, inline HTML/CSS/JS), no build step, no external services. Python 3 + tmux. Auto-generates TLS certs so phone access works over Tailscale. The server watches its own mtime and restarts on save, so you can edit it while it’s running.

What it doesn’t do: it doesn’t replace Claude Code or modify it in any way. It’s purely a wrapper — ANSI parsing, no hooks, no patches. It works with whatever Claude Code version you have.
by ferociousmadman | 2026-03-13 12:41:25+00:00
I think the more complex aspects of the job are managing dependencies/politics between different groups: sales, marketing, engineering, product etc. and trying to coordinate between them and keep things on track in that way.

But nearly all of that is done online (at least for me) since folks are in different nations and work across time zones. I guess you're right to point out that aspects are complex, assuming that people remain involved to the extent they are currently.

There's also a large portion of the work (status updates, reporting, etc.) that could be automated though in my view. For me and other PMs I know, that's like at least 40% or more of the work.
by fivetomidnight | 2026-03-13 12:41:49+00:00
No. This is not the way.

> give parents the ABILITY to advertise the users age to browsers, apps and everything in between.

Accounts and Applications to services that provide countent are set to a country-specific age rating restrictions (PG, 12+, 18+, whatever). That's it.

None of the things you mentioned have any point to concern themself with the age or age-bracket of the user in front of the device. This can and will be abused. This is very obvious. Think about it.
by iso1631 | 2026-03-13 12:42:14+00:00
Yes there is, you have the device the software is on do the translation transparently. The software thinks its talking to 1.2.3.4, it's actually talking to ::ffff:1.2.3.4, but the application doesn't need to know that as the translation is occuring in the network stack (driver, module, whatever).

> There are lots of places that have IPv6-only networks and access IPv4 through NAT64

I've just deployed a new mostly internal network, and this was my plan.

The network itself worked, but the applications wouldn't. Most required applications could cope, but not all, meaning I need to deploy ipv4, meaning that there's no point in deploying ipv6 as well as ipv4, just increases the maintenance and security for no business benefits.
by MattPalmer1086 | 2026-03-13 12:42:22+00:00
Because it is directly analogous. Neural nets (whether biological or artificial) are not the best way to execute lots of deterministic computations quickly and reliably. That's why we invented computers.

I'm not convinced at all that this is the best way to reduce latency; there are many other ways of doing that.

Having a calculator in our brains would be handy of course, but a gigahertz multi core computer is still going to be better at anything that needs to do a lot of computation and or a lot of data.
by embedding-shape | 2026-03-13 12:42:33+00:00
> Besides you'd leak the subdomain to (typically) unencrypted DNS when you do a lookup and maybe via SNI.

"Leak" is maybe a bit over-exaggerated, although if someone MitM'd you they definitely be able to see it. But "leak" makes it seem like it's broadcasted somehow, which obviously it isn't.
by dozercat | 2026-03-13 12:42:42+00:00
I wrote a follow-up to my earlier “Codex skills as RE playbooks” post. This time I ran the same two RE skills across OpenAI Codex vs Claude Code with a static-first workflow and explicit execution gates.

Main takeaways:
Codex felt more autonomous for driving the workflow and producing strict artifacts.
Claude produced a stronger “analyst report” output (clearer narrative, gaps, and next steps).
by HocusLocus | 2026-03-13 12:43:09+00:00
I tend to give the lack of credible ready to deploy asteroid response for Earth defense 41 years after consensus was reached on the KT boundary, 70 years since the 'space age' began, much greater weight.

Motivation for retiring IPv4 completely would NOT be to make the world a better more route-able place. It would be to deliberately obsolescence old products to sell new.
by lionkor | 2026-03-13 12:43:29+00:00
> Putin has stated his intention to "recapture" most of the former USSR.

I keep hearing this but I struggle to find any sources, beyond articles like [1] which are... not particularly good sources, even a reddit comment would be a better primary source than that.

I'm not trying to be combative, I just genuinely struggle to find primary sources, probably because I'm using the wrong keywords or something.

I understand the reasoning, but I would love to actually see/read/hear/whatever where Putin "states" this desire explicitly!

[1] https://gppreview.com/2015/02/12/putins-dream-reborn-ussr-un...
by raw_anon_1111 | 2026-03-13 12:43:48+00:00
Honest opinion? I’m a tech lead in consulting and have been in product companies. Project managers are completely useless except to shield me from the “make work” that the PMO organization mandates.

1. I do all of the discovery because I’m the person with the technical background to do it.

2. I do all of the Epic/workstream, story, tasks, dependency breakdowns because again I’m the person with the technical know how to do it

What does the project manager do? They take the transcripts of the sprint review sessions I lead, have AI summarize it and put that in their status updates.
by simoncion | 2026-03-13 12:44:16+00:00
> Very few, in my prediction.

Sure, I agree. I'm not sure how you got the notion that I thought a large percentage of systems out there will never get IPv6 support. There's a lot of solid systems out there that just fucking run. They're a small percentage of all of the deployed machines in the world.

> That's still what I would call a v6-only (with translation mechanisms) client deployment.

When people say "IPv6 only", they mean "Cannot connect to IPv4 systems". IMO, claiming it means anything else is watering down the definition into meaninglessness. Consider it in the context of what someone means when they envision a future where the Internet is "IPv6 only", so we don't need to deal with the "trouble" and "headache" of running both v4 and v6.

> We're already seeing massive v6 + CG-NAT-only deployments these days...

Yeah, it's my understanding that that's been the situation for a great many folks in the Asia/Pacific part of the world for a while now. Lots and lots of hosts, but not much IPv4 space allocated.
by latexr | 2026-03-13 12:44:34+00:00
Then add “earthquake” to the list, or “domestic terrorists or foreign country bombing the building”. Steelman the argument. The point isn’t “just fire and water specifically”, we’re not playing Pokémon.

We have several historic examples of records being lost in disasters, and way more recent than 100 years ago.

https://en.wikipedia.org/wiki/National_Personnel_Records_Cen...

It makes no difference that we could’ve prevented that with better building construction. We didn’t, and hindsight does not bring the records back. We should plan for the world we want but cannot ignore the world we have.

I’m not defending digital as always better or criticising physical. Like I said, different tradeoffs, meaning there are advantages and disadvantages to both, there’s no solution which is better in all situations.
Ask HN: How do you automate the anxiety after a deploy
by Lazy_Player82 | 2026-03-13 12:44:36+00:00
Hi HN,

Even with a decent CI/CD pipeline, I still find that the first 10-15 min after a production deploy are strangely manual.

the build passed, the deploy succeded, but there is still a gap where i don't really know yet whether the change is actually behaving correctly in prod.

MOST OF THE TIME THIS TUNRS INTO SOME COMBINATIION OF:

- watching dashboard

- checking recent error logs

- waiting to see if alerts fire

- deciding whether to leave it alone or investigate further

I'm curious how other teams handlet this moment.

Do you mostly rely on manual observation here, or do you have some lightweight way to verify production behavior right after deploy?

I'm interested in workflows that don't require a heavy observability stack.
by idontwantthis | 2026-03-13 12:44:57+00:00
To me, that sounds like you can more efficiently do the boring parts and focus on the complex parts.

I don't see AI on track to manage politics in any way shape or form. It is far too easily manipulated.

Do you have this fear because of actual things you observe at your job, or because of online discourse? I read about this attitude online all the time, but it doesn't make any sense to me personally.
by kate23_human | 2026-03-13 12:45:09+00:00
Docker isolation is a good baseline, but the tricky part is usually the boundary between “safe filesystem access” and tools that can indirectly access secrets (git configs, environment variables, credential helpers, etc).

Even read-only access to a repo can leak quite a bit depending on what’s in the workspace. I’ve seen some teams run tools inside containers but mount a filtered workspace rather than the full project directory to reduce exposure.
by iso1631 | 2026-03-13 12:45:23+00:00
And if that's applies across the board, in 20 years time that might have filtered through to mean ipv4 can be dropped in my company.

I'd rather see this at a lower level than network manager and bodging in with bpf, so it's just a default part of any device running a linux network stack, but I don't know enough about kernel development and choices to know how possible that is in practice.

This should have been supported in the kernel 25 years ago though if the goal was to help ipv6 migration