MurphyA/hacker-news huggingface dataset:
by erikkaum | 2026-03-13 15:14:42+00:00
I've been interested in ZML for a long time: how does it work, what makes it good? To understand the stack properly, so I built a minimal version of ZML in Rust. And wrote a blog about it. It's essentially a trace-based tensor compiler for Rust. Build computation graphs with a familiar tensor API, lower them to StableHLO MLIR, and execute through PJRT on CPU.

It even runs SmolLM2 on CPU, 5 tok/s.
by sunaookami | 2026-03-13 15:15:52+00:00
Way to read something into what I have never even wrote and try to spin it as something ideological. This is not "AI-assisted", it's completely vibe-coded by AI and the software doesn't even make sense since you can't export anything. It's just low-quality trash dumped on Hacker News and I'd argue this is not the place for it.
by shadowgovt | 2026-03-13 15:16:46+00:00
You have made some fascinating assumptions about the person you are addressing. I recommend refraining from that in the future and instead asking why a fellow American takes a position other than the one you hold.

Two guys built a website to try and help people curb their undesired sexual proclivities and because they were bad at security, their users' personal information (including their own logs of their sexual proclivities) is leaked. They will see no consequences other than "oops, oh well, I guess we're going to shut down our website now and, probably, build another one."

Why is that okay? We've de-facto operated as if it os okay for decades under a notion of "user beware," but that notion is increasingly incompatible with the goals of treating Internet access as a human right because if you let everyone on, you are definitely letting people on who lack the capacity, knowledge, or savvy to beware. And we lack a framework for holding "two guys who just told the world how often you jack off" accountable for their violation of confidentiality.

Individual users become nodes in botnets. Individual users have their identities compromised. Individual users are talked into being kidnapped by anonymous victimizers. Individual users are, increasingly, everyone's concern the moment they connect to a shared network. And, perhaps most significantly to this topic: the Internet does not distinguish between two guys building a hobby app and a professional service.

This specific notion, age-gating access, may not be the right step. But we should be a lot more serious about taking more than zero steps. The time of effing around and pretending there are no consequences to these technologies is over.
Show HN: UberSKILLS – Open-source Workbench for building AI agent SKILLS
by felltrifortence | 2026-03-13 15:16:46+00:00
Agent Skills (SKILL.md files) are reusable instruction sets that teach code agents like Claude Code, GitHub Copilot, Cursor, and Windsurf how to perform specific tasks. Right now, creating them is entirely manual - you hand-write YAML frontmatter and markdown, with no way to preview, validate, or test before deploying.

uberSKILLS is an open-source web app that gives you an integrated authoring environment for Agent Skills:

- AI-assisted creation - describe what you want in plain English, get a complete SKILL.md draft
- Structured editor - edit metadata, instructions, and file templates with real-time validation
- Multi-model testing - test your skill against any model on OpenRouter (Claude, GPT-4, Gemini, Llama, etc.) with streaming responses and token metrics
- One-click deploy - deploy to 8 agents: Antigravity, Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot, OpenCode, and Windsurf
- Import/export - bulk-import existing skills from directories or zips, export as zip
- Version history - every edit is versioned automatically

Get started with a single command, no setup required:

npx @uberskillsdev/uberskills

Tech stack: Next.js 15, TypeScript, SQLite + Drizzle ORM, Vercel AI SDK, shadcn/ui, Tailwind CSS v4. Everything runs locally your data stays on your machine, API keys are encrypted with AES-256-GCM, and there's no account or cloud dependency.

MIT licensed. Would love feedback on the editor UX and which agent integrations matter most to you.
by _ananos_ | 2026-03-13 15:16:51+00:00
the simplest one (and the one we're targetting) is multi-tenant services. You want to sandbox your service so that it doesn't affect the rest of the services running.

<shameless plug> We're building a container runtime to do this, and we are comparing alternatives, that's how we got there: https://github.com/urunc-dev/urunc</shameless plug>
by 7bit | 2026-03-13 15:16:52+00:00
> If you are found personally responsible for tax evasion >1e6€ then the minimal penalty is prison sentence without parole option. This is true for many EU countries including Italy. Idk. about the max. prison length in Italy for this but e.g. where I live in the EU you are likely looking at ~15 years for 1e9€ tax evasion.

There's o EU wide tax law, so that statement is misleading at best and there's many places where that's false. You're spreading misinformation.

> The reason executives commonly avoid such penalties is because they avoid being found personally liable by claiming they didn't known, did misunderstood the situation, where deceived by others etc.

Misinformation again. This blanket statement in just false. Again, because there is no EU-wide law. It's up to the countries and they handle it very differently.
by miki123211 | 2026-03-13 15:17:16+00:00
The US has no single national photo + chip ID card that is available to everybody, for free, including illegal and semi-illegal immigrants and homeless people with no access to their birth certificate and such.

It's completely crazy to me that you can be "out of status" with the USCIS and still get a social security card and a bank account, for example.
Show HN: Mesa – A collaborative canvas IDE built for agent-first development
by visekr | 2026-03-13 15:17:27+00:00
Hi HN - I'm Ryan a product designer who codes, and I built Mesa. Current IDEs feel wrong for the type of development being done now - the focus is still on files.

Mesa puts the focus on the full workflow: your agent, terminal, browser, and files all live as equal nodes on a canvas with full multiplayer support. (think figma but for code)

I was tired of the overhead of switching windows, tabs, and terminals across multiple projects. Inspired by TouchDesigner and Factorio, I wanted something more fluid and visual. Been using it as a total replacement for Cursor at work every day now. Being able to see multiple repos at once and control agents on each without navigating windows has freed up my headspace and increased productivity.

It's free to try — would love to know what you think!
by tokai | 2026-03-13 15:17:47+00:00
Here[0] you have it directly from Putin; Ukraine is not a real country and Ukrainian is a fake ethnicity and they are actually Russian.

You have to remember how political communication works in Russia. They rarely state goals outright, and always juggle several narratives at the same time. To make it hard to pin them down to any position and achieve exactly what is happening here.

[0] https://en.wikisource.org/wiki/On_the_Historical_Unity_of_Ru...
by OrderlyTiamat | 2026-03-13 15:17:59+00:00
This feels like it's conflating a couple of different things.

Firstly, in the Big five model, which you seem to be referencing, openness and neuroticism are separate factors- Low neuroticism isn't correlated with high openness. Yes, since neuroticism is a negative trait, one would expect people low in neuroticism to do better than people who are high in neuroticism. This does not equate to "the most creative people" though.

Secondly, I'd push back that people low in neuroticism would be "least concerned by" surveillance. While strictly technically true, that's not a helpful framing, as it seemingly implies surveillance would have a negligible negative impact for people low in neuroticism. If that's what you're implying, I'd like to see references.

I'm not able to comment at all on the conclusing about "degree of disclosure" being moderated by trust level in social environment, especially how "creative people remain equally creative but do not openly expose their creative output". If true, this implies that trust in society doesn't impact primary (unshared) creative output at all- that's a very strong claim in my opinion. I'd very much like references on this.
by keybored | 2026-03-13 15:18:01+00:00
> Your responses seem politically charged

We are talking about China and the US.

> and not in good faith.

I am playing with open cards. No hidden agendas.

> You've failed to actually engage with what the person you're responding to wrote several times now.

We disagree on the very premises. That leads to one person saying something then the other one dismissing it then the first person dismissing what the second person says in turn. Completely normal.

> What is your goal here?

To bemoan people glorifying America as it invades countries and causes problems for the whole world.
by stevetron | 2026-03-13 15:18:06+00:00
Here's a memory: My old Fido-net system, running on a 386, with a single phone line. Connected to a Microcom 34Kbaud modem.

Everything is chugging on, and connects to another system further up the chain at 2 am for network traffic. Except he's on a new phone number, on a new exchange in the state. A 914 exchange. Only the phone company's updates haven't reached all of the telephone switching centers in the sate. Somehow, it was re-routed to 911 services, and I had the police and fire department at the front door responding to a 'silent call'. They went away unhappy. I wasn't very happy either.
by _wire_ | 2026-03-13 15:19:07+00:00
This article is miraculous for willingness to utterly damn AI agent technology as a bragging point for slavish obsession with it!

The opening:

> The agent works, sort of. It does things. But three months in, it’s making the same categories of mistakes it made on day one. The tool doesn’t improve. It just runs.

But there is a solution...

Dr. Thoughts' patent cure and tonic can relieve your agent's symptoms!

Step right up!

With Dr. Thoughts' tonic, all you have to do is continuously monitor and study the infinite ways an agent can go wrong and upload corrections.

Dr. Thoughts' patented architecture of Observation, Learning, and Context, including python pipeline and non-negotiable meta-systems monitoring, will focus your ADHD into eternal vigilance over your agents constant recurring errors.

Now, let's be totally honest, lots of tonics include python pipelines and feedback. But you've no doubt noticed that something is missing.

• Does your agent lack a personality? • Does it need an identity? • Is it lacking personal context? • Do you wish your agents really knew you?

What sets Dr. Thoughts' tonic apart is a special secret ingredient that no maker of tonics could ever know. You!

Just build an ever-expanding profile of yourself at the level of intimate details only a wife would know and continuously re-upload it into all your agents.

Voila!

You will be not just surprised but amazed by the results of sharing an ever growing database of privileged information about yourself with companies determined to exploit and manipulate every aspect of your life and society for fun and profit.

At this point you're probably thinking "This sounds good but how much does this miracle cure cost?" Now you can use Dr. Thoughts' patent cure and tonic just once to see the benefits. But for maximum effect, Dr. Thoughts' tonic must be taken daily. And with an installment plan, the token costs of providing all your personal information to an alien corporate intelligence bent on controlling the world can be remarkably affordable!

Get started today and ride the AI wave of the future: patent cures and tonics!

(Warning! Tonic consumption can damage internal organs and compromise your social credit score. Only take tonic under the guidance of a licensed Dr. Thought' tonic representative)
by apothegm | 2026-03-13 15:19:23+00:00
Hand recounts are almost never performed. So tampering with tabulation machines could easily sway an election.

I’m the last person to believe the Jan 6 conspiracy theory (I’m more inclined to think the accusations of fraud were a pre-emptive strike to discredit anyone challenging the next election). But there is absolutely positively incentive for both domestic and foreign interests to interfere with the machines.
by quesera | 2026-03-13 15:20:08+00:00
Sorry, I was imprecise.

The EU can theoretically sanction entities with establishment inside the EU, for actions outside the EU. I'm not sure if GDPR allows this, but (as a terrible example), I've read of laws to punish foreign travel for underage sex tourism. However entities with no such establishment cannot be punished judicially by the EU because there is no mechanism.

The EU could block network traffic to an offending extraterritorial entity, which might cause them to suffer losses (e.g. advertising volume if nothing else), but the EU cannot fine or arrest the entity or its officers as punishment.

I think we largely agree at the root of things. There's some imprecision in language around words like "apply" and "relevant".

I have only dug this deeply on GDPR because we, as a corporation, want to comply with the most consumer-friendly policies that we are able to. Obligations (e.g. CCPA because we are in the US) are table stakes, but we aim for more. Our lawyers tell me to stop worrying about the GDPR at all, and I am confident that they are correct legally (and financially), but as we all know it is more efficient to design systems that do things properly at the outset (or at least under minimal time pressure), instead of urgently retrofitting later.
by BloodAndCode | 2026-03-13 15:20:17+00:00
ah, that clarifies it — i initially thought it was more of a pipeline/orchestration tool.
the commit → push → wait → read logs loop in CI is painfully familiar. debugging github actions especially can feel very “remote”, since the environment only exists during the run.
being able to step through the actual workflow locally in the same container sounds like a much tighter feedback loop.

also really like the decision to reuse the existing workflow yaml instead of introducing another DSL. tools in this space often end up adding a second configuration layer that you have to keep in sync with the real pipeline.
by airstrike | 2026-03-13 15:20:44+00:00
It's not my point, it's the guidelines. Though I understand why you prefer your title, that is subjective. I personally prefer the original. So the only objective approach is to stick to the original.

I think in this case I might have kept the original and then appended some additional short sentence like "Executing programs inside transformers." That might even be a better title, but at least it's pulled from the subtitle instead of being created by you.

Your "allegedly" is totally opinionated so it really flies in the face of the "do not editorialize" rule.
by embedding-shape | 2026-03-13 15:20:52+00:00
How is one person's art not just incremental improvement on other's art? I expected some actually insightful answer, not just "Person Bs media creation was better than Person's A media", does that really count as "truly original" in your mind here? Yet browsers/WWW was just an incremental improvement? I'm sorry but I'm really confused now, sounds like we're really talking past each other here.
by john01dav | 2026-03-13 15:20:59+00:00
There is a lot of merit to this view, but there is also a major problem: rules like this make it substantially harder to start a new business due to increasing overhead and complexity, which is bad for everyone long term. Such comparatively more complex and burdensome regulation is why so many (but not all) startups go to America or Israel instead of Europe.

To address this I prefer ultra low friction and ultra low cost regulations over complex and performative schemes. For example, GDPR requires the appointment of a "data protection officer" in some cases, which is mostly just an extra fee for small companies. Instead, it should only regulate the rights (such as to be forgotton, etc.). Appointing such an officer is mostly performative.
by cortesoft | 2026-03-13 15:21:21+00:00
The problem is the legal liability is also asymmetrical. If the person making the bogus legal claims with the LLM messes up, the claim will just be dismissed and it isn't a big deal for the person making the claim. If the reading LLM messes up and classifies a real claim with the bogus ones, the company could have a major problem.
by troyvit | 2026-03-13 15:21:57+00:00
As the article says, it's not about just checking a box:

"Every OS provider must then: provide an interface at account setup collecting a birth date or age, and expose a real-time API that broadcasts the user's age bracket (under 13, 13 to 15, 16 to 17, 18+) to any application running on the system."
by embedding-shape | 2026-03-13 15:22:08+00:00
> I think you are hung up on the word "leak".

What gave you that idea? Maybe because my initial comment started with:

> "Leak" is maybe a bit over-exaggerated...

And continues with about why I think so?

I raised this sub-thread specifically because I got hung up on "leak", that's entire point of the conversation in my mind.
by GuinansEyebrows | 2026-03-13 15:22:46+00:00
i've made my entire career digging deep into linux - i've been what some people would call a "power user" for about 25 years, and a professional for 15. i spent over a decade distrohopping, tweaking, tinkering and customizing every distro from Corel to Mandrake to Mandriva to Debian to Slackware to Ubuntu to Gentoo to Arch to Void, and everything in between, plus the BSDs. i've been a sysadmin, network admin, devops engineer, yadda yadda yadda.

i have never once successfully installed fedora. probably just hardware stuff, but as often as i've wanted to try it and opensuse, they have never booted post-install for me. on machines i've successfully installed Debian and openBSD. go figure. i know i'm an outlier here. maybe it's just bad luck.

but reading your post, it sounds like a club i don't want to be a part of. linux is linux. distros don't matter. you can get nearly anything to work if you spend enough time on it. GUI OS installers that fail are not worth my time.
by Lliora | 2026-03-13 15:22:52+00:00
Ran gVisor on a Pi 4 cluster for home IoT sandboxing. Memory overhead is real—about 120MB per sandbox vs 15MB for raw containers. On 4GB boards that limits you to ~25 isolated services before OOM kicks in. Also, syscall拦截 adds 30-40% CPU overhead on ARM. Works fine for untrusted Python scripts, but I wouldn’t run anything compute-heavy.
by a24venka | 2026-03-13 15:22:54+00:00
Thanks! Great question. We see canvases as living workspaces, you can revisit, iterate on, and build on them over time.

But the deliverables (docs, slides, code) are first-class outputs you can export and use independently. So it works both ways depending on the workflow.

Kavla looks cool, canvas-based SQL is a great use case for this kind of thinking!
by rayiner | 2026-03-13 15:23:06+00:00
Trump lost white vote share from 2020 to 2024. His entire change in margin came from non-whites: https://data.blueroseresearch.org/hubfs/2024%20Blue%20Rose%2.... See page 4.

That’s frankly remarkable given that people say things like “white fragility” openly. I can’t fathom why white people would want to belong to a party that normalizes that.
by 9rx | 2026-03-13 15:23:14+00:00
It would be helpful for you to share a link to the Github issue you created. If the TLA+ spec you no doubt put a lot of time into creating is contained there, that would be additionally amazing, but more relevant will be the responses from the maintainers so that we're not stuck with one side of the story.

Of course, expecting you to provide the link would be incredibly onerous. We can look it up ourselves just as easy as you can. Well, in theory we can. The only trouble is that I cannot find the issue you are talking about. I cannot find any issues in the Go issue tracker from your account.

So, in the interest of good faith, perhaps you can help us out this one time and point us in the right direction?
by duskdozer | 2026-03-13 15:23:41+00:00
No, LLMs often have an identifiable style that can be unpleasant to read. I came here after identifying your account as a bot, but it looks like that's not true. I would rather read whatever English you are able to write. If it's not enough for you to communicate, it would be better to just use a traditional machine translator, such as https://libretranslate.com/
by everdrive | 2026-03-13 15:23:46+00:00
There's a general trend right now against privacy and in a more general sense against freedom. More and more companies are on board with it. I'm not sure if anyone in HN has any useful advice in this regard. I feel like I don't know what to do about the internet for the next 5-10 years. Does this particular measure matter very much? No, but it's another brick in the wall.
by joe_mamba | 2026-03-13 15:24:02+00:00
Man, I do wonder what the realistic lifespan of that single NAND chip will be after it gets hammered by constant swapping of running tasks way beyond the capabilities of a 8GB RAM machine.

I have a PC with a 10+ year old 256GB SATA Samsung SSD that's still in top shape, but that's different because that drive has those 256GB split over several NAND chips inside, so wear is spread out and shuffled around by the controller to extend lifespan. But when your entire wearable storage is a single soldered chip, I'm not very optimistic about long term reliability.
by famouswaffles | 2026-03-13 15:24:09+00:00
I don't care how sure you are. Honestly, it's irrelevant. 99% of the time, it's a more pleasant and productive conversation for everyone involved if you just focus on issues you had with the text itself than any nebulous AI involvement.

From my point of view, all you've done is said a lot of nonsense and fabricated a convoluted explanation for why you think the text is bad. I'm fine on my horse thanks.
by strickjb9 | 2026-03-13 15:24:55+00:00
The non-answer is anything you want.

For me, it's my diet and workout buddy. It knows my goals, keeps me on track, does meal planning for me, gives me grocery lists, logs what I eat, when I exercise... anything I want so I don't slack off.

I've enhanced Nanoclaw quite a bit. Moved it to Apple containers (shipped with this Skill already). Then I wrote an API for Nanoclaw to use (food log, workouts, etc), then implemented long-term memory using LanceDB (because I was tired of repeating myself!).
by Bender | 2026-03-13 15:25:00+00:00
Never rely on a platform used by the masses to perform E2EE. It is far too easy to strip away E2EE for targeted users without their knowledge as they maintain the server and client code. This advise is to protect from corporations gobbling up and ultimately leaking sensitive data. Spooks can target the device itself via debug access for nation state level threats.

Consider instead using a code word or phrase to move sensitive conversations to something self hosted such as jabber using OMEMO XEP-0384 and XEP-0373 OpenPGP for XMPP and SASL SCRAM. OMEMO is an implementation of the Signal protocol on top of the XMPP protocol.

e.g. "_Expletive_! I stubbed my toe!" other-person: "lol geezer watch where you are walking." conversation quietly and temporarily moves to the pre-shared self-hosted Jabber server. Temporarily because going dark can draw attention. Feed the big chat platform boring garbage and misdirection.
by airstrike | 2026-03-13 15:25:07+00:00
Congrats on the launch! Meta comment, but I just ain't reading all of the above. You need to be able to explain this in about 20% the number of words or you'll lose people, especially VC.

My advice is to start with "Spine Swarm solves _____" then how, then why you're different. 3 short paragraphs, preferably 1-2 sentences each.