MurphyA/hacker-news huggingface dataset:
by systima | 2026-03-03 21:47:44+00:00
Thanks for the thoughts and feedback.

Fair point on the reconstruction attack.

The library is deliberately scoped as tamper-evident, not tamper-proof; it detects modification but does not prevent wholesale chain reconstruction by someone with storage access. The design assumes defence-in-depth: S3 Object Lock (Compliance mode) at the infrastructure layer, hash chain verification at the application layer.

External timestamping (OpenTimestamps, RFC 3161) would definitely add independent temporal anchoring and is worth considering as an optional feature. From what I can see, Article 12 does not currently prescribe specific cryptographic mechanisms (but of course the assurance level would increase with it).

On the regulatory question: Article 12 requires "automatic recording" that enables monitoring and reconstruction and current regulatory guidance does not require tamper-proof storage (only trustworthy, auditable records). The hash chain plus immutable storage is designed to meet that bar, but what you raise here is good and thoughtful.
by DNewecki | 2026-03-03 21:48:12+00:00
Update: closed the audit→fix loop today.

CORE now prints the exact context build command for every audit violation:

core-admin context build \
--file src/will/agents/coder_agent.py \
--task code_modification \
--output var/context_for_claude.md

Run audit → get 65 actionable commands → paste output to Claude → fix.
Zero manual translation between "what's broken" and "what to show the AI."

The system also audited the files we wrote today and flagged its own modularity debt. Law outranks intelligence, including ours.
by chasil | 2026-03-03 21:48:24+00:00
I upvoted you, and yes, cleartext NFS is a concern.

I had it wrapped in stunnel TLS, but I ripped that out recently as I am retiring and the new staff is simply not capable of maintaining that configuration.

My users were yelling, and the patch to tinysshd to omit all permissions checks silenced the complaints. No, it's not pretty.
by Terr_ | 2026-03-03 21:48:40+00:00
Yep, recycling a post about reasons to do it that way:

> 1. Most of the dollar costs of making it all happen will be paid by the people who actually need/use the feature.

> 2. No toxic Orwellian panopticon.

> 3. Key enforcement falls into a realm non-technical parents can actually observe and act upon: What device is little Timmy holding?

> 4. Every site in the world will not need a monthly update to handle Elbonia's rite of manhood on the 17th lunar year to make it permitted to see bare ankles. Instead, parents of that region/religion can download their own damn plugin.
by underdeserver | 2026-03-03 21:49:02+00:00
> Qatar, Kuwait, UAE, Bahrain is asking questions, if US can't defend us and is moving all defensive missiles to protect Israel, why should we even be ally with them

Where are you getting this information? The UAE, for instance, is relying heavily on missile defense - and it's working out for them:

https://gulfnews.com/uae/uae-intercepts-186-ballistic-missil...

It's all US technology, too:

https://www.wired.me/story/inside-the-system-that-intercepte...
by filoleg | 2026-03-03 21:49:32+00:00
> Try taking a photo of somebody with your phone. Usage will definitely look like you are snapping a picture, nobody walks around with phones straight up.

I urge you to visit any big city and see for yourself how wrong you are. I see it at least every time every day just during my barely 20-25min subway commute to work.

And that's the most unremarkable the most uninteresting place and scenario here. Any big park, any even remotely touristy location, any public square, any concert/sports venue, and even an overwhelmingly large proportion of restaurants are like that.
by grbtm | 2026-03-03 21:49:49+00:00
SEEKING FREELANCE | Remote | UTC-4

Location: Canada (Atlantic Time, UTC-4) | EU-based business (Germany)
Remote: Yes (remote only)
Willing to relocate: No
Technologies: Python, Rust, SQL, Spark, Polars, Terraform, Pulumi, Prefect, Airflow, Docker, Kafka, FastAPI, PyTorch, LangChain, MLflow, Azure, GCP, Databricks
Résumé/CV: http://linkedin.com/in/tomislav-grbe%C5%A1i%C4%87-388442328/
Email: in profile

Freelance data & AI engineer with 9+ years of experience. I've worked with early-stage startups and established manufacturers across Germany, Switzerland, the US, and Canada. I design and build data platforms, ML/AI systems, and the infrastructure around them - end to end.

Most recently, I worked with a NYC startup on system design for their data architecture, built production data pipelines in Rust, set up cloud infrastructure with Pulumi, and implemented idempotent automated workflows with Prefect. Before that, I led the implementation of an Azure Databricks lakehouse for a Swiss-German manufacturer, including data governance, CI/CD pipelines, and LLM-powered analytics interfaces.

What I can help with:

- Data platform architecture and pipeline development
- ML/AI systems: RAG, agents, fine-tuning, evaluation pipelines
- Cloud infrastructure and orchestration (Azure, GCP)
- Proof-of-concepts and MVPs — I favor iterative approaches, starting focused and building from there

Client references available upon request.

If you have a data, AI, or infrastructure project in mind or just want to explore possibilities - feel free to reach out. I'd be happy to have a chat!
by zzleeper | 2026-03-03 21:50:31+00:00
If you are in early career (i.e. graduated your PhD within the last 5 years) you are extremely unlikely to get the gifted people visa. The standard approach is to just get the H1B (not the lottery stuff for tech companies but the non-lottery one for hiring faculty at universities). Ask any foreign MIT professor hired early in his career and they went through H1B (and later on, they are more reluctant to move into a place like Florida..)
by AnimalMuppet | 2026-03-03 21:50:33+00:00
There used to be a page on arcade.stanford.edu that was a takedown of Girard. It seems to have disappeared, or I would point you to it.

Girard writes beautifully. The problem is with his evidence. He says things like Jesus being an instance of the scapegoat, which is true, but he also says that the disciples were in on it. Never mind that the gospels say that they didn't understand until after Jesus rose from the dead; Girard says that those who are scapegoating someone won't say that that's what they're doing. And viola, evidence against Girard's position magically becomes evidence for it.

Same with Oedipus, and literally dozens of other examples that the article gave that I don't remember what they are. It goes on and on and on, giving examples where Girard's "evidence" does not say what he says it says.

So if you actually read Girard, look carefully at his examples. Don't get carried away by the beautiful writing; think about what the example says and what Girard says it says.

[Edit: Found a link. https://shc.stanford.edu/arcade/publications/rofl/issues/vol...

It's worth a read.]
by collinmcnulty | 2026-03-03 21:51:47+00:00
This is not exactly true on the scale of these interventions. The state can't run out of money but it does run out of the time and talent of its people, the resources of its land, and the patience of its partners. State capacity is a real limit, and where we direct the money is a pretty strong proxy for where we spend these, the true resources of the state. We don't pay for bombs with dollars, we pay for them with schools, roads, and hospitals.
by Figs | 2026-03-03 21:52:14+00:00
> $120K isn't going to cover the fully loaded costs of an SRE who can set up and run that.

> Hiring 1 person to run the infrastructure means that 1 person is on-call 24/7 forever.

> If there's an issue with the server while they're sick or on vacation, you just stop and wait.

Very much depends on what you're doing, of course, but "you just stop and wait" for sickness/vacation sometimes is actually good enough uptime -- especially if it keeps costs down. I've had that role before... That said, it's usually better to have two or three people who know the systems though (even if they're not full time dedicated to them) to reduce the bus factor.
by lukan | 2026-03-03 21:52:43+00:00
"The primary threat to Gaddafi over time was internal, nukes would not have protected him. What was he going to do, nuke his own territory? The same was true for Assad."

Have you checked, how many outside interventions both countries had and still have?

Labelling this as "internal" is pretty missleading. If both dictators would have had nuclear weapons ready to launch, no foreign bomber would have dared going in against the regime.
by mananaysiempre | 2026-03-03 21:52:47+00:00
Recent years have shown this to be the wrong prediction strategy. The reason seems to be an incentive imbalance where there are quite a few reasons for companies to lie (including their own CLAs) and not a lot of repercussions for doing so (everybody competes on lock-in, not on product). Of course, the word-of-mouth approach is also exploitable by dishonest actors, but thus far there doesn’t look to be a lot of exploitation going on, likely because there’s little reason to bother (once again, lock-in is king).
by IshKebab | 2026-03-03 21:52:54+00:00
I think that's less likely than you'd expect because the memory ordering model used by C++ and others essentially requires you to write code that works even without x86's total storage order. If you don't then you can get bugs even on x86, because the compiler will violate the ordering you thought you had in your program, even if the CPU doesn't.

Also most software runs on ARM now and I don't think that has actually happened in practice.
by Enk1du | 2026-03-03 21:53:51+00:00
I tried to remember the study that put the usefulness of a CEO at 10% of the success of the company and found this Science Direct paper from 2023 on "The CEO effect and performance variation over time" which discusses many studies. tl;dr average is 15-20% but they have fun chewing over the outliers.

https://www.sciencedirect.com/science/article/pii/S104898432...
by aerodexis | 2026-03-03 21:54:17+00:00
Agree wholeheartedly - but the conversation around what these technologies /mean/ is gonna end up happening one way or another - even if it is sloppy, imprecise and done by proxy of the definition. If anything, this is a feature and not a bug. It's through this imprecision that the actually important questions of morality and ethics can leak into discussions that are often structured by their participants to obscure the ethical and moral implications of what is being discussed.
by user5994461 | 2026-03-03 21:54:31+00:00
That's the one. Funny thing, it's not actually clickbait.

The bug made it to the kernel mailing list where some Intel people looked into it and confirmed there is a bug. There is a problem where is the kernel allocation logic was capped to 8 cores, which leaves a few percent of performance off the table as the number of cores increase and the allocation is less and less optimal.

It's classic tragedy of the commons. CPU have got so complicated, there may only be a handful of people in the world who could work and comprehend a bug like this.
by xGoivo | 2026-03-03 21:54:33+00:00
Hey everyone!

I've been playing with my nvim config lately, trying to find ways to cut down on the number of installed external plugins. There was a dark time when I had over 50 installed plugins in my config.

Thankfully, I was able to cut this number down to just ~20 plugins, and I wrote about some tips I found out in this process! If have more hidden nvim tips, please do let me know in the comments!
by ofu997hn | 2026-03-03 21:54:45+00:00
Location: Portland, OR, USA
Remote: Yes
Willing to relocate: Yes
Technologies: JavaScript, C#, SQL, HTML, CSS, React,
GraphQL, .NET, Node, Git, MongoDB, MS SQL
Résumé/CV: see linkedin.com/in/oliverfu
Email: ofu997@gmail.com

I'm a .NET web developer with 4 YOE and I'm eager to level up in my next role. I build user interfaces and wrangle business logic, queries, and APIs with JavaScript, C#, and SQL. I'm familiar with MVC frameworks, object-oriented programming, and web app architecture. As a passionate and curious developer, I like to mingle with all aspects of stacks. Prefer remote but willing to relocate. Ideally, a role that supports learning, growth, and scaling up.
by vessenes | 2026-03-03 21:54:51+00:00
Detailed story, very helpful. You nerd baited me, so I went ahead and read 17 U.S.C. § 512(f).

(f) Misrepresentations.—Any person who knowingly materially misrepresents under this section—
(1) that material or activity is infringing, or
(2) that material or activity was removed or disabled by mistake or misidentification,
shall be liable for any damages, including costs and attorneys’ fees, incurred by the alleged infringer, by any copyright owner or copyright owner’s authorized licensee, or by a service provider, who is injured by such misrepresentation, as the result of the service provider relying upon such misrepresentation in removing or disabling access to the material or activity claimed to be infringing, or in replacing the removed material or ceasing to disable access to it.

Like it or not, the US has an adversarial legal system -- and therefore relies on the injured to enforce their rights in court. It seems to me the way to stop this from happening is to sue the takedown provider and the Graceware guy. Damages are hard to prove for a museum, but attorney's fees are clearly covered.

Generally automated take down services are not my favorite business - the DMCA has strong penalties for infringement baked in, and one reason those penalties exist is that there is a strong enforcement clause that the takedown notices are made in good faith. There is no way these were made in good faith based on the facts described.
by cedws | 2026-03-03 21:54:57+00:00
Claude Code’s sandboxing is a complete joke. There should be no ‘off switch.’ Sandboxing should not be opt in. It should not have full read access over the file system by default.

I really want more security people to get involved in the LLM space because everyone seems to have just lost their minds.

If you look at this thing through a security lens it’s horrifying, which was a cause of frustration when Anthropic changed their TOS to ban use of alternative clients with a subscription. I don’t want to use that Swiss cheese.
by abraham | 2026-03-03 21:55:11+00:00
They get posted to the incident log (https://www.githubstatus.com/incidents/n07yy1bk6kc4) for example https://www.githubstatus.com/incidents/lcw3tg2f6zsd.

There are also monthly availability reports: https://github.blog/tag/github-availability-report/
Show HN: TypeShim – .NET WebAssembly Meets TypeScript
by ArcadeMode | 2026-03-03 21:55:24+00:00
I'm a big proponent of WebAssembly and .NET. When I found out .NET now runs in the browser on WASM with ánd without Blazor, I figured that could be something. Since Blazor is often too big of a step for TypeScript developers, I figured the recently added ability to include a .NET WASM app as a library in a JS bundle could be a good stepping stone for WASM to gain some ground in this JS-heavy web we have.

Using the JSExport/JSImport interop is relatively cumbersome, it only supports static methods, has no OOP concepts (like classes, just object handles) and it requires manually writing TypeScript definitions for the exported methods. So I decided to try and make some tooling that would improve the developer experience and reliability higher.

Enter TypeShim: a codegen tool that creates a seamless programming experience between .NET WebAssembly and TypeScript. Complete class level exports are translated to C# codegen to automatically define your JSExports/JSImports with a TypeScript class that wraps these methods. This creates proxies that look exactly like your C# classes and behave all the same, static/member, constructors, properties, methods, even things like reference equality. TypeShim supports all types that JSExport supports but includes your own classes in that list, so it provides a superset of what JSExport offers.

--

As Roslyn codegen wouldnt allow me to generate code that the JSExport codegen could consume, I had to make my own CLI codegen tool (which was a lot of fun). Thank Roslyn for exporting its APIs, allowing me to run my own compilation, which I could then use to build C# and TypeScript matching the classes that were marked for export.

It was also a good excuse to do some performance optimization work (because why not?!), NativeAOT turned out particularly suited for such short-running tooling and by taking care of a few bottlenecks found with PerfView, I managed to get codegen times down to ~100ms for projects with 100+ classes requiring codegen.

It took me down paths I hadnt expected to ever expected to end up at, like finding two bugs while E2E testing the solution, which would crash the .NET WASM runtime, which led me to dive into the dotnet/runtime repo and fix them. The dotnet team was grateful and very welcoming, inviting me to try fixing the same issues in the new .NET11 interop implementation which runs on the CoreCLR instead of mono. Great experience, I'll be going back for more TypeShim adjacent challenges: adding more types to the interop library.

--

Anyway, that was a bit of excitement about my recent open source activity. If you have a moment to look at TypeShim, maybe even leave a star, that would be greatly appreciated. But mostly I would love to hear your feedback!

Best,
ArcadeMode
by XCSme | 2026-03-03 21:55:49+00:00
> 3.1 Flash-Lite (reasoning)

(reasoning) doesn't say much. Is it low/med/high reasoning? I ran my own benchmarks, and 3.1 Flash-Lite on high costs A LOT: https://aibenchy.com/compare/google-gemini-3-1-flash-lite-pr...

Do not use 3.1 Flash-Lite with HIGH reasoning, it reasons for almost max output size, you can quickly get to millions of tokens of reasoning in a few requests.
by umvi | 2026-03-03 21:55:54+00:00
Is using virtualization the only good way of taking a 288-core box and splitting it up into multiple parallel workloads? One time I rented a 384-core AMD EPYC baremetal VM in GCP and I could not for the life of me get parallelized workloads to scale just using baremetal linux. I wanted to run a bunch of CPU inference jobs in parallel (with each one getting 16 cores), but the scaling was atrocious - the more parallel jobs you tried to add, the slower all of them ran. When I checked htop the CPU was very underutilized, so my theory was that there was a memory bottleneck somewhere happening with ONNX/torch (something to do with NUMA nodes?) Anyway, I wasn't able to test using proxmox or vmware on there to split up cpu/memory resources; we decided instead to just buy a bunch of smaller-core-count AMD Ryzen 1Us instead, which scaled way better with my naive approach.
by jimnotgym | 2026-03-03 21:56:46+00:00
And that confuses me. There are so many posts on hn complaining about managers and the bs they bring, 1:1s you didn't ask for etc.

What does a manager even do in this world where they are non technical? I have never managed a large sw team tbf, but in smaller teams I did manage I had to do project management stuff. In my normal profession I manage a large team, but one of my big roles is being there to advise technically and make the big decisions. I can see why people find these EM jobs boring, you must have to invent things to do!
by ovidev | 2026-03-03 21:57:09+00:00
In the past months, I've been building a SaaS using Claude Code. I haven't written a single line of code.

This is the breakdown of my process - I use tons of .md files serving as a shared brain between Claude and me:

- CLAUDE.md is in the root of the repo, and it's the foundation - it describes the project vision, structure, features, architecture decisions, tech, and others. It then goes even more granular and talks about file sizes, method sizes, problem-solving methodologies (do not reinvent the wheel if a well-known library is already out there), coding practices, constraints, and other aspects like instructions for integration tests. It's basically the manual for the project vision and plan, and also for code writing. Claude reads it every session.

- Every feature has its own .md file, which is maintained. That file describes implementation details, decisions, challenges, and anything that is relevant when starting to code on the feature, and also when it's picked up by a new session.

- At a higher level, above features, I create pairs of roadmap.md and handoff.md. Those pairs are the crucial part of my process. They cover wider modules (e.g., licensing + payments + emailing features) and serve as a bridge between sessions. Roadmap.md is basically a huge checklist, based on CLAUDE.md and features .md docs, and is maintained. The handoff.md contains the current state, session notes, and knowledge. A session would start by getting up to speed with Claude.md and the specific roadmap.md + handoff.md that you plan to work on now and would end by updating the handoff, roadmap, and the impacted features.

This structure greatly helps preserve crucial context and also makes it very easy to use multi-agent.

Of course the commits and PRs are also very descriptive, however the engine is in the .md files.
by cromka | 2026-03-03 21:57:11+00:00
I believe they'll enable it, actually, fairly soon. With this hardware at these prices, if they offered BootCamp again for Linux and Windows, they'd basically own the market almost overnight. Considering they have long-term contracts on RAM and SSDs and that they steep margin on their Mac hardware, there is hardly any reason to not make money off of those who actually wouldn't buy Mac hardware otherwise. Plus, there's a chance they'll also buy AirPods, mouse, keyboard, etc.
by mjw1007 | 2026-03-03 21:57:17+00:00
It's common that if you extract a function or a module with a well defined interface, that function or module can't tell whether a "bad" input indicates an expected or an unexpected error.

For example division by zero often indicates an "unexpected" error, but it wouldn't if you were implementing a spreadsheet.

So to me the approach of using different forms of error reporting for the two kinds of error doesn't seem promising: if you imagine you had to implement division yourself, which kind of error should it report? Should you have two variants of every fallible function so the caller can choose?
by twodave | 2026-03-03 21:57:24+00:00
> My decision to vote is not rational

And I think this is great. Often our convictions aren't, and those are what make us interesting! I also think it's interesting how/why we rationalize our irrational behaviors! For example, I generally feel the same way as you about voting, but I don't like living as (in my mind, at least) a defeatist. Also, I feel that if I didn't vote then I have no right to complain or have an opinion about the things I didn't vote on. So I go vote for those reasons.
Show HN: Proofd – Free AI career risk score based on your tasks, not job title
by dixalex | 2026-03-03 21:57:32+00:00
I built Proofd (https://proofd.ai) after researching AI displacement data and realizing that job-title-level predictions are nearly useless. Two Marketing Managers can score 78 and 31 depending on their daily task mix. Well, to be really honest -- I was trying to understand the path for myself first :)

Proofd scores your actual tasks across 5 dimensions (repeatability, data dependency, AI capability, human interaction depth, accountability tolerance) using O*NET occupational data and METR autonomous capability benchmarks.

Built with AI obviously. Looking for feedback on the scoring methodology.

Free instant score. Full task-by-task report for $29 (launch price).

For HN commenters -- giving out reports for free to those who can honestly give feedback. Just put your HN username somewhere when submitting the form, don't make the payment, and just comment here. I'll see it and will send over a free report for you to check out!

Curious what HN thinks.