MurphyA/hacker-news huggingface dataset:
by xeo84 | 2026-03-09 04:37:54+00:00
I'm working on version 3.0 of my feed reader app NewsNinja: https://ainews.ninja

Version 3 will add more feed types: Podcasts, Mastodon, Twitter/X, Calendar, Reminders, Weather, Finance tickers and more.

It will have a new UI, new features like notifications and local transcripts and summaries and many quality of life improvements.
by simondotau | 2026-03-09 04:38:14+00:00
I have a real domain name for my house. I have a few publicly available services and those are listed in public DNS. For local services, I add them to my local DNS server. For ephemeral and low importance stuff (e.g. printers) mDNS works great.

For things like Home Assistant I use the following subdomain structure, so that my password manager does the right thing:

service.myhouse.tld
local.service.myhouse.tld
by daxfohl | 2026-03-09 04:38:41+00:00
I think the word "entirely" is missing from the last line. A significant amount of white collar tasks are getting replaced, and eventually that leads to a need for fewer white collar employees, which subsequently also leads to less communication overhead and less of a need for humans in the loop to interpret subtleties, desires, etc. But that need will always be there at some level, or we'll have very intelligent AI agents that very intelligently blackmail your vendor's CEO because they have determined that to be the fastest way to get the TPS report you asked for. Humans still need to be there as guardrails at a minimum, but also because humans understand humans, and humans are your customers.

So yes, white collar jobs will be replaced, but they won't be replaced entirely.
by rafavento | 2026-03-09 04:40:20+00:00
Is this really new or you were already alone but distracted with others?
It is ok to feel alone. It is natural, and as long as you take the time to learn about yourself and what you really want and need, you'll learn and grow (even enjoy).
It won't be your last time, but it gets easier as you get older.
Cherish that your only priority is yourself (and your dog. f*k the cat :-p). It won't last.
by rich_sasha | 2026-03-09 04:40:46+00:00
I find the "K-shaped" recovery a very compelling narrative. Some companies are going stratospheric, some are decaying, the average is +1% growth or so. So depending on where you are, you will see the economy as either booming or floundering.

There's plenty of little nuggets like this to point to. US 2025 GDP ex AI investment was in a recession. US equity market ex tech does not outperform e.g. Europe. And so on.
by wmeredith | 2026-03-09 04:40:58+00:00
PC Part Picker for hi-fi stereos: https://buildhifi.com/

I've wanted this for a long time, so I finally started building it. I've had a lot fun!

- Graph-based signal flow: Products become nodes, connections are edges inferred from port compatibility (digital, analog, phono, speaker-level domains)

- Port profile system: Standardized port definitions (direction, domain, connector, channel mode) enable automatic connection inference

- Rule engine: Pluggable rules check completeness, power matching, phono stage requirements, DAC needs, and more
by 8organicbits | 2026-03-09 04:41:19+00:00
I made a web-based speaking clock: https://alexsci.com/time-at-the-tone/

I had been doing lots of time-based work for a blog post and ended up annoyed that so many clocks around me were visually out of sync. Especially my microwave and oven clocks. Using the tool I got them synced up beyond what I could perceive.
by Twey | 2026-03-09 04:41:46+00:00
Oh, right, sure. In Rust the async code and async executor are decoupled. So it's your _executor_ that decides how/whether tasks are mapped to threads and all that jazz.

Meanwhile the async _code_ itself is just a new(ish), lower-level way of writing code that lets you peek under an abstraction. Traditional ‘blocking’ I/O tries to pretend that I/O is an active, sequential process like a normal function call, and then the OS is responsible for providing that abstraction by in fact pausing your whole process until the async event you're waiting on occurs. That's a pretty nice high-level abstraction in a lot of cases, but sometimes you want to take advantage of those extra cycles. Async code is a bit more powerful and ‘closer to the metal’ in that it exposes to your code which operations are going to result in your code being suspended, and so gives you an opportunity to do something else while you wait.

Of course if you're not spending a lot of time doing I/O then the performance improvements probably aren't worth dropping the nice high-level abstraction — if you're barely doing I/O then it doesn't matter if it's not ‘really’ a function call! But even so async functions can provide a nice way of writing things that are kind of like function calls but might not return immediately. For example, request-response–style communication with other threads.
by analog31 | 2026-03-09 04:41:56+00:00
This raises an interesting point. I've speculated that if someone has a hard time expressing themselves to other humans verbally or in writing, they're also going to have a hard time writing human-readable code. The two things are rooted in the same basic abilities. Writing documentation or comments in the code at least gives someone two slim chances at understanding them, instead of just one.

I have the opposite problem. Granted, I'm not a software developer, but only use code as a problem solving tool. But once again, adding comments to my code gives me two slim chances of understanding it later, instead of one.
by kameama | 2026-03-09 04:43:00+00:00
A 16×16 multiplication table that encodes quoting, evaluation, branching, recursion, an 8-state counter, and IO — all as lookups in the same table. 83 Lean theorems, zero sorry.
The project asks: can a finite algebra with a single binary operation be forced by axioms to contain its own representation layer? The answer is yes. Axiom-driven SAT search finds the constraints, Lean verifies the witness.
I should be upfront: Claude wrote most of the Lean proofs and Z3 search scripts. My role was the ontological framework, the axiom design, and deciding what to search for and why. The AI-human split was roughly: I provided the "what should exist and why," Claude provided the "here's the code that proves/finds it." Every Lean theorem compiles independently regardless of who typed it.
Universal results (hold for all satisfying algebras, not just this table): every model is rigid, judgment and synthesis provably cannot commute, and the tester's acceptance partition carries irreducible information that structure alone can't determine.
The specific table fits in 256 bytes and can be recovered from a shuffled black-box oracle in 62 probes.
https://github.com/stefanopalmieri/Kamea
by groundy | 2026-03-09 04:43:05+00:00
Superpowers is an open-source agentic skills framework that transforms AI coding agents into disciplined software engineers by enforcing non-negotiable workflows: design before code, tests before features, and structured review between every task. Created by Jesse Vincent in October 2025 and accepted into the Anthropic marketplace in January 2026, it accumulated over 27,000 GitHub stars in its first three months—roughly 9,000 per month.
by intralogic | 2026-03-09 04:43:19+00:00
Part of what atas2390 wrote resonated with me: "being alone as a skill you practice, e.g. 20–30 minutes a day you choose ... on purpose. Over time your brain learns “alone” can also be calm, not just panic"

In fact, purposeful practicing aloneness rewires the brain so that is normal (and enjoyable again).

After divorce, I felt lonely a lot, and didn't enjoy my alone time the way I did before. I made myself go to more social events, but that did nothing to help me enjoy my alone time again. It was avoiding the thing that "scared" me.

I tried meditation (alone), guided by books, but though it helped some, it was too easy to skip, and the reward seemed low.

But then ... I found a Zen meditation school and started sitting with them weekly. It felt good to see familiar faces even if I didn't get to "know them" in the typical way. Sitting was hard at first, because I could see just how obsessively busy my mind was. But focusing on the breath, even in the beginning, slowed the mind down enough that I could see that further down, there is a person that can appreciate the goodness in just being alive ... grateful to draw the next breath ... to be in this moment, not regrets about the past or fears of the future.

I slowly started to feel more connected to myself and then, and this was a surprise, to the things around me. And as I relax into what is, instead of my desire to control what happens to me next, I found I could listen to others better and feel more connected to them. I've even started feeling I can listen to my own feelings better and be a better friend to myself.

I'm guessing any regular meditation practice could do this. I've heard friends say they got this experience from going to yoga, so there is more than one path.

There's an extra I did not expect because its a Zen Buddhism group. There are regular, brief (3-5 minute) kong-an (or koan) interviews with the teacher, with puzzles that can't be answered with Western thinking. Seems like the only answers that satisfy me (and the teacher) come from a more spiritual "gut" level. Getting there seems to poke chinks in my old foundation of western, American, achievement, doing-centered thinking.

All the above is leaving me more open to being alone or being with people. Existence can be more satisfying when you don't need to hold a yardstick to it.

Regardless of whether my input is helpful to you, I hope you find a path that works for you. I believe you can.
by FarmerPotato | 2026-03-09 04:45:37+00:00
Not sure what source you're asking for... my source is my memory. But here is a brief reading list.

Yes, I'm aware that the theology goes back to the 1890s. I don't know the details. Those details are jammed further down than the story of Americans forgetting that their stone monuments to the 10 Commandments were put up on courthouse lawns just to promote Cecil B. DeMille's movie.

Brief Reagan-era End Times Bibliography

Hal Lindsay: The Late Great Planet Earth. 1970.

Henry Morris: The Revelation Record. 1983.

Salem Kirban: 666 & 1000.

Tim LaHaye - dozens of books and Left Behind series. Political actor.
by bryanhogan | 2026-03-09 04:45:38+00:00
Published a post that contains all of the blog posts by other people that I shared in my monthly mail-letter: https://bryanhogan.com/blog/other-cool-blog-posts-2026

Also moving to Sveltia as my CMS (Astro markdown blog), after exploring multiple other options. Changed the structure of my Obsidian vault, will write about that also.

I’m also still working on a few projects:

- https://dailyselftrack.com/

- https://game.tolearnkorean.com/

- https://app.tolearnjapanese.com/

- https://tolearnkorean.com/
by noobcoder | 2026-03-09 04:45:39+00:00
Passing tests doesn’t mean you have a working codebase.
Benchmarks that rely on a fixed test suite create a real optimization problem agents (or/and even humans) learn to satisfy the tests rather than preserve the deeper properties that make the system maintainable. AI write test cases which it thinks is easier for it to satisfy and not adhere-ing to business logic

We see this firsthand at Prismor with auto generated security fixes. Even with the best LLMs, validating fixes is the real bottleneck our pipeline struggles to exceed 70% on an internal golden dataset (which itself is somewhat biased).

Many patches technically fix the vulnerability but introduce semantic regressions or architectural drift. Passing tests is a weak signal and proving a fix is truly safe to merge is much harder
by kazinator | 2026-03-09 04:46:23+00:00
Actually, it will solve most of it for guitarists, because the tuning problems that most guitarists blame on equal temperament are actually coming from their bad intonation. The fourths and fifths in equal temperament are not nearly as bad as they imagine. The equal temperament fifth is only 1.955 cents sharper than the pure fifth (3/2 ratio). Just under 2 cents.

Guitar intonation that is accurate to 2 cents is very good, I would say above average.

Another way to look at the pitch error in the ET perfect fifth is as a percentage of the pitch, which is about -0.169 %.

Suppose a 1200 Hz tone (quite a high note, somewhere between D6 and D#6) is played together with one that is 0.169 % flat. That flat one will have a frequency of 1198 Hz. The difference is 2 Hz, and so a 2 Hz beat will be heard: two volume swells per second.

Much lower down, at 120 Hz, that will be 0.2 Hz: two volume swells every ten seconds. Basically nothing. It makes no difference to guitar chords played in the first four fret box down by the nut.

The equal temperament error is worse for some other intervals; the ET major third is a percent sharp, or around 13.6 cents, which is a lot. It is pretty jarring, even in lower registers.

That's not what the submitted article is about; tuning in such a way as to fixing the tiny error in the fourths/fifths will not repair the major third.
by Twey | 2026-03-09 04:47:06+00:00
Thanks for the article! As someone who writes a lot of Rust/JS/Wasm FFI it gave me some good food for thought :)

Yes! Mutexes are much nicer in Rust than a lot of languages, but they're still much too low-level for most use-cases. Ironically Lindsey Kuper was an early contributor to the Rust project and IIRC at roughly the same time started talking about LVars [1]. But we still ended up with mutexes as the primary concurrency mechanism in Rust.

[1]: https://dl.acm.org/doi/10.1145/2502323.2502326
by mdavidn | 2026-03-09 04:47:52+00:00
Look around your town and try a few regular local group activities. See "third place" for ideas, and be patient with yourself. This will take time, and that's okay.

https://en.wikipedia.org/wiki/Third_place

Some of my most durable adult friendships started at group ballroom dance classes. I don't think dancing was the thing that made it work but the funny teachers and regular students. That studio closed (pre-pandemic, thank goodness), and no studio has recreated that magic, but other activities have.
by matrixgard | 2026-03-09 04:49:12+00:00
The lekt9/foundry case that rodchalski flagged is the one I'd lose sleep over. Static analysis, AI audit — it doesn't matter, you can't catch what isn't written yet. That's a fundamentally different threat model than what most security tooling is designed for.

The closest parallel I've seen in practice is OAuth scope creep from a few years back — teams installing third-party integrations with broad permissions and never reviewing them. At least those had a permission dialog and an audit log. Agent skills install with one command and the full attack surface is whatever the agent can do in your shell, including your cloud credentials and prod contexts.

What's your signal on whether the malicious installs are actively being exploited or mostly sitting dormant? Wondering if there's any telemetry on runtime execution vs. just install counts.
by matrixgard | 2026-03-09 04:49:34+00:00
Running an AI agent with whatever credentials happen to be in the shell is basically the same mistake as running your app as root — feels fine until the agent makes a bad decision or gets manipulated. On a typical dev machine that's a personal AWS profile with admin access; on prod it's usually whatever the CI service account can touch, which is often a lot more than it should be.

The CI integration is the piece I'd actually lean on first. Most teams I've seen think about agent access controls after they've already deployed, at which point you're doing cleanup instead of prevention. Gating it in the pipeline means the access question gets answered before the agent is running against your Terraform state and live kube contexts.

Are you seeing any patterns in severity distribution — mostly cloud creds coming up critical, or are the kube context exposures landing higher than expected?
by maest | 2026-03-09 04:50:32+00:00
Yes, those acts are immensely terrible and the apologies feel minuscule by comparison. But I think there's room for more nuance here.

There are multiple reasons we put people in jail:

1. the victims can feel some vindication and retribution

2. other members of society can feel some vindication and retribution and a sense of justice

3. other would-be criminals are detered from committing similar crimes for fear of punishment

4. making people feel safe by showing them criminals are punished

5. removing a bad actor from society

6. reforming a bad actor and reintroducing them into society

Different cultures emphasize different combinations of reasons. For example, ine notable divide is how, in the US, 6. is considered to be the product of a naive mind, whereas in some nordic countries, that goal is taken seriously, with some amount of success (and perhaps at the detriment of other goals).

Anyway, I think your point is that, even if you take the convicts' apologies at face value, goals 1. and 2. remain unfulfilled. And 3. is probably weakened.
by farathshba | 2026-03-09 04:50:37+00:00
If someone popped your org tomorrow, would they start with a web app… or with your vuln scanner, MDM, or core router?

New issue of my “Farath’s Bi‑Weekly Code Security Brief” digs into a trend I’m seeing everywhere:

Tenable Security Center (CVE‑2026‑2630) – authenticated command injection on the platform you trust for vuln intel.

Juniper PTX (CVE‑2026‑21902) – RCE on core routers via on‑box anomaly detection.

Ivanti EPMM & EPM – unauth RCE + auth bypass/SQLi on the mobile and endpoint control plane.

Plus some thoughts on recent Azure control‑plane EoP and why “the cloud provider patched it” isn’t a complete risk story.

The post is opinionated and very pipeline‑centric:

how these bugs actually get abused in real environments

what your SAST/SCA/DAST/IAST stack would see (or totally miss)

concrete Tier‑0/Tier‑1 SLAs I’d use when the vuln is in your scanner/MDM/router instead of your app
by wybiral | 2026-03-09 04:51:16+00:00
I would second this. For SBCs the software support is the biggest deal breaker for me these days. Being cheaper or more powerful isn't as much of a benefit without the software ecosystem and community to back it up.

And then the construction quality/tolerance too. I've had Pis last for years and then cheap alternatives burn out after a few months of moderate use.
by medbar | 2026-03-09 04:52:05+00:00
Location: Orlando, FL Remote: Yes, or in-office
Willing to relocate: Yes

Technologies: C++, C, Python, Linux, Git, Bash, SQL, Javascipt, Typescript, Java, HTML, CSS, React, Redis, Next.js, RAG, Vector DB, Docker, NoSQL, Vercel, Terraform

Résumé: https://davidsantamaria.com/resume.pdf (PDF) and https://medbar.dev/resume

email: dsantamaria1245@gmail.com

linkedin: https://www.linkedin.com/in/davidsantamaria1245/

github: https://github.com/Daves1245

Seeking a junior/mid dev role at a startup or contract work with ~1 year of experience. I was part of my university's programming team and my team won the ICPC Southeast regionals Div2 contest. I interned at Google for the Network Doctor team and have done frontend freelancing work for a YC-backed startup.

Most recently, I've added a keyboard driver to my hobby OS project I'm writing Pong in (https://github.com/Daves1245/horizon). My other projects include a multiplayer leetcode site (https://ternarysearch.com), inspired by binarysearch.com, which I'll make open source to give to the community if/when I'll move onto something else, a discord bot to answer questions about a github repo using RAG, a discord clone to learn system design, a community-driven site that vibe codes itself, and home labbing.

If you're interested, you can schedule a quick chat with me at https://calendly.com/dsanta01 or shoot me an email
by nstart | 2026-03-09 04:53:19+00:00
Every communication point (including whatsapp, telegram, etc) is turning into a potential RCE now. And because the agents want to behave in an end to end integrated manner, even sandboxes are less meaningful since data exfiltration is practically a feature at this point.

All those years of security training trying to get folks to double check senders, and to beware of what you share and what you click, and now we have to redo it for agents.
by Mihir1426 | 2026-03-09 04:55:20+00:00
Added 4 new tools this week:

→ Regex Tester — test & debug your regex patterns instantly
→ JWT Decoder — decode and inspect JWT tokens without any server
→ Hash Generator — MD5, SHA-1, SHA-256 and more
→ Color Converter — HEX, RGB, HSL conversions in one place

That brings us to 31 tools total.

All running 100% in your browser.
No uploads. No accounts. No tracking.

These 4 are heavily used by developers daily — but most sites that offer them are slow, ad-filled, or just plain sketchy.

EveryTool is none of that.

Which of these 4 do you use the most? ↓
by w10-1 | 2026-03-09 04:55:38+00:00
But... why not just run macOS in a VM?

If/since AI agents work continuously, it seems like running macOS in a VM (via the virtualization framework directly) is the most secure solution and requires a lot less verification than any sandboxing script. (Critical feature: no access to my keychain.)

AI agents are not at all like container deploys which come and go with sub-second speed, and need to be small enough that you can run many at a time. (If you're running local inference, that's the primary resource hog.)

I'm not too worried about multiple agents in the same vm stepping on each other. I give them different work-trees or directory trees; if they step over 1% of the time, it's not a risk to the bare-metal system.

Not sure if I'm missing something...
by rubyn00bie | 2026-03-09 04:55:50+00:00
I follow, and am followed by, folks who use Blacksky and interact with them regularly. I have had zero issue with this, at any point. As Paul (the CTO of Bluesky) said in a sibling comment this would be a very serious bug.

FWIW— I have also not heard anything even remotely close to this at all from anyone using either service.
by crabmusket | 2026-03-09 04:57:22+00:00
With your push-pull algorithm, were you considering that the graph had already been built up, e.g. by an earlier pull phase? And the push-pull bit is just for subsequent updates? If so, then I think I'm following :).

I've been working in the context of reactivity on the backend where you're often loading up the calculations "from scratch" in a request.

I agree with your monad analogy! We looked into using something like Rx in the name of not reinventing the wheel. If you build out your calculation graph in a DSL like that, then you can do more analysis of the graph structure. But as you said in the article, it can get complicated. And Rx and co are oriented towards "push" flows where you always need to process every input event. In our context, you don't necessarily care about every input if the user makes a bunch of changes at once; it's very acceptable to e.g. debounce the end result.
by zdragnar | 2026-03-09 04:57:32+00:00
In your example, the implementation matches the intention. That is not the same thing.

bool isWeekday(number: Int) { return number % 2 == 0 }

With this small change, all we have are questions:

Is the name wrong, or the behavior? Is this a copy / paste error? Where is the specification that tells me which is right, the name or the body? Where are the tests located that should verify the expected behavior?

Did the implementation initially match the intent, but some business rule changed that necessitated a change to the implantation and the maintainer didn't bother to update the name?

Both of our examples are rather trite- I agree that I wouldn't bother documenting the local behavior of an "isEven" function. I probably would want a bit of documentation at the callsite stating why the evenness of a given number is useful to know. Generally speaking, this is why I tend to dislike docblock style comments and prefer bigger picture documentation instead- because it better captures intent.