MurphyA/hacker-news huggingface dataset:
by drsopp | 2026-03-11 18:00:56+00:00
I didnt inspect the rest of the code but I guess the table is fetched from L2 on every call?
I think the L1 data cache is flooded by other stuff going on all the time.

About dropping the interpolation: Yes you are right of course. I was thinking about the speed. No noticable speed improvement by dropping interpolation. The asin calls are only a small fraction of everything.
by MisterTea | 2026-03-11 18:00:58+00:00
> Some of it has to do with roblox being free.

This reminds me a of recent conversation I had with a friend about the success of Roblox. The big thing my friend said that Roblox has over Fortnight or any other gaming platform is ease of installation.

He told me how their young cousin came to visit and wanted to play Roblox. He told his little cousin he didn't have Roblox and that he would have to download and install it. The young child eagerly replied "It's super easy! let me show you!" So he let his cousin on to his PC. In less than 3 minutes he installed a small client, signed in, download the game files and was playing.

My friend was surprised and said Epic is struggling with this very problem and knows Roblox is successful precisely because of this ease of deployment. This is the same reason Discord is popular: you hop in, create an account and off you go. For Epic, Unreal Engine games are gigabytes in size and games are dependencies of other games built on top such as expansion packs. e.g. to play a Lego expansion pack game you need to buy and install the base Lego game. Roblox avoids this and the game files are small and fast to download.
by Mooshux | 2026-03-11 18:01:08+00:00
The mail server story is exactly why least-privilege matters more for AI agents than it does for human operators. A human who accidentally deletes a resource at least knows they did it. An agent doing the same thing for opaque internal reasons may not even log it in a way you'd notice.

Same principle applies to API keys. Most agents run with a single long-lived key that covers everything. One bad completion, one prompt injection, and that key does whatever it can reach. Scoped credentials with short TTLs are the API equivalent of "don't give the robot root": https://apistronghold.com
by Mooshux | 2026-03-11 18:01:47+00:00
Good writeup. The gap you're describing: skill installer copies the whole directory, test files run outside the agent context, so the agent's credential store becomes the actual attack surface. Scanners focus on what the agent does at runtime, but if the test file executes with the same environment, it can reach whatever keys were loaded.

The fix most people overlook: the agent shouldn't hold long-lived keys at all. Short-lived, scoped credentials mean even if a bundled test file runs and tries to exfiltrate something, it gets a credential that expires in minutes. We cover the pattern here: https://apistronghold.com
Show HN: Slate – Open-source AI workspace with a built-in browser
by meteor333 | 2026-03-11 18:02:07+00:00
Hi HN,

I've been building Slate for the past few months and just open-sourced it. It's a native macOS app that puts AI chat and web browsing in the same window.

The idea came from how I actually use AI day to day. I'd ask Claude or GPT something, get a bunch of links or recommendations, then cmd-tab to a browser, open tabs, lose context, and go back and forth. It felt broken. I wanted the browser inside the AI conversation, not the other way around.
So Slate is an AI workspace first, browser second. You ask a question, get a synthesized answer, click into sources right there in the same session, and keep asking follow-ups with full context. Each tab has its own conversation history.

A few things that might be interesting to this crowd:

- Native SwiftUI + WebKit, no Electron. Runs light on memory and battery on Mac. Downside: it's MacOS only, but it's the choice i took to create best possible UI and the user experience.
- Most other "AI Browsers" bolt AI onto the chromium as an after-thought, but I wanted to build AI-first experience.
- Supports Anthropic, OpenAI, Gemini, and Ollama for local models. Bring your own API keys.
- Built-in content blocking, so pages load fast and clean.
- Sessions group your tabs into workspaces you can archive and restore.
- MIT licensed.

It's very much a v1. There's plenty I want to improve — extensions, better history, sync, AI Agents, MCPs, etc. — but the core loop of chat → browse → follow up feels solid enough to share.

Repo: https://github.com/slate-ai/slate
Download (.dmg): https://github.com/slate-ai/slate/releases/download/v1.0.0/s...

Would love feedback, especially from anyone who's worked with WebKit or has opinions on how AI should integrate with browsing. Happy to answer questions about the architecture or anything else.
by stephencanon | 2026-03-11 18:02:09+00:00
When Intel specced the rsqrt[ps]s and rcp[ps]s instructions ~30 years ago, they didn't fully specify their behavior. They just said their relative error is "smaller than 1.5 * 2⁻¹²," which someone thought was very clever because it gave them leeway to use tables or piecewise linear approximations or digit-by-digit computation or whatever was best suited to future processors. Since these are not IEEE 754 correctly-rounded operations, and there was (by definition) no software that currently used them, this was "fine".

And mostly it has been OK, except for some cases like games or simulations that want to get bitwise identical results across HW, which (if they're lucky) just don't use these operations or (if they're unlikely) use them and have to handle mismatches somehow. Compilers never generate these operations implicitly unless you're compiling with some sort of fast-math flag, so you mostly only get to them by explicitly using an intrinsic, and in theory you know what you're signing up for if you do that.

However, this did make them unusable for some scenarios where you would otherwise like to use them, so a bunch of graphics and scientific computing and math library developers said "please fully specify these operations next time" and now NEON/SVE and AVX512 have fully-specified reciprocal estimates, which solves the problem unless you have to interoperate between x86 and ARM.
by thr0waway001 | 2026-03-11 18:02:13+00:00
I remember playing with Rebirth in the late '90s and then actually finding a real, TB-303, albeit with a bunch of drawn on crap. But it was very functional. Keeping it in a box for my daughter. She will either think it's cool or sell it after I'm gone. If she sells it, hopefully she gets some decent coin.

I'm kinda tempted to give it to my neighbor's son though. He knows about all this stuff and loves it. He'd appreciate it more. He’d also love my Roland D-50. He also comes by the garage to help out with stuff. Like the son I never had.

My daughter, though, does not appreciate this tech stuff whatsoever. Calls my gear room the ‘junk room’ .
by SlinkyOnStairs | 2026-03-11 18:02:17+00:00
The due diligence stops the fraud that is rampant in crypto. It doesn't change the incentive structure of hype-over-substance though.

So long as you aren't (caught) overtly lying about the startup, all hype is fair game. Sam Altman can spout his ridiculous claims until the sun explodes.

The reason I left the security fraud part of the quote in is that the line is entirely demarked by what the SEC will enforce, not what's actually illegal according to the law or not. (And under the current admin, the SEC isn't gonna do shit.) There are a lot of tech startups doing securities fraud that'd get them hit by the regulators in any other part of the west.
by Heliodex | 2026-03-11 18:02:22+00:00
I'll admit I read deeper into your argument than what you actually wrote.

Comparing with a platform like a digital distribution storefront, the infra & support & other OpEx still has to be paid. Could be argued that the developer has more choice on what to spend it on in the case they are given revenue directly, and in that case it would be their OpEx. That's why I think it's equally reasonable to consider it either as developer operations cost or a business one.

Other platforms routinely state that this money is given to the developers directly, which I suppose is true (given they also often host offline singleplayer games with generally much lower ongoing costs than multiplayer, which Roblox doesn't). Their communities also routinely refer to the money interchangeably as a "profit"/"revenue" cut, which I think is less forgivable and probably an indication of larger terminological clarity problems in the game industry regarding these cuts than just Roblox.
by NiloCK | 2026-03-11 18:02:25+00:00
Moving fast, through the dark, wearing wiley coyote jet-powered roller skates, while simultaneously somehow gathering and smelling many previously undocumented specimens of rose along the way.

Not too surprising that stuff is often broken. I just wish it was more often broken in my favor!

(This wish is not abstract - my account had been bugged for 8 months+ to not experience any weekly usage metering. It only fixed itself a few days ago when my annual bill came through).
by pseudalopex | 2026-03-11 18:02:33+00:00
Nearly 21 million voting-age U.S. citizens do not have a current (non-expired) driver’s license. Just under 9%, or 20.76 million people, who are U.S. citizens aged 18 or older do not have a non-expired driver’s license. Another 12% (28.6 million) have a non-expired license, but it does not have both their current address and current name.

Additionally, just over 1% of adult U.S. citizens do not have any form of government-issued photo identification, which amounts to nearly 2.6 million people.[1]

[1] https://cdce.umd.edu/sites/cdce.umd.edu/files/pubs/Voter%20I...
by The-Pebble | 2026-03-11 18:02:50+00:00
I like the point about juniors needing to actually write code rather than relying entirely on AI tools.

One thing I’ve noticed while experimenting with AI coding tools is that they’re great at getting you unstuck or generating small pieces of code, but they often introduce unnecessary complexity when solving larger problems. If you don't already understand what "good" code should look like, it's really easy to accept something that technically works but is poorly structured.

In that sense, AI feels less like a replacement for programming and more like a productivity layer on top of it. The people who benefit most seem to be those who already understand how systems should be designed.

For beginners especially, I think the idea of using AI as a "TA" rather than a code generator is a really good mental model.
by mikestew | 2026-03-11 18:03:10+00:00
Then the OS is full of ads and pre-installed garbage “gaming-optimization-tool” or driver tools taking up 99% of a single core while being riddled with security holes.

But inevitably, some chucklehead comes along "wut? I can get <proceeds to type spec sheet> for half that! Have fun paying the apple tax, lol." Someone posted that on Ars yesterday, with a random Amazon link from Naikan, your name for quality computing. Or rather, "Naikan, your name for a quality trackpad, screen, and high-quality ABS case! Be sure to check out the $12,000 of 'bonus' software add-ons, no extra charge!". It's amazing someone can post that without the slightest hint of self-awareness.
by gensym | 2026-03-11 18:03:19+00:00
I've wondered the same. Back when Antrhopic seemed like a niche alternative to OpenAI, I signed up for an account. Now that my company is using it heavily, I tried to change the account owner to on of the executives, and apparently that's not possible! It's also not possible to create separate work/personal accounts unless you have two different phone numbers.

There's a confusing disconnect between "we have this magic box that can write all the software we'd ever want" and their lack of basic account management functionality.

(Not really. That disconnect is because of something mature software engineers have known for decades - the bottleneck has never been the code)
by amanaplanacanal | 2026-03-11 18:03:36+00:00
I would guess most people don't have a proof of citizenship handy. This would get even worse if the effort to get rid of birthright citizenship succeeds, how would you even prove you are a citizen?

This would be less of a problem if the US had some sort of national ID issued by right, but we don't, and the same people pushing for requiring ID for voting would be against creating one. They hate the idea of a national ID.

My state does all elections by mail now. How would this even work?

All this is on top of the fact that elections are run by the states, not the national government. Would such a law even be constitutional?
by badsectoracula | 2026-03-11 18:04:09+00:00
Kate is the editor i'm using these days on Linux (even though i use Window Maker for my WM and not Plasma) but it does have a few weird aspects. One of them, which annoys me, is that every "tab" is really its own entire editor with its own state - if you do something like search for a word in one file then switch to another tab, you can't use F3 to search for the same word again in that file because that's actually a different editor and it doesn't know that you searched for something in the other tab. This extends to other stuff, as if the main Kate window is just a window manager for the editors it launches in it and it just pretends the UI is shared.
by zer00eyz | 2026-03-11 18:04:17+00:00
>> requiring proof of citizenship

Go and try to figure out how to do this from scratch. Imagine your house burned down and you need to start with "nothing".

If your parents are still alive you can use them to bootstrap the process of getting those vital documents (or if you're married that can be another semi viable path).

Pitty if you don't have those resources. Furthermore it might get complicated for any partner who adopts their other partners first name (were talking about getting the documents, before you can get some sort of verified ID).

The reality is we don't have a lot of instances of "voter fraud" committed by people who aren't citizens (see: https://www.facebook.com/Louisianasos/posts/secretary-of-sta... as an example) . And the amount of voter fraud we do have is very small (and ironically committed by citizens see https://www.brookings.edu/articles/how-widespread-is-electio... for some examples).

> I am in favor of in-person voting

Again, the size and dispersion of the American population makes this odious. Dense urban areas will face lines (they already do) and many of them (Chicago) have moved to early voting because spreading things out over many days is just more effective. Meanwhile places like Montana (where population density is in people per square mile) make travel to a location burdensome.

I get why you feel the way you do, but the data, the reality of America, makes what you desire unnecessary and impractical. Feelings are a terrible reason to erect this barrier when it makes little sense to do so.
by zahlman | 2026-03-11 18:04:23+00:00
Sure you can, you just need an anonymous voting mechanism that's sufficiently naive. You use the verifiable process to restrict access to that anonymous mechanism.

In Canada, at both federal and provincial levels, you walk up to a desk and identify yourself, are crossed off a list, and handed a paper ballot. You go behind a screen, mark an X on the ballot, fold it up, take it back out to another desk, and put it in the box. It's extraordinarily simple.

> At some point, you have to give someone access to a database and they can change that database.

Well, that kind of fraud is a different issue from someone reading the database and figuring out who someone voted for (you just... don't record identities in the database).
by Rohansi | 2026-03-11 18:04:27+00:00
> The paging works wonderfully well; an advantage of everything being fused.

I think it's more of a combination of 1) lower baseline usage by macOS and 2) your swap is guaranteed to be on a fast SSD (1.5+ GB/s read/write).

Also when you buy a budget PC they cut back on everything, while you get roughly the same SoC across the board for Mac (give or take a few cores). There are absolutely horrid CPUs, GPUs, and SSDs still being released today! If you cut your budget too much you can get a slow E-core only CPU with a no name SSD that's barely faster than a HDD.

Hopefully the MacBook Neo puts pressure on manufacturers to do better.
by davexunit | 2026-03-11 18:05:01+00:00
I am excited by the prospect of booting Wasm binaries without any JS glue, but when I've looked at the documentation for the component model and WIT it says that resources are references passed using a borrow checking model. That would be a serious downgrade compared to the GC-managed reference passing I can do today with Wasm GC. Do you know if there are any plans to resolve this mismatch?
by saghm | 2026-03-11 18:05:14+00:00
I'm not convinced JavaScript is a great abstraction for the browser as much as we've forced the web into a shape that fits JavaScript because of a lack of viable alternatives. I'd argue that the popularity of TypeScript implies that dynamic typing is not a universal ideal. Browser engines deal in objects because they're currently all built on top of JavaScript only; that doesn't demonstrate anything fundamental about the web that implies object oriented is the only reasonable representation.

If it gets stuck as a second-class citizen like you're predicting, it sounds a lot more like it's due to inflexibility to consider alternatives than anything objectively better about JavaScript.
by wffurr | 2026-03-11 18:05:22+00:00
When I was a kid and I got a new set, I would build it according to the instructions, play with it, and then disassemble it and sort it into my brick collection. Occasionally I would get the instructions back out and re-build it, and other times I would kitbash and make random cool stuff.

My parents still have all my Legos from the 90s, including the instructions, and I've been able to rebuild a bunch of the space ships with translucent neon accents. It's pretty sweet and my kids love it.
by whycome | 2026-03-11 18:05:27+00:00
lol i just posted about how I was also scorned by MS/Surface Book 2.
What a potentially amazing device. I hated that if you were playing a game or doing many video encodes, the charger (100w?) could not provide enough power -- so your battery drained. And make sure you don't let your base drain completely after being stored for a while -- the main computer won't be able to recognize it to even charge it again. And these were all known faults with no solution for the consumer other than to "buy the newer model." And you could never disable the damn windows update nag screens entirely. And you knew that you'd lose functionality if you upgraded something.
by mananaysiempre | 2026-03-11 18:06:03+00:00
> Two goals that were added were: 1. Support non-Web API's. 2. Support limited cross language interop.

I mean, surely it does not come to a surprise to anyone that either of these is a huge deal, let alone both. It seems clear that non-Web runtimes have had a huge influence on the development priorities of WebAssembly—not inherently a bad thing but in this case it came at the expense of the actual Web.

> WebIDL is the union of JS and Web API's, and while expressive, has many concepts that conflict with those goals.

Yes, another part of the problem, unrelated to the WIT story, seems to have been the abandonment of the idea that <script> could be something other than JavaScript and that the APIs should try to accomodate that, which had endured for a good while based on pure idealism. That sure would have come useful here when other languages became relevant again.

(Now with the amputation of XSLT as the final straw, it is truly difficult to feel any sort of idealism from the browser side, even if in reality some of the developers likely retain it. Thank you for caring and persisting in this instance.)
by ryandrake | 2026-03-11 18:06:07+00:00
I think the grammar/spelling is just one (perhaps low-signal) sign. But a lot of these people really are not that intelligent. And not just the GlobalElite™. Think of the guy who owns the local car dealership or owns 20 laundromats in the surrounding 3 counties. These guys are not geniuses, either. They just happen to own things that make them rich.

I worked with a tech founder at one point in my life, and I once happened to get a glance at his undergrad college transcripts which were, for reasons unknown, just sitting out on his desk. It was all Ds and Cs. He barely graduated! Yet his networth was more than the combined net worth of all of his employees.
by ylliprifti | 2026-03-11 18:06:14+00:00
I’ve spent the last few years looking at why current AI "alignment" frameworks fail to generate actual trust.Most frameworks (DeepMind, Microsoft, WEF) treat trust as a reactive measurement problem—Quality Assurance. I’m proposing we treat it as an engineering variable—Design.In the attached paper, I formalize Agentic Trust Design (ATDP) as a Markov Decision Process where the reward function is defined as $\Delta K$ (change in aggregate social capital).Key points for the HN crowd:Belief Components: We use the Castelfranchi-Falcone model (Competence, Willingness, Opportunity) as state variables.Empirical Grounding: The framework is based on a observed $0.98$ Pearson correlation between these trust scores and regional GDP.The Social Capital Turing Test: A proposal to move past "deceptive" benchmarks toward a measurable increase in network trust stock.Happy to discuss the MDP derivation or the weight matrix mapping in the comments.
by dimatura | 2026-03-11 18:06:21+00:00
I usually feel the same when starting something new. The "STUFF" is annoying and often feels like overkill when a project is new and minimal. Installing/building ROS, the package boilerplate, etc. And often I can get away with more minimal alternatives like just a single (possibly multithreaded) process, or multiple processes with a simple IPC. But then again I often end up wanting a lot of the extra stuff you get with ROS like the bags, the viewers, the cli tools, etc. LLMs help on both fronts though - they're decent at making DIY versions of ROS-like functionality, but they're also pretty good at handling the ROS boilerplate. (Which is one area where I'd see peppyOS being a severe disadvantage).
by Mooshux | 2026-03-11 18:06:29+00:00
The detection and rotation approach makes sense as a layer, but it's still treating the symptom. The dev only pastes the key into Claude because they can see it. If secrets are fetched at runtime through a vault or proxy layer, the developer never holds a raw credential to paste anywhere. The 401 debugging workflow becomes "here's my request, here's my masked token reference" instead of "here's my actual key, what's wrong?"

We see this pattern constantly with API Stronghold. Teams switch from static .env keys to runtime-injected scoped credentials and the whole "key in a prompt" failure mode goes away because there's nothing to copy-paste. Rotation still matters, but it's a lot less urgent when your keys aren't sitting in clipboards, shells, and Slack messages all day.
by atannen | 2026-03-11 18:06:30+00:00
The ~ (tilde) escape character in UNIX cu (call UNIX) did the same thing in the 1970s, when the remote system was on the other side of a telephone modem or other serial port. I think it's safe to say that ssh is a descendant of cu. (I don't mean that cu printed a help menu, I mean it had the tilde escape.)
by palcu | 2026-03-11 18:07:11+00:00
Hey folks, I'm Palcu from the reliability engineering team at Anthropic. I just posted a small retro on the status page:

> Between 14:17 and 17:11 UTC, our primary application database experienced severely degraded I/O performance following a routine maintenance operation, causing slow or failed requests on Claude.ai and preventing new or refreshed sign-ins for Claude Code and the Console. API traffic via Claude Developer Platform was unaffected.

https://status.claude.com/incidents/jm3b4jjy2jrt

Sorry again, thanks for bearing with us as we're dealing with the influx of new users and scaling up all of our systems.