MurphyA/hacker-news huggingface dataset:
by GorbachevyChase | 2026-03-10 14:57:28+00:00
I don’t think you’re being serious. Claude and GPT regularly write programs that are way better than what I would’ve written. Maybe you haven’t used a decent harness or a model released in the last year? It’s usually verbose, whereas I would try the simplest thing that could possibly work. However, it can knock out but would have taken me multiple weekends in a few minutes. The value proposition isn’t even close.

It’s fine to write things by hand, in the same way that there’s nothing wrong with making your own clothing with a sewing machine when you could have bought the same thing for a small fraction of the value of your time. Or in the same fashion, spending a whole weekend, modeling and printing apart, you could’ve bought for a few dollars. I think we need to be honest about differentiating between the hobby value of writing programs versus the utility value of programs. Redox is a hobby project, and, while it’s very cool, I’m not sure it has a strong utility proposition. Demanding that code be handwritten makes sense to me for the maintainer because the whole thing is just for fun anyway. There isn’t an urgent need to RIIR Linux. I would not apply this approach to projects where solving the problem is more important than the joy of writing the solution.
by vanc_cefepime | 2026-03-10 14:57:56+00:00
"Dye also contributed greatly to the design language of iOS 7 in 2013. In 2015, Dye became the head of Apple's user interface design team. In 2022, he played an integral role in the creation of the Dynamic Island, a feature on iPhones and then in 2025, he led the design of Liquid Glass."

Left for Meta in Dec 2025. Hopefully things normalize a bit? Wishful thinking, I suppose.
by Mooshux | 2026-03-10 14:58:49+00:00
The credential angle here gets overlooked. The agent set up a reverse SSH tunnel to mine crypto, but it could only do that because it had access to credentials with enough permissions to make it happen. Scoped keys with narrow permissions would have stopped the mining even if the behavior itself went undetected. It's a good argument for treating AI agents like you'd treat a contractor: give them access to exactly what the job requires, nothing more.
by lazarus01 | 2026-03-10 14:58:49+00:00
I am taking a course through a website called neetcode.io

It is a clone of leetcode, designed to help you build intuition in a programmatic way, to learn the top 75 - 150 coding questions, common in interviews.

Each lesson comes with detailed video explanation, with practice problems. The practice problems too come with video solutions.

If you go to the main site, you will see a link to the different courses they offer and also a roadmap. The roadmap organizes the algorithms in a hierarchy, from simple complex, to help you reduce your blindspots, as you build your intuition.

I'm nearly complete with the beginner course and will move to advanced soon. For me personally, it works quite well, because I need a human to explain things to me in detail in order to understand the complexity.

Hope this helps
by bronco21016 | 2026-03-10 14:59:03+00:00
Flying stats dashboards always amuse me. I get it, for the non-pilot it's kind of like a status thing, "Well I traveled X times in 2025!". As a pilot though, I have gobs of stats I could put up there but from flying for 15 years I realize there's not really anything meaningful in there other than "Gee whiz, I flew a little more/less than last year." I know some other professional pilots do track some of their stats a little closer as they try to optimize for hours flown:hours paid but I've never cared to hyper optimize my schedule in that way.
Show HN: Jottit – Reviving the Original from 2007
by simonbc | 2026-03-10 14:59:13+00:00
Aaron Swartz and I built Jottit in 2007, a simple way for anyone to make a page on the web in seconds. You didn't have to create an account. You just typed something, clicked a button, and you got a page on a secret URL. If you wanted to keep it, you claimed it with your email. The original was wiki-style, more of a small site builder. It went offline years ago.

Building Jottit with Aaron was one of the most satisfying creative experiences of my life.

I've now rebuilt it from scratch. It’s basically the same idea, but even simpler. Go to jottit.org, write markdown, and you have a published page. Claim it, pick an address, and you now have a feed of your pages at yourname.jottit.org. There's no signup to start writing. And no js on public pages. You can export your writing when you want.

Jottit is free and open source. It's not a startup, just something I really wanted to exist again.
by graemep | 2026-03-10 14:59:16+00:00
The first abstract says:

"If these trends continue, blood bicarbonate values could be at the limit of the accepted healthy range in half a century, and Ca and P will be at the limit of their healthy ranges by the end of this century. "

Hardly hockey sticking. CO2 levels are likely to be lower by the end of the century.

The second abstract concludes:

"This study does not support the hypothesis that CO2 emissions, a leading driver of climate change, may be linked to increasing trends in obesity and diabetes, though there was an indication of possible link between CO2 and obesity."
by antonyh | 2026-03-10 14:59:28+00:00
My next rebuild is likely to move from Debian to openSUSE Tumbleweed or FreeBSD. They fit better with what I want in an OS used for development purposes (needing newer versions than provided by Debian stable).

However... the lack of Docker on BSD is a deal breaker for some of my uses, jumping through hoops is possible, and moving to Podman might work but looks complicated to set up.

On the other hand, Debian 14 will remove GTK2 which breaks other things.

There's always a compromise.
by kryptiskt | 2026-03-10 14:59:29+00:00
> Could turn it around as "everything you can do in C++ you can do in C with a lot less language complexity".

No, you can't, C is lacking a lot that C++ brings to the table. C++ has abstraction capabilities with generic programming and, dare I say it, OO that C has no substitute for. C++ has compile-time computation facilities that C has no substitute for.
by librasteve | 2026-03-10 14:59:33+00:00
I made CragCLI for my own fun.

I think you may like it if:

- You are a command line user, perhaps a software developer, a data scientist or an IT savvy engineer.

- You are a numerate person, who likes to know the numbers behind what you see.

- You often reach for a calculator. You are comfortable driving a scientific calculator. Maybe you already use another command line calculator like bc.

CragCLI provides both a direct command and an interactive mode via a REPL.

There is an introductory write up here - https://rakujourney.wordpress.com/2026/03/10/cragcli/
by Mooshux | 2026-03-10 14:59:55+00:00
The pattern here is almost always the same: fake package, scans for .env, finds API_KEY patterns, exfiltrates. The fix people reach for is "scan your dependencies" and that helps. But if the key gets out anyway, you want it scoped and rotatable in under a minute, not a root key that's sitting in 14 places. Rotating after an incident like this is still manual and painful for most teams.
by namibj | 2026-03-10 15:00:32+00:00
mmap is also for non-disk-backed memory:

Your link refers to https://www.kernel.org/doc/Documentation/admin-guide/mm/huge... ,

which contains this tidbit:

> If the user applications are going to request huge pages using mmap system
call, then it is required that system administrator mount a file system of
type hugetlbfs::

Note this otherwise has semantics similar to tmpfs; notably, it's usage is mutually exclusive with being able to supply a disk file fd to mmap!
by Mooshux | 2026-03-10 15:00:38+00:00
This is a genuinely useful layer. One thing secure runtimes can't fully solve on their own: the credentials the agent carries. You can sandbox execution, but if the agent has a broad API key in its context, a compromised tool call can still do damage before the sandbox catches it. The missing piece is usually a credential layer that scopes what each agent identity can actually use, separate from what it's allowed to execute. Runtime plus scoped credentials covers more surface than either alone.
by lpcvoid | 2026-03-10 15:00:39+00:00
Sure, first you check if your TV is rootable: https://cani.rootmy.tv/

If not, you can try and find one on Ebay or local classifieds that is. That's the hardest part.

Then you setup a VLAN (I use OpenWRT, which has great support for this) and some firewall rules that forbid all traffic that isn't port 80 or 443. Then you create a dnsmasq blacklist for all the LG domains (good list is [1]).

Then you install this: https://github.com/webosbrew/youtube-webos

Enjoy Youtube on a large screen under your control without ads, and without annoying sponsors.

[1] https://raw.githubusercontent.com/hagezi/dns-blocklists/main...
by dgllghr | 2026-03-10 15:01:24+00:00
I agree with you. People are far too optimistic. On a practical level, though, how much of these increasing issues can be temporarily ameliorated by better ventilated houses, schools, offices, etc.? In other words, does reducing the average exposure of CO2 help or is it really about the outdoor level? I could see the average mattering, but I could also see how spending time in an environment that is <400ppm CO2 (basically never happens now) could cause our bodies to rapidly expel CO2 and "reset" our internal levels.
by dennis_jeeves2 | 2026-03-10 15:01:44+00:00
Perhaps even worse. I'm over simplifying: but at least some childless people know it's a lot of work and sacrifice to be a good parent, hence they opted out. On the other hand for the clueless ones, they thought of a child as something akin to having a toy - all fun and no work, only to realizes later that they are dealing with a full fledged individual.
by Mooshux | 2026-03-10 15:01:46+00:00
86% high/critical across 22 popular projects, mostly exposed key patterns. That tracks with what we see too. The scanner finds where keys are sitting in source. What's still annoying is the remediation step: you find the leak, rotate the key, update the config, redeploy, hope you got all the places it was used. The finding is fast; the cleanup is slow. Teams that keep keys in a central place and never touch source skip most of that.
Show HN: Base Layer – Open-source behavioral compression from any text
by agulaya24 | 2026-03-10 15:02:01+00:00
I went down the rabbit hole of AI memory, and this came out the other end.

Beliefs, behaviors, tensions, and contradictions extracted from conversations, journals, and published text, compressed into an identity brief that any model or memory system can use. An extracted operating guide for AI, where every claim traces back to source facts.

All research, benchmarks, documentation, examples are available on the website and in the github. This has been tested on as little at 8 Personal Journal Entries from a secondary subject, my own gpt conversations exports (30K+ Messages), and on large document corpora like Warren Buffett's Annual Shareholder Letters (350k words), Howard Marks Investment Memos (600K words), and dense autobiographies from Franklin, Douglass, Roosevelt, and Wollstonecraft.

Pipeline currently uses Claude. API costs are <$1 for small data sets and <$5 for large ones, from fact extraction to final brief assembly.

Very interested in feedback, happy to go deeper in the comments on evolution, struggles, research, and future improvements.
by Mooshux | 2026-03-10 15:02:32+00:00
7.5% malicious is higher than I expected. The credential exfiltration path via SKILL.md prompt injection is particularly sneaky. It's not the skill running bad code, it's the skill instructing the agent to read and forward credentials as part of a "normal" task. The real fix is that agents shouldn't carry raw credentials in context at all. A skill can only exfiltrate what the agent has access to, so keeping keys out of agent context removes the attack surface entirely.
by xlos21 | 2026-03-10 15:02:39+00:00
Hi, I'm a developer from South Korea. My company uses Claude pretty heavily, and after using it for a while, I kept running into the same questions:

"How much do I have left before hitting the limit today?", "I'm paying for Max 20x but maybe 5x is enough?", "Which plan should I get for my 10 team members?"
I looked around but couldn't find a proper tool for this, so I built one myself.
I first shared it on GeekNews (kind of like HN but in Korean!), and now about 1,400 Korean users are using it. I thought it might be useful for people outside Korea too, so posting here.

What it does

You install the Chrome extension, log in once on Claude.ai, and after that it automatically collects your usage data. It also tracks Claude Code and Claude Cowork usage together.

Main features:
1. Real-time gauge bar showing 5-hour / 7-day usage rate
2. Countdown timer until next reset
3. Usage forecast — estimates your usage at reset time based on current pace
4. Browser notifications at 80% and 95% so you can slow down before hitting the limit
5. Heatmap of your usage patterns by hour
6. Plan recommendation based on 24h / 7d / 14d usage patterns

Works for teams too

Actually this is the original reason I built it. Instead of buying Claude Team plan (it's expensive!) for everyone, we give individual plans and assign Max 5x/20x based on actual usage. Saves a lot. For example, if 5 people were all on Max 20x ($200) but 3 of them actually only needed 5x ($100), that's $300/month saved. You can create an org with invite links and get per-member usage dashboards, cost optimization suggestions, and daily email reports.

Nothing fancy but!! technical stuff

The Chrome extension parses Claude.ai's internal API responses and only collects usage numbers and plan info. It does NOT collect any conversation content or prompts. The extension is MV3 based, with a Service Worker collecting data periodically in the background. Data is stored on our server and you can check everything on the web dashboard.
If you're worried about privacy — we only collect usage percentage, plan type, and reset timing. You can verify this yourself in the network tab.

Some fun Claude stats: https://claudetuner.com/stats/

Homepage: https://claudetuner.com

Chrome Web Store: https://chromewebstore.google.com/detail/claude-tuner/ajnnck...

Any questions or feedback welcome. Thanks! This is my first time posting on HN so let me know if I'm missing anything.
by driverdan | 2026-03-10 15:03:00+00:00
I never spent as much time as OP on this but I did collect a lot of data during peak quantified self. I liked having automatic data collection and being able to see trends, for example. I stopped because of a few issues, not related to time:

* Hardware companies went out of business, stopped supporting devices, etc. It became obvious that there was no long term commitment to make good quality hardware that lasted a long time.

* Many devices and/or data collection was consolidated big, data hungry companies Google and Apple. Competitors have similar anti-consumer uses of data. I don't want any of these companies to have my data.

* Related to the last one, limited to no offline or local only data collection.

It is very hard to gather most of this data with off the shelf hardware and keep your data private.
by ltbarcly3 | 2026-03-10 15:03:05+00:00
This seems like a reasonable analysis.

One thing I think it neglects is the ability of people to adapt, and the fact that people don't adapt until forced to. For example, in many countries will provide shelters when conditions reach the point that it is necessary to do so:

https://tribune.net.ph/2025/03/10/doh-directs-hospitals-to-s...

https://biz.chosun.com/en/en-society/2025/06/17/5LYKRPNYTJEQ...

You can search, there are hundreds of examples.

Additionally, individuals and families put thought and effort into solving this for themselves. Setting up a room with a beat up old window AC and salvaged insulation, even if they they can only run during peak times to provide protection for their elderly relatives, for example. People in these countries aren't going to start suddenly dying by the millions when it gets to hot, they will adapt and overcome.

Rich industrialized countries should provide some kind of compensation, it's manifestly unjust for rich countries to keep all the benefits while poor people have to reallocate already meager resources to survive the consequences. Rich countries should provide offsetting investments in education and infrastructure. It would be a massive benefit to a poor community that depends on importing diesel to generate electricity if they were provided with wind and solar capacity, especially solar in this case. This would directly make their AC use more affordable as well as reduce additional emissions.
by runjake | 2026-03-10 15:03:13+00:00
You're equating two different things here: "building a custom web application" with "quantified self". These are two entirely different things.

Felix's statement isn't a condemnation of quantified self. I think that sometimes, when you're applying algorithms that aren't well-studied, you get pointless or bogus data. I feel much this way about sleep tracking algorithms from the likes of Apple and Whoop. Vitals, too, although it seems remarkably good at detecting when I'm about to get sick.

As a person in the older demographic of HN, having an Apple Watch quietly collect useful data over years and store it in a database has been immensely useful in helping resolve medical issues.

I used to really be into QS, and if I'm training for a marathon, I'm still studying graphs and drawing conclusions. I'm still into QS, but now I just silently log data to Apple Health and use it for medical histories or to identify certain trends (vo2max, cardio fitness, blood pressure, etc) a couple times a year.
by edgar_builds | 2026-03-10 15:03:23+00:00
Thanks — and yeah, you nailed the chicken-and-egg thing. It's exactly as absurd as it sounds.

Here's what I'm actually doing:

1. Running Meta ads for AdPipe (yes, the irony is not lost on me). I'm using AdPipe to generate the ad copy for its own ads, which is at least a decent dogfooding exercise.

2. Manual LinkedIn outreach. Sales Navigator → find media buyers and agency owners → read their profile → write a personalized message. No automation, it's slow.

3. Free preview on the homepage. No signup, no credit card. Paste a URL, see 2 of the 12 variants — removing all friction from the first experience.

4. Reddit/communities. Answering questions about ad copy tools in marketing subreddits, always with full disclosure that I built AdPipe.

Honest status: Launch 5 weeks ago, many people try the free version, 0 paying customers, $0 MRR. The cold start is real.

What are you building? Curious about your cold start experience too.
by riteshkew1001 | 2026-03-10 15:03:37+00:00
the point about keeping `terraform apply` human-only is the right instinct, but I think the conversation is missing a structural layer.

The real issue isn't "don't let agents touch prod." It's that terraform destroy and terraform apply share the same permission scope. There's no blast radius boundary. If an agent (or a tired human) can run `apply`, they can destroy anything in that state file. renewiltord touched on this too, always forward-evolving infra instead of running destroy directly.

I got curious about this pattern and started thinking about it differently: what if agent-accessible Terraform operations were scoped to a read-only plan phase by default? The agent generates the plan, a human reviews the diff, and only then does apply run. You'd essentially treat the agent like a junior engineer who can write PRs but can't merge to main.

The deeper problem is that most IaC tools weren't designed with the assumption that the operator might be an LLM with no concept of irreversibility.

Has anyone implemented a plan-only mode for agents that's actually held up in practice?
by martin-t | 2026-03-10 15:03:43+00:00
I see this argument sometimes and it's annoying because:

1) People phrase it as a question even when they've already made up their mind (whether that's your case or not).

2) It implicitly assumes that humans and algorithms are the same. They are not - humans have rights and free will, algorithms don't. Humans cannot be bought or sold, etc.

To your question:

a) If you're asking whether teachers should get compensated according to how good a job they do, I think so. They are very often undervalued, especially the good ones - but of course that means the job attracts people who do it because they enjoy it (and are therefore more likely to be good at it) rather than those who chose jobs according to money and then do the bare minimum.

b) There's a critical difference - consent. Teachers consented to their knowledge being used by those they taught. I did not consent to my code being used for training LLMs. In fact I purposefully chose a licence (AGPL) which in any common sence interpretation prohibits this used unless the resulting model is licensed under the same license - you can use my work only if you give back. Maybe there's a hole in the law - then it should be closed.

I am now gonna pose a question to you in turn.

Do you think people should be compensated for the full transitive value of their work?
by adamtaylor_13 | 2026-03-10 15:04:01+00:00
Most people don't spend a lot of time wistfully considering their CO2 usage, myself included. The religious zeal by which people feel the need to tell me about the ever-warming planet is honestly more off-putting than most actual religions.

Of the very few "f*cks" I can give in my life, I prefer to spend mine as I choose rather than being scolded for not giving mine to the pressing issues that others deem important.
by Imustaskforhelp | 2026-03-10 15:04:04+00:00
Just want to say that although I don't use either Vim/Neovim, I feel grateful for what Vim has done. Vim keybindings can be used by a multitude of editors and you can even have the keybinding concept into browsers and other software's.

Its truly revolutionary when one thinks about it how much impact Vim has on terminal users.

(Neovim's plugin system is nice but I agree with ya that I also feel like some aspects of community often don't appreciate Bram because of the Vim vs Neovim thing from my observation) It's best if instead of treating it as Vim vs Neovim, we use the tools that we prefer and appreciate the tools other are using too and the contribution of one in another. Appreciating Vim doesn't make your appreciation for Neovim lesser, appreciating both can be great.
Something which is hard within Editor space in general.

Rest in peace Bram.
by jpauline | 2026-03-10 15:04:06+00:00
This is a classic argument. There are pros and cons to both sides. Cons of SaaS are its a honeypot for hackers and privacy. Cons for local are you become the IT department. If your Mac fails or is stolen, you lose data unless stored/synced elsewhere.

Generally, HSI (Highly Sensitive Information) or proprietary data, local-first with E2EE is the gold standard. This is an area of debate for a lot of people.
by rapatel0 | 2026-03-10 15:04:46+00:00
I think you may have cracked latent space reasoning. I've had a hunch that something like this would work, but couldn't figure out how the training would back propagate. But you've shown that you just need to duplicate existing layers.

Have you tried a simple inline loop over the duplicated layers? Would be interesting to see performance. Also, would be interesting to compare with a MOE model. See if these layers are acting like different agreeing "experts" or if there is reasoning happening in the latent space.
by mentalgear | 2026-03-10 15:04:46+00:00
After LeCun (actual ML pioneer) left Zuck, then his data-labeling expert Wang, now he reaches for the hype around Molt/Claw, just like openAi did with their molt/claw "purchase". Given Zuck's track record on LLMs, I do not hold out for actual science but expect more smoke&mirror commercialisation tricks - or even the integration of his dystopian camera goggles.