MurphyA/hacker-news huggingface dataset:
by AntroMind0310 | 2026-03-13 14:07:56+00:00
Hi HN,
I am a 12yo dev in HK.
I wanted a lightweight way to interact with DeepSeek/LLMs without installing heavy frameworks or web servers. AntroCode is a single .py file that compiles and serves its own HTML/JS/CSS client locally.

All state (API keys, chat history, projects) is managed securely via the browser's local storage. It supports markdown parsing, code syntax highlighting, and native reasoning (Chain-of-Thought) rendering.

Just run it and code. Feedback is welcome!
by rimunroe | 2026-03-13 14:08:03+00:00
> I'd say this is the crux of the matter.

That's why my opening paragraph and final paragraphs were devoted to it :)

I feel like a lot of the things I hear from other folks is that I'm missing the possibility of programming the way I used to, rather than being sad that it might no longer be practical within the constraints of my life. Even if I did start doing it on the side, going from eight hours a day programming to squeezing in one or two would be quite the change.

> You could perhaps even start your own company if it's that important to you.

I have no interest in ever starting or running a company. Every person I've known who does it has it consume their life. I'd rather spend time with my family and do stuff which doesn't involve a boatload of stress and additional responsibility. Not to mention that in the case where I'm no longer able to find a job programming the way I used to then I don't think it's likely a company where people did that would be competitive enough to survive, at least not normally. Also, one of the reasons I rarely program on the side is that I don't often have ideas for things to make. I just don't feel the need for much software in my personal life, and certainly don't think of the sorts of things where there's a market for them.

Having a lucrative job where you do something where you find great satisfaction in your daily work isn't the norm and is the privilege of a lucky few, but that doesn't mean they aren't justified in feeling sad at the prospect of it going away.
by bonoboTP | 2026-03-13 14:08:18+00:00
I read a lot of LLM text every day, so I'm quite good at seeing the cadence, the narrative structures and the phrasing styles. It's not just "it's not just X but Y" or emdashes. I could point them out and you would say oh humans use this trope or phrasing style too, and of course that's true. It's still a tell. But it's pointless to argue about this.
by krapp | 2026-03-13 14:08:18+00:00
I'm not Christian, but I think that any argument which takes the concept of the Antichrist seriously but removes it from the context of Christianity has no merit.

The Antichrist only makes sense within the framework of Christian eschatology. Invoking the archetype but reframing it as a secular political and cultural force that opposes AI and technological progress seems like meaningless sophistry meant to grant some greater profound scope to what is in essence just basic anti-leftist, pro accelerationist rhetoric, but which only works with a facile understanding of what the Antichrist is supposed to represent, which is opposition to Christ.

And in that sense, Peter Thiel and Donald Trump fit the criteria far more than, say, Greta Thunberg.
by jcynix | 2026-03-13 14:08:31+00:00
ImageMagick is a wonderful command line tool, IMO. You could use it to extract various information, e.g. the 5 most used colors of an image, as in

convert $IMG -colors 5 -depth 8 -format "%c" histogram:info: | sort -nr

If needed you can easily remove colored borders first (trim subcommand with fuzz option) or sample only xy% from the image's center, or where the main subject might be.
by Kapura | 2026-03-13 14:08:40+00:00
The biggest international incident, on the tip of all democratic voters' tongues, was Israel's continued genocide in Gaza. For that specific issue, there was virtually no daylight between the Republican and Democratic line.

I would argue that the Democrats could have created a separation between themselves and the other side by saying they would stop selling arms to genocidiers, and thereby secure the crucial anti-genocide vote; anecdotally, many of these folks sat out the election, or wrote in another candidate instead of voting for one of two sides who would let massacres of civilians continue.
by ghoulishly | 2026-03-13 14:08:58+00:00
Author here, it’s all me. I ran it through Claude before publishing to spot check me on grammar/typos and it caught a few syntax things, but this is just my writing style.

Here’s a satire piece I wrote in the summer of 2021. Tonally very different but you can pick up on my voice between it and my essay yesterday: https://samhenri.gold/blog/20210803-localhost/
by duskdozer | 2026-03-13 14:09:01+00:00
If this had anything to do with reigning in tech giants, it would be done for adults as well, without restricting anyone's rights (well, aside from the people-corporations' of course). The issues are the manipulative algorithmic datafeeds, advertising, and datamining. Age verification does nothing for any of this and only provides the tech giants and governments the means to secure even more control over people.
by jawns | 2026-03-13 14:09:11+00:00
I would say that if it is possible to exfiltrate 193 M sensitive records through a social engineering attack on one customer support rep, then there are multiple failure points that they and other businesses need to address:

- better security training for employees

- don't store 193 M sensitive records in such a way that one social-engineering attack gives you access to all of them

- don't store 193 M sensitive records without appropriate encryption, and make it hard to steal both the records and the decryption mechanism.
by pfdietz | 2026-03-13 14:09:16+00:00
If "just don't do the bad things" is a valid argument, why do we need type checking at all?

Exceptions from type checking are useful because they tell you exactly where something has screwed up, making fixing the bug easier. It also means problems are reduced from RCEs to just denial of service. And I find (in my testing) that it enables such things as rapid automated reduction of inputs that stimulate such bugs. For example, the SBCL compiler is such that it should never throw an exception even on invalid code, so when it does so one can automatically prune down a lambda expession passed to the COMPILE function to find a minimal compiler bug causing input. This also greatly simplifies debugging.

A general reason I look down on static type checking is that it's inadequate. It finds only a subset, and arguably a not very interesting subset, of bugs in programs. The larger set of possible bugs still has to be tested for, and for a sufficient testing procedure for that larger set you'll stimulate the typing bugs as well.

So, yeah, if you're in an environment were you can't test adequately, static typing can act as a bit of a crutch. But your program will still suck, even if it compiles.

The best argument for static typing IMO is that it acts as a kind of documentation.
by theowaway213456 | 2026-03-13 14:09:27+00:00
Here's a (flawed) thought experiment: imagine that 100% of customers' RAM suddenly goes faulty at the same time, and RAM prices have suddenly skyrocketed to infinity at the same time.

Which outcome is ideal? Which one is morally correct?

(A) the retailer refunds every customer, loses all of their profits and probably goes bankrupt

(B) the retailer is forced to go into massive debt in order to replace everyone's RAM, and may not recover from the debt, and may face legal consequences if they can't replace the RAM

(C) in the first place, the retailer should have been required to have a backup RAM stick for everyone that purchases the RAM, so that they are able to issue replacements if necessary, plus extra in case the replacements themselves are faulty. As a result, RAM prices before this incident were well over 2X the real manufacturing cost, in order to cover this "backup" cost (manufacturing, storage, etc.)

(D) something else?

(This is a much more extreme version of what actually happened, but maybe instructive to think about)
by photobombastic | 2026-03-13 14:10:03+00:00
Good question, thanks. PipeStep is specifically for debugging CI pipelines, not general LLM/flow orchestration. The target user is someone staring at a failing GitHub Actions run who's tired of the commit-push-wait-read-logs cycle. You point your existing workflow YAML at it, it spins up the same Docker container, and you step through interactively. It's more like gdb for CI than a pipeline framework — no new DSL, no lock-in, you just debug your existing workflow and push the fix.
by slotpulse | 2026-03-13 14:10:19+00:00
SlotPulse is a data-driven analytics platform for slot players and iGaming enthusiasts. We track RTP, volatility, and performance across popular slot games to help users understand how slots actually behave in real play conditions. SlotPulse focuses on analytical comparisons, probability insights, and real slot mechanics. Our rankings and analysis are updated weekly based on RTP data and player interest.
by EGreg | 2026-03-13 14:10:32+00:00
The trenches will eventually be overwhelmed regardless. Once the government has AI and sensors, it will mandate its ubiquitous use.

For minors, we have this lovely law coming in NYC: that will broadcast to everyone that you’re a minor:
https://www.nysenate.gov/legislation/bills/2025/S8102

But let’s talk about around the US. For example, all cars manufactured in 2029 and onward will be required to have a built-in alcohol detector / breathalyzer and to shut down and not let you drive if they detect your blood alcohol level is too high: https://www.clear2drive.com/the-pass-act-explained/

And in 2027 — next year — new cars are required to watch where you are looking, how much you’re blinking or nodding and alert authorities if you aren’t alert enough: https://www.gadgetreview.com/federal-surveillance-tech-becom...

And it’s not just the US government. That phone in your hand? Governments have mandated tha all vendors preinstall spy software, filters and apps on it, that are not removable: https://www.aclu.org/news/privacy-technology/government-mand...

Also these phones no longer shut down when you shut them down. They continue operating and sending telemetry so the government can eventually know where they are at all times. https://android.stackexchange.com/questions/228682/why-do-ce...

This is in addition to the interlinked CCTV cameras that are the norm in various cities (eg in the UK), new Flock cameras in US, etc. But the government doesnt even need Flock or Ring to cooperate. They have plenty of their own housing programs to install thousands of cameras to spy on citizens 24/7, and can now deploy AI to sift through it all. Here in NYC we already have the lovely Domain Awareness System: https://nysfocus.com/2025/08/11/eric-adams-nycha-nypd-camera...

To sum up: the government can know what you’re doing at all times, with sensors in your car, mandated apps on your phone, cameras on your street, and soon, mandated telemetry sent by your operating system. Caretakers of kids are required to report anything to authorities and not let parents know, in case the department of child services might need to know. Every child is required to be vaccinated too, with lots of different vaccines.

I wouldn’t be surprised if toilet plumbing in every apartment in the future will be required to install a test for what you’re eating or drinking, to catch diseases early and for public health.

Looks like this short film is a documentary about our future, except with AI doing the snitching instead of humans: https://www.youtube.com/watch?v=vJYaXy5mmA8
by mindslight | 2026-03-13 14:10:58+00:00
ZKP methods are just as draconian as they rely on locking down end user devices with remote attestation, which is why they're being pushed by Google ("Safety" net, WEI, etc).

The real answer to the problem is for websites to publish tags that are legally binding assertions of age appropriateness, and then browsers can be configured to use those tags to only show appropriate content to their intended user.

This also gives parents the ability to additionally decide specific websites are not suitable for their children, rather than trusting websites themselves to make that decision within the context of their regulatory capture. For example imagine a Facebook4Kidz website that vets posts as being age appropriate, but does nothing to alleviate the dopamine drip mechanics.

There has been a market failure here, so it wouldn't be unreasonable for legislation to dictate that large websites must implement these tags (over a certain number of users), and that popular mobile operating systems / browsers implement the parental controls functionality. But there would be no need to cover all websites and operating systems - untagged websites fail as unavailable in the kid-appropriate browsers, and parents would only give devices with parental controls enabled to their kids.
by mycall | 2026-03-13 14:11:07+00:00
You could just use DoubleDOS [1] to run the BBS in partition 0 and the door could run in parallel in partition 1. This was my setup before Windows 3 and DESQview replaced it.

[1] https://en.wikipedia.org/wiki/DoubleDOS

[2] https://en.wikipedia.org/wiki/DESQview
Show HN: Crashloop Analyzer – paste Kubernetes logs to diagnose CrashLoopBackOff
by morrislaw | 2026-03-13 14:11:22+00:00
I built a small tool to speed up debugging Kubernetes CrashLoopBackOff errors.

Normally when a pod keeps restarting you end up jumping between:
- kubectl logs
- kubectl describe
- events
- docs

Crashloop Analyzer lets you paste pod logs or kubectl describe output and it highlights likely causes like:

• OOMKilled
• ImagePullBackOff / ErrImagePull
• missing environment/config values
• port binding failures

It also suggests useful kubectl commands to investigate further.

The detection is deterministic first (pattern matching common failure modes) with optional AI-assisted explanation layered on top.

Live demo:
https://crashloop-analyzer.vercel.app/

Source:
https://github.com/MorrisLaw/k8s-crashloop-analyzer
by gnabgib | 2026-03-13 14:12:03+00:00
The arc:

Grammarly is offering ‘expert’ AI reviews from famous dead and living writers (132 points, 8 days ago, 201 comments) https://news.ycombinator.com/item?id=47259366

Grammarly is using authors' identities without permission unless they opt out (33 points, 3 days ago, 7 comments) https://news.ycombinator.com/item?id=47327106

Grammarly says it will stop using AI to clone experts without permission (6 points, 2 days ago) https://news.ycombinator.com/item?id=47339728

One of Grammarly's 'experts' is suing the company over its AI feature (3 points, 2 days ago) https://news.ycombinator.com/item?id=47344238

Grammarly Is Facing a Class Action Lawsuit over Its AI 'Expert Review' Feature (2 points, 2 days ago) https://news.ycombinator.com/item?id=47344724
Show HN: HealUp – Task execution app that hides your todo list on purpose
by neshwa35 | 2026-03-13 14:12:16+00:00
I built this because I have a problem with starting tasks. I'll open my notepad, see 30 things I need to do, and do none of them. After years of this (and multiple failed products) I realized that I'm the problem.

The idea behind HealUp is that the most valuable thing a productivity tool can do is hide information from you. When you see one clear action on screen, you do it. When you see thirty, you spend energy deciding which one, and often pick nothing.

How it works: you type a task, AI breaks it into concrete steps (not vague advice, actual next actions like "open Google Docs and create a blank document"), and Execute Mode shows you one step at a time. Full screen, nothing else visible. Finish it, next one appears.

This is the first thing I built that I actually use myself every day. Looking back, that's probably why the others failed. I was building for imaginary users, not for myself. This one made $680 in its first two weeks, which after 4 years of $0 and 6 failed startups felt like a lot.

No signup required. Guest mode is fully functional. You can try it right now without creating an account.

Looking for feedback on whether others have found that reducing visible information helps them focus, or if it creates anxiety about what you're not seeing. I've heard both and I'm still figuring out the right balance.
by wongarsu | 2026-03-13 14:12:43+00:00
The California law only stipulates that there's an "accessible interface at account setup" to set the birthday or age at account setup, and an interface to query the age bracket. Plus the crap for "application stores"

I don't think it's a very well thought-out law. But realistically this will end up as setting some env variable for your docker containers to assure them that you are 99 years old. And yes, maybe transmitting a header to docker hub that you are 99 years old. Probably configured via an env variable for the docker cli to use. It's stupid, but nothing a couple env variables wouldn't comply with

The real issue is when the law inevitably gets expanded to get some real teeth, and all the easy workarounds stop being legal
by PreciousH | 2026-03-13 14:12:58+00:00
Hey HN! I'm Precious, the builder behind Argus.

The frustration that started this: I kept context-switching between Grafana dashboards, log files, and docs every time something broke in production. I wanted to just ask what was wrong and get an actual answer.

Argus is an open-source AI agent that monitors your infrastructure and investigates anomalies autonomously using a ReAct loop with 18+ tools, reading logs, querying metrics, tracing requests then proposes fixes for your approval before anything executes. The human-in-the-loop part was intentional; I didn't want an agent that could nuke a database without asking first.

It's LLM-agnostic (OpenAI, Anthropic, Gemini) and runs entirely in one Docker container. SQLite + DuckDB under the hood, no external dependencies.
Still early but already handles the case I built it for — would love brutal feedback, especially from anyone running their own infra.
by module1973 | 2026-03-13 14:13:32+00:00
that is correct the parents are meant to pass on morals and parent the child. If the parents fall through, there is the community such as church, neighbors, schools etc. The absolute last resort is government or law enforcement intervention, and this should be considered an extreme situation. But as John Adams noted, "Our Constitution was made only for a moral and religious people" -- in other words, all these laws start to rip at the seams when the fabric of society, the people who make up the society no longer have morals. But I appreciate this article in general, we need to fight against mass surveilance at all costs.
by infogulch | 2026-03-13 14:13:40+00:00
BLM [(Bureau of Land Management)] completes $460M sale of federal helium reserve to private company | 12/12/2024 | https://www.eenews.net/articles/blm-completes-460m-sale-of-f...

Messer Completes Acquisition of Federal Helium System from BLM | June 27, 2024 | https://www.messer-us.com/press-releases/messer-completes-ac...
by ExoticPearTree | 2026-03-13 14:13:51+00:00
The probleme here is that what tends to happen is that the security requirements are relatively vague and once the customer has signed the acceptance, good luck.

And signing up with a big company is good way to cover your behind, because "if they with all their people and knowledge could not do it...". Basically the mantra or "Nobody was ever fired for buying Cisco".
by a2tech | 2026-03-13 14:14:11+00:00
AWS support seems to be struggling. I just came to help a new customer who had a rough severance with their previous key engineer. The root account password was documented, but the MFA went to his phone.

We've tried talking to everyone we can, opening tickets, chats, trying to talk to their assigned account rep, etc, no one can remove the MFA. So right now luckily they have other admin accounts, but we straight up can't access their root account. We might have to nuke the entire environment and create a new account which is VERY lame considering they have a complicated and well established AWS account.
by CM30 | 2026-03-13 14:14:16+00:00
I've always wondered what the people in these videos/making these videos think of this extra traffic from articles, sites and subreddits like this. Do they ever randomly go on YouTube, then freak out when they see a ton of notifications from people they don't know? Are there people involved here who see the popularity of some random clip, realise there's a business/channel opportunity involved and go all in with it?

What it's like seeing some random seemingly unlisted/unedited clip you posted suddenly get thousands or millions of views from random people online?
by soulofmischief | 2026-03-13 14:14:19+00:00
> Not really sure what this obsession with calling things you don't like AI generated is but it's poor form

Admonishing someone for correctly identifying AI-written or AI-edited blog posts is poor form, friend.

It is without a doubt written by an LLM. All of the telltale signs are there. I work with these tools 8-20 hours a day and after a while the verbiage and grammatical structures stick out like a sore thumb.

Get off the high horse. I too think this is a very interesting read. I was fascinated with the subject, but the presentation was nauseatingly distracting and immediately sets off yellow flags about how Percepta operates, and what kind of quality they're willing to settle with. It tells me they are more interested in appearances and superficiality.

The numbers that are there categorically cannot be trusted, because hallucinating those details is quite common for models. There is simply no indication that a human adequately proof-read this and therefore any of its claims must be taken with a grain of salt. Don't forget the recent Cloudflare+Matrix debacle: https://news.ycombinator.com/item?id=46781516

I share the same concerns as OP; this post lacks metrics and feels like someone did something cool and raced to get an AI to post about it, instead of giving it a proper treatment.
by jryio | 2026-03-13 14:15:19+00:00
You must explicitly state what your threat model is when writing about security tooling, isolation, and sandboxing.

This threat model is concerned with running arbitrary code generated by or fetched by an AI agent on host machines which contain secrets, sensitive files, and/or exfoliate data, apps, and systems which should not be lost.

What about the threat model where an agent deletes your entire inbox? Or sends your calendar events to a server after prompt injection? Bank transfers of the wrong amount to the wrong address etc. all these are allowed under the sandboxing model.

We need fine grained permissions per-task or per-tool in addition to sandboxing. For example: "this request should only ever read my gmail and never write, delete, or move emails".

Sandboxes do not solve permission escalation or exfiltration threats.
by infamia | 2026-03-13 14:15:23+00:00
I don't understand your point. Switchblades are (roughly) more akin to FPV (300 model) and Vampire drones (600 model) with reapect to size and payloads. Shahed style drones are roughly like like low end cruise missles. Different form factors and different capabilities. All of them are needed, but they're all very different.
by iamnothere | 2026-03-13 14:15:35+00:00
Who is paying FOSS devs who will be implementing this? Who is providing them with legal indemnification since they are now apparently subject to fines for a fucking hobby if they do it wrong? Who is making CA the only jurisdiction instead of the myriad contradictory laws all over the place? Who is stepping in to make sure no additional legislation comes across regulating how FOSS has to include backdoors or weaken encryption?