MurphyA/hacker-news huggingface dataset:
by subset | 2026-03-04 09:08:34+00:00
Handwritten! (aka no LLM assistance :) It wasn't transpiled or anything like that. I've been meaning to post a little about it on my blog; just been caught up with other stuff atm.

One thing that was a _little_ frustrating coming from Python, though, was the need to rely on crates for basic things like random number generation and network requests. It pulls in a lot, even if you only need a little. I understand the Rust community prefers it that way as it's easier to evolve rather than be stuck with backwards-compatability requirements. But I still missed "batteries included" Python.
by ksaj | 2026-03-04 09:09:28+00:00
I'm the opposite of you two. My brain won't stfu. I took Ritalin since grade 3 until I was in my 40's. That never got rid of it, but it did make it easier to focus in spite of all the chatter and other mental distractions.

Now I'm old and lazy, and that seems to have a similar effect. The racing thoughts are still there, but they don't get in my way now that I have far fewer responsibilities to take care of.
by winwang | 2026-03-04 09:09:55+00:00
Linear walkthrough: I ask my agents to give me a numbered tree. Controlling tree size specifies granularity. Numbering means it's simple to refer to points for discussion.

Other things that I feel are useful:

- Very strict typing/static analysis

- Denying tool usage with a hook telling the agent why+what they should do (instead of simple denial, or dangerously accepting everything)

- Using different models for code review
by chickensong | 2026-03-04 09:10:14+00:00
They always have been, long before AI. Some sales engineers can be in the club as well IMHO.

It's pretty normal for integration projects with big corps to have problems, but if the project has executive interest and the A-team gets called in, it's a joy to work with those people. The lines between the roles are blurred, it's just smart and dynamic people making things work. They don't give a shit about following scrum or pedantic coding standards, only project success, but not in a superficial way. I don't know if they truly care about what they're doing, but they're so far above the baseline that it doesn't really matter.
by AnthonyMouse | 2026-03-04 09:10:19+00:00
Given the ease with which kids who want them can get any of those things in schools, it's not clear that the government ban is actually doing anything of significance or that the reduction in usage isn't more a result of convincing people that those things are actually bad for them so they choose not to partake despite the continued widespread availability.

Notice that consumption of those things is also down for adults even though adults are not banned from getting them.
by bonoboTP | 2026-03-04 09:10:27+00:00
That's true for unverifiable "talk professions" where there is no grounding and it's all self-referential navel-gazing chatter.

But LLMs are already beyond that in writing code that passes actual tests, proving theorems that are check able with formal methods etc.

The people who still say LLMs are just parrots in 2026 will just keep saying this no matter what, so I don't think it makes sense to argue this point further.
by riffraff | 2026-03-04 09:10:38+00:00
They don't remove it but they do reduce it.

I have an inbox, and I do not receive a lot of scam post. In fact, I don't think I received any since I lived at this address (~10 years ). We do get a few promotional leaflets every other week.

OTOH, I get hundred of spam emails every day.

The former is something which I can handle manually easily, the other is not.
by tskulbru | 2026-03-04 09:11:17+00:00
Following up the comment i made last month, I'm a solo dev building a handful of apps across different niches.

- Linetris ( https://apps.apple.com/us/app/linetris-daily-line-puzzle/id6... ), a daily puzzle game where you fill an 8x8 grid with Tetris-like pieces to clear lines. Think Wordle meets Tetris. Daily challenges, leaderboards, and competititve play against friends.

- Kvile ( https://kvile.app ) — A lightweight desktop HTTP client built with Rust + Tauri. Native .http file support (JetBrains/VS Code/Kulala compatible), Monaco editor, JS pre/post scripts, SQLite-backed history. Sub-second startup. MIT licensed, no cloud, your requests stay on your machine. Think Postman without the bloat and login walls.

- Mockingjay ( https://apps.apple.com/us/app/mockingjay-secure-recorder/id6... ) — iOS app that records video and streams AES-256-GCM encrypted chunks to your Google Drive in real-time. By the time someone takes your phone, the footage is already safe in the cloud. Built for journalists, activists, and anyone who needs tamper-proof evidence. Features a duress PIN that wipes local keys while preserving cloud backups, and a fake sleep mode that makes the phone look powered off during recording.

- Stao ( https://stao.app ) — A simple sit/stand reminder for standing desk users. Runs in the system tray, tracks your streaks, zero setup. Available on macOS, Windows, Linux, iOS, and Android.

- MyVisualRoutine ( https://myvisualroutine.com ) — This one is personal. I have three kids, two with severe disabilities. Visual schedules (laminated cards, velcro boards) are a lifeline for non-verbal children, but they're a nightmare to manage and they don't leave the house. So I built an app that lets you create a full visual routine in about 20 seconds and take it anywhere. Choice boards, First/Then boards, day plans, 50+ preloaded activities, works fully offline. Free tier is genuinely usable. Available on iOS and Android.

- Biblewise — a Bible trivia game I originally built for my niece and nephew but ended up with three modes: adventure (progressive levels across 6 categories), daily challenges with streak tracking, and a timed mode. Built with SwiftUI + SwiftData, offline-first. https://apps.apple.com/us/app/biblewise-bible-quiz-game/id67...

- Neimr — a collaborative naming app with Tinder-style swiping. Create a survey for baby names, pet names, business names, etc., invite your partner/friends, and it finds which names you all agree on. Built with Flutter + Firebase. https://apps.apple.com/us/app/neimr-swipe-find-names/id67582...
by KurSix | 2026-03-04 09:11:24+00:00
Works fine for a one-man pet project, but the second you hit a real codebase and dozens of commits a day, that nightly job is just gonna choke on the context window or slam into Anthropic's rate limits. You really need to be streaming agent state into a DB on the fly via WebSockets, not piecing it together once every 24 hours
by Towaway69 | 2026-03-04 09:11:26+00:00
I personally find it nicer when the AI communicates quite clearly "Hi there, sorry to interrupt, but I have just launched a nuclear first strike on the enemy. This I thought would best for the current situation." instead of "WARNING! Nuclear first strike began".

Gives destruction that human touch.

Why are we counting sand grains at the beach. Yesterday we're talking about AI driven weapons of mass destruction and today we're arguing whether AIs should have a personality or not. F'A!
Show HN: Audicia – Generate least-privilege Kubernetes RBAC from audit log
by felixnotka | 2026-03-04 09:11:38+00:00
I built an open-source Kubernetes operator that watches audit logs and generates scoped Role/ClusterRole manifests based on what ServiceAccounts actually access.

The problem: most clusters run with overly permissive RBAC because getting it right manually is tedious.

You end up with cluster-admin bindings everywhere or spend hours crafting policies by hand.

Audicia flips it — ingest audit logs (file or webhook), normalize the access patterns, and output least-privilege RBAC.

It also diffs observed vs. granted permissions to produce a compliance score.

Everything runs as a controller in your cluster via CRDs. No SaaS, no external dependencies.

GitHub: github.com/felixnotka/audicia
Website: audicia.io

Happy to answer any questions about the architecture or approach.
by hn_throw2025 | 2026-03-04 09:12:06+00:00
I use two LG 5K Ultrafine models. The quality is fantastic.
Only two things to watch out for.

The first is burn-in. I now move windows about when I can, and also tend to use Dark mode for everything. I also set up BetterTouchTool to give me 10%, 20%, 30% etc brightness mapped to Cmd plus the numeric keypad. I use a comfortable level of brightness, and only bump it up for a short while when I need to examine something. I also have some anti burn-in videos downloaded with yt-dlp to clear burn-in when I find a ghost of it on the screen.

The other problem is screen activation. There is no power button on the LG displays. I like to keep the Macbook Pro in sleep mode when not in use, so I can resume with my app windows in the same state from the previous session. My whole desk setup is behind a smart switch. Often, when resuming from sleep, one of the displays would not wake and the only workaround was to unplug and replug the thunderbolt cable at the Macbook side. I work around this by having the Macbook continuously powered by my Orico dock when in use or sleeping, and this seems to address the problem. There is also an occasional issue of a single display switching off when I am using it, and this just means a thunderbolt unplug and replug at the Macbook side. But fortunately this has been fairly rare.

So, visually great hardware that I’m thankful for, but Apple’s “it just works” doesn’t really apply here. Just mentioning these in case someone is experiencing similar issues.
by Markoff | 2026-03-04 09:12:09+00:00
Helsinki has population 690K as they mention in the article, while Berlin with 5 deaths 3.7M and also many people commuting, so it's not really that big of an achievement.

Also the article is missing their definition of traffic death, here in Prague is basically impossible, even if cars killed nobody people jump in front of the trams and buses (let alone suicides in subway thanks to no platform doors) and limiting trams and everyone to like 20-30kmph would make transportation even worse than it is.

Plus all European countries define traffic death differently, if car will hit you and you won't die immediately you won't be counted as traffic death if you die after 2, 4 weeks or more depending on country, so I would question all these stats since I find it hard to imagine there can be zero traffic deaths in 700K city.

EDIT: Gemini says:
"In Norway, a road traffic death is defined as any person killed immediately or dying within 30 days of a road traffic accident, including drivers, passengers, cyclists, and pedestrians."

So if you will be in coma for a while and die after one month you are not traffic death anymore. Though it seems France, Germany, Czechia and maybe US ("While NHTSA uses a 30-day cutoff for "traffic fatalities", the National Safety Council (NSC) uses a 1-year cutoff for "motor-vehicle-related deaths," which can lead to higher, more comprehensive total fatality numbers.") uses same definition.
by compsciphd | 2026-03-04 09:12:38+00:00
that doesn't seem to be the argument, see top comment (As of now) here

"The courts just take issue with him naming his AI system as the sole author and himself as the copyright owner."

you can't claim a non human as the "author" and claim the material is copyrightable.

the "author" (not the AI) was trying to make a legal point/hack and the courts shot him down.
by coldtea | 2026-03-04 09:13:33+00:00
>my tinfoil hat theory is that they make small features depend on new hardware.

The general case is hardly a "tinfoil hat theory". They openly do that, and the major reason is to tie to new hardware adoption.

That said, it doesn't usually work like you call it. It's not adding new features depending on HW optimization to slow older machines down (after all one could just not use those features in an older machine, or toggle them off).

It's rather: you want to get these shiny new features, which is all we advertise for iOS/macOS N+1, and the main new changes? The big ones will only work if you have a newer machine, even though we could trivially enable them on older machines (and some don't even need special hardware, as there are third-party hacks that unlock them and they work fine).
by CloakHQ | 2026-03-04 09:14:54+00:00
The queryability point is exactly right - re-reading prose every time doesn't scale and agents aren't great at knowing what to ignore. Once you have more than a few modules the signal-to-noise ratio in a flat file gets bad fast.

ctlsurf looks interesting, haven't seen it before. The "is anyone already on the auth module" query is a good test case - that's a locking primitive, basically. Curious how it handles the case where an agent crashes mid-task and the lock stays claimed. Does it have a timeout or does someone have to manually clear it?
by CloakHQ | 2026-03-04 09:15:22+00:00
The pre-submit commit as an immutable baseline is a really clean design - basically treating every agent interaction as an atomic transaction with a known rollback point. The 3-way merge on write-back means you never silently lose work, which is the failure mode that really hurts in practice.

The IMAP parallel to browser sessions makes sense. External state that changes independently of your code is the hard case - your doc can describe "the session is authenticated" but by the time the agent reads it that might no longer be true. The document is a snapshot, not a live connection.

One thing we haven't solved cleanly: what happens when the external state change is what triggers the agent task in the first place? Like, a session getting flagged and needing recovery. The event comes from outside the doc system, so there's a gap between "thing happened" and "agent knows about it".
by a-saleh | 2026-03-04 09:16:02+00:00
I am from former ost-block (weird it still has weight even 35+ years later) and my grandpa was Palestinian. The overal feeling is, that this was always the case. Sometimes we win some, sometimes there is prosperity and oasis of stability but in general, it is mostly chaos, even if it seems stable.

People in protesting in 1988 thought communist politburo is here to stay forever and maybe we get concessions, iron curtain fell year or so later.

It does feel more stressful as I have a kid and a house and a mortgage.

And maybe it works out and I remember my greatgrandma who built her her with her husband in late 1920's and the hous survived a world war and two occuppations and her daughter inherited it could sell it and lived off of it for decade in her pension.

And maybe it works out differently and I remember my grandpa where he had to run from his home country and would never see the house his grew up in but died in a nice flat with big family that cared about him.

Everything apart from global termonuclear war or literal paperclip-scenario level AI take-over feels survivable. And those are real risks. Like, that is the reason I celebrate Stanislav Petrov day!

Apart from that ... I am lucky I live in the city where musicians still play live and tickets to small venues are under 10 Eur and people still dance. So I dance. It helped me through my divorce, it helps me keep my current relationship alive, it helped me find community both local and across europe. It was nice to go to a small gig of an unknown bluesband in London and commending the guy who organized that for nice event and he went "Oh, where are you from? Ha, I have friends from there, we danced in Vienna!".
by _vere | 2026-03-04 09:16:56+00:00
They said on Twitter that future devices in the Razr (foldable) and signature line will be supported. The current devices by Motorola do not fulfill their hardware requirements, so no need to buy one yet. This is speculation on my part, but its not unthinkable that non-flagship support could happen eventually, although mid tier SoCs generally don't have the hardware required to support graphene (hardware memory tagging, sufficiently open secure element, etc), so in the medium term, it's unlikely that anything but the flagships will be supported by graphene.
by gorgoiler | 2026-03-04 09:16:58+00:00
I don’t really understand how we are supposed to believe in e2ee in closed proprietary apps. Even if some trusted auditor confirms they have plumbed in libsignal correctly, we have no way of knowing that their rendering code is free of content scanning hooks.

We know the technology exists. Apple had it all polished and ready to go for image scanning. I suppose the only thing in which we can place our faith is that it would be such an enormous scandal to be caught in the act that WhatsApp et al daren’t even try it.

(There is something to be said for e2ee: it protects you against an attack on Meta’s servers. Anyone who gets a shell will have nothing more than random data. Anyone who finds a hard drive in the data centre dumpster will have nothing more than a paperweight.)
by bob1029 | 2026-03-04 09:17:33+00:00
A fun experiment but I wonder how many out there seriously think we could ever completely rid ourselves of the CPU. It seems to be a rising sentiment.

The cost of communicating information through space is dealt with in fundamentally different ways here. On the CPU it is addressed directly. The actual latency is minimized as much as possible, usually by predicting the future in various ways and keeping the spatial extent of each device (core complex) as small as possible. The GPU hides latency with massive parallelism. That's why we can put them across relatively slow networks and still see excellent performance.

Latency hiding cannot deal well in workloads that are branchy and serialized because you can only have one logical thread throughout. The CPU dominates this area because it doesn't cheat. It directly targets the objective. Making efficient, accurate control flow decisions tends to be more valuable than being able to process data in large volumes. It just happens that there are a few exceptions to this rule that are incredibly popular.
by CloakHQ | 2026-03-04 09:18:21+00:00
The test harness point is the one that really sticks for me too. We've been using agentic loops for browser automation work, and the domain has a natural validation signal: either the browser session behaves the way a real user would, or it doesn't. That binary feedback closes the loop really cleanly.

The tricky part in our case is that "behaves correctly" has two layers - functional (did it navigate correctly?) and behavioral (does it look human to detection systems?). Agents are fine with the first layer but have no intuition for the second. Injecting behavioral validation into the loop was the thing that actually made it useful.

The .md scratch pad between sessions is underrated. We ended up formalizing it into a short decisions log - not a summary of what happened, just the non-obvious choices and why. The difference between "we tried X" and "we tried X, it failed because Y, so we use Z instead" is huge for the next session.
by ofershapira | 2026-03-04 09:18:37+00:00
I ran into a related problem. Before syncing my context files I wanted to know which ones are even worth keeping.

Turns out half my .cursor/rules were vague stuff like "follow best practices" that just wasted tokens. And my CLAUDE.md overlapped with AGENTS.md on half the instructions.

So I built a small tool that measures the token cost per file and lints for conflicts/dead weight: https://github.com/ofershap/ai-context-kit

Run `npx ai-context-kit measure` on any project and you get a per-file token breakdown. Helped me cut my context budget by ~40% without losing anything useful.
by tso | 2026-03-04 09:19:16+00:00
The Claude sandbox is so antithetical to good security posture it almost seems intentional[0]. Having both "default read to the entire file system" and "the agent can and _will_ disable the sandbox, without even asking the user[1], in order to complete tasks" would not pass muster in a freshman level security course.

[0] assuming a human with security training was involved in the design/prompting of the sandbox development.

[1] Claude has well used mechanisms for asking the user before taking potentionally dangerous actions. Why it is not part of the "disable my own SANDBOX" branches of code is confusing.
by lcrisci | 2026-03-04 09:19:21+00:00
Location: London, UK
Remote: Preferred but open to hybrid for the right offer

Willing to relocate: No

Technologies: Kubernetes, Istio, GitOps, Go, AWS, GCP, Terraform, CICD, Supply Chain Security ( in-toto Attestations ) and a lot more

Email: laurent [at] crisci-solutions [dot] co [dot] uk

I'm an infrastructure development specialist with 18+ years of experience delivering value from Day 1. I help teams design, build, stabilise and scale modern platforms across AWS, GCP, and Kubernetes with hands-on expertise in DevOps, SRE and Platform Engineering. I also have an extensive knowledge of supply chain security best practices and frameworks such as SLSA and in-toto Attestations.

I can provide various services like audit, discovery, management of new and existing infrastructures, troubleshooting existing issues, helping to establish a European presence for a US team, etc. I can lead teams and projects when required and have done so in the past. I have worked and delivered on all sorts of projects, from being the first member in a startup's platform team and helping it to grow to collaborating with top tier bank, media, gaming, crypto businesses.

Send me an email or book a call to discuss your needs via https://www.crisci-solutions.co.uk/contact/

I'm mainly looking for contracts in the UK/EU/US.
by Markoff | 2026-03-04 09:19:42+00:00
> The small form factor phones simply do not sell.

yeah, clearly nobody buys Samsung Galaxy S series for years, they are like the least popular Android phone model... /s

I'm running Pixel 6a (which was followed bu successors with worse screen:body ratio for years and only now the new Pixels finally matched and slightly improved the ratio, what a progress), but considering all the HW issues (baterries and displays) with Pixels I'd rather avoid it, the worst case will buy as next phone Xiaomi and hopefully somehow unlock it, if there is no suitable Motorola

edit: added HW issues explanation since I am rate limited on comments
by membrshiperfect | 2026-03-04 09:20:40+00:00
I've been saving weekly snapshots of Wikipedia articles on the Iran war, the PLA purges, and the China-Japan crisis. Just clean PDFs with dated filenames. Side by side, the shifts are hard to miss.
The lead section of the Iran article has changed voice three times in four days. A paragraph on civilian casualties appeared, got expanded, then got trimmed to one sentence with a "citation needed" tag. The diplomatic context subsection vanished entirely when military developments took over — not because anyone decided to spin it, but because the article got longer and something had to go.
This isn't conspiracy stuff. It's just how collaborative editing works when hundreds of people with strong feelings edit the same document simultaneously.
The tool I use for snapshots is one I built — Pooch PDF [1], a Chrome extension that strips an article down to clean text and saves a PDF. One click, timestamped filename, optional Google Drive sync. Everything runs client-side. But the workflow is the interesting part, not the tool.
[1] https://chromewebstore.google.com/detail/pooch-pdf/hiikmbddi...
by edarchis | 2026-03-04 09:21:21+00:00
> But critics have said E2EE makes it harder to stop harmful content spreading online, because it means tech firms and law enforcement have no way of viewing any material sent in direct messages.

Like they give a damn. I report accounts that explicitly sell fake credit cards, citing laws that make it illegal and 95% of the time "we checked and there is no violation here, we know that you're not happy but don't give a crap".

So the argument of security is utter bullshit and they just want to snoop.