MurphyA/hacker-news huggingface dataset:
by drykiss | 2026-03-03 22:09:36+00:00
More generally about companies and how they’re organized - Why do we have “benevolent dictator” CxOs and trickle-down ownership and decision making powers? But bottom-up responsibility for faults and mistakes? I feel like it’s high time to have more democratic systems at our workspaces as well. More of a co-op model of working than a pyramid. Doesn’t make sense at all, for example, that the core engineers who built the google search algorithm would be paid 5x (or further) less than a CEO of Google. And then if they leave Google, they immediately stop receiving “royalty” or compensation for their own code that is still being used by Google and will continue to earn it even more money while they’re gone.
by michaelm244 | 2026-03-03 22:09:52+00:00
Comulate | Senior Engineer (3+ YoE) | ONSITE in San Francisco, CA

We're building automation software for the $7T insurance industry, accelerated by AI. Seed stage in terms of headcount (~ 20 people) but Series B in terms of business traction (+ cash-flow positive). We've intentionally stayed under the radar.

- Product has caused customers to literally cry tears of joy

- Experienced eng team from Airbnb / Brex / LiveRamp

- Stack: TS, Postgres, React, GraphQL, and Next.js

Apply here: https://about.comulate.com/careers
by bri3d | 2026-03-03 22:10:01+00:00
I don't think the ancient nature of the exploit chain has much bearing on the origin. I think it points away from the actual 2025 campaigns being USG-attached, but I don't think anyone was suggesting that to start with - the Google report makes it pretty clear that they believe the same code was resold to several parties, either in parallel or sequentially, around this time frame.

I think the notion here is that either:

* There's a shared upstream origin or author between this toolkit and the Operation Triangulation toolkit ahead of the use in Operation Triangulation (ie - someone sold this chain to both the Operation Triangulation authors and a third party). I actually think that the uses of specifically structured code-names internally and the overall structure of the codebase described in the Google writeup make this theory less likely; building an exploit toolkit while using these practices to cosplay as a US-government affiliated engineer would be clever and fun, but it's not something we've really seen before.

* This toolkit originated from (whether it was leaked, compromised, or resold) the same actor who was responsible for Operation Triangulation.
by thesuitonym | 2026-03-03 22:10:13+00:00
A VPN won't help you if your device is compromised. A VPN won't help you if the server is compromised. A VPN won't help you if the VPN is compromised.

I really wish people would understand that VPNs are not magical, unbreakable security. VPNs are barely security at all, and commercial VPNs even less so.
by deaddodo | 2026-03-03 22:10:26+00:00
UTC-3 seems like a weird limit. UTC-2 and UTC-3 are basically just ocean. So the only real places that qualify are Buenos Aires and Coastal Brazil.

Also, not sure what the point of requiring that even is. There are plenty of candidates that would be willing to work those time ranges on the periphery. It's no different than getting an evening/graveyard shift at a domestic company, after all.
by throwaw12 | 2026-03-03 22:10:26+00:00
> made them look for a place to re-settle

re-settle is fine, Palestinians and Jews were living together in those areas for thousands of years.

Massacre, oppression and take over is not, especially when the problem wasn't caused by people living in those areas: Palestinians and Jews.

If anyone owes a land to European Jews, it is a Germany.
Show HN: AI making payments with your regular Visa card, securely. Prava
by davinciind | 2026-03-03 22:10:53+00:00
We're building Payments and Trust layer for AI to make payments on behalf of the users, with their regular card.

We've partnered with Major card networks like Visa and building stablecoin wallets for AI to make payments, anywhere online.

Used by AI assistants, AI stylist apps, Concierge app etc.

Would love to hear any feedbacks.
by zimtzimt | 2026-03-03 22:10:57+00:00
Hey HN,
Like a lot of you I’ve been exporting my Grok conversations for a while and ended up with a giant grok-chats.json that just sits there. So I built What Does Grok Know? — a completely client-side, zero-tracking 3D visualization of your entire chat history.
Live demo (drag & drop your exported JSON, works in any modern browser):
https://grok-brain.vercel.app/
GitHub (MIT open source — Next.js + Three.js, fully forkable):
https://github.com/fabianzimber/what-does-grok-know
What you see:

Interactive 3D “brain” with topic clusters floating in space
Automatic client-side topic clustering + sentiment analysis
Timeline scrubber showing conversation evolution
Memory highlights, cognitive insights, searchable nodes
100 % private — nothing ever leaves your device

Took me way too many evenings to get the force-directed clustering and camera controls right, but the moment you see your own Grok chats turn into a spinning brain is pretty satisfying.
Would genuinely love feedback from the HN crowd:

Does the clustering match how you actually remember your conversations?
Any technical suggestions (clustering algorithm, performance, Three.js tricks)?
What feature would make this instantly useful for you?

Happy to answer questions or merge PRs. Enjoy exploring your own brain!
by karmakurtisaani | 2026-03-03 22:11:19+00:00
> The disruption in gas supply will be very short.

Remember when W declared mission accomplished? That war was so short too.

> The gulf states will be very happy to see the Islamic Republic gone

Would they be happy to see a devastating civil war that gives rise to a successor of ISIS or Taleban? Will they happily accept tens of millions of refugees?

Absolutely nothing good will come from this dumbfuck war. We all will pay the price of it one way or another.
by Dylan16807 | 2026-03-03 22:11:48+00:00
How did the speed of one or two jobs on the EPYC compare to the Ryzen?

And 384 actual cores or 384 hyperthreading cores?

Inference is so memory bandwidth heavy that my expectations are low. An EPYC getting 12 memory channels instead of 2 only goes so far when it has 24x as many cores.
by Robdel12 | 2026-03-03 22:11:55+00:00
I retired my M1 MacBook Air last year, really out of power greed. I wanted to play with local LLMs (lol).

I seriously never had issues with my m1 in my workloads. Dev stuff, docker, etc. editing 30min 4k GoPro videos. I probably would these days with rust dev stacked in there but yeah. Can’t agree more, they’re an amazing value.
by wahern | 2026-03-03 22:12:47+00:00
I don't think there've been many court cases exploring the meaning of "[to] fix the Standard of Weights and Measures", and probably none as it regards time. And in the modern era the Commerce Power would probably be sufficient on its own. SCOTUS has suggested that under exiting precedent Congress would have the power to grant copyrights and patents under the Commerce Clause, and so the Copyright and Patent clauses today act more like restrictions on Congressional power.

But I don't see a problem relating time zones to measurement. Part of the authority to standardize measurement is the ability to dictate the manner and means of determining a quantitative value. Under the Weights and Measures clause I think Congress can regulate things like scales, including their precision and accuracy, at least in so far as they claim to provide a measurement of a Federally standardized unit. You might intuitively think the only reasonable end to such power is using it to improve and mandate ever greater precision and accuracy. But sometimes too much precision and accuracy is a bad thing--it can create transactional friction. Case in point, when 12PM noon varied between every town it become increasingly problematic as the speed of long-distance transportation improved, i.e. the rail roads. So the solution was to mandate worse accuracy.

Relatedly, there's a whole separate question of what time means. Most HN readers understand time in the scientific sense, and think of time in the sense of the SI second. But civil time used for general daily life has a slightly more nuanced meaning. That said, UTC/TAI time is very much like time zones in the sense of fudging accuracy. Modern clocks and gravimeter, even the kind regular people can buy for a few hundred or thousand dollars, are precise enough to be able to distinguish local time dilation. So the time passing in your living room is actually different from UTC/TAI. But think of how complex and, for the most part, useless it would be to try to "solve" that discrepancy by trying to integrate that reality in the general definition of civil time.

Also, AFAIU the authority to standardize measurement, and time specifically, operates more as a prohibition on states imposing their own mandates. See, generally, the Legal Tender Cases for the push and pull between various powers allocated between the federal government and the states.
by mjbonanno | 2026-03-03 22:12:56+00:00
@xing_horizon Thanks! I really appreciate the feedback. You're spot on that downstream agents need clear signals to decide whether to trust, refresh, or ignore a recalled memory.

Right now `Activate()` already returns:
- Bayesian confidence per engram
- Full mathematical "Why" explanation (the 6-phase pipeline with exact contributions from ACT-R temporal decay, Hebbian strength, content match, etc.)
- `last_access` timestamp + access frequency (which directly feeds the decay calculation)

This already gives a solid freshness signal via the temporal weighting. Provenance (original source + creation context) is tracked internally but not yet exposed as clean first-class fields in the response... excellent callout, and that's jumping up the roadmap.

Would love to hear what specific provenance/freshness fields have worked best in the multi-agent systems you've worked with.
by slopinthebag | 2026-03-03 22:12:58+00:00
An unintelligent device can accurately imitate the action of intelligent beings within a given scope, in the same way an actor can accurately imitate the action of a fictional character in a given scope (the stage or camera) without actually being that character.

If the idea is that something cannot accurately replicate the entirety of intelligence without being intelligent itself, then perhaps. But that isn't really what people talk about with LLMs given their obvious limitations.
by thelittlenag | 2026-03-03 22:13:07+00:00
I don't really like this article. There isn't anything particularly noteworthy to noticing that some computations have outcomes that allow some form of recovery, and other outcomes do not.

But there are some obvious follow up questions that I do think need better answers:

Why is recovery made so hard in so many languages?

Error recovery really feels like an afterthought. Sometimes that's acceptable, what with "scripting" languages, but the poor ergonomics and design of recovery systems is just a baffling omission. We deserve better options for this type of control flow.

Also, why do so many languages make it so hard to enumerate the possible outcomes of a computation?

Java tried to ensure every method would have in its signature how it could either succeed or fail. That went so poorly we simply put everything under RuntimeException and gave up. Yet resilient production grade software still needs to know how things can fail, and which failures indicate a recoverable situation vs a process crash+restart.

Languages seem to want to treat all failures as categorically similar, yet they clearly are not. Recovery/retry, logging, and accumulation all appear in the code paths production code needs to express when errors occur.

Following programming language development the only major advancements I've noticed myself have been the push to put more of the outcomes into the values of a computation and then further use a type system to constrain those values. That has helped with the enumeration aspect, leaving exceptions to mainly just crash a system.

The other advancement has been in Algebraic Effects. I feel like this is the first real advancement I've observed. Yet this feature is decried as too academic and/or complex. Yes, error handling is complex and writing crappy software is easy.

Maybe AI will help us get past the crabs at the bottom of the bucket called error handling.
by dangus | 2026-03-03 22:13:11+00:00
Literally the moment you buy a Mac. Apple hardware comes with 3 month trials of various subscriptions, and you get a notification about it. They try to get you to sign up in hopes you’ll forget to cancel.

When I bought my iPhone 17 the sales associate even tried to pitch signing up for the trial in person as he guided me through the purchase process.

When you cancel the trial it ends it immediately instead of ending it at the end of your trial period, a dark pattern designed to encourage you to forget to end your trial.

Apple devices also nag you about buying AppleCare in the system preferences.

I’ve never been hounded about my Microsoft account. Be specific. When does this happen? Yes, you need one to set up Windows 11 (just like a Mac and especially iOS are basically useless without an Apple account anyway), but after that I’ve never been hounded around anything related to it.

Never had problems figuring out how to open stuff in Windows. No idea what you’re saying.

Most of these extreme claims about Windows seem to come from people who don’t even use the OS regularly and have forgotten about the ways in which macOS does many of the same commercial OS practices.
by rvz | 2026-03-03 22:13:30+00:00
> I cannot be alone in feeling that titles (within "tech" in particular) are almost completely arbitrary? What constitutes a "senior", "lead", "principal" and "staff" X, respectively, has so much overlap that it really depends on the organisation.

All the responses here won't admit that it is entirely made up, and designed to be built around a structured hierarchy which rule followers and obedient servents to the system to get closer to the $$$ printer.

It takes a lot of back-stabbing, office politics, credit stealing and dishonesty to get to "the top", which is what the replies won't tell you.

> I have recently interviewed for a number of roles with titles like CTO, engineering manager, tech lead etc and there is so much overlap that they seem to be one and the same. Have worked at companies on three continents, in organisations ranging from 6 people to 10k+, so have seen a few titles.

Here is a case study, would you interview at Meta today and work under someone far younger than you and has a more 'senior" role than you? You do understand that the "title" was made up and "created" for a particular position?

Heck, you could even build your own startup and give yourself that title if you wanted to. But the majority here will not and will work for companies like Meta under EMs that have no idea what they are doing.

Therefore it is all made up. With some "staff", "leads" and "principals" are making it up as they go along and coasting as the low rankers hold the fort as the ship sinks.
by dcminter | 2026-03-03 22:13:31+00:00
I hadn't read that page, but now I do I note that it says:

"The term blob was first used in database management systems to describe a collection of binary data stored as a single entity."

So I guess I'm not any clearer on this point.

edit: If I had to bet on it then I'd put money on the theory that "blob" became "BLOB" to sound more technical though...
by simoncion | 2026-03-03 22:13:53+00:00
Yep. With a page title containing a date three days from now

OpenWrt 25.12.0 - Stable Release - 6. March 2026

as well as a section right at the top with the header "Please test this version" and body text that reads

This is not the final version, this is a test version. Please report problems and bugs in our issue tracker.
by cmxch | 2026-03-03 22:14:20+00:00
Aside from the memory cost being exorbitant, 4th/5th gen ES CPUs aren’t horribly expensive for the core count you get. 8480s and 8592s have been quite accessible.

Stuffed an 8480+ ES with 192gb of memory across 8 channels and it’s actually not too bad.
by rbanffy | 2026-03-03 22:14:40+00:00
> Nowadays most PCs feel like a random terminal

It's a fun perception. For the longest time, all the "serious" computers were used through networks and terminals and didn't even come with any ability to connect a monitor or a keyboard (although a serial terminal would work as the system console). I used to joke (usually looking at Unisys Windows-based big servers), if the computer had VGA and PS/2 ports, it wasn't a computer, but a toy. Those Unisys servers weren't toys, but you could run Pinball and Minesweeper directly on them, which kind of said otherwise.

I think we got used to such levels of platform bloat that we don't care if the UI toolkit these days is bigger than the entire operating system that runs 95% of the world's payment transactions.
by mikepurvis | 2026-03-03 22:14:51+00:00
I've noticed recently indie (non-franchise) merchants being much more brazen about charging extra fees for accepting a credit card payment. This includes counters at my local farmer's market, two local cafes and a sushi restaurant, and my city's public electrical utility.

All of them are happy to receive cash or interac (Canadian debit infrastructure) or even e-transfers in some cases (Canadian venmo). But they'll say an extra $1-2 charge if you want to pay by credit card.

Maybe I'm just remembering badly, but I don't remember encountering this twenty years ago; back then the rules were clear that you either didn't accept credit payments, or you did and it was the same price as cash.
by AlotOfReading | 2026-03-03 22:17:36+00:00
Surely you're interested in vector graphics for a reason? Maybe you think it's superior to raster graphics because X, Y, and Z. Yet you look around and see that society overwhelmingly prefers raster. So you write neat programs that clearly demonstrate how superior vector graphics are. You help others with their problems by reaching into your toolkit of vector graphics knowledge and show them the light. You submit upstream patches to improve vector support. Etc.

What's the fundamental difference between this something more obviously political like advocating for privacy by building platforms to track bills, or submit letters to elected officials? Seems to me that the main difference is whether others are likely to be offended by your views and/or actions.

In other words, politics is fine, just don't be a dick. This is the rule many tech spaces enforce, HN included. It's challenging to scale this to large communities because the scope of what might be offensive expands, but that's a very different discussion.
by khazhoux | 2026-03-03 22:17:55+00:00
No offense intended, but that is an ignorant take. The law of the land in the U.S. was that one human could literally own another human being (with all the implications of property ownership, including disposing of it and abusing it at your leisure). How such a despicable mindset took hold and was allowed to go on for so long, is beyond modern comprehension.

You mentioned many other injustices but none of those are "slavery but just different with slightly more rights."
by rbanffy | 2026-03-03 22:17:56+00:00
This architecture trick was often used for precisely this - finding bugs in the program that would work in one architecture and fail in another. A very common class of issues like these was about endianness, and PowerPC was very handy because it could boot as both high and low-endian modes (I think I remember different versions of Linux for each mode, but I'm no longer sure).
by jolmg | 2026-03-03 22:18:14+00:00
SCP protocol is fine and convenient as long as people understand that the remote file arguments are server-side shell code, and the consequences that implies.

You get the benefit of being able to e.g. get your last download off your desktop to your laptop like this:

scp -TO desktop:'downloads/*(oc[1])' .

or this if you're on bash:

scp -TO desktop:'$(ls -t downloads/* | head -1)' .

or pull a file from a very nested project dir for which you have setup dynamic directories (or shell variables if you're on bash):

scp -TO desktop:'~foo/config/database.yml' config/

scp -TO desktop:'$FOO_DIR/config/database.yml' config/

Just don't pull files from a SCP server that may be malicious. Use on trusted servers. If you do the following on your home dir:

scp -TOr malicious:foo/ .

That may overwrite .ssh/authorized_keys, .zshrc, etc. because `foo/` is server-side shell code. The client can't say that `.zshrc` resulting from the evaluation of `foo/` doesn't make sense, because it might in the remote shell language.

> If you need something that SFTP cannot do, then use tar on both sides.

No reason to make things inconvenient between personal, trusted computers, just because there may be malicious servers out there where one has no reason to SCP.

Something else to note is that `ssh malicious 'tar c foo/' | tar x` faces basically the exact same problem. The server can be malicious and return .ssh/authorized_keys, .zshrc, etc. in the archive for `tar x` to overwrite locally basically exactly the same way.

I think this whole problem with SCP just stems from not having properly documented this aspect in the manpage, so people expected it to just take filepaths.
by dfxm12 | 2026-03-03 22:18:16+00:00
Defense contractors, the oil companies who get to rebuild, private security, etc. You can do a web search for who profited from the Iraq war. It's mostly all the same. This war also has a religious component to it, as a US combat unit commander has said "the Iran war is part of God’s plan and that Pres. Donald Trump was anointed by Jesus to light the signal fire in Iran to cause Armageddon and mark his return to Earth": https://jonathanlarsen.substack.com/p/us-troops-were-told-ir...