MurphyA/hacker-news huggingface dataset:
by eddythompson80 | 2026-03-05 19:52:37+00:00
There is nothing stopping Zapier from having a log4shell style vulnerability that exposes you to the same. The only difference is you're treating Zapier as a blackbox that you assume is secure, and any security issue is theirs and theirs alone. While with GHA you share that responsibility with GitHub. GitHub can screw up with a log4shell type exploit in how they handle the initial GHA scheduling too, but also you can have your own vulnerability in which ever arbitrary code you run to handle the trigger.

You can also do a lot more with GHA compared to waiting for Zapier to support your scenario. Plus most people I knew who used Zapier connected it to some Lambda or another webhook where they got the data from there and ran arbitrary code anyway.
by Someone1234 | 2026-03-05 19:52:42+00:00
That's an interesting point regarding context Vs. compaction. If that's viewed as the best strategy, I'd hope we would see more tools around compaction than just "I'll compact what I want, brace yourselves" without warning.

Like, I'd love an optional pre-compaction step, "I need to compact, here is a high level list of my context + size, what should I junk?" Or similar.
by crazygringo | 2026-03-05 19:52:59+00:00
The real thing is, price changes tend to be proportional to tariffs. If the tariff was $20, the consumer got charged $40 more. But not uniformly -- every price is different, there are other non-tariff price changes too, prices can increase before or after tariffs not exactly at the same time, etc.

If companies want to try to refund customers and come up with their own formulas for that, that's great. But usually there isn't some objective right answer that can be imposed externally.
by netsharc | 2026-03-05 19:53:43+00:00
I too would like to escape accountability (for murders, illegal imprisonment and kidnapping of people to foreign countries) by my manager putting me in a different department, and the opposing party thinking "Oh, that person's no longer in that position, that's a win for us!" and journalists being scared parrots instead of being a challenging fifth estate..

Did everybody in that country get RFK Jr's brainworm or something?
by carreraellla | 2026-03-05 19:54:08+00:00
Most AI agents today appear to “remember” things, but the reality is that LLMs themselves are completely stateless. The memory illusion usually comes from external systems:
• conversation history stored in a DB
• vector retrieval (RAG)
• summarization pipelines
• fact extraction services

These layers are often glued together with frameworks and APIs.

I built Mumpix to simplify that stack.

Mumpix is a lightweight memory engine designed specifically for AI agents. It runs on both the frontend and backend, and the goal is to provide a simple persistent memory layer without requiring vector databases, servers, or complex orchestration.

Install it with:

npm i mumpix

Then use it directly:

import Mumpix from "mumpix"

const db = new Mumpix()

db.set("memory^user^name", "Jane")
db.set("memory^preferences^music", "jazz")

console.log(db.get("memory^user^name"))

The core ideas behind the project:
• Structured agent memory using hierarchical keys
• Persistent state across sessions (browser or Node)
• Deterministic reads/writes instead of probabilistic vector search
• Portable memory snapshots that can be exported or replayed
• No infrastructure required to get started

It’s designed to behave more like SQLite for AI memory than a typical AI platform.

Some things it enables:
• agents that remember user preferences locally
• deterministic state tracking for agent workflows
• offline AI apps with persistent memory
• explainable responses (tracking which keys were read)

The core engine is intentionally small and dependency-free so it can run anywhere.

As of v1.16, Mumpix works across the full stack:
• Browser (IndexedDB persistence)
• Node.js
• optional sync layers

I’d love feedback from people building agents or local AI systems.
Show HN: Argmin AI, system level LLM cost optimization for agents and RAG
by konyrevdmitriy | 2026-03-05 19:54:20+00:00
Hey, HN community!

We've built Argmin AI after shipping LLM features where the demo worked, then the bill and latency got unpredictable in production. Prompts expanded, context grew, retrieval got noisy, retries appeared, and agent workflows added loops.

Argmin AI optimizes LLM-related expenses as a system:

1. prompt and context efficiency
2. model selection and routing
3. RAG inefficiencies and caching opportunities
4. agent workflows (tool calls, retries, loop control)

Changes are validated with evals and guardrails (tests, gates, judges), tailored to your quality definition and goals.

Before paying for optimization work, we start with a structured assessment: we map the top cost drivers in your pipeline and estimate savings, so you can align internally on where to focus.

I would love feedback from teams running LLMs in prod: what is hardest for you today, cost attribution per workflow, safe routing, or eval coverage?

P.S. If you are not sure whether your setup has room for optimization, we built a 3 minute cost calculator based on published industry research and pricing benchmarks: https://app.argminai.com/signup/cost-calculator
by simon_luv_pho | 2026-03-05 19:54:34+00:00
Everything happens at runtime, on the HTML level.

It uses a similiar process as `browser-use` but all in the web page. A script parses the live HTML, strips it down to its semantic essentials (HTML dehydration), and indexes every interactive element. That snapshot goes to the LLM, which returns actions referencing elements by index. The agent then simulates mouse/keyboard events on those elements via JS.

This works best on pages with proper semantic HTML and accessibility markup. You can test it right now on any page using the bookmarklet on the homepage (unless that page CSP blocks script injection of course).
by eblume | 2026-03-05 19:54:45+00:00
Correct. Not sure about a sql archive, but the kiwix ZIM archive of the top 1M English articles including (downsized but not minimized) images is 43GiB: https://download.kiwix.org/zim/wikipedia/

And the entire English wikipedia with no images is, interestingly, also 43GiB.
by mksglu | 2026-03-05 19:55:05+00:00
Six days ago I posted a write-up on Hacker News explaining how Context Mode reduces Claude Code's context consumption by 98%. I expected a handful of comments. I got 565 points, 107 comments, and the kind of feedback that makes you stay up until 4 AM shipping features.

What's new:

- Five platform adapters: Claude Code, Gemini CLI, VS Code Copilot, OpenCode, Codex CLI
- Session Continuity: survives context compactions, restores state automatically (~3h sessions vs ~30 min)
- ctx_batch_execute: one call replaces 30+ individual commands
- Three-layer fuzzy search: Porter stemming, trigram substring, Levenshtein
- FTS5 deduplication, background mode, SSL cert auto-detection

Breaking: repo renamed claude-context-mode → context-mode, tools prefixed with ctx_.

Install (Claude Code): /install context-mode
Install (all platforms): npm install -g context-mode

GitHub: https://github.com/mksglu/context-mode
Release notes: https://github.com/mksglu/context-mode/releases/tag/v1.0.0

Four adapters are in beta — PRs welcome. The codebase is designed for Agentic Engineering: point your coding agent at it and let it propose fixes.

Thank you to everyone who commented, starred, and opened issues on the original post. You made this release happen.
by _verandaguy | 2026-03-05 19:55:32+00:00
> Based on the fact user scripts are globally disabled now I'm guessing this was a vector.

Disabled at which level?

Browsers still allow for user scripts via tools like TamperMonkey and GreaseMonkey, and that's not enforceable (and arguably, not even trivially visible) to sites, including Wikipedia.

As I say that out loud, I figure there's a separate ecosystem of Wikipedia-specific user scripts, but arguably the same problem exists.
by spwa4 | 2026-03-05 19:55:53+00:00
Israel/Judaea/Samaria was colonized by Rome, twice (and they were hardly the first, ancient Egypt colonized Israel too). The first time for Romans, by Pompei. Then, where the name comes from. Julius Caesar had to come back after the Jews revolted. So he beat them, again, and what did he do? He asked his court what the most insulting name would be for the Jews' land. Palestine was the answer. He then deported 2/3 of the population, creating the Jewish diaspora.
Palestine back then referred to some ruins, ironically once located in Gaza (long destroyed by muslims), left by pirates that lived there that were famous for getting the choice from Rome. Either stop attacking Roman vessels or be exterminated to the last man, woman, and child. They chose extermination, and to make matters worse, they attacked 3 Roman vessels and killed the child of ... I forgot, but one of the main Senators. Like I said, it's one of the very few places where the Roman chose to exterminate the population.
The name was associated in the Roman Empire with violence, to the point of stupidity. Violence, in the sense of fighting until death, not out of bravery, but out of shear stupidity, or at least until things end very badly for everyone involved. All of this happened 700 years before islam ever existed.
That name stuck, because muslims merely conquered the Roman Empire, they didn't really change things, not even the names. This is why, when Israel became independent, the Jews chose to rename Palestine to Israel. Although when time came for the Soviet Agent Yasser Arafat El-Masri (arabic for "the Wise Egyptian") to choose the name "Palestinians" I doubt adding further insult to Jews by adopting the name Palestine, an attempt to steal the identity of the Jews, and to fake history (because of course, the name "Palestinians" before 1970 refers to Jews)

South Africa was indeed settled by Europeans, the Dutch (the difference with colonizing being when the Dutch arrived, there was nobody there, or at least that's what their books say). The islamic empires colonized as far as Zanzibar, but not quite South Africa. They did organize slave raids into South Africa, in fact fighting Islamic slave raids is why the 2 South African kingdoms (in the mountains) were created.

Vietnam was colonized by Chinese kingdoms at least twice (and abandoned at least twice) before the Europeans arrived.
by illithid0 | 2026-03-05 19:56:09+00:00
From one red teamer to red teamer to another, glad your first assessment went so well and you had a great time. My first physical pentest made me want to never sit in front of a terminal again.

People, as we like to say, are not paid enough to care. At-will employment, company-sponsored healthcare, etc. have employees so focused on their own wellbeing that protecting "the company" is the last thing on their minds, and I can't really blame them. That lady who you barged in on may very well have just been used to micromanaging jerks doing it to her all the time, so she has to seem busy.

Physical security, in my experience, comes down to giving people something to protect which actually benefits them to protect. All the technical controls in the building can fail and one person with enough skin in the game can kill an intrusion attempt in seconds.
by astraljoker | 2026-03-05 19:56:20+00:00
I first built this when I was learning frontend. Just Next.js + Firebase, a basic link shortener with a password. Threw it up and mostly forgot about it.

Surprisingly it kept getting users even though I wasn't touching it. I always wanted to do more with it but never had the time or skill to pull it off.

Then Claude Code came along and everything changed. Over the past few months I added Stripe payments, E2E encrypted chat rooms, GPS sharing, polls, memos, image sharing, audio sharing (9 content types total). Things that would have taken me months I was shipping in days.

It's still the same core idea. You get a short link, set a password and expiry, share it. But now it actually feels like a real product.

Curious if anyone else has had a similar experience reviving old side projects with AI.
by athrowaway3z | 2026-03-05 19:56:29+00:00
They perform at a somewhat equal level on writing single files. But Codex is absolute garbage at theory of self/others. That quickly becomes frustrating.

I can tell claude to spawn a new coding agent, and it will understand what that is, what it should be told, and what it can approximately do.

Codex on the other hand will spawn an agent and then tell it to continue with the work. It knows a coding agent can do work, but doesn't know how you'd use it - or that it won't magically know a plan.

You could add more scaffolding to fix this, but Claude proves you shouldn't have to.

I suspect this is a deeper model "intelligence" difference between the two, but I hope 5.4 will surprise me.
by twitchard | 2026-03-05 19:56:41+00:00
Coreutils gets updates regularly! https://gitweb.git.savannah.gnu.org/gitweb/?p=coreutils.git

Even `ls` gets news flags from time to time.

I think "stopping" is great for software that people want to be stable (like `ls`) but lots of software (web frameworks, SaaS) people start using specifically because they want a stream of updates and they want their software to get better over time.
by jfengel | 2026-03-05 19:56:49+00:00
That was the OP's intent -- it's meant to be sarcastic. That's why "both sides" was in quotes. It's a common form of argument: I can do (very bad thing) because you did (slightly bad thing).

It even has a Wiktionary entry:

https://en.wiktionary.org/wiki/bothsidesism
by dworks | 2026-03-05 19:56:58+00:00
I watched the Macbook Neo launch video yesterday and while the product is not very exciting, the video has great production value and it showed this: People want to pay for marketing.

Not that Apple's only appeal is marketing, Mac laptops certainly have pros over the bottom and mid tier Windows laptops. But having seen that video, and knowing that other have seen it, are aware of Apple and its positioning, makes people feel better while using and owning their devices.

People absolutely want that feeling and they're willing to pay for it.
by alephnerd | 2026-03-05 19:57:12+00:00
FedRAMP and FedRAMP adjacent revenue is non-negotiable for vast swathes of businesses. The designation of "supply chain risk" is viral in nature because no GRC team will dare take such a risk.

Most customers also add BOM requirements in contracts so this will end up falling under those already.

There's a lot of backchanneling going on between Emil and Dario because everyone's in the same circles in the Bay Area tech scene but it's all for naught.
by eykanal | 2026-03-05 19:57:18+00:00
I'm struck by the utilitarian mindset of this essay. What Paul so disparagingly refers to as "brand" can also be referred to as "art". People _want_ art, and will indeed pay good money for it. Said differently, people _value_ art enough to differentiate it from "optimal design", and indeed a subset of people will pay top dollar for a suboptimal but artistic design.

It is possible to view the fact that capitalist markets can turn a desire for art, individuality, and "something special" into a business as a bad thing. I'm not entirely convinced that's particularly interesting, though... it seems just a localized restatement of a generic "capitalism is bad" take.
The Future of Healthcare Will Be Built on Enhanced Data
by BE-Healthmetryx | 2026-03-05 19:57:20+00:00
Traditionally, healthcare relies on sporadic data collected during scheduled clinical visits. However, human physiology is an ongoing process, continuously responding to factors such as environment, activity, stress, pollution, allergens, and disease progression.

We are advancing toward a transformative era characterized by continuous, real-world health monitoring enabled by sophisticated sensors, cloud computing infrastructure, and artificial intelligence. One of the most valuable yet underexploited physiological signals is exhaled breath.

Exhaled breath contains a wealth of biochemical information, including markers of metabolism, inflammation, environmental exposures, physiological stress, and the early stages of various diseases. The primary challenge has not been the value of this signal, but rather the difficulty in capturing and analyzing it consistently, at scale, while maintaining anonymity.

Innovative platforms such as Healthmetryx are addressing these challenges. Healthmetryx gathers real-time, anonymized data from exhaled breath, respiratory vitals (such as SpO₂, CO₂, and breathing patterns), and environmental conditions. This integrated approach generates structured, actionable insights capable of distinguishing between isolated respiratory events and broader trends within specific locations.

These technological advancements have extensive applications, including:

- Population health and public health surveillance
- Occupational safety for first responders and industrial personnel
- Acceleration of clinical research and pharmaceutical development
- Monitoring environmental exposure in the context of climate change

The true potential lies in pattern recognition across large datasets, where continuous physiological information enables the identification of previously undetectable signals. Such capabilities facilitate earlier risk detection, proactive intervention strategies, enhanced understanding of environmental triggers, and improved insights into human performance.

This represents more than incremental progress; it marks a fundamental transition toward proactive healthcare, shifting from reactive symptom management to the early identification and mitigation of health risks.

As biosensor technology, artificial intelligence, and large-scale data systems continue to advance, novel methods for monitoring and interpreting daily physiological signals will redefine medical practice. This evolution is expected to transform.
Consider the question: How soon might continuous, breath-based intelligence become a standard practice in healthcare?
by Animats | 2026-03-05 19:57:48+00:00
Michigan and Texas law differs on when a vehicle must stop when
passing a school bus on the opposite side of a road. The definition
of a divided highway differs between the states.

The location, in Google Maps. [1] There's an island with a pedestrian fence down the middle of the highway.

Texas law: An operator on a highway having separate roadways is not required to stop:
(1) for a school bus that is on a different roadway; or
(2) if on a controlled-access highway, for a school bus that is stopped:
(A) in a loading zone that is a part of or adjacent to the highway; and
(B) where pedestrians are not permitted to cross the roadway.

In Texas, the vehicle has to stop for a school bus in that situation.

But the remote assistance operator was in Michigan. Michigan law is different:

Michigan law: (2) Except where a crosswalk or pedestrian walkway is present, the operator of a vehicle on a highway that has been divided into 2 roadways by leaving a raised intervening space, or by a physical barrier, or clearly indicated dividing sections so constructed as to impede vehicular traffic, is not required to stop upon meeting a school bus that has stopped across the raised intervening space, physical barrier, or dividing section.

In Michigan, the vehicle can keep going in that situation.

Now we can see what happened. Automated system detected school bus. Automated system detected an ambiguous situation and asked for remote assistance. Remote assistance operator gives an answer that would
be valid under Michigan law. Automated vehicle proceeds.

[1] https://www.google.com/maps/place/E+Oltorf+St+%26+Parker+Ln,...

[2] https://www.legislature.mi.gov/Laws/MCL?objectName=MCL-257-6...

[3] https://texas.public.law/statutes/tex._transp._code_section_...
by PaulHoule | 2026-03-05 19:58:26+00:00
Part of it is that Democrats think Republicans are bad and that Republicans think Democrats are bad.

I've been chewing on this a lot:

https://aethermug.com/posts/culture-is-the-mass-synchronizat...

and thinking how "increasing social cohesion" seems entirely out of reach in the US although the fact is that we can't afford to go on the way we are going. It's particularly funny to me that people in Canada, next door, economically almost part of the United States (don't tell the President!) is the country with the lowest level of people saying their countrymen were bad.
by ImPostingOnHN | 2026-03-05 19:58:26+00:00
> Given that direct assassination is still prohibited by EO 11905 / 12036 / 12333

It sounds like you think this means something?

Obviously it doesn't when we're talking about an administration that openly breaks laws, much less EOs, and issues whatever EOs they want saying whatever they want, even in violation of previous EOs. There aren't even any repercussions to the president "violating an EO".

So no, the pedantry here is irrelevant. The two parties are on the same team, working towards the same goal, doing the same things, divvying up the list of targets to strike.
by wpietri | 2026-03-05 19:58:27+00:00
I read that as being his emotional reaction, not something he'd say in an interview context. This being an internet forum and all.

What I think he's sincere about is not wanting to work at a place that builds unnecessary stuff. And if people are asking for answers that require building unnecessary stuff, I think it's a reasonable inference that the place is not right for him.

I think interviewing is always a two-way street. If I got the feel that a place was going to have a lot of over-complicated code for me to deal with, or expected a lot of status-driven deference against actual user and business need, I wouldn't just give an interview-ending tart reply. But I would politely finish out the interview and then write them off unless there were other signals that redeemed the bad interview questions.
by ryandrake | 2026-03-05 19:59:05+00:00
For 2026, I am really interested in seeing whether local models can remain where they are: ~1 year behind the state of the art, to the point where a reasonably quantized November 2026 local model running on a consumer GPU actually performs like Opus 4.5.

I am betting that the days of these AI companies losing money on inference are numbered, and we're going to be much more dependent on local capabilities sooner rather than later. I predict that the equivalent of Claude Max 20x will cost $2000/mo in March of 2027.
by Kiboneu | 2026-03-05 19:59:16+00:00
> I mean, if websites work for you while disabling js and you are fine with it. Then I mean JS is an threat vector somewhat

It's also been torture, I definitely don't prescribe it. :P Like you say, it's a sanity / utility / security tradeoff. I just happen to be willing to trade off sanity for utility and security.

And yes, unfortunately I have to enable JS for some sites -- the default is to leave it disabled. And of course with cloudflare I have to whitelist it specifically for their domains (well, the non analytics domains). But thankfully wikipedia is light and spiffy without the javascript.
by atomicnumber3 | 2026-03-05 19:59:28+00:00
And yet still, while you remain mildly puzzled as you surmise the above, someone more familiar with the area and history standing right beside you will perceive the same sentence with a completely different emotional reaction.

That gap - knowing this is probably fundamentally deeper when perceived by someone else - is what the author is getting at. He can feel that's missing for him. Even if he's not completely left devoid of all comprehension of the passage.
by Ajedi32 | 2026-03-05 19:59:42+00:00
And if they invest in new fabs and the bubble doesn't pop then they make a whole lot of that money they're in business to make.

The incentives here are naturally very well aligned with solving the shortage. If doing nothing is likely to solve the shortage, then they'll do nothing. If increasing supply is likely to solve the shortage, then they'll increase supply. If there's a 50/50 chance of both, then some will increase supply and some will do nothing, and the market will reward whichever group was right and punish the other.