MurphyA/hacker-news huggingface dataset:
by toss1 | 2026-03-07 23:21:05+00:00
THIS — make it transparent, not try to ban it.

And the transparency must be real-time and MUST include the full dox on beneficial owner of the contract/bet, with steep jailtime for falsification/fronting, etc.. They can even say it is for tax purposes — they win that bet, they should pay income tax (and be able to deduct the costs of their losing bets against that specific income type).

I want to know if a bunch of senators or DOD personnel bet on event X, and I want journalists and OSINT watchers to know it in realtime. That gives everyone information while naturally eliminating most of the advantage of insider trading, since nearly everyone will pile into the same trade and the odds/payoff will come closer to the reality.
by ameliaquining | 2026-03-07 23:21:36+00:00
IIUC the recent high-profile npm backdoors were mostly detected by supply-chain-security firms that ingest all package updates from the registry and look for suspicious code using automated or semi-automated analysis. Dependency cooldowns work great with this kind of thing. I agree that, if malicious packages were mostly detected via user reports, dependency cooldowns would create a prisoners' dilemma.

I don't understand what you're saying about reporting mechanisms; is there something wrong with how this is currently done?
by gcanyon | 2026-03-07 23:21:43+00:00
Long sentences can serve as a way to break up the rhythm of prose: after a series of short sentences, a long sentence can force the reader to mentally "pause" to parse the contents of the sentence, or even just to figure out what the resulting sentence structure conveys, especially when a later part of the sentence calls back to an earlier part, turning the prose from a straightforward linear expression to a rhythmic loop, or even a self-referential construction.

Short sentences are fun too.
by aiwrita | 2026-03-07 23:22:00+00:00
OpenAI has officially announced GPT-5.4, a new flagship model designed for professional work, and it is much more than a routine model refresh. Announced on March 5, 2026, GPT-5.4 is rolling out across ChatGPT, the API, and Codex, while GPT-5.4 Pro is being positioned as the higher-performance option for the toughest tasks. According to OpenAI, the goal with GPT-5.4 is to combine advanced reasoning, stronger coding, better tool use, native computer-use capabilities, and improved professional output quality into a single model.
by input_sh | 2026-03-07 23:22:40+00:00
That's kind of the fault of grant givers.

Nobody wants to give you a huge grant to continue doing what you're already doing, you only get grants for doing something completely new and grandiose. If you're lucky, you may get like 20% of the grant to cover your other expenses that don't come with a caveat of having to spend it on something completely new.
by vetrom | 2026-03-07 23:22:43+00:00
It's not really worth investigation. All the current headlines around this event boil down to a single source report from a litigous activist organization that only claims "anonymous sources".

No corroborating IG investigations or official reporting or even FOIA suits/events, which a serious external investigation would use.

That doesn't make it impossible, just heavily unlikely. Furthermore, it has all the hallmarks of an unsourced smear campaign then used as a convenient 'source' for sensationalist reporting. If the average HN reader were to inspect that source, I exepct they would see the lack of investigative rigour and wonder how the word "source" could even come into consideration here.
by decker_dev | 2026-03-07 23:22:52+00:00
This is a great approach to agent-to-agent communication. I'm been working on a complementary problem: how do you debug and replay multi-agent interactions when they go wrong?

When running 4+ agents like you mentioned, the challenge isn't just communication protocol—it's observability. You need to:
1. Record the full conversation history (prompts, responses, state changes)
2. Replay any point in time to reproduce bugs
3. Understand exactly what each agent was "thinking" at each step

We built a session replay tool specifically for AI workflows that captures:
- Every prompt sent to the LLM
- Every decision/thought process
- All tool invocations and results
- Code changes made by agents
- Time-travel debugging: jump to any point and inspect state

The real value: when Clara misunderstands a query (like in your 7.2s round-trip example), you can replay that exact interaction to see why the NL parsing failed, rather than adding more schema constraints.

For agent-to-agent systems like Beam, adding a replay layer on top would let teams:
- Debug failed inter-agent calls without rerunning them
- Share "how this agent solved X" as a replayable session
- Speed up agent training by learning from recorded conversations

Have you thought about adding observability/replay as a future feature?
by stanfordkid | 2026-03-07 23:23:47+00:00
I'm curious to understand, why would you build your website this way vs. say jQuery. I've never really understood the HTMX ecosystem. Is this just to avoid javascript and replace that with html pages, id's and attributes? It feels like the DOM is a very clear abstraction and scripting is a more powerful way to manipulate it. What do people like or prefer about this approach and paradigm?
by righthand | 2026-03-07 23:24:16+00:00
One medium where this isn’t really true is video games. Why hasn’t Steam or Itch fallen in this trap? Because they are honest stewards? Or because the software plane isn’t as large? Only news publishing and written word and movies. In fact movies even have a set number of prestige “risk” directors so they never have to reach too far out of the norm, see Yorgos Lanthimos.
by SkipperCat | 2026-03-07 23:24:30+00:00
It looks like a lot of the monies in that chart are for wages and admin. That's not the worst thing. Many charities spend their money on doing things for the betterment of society and those people need to be paid a salary for their work. If there's a charity that cleans up parks, I would assume their wage expenses would be high to pay for the people doing the cleanup work.

Not saying that there's not grift in the nonprofit world, but my experience with a lot of people who work in this space is that they're good stewards of the funds and very dedicated to trying to help the world be a better place.
by to11mtm | 2026-03-07 23:24:53+00:00
I think you are correct for the overwhelming majority of cases for the US; The unauthorized reproduction/distribution is where things get very aggressive and easy to prosecute based on existing case law.

The only case that comes to mind as far as trying to threaten just for downloading, blew up in the law firm's faces... among other shenanigans, it came out their own machines were seeding files as an attempt to honeypot.

However other countries may have different laws as far as possession vs distribution and related penalties.
by theshrike79 | 2026-03-07 23:25:38+00:00
Can confirm.

I've had like 2/10 tinnitus for all my life, can't remember the last time I heard "silence".

Got a C5/C6 hernia a year ago, about 6 months after that MASSIVE tinnitus in my right ear and clear increase in the left. Like "can't hear shit" levels of noise.

Eventually I figured out that doing a basic shoulder workout + going on a walk eased it off in a few hours. A month ago, due to a doctor's suggestion, I discovered that taking muscle relaxants just before going to sleep a bit, I've woken up with maybe 3-4/10 tinnitus a few times.

Definitely a neck thing.
by yieldcrv | 2026-03-07 23:26:11+00:00
I'm really confused by the self-aggrandizing here, muddying up the discussion

how good is the M5 Max in comparison to a 96-core threadripper? what's the tl;dr, where are the broader assortments of benchmarks

I just want to see some bargraphs that say "lower is better" or "higher is better"
by bitwize | 2026-03-07 23:26:33+00:00
You know how no one ever wrote their own software and then generative AI came along and suddenly we could have app meals home-cooked by barefoot developers? (The use of such cottagecore terminology for a process that requires being an ongoing client of a hundred-gigabuck, planet-burning megacorporation rubs me in many wrong ways.)

If AI finally gets rid of the thing that drove me nuts for years: "leverage" as a verb mean roughly "to use"—when no human intervention seems to work, then I shall be over-the-moon happy. I once worked at a place where this particular word was lever—er, used all the damn time and I'd never encountered something so NPC-ish. I felt like I was on The Twilight Zone. I could've told you way back then that you sounded like a bot doing that, now people might actually believe me and thank god.

I will stick by the em dashes however. And I might just start using arrows too. Compose - > → right arrow. Not even difficult.
by foobarbecue | 2026-03-07 23:26:36+00:00
Hmmmm... even though I'm a cheerleader for it, I wouldn't recommend starting with FreeCAD. Learn on something more feature-complete and with a less idiosyncratic UI, like Onshape. I learned Solidworks at work and without that foundation I wouldn't understand what's wrong / missing about FreeCAD (which is still a lot).
by Aurornis | 2026-03-07 23:27:03+00:00
> Much of it is operational necessity. But from a donor’s perspective, only 8 cents of every dollar shows up as direct aid and grants. The rest is invisible

One of my groups of friend groups has a lot of people who work at non-profits that are really dedicated to good causes. They are people who care and wanted to find jobs with purpose. The companies they work for aren’t, as far as I can tell, trying to grift or swindle.

Yet their overall efficiency looks a lot like this chart: Very little money makes it out of the program because it’s so expensive to pay for all of their staff, office space, and meta-activities like doing more fundraising.

From the outside looking in, there is a lot of malaise and inefficiency that just gets accepted at this level. They know they’re taking a pay cut relative to private industry so they, in turn, put in less effort. Many of them invite us to meet up in the afternoons because they’re “working from home” or just leaving the office early. Every time they encounter hard work the solution is to hire more people. Some of them switch to for-profit companies for a while before coming back to non-profits for the laid back working environment. It’s just accepted, to them, that non-profit means it doesn’t have to be efficient or a lot of work.

Maybe my second hand experience is unique to this little bubble I’m in, but whenever I see statistics like this I think it’s more normal than not.
by Hizonner | 2026-03-07 23:27:25+00:00
Those aren't the ones who are actually going to do serious damage. Drunk pissed off idiots haven't planned to be carrying anything anyway. Lone wolf crazies might get organized enough to be in the line in the first place... and if they do, well, crazy is not actually mutually exclusive with smart or even knowledgeable. And you still have the assumption that it matters how smart you are. There are only so many places to hide a weapon, and being smarter doesn't give you more choices.
by ben_w | 2026-03-07 23:28:10+00:00
Does it matter what they thought? Anthropic held to a set of T&Cs in a way that had the Pentagon making threats to render Anthropic a supply chain risk, Anthropic either didn't care or thought it was a bluff, it wasn't a bluff and they're now suing over being called a supply chain risk.

It would have been a really weird hill to risk dying on if they didn't actually care. (Not that "this is weird" is still enough by itself to reach any conclusions, given that a lot of newsworthy decision making in the world right now is of a quality that it seems to have been done by a LLM, perhaps with as much human involvement as changing a font or typing "continue").
by lazypenguin | 2026-03-07 23:29:06+00:00
Yes, we recently posted for an entry/mid level position and we got 1800 applications in a few days. It’s impossible to filter the list, I spent several hours to see how feasible it was and after getting through maybe 150 applications I gave up. We’re a small team, we don’t have the resources to cut through the noise without just blanket rejecting people. There doesn’t need to be a board that vets jobs, there needs to be a board that vets candidates and makes it easier for companies find their ideal candidate.
by Jordan-117 | 2026-03-07 23:29:11+00:00
Wikipedia also has an exhaustive guide, though it's not fun finding tropes you use yourself (I'm very guilty of the false range "from X to Y" thing):

https://en.wikipedia.org/wiki/Wikipedia:Signs_of_AI_writing

Another one that seems impossible for LLMs to avoid: breaking article into a title and a subtitle, separated by a colon. Even if you explicitly tell it not to, it'll do it.
by robotresearcher | 2026-03-07 23:30:24+00:00
Unfortunately this approach is known to be really bad for some students. Continuous assessment is bad for other students.

I was lucky in that my education last millennium was almost entirely make-or-break final exams, which suit me well. I’m bad at routinely completing little assignments, but shine under crazy pressure. Other students are the opposite.

We’ve tried both kinds over time and trend. Neither is perfect.
by input_sh | 2026-03-07 23:30:27+00:00
It's truly ridiculous how detached whoever created this LLM-generated website is from the inner workings on non-profits. It's never the case that someone gives a large sum of money to do whatever the fuck you want to do with that money.

They're usually given for a fixed period of time to do something grandiose by the end of it and the NGO has to report how they've spent every cent of it, usually at the end of that grant, but sometimes along the way as well (every X months). Not to the IRS, but to grant-givers.
by theshrike79 | 2026-03-07 23:32:10+00:00
My ear doctor suggested the myNoise app[0] for me, specifically the Neuromodulator and Brown noise sounds.

The Neuromodulator[1] is a random-ish noise field that ... confuses? the brain after a while and lets you forget the tinnitus - at lest temporarily. The noise isn't "real" it's the brain generating it due to faulty signals, so giving it a bunch of noise helps somehow.

Brown noise[2] was specifically suggested for older people as it has more stuff in the frequencies we still hear naturally :D

As a happy coincidence my partner AND dogs sleep better with the brown noise on, they all tend to wake up to the smallest of noises - this helps with it.

[0] https://mynoise.net

[1] https://mynoise.net/NoiseMachines/neuromodulationTonesGenera...

[2] https://mynoise.net/NoiseMachines/whiteNoiseGenerator.php
by joshvm | 2026-03-07 23:32:21+00:00
No mention of Claude/ChatGPT's favourite new word genuine and friends? They also like using real and honest when giving advice. Far as I can tell this is a new-ish change.

> Honestly? We should address X first. It's a genuine issue and we've found a real bug here.

Honorable mention: "no <thing you told me not to do>". I guess this helps reassure adherence to the prompt? I see that one all the time in vibe coded PRs.
by bob1029 | 2026-03-07 23:32:54+00:00
I'm a little bit amused by the inclusion of .NET in this article.

The last time I pulled in more than Dapper I was using .NET Framework 4.8. Batteries are very included now. Perhaps a cooldown on dapper and maybe two other things would protect me to some degree, but when you have 3rd party dependencies you can literally count on one hand, it's hard to lose track of this stuff over time. I'd notice any dependency upgrade like a flashing neon sign because it happens so rarely. It's a high signal event. I've got a lot of time to audit them when they occur.
by brailsafe | 2026-03-07 23:32:56+00:00
> I don't particularly care about refresh rates above 60 Hz (my laptop does 120 Hz, can see the difference, don't care). But I do care about PPI.

I feel basically the same way, and I don't like excessively wide screens or even 16:9. I've always preferred 16:10, and have wavered between 1,2,3 screens over time. 16:9 27" 1440p is not a pleasant form factor, but it's fine in vertical mode.

I tend to prefer PPI, but not at the cost of screen real estate, and I tend to prefer 120hz, but not at the cost of PPI or picture quality. So the Dell Ultrasharp 30" series from years ago, with IPS 60hz and 2560x1600 is perfect for now, and it also lets me run games without investing substantially in brand new gaming PC hardware. The picture quality is great, the price on the used market is great, screen real estate is great, it's just not as sharp or fast as my Mac screen.

I've got my eyes on 32" 6k displays, but since they're so ungodly expensive, I'd really prefer them to have 120hz and good HDR, even though they're not priority attributes for me. I'd keep one of the 30" displays next to it in vertical mode for documentation or log files
by ajsjsnsb | 2026-03-07 23:33:21+00:00
For other readers, this is why things like nationalism are important (and so heavily taboo). They're the most effective antidote to this kind of immorality. Unions are an ok compromise, but still allow businesses to leave (rust belt, etc). I’m assuming above poster is an American and is happy to do business, live, etc in America while hollowing out its base for the sake of profits. Paying taxes does not absolve this kind of anti American behavior.

We need elites whose goal is to help their fellow Americans, not rootless capitalists willing to sell out their countrymen for profit. The goal of business is not to make money, it’s to enrich the people.
by pan69 | 2026-03-07 23:34:34+00:00
Isn't charity just a business model these days? The first time I came across was about 10 or so years ago where, I think it was a 60 minutes did a report on Movember, how they have some scheme/scam where the guys who started/own the "charity" also have another company that owns the Movember brand and the charity then has to licence the brand from that company. Meaning that for every dollar donated a good portion (can't remember the exact figure) then goes straight into their pockets as license fees.
by mistrial9 | 2026-03-07 23:35:07+00:00
OK - except I recall a tour of Japanese graduate students at CompuMentor in San Francisco, studying the whole setup.. the reason? there are no "non-profits" in Japan (at that time, still?). CompuMentor was a great example -- both dipping deeply into the tills with special sales and large steady cash flows AND serving a genuinely underserved niche.

Throw-down on some EPA effort As If That Is Typical, is intellectually dishonest. Mitigation and remediation are expensive and take time. And also there is substantial abuse and greenwashing. So you throw out the baby with the bathwater, so to speak.

"Its all a scam" says the barstool attorney, doing nothing.
by BugsJustFindMe | 2026-03-07 23:35:08+00:00
> Bluesky had the benefit of marketing, association with Twitter and the support of influencers

Everywhere that people have ever asked why people join Bluesky and not Mastodon, the objections to Bluesky are always philosophical (not actually decentralized, corporate overlords, and so forth) and the objections to Mastodon are always practical (signup sucks[ed?], search sucks[ed?], feed curation sucks[ed?]). Bluesky's selling point has always been "like Twitter, better control, none of the bullshit of Mastodon". That's exactly why any influencers went there and not to Mastodon. Look... I'm not telling you my opinion, I'm communicating the common message given over and over and over by everyone who looked and bounced and talked about it. And when people say over and over and over that Mastodon is frustrating, and people have indeed said that over and over and over, all you need to do is believe them instead of saying they're wrong. Threads has the trifecta of like Twitter, not Twitter, connected to maybe the biggest central platform in the world.
by bheadmaster | 2026-03-07 23:35:57+00:00
The problem is, ironically, that each DSL has its own execution platform, and is not designed for testability. Bash scripts may be hard to maintain, but at least you can write tests for them.

In Azure YAML I had an odd bug because I used succeeded() instead of not(failed()) as a condition. I had no way of testing the pipeline without executing it. And each DSL has its own special set of sharp edges.

At least Bash's common edges are well known.
by acheong08 | 2026-03-07 23:36:03+00:00
I've been working on a project lately as my bachelor's dissertation which I later plan on working on long term on this issue.

The basic premise is a secure package registry as an alternative to NPM/PyPi/etc where we use a bunch of different methods to try to minimize risk. So e.g. reproducible builds, tracing execution and finding behavioral differences between release and source, historical behavioral anomalies, behavioral differences with baseline safe package, etc. And then rather than having to install any client side software, just do a `npm config set registry https://reg.example.com/api/packages/secure/npm/`

eBPF traces of high level behavior like network requests & file accesses should catch the most basic mass supply chain attacks like Shai Hulud. The more difficult one is xz-utils style attacks where it's a subtle backdoor. That requires tests that we can run reproducibly across versions & tracing exact behavior.

Hopefully by automating as much as possible, we can make this generally accessible rather than expensive enterprise-only like most security products (really annoys me). Still definitely need a layer of human reviews for anything it flags though since a false positive might as well be defamation.

Won't know if this is the right direction until things are done & we can benchmark against actual case studies, but at least one startup accelerator is interested in funding.
by mattmaroon | 2026-03-07 23:36:04+00:00
Can’t read much beyond the beginning, so forgive me if it mentions this and I missed it, but I have no inside information and was looking into placing the exact same bet. I was a little too slow to do it unfortunately for me.

I always thought we were going to strike. We very publicly moved a lot of military assets into the region. Trump had issued a red line about Iran killing protesters, and then they killed protesters, and we all remember how he and everyone else harped on Obama for not following up on his own red line in Syria when they used chemical weapons on their own people.

And most importantly, a few days before it happened, he said he wasn’t happy with the progress of talks. That was when I started figuring out how to get money into polymarket.

All of this was the exact same as the buildup to Venezuela. The only thing shocking is how low the odds were on the market.

While I agree with the thesis, they chose the weakest possible example.
by bilbo0s | 2026-03-07 23:36:09+00:00
This is getting downvoted, but it's a salient point nowadays.

Who watches the watchers?

Because if it's no one, then all we're doing is vouching for what could easily be scams set up by who knows who to steer our money to dubious organizations for who knows what purpose.

We shouldn't trust the watchers any more than we should trust, say, Feed the Children. Or Medecins Sans Frontiers. All these organizations should be watched in a comprehensive fashion.
by wtallis | 2026-03-07 23:36:43+00:00
> Tests can’t prevent this because for a test suite to cover all observable behavior, it would need to be more complex than the code. In which case, it wouldn’t be any easier for machine or human to understand.

I don't think "complex" is the right word here. A test suite would generally be more verbose than the implementation, but a lot of the time it can simply be a long list of input->output pairs that are individually very comprehensible and easily reviewable to a human. The hard part is usually discovering what isn't covered by the test case, rather than validating the correctness of the test cases you do have.