MurphyA/hacker-news huggingface dataset:
by VonTum | 2026-03-09 01:29:56+00:00
I've been building high-bandwidth memory streaming interfaces for HBM on VCK5000 & U280 FPGAs in my own language - "SUS".

The goal is to get consistent synthesis to 450MHz such that I can use a narrower 256-bit instead of a 512-bit interface, while maintaining full bandwidth. I've got it working at an FMax ranging 440-490MHz, though there's still some edge cases I need to hammer out.

https://github.com/pc2/sus-xrt
by adamwong246 | 2026-03-09 01:30:06+00:00
Testeranto - The AI powered BDD test framework for polyglot projects. There is a implementation now in ts, golang, rust, ruby, java and python. Add the language(s) that you need to your project and launch the server. Testeranto will run your BDD tests in docker and produce a set of results and logs. These logs, test results and your code are fed into an LLM, which fixes your tests for you. In essence, you write the tests and the LLM fills in the code.

AM3 - (Allied MasterComputer or Artificial Mind, version 3) - An attempt to make a symbolic AI that approaches the capacities of a LLM. An LLM makes variations on the same code and schedules those variations to play in "games". The results allow the LLM to make further changes.
by ajkjk | 2026-03-09 01:30:17+00:00
true, but that just means that's the problem to solve. probably the ideal architecture isn't possible right now. But I sorta imagine that you could later on take the full transcript of that conversation and expect any LLM to implement more or less the same thing based on it, so that eventually it becomes a full 'spec'.

And maybe there is a way to trim the parts out of it that are not needed... like to automatically produce an initial prompt which is equivalent to the results of a longer session, but is precise enough so as to not need clarification upon reprocessing it. Something like that? I'm not sure if that's something that already exists.
by jsemrau | 2026-03-09 01:30:27+00:00
It's a personal project, but inspired by OpenClaw (which I find way overhyped), I am building an ambient intelligence layer for investment finance including a 3-tiered memory architecture, sensors (for environment scanning), skills, reasoning agents, and a new agentic UI concept only for that purpose.

I wrote about it here: https://jdsemrau.substack.com/p/pair-programming-superbill-w...
by vkaufmann | 2026-03-09 01:30:28+00:00
Neural net CAPTCHA solver. MobileNetV2 + OpenCV. Built for the hell of it.

Takes a reCAPTCHA image grid, splits it into cells, classifies each cell with a MobileNetV2 ImageNet classifier, and tells you which ones match the prompt. Also works live on Playwright pages.

LOL

https://github.com/VincentKaufmann/captcha-solver-ai

Work in progress, its getting way better in the next release
by cyw | 2026-03-09 01:30:29+00:00
I used Rust to build a terminal based IDE for parallel coding cli workflow. It works with Claude Code, Codex and Gemini!

My favorite features are:
- custom layout and drag and drop to change window
- auto resume to last working session on app starting
- notifications
- copy and paste images directly to Claude Code/Codex/Gemini CLI
- file tree with right click to insert file path to the session directly

OH and it works on both Windows and MacOS! Fully open source too!

https://github.com/oso95/Codirigent
by abtinf | 2026-03-09 01:30:34+00:00
Try a few different CrossFit gyms near you; at least one is likely to have a strong social element. CrossFit is the closest thing there is to secular church, and most of the reason people go to church is for the social aspect.

CrossFit has its downsides (much ink has been spilled elsewhere), but the social element makes up for a lot.

You can easily end up doing 5-7 sessions a week there, with a consistent cohort of people that you develop relationships with.

Edit to add: CrossFit classes also add an element of structure to a daily routine that is not work related. This is really important. You don't have to plan anything for the class, other than show and and do the workout. But showing up at social event consistently has an impact all through your day.
by rewgs | 2026-03-09 01:31:07+00:00
PCIe cards would indeed be useless for AI unless Apple supports third-party GPUs, but there are certainly some pro creators that would still prefer to have them. I myself work in large-template film/game scoring and while we all love our Mac Studios, they're usually housed in a Sonnet chassis so that we can continue to use PCIe cards. Had Apple kept them in parity with the Studio w/r/t CPU and RAM, the rack-mount version of the Pro would've been a no-brainer.
by 47282847 | 2026-03-09 01:31:43+00:00
“ As it turned out, there is nothing special about psychopaths when it comes to understanding or feeling empathy with others. ”

https://www.psychologytoday.com/us/blog/fulfillment-at-any-a...

But maybe it is like so often more about the contradictory definitions of “empathy”, and capability vs. willingness.
by paulorlando | 2026-03-09 01:32:54+00:00
Forgive me because I'm maybe reading in too much, but it doesn't seem like you're asking how to be alone. It sounds like you might be asking how to deal with your new situation, which must be very difficult. If that's not out of bounds, one suggestion is to try what's called "rejection therapy." That is, make it a daily goal to go out and get rejected at something. It shifts something mentally and I hope it might be helpful for you.
by llm_nerd | 2026-03-09 01:33:12+00:00
>there's some adaptation layer that handles mapping Linux calls to Windows calls

This was how WSL1 functioned. It used a shim layer, and honestly it was pretty neat for a lot of the basic stuff. It fell apart if you were doing more complex/advanced stuff, however, as there were many missing cases and exceptions.

WSL2 instead uses that utility VM, with a couple of special Microsoft kernel drivers to interact with the host system.
by piotrbednarsalt | 2026-03-09 01:33:24+00:00
Hi HN,

I’ve been exploring the intersection of low-level Linux memory management and LLM architecture. I built a proof-of-concept that allows for persistent, real-time manipulation of a running LLM’s output (like forcing it to say "Pwned" regardless of the prompt) without process injection, ptrace, or restarting the server.

Repo: https://github.com/piotrmaciejbednarski/llm-inference-tamper...

How it works:

By default, llama-server (from llama.cpp) memory-maps the GGUF model file using mmap with the MAP_SHARED flag. This means the process reads weight data directly from the kernel's page cache. If another process modifies the GGUF file on disk, the kernel updates those pages, and the running inference server instantly uses the new weights on the very next token generation.

The Attack Vector:

I target the output.weight tensor (the final projection matrix [hidden_dim, vocab_size]). Since each row corresponds to a single vocabulary token, amplifying a specific row proportionally inflates that token's logit, forcing it to win the softmax sampling.

In models like TinyLlama (Q4_K_M), output.weight is quantized as Q6_K. I wrote a custom parser in Python to find the absolute file offset of this tensor. Instead of dequantizing the weights, the script jumps to the end of the targeted Q6_K blocks and simply multiplies the d field (an fp16 super-block scale) by a specific factor.

The Autoregressive Challenge (The fun part):

If you want to force a multi-token word like "Pwned" (tokens: [349="P", 1233="wn", 287="ed"]), you can't just apply a flat 100x multiplier to all three rows. If you do, the model will output "P P P P".
I had to implement a heuristic progressive multiplier:

- "P" (Moderate factor - e.g., 80x): Needs enough boost to appear out of nowhere in a neutral context.
- "wn" (Highest factor - e.g., 360x): Needs massive amplification to beat the now-dominant "P" token, forcing the model to transition.
- "ed" (Lowest factor - e.g., 60x): After generating "Pwn", the model's autoregressive attention already strongly predicts "ed". Over-amplifying this causes catastrophic repetition loops ("Pwnedededed").

Mitigation:

It's a simple fix for DevOps: mount your model directories as read-only, or run llama-server with the --no-mmap flag (though this increases memory overhead). But in local dev environments or loosely configured Docker containers, this attack is instantly lethal to the model's alignment.

I’d love to hear your thoughts or if anyone has explored similar "zero-permission" file-backed tampering vectors in production ML pipelines!
by BobbyJo | 2026-03-09 01:33:43+00:00
Honestly, it's probably good if platforms disincentivize this. If you know creating a new account is high friction, you are more likely to take care of the account you have, and be a higher quality member.

If you intend your accounts to be thrown away, you will likely behave worse.

*I'm using "you" generically, I don't mean you specifically.
by YesBox | 2026-03-09 01:33:48+00:00
I changed gears and moved into the video games industry at the end of 2021.

I started developing a city builder called Metropolis 1998 [1], but wanted to take the genre in new directions, building on top of what modern games have to offer:

- Watch what's happening inside buildings and design your own (optional)

- Change demand to a per-business level

- Bring the pixel art 3D render aesthetic back from the dead (e.g RollerCoaster Tycoon) [2]

I just updated my Steam page with some recent snapshots from my game. Im really happy with how the game is turning out!

[1] https://store.steampowered.com/app/2287430/Metropolis_1998/

[2] The art in my game is hand drawn though
by hinkley | 2026-03-09 01:34:14+00:00
That is the $65k question and unfortunately I don't have a pat answer for that yet. I probably need to see more types of projects instead of more time on fewer projects which is where I'm at.

But I can give you a partial picture.

You're going to end up with multiple dashboards with duplicate charts on them because you're showing correlation between two charts via proximity. Especially charts that are in the same column in row n±1 or vice versa. You're trying to show whether correlation is likely to be causation or not. Grafana has a setting that can show the crosshairs on all graphs at the same time, but they need to be in the same viewport for the user to see them. Generally, for instance, error rates and request rates are proportional to each other, unless a spike in error rates is being for instance triggered by web crawlers who are now hitting you with 300 req/s each whereas they normally are sending you 50. The difference in the slope of the lines can tell you why an alert fired or that it's about to. So I let previous RCAs inform whether two graphs need to be swapped because we missed a pattern that spanned a viewport. And sometimes after you fix tech debt, the correlation between two charts goes up or way down. So what was best in May not be best come November.

There's a reason my third monitor is in portrait mode, and why that monitor is the first one I see when I come back to my desk after being AFK. I could fit 2 dashboards and group chat all on one monitor. One dashboard showed overall request rate and latency data, the other showed per-node stats like load and memory. That one got a little trickier when we started doing autoscaling. The next most common dashboard which we would check at intervals showed per-service tail latencies versus request rates. You'd check that one every couple of hours, any time there was a weird pattern on the other two, or any time you were fiddling with feature toggles.

From there things balkanized a bit. We had a few dashboards that two or three of us liked and the rest avoided.
by akersten | 2026-03-09 01:34:54+00:00
It's probably a convenience feature. Tons of sites out there that start on www then bounce you to secure2.bank.com then to auth. and now you're on www2.bank.com and for some inexplicable reason need to type your login again.

Actually it's mostly financial institutions that I've seen this happen with. Have to wonder if they all share the same web auth library that runs on the Z mainframe, or there's some arcane page of the SOC2 guide that mandates a minimum of 3 redirects to confuse the man in the middle.
by userbinator | 2026-03-09 01:34:56+00:00
Not the first time something Apple did was slightly phallic --- OS X El Capitan (now 10 years ago!) had a slightly unfortunate slogan:

https://techcrunch.com/2016/02/25/more-to-love-with-every-di...

As an aside, your link leads to an image/webp served with a .jpeg extension. WTF?
by mikeweiss | 2026-03-09 01:36:10+00:00
Uhh ... No. This is absolutely not true for industry leading WAFs like Akamai, Cloudflare, Imperva, or even AWS WAF which monitor for new and known critical vulnerables in the wild and will issue new rules for them in short order.

Just last year we had React2Shell (CVE-2025-55182) which allowed RCE for many apps using React Server Components. Within 24 hours the big WAF providers rolled out rules capable of blocking requests matching the exploit pattern.

Yes a patch was available and patching is always the primary solution for resolving critical vulnerabilities, but WAF can step in as a crucial temporary protection until patching can happen.
by hintymad | 2026-03-09 01:36:24+00:00
> It has no real world model, no ability to learn in any but superficial ways

I also think so, and in the meantime I have to admit a lot of people don't learn deeply either. Take math for example, how many STEM students from elite universities truly understood the definition of limit, let alone calculus beyond simple calculation? Or how many data scientists can really intuitively understand Bayesian statistics? Yet millions of them were doing their job in a kinda fine way with the help of the stackexchange family and now with the help of AI.
by mihijito_ | 2026-03-09 01:37:04+00:00
I’ve been working on an rss, atom, json feed reader app that strives to make it a simple as possible to isolate what articles are meaningful for you.

For now it uses UX patterns to make it easy to remove uninteresting articles and keeps a record of your read and saved articles. All locally of course.

I’d like to make it into something we can share quality content with one another eventually. For now I’m focusing on making it good enough my entourage will want to use it
by achatham | 2026-03-09 01:37:29+00:00
Making my own epub reader with the kitchen sink of features I'd like. It's a speed-reading app first and foremost, using RSVP (rapid serial visual presentation, one word at a time). Also answers questions about the book with an LLM without spoilers, and can create illustrations. I've been reading _Mercy of the Gods_ lately, which has vivid descriptions of a bunch of alien races, but the pictures have done a great job supplementing my imagination. I've read more books in the past month than the last year, but we'll see if I keep it up.

https://github.com/achatham/epub_speedread
by notepad0x90 | 2026-03-09 01:37:56+00:00
I think I am failing at communicating my view. What I am saying is those rights you speak of are invalid. I could use it,redistribute it, profit from it, backdoor it, or print it and make a door stop from it. It is mine. The original author has no say in it.

Perhaps it would help if I mentioned that my objection stems from an overall revulsion at copyright and anti-piracy laws. It is hard for me to object to those and at the same time support the application of those same laws. I either accept the law being used this way by everyone (open source, bigcorp, bigmedia,etc...) or I don't.

Set it free, and if it was meant to be yours, it will come back!

In my opinion, the proper way to solve this is by requiring users agree to a non-distribution, and/or non-commercial use, prior to being allowed to download the open source software. And that agreement is strictly between the person publising it and the person downloading it. If I obtain a copy of it from someone else, I am not bound by the terms of that agreement. Another approach is to actually charge for the open source software for commercial use, yet allow downloading of the software (with a confirmation prompt for non-commercial use prior to download) free of charge. That way, the publisher has a commercial claim, loss of profit, something under tort law against whoever is using their code and profiting from it.

But even then, I don't get in what world a modification, which by definition is new original work that was added to the software, could be a thing the original author have any say over. If publishing software is speech, then that is compelled speech. and you're being coerced into speech, not because you agreed to any terms, but simply because someone put a license term in a file and presumed agreement to those terms, not by the person that obtained a copy from the publisher, but by absolutely anyone who happened to obtain a copy of that software.

My problem if it isn't clear, is that those same laws are used to control what people do with their software and devices in many other contexts. What's good for the goose and all..
by xiaoqiangnk | 2026-03-09 01:38:00+00:00
Hi HN — I'm one of the members of Apache Doris PMC.

This post dives into how different OLAP systems handle real-time updates,
including approaches like Copy-on-Write, Merge-on-Read, and delete bitmap
based designs.

We also discuss some of the tradeoffs between update performance,
query latency, and storage complexity in analytical databases.

Happy to answer questions or discuss the design.
by mcastilho | 2026-03-09 01:38:02+00:00
Yes. In November/December timeframe when Opus 4.5 came out, I realized I was trusting it to write the code. I was doing light reviews. I had tried a few MacOS products that does this orchestration, but I was needing more and they weren't answering my emails.

It was then I realized I had to build ChatML. The first commit was on January 17, so it took about 45 days to get this out, so people can use...

One weekend I closed 120 PR's with on average 10-15 Worktree sessions at any given time. The hardest was to learn how to context-switch in your mind. I built some MacOS Notifications and audible alerts to catch my attention when new plan was proposed in a session, an agent asking questions, etc....

It worked really well for ChatML, since I developed ChatML with ChatML. 750+ Pull Request done 100% by AI.
by diacritical | 2026-03-09 01:38:32+00:00
Some feedback and suggestions, in a somewhat rambling fashion:

I'm using a new account and will likely use one forever, as I don't want lots of posts linked together, nor do I care about points or karma or whatever it's called. My first few comments are always shadowbanned. I also see lots of dead posts for new accounts with "showdead" turned on. A lot of them are normal, useful comments, some are inflammatory or just plain stupid. I haven't seen many comments that seem to be AI generated. Maybe they are and I just don't see it, idk.

Anyway, if a comment passes some basic filter (doesn't post shady links or talk about VIAGRA or 11 INCH PENIS or something spammy), I hope they still show up, even as "dead". On this account I copied 1 dead comment to give it more visibility and I've done it before a few times, too. The comment is still dead, btw (id 47262467). And maybe instead of (shadow)banning new users/posts, just make a separate view for old/established account and another one for all posters.

I would also be glad some solve some CPU- or RAM-intensive task as PoW. If I really had to, I'd pay with Monero or something similar, as long as it's a currency with low fees so a payment equivalent to 25 cents wouldn't incur a big fee. I wouldn't pay more per account (especially when I rotate them), as I've been a lurker for years and only recently started posting, anyway.

Finally, thanks for letting us sign up over Tor. :)
Show HN: Generate App Store screenshots by matching any top app's style
by Bspinky | 2026-03-09 01:38:40+00:00
I got tired of spending hours in Figma every time I needed to update my App Store screenshots. So I built this.

You pick any app on the App Store as a reference, upload your own screenshots, and it generates professional screenshots in that app's style. It extracts the colors, gradients, and layout from the reference app and applies them to yours.

Free for your first generation, then $5/mo for unlimited. There's also an API you can plug into Claude or ChatGPT so your AI assistant can generate and upload screenshots to App Store Connect for you.

Built with Next.js, Supabase, and HTML5 Canvas. Happy to answer questions about the rendering engine or the style analysis.
by ot | 2026-03-09 01:39:11+00:00
> are there eviction techniques to guard against this?

RE2 resets the cache when it reaches a (configurable) size limit. Which I found out the hard way when I had to debug almost-periodic latency spikes in a service I managed, where a very inefficient regex caused linear growth in the Lazy DFA, until it hit the limit, then all threads had to wait for its reset for a few hundred milliseconds, and then it all started again.

I'm not sure if dropping the whole cache is the only feasible mitigation, or some gradual pruning would also be possible.

Either way, if you cannot assume that your cache grows monotonically, synchronization becomes more complicated: the trick mentioned in the other comment about only locking the slow path may not be applicable anymore. RE2 uses RW-locking for this.
by siwatanejo | 2026-03-09 01:40:24+00:00
It's kinda funny that I, being skeptical about coding agents and their potential dangers, was interested to give your project a go because I don't trust AI.

Yet the first thing I find in your README is that to install your tool I need to trust some random server serve me an .sh file that I will execute in my computer (not sure if with sudo... but still).

Come on man, give me a tarball :)

EDIT: PS: before someone gives me the typical "but you could have malware in that tarball too!!!", well, it's easier to inspect what's inside the tarball and compare it to the sources of the repo, maybe also take a look at the CI of the repo to see if the tarball is really generated automatically from the contents of the repo ;)
by neoCrimeLabs | 2026-03-09 01:41:22+00:00
There are a lot of great comments here and I want to echo so many of them and not duplicate them.

There is one thing I'd like to add:

Learning to be happy while alone takes practice - lots of it. It's not easy, but it does get easier.

Learning to enjoy being along was one of the most important moments in my life, and it changed a lot of how I see the world now. I feel like this is up there with learning self-care that works for you - equally important and yet different.
by keithnz | 2026-03-09 01:41:22+00:00
Vibe-coded a YouTrack CLI tool in < 1 hour:

https://github.com/keithn/yt

Also working on a language for embedded bare-metal devices with built-in cooperative multitasking.

A lot of embedded projects introduce an RTOS and then end up inheriting the complexity that comes with it. The idea here is to keep the mental model simple: every `[]` block runs independently and automatically yields after each logical line of code.

There is also an event/messaging system:

- Blocks can be triggered by events: `[>event params ...]`

- Blocks can wait for events internally

- Events can also be injected from interrupts

This makes it easy to model embedded systems as independent state machines while still monitoring device state.

Right now it’s mostly an interpreter written in Rust, but it can also emit C code. I’m still experimenting with syntax.

Example:

module WaterTank {
type Direction = UP|DOWN
let direction = UP
let current = 0

[>open_valve direction |> direction]
[>update level |> current]

[
for 0..30 |> iteration {
when direction {
UP -> !update level=current + 1 |> min(100)
DOWN -> !update level=current - 1 |> max(0)
} ~
%'{iteration} {current}'
}
]

[>update level |> when {
0..10 -> %'shallow'
11..15 -> %'good'
16.. -> %'too much!' then !open_valve direction=DOWN
}
]
}