MurphyA/hacker-news huggingface dataset:
by shagie | 2026-03-05 22:51:33+00:00
> All because it was getting cold outside and he needed a place to sleep. And he also had a toothache that had been bothering him for weeks. So he hoped to see a doctor while he was in county jail.

https://www.wmtv15news.com/content/news/MFD-Shed-fire-at-aba...

A man committed arson because he said he wanted to go back to prison and learn a trade this time.

...

The suspect said he thought he had done enough to stay locked up earlier this week when he was arrested Monday for stealing $10,000 worth of property and a SUV from family members. Tuesday he was released from the Dane County Jail. He said to an officer that threw him for a loop, and he didn’t know what to do. The officers asked the man about another piece of paper found at the shed which was a handwritten bank robbery note. The suspect said that was plan B in case starting the fire didn’t work. He didn’t want to do that because he didn’t want to scare or hurt anyone. He figured igniting an abandoned shed should cause no significant hardship.

While I can't find it anymore, the police report for it was written in a much more literary style than the typical "notes and facts".
by hinkley | 2026-03-05 22:52:13+00:00
Every so often when I'm doing refactoring work and my list of worries has decreased to the point I can start thinking of new things to worry about, I worry about how as we reduce the accidental complexity of code and condense the critical bytes of the working memory tighter and tighter, how we are leaning very hard on very few bytes and hoping none of them ever bitflip.

I wonder sometimes if we shouldn't be doing like NASA does and triple-storing values and comparing the calculations to see if they get the same results.
Show HN: Fitopoly – a fitness app that turns workouts into territory conquest
by 63labs | 2026-03-05 22:52:16+00:00
I built Fitopoly, a mobile app where workouts capture territory on a world map.

Running, walking, cycling, and gym workouts generate “hex captures”, gradually expanding your controlled territory.

The idea was to apply game design mechanics to fitness motivation, making progress visual and competitive.

Tech stack:

- Flutter (iOS + Android)
- server API
- geospatial gameplay logic

Curious to hear feedback from the HN community.
by quickthrowman | 2026-03-05 22:52:36+00:00
> It's not a given they passed it on,

Actually, it is a given. Nobody ate tariffs, everyone passed them on.

That’s how capitalism works, you sum up the costs of production and add margin, unless you’re a VC backed company trying to take over a market by selling dollars for a quarter.

Nobody was trying to corner a market by eating tariffs and blowing their margins away, everyone passed them down to the ultimate consumer of the tariffed product. Take a look at the record profits that publicly traded companies are putting up, they’re the only ones that could potentially eat the tariffs and they obviously did not do so, which means smaller businesses definitely didn’t eat the tariffs either.

> and if it was then in many cases it was spread out

I can virtually guarantee that the final consumer of a tariffed product paid for the entire tariff. Like I said, nobody gains anything from absorbing tariffs. It’s bad business.
Show HN: Bus Core – a local-first ERP for small manufacturing shops
by True-Good-Craft | 2026-03-05 22:52:37+00:00
I built BUS Core, a local-first ERP aimed at small manufacturing shops and makers.

It handles inventory, vendors, manufacturing runs, and costing.

Everything runs locally:
- no accounts
- no telemetry
- no SaaS dependency

The goal was to make something usable for very small shops that outgrow spreadsheets but don't fit traditional ERP systems.

Tech stack is intentionally simple:
Python backend + SQLite + local web UI.

Project started as an experiment in building software using LLMs with a strict Source-of-Truth + smoke test loop.

Repo:
https://buscore.ca/
https://github.com/True-Good-Craft/TGC-BUS-Core

Curious to hear from anyone running small production operations — what breaks first as you scale past spreadsheets?
by SchemaLoad | 2026-03-05 22:53:14+00:00
TPM is probably the best solution here. The key can be automatically fetched on reboot unless the boot order is changed or the drive is put in another computer.

Realistically for a home server what you are worried about is someone breaking in and selling your drives on Facebook marketplace rather than the FBI raiding your nextcloud server. So TPM automated unlock is perfectly sufficient.
by mojomark | 2026-03-05 22:53:19+00:00
This article doesn't address the title question for me. It starts off by implying some insight into whether or not our consciousness persists or simply dissolves into nothingness, but concludes with the same old trope about our bodies matter and energy being recycled into the universe. Our matter and energy are not our consciousness, the arrangement of our matter and energy is most likely our consciousness.

"I" was perfectly fine before I was born, and therefore I'm very certain "I" will be perfectly fine after I die. That's comforting to me when I periodically have an existential crisis.
by i_think_so | 2026-03-05 22:53:21+00:00
There was a story, I think back in the '60s or '70s, about some cantankerous old 1-star general who used to personally conduct unscheduled inspections. One day he requisitioned a deuce-and-a-half (one of those Army trucks with two axles in the back and a green canvas covering for the bed, like you've seen in the movies) and just crashes it right through the front gate at some base.

The private who was manning the guard post at the gate came running along behind, probably worried that somebody had been hurt in the crash. The general hops out of the cab and unloads on the poor kid with both barrels of choice insults about the private's parentage, IQ, social standing and hygiene, finishing it off with "and why the hell didn't you shoot me?!"

According to legend, that was what the private was punished for -- dereliction of duty, failing to shoot the threat to base security.

(Obviously, this story is most likely complete BS.)
by jghub | 2026-03-05 22:53:25+00:00
To clarify the matching: sd uses AWK-based regex matching against the full logged
pathname ($0 ~ pattern).

It does not use "fuzzy" sub-sequence matching (pooling 't', 'a', and 's' from
different path segments). For .../client-a/src, you wouldn't use 'sd tas', but
rather 'sd t-a' or 'sd a/src'.|

'sd "cl.*src"'

would also be a valid jump.

Regarding CTRL-R:

* Filtering Noise: CTRL-R searches raw, chronological history. sd builds a scored
directory stack from your history. You are querying a ranked index of
destinations, not a linear tape of commands. This allows jumping to a directory
visited 200 actions ago without scrolling through history with CTRL-R.

* Ranking Logic: CTRL-R is strictly chronological. sd uses a power-law "aging"
model. If client-a is a daily driver and client-b was a one-off visit, sd
correctly prioritizes client-a for a 'src' query, even if it wasn't the absolute
last place visited.

* Spatial Cache: I don't work on 100 projects at once, but I do touch a "long
tail" of ~100 distinct paths over several weeks/months (logs, build dirs, repos).
sd acts as a cache for these nesting depths so I don't have to recall them.

Ultimately, you just provide a modestly specific pattern — 'sd t-a/s' or 'sd src'
-- and the ranking handles the disambiguation.
by kay_o | 2026-03-05 22:55:44+00:00
Is theyre primary revenue source not ads from weirdly sexist / stereotype "joke" tiktoks ? I dont know anyone hat has ever used it before outside of these and my cohort is their target demographic -- every one person I know only knows them from the tiktoks and not their product

0: https://www.youtube.com/shorts/3NKW1ISiCKk

1: https://www.youtube.com/shorts/F5k8oD8dTpw
by john_strinlai | 2026-03-05 22:55:56+00:00
>I think it's plausible that you could (with time and effort) design something that isn't the same as classic WoW while keeping the players happy.

blizzard tried to do this with the retail version for literal years while people kept saying "please, i just want classic wow."

now, if you mean that it is plausible that those same people would play a different non-wow mmorpg that shared some aspects of classic wow, sure. but that is drifting pretty far from my original point.
by verdverm | 2026-03-05 22:56:16+00:00
my bad too :]

You might like this painting called "Ukrainian sailboat in a Russian storm" by an artist in Kharkiv

https://photos.app.goo.gl/DTh4oRKPbdgpthEJ8

I bought it at auction, proceeds when to quad drones (covered 3 at the time)
by seertaak | 2026-03-05 22:56:34+00:00
That was a thought provoking read.

From a language design viewpoint, I wonder whether the current crop of async implementations - eg 'def' -> 'async def', f(x) -> 'await f(x)', 'return 1' -> 'async return 1' are making a mistake analogous to the decades-long opposition to type deduction, ostensibly for "clarity".

Let me phrase this as a question to prevent "social" arguments against a homogenous syntax for coroutine: if coroutines were await-invoked using the same syntax as regular functions were invoked, would that create some unresolvable ambiguity for an important use-case (and similarly for the other syntactic forms)?

My gut feeling is that the answer is no. Consider what a C++ compiler does with an awaitable function (this may be specific to stackless coroutines): they are transformed into state machines, each state lowers into something akin to a regular function, local variables accessed across states are stored in a dynamic environment. Ok, but then isn't a regular function simply a coroutine whose lowered state machine has a single state? And that being so, why distinguish syntactically between the two?

It seems silly, to my mind, to do all this "work" (in the compiler) to create an abstraction which allows the programmer to forget whether 'f(x)' returns synchronously or asynchronously, only to introduce a syntax which requires them to know or look up which of the two it is. What does it matter which of the two it is, if the whole point of the exercise was to turn callback spaghetti into linear code (and allow to leverage automatic variable lifetimes aka RAII)?
by WaitWaitWha | 2026-03-05 22:56:35+00:00
Love it.

Since I am a visual learner, here is a sequence diagram that helped me follow it a bit cleaner. (yes, I used the gAI dark magic)

```

sequenceDiagram
participant HW as Hardware
participant Kernel as Linux Kernel<br>(USB / driver core / kobject)
participant NetlinkK as Netlink<br>(NETLINK_KOBJECT_UEVENT<br>group 1 = MONITOR_GROUP_KERNEL)
participant Udevd as udevd<br>(systemd-udevd)
participant NetlinkU as Netlink<br>(NETLINK_KOBJECT_UEVENT<br>group 2 = MONITOR_GROUP_UDEV)
participant App as Userspace Application<br>(libudev or direct netlink listener)
participant Sysd as systemd<br>(device units, services)
participant DevFS as /dev<br>(device nodes + symlinks)

HW->>Kernel: Physical insertion (USB plug-in)

Kernel->>Kernel: Detect change via bus/driver<br>(e.g. xhci-hcd → usbcore)

Kernel->>Kernel: Register new device in device model<br>(kobject_add / device_add)

Kernel->>NetlinkK: kobject_uevent_env(ACTION=add, ...)<br>multicast to group 1<br>(raw uevent: null-terminated key=value strings)

NetlinkK->>Udevd: Receive kernel uevent<br>(ACTION=add, SUBSYSTEM=..., DEVPATH=..., etc.)

Note over Udevd: udevd parses uevent

Udevd->>Udevd: Match & apply udev rules<br>(/lib/udev/rules.d/, /etc/udev/rules.d/)

Udevd->>Udevd: Perform actions:<br>• Load firmware<br>• usb_modeswitch<br>• Set permissions<br>• Run programs/scripts

Udevd->>Udevd: Create device node(s)<br>e.g. /dev/bus/usb/001/002

Udevd->>Udevd: Create symlinks<br>e.g. /dev/ttyACM0, /dev/disk/by-id/...

alt Optional: triggers systemd .device unit
Udevd->>Sysd: Triggers / influences device unit activation
Sysd->>Sysd: May start dependent services / scopes
end

Udevd->>Udevd: Build enhanced udev packet:<br>• libudev header ("libudev\0", magic 0xfeedcafe, ...)<br>• MurmurHash2 subsystem/devtype<br>• 64-bit tag Bloom filter<br>• Original + added properties

Udevd->>NetlinkU: Broadcast processed event<br>multicast to group 2<br>(binary format with header + properties)

NetlinkU->>App: Receive udev event packet<br>(via libudev_monitor or raw netlink socket)

App->>App: Parse header, validate magic/credentials<br>Extract properties

App->>App: React to device<br>(open /dev/..., query sysfs, etc.)

Note over DevFS: Device now usable via stable names / permissions

```
by coldtea | 2026-03-05 22:57:35+00:00
To remind those not familiar with the an old standard practice, for a remake of a product X to be "clean room" and avoid copyright issues, traditionally in the industry developers working it were required to never have seen X's source code.

My argument is that while you write that it was "only pointed" to the API, an LLM, who can recite over 90% of a book in its training set verbatim, would also have trained on the original code (and can have it in "mind").

So "pointing it to the API" doesn't mean it ONLY used the API in its implementation. Could very well have used whatever internal knowledge of the behavior and architecture and choices of the original code - regardless of if it recited or translated the original verbatim or not.

So when considering this, "AI was just pointed at the API" is a weaker claim than it appears to be.
by tlkGah | 2026-03-05 22:58:16+00:00
Apparently this was written to wrap the AI promotion:

"The more subtle lesson is that fields have natural rhythms that are beyond the power of individuals to resist. Fields have golden ages and not so golden ages, and you're much more likely to do good work in a field that's on the way up."

Cigarettes were resisted, leaded fuel was resisted, nuclear energy was resisted. AI is already being resisted and the resistance will grow.
Show HN: TrueLock – secure messages as encrypted files with unlock rules
by dkatsura | 2026-03-05 22:58:28+00:00
I built TrueLock for “secure messaging without a messenger”.

Instead of sending plaintext in chat, you wrap a message (and attachments) into a single encrypted capsule file (.cfcaps) and share it via any channel (Telegram/email/drive/USB). The recipient opens the file in the app.

What’s different vs “just encrypt a file” is that the unlock policy travels with the ciphertext:

time window

geo radius

password (Argon2id)

visual key (optional)

AND/OR logic across rules

Current clients: Android + Windows.
Crypto: AEAD (AES-GCM / ChaCha20-Poly1305).

Threat-model boundary: policy checks are local; a fully compromised endpoint can bypass checks or exfiltrate plaintext after legitimate open.

I’d value technical feedback on:

threat-model clarity

strongest real use case

what trust artifact you’d want next (format spec, test vectors, reproducible builds)

https://truelock.pro
by reify | 2026-03-05 22:58:47+00:00
True

Take drug addiction as an example here in the UK.

Drug addiction used to be deemed a medical issue and was part of the NHS medical model.

In the early 2000's the dim brained government decided to change this from a medical model to a criminal justice model.

8 offences were selected. If a person was arrested for any of those 8 offences, they would have to have a drug assessment in police custody. The drug worker would then write a report to the court and that was used as a guide for the judge in sentencing.

at the same time the government developed the NTDMS, The national treatment database monitoring system. I spent more wasted time filling in that shit than I spent with clients.

oh! look what a great job we are doing as a government, we are sticking more people in prison and at the same time we are monitoring every time a drug addict farts. Wow wee!

they still got the same sentence.

forward 20 years

our prisons are overflowing with revolving door drug addicts.

They get a 6 month sentence for stealing a bottle of whiskey from a supermarket.

They get released from prison and have to attend a probabtion meeting that same day.

The first thing a person wants to do when they leave prison is to get high.

the majority of offenders released, never make it to their probation appointment and get recalled to prison within a week or two for failing to meet the terms of their prison release.

round and round and round they go. costing the tax payer an absolute fortune, in the name of tough on crime rhetoric

In 2004 it cost £400 per week to keep a man in prison, at the same time it cost £500 to send a man to rehab.
by Havoc | 2026-03-05 22:59:01+00:00
This is fundamentally a business strategy problem on docker side.

Docker hasn't really managed to find product market fit...and the one leverage point they have is that they're the central hub. So they're actively incentivized to not make this more efficient

Was setting up local caches for arch and docker and the difference is stunning. The one is a 10 minute exercise to get flawless local lan speed caching the other is a perilous journey
by kzemek | 2026-03-05 22:59:10+00:00
I really like the focus on “data and pure functions” from the beginning of the post.

I’ve read a lot on HN about how BEAM execution model is perfect for AI. I think a crucial part that’s usually missing in LLM-focused libraries is the robustness story in the face of node failures, rolling deployments, etc. There’s a misconception about Elixir (demonstrated in one of the claw comments below) that it provides location transparency - it ain’t so. You can have the most robust OTP node, but if you commit to an agent inside a long running process, it will go down when the node does.

Having clear, pure agent state between every API call step goes a long way towards solving that - put it in Mnesia or Redis, pick up on another node when the original is decommissioned. Checkpointing is the solution
by bogwog | 2026-03-05 23:00:11+00:00
> Realistically for a home server what you are worried about is someone breaking in and selling your drives on Facebook marketplace

If someone steals the entire machine, the drives will unlock themselves automatically. I don't think it's worth the risk to assume a hypothetical thief is too lazy to check if there's any valuable data on the disks. At the very least, they'll probably check for crypto wallets.

With something like Clevis and Tang, you can set it up so it only auto unlocks while connected to your home network, or do something more complex as needed
by cadamsdotcom | 2026-03-05 23:00:50+00:00
People used to hack persistence on to irc with long running daemons that acted as irc proxies and relayed stored messages when you connected.

Then the paradigm changed to persistent storage owned by proprietary companies served over proprietary protocols and now your data isn’t your own.

This will probably happen to agentic coding, so enjoy your tmux agent running on your own compute while you have it.

We usually can’t have nice things, but thanks to an accident of Claude Code team being ferociously in love with the terminal, we currently do.
by juris | 2026-03-05 23:01:17+00:00
funny. i actually woke up this morning fairly early and bustling alive with ideas (oh you know, nonsense 5am ones like what i should do if the petrodollar collapses... trade eggs and make a fiat cryptocurrency internal to my company (not subject to oversight) based on favors? wax tokens melted after favors met... something or another.

and i noted that urge to check my phone to validate those (later midday: embarrassing) ideas. it occurred to me then that it's precisely that urge to check the phone that usually kills them. and if it isn't that, it's the missed smses and emails and the latest gripe on hn. i wondered how many good ideas were strangled with the mundanity/viciousness (depending on your algorithm) of this device

"is it really so bad to sit alone with my thoughts, without having an immediate answer to put them to rest?"
by michaelt | 2026-03-05 23:01:30+00:00
> To be more critical my primary concern will be how deployment of this hardware is joined by significantly less benign design choices like locked bootloaders, removal of sideloads. To be very clear that's a quite distinct design choice, but I would expect to see it come along for the ride.

A justifiable concern, given sentences like "strongest possible security guarantees that the code being executed is authorized and verified" and "can be used across the Google ecosystem and also facilitates the broader adoption of Google-endorsed security features across the industry"
by dylan604 | 2026-03-05 23:02:03+00:00
"Step 1 - Getting GPS data from the video"

Feels like a "draw a circle. draw the rest of the owl" situation. How much metadata is stored in the video file? Are they storing a GPS update per frame, per second, once at the start of the file? I'm totally unfamiliar with the dashcam used, so I've just never seen the GPS data embedding as describe.
by spelk | 2026-03-05 23:02:42+00:00
In what sense? Germany has among the strongest judicial oversight for invasion of privacy in Europe. Due process is followed when securing search warrants that provide access to subscriber data (Germany does not have administrative subpoenas like in the US and other countries).

Former attempts at surveillance have been struck down in the Bundesverfassungsgericht, and the right to privacy has even been affirmed for foreigners (as opposed to other countries like the US that reserve that foreign nationals have zero due process rights for invasion of privacy).
by beklein | 2026-03-05 23:02:50+00:00
Not sure why you think Anthropic has not the same problems? Their version numbers across different model lines jump around too... for Opus we have 4.6, 4.5, 4.1 then we have Sonnet at 4.6, 4.5, and 4.1? No version 4.1 here, and there is Haiku, no 4.6, but 4.5 and no 4.1, no 4 but then we only have old 3.5...

Also their pricing based on 5m/1h cache hits, cash read hits, additional charges for US inference (but only for Opus 4.6 I guess) and optional features such as more context and faster speed for some random multiplier is also complex and actually quiet similar to OpenAI's pricing scheme.

To me it looks like everybody has similar problems and solutions for the same kinds of problems and they just try their best to offer different products and services to their customers.
by simplyaccont | 2026-03-05 23:03:02+00:00
APKWS used in Ukraine with Vampire (Vehicle-Agnostic Modular Palletized ISR Rocket Equipment) system mounted on tracks. no planes required

>The Israeli Iron Dome can intercept subsonic cruise missiles and costs about $100k an interception.

prices quoted on Israeli news in past few years are typically around $20k to $40k. $100k was initial pricing before mass production. Obviously it can shoot down shaheds as well

Israel also fielded Iron Beam late last year. It has 10km distance and $2 per shot price (this is even if you use PG&E electricity)
by rzerowan | 2026-03-05 23:03:08+00:00
Ok thanks for the background on that - again though this would be a painpoint on the packagers - but fully in line with the intentions of the GPL and with the LGPL to enpower the end user to be able to swap/update/tinker as they see fit.

As i recall there were some similar situations in regards to licences for distro builders regarding graphicsdrivers and even mp3 decoders wherer there was a song and dance the end user had to go through to legally install them during/after setup.

Or better yet to make a truly api compatible re-implementation to use with the license that they want to use, since what they have done i surmise would fall under a derivative work.So they havent really accomplised what they wanted - and instead introduced an unacceptable amount of risk to whoever uses the library going forward.

Kinda reminds me of what the Inderner Archive did during the pandemic with the digital lending library.Pushing the boundaries to test them and establish precedence. in any case let see how it plays out.