MurphyA/hacker-news huggingface dataset:
by Xunjin | 2026-03-04 07:48:01+00:00
Whether parent is paranoid or not, Pegasus literally is used to spy, just because the state might not care about his hot nude pictures does not mean they don't care about other phone usage.

"While NSO Group markets Pegasus as a product for fighting crime and terrorism, governments around the world have routinely used the spyware to surveil journalists, lawyers, political dissidents, and human rights activists."[0]

Information these they can be much as powerful as a bomb, for example, I could learn more about your calls and discover that you do something immoral but not illegal and use it to blackmail you.

0.https://en.wikipedia.org/wiki/Pegasus_(spyware)
by badgersnake | 2026-03-04 07:48:32+00:00
Nah, the rota is large enough that it will likely be somebody else’s problem anyway and the chances are even if it does land on them they just won’t answer the phone.

Punishing mistakes with unpaid overtime has never been a good approach to quality. It just teaches management that they can get away with low quality because the engineers will pick up the pieces in their own time.
by eru | 2026-03-04 07:48:50+00:00
> However, standard LLVM-based JIT is notoriously slow at compilation. When it takes tens to hundreds of milliseconds, it may be suitable only for very heavy, OLAP-style queries, in some cases.

I don't know anything here, but this seems like a good case for ahead of time compilation? Or at least caching your JIT results? I can image much of the time, you are getting more or less the same query again and again?
by fhd2 | 2026-03-04 07:49:03+00:00
Which would be pretty much full circle at that point. When I started out, it was common for developers to do "product management", there wasn't a specialised role for it yet. You had developers and maybe project managers (generally also developers) and testers, and that was about it. Management would talk to developers about their strategy and problems, and they'd figure out what to build based on that.

I'm pretty weirded out by some "modern" teams where you have product managers spoon feed specifications to developers, and developers focusing on nothing but the code they need to write to do exactly as they've been told.

Product managers are in a weird place. They wear a ton of hats and do entirely different jobs based on where they work. They're often really valuable, but I have some trouble putting my finger on what makes a good one. If they're good at whatever it is they end up doing, that's good.
Show HN: LEAX – CLI tool for analyzing C memory leaks with AI-assisted fixes
by emmmarti | 2026-03-04 07:49:27+00:00
Hi HN,

I've built LEAX (Leak Analyzer & eXplorer), a CLI tool for analyzing memory leaks in C programs.

It orchestrates:

* Valgrind for leak detection
* GDB for reconstructing allocation and execution context
* A structured analysis layer to trace the allocation lifecycle
* An AI component that explains the root cause and proposes targeted fixes

Leak detection and memory tracing are fully deterministic and based on parsed Valgrind and GDB data.
The AI layer does not guess the leak — it interprets the reconstructed execution path to explain what happened to the pointer during the program's lifetime and suggest how to resolve it.

The goal is to turn raw “definitely lost” reports into a clear, causal story with actionable guidance.

LEAX is still actively evolving, and I’m continuously refining the tracing and explanation pipeline. I’m very open to feedback, suggestions, and architectural criticism.

Happy to answer technical questions about the analysis or tracing approach.
by beAbU | 2026-03-04 07:50:15+00:00
Unplug before closing. I'm not sure where I read this, but this is the cause for the backpack cooking. When plugged in it goes into active sleep or something, not really sleep. When unplugged and it goes to battery mode, and activates the real sleep mode.

Something something windows something something shitty power management.

Try it for yourself and see if that makes a difference. It worked for me!

I remember at some point dell had a warning to not sleep your laptop and put it in a bag, as it can actually cook the lcd panel!
by phyzix5761 | 2026-03-04 07:52:46+00:00
I found my best use of AI for writing code is with a TDD approach. I write 1 test, watch it fail, let the AI implement the solution, and then if I like it I commit. Write the next test and repeat.

It keeps me in the loop, I'm testing actual functionality rather than code, and my code is always in a state where I can open a PR and merge it back to main.
by yorwba | 2026-03-04 07:54:28+00:00
Part of what makes it so infuriating is that it uses the same patterns so often, the other part is that it's not very good at using them—the revelation that it's Y and not X is typically incredibly banal, not some profound observation.

But it was always going to attempt to do some things it's not good at too often. It's these things in particular because skilled human writers do use similar flourishes quite a lot. So imitating them allows the model to superficially appear like a good writer, which is worse than actually being a good writer, but better than superficially appearing like a bad writer.

A different training process might try to limit the model to only attempt things it can do 100% perfectly, but then there wouldn't be a lot it could do at all.
by socalgal2 | 2026-03-04 07:55:54+00:00
It's non-trival though not that hard. Have you asked an LLM?

It depends on your needs

* You can compute a rectangle by expanding a line purpendicular to its direction

The problem with this is you'll get gaps between 2 lines if they are supposed to be connected. You can solve that by trying to connect the corners if the rectangles. Once you do this though you're no longer drawing rectangles. You might have to make a simple triangle rasterizer. Or a scanline rasterizer

* You can "drag a brush". You compute a single line, then at each pixel, draw a sprite/circle/rectangle around that pixel. That's slow because you'll draw every pixel more than once but it will work and might be fast enough

This has the issue with the ends will be different unless your brush is round. If that's ok then it works.

All of these are something you can ask Gemini, ChatGPT, Claude, and they'll spit out an exmaple in the language of your choice.
by kvdveer | 2026-03-04 07:56:23+00:00
Two things are holding back current LLM-style AI of being of value here:

* Latency. LLM responses are measured in order of 1000s of milliseconds, where this project targets 10s of milliseconds, that's off by almost two orders of magnitute.

* Determinism. LLMs are inherently non-deterministic. Even with temperature=0, slight variations of the input lead to major changes in output. You really don't want your DB to be non-deterministic, ever.
by Serenacula | 2026-03-04 07:57:28+00:00
Location: England, UK
Remote: Any
Willing to relocate: Yes
Technologies: HTML/CSS/TS/React/Node, to a lesser degree Rust
Resume/CV: https://docs.google.com/document/d/1EQDquYIvfRe2VqF0Kjawwoew...
Email: faylee.murraybrowne@gmail.com

Additional:
GitHub: https://github.com/serenacula/

Backend leaning full stack dev here. Two years of experience, primarily backend.
by waterTanuki | 2026-03-04 07:58:20+00:00
I've grown to hate using python in production since LLMs have been around. Python cannot enforce minimum standards like cleaning up unused variables, checking array access, and properly typing your functions. There's a number of tools built to do this but none of them can possibly replace a compiler.

Compiled languages like Go and Rust are my new default for projects on the backend, typescript with strict typing on for the frontend, and I foresee the popularity growing the more LLM use grows. The moment you let an LLM loose in a Javascript/Python codebase everything goes off the rails.
by Jensson | 2026-03-04 07:59:09+00:00
> If the retaliation was preempted they wouldn't have retaliated, but they have

Most of the retaliation was preempted but they didn't get all the missile launch sites. They have blown up most by today though so you barely see any Iranian missiles coming out of the country now.

If they didn't do the opening salvo you would have seen much more death and destruction than we saw now.
by thorn | 2026-03-04 07:59:48+00:00
I don’t think many people are interested in producing 100% correct code. I saw this at big companies and small startups. It is all the same: ship feature asap before competitors. Writing correct code is almost always punished indirectly in the way they only praise the feature delivering heroes that got promoted. Nobody got promoted for preventing bugs.

Maybe in some other circles it is not like that, but I am sure that 90% of industry measures output in the amount of value produced and correct code is not the value you can show to the stockholders.

It is sad state of affairs dictated by profit seeking way of life (capitalism).
by adrian_b | 2026-03-04 07:59:56+00:00
A bug has existed for many years in Apple devices, until a couple of years ago, when it has been discovered accidentally by some victims, which has forced Apple to fix it.

The bug consisted that some secret test registers, which allowed a complete bypass of all memory protection, were left accessible after production. Thus knowledgeable attackers could take control remotely of an iPhone, for many years, in a completely undetectable way, by sending an invisible message, which then exploited some bugs in Apple system libraries to gain privileged access to the secret test registers, which were then used for complete access to any hardware, including stored files, video camera and microphone.

This backdoor was discovered only because some victims became suspicious due to unexpectedly high Internet traffic originating from the iPhone that was recorded by an external firewall.

It is hard to believe that such a mistake like forgetting to disable the test registers after production could have happened and it also would have never been discovered for many years, without some Apple insider intentionally doing it.

Moreover, the unknown attackers who have exploited the backdoor for many years had complete knowledge about the secret test registers, which is likely to have been provided by an Apple insider, perhaps the same who has ensured that they remain accessible.
by jlongo78 | 2026-03-04 08:00:07+00:00
agent networks are only as good as their observability story. most folks bolt on logging as an afterthought and then wonder why debugging multi-agent flows feels like reading tea leaves.

the real unlock is session persistence with instant replay - watching an agent's reasoning trail after the fact changes everything. youre not guessing anymore.

also: mDNS-based node discovery for distributed agent infra is criminally underrated. zero config coordination is wihtout question the right call here.
by jlongo78 | 2026-03-04 08:00:15+00:00
nice work. orchestration libs are genuinely useful until your workflow gets weird enough that the abstraction fights you harder than raw code would.

one thing ive found matters more than the lib itself: how you handle session continuity when agents crash mid-task. most tools treat it as an edge case. its actually the whole game. if you cant resume state cleanly, you end up babysitting retries insead of shipping.

what does OpenClawHub do on that front?
by dotancohen | 2026-03-04 08:00:31+00:00
The IDF did not starve civilians - that lie has already been disproven. I know that you'd love to repeat it until history records it, but by no objective measure was there famine nor starvation in Gaza. Other than the starvation of Hamas' hostages.

The images of "starving children" were images of children with other medical conditions. The UN reports used a metric that considered starvation at HALF the threshold used in every other conflict zone, and even with that metric only found "evidence" in a single location once.
by bawolff | 2026-03-04 08:00:46+00:00
This sort of thing is sometimes used in so-called "scriptless xss" attacks, where if you can force the website to have an unclosed url, you can capture part of the page contents (hopefully containing secrets) and exfiltrate it.

To the point where chrome stopped allowing newlines in some circumstances https://chromestatus.com/feature/5735596811091968
Show HN: TerraViz – Real-time flights, earthquakes, ISS on one map
by cvaambikapur | 2026-03-04 08:00:57+00:00
I built a client-side geospatial dashboard that pulls from free public APIs and renders everything on a single Leaflet map.

Data sources: OpenSky (flights), USGS (earthquakes), Open-Meteo (weather), Open Notify (ISS), Overpass/OSM (roads and railways). Vehicle movement is simulated client-side using interpolation along OSM way geometries.

Each layer fetches independently with its own error handling so one API being down never breaks the rest. Map state persists to localStorage and first-time visitors get geolocated via ip-api.com.

Stack: Vite, React, Leaflet, Tailwind CSS.

Would appreciate feedback or suggestions for more data sources to add.
by ensocode | 2026-03-04 08:00:58+00:00
You may be right. I just wanted to add that there are probably people stranded in Dubai right now because they booked a Berlin–Sydney flight with a stopover six months ago. Sometimes you simply can’t predict these things.

Yes, staying informed can help in some cases. But there are also many situations where it wouldn’t have made a difference. The amount of noise you have to sift through to “stay updated” is huge. At some point, it becomes a trade-off: consume a constant stream of news to maybe avoid a rare edge case — or tune it out and accept that very occasionally you might get unlucky.
by AnthonyMouse | 2026-03-04 08:01:12+00:00
> The government can already do this with the ISP.

This is what VPNs or public libraries are for.

> I dont think government should be part of the average person's threat model.

Tell that to the people in places with governments that are a threat to the average person.

"It can't happen here" is a dangerous hubris.

On top of that, do notice that there is more than one government. What happens when Salt Typhoon comes for this stuff?
by saikia81 | 2026-03-04 08:02:10+00:00
I'm guessing you missed out on the Snowden revelations? Or the news articles about federal agents literally laughing at private dick pics.

And your second paragraph seems to go on the premise that the average person care if there is a backdoor.

I don't know why you wouldn't take security seriously, when even the US government is telling everyone to be careful where they supply their devices because of spying. Just don't trust them to point the finger the right way.
by Karrot_Kream | 2026-03-04 08:02:11+00:00
Where I'm at currently (which may change) is that I lay down the foundation of the program and its initial tests first. That initial bit is completely manual. Then when I'm happy that the program is sufficiently "built up", I let the LLM go crazy. I still audit the tests though personally auditing tests is the part of programming I like the very least. This also largely preserves the initial architectural patterns that I set so it's just much easier to read LLM code.

In a team setting I try to do the same thing and invite team members to start writing the initial code by hand only. I suspect if an urgent deliverable comes up though, I will be flexible on some of my ideas.
Show HN: Nova – AI terminal that writes, fixes, and ships your code
by Bridgeye | 2026-03-04 08:02:51+00:00
Hey HN,

We're Team Bridgeye. We're launching NOVA today (https://nova.bridgeye.com/), an AI-native developer workspace that goes beyond code suggestions and actually executes.

The problem: AI coding assistants are genuinely useful, but the workflow is still broken. You chat, get a snippet, paste it in, run it, hit an error, go back to ChatGPT, explain the error, get a fix, paste again. It's 2025 and we're still copy-pasting stack traces.

What NOVA does differently:

run <cmd> - executes your code and if it fails, NOVA intercepts the stack trace and automatically patches the code until it runs. No manual debugging loop.

build it - describe a goal in plain English, NOVA generates a verified implementation plan and writes all the files.

clean - load any file and NOVA refactors it for readability, performance, and technical debt removal.

:gitoptions - full Git workflow (commit, push, pull, status) handled inside the terminal.

Everything runs inside the Spark Terminal - a single environment where planning, execution, healing, and version control all live together.

Install:

pip install nova-bridgeye

We're early and actively iterating. Would genuinely love feedback, especially from people who've thought hard about where AI dev tools are heading. What are we missing? What would make this irreplaceable for your workflow?
by andrekandre | 2026-03-04 08:03:09+00:00
> And it introduces new issues: which methods are being called depends on your imports.

also depending on how you casted it, it will call the method of the cast, not the actual one in the instance (which completely caught be off-guard when i started swift)

> objc also has lightweight generics. In practice this is all you need.

i feel this too sometimes; sometimes simple really is best... tho i think some of these decisions around complexity is to allow for more optimization so c++ can be chucked away at some point...
by kuerbel | 2026-03-04 08:03:16+00:00
I used chatgpt often but switched to Lumo a few days ago. I like Lumo a lot. It almost never ends with a follow up question. If it does it's a sensible/useful one. It readily searches the web if it's not quite sure what the correct answer is. Also it's privacy first. It's based on a Mistral model.
Show HN: PowerVerb – rewrite weak resume bullets with stronger action verbs
by visiohex | 2026-03-04 08:04:02+00:00
Hi HN — I built PowerVerb: https://www.resumeactionverbs.com

It rewrites weak resume bullets (like “Responsible for…”) into stronger, ATS-friendly versions, while trying not to invent facts.

What it does:
- generates 3 rewrite variations (leadership / execution / impact)
- suggests stronger action verbs by role (engineering, product, marketing, sales, etc.)
- includes a repetition checker for overused verbs
- keeps recent rewrites so you can quickly reuse/edit output
- has a free daily quota (Google login optional)

Stack: Next.js + Supabase + OpenRouter + PayPal + Vercel.

I’d love feedback on:
1) output quality (too generic? too aggressive?)
2) UX clarity (quota/credits/pricing)
3) what to build next (copy-all, export formats, job-description matching)
by subhadipmitra | 2026-03-04 08:04:15+00:00
Hi HN - we built an API that takes a satellite ID and a workload and returns a physically-accurate execution plan for splitting compute between space and ground.

The motivation: satellites generate ~1 TB/day but can only downlink ~7.5 GB per pass. As on-board compute improves, you need a planner that decides what runs where, schedules transfers across real ground station passes, and handles FEC/encryption overhead.

The planner runs full SGP4 propagation (same algorithm NORAD uses), computes eclipse windows, predicts passes for 12 ground stations with elevation-dependent link budgets, and produces deterministic plans.

You can try it live — our tracker lets you run plans against any satellite: https://rotastellar.com/tracker/ (select a satellite → Schedule tab → pick a preset → Plan Execution)

Happy to discuss the orbital mechanics, the placement heuristics, or anything else.
by prastik | 2026-03-04 08:04:58+00:00
SwarmWatch is an activity monitor and control plane for AI coding swarms. It runs as a tiny always-on-top overlay with a Tamagotchi pet avatar that shows what your agents are doing and when they need you.

Right now it works with Cursor, Claude, Cline, GitHub Copilot and VS Code via small per-agent shims. The shims call a local runner, which streams events (tool calls, file writes, shell commands, etc.) into the desktop app over a local WebSocket. Everything is fully local; there’s no server or external telemetry.

The interesting part (at least to me) is the approvals layer. You can mark certain actions as “guarded” (for example: shell commands, destructive file operations). When an agent hits one of those, the runner pauses, the avatar flips into a “blocked/needs you” state, and an approvals pane pops up. From there you can approve or reject the action with one click, and the runner immediately continues or aborts the step. Also, you have a transparent Audit Trail of what all happened and when exactly, and other basic teleemry.

It's open-sourced, feel free to try it out or fork it and use it. Thank You!
by debazel | 2026-03-04 08:05:06+00:00
> I think a part of a better solution is to give parents and children better tools to manage their social graph themselves. Essentially the real problem is discovery and warding off of social outliers in a way that doesnt out all responsibility on opaque algos or corporations.

This is actually a key consideration for the proposed implementation. The biggest issue for parents when restricting their children's online activity is that they simply don't understand the tool available for it.

By having a "child mode" iPhone, parents don't have to know any of that. They simply buy the iPhone Kids for their children and then get a plain iPhone for themselves.

If these restrictions were to actually be enforced by law as well, then it would make it very easy for teachers and other guardians to check if a device is appropriate for the child using it.
by ZaoLahma | 2026-03-04 08:05:30+00:00
I think it boils down to how companies view LLMs and their engineers.

Some companies will do as you say - have (mostly clueless) engineers feed high level "wishes" to (entirely clueless) LLMs, and hope that everyone kind of gets it. And everyone will kind of get it. And everyone will kind of get it wrong.

Other companies will have their engineers explicitly treat the LLMs as collaborators / pair programmers, not independent developers. As an engineer in such a company, YOU are still the author of the code even if you "prompted" it instead of typing it. You can't just "fix this high level thing for me brah" and get away with it, but instead need to continuously interact with the LLM as you define and it implements the detailed wanted behaviors. That forces you to know _exactly_ what you want and ask for _exactly_ what you want without ambiguity, like in any other kind of programming. The difference is that the LLM is a heck of a lot quicker at typing code than you are.
by fluffypony | 2026-03-04 08:06:25+00:00
I don't want to gush about this too much, but it's SUCH a big deal. Graphene has languished with hardware support for so long - they basically only had Pixel devices as first-class citizens, which are not bad devices per se, but it's hard when you're spending most of your time doing something without the manufacturer's support.

There is a very real possibility that we end up with devices that can play modern mobile games at high frame rates on a secure, privacy-focused mobile OS, which is a huge step towards general adoption of something like this as a daily driver.
Show HN: Snowbin – A Mindmap-Based Social Platform Built with Lisp
by rrepo | 2026-03-04 08:06:46+00:00
I built a mindmap-based discussion platform, but what made the project truly interesting was not the UI — it was building the backend in Common Lisp.

Inspired by Paul Graham and his book The Hacker and the Painter, I wanted to experience what it feels like to design a system in a language built for abstraction rather than convention.

Instead of relying on a large framework, I combined small libraries and built a minimal internal structure myself.
by medi8r | 2026-03-04 08:07:40+00:00
You have to have really good tests as it fucks up in strange ways people don't (because I think experienced programmers run loops in their brain as they code)

Good news - agents are good at open ended adding new tests and finding bugs. Do that. Also do unit tests and playwright. Testing everything via web driving seems insane pre agents but now its more than doable.