MurphyA/hacker-news huggingface dataset:
by stared | 2026-03-09 10:10:11+00:00
RSS is just one element of the ecosystem - the input.

I envision that the filtering mechanism CAN use any rules - hand-written, heuristics, old-school machine learning, LLMs. Just with a key difference - you are the one controlling it. No hidden tricks to make you "engaged" (read: addicted) or "sold".

If you feel it is too much politics, you reduce it. If too little - add. If you want less clickbaits and intellectual fast food, you filter it. Etc, etc.
by bartread | 2026-03-09 10:10:38+00:00
> It's starting to become obvious that if you can't effectively use AI to build systems it is a skill issue.

I think it's fair to say that you can get a long way with Claude very quickly if you're an individual or part of a very small team working on a greenfield project. Certainly at project sizes up to around 100k lines of code, it's pretty great.

But I've been working startups off and on since 2024.

My last "big" job was with a company that had a codebase well into the millions of lines of code. And whilst I keep in contact with a bunch of the team there, and I know they do use Claude and other similar tools, I don't get the vibe it's having quite the same impact. And these are very talented engineers, so I don't think it's a skill either.

I think it's entirely possible that Claude is a great tool for bootstrapping and/or for solo devs or very small teams, but becomes considerably less effective when scaled across very large codebases, multiple teams, etc.

For me, on that last point, the jury is out. Hopefully the company I'm working with now grows to a point where that becomes a problem I need to worry about but, in the meantime, Claude is doing great for us.
by kotaKat | 2026-03-09 10:10:42+00:00
The jackasses at Ring provide a clickwrap forced EULA consent in their app update changelogs.

https://play.google.com/store/apps/details?id=com.ringapp

They slip "By using this app, you agree to Ring’s Terms of Service (ring.com/terms). You can find Ring’s privacy notice at ring.com/privacy-notice." into their app update changenotes for every update.
by ptak_dev | 2026-03-09 10:11:05+00:00
The thing I keep coming back to with local agent sandboxing is that the threat model is actually two separate problems that get conflated.

Problem 1: the agent does something destructive by accident — rm -rf, hard git revert, writes to the wrong config. Filesystem sandboxing solves this well.

Problem 2: the agent does something destructive because it was prompt-injected via a file it read. Sandboxing doesn't help here — the agent already has your credentials in memory before it reads the malicious file.

The only real answer to problem 2 is either never give the agent credentials that can do real damage, or have a separate process auditing tool calls before they execute. Neither is fully solved yet.

Agent Safehouse is a clean solution to problem 1. That's genuinely useful and worth having even if problem 2 remains open.
by lwansbrough | 2026-03-09 10:11:19+00:00
The USSR acquiring nuclear weapons was the closest humanity has come to complete annihilation. We were one bad day away from extinction during the Cold War. I'm not sure I would point to that as something we should do more of. Not to mention the potential for accidents and mistakes.

I don't think bombing a country should be the first course of action. Diplomatic action should leave no stone unturned. But if all of that fails, it is strategically advantageous and safer for the world to prevent countries from acquiring nukes by any means necessary.

If you set the example that the cost of pursuing nuclear weapons is unbearable, countries will find better things to do, like enriching themselves in more productive ways.
by ptak_dev | 2026-03-09 10:11:44+00:00
This is the pattern I keep noticing too. A lot of "good engineering hygiene" that got dismissed as overhead is now paying dividends specifically because agents can consume it.

Detailed commit messages: ignored by most humans, but an agent doing a git log to understand context reads every one. Architecture decision records: nobody updates them, but an agent asked to make a change that touches a core assumption will get it wrong without them.

The irony is that the practices that make code legible to agents are the same ones that make it legible to a new engineer joining the team. We just didn't have a strong enough forcing function before.
by philipallstar | 2026-03-09 10:11:45+00:00
Exactly I am just disagreeing with your definition of brand, which I think is what were doing with the original essay as well.

Of course a company can structure itself fully aligned with its brand: I start Philip's Tyre Repair and the brand is 1:1 with the company and the premises. I don't see why being able to do that is important to enforce.

The point is, particularly with somewhere like Nike, that they have all sorts of things they need to do (advertise shoes; design shoes; make shoes; move shoes; sell shoes to retailers) that not all of it needs to be branded as Nike particularly. Only really the advertise shoes is the "brand".

It's like how Red Bull outsource basically everything except advertising. Someone else makes the drinks; someone else moves them; someone else sells them. They just maintain a really good brand with advertising, including innovative stuff like X-games.
by Grimblewald | 2026-03-09 10:12:07+00:00
No bugs means nothing if bugs get hidden and llms are great at hiding bugs and will absolutely fail to find some fairly critical ones. Your own repo, which is slop at best, fails to meet its core premise

> Another AI agent. This one is awesome, though, and very secure.

it isn't secure. It took me less than three minutes to find a vulnerability. Start engaging with your own code, it isn't as good as you think it is.

edit: i had kimi "red team" it out of curiosity, it found the main critical vulnerability i did and several others

Severity - Count - Categories

Critical - 2 - SQL Injection, Path Traversal

High - 4 - SSRF, Auth Bypass, Privilege Escalation, Secret Exposure

Medium - 3 - DoS, Information Disclosure, Injection

You need to sit down and really think about what people who do know what they're doing are saying. You're going to get yourself into deep trouble with this. I'm not a security specialist, i take a recreational interest in security, and llm's are by no means expert. A human with skill and intent would, i would gamble, be able fuck your shit up in a major way.
by applfanboysbgon | 2026-03-09 10:12:28+00:00
Yes, they will still support him. Republicans dying of COVID would still deny its existence on their deathbed, so you can be sure there is no consequence that is too far for them. Farmers bankrupted and people who lost jobs because of Trump's policies continue to support him. Inflation is bad when Democrats do it, but it is fine if Republicans do it, as with all things, because that is how their hierarchy works.

Their support is not the result of a rational calculation of self-interest, and never was. If it was, a base of rural and poor people would never be supporting a coastal city New York elite born with a silver spoon in his mouth as "one of them". But they do, because he is one of them in the way that matters to them. They are fighting for something larger than themselves, and are completely committed to a cultural war for social hierarchy.

> if gas prices and general inflation spike hard, as is nearly a given if Trump doesn't back out from the war?

As an aside, I don't think there is any backing out of this war. If somebody launched a missile at your country and killed hundreds of schoolgirls, and destroyed ships on diplomatic missions while leaving the survivors to drown, while also assassinating your country's leader (but not out of any intention of liberation), would you just let things go because they stopped bombing? Of course you wouldn't. Your country would continue to retaliate. And it is trivial to punish America. Even if America unilaterally decided to "declare peace" and withdraw from attacking Iran, Iran has every reason to continue locking down the gulf and making Americans pay the price. Unlike with tariffs, there is no backing down from these price increases even if Trump gets cold feet. But, even so, there is no reason to believe it will move the needle on his base. There is already talk of "short term pain for long term gain" among those who realise this.
by d--b | 2026-03-09 10:12:36+00:00
Honestly, I think meeting people at 38 is really hard. Especially if your social skills are somewhat rusty.

I think a lof of the advice is well-thinking, but it's not very good as things aren't that easy.

I believe that the easiest is to get into something geeky, but not competitive. Maybe it's 3D printing, or treasure hunting, or setting up fish tanks, or board game design, or fan fiction writing, or cosplaying, these kinds of stuff. If it can be physical, it's good. Like, bouldering is fairly geeky. It's also very hard if you're on the heavy side.

I think the geeky competitive hobbies are not good. Like chess is not great to meet people, as you'll need a lot of time to build up the skill required to even talk to someone without sounding dumb.

You need something that:

1. You can spend long periods of time doing on your own.

2. Has a strong ONLINE community (it's a lot easier to get into online stuff)

3. Allows to occasionally meet up in person.

The main thing is that geeks are nice people. They are way more welcoming than the average couple who's usually tangled in kids' education, paying the mortgage back, seeing their friends and family. And you can meet people online, which in itself is social contact that's good for you.

If I was in your shoes, my plan would be:

- try geek stuff that requires some advice. More ideas: clay sculpting, jewelry making, woodworking, and find one that I like.

- seek online communities and chat to people there. This would allow me to build up my skills, show off my stuff, get feedback, and start creating friendships. I wouldn't worry about being online too much at this stage. I think I'd try to find different coomunication channels, like IRC and discord. I don't know if things like second life are still a thing, but this used to be good too.

- Become "someone" in these communities. Like people know who you are. At some point people don't talk about the hobby, but conversation easily go more intimate.

- Meet people up when you can.

On top of meeting people, this has a great benefit: you have something to talk about to other people.

Like if you get into treasure hunting (like I did for a while), it's a great conversation starter. People think you're a bit crazy, but they love to hear that you went in the woods with your pickaxe and your shovel.

Anyways, I know that's what I'd do.

Good luck
Gemini Exporter – Export Gemini Chat to PDF, Word, and Notion in One Click
by backrun | 2026-03-09 10:12:40+00:00
I built a Chrome extension called Gemini Exporter that solves a problem I kept running into: there's no native way to export Gemini chat history into a clean, usable document.

Every time I finished a long research session or drafted something in Gemini, I had to manually copy-paste everything and reformat it. Headings broke, code blocks turned into plain text, and the whole thing looked messy.

So I built an exporter that actually preserves structure.

What it does:
- Export Gemini chat to Word (DOCX) – preserves headings, lists, code blocks as editable text
- Export Gemini chat to PDF – useful for archiving, sharing with clients, or compliance
- Export to Google Docs – for team collaboration without downloading files
- Send chat to Notion – great for building knowledge bases or project docs
- Choose to export a selected conversation or the full chat history
- Set font, size, and text color before exporting

Why I built it: Most AI chat tools lack native export. ChatGPT at least lets you download a JSON. Gemini gives you nothing. As someone who uses Gemini heavily for writing drafts and research, the friction of "how do I get this out of the browser?" was real enough to justify building a fix.

Technical notes: The extension reads the DOM on gemini.google.com, parses the conversation structure, and routes it to either a local file generator (DOCX/PDF via client-side libraries) or the respective API (Google Docs / Notion). No chat data is sent to any third-party server. Export happens entirely in your browser for Word and PDF.

Would love feedback on edge cases, especially around code-heavy chats and multi-turn conversations with lots of nested formatting.

>> Install: https://chromewebstore.google.com/detail/gemini-exporter-save-gemi/lgipeakgdkcgnkdljeagconfbfeolidj

>> Website: https://backrun.co/gemini-exporter
by franze | 2026-03-09 10:13:07+00:00
Google AI overview dissector

AIOs are a black hole - we dont know when they appear and whats in it. so i creates a tool thats starts with GSC data and enriches it via AIO data

works good and the major finding by now

the best AIOs you can get are ..... none.

doesn't matter if you are in it or not - as soon as they show up the CTR to tour web-property goes down massively ~60% to 70%

the CTR on the AIOs are ~0%
by ptak_dev | 2026-03-09 10:13:11+00:00
Partially agree, but I think "skill issue" undersells the genuine reliability problem the original post is describing.

The skill part is real — giving the agent the right context, breaking tasks into the right size, knowing when to intervene. Most people aren't doing that well and their results reflect it.

But the latent bug problem isn't really a skill issue. It's a property of how these systems work: the agent optimises for making the current test pass, not for building something that stays correct as requirements change. Round 1 decisions get baked in as assumptions that round 3 never questions — and no amount of better prompting fixes that.

The fix isn't better prompting. It's treating agent-generated code with the same scepticism you'd apply to code from a contractor who won't be around to maintain it — more tests, explicit invariants, and not letting the agent touch the architecture without a human reviewing the design first.
by amai | 2026-03-09 10:13:50+00:00
It seem they only support Commonmark: https://help.libreoffice.org/latest/en-US/text/swriter/guide...

So no tables, footnotes, table of content, math formulas, citations, …

So the better way to create markdown is still to use pandoc and convert your libre office documents into the much more powerful pandoc markdown dialect:

https://garrettgman.github.io/rmarkdown/authoring_pandoc_mar...
by vivzkestrel | 2026-03-09 10:13:52+00:00
i didnt notice any difference in the scrolling part. how did you conclude it is hijacking the scroll. Also the other sites load fine for me. Also this is not about performance. I dont care if they take 10 seconds to load but the content to be presented in a way unlike any of the 451534856415348678513656 other blogs out there
by mikkupikku | 2026-03-09 10:13:54+00:00
> is it a useful tool if it blows up in damn well near every professionals face

It doesn't, that's ego-preserving cope. Saying that this stuff doesn't work for "damn well near every professional" because it doesn't work for you is like a thief saying "Everybody else steals, why are you picking on me"? It's not true, it's something you believe to protect your own self-image.
by shevy-java | 2026-03-09 10:14:47+00:00
How do they ensure that the email reaches the destination though?

I have had emails never delivered to me, not due to my own fault
but the service provider filtering it away before I could do
anything. It is also dangerous to assume "use implies consent".
I am sure there are other ways to ensure terms of use to be
changed; if it is a web-application then one could only resume
using it if the services were accepted before.
by shelled | 2026-03-09 10:14:51+00:00
https://onethingwell.org comes to mind

https://web.archive.org/web/20170608203825/http://onethingwe... - used to be slightly simpler and less colourful.

There might have been few more such blogs over the years but this one has stayed in memory long after I stopped going to it and eventually it stopped (sort of). It was not just the design but also the simplicty of the conent and being very accessible.
by nottorp | 2026-03-09 10:14:57+00:00
> the logs are there and you have freedom to open up the hood and reconfigure things as you wish

I don't know. There's a lot of friction like gnome hiding or removing configuration options, kde becoming a third class citizen, different packaging systems every 2 years... app stores being pushed instead of apt-get install...

The command line and server side stuff is fine of course, I wouldn't dream of running anything but linux for that.
by stinkbeetle | 2026-03-09 10:15:11+00:00
> The entire notion of being allowed to enforce arbitrary terms of service is absurd. There are probably a handful of terms everyone agrees are reasonable (no attempted hacking, rate limits, do not break laws) and everything else should be unenforceable.

Why? Why should a government prohibit private parties from agreeing to anything other than those 3 things?

> Especially garbage like what you're allowed to do with the stuff you get from the service even while not using the service, or about setting up competing products. It's like McDonald's selling you a burger and telling you how to eat it.

It is vaguely like that, but but I'm not sure the analogy facilitates understanding of this subject. McDonalds shouldn't tell you how you can eat your burger, therefore... companies must not enforce any terms on their services aside from those things. Why?

I'm not saying any term should be enforceable. Contract law has a long history against that. I just wonder how and where you draw the line and what existing law is insufficient.
by noirscape | 2026-03-09 10:15:14+00:00
That does sound like there's an exploitable element there isn't it?

Statistically speaking, most people use one of the biggest email providers, which use their own models to detect spam (or even quietly drop messages). If you're doing an unpopular TOS change, why not set the mail up to still be RFC compliant but in such a way where the mail isn't going to be allowed through by any of the providers. Then you can just claim the problem is userside.

For example, the Message-ID header is technically not required (SHOULD rather than MUST), but as a spam detection measure, Gmail just drops the message entirely for workspace domains: https://news.ycombinator.com/item?id=46989217
by thegeomaster | 2026-03-09 10:15:17+00:00
Thank you so much for the kind words and for the feedback!

1. Duly noted on USDC and other payment options - I have to see how easy this is do to as we're using stripe.

2. Teams and orgs are very high on the priority list and we hope to have something on this front very soon.

To keep up with our development, I guess our X account is the most active: https://x.com/mowgli_ai (but as we grow, we'll start moderating/making our Discord more of a source of truth as well)
by pzo | 2026-03-09 10:15:23+00:00
Pentagon made few reports that Iran is not pursuing nuclear weapons - I bet they have better intelligence that you. Their killed religious leader made fatwa that forbid having or using weapons of mass destruction. Surprisingly now when he is gone they can pursue it after being attacked. Also worth to watch many Bibi talks since 1980s where he sais Iran will have nukes very soon and this didn't materialize in 40 years.
by phh | 2026-03-09 10:15:24+00:00
Absoultely.

I'll add to your comment that it isn't a bug of MCP itself. MCP doesn't specify what the LLM sees. It's a bug of the MCP client.

In my toy chatbot, I implement MCP as pseudo-python for the LLM, dropping typing info, and giving the tool infos as abruptly as possible, just a line - function_name(mandatory arg1 name, mandatory arg2 name): Description

(I don't recommend doing that, it's largely obsolete, my point is simply that you feed the LLM whatever you want, MCP doesn't mandate anything. tbh it doesn't even mandate that it feeds into a LLM, hence the MCP CLIs)
by stared | 2026-03-09 10:15:34+00:00
I would add that I love emails when they are written as emails (i.e. at least one coherent paragraph).

Email, as a medium, prompts us to think (at least for a few seconds), not "generate human tokens". Sure, we may feel being "communicative" or "productive" while chatting or Slack, but (in my experience) it is not always the case.
by abhinav_sk | 2026-03-09 10:15:54+00:00
Try not to find an answer to this question. When you feel lonely it’s easy to think of it as an existential which is a problem to solve. It feels like things shouldn't be this way. But what you’re feeling is pretty human natural and arguably the only way you can feel.

No amount of advice will get rid of it. But you can learn to be with it. Okay with it coming and going. It helps to keep in mind that you WILL get through this.

One Caveat. Even though its something that one can live with it. Often these feelings are signals to take action. So if you feel like you want company. Try to look for it.

Hope you get through it
by paragarora | 2026-03-09 10:16:19+00:00
Building HEBBS — a memory engine for AI agents, written in Rust.

The problem: every agent framework bolts together a vector DB for recall, a KV store for state, maybe a graph DB for relationships, and then hopes the duct tape holds. You get one retrieval path (similarity search), no decay, no consolidation, and the agent forgets everything the moment context gets trimmed.

HEBBS replaces that stack with a single embedded binary (RocksDB underneath, ONNX for local embeddings). Nine operations in three groups: write (remember, revise, forget), read (recall, prime, subscribe), and consolidate (reflect, insights, policy). The interesting part is four recall strategies — similarity, temporal, causal, and analogical — instead of just "nearest vector."

Some technical decisions I'm happy with:

- No network calls on the hot path. Embeddings run locally via ONNX; LLM calls only happen in the background reflect pipeline.

- recall at 2ms p50 / 8ms p99 at 10M memories on a 2 vCPU instance.

- Append-only event model for memories — sync is conflict-free, and forget is itself a logged event (useful for GDPR).

- Lineage tracking: insights link back to source memories, revisions track predecessors.

SDKs for Python, TypeScript, and Rust. CLI with a REPL. gRPC + REST.

There's a reference demo — an AI sales agent that uses HEBBS for multi-session memory, objection handling recall, and background consolidation of conversation patterns.

Still early. The part I'm wrestling with now is tuning the reflect pipeline — figuring out when and how aggressively to consolidate episodic memories into semantic insights without losing useful detail. Curious if anyone working on agent memory has opinions on that tradeoff, or if you've found other approaches that work.

https://github.com/hebbs-ai/hebbs
by simianwords | 2026-03-09 10:16:19+00:00
i don't know why you think it matters how it works internally. whether it changes its weights or not is not important. does it behave like a person who learns a thing? yes.

if i showed a human a codebase and asked them questions with good answers - yes i would say the human learned it. the analogy breaks at a point because of limited context but learning is a good enough word.
by Ygg2 | 2026-03-09 10:16:25+00:00
Scala had an unnatural dependency on Java, not JVM. I.e., imitating not just some patterns but copying its flawed interfaces. For example, Scala could express and bypass decades of cruft in the Java Collections API. Did it choose to do it?

To paraphrase former Scala developer and present poker player, "If Java cut its nose, would you Scala... Oh god, stop! The blood, the blood!"

Everyone who wants to talk to low-level code has to have C ABI. The equivalent Scalaism in Rust would be if Rust reimplemented the C-inspired java.util.Date. Yes. Monday should be 0, not an enum. Because C did it.