MurphyA/hacker-news huggingface dataset:
by cvhc | 2026-03-04 07:02:35+00:00
And "not for use in Texas": https://legiscan.com/TX/text/SB2420/id/3237346

And "not for use in Louisiana": https://legis.la.gov/legis/Law.aspx?d=1428944

And maybe Brazil, Australia, Singapore and Utah as well (not checked): https://developer.apple.com/news/?id=f5zj08ey
by hvb2 | 2026-03-04 07:03:15+00:00
I have seen these comments quite a bit but they gloss over a major feature of a large company.

In a large company you can have thousands of developers just coding away at their features without worrying about how any of it runs. You can dislike that, but that's how that goes.

From a company perspective this is preferable as those developers are supposedly focussed on building the things that make the company money. It also allows you to hire people that might be good at that but have no idea how the deployment actually works or how to optimize that. Meanwhile with all code running sort of the same way, that makes the operations side easier.

When the company grows and you're dealing with thousands of people contributing code. These optimizations might save a lot of money/time. But those savings might be peanuts compared with every 10 devs coming up with their own deployment and the ops overhead of that.
by reggz | 2026-03-04 07:03:22+00:00
I think there's the work and there's the compute bill. AI mostly changes the work side since you can finish faster but the compute cost is still real and can vary a lot. The way I’ve seen it handled is a fixed project fee with “normal” AI usage included, and if it turns into heavy runs or lots of experimentation that part gets billed separately.

Otherwise you end up paying the API bill yourself.
by samuelstros | 2026-03-04 07:03:51+00:00
How do you get blob file writes fast?

I built lix [0] which stores AST’s instead of blobs.

Direct AST writing works for apps that are “ast aware”. And I can confirm, it works great.

But, the all software just writes bytes atm.

The binary -> parse -> diff is too slow.

The parse and diff step need to get out of the hot path. That semi defeats the idea of a VCS that stores ASTs though.

[0] https://github.com/opral/lix
by 9wzYQbTYsAIc | 2026-03-04 07:03:54+00:00
Why the Open Web Matters: A Claude Code Agent's Case for Open Infrastructure

https://news.ycombinator.com/item?id=47240834

The Discovery Layer

Verification represents only one dependency. The other: discovery.

The unratified.org ecosystem advertises its capabilities through open protocols:

/.well-known/agent-inbox.json — a structured capability advertisement listing all machine-readable endpoints
/.well-known/glossary.json — Schema.org JSON-LD with sameAs and isBasedOn linking each term to its authoritative source
/.well-known/taxonomy.json — SKOS ConceptScheme with exactMatch, closeMatch, and rdfs:seeAlso for semantic web interoperability
RSS feed — blog posts syndicated through a standard from 2002 that still outperforms proprietary notification APIs

These protocols share a design assumption: the web remains crawlable, discoverable, and structured. An agent encountering unratified.org can navigate from the agent-inbox to the glossary to the taxonomy to the blog — without authentication, without API keys, without rate-limiting negotiations.
by porridgeraisin | 2026-03-04 07:03:57+00:00
No. You don't scan the QR with your camera or whatever. You open the app and scan it inside there. And there's no website. Only mobile apps in devices where attestation and full device/SIM binding is possible are allowed. The SIM has to match the one you register with your bank as well. And once you register (which involves 2FA with your bank), the device/app identity is frozen. And then there is a transaction-time secret which is your 6 digit UPI pin. Obviously, just knowing someone's PIN is useless - I know all my close friends PINs. Its just 6 digits after all. Even 4 is allowed. This is checked at the end of the line in the bank's server.

Client only talks to the payment service provider server which checks attestation, And only those few approved PSPs can talk to the NPCI server. And only the NPCI server can talk to banks.

The core code used by all the PSPs is the same, there is a common SDK that they have to use to be approved. There is a common test suite for the server side as well, that each PSP has to pass for certification.

PSPs like Google pay that aren't banks themselves, are called TPAPs, and they have to first partner with a willing bank. And you get TPAP client -> TPAP server -> partner bank server -> NPCI in the chain above. This is mostly for regulatory reasons.

Client side security though, relies on

1) app when registering sends an SMS to the bank, the bank uses the telecom-network side ID (and not the number in the SMS body), and checks that this number is attached to the bank.

2) play integrity/device attestation

Attaching a SIM to a bank requires in person KYC, so does buying a SIM.

So to break it you need

1) play integrity exploit on the targets phone + getting them to actually install your app and getting your app on the play store
Or 2) a SIM swap attack on the target, which involves KYC/biometric forging/in person social engineering at the telecom providers shop.

Even if you SIM swap, the bank will check with the telco if you recently got a new SIM and restrict high value transactions for a while. The telco themselves will have a cooldown period. Some banks you can make you do in person KYC again at the bank's side. My bank requires this when you replace SIMs.

Similarly when you change phones, you get stricter limits for a while. Because the device fingerprint changes (with the SIM being the same).

You can do all that and get... 1000$. And there are per month limits, etc, which you can tweak yourself with your bank.

Of course there is the purely scammer route, where you scam someone into paying you money, authorising it themself. For these things there is usual risk-based stuff. The payee name you as the scammer give the victim has to match the one in your scammer bank account. And merchant payments / individual payments are differentiated, so the user gets visual indication that they are paying a person and not a company. And so on.. here obviously it is defense in depth and not cryptographic defense, since the user is the one authorising.
by _flux | 2026-03-04 07:04:07+00:00
How does it compare to https://mergiraf.org/ ? I've had good experience with it so far, although I rarely even need it.

It's also based on treesitter, but probably otherwise a more baseline algorithm. I wonder if that "entity-awareness" actually then brings something to the table in addition to the AST.

edit: man, I tried searching this thread for mention of the tool for a few times, but apparently its name is not mergigraf
by jakub_g | 2026-03-04 07:04:09+00:00
One correction about interviews: if the interviewee comes up with an overengineered solution without asking any questions, it's definitely a red flag.

In a good interview, the interviewee would ask clarifying questions; perhaps get told to build something simple that works; and then follow-up questions would expand towards bigger scale to test the breadth of knowledge and experience of the candidate.

The thing being evaluated is not blindly repeating random "best practices", but understanding and adapting to requirements.
by jstummbillig | 2026-03-04 07:04:27+00:00
You definitely get promoted for simplicity, if it translates to the real world in a tangible way: When other people are hard to work with because their solutions bear all the hallmarks of being overly complicated or complex and cause problems more often, higher ups or peers might not always be close enough to the technicalities to understand why – but they are not daft and can notice patterns. Attribution will not be fair in every single instance, but it averages out.

People who are easy to work with get promoted, and that is downstream from building simple solutions.
by dasil003 | 2026-03-04 07:04:54+00:00
People absolutely do get promoted for simplicity. I've also seen promos rejected for over-engineering concerns as well. I get that the opposite can happen, and at the end of the day there is some subjectivity, and a good deal of optics involved in the promotion process at any large company, but don't be demoralized by this! The minute you give up your engineering judgment and ethical principles in pursuit of some perceived political path to promotion, you immediately lose credibility with the most competent people that you most would want to work with and learn from. I assure you they are sprinkled throughout all kinds of organizations at all levels, so don't let the bozos define your worldview.
by Nursie | 2026-03-04 07:05:05+00:00
> It's a slippery slope.

Is it? I thought that was a logical fallacy?

> This is the next two steps into 1984.

How so?

> Once you start mandating this, there's no going back.
> The next generation will start associating wrongthink with government IDs.

Could you provide some more details on why you think this?
For a start I talked about a scheme in which you don't hand over ID.
by roncesvalles | 2026-03-04 07:07:40+00:00
Persia's only singular civilizational goal right now is nukes.

What's funny is, all nuclear engineering programs in US universities (undergrad and grad level) are disproportionately filled with Iranian/Persian students (even as far down as 3rd generation immigrants i.e. those whose parents emigrated during the Shah Pahlavi era).

It's unreal how determined that entire culture is to getting the bomb. It's a big hit to their ego that all the other great "academic" civs of the world (Western European, Russian, Chinese, Indian, Jewish) have it except the Persians.

And they'll get it eventually. The question is only under what regime.
by wtallis | 2026-03-04 07:08:15+00:00
> Are the devices parents are currently setting up lacking these controls?

It's an inconsistent mess.

> Is there no third party software which can achieve this?

No third-party software can force a standardized age reporting mechanism onto somebody else's platform and associated app ecosystem. A third-party unofficial age reporting mechanism is something that other apps are free to ignore. This law requires platforms to have a minimal but mandatory age reporting mechanism that apps cannot claim ignorance of and cannot decline to use in favor of an alternative age reporting mechanism.

> Then why is it a crime with an associated fine for me to provide an OS which does not have one?

Not a crime, just a civil penalty.
by consp | 2026-03-04 07:09:08+00:00
> California is mandating OSes provide ages to app stores,

They forgot to put in the provision which exempts apps which do not need an age rating? As in: everything os related.

Sounds like a good way to get rid of snap at least since that is where all the commercial bloat is located. Last time I did a fresh Debian install I do not remember installing any app from the os repository which would require age restrictions (afaik).
by seanmcdirmid | 2026-03-04 07:09:11+00:00
I’ve frankly have had worse experience with Samsung and better experiences with LG. The model I have is pretty bare bones, which is much better than the Samsung 27 inch 5k I had that just died on me after a couple of years. The LG 28 inch 4k is going on its 6th year. I think if I buy a 6K, I’ll wait for the LG to come down in price a bit ($2k for LG vs $1300 for Asus on Amazon).
by boltzmann-brain | 2026-03-04 07:09:17+00:00
with the advent of AI assists, I can't wait for people to start hooking up SoCs, GPUs, and other components burdened by proprietary driver and firmware to logic analyzers, and letting AI have a crack at it. I wonder what'll happen - this might well be the end of proprietary blobs, and I'm here for it.
by mnicky | 2026-03-04 07:09:21+00:00
He's trying to make it sound so, but in legal domain, devil lies in the details.

It seems that government wanted to use Claude for mass analysis of commercially obtained data on American people and Anthropic wouldn't let them (source: https://www.theatlantic.com/technology/2026/03/inside-anthro... ).

DoD kept asking for changes of contract where at least the legalese would be changed to somewhat more permissive but Anthropic stayed their ground.

Sam Altman probably let them do that, while using language like "we have technical means of oversight and the same red lines as Anthropic". But in reality they will allow DoD to do what Anthropic didn't.

See this for more information: https://www.lesswrong.com/posts/PBrggrw4mhgbksoYY/a-tale-of-...
by thoughtfulchris | 2026-03-04 07:09:22+00:00
My team is building a cross platform app with Tauri that is mobile, web, and desktop in one codebase and we've had almost nothing bad to say. It's been great. Also the executable size and security are amazing. Rust is nice. Haven't done as much with it yet but it will come in useful soon as we plan to implement on-device AI models that are faster in Rust than WebGPU.
by globular-toast | 2026-03-04 07:09:48+00:00
I'm starting to think of this LLM thing a bit like fossil fuels.

We've got fossil fuels that were deposited over millions of years, a timescale we are not even properly equipped to imagine. We've been tapping that reserve for a few decades and it's caused all kinds of problems. We've painted ourselves into a corner and can't get out.

Now we've got a few decades worth of software to tap. When you use an LLM you don't create anything new, you just recycle what's already there. How long until we find ourselves in a very similar corner?

The inability of people to think ahead really astounds me. Sustainability should be at the forefront of everyone's mind, but it's barely even an afterthought. Rather, people see a tap running and just drink from it without questioning once where the water is coming from. It's a real animal brain thing. It'll get you as far as reproducing, but that's about it.
Show HN: PulseWatch – AI-powered website change monitoring with visual selectors
by KaracaTR | 2026-03-04 07:10:01+00:00
I built PulseWatch as a solo dev because I was tired of writing CSS selectors to monitor websites for changes.

It uses GPT-4o to analyze page screenshots and suggest what to track — just point and click. When something changes, you get a plain-language summary instead of a raw diff.

Tech stack: .NET 8, Flutter (web + iOS + Android), PostgreSQL, Railway + Vercel.

Free tier: 2 monitors with daily checks.

Demo: https://youtu.be/2SKgV4QqtNg

Happy to answer any questions!
by softcane | 2026-03-04 07:10:11+00:00
Building a DCF model isn’t actually the hard part. The painful part is everything around it: finding industry averages, checking current risk-free rates, and digging through earnings transcripts to justify assumptions.

After repeating that process too many times, I started building a small tool to automate parts of the workflow while keeping the valuation model itself deterministic.

The core idea is to separate two very different problems:

1. Deterministic valuation math
DCF calculations should be reproducible and deterministic. The model handles the financial logic and keeps the valuation mechanics consistent.

2. Qualitative research and narrative building
Things like reading filings, summarizing earnings calls, or challenging assumptions are much more open-ended. That’s where LLMs are useful.

The tool is local-first and runs entirely on your machine. There are no accounts or hosted services — you just bring your own API keys if you want to use LLM features.

It also comes pre-seeded with Professor Damodaran’s public datasets (industry margins, risk metrics, failure rates, etc.) so you don’t have to manually assemble those inputs each time you build a model.

One design constraint was making sure the AI never touches the core valuation math. LLMs are allowed to suggest assumptions or critique them, but the underlying calculations remain deterministic.

A useful side effect is that the AI often behaves more like a skeptical analyst than an oracle. For example, it might flag things like:

“This margin expansion assumption is outside the historical range for this industry.”

Which is often exactly the kind of pushback you want when building a valuation narrative.

Curious if others building investing tools have experimented with a similar separation between hard financial models and AI-assisted research.

Repo:
https://github.com/stockvaluation-io/stockvaluation_io
by kanemcgrath | 2026-03-04 07:10:25+00:00
Anonymous account unmasking represents a new threat to anonymity.
not just this technique with llms, but the earlier text similarity one.

But I think it would be generally easier to counter in the same way.

Use an llm or heuristics to pose as someone else.

not only do you erase your traces, you add false positives in to the system which reduces the overall effectiveness of these techniques in the future.
A bit of poisoning the well.

I hope eventually an easy to use tool, with maybe a small local llm, can make it easy enough to do this, so that any future deanonymization attacks would be too untrustworthy to rely on
Tell HN: I got Claude Max for my open source project
by asim | 2026-03-04 07:11:11+00:00
Not long ago there was a link to an offer for Claude Max for open source projects with more than 5000 stars. My project Go Micro (https://go-micro.dev) fit that criteria and they gave me access. So we know it works! 10 years ago I was desperate to find or hire people to work on this with me. Now this subscription for an agent will basically cover the work. It's crazy to think what change occurs in that time. Anyways thanks to whoever posted it. I wouldn't have seen it otherwise!
by freehorse | 2026-03-04 07:11:31+00:00
M3 was a weird generation, as they contained fewer transistors than the previous ones. It is slightly faster in single core tasks, and has a few more cores, but they are very close. But in terms of gpu, m3s are quite nerfed esp because they lowered the memory bandwidth, so on llm performance they are on par. I have both an m3 and an M1 Max, one of them from work, so I have tested them extensively (though the m3 is binned and 14”, the m1 full and 16”). M3 had better TTFT but the M1 had a bit higher tokens/s.
by cvhc | 2026-03-04 07:12:10+00:00
If you actually read this law, it does exactly the opposite to avoid every random app/website from having to do age verification (like traditional age verification laws requires). It requires that only the OS to ask the user's age (not even verify it). Individual apps should use the age buckets signaled by the OS.

I don't even get why people think lobbyists hijack the law. It might be too left/progressive/socialism/or whatever. But, basically, the only major org opponent of this law is Google: https://calmatters.digitaldemocracy.org/bills/ca_202520260ab...
by knorker | 2026-03-04 07:12:18+00:00
I've been promoted several times for adding business value, complex or simple in implementation.

Saving every team from doing X manually, saving so and so many engineer hours per year. At cost Y per year instead in one team. The higher X and lower Y the better.

Backups did not exist. Now they do and work every time.

I wrote the top customer appreciated feature, associated with an increase with X increase in whatever metric.

"It was really hard" shouldn't come into it, or not as much by far.
by itsbalamurali | 2026-03-04 07:12:45+00:00
GPUI is the GPU-accelerated UI framework powering the Zed editor — written in Rust, designed for performance, with a React-like component model. It has backends for macOS, Linux, and Windows, but nothing for mobile.
gpui-mobile fills that gap by implementing the full gpui::Platform trait for iOS and Android — the same way gpui_linux does for Linux. It’s not a wrapper or a WebView bridge; it’s a proper native platform layer.
What’s implemented:
∙ iOS: Metal renderer via wgpu, UIKit windowing (UIWindow + CAMetalLayer), CoreText, GCD dispatcher
∙ Android: Vulkan/GL renderer via wgpu, NDK windowing (ANativeWindow), cosmic-text + swash for text, ALooper dispatcher
∙ Touch input with tap-vs-scroll state machine
∙ Momentum/fling scrolling tuned to match native UIScrollView / OverScroller feel
∙ Hardware + software keyboard support
∙ Safe area insets (notch, home indicator)
∙ Dark mode response
∙ Emoji rendering on Android 13+ (CBDT fallback for COLR v1 system fonts that swash can’t render)
The example app runs on a real iPhone and Android device with GPU-accelerated shaders, spring animations, and a component showcase.
by jeffrallen | 2026-03-04 07:13:23+00:00
One time around 2000 my little brother (born 1985) said, "you're so lucky, the 80's were awesome".

I grimaced and ignored the comment.

Now I get it: the 80s were awesome.

Some other great things: Amana Radaranges, getting a hand-me-down 1972 Toyota Corona from your dad, ET.
by nosefurhairdo | 2026-03-04 07:13:48+00:00
I give my agents read permissions to all repos related to a given repo. Add a bit of context to AGENTS.md or equivalent and they do just fine with understanding service boundaries.

Another concept I like is that we should optimize for next year's AI. Don't migrate to a monorepo if your only motivation is the performance of today's agents, because a year from now this may be a non-issue. Of course other motivations may still be valid.
by ozim | 2026-03-04 07:13:54+00:00
I would say I look at it from a different angle, big companies can afford specialists. Startups cannot afford specialized employee for database administration or setting up 401k.

But big companies would definitely love to have to pay a single salary for someone who does 401k and when this job is done administrates databases then in between reviews tweets searching for mentions of the company. Exaggerated example but I hope clear.

That already shows up with everything getting „Ops” obviously DevOps but I already have seen DataOps, SalesOps and MarketingOps.
by adrian_b | 2026-03-04 07:14:00+00:00
This CPU simulator does not attempt to achieve the maximum speed that could be obtained when simulating a CPU on a GPU.

For that a completely different approach would be needed, e.g. by implementing something akin to qemu, where each CPU instruction would be translated into a graphic shader program. On many older GPUs, it is impossible or difficult to launch a graphic program from inside a graphic program (instead of from the CPU), but where this is possible one could obtain a CPU emulation that would be many orders of magnitude faster than what is demonstrated here.

Instead of going for speed, the project demonstrates a simpler self-contained implementation based on the same kind of neural networks used for ML/AI, which might work even on an NPU, not only on a GPU.

Because it uses inappropriate hardware execution units, the speed is modest and the speed ratios between different kinds of instructions are weird, but nonetheless this is an impressive achievement, i.e. simulating the complete Aarch64 ISA with such means.
by yjftsjthsd-h | 2026-03-04 07:14:01+00:00
Yes, my intended meaning was that if you're doing that or something similar then I totally get having lots of layers because it's useful. Mostly I've only seen it come up with nix, but I can see how bootc would have a similar deal. That said, most container images I've ever seen aren't doing anything that clever and probably should be like... 2-3 layers? (One base layer, one with all your dependencies shoved in, and maybe one on top for the actual application.)