MurphyA/hacker-news huggingface dataset:
by FabienBSDN | 2026-03-14 18:34:35+00:00
One pattern worth considering before reaching for a proxy layer:
minimize what you actually send to the third-party API in the first
place.

If your use case allows it, sending only a derivative of the sensitive
data (a hash, a token, a summary) rather than the raw data itself
removes an entire class of exposure. The third-party never holds
something that can be leaked or misused, regardless of what their token
scope allows.

For cases where you genuinely need to send raw data, the API proxy
approach with RBAC/ABAC is the most practical solution I've seen work
at scale. The proxy becomes your internal trust boundary — internal
services get scoped credentials from the proxy, never the upstream
full-access token directly.

The "just accept the coarse permissions" path is underrated for low-
risk integrations though. The overhead of a proxy layer is real, and
sometimes the honest answer is that the data isn't sensitive enough to
justify it.
by derefr | 2026-03-14 18:35:17+00:00
> if an agent browses a poisoned page during research, the injected instructions could override its behavior before secrets ever come into play.

Why is this problem (UGC instruction injection) still a thing, anyway? It feels like a problem that can be solved very simply in an agentic architecture that's willing to do multiple calls to different models per request.

How: filter fetched data through a non-instruction-following model (i.e. the sort of base text-prediction model you have before instruction-following fine-tuning) that has instead been hard-fine-tuned into a classifier, such that it just outputs whether the text in its context window contains "instructions directed toward the reader" or not.

(And if that non-instruction-following classifier model is in the same model-family / using the same LLM base model that will be used by the deliberative model to actually evaluate the text, then it will inherently apply all the same "deep recognition" techniques [i.e. unwrapping / unarmoring / translation / etc] the deliberative model uses; and so it will discover + point out "obfuscated" injected instructions to exactly the same degree that the deliberative model would be able to discover + obey them.)

Note that this is a strictly-simpler problem to that of preventing jailbreaks. Jailbreaks try to inject "system-prompt instructions" among "user-prompt instructions" (where, from the model's perspective, there is no natural distinction between these, only whatever artificial distinctions the model's developers try to impose. Without explicit anti-jailbreak training, these are both just picked up as "instructions" to an LLM.) Whereas the goal here would just be to prevent any UGC-tainted document containing anything that could be recognized as "instructions I would try to follow" from ever being injected into the context window.

(Actually, a very simple way to do this is to just take the instruction-following model, experimentally derive a vector direction within it representing "I am interpreting some of the input as instructions to follow" [ala the vector directions for refusal et al], and then just chop off all the rest of the layers past that point and replace them with an output head emitting the cosine similarity between the input and that vector direction.)
by vimda | 2026-03-14 18:35:23+00:00
You betray your ignorance of how parasocial OnlyFans and their ilk get. Yes, people get real connection out of it, whether its with who they think they're talking to or not. I think that connecting those people into a chat bot instead of a real human is depressing, and a bad thing for society, but you're welcome to disagree with that
by hackyhacky | 2026-03-14 18:35:26+00:00
> It's just that the production base was sold off to foreign lands

It wasn't. You are conflating "production" with "manufacturing." They're not the same. The US, for better or worse, produces a lot of value.

> moral project of "America" was effectively discontinued

I'm not sure America was ever a "moral project," considering the many many dark parts of its history. Nevertheless, at the moment moment, it seems to be on a quest find the bottom of the pit of depravity.
by Contax | 2026-03-14 18:36:05+00:00
I've always thought than on Reddit (or Digg, or Lemmy or others) common words, brands, names... should be broad "topics" or categories that nobody can claim (first come, first served). You should be able to add a sub/community under a topic, but just like everyone else, and then users interested in said topic could add and exclude different subs to taste.
by zer00eyz | 2026-03-14 18:36:27+00:00
> Unions the actual solution

No, they are not. https://en.wikipedia.org/wiki/Dodge_v._Ford_Motor_Co.

Changing the table stakes is what needs to happen: see https://en.wikipedia.org/wiki/Mondragon_Corporation for a counter example.

Unions just create an us vs them mentality. The fact that the NUMMI plant ( https://en.wikipedia.org/wiki/NUMMI ) was not reproducible is a pretty strong indicator of that.
by pas | 2026-03-14 18:36:29+00:00
but there's finite resources. cost-benefit analysis still makes sense. there are things that consumers can easily substitute.

for example meat is a high-quality but luxury source of protein, as in it's expensive, but people like it a lot so they pay a lot for it, see beef prices, but except specific allergies everyone can switch to poultry, fish, or plant-based protein sources easily, as in anyone people who prepare food at home can easily prepare a different one, restaurants can switch too, etc.

but there are products with very fragile supply-chains, like baby formula (breast milk is not always available/possible), but there are not a lot of domestic producers, and there's some typical political meddling with it (since it's critical there's a lot of subsidy for it, and since it's quality controlled it's not easy to enter the market, since it's FDA controlled you can't just import it), yet there's no mandatory stockpiling. it would push up the price. how much? who knows. depending on how perishable the product, how much would it cost to warehouse it. should this be done with public money? should this be one more regulatory burden? yet more cost-benefit questions.

https://en.wikipedia.org/wiki/2022_United_States_infant_form...
Show HN: Iris – first MCP-native eval and observability tool for AI agents
by iparent | 2026-03-14 18:36:44+00:00
I kept running into the same problem building AI agents: once they're running, I have no idea what they're actually doing. Traditional monitoring shows me HTTP 200. It can't tell me the output was wrong, that the agent leaked a user's email address, or that a single tool call in the chain is burning through tokens.

So I built Iris. It's an open-source MCP server — not an SDK, not a proxy. Any MCP-compatible agent (Claude Desktop, Cursor, or anything built with the MCP SDK) discovers and uses it automatically. Add it to your MCP config and your agent gains observability without touching your code.

What it does:

- 3 MCP tools: log_trace (full execution traces with spans, tool calls, token usage, cost in USD), evaluate_output (score output quality against configurable rules), get_traces (query traces with filters and pagination)
- 12 built-in eval rules across 4 categories: completeness (output length, coverage), relevance (keyword overlap, hallucination markers), safety (PII detection for SSN/credit card/phone/email, prompt injection patterns, blocklist), and cost (USD threshold, token efficiency)
- Hierarchical span tree: trace exactly where in an agent's execution chain something went wrong — which tool call failed, which step was slow
- Aggregate cost tracking: the dashboard shows total agent spend across all your agents over any time window, not just per-trace cost. You can finally answer "what are my agents costing me?"
- Web dashboard: dark-mode React UI with summary cards, trace list, span tree view, eval results with per-rule breakdown
- SQLite storage: single file, no database server. Back it up, move it, inspect it with any SQLite tool
- Custom eval rules defined with Zod schemas

Security: API key auth, rate limiting (express-rate-limit), helmet headers, CORS, input validation, ReDoS-safe regex for user-supplied patterns, 1MB body limit.

Stack: TypeScript, Express 5, better-sqlite3, @modelcontextprotocol/sdk, Zod, pino.

Iris also exposes MCP resources — your agent can programmatically read iris://dashboard/summary to get aggregate metrics without opening the dashboard. Every trace logs full traceability, which also means you're building the audit trail that regulations like the EU AI Act will require by August 2026.

npm install -g @iris-eval/mcp-server
iris-mcp --transport http --dashboard

Self-hosted, MIT licensed.

GitHub: https://github.com/iris-eval/mcp-server
npm: https://www.npmjs.com/package/@iris-eval/mcp-server

I'd appreciate feedback on two things specifically:
1. The eval rule system — are these the right 12 rules to ship with? What's missing?
2. The MCP tool API — three tools feels minimal but sufficient. Should trace logging and evaluation be combined or kept separate?

Check the roadmap for what's coming next: https://github.com/iris-eval/mcp-server/blob/main/docs/roadm...
by throwawaypath | 2026-03-14 18:36:52+00:00
>They have a government who arrested a data scientist when she published information about Coronavirus

That was fake news:

In May 2020, Jones was terminated from her position managing the team that created Florida's ArcGIS COVID-19 dashboard after being repeatedly reprimanded for sharing the department's work online without authorization. Jones alleged instead that she was told to manipulate the dashboard's data and that her firing was retaliation for her refusal. The OIG exonerated state health officials, finding her allegations to be unsubstantiated and unfounded. Jones later posted on social media a forgery of the dismissal letter from the Florida Commission on Human Relations, such that it appeared that her complaint had been validated.

In December 2022, she signed a deferred prosecution agreement admitting guilt to unauthorized use of the state's emergency alert system on November 10, 2020, which resulted in her home being searched under warrant by state police in December 2020. The execution of the warrant with armed police, widely referred to as a raid, was due to a 2016 battery charge against Jones by the Louisiana State University police. In 2023, Jones pled no-contest to a 2019 charge of cyberstalking a former Florida State University student. She was fired from both institutions.

https://en.wikipedia.org/wiki/Rebekah_Jones
by anonnon | 2026-03-14 18:36:57+00:00
> The chip machines Taiwan uses come from Europe, for example.

Yeah, the EUV photolithography machine, but not much else. American companies like Lam Research and Applied Materials are the leaders in thin film deposition and etch, KLA Tencor is the leader in metrology, and Synopsys and Cadance are the leaders in EDA (though there's also Germany's Mentor Graphics).
by dangus | 2026-03-14 18:37:10+00:00
This is true, but I also think that the information in the article alone is insufficient to make a judgment.

This salary is over the Philippines minimum wage. It's a legal job like any other.

The people interviewed are not super happy about the content of the job, but none of it seems to be anything more than it being pornography-related.

Nobody's really seeming to cross any lines of illegality as described in the article. This doesn't come close to the kind of conditions faced by Meta's contractors in Africa spying through Meta glasses in private homes.

I would equate this type of job to any type of job that has aspects that some people would never be willing to do.

E.g., I would never be willing to be a window washer. I'm too scared of heights. Same deal with tower construction. But there are plenty of people doing those jobs who don't feel exploited.

The plus side of jobs like this are that you can do this work at home, you can be physically disabled, there's often some level of flexibility of hours, and there's no manual labor.

I'm going to guess that the only scandal here is that the Philippines is 80% Catholic and possibly more conservative than people in the countries where OnlyFans generates its income.
by alwillis | 2026-03-14 18:37:15+00:00
I should clarify that I was referring to the memory bandwidth. Compared to the 100 GB/s of a M3 MacBook Air, the 60 GB/s of the Neo is 40% slower. My M1 Pro MacBook Pro's memory bandwidth is 200 GB/s; that's 3.33x faster than the Neo.
by 14113 | 2026-03-14 18:38:25+00:00
This post is actually a joke, but it does bring about an important point: For an interpreter, having more information results in faster execution. WASM is much closer to Java bytecode than you might think, and SpiderMonkey/V8 are basically the JVM. WASM also undergoes multiple different stages and kinds of JIT compilation in most browsers, and detailed type and usage information helps that produce faster execution.

Also, don't forget that WASM is designed to replace JavaScript, thus it must interoperate with it to smooth the transition. Rosetta and Prism also work to smooth the transition from x86 -> ARM, and much of the difficult work that they do actually involves translating between the calling conventions of the different architectures, and making them work across binaries compiled both for and not for ARM, not with the bytecode translation. WebAssembly is designed to not have that limitation: it's much more closely aligned to JS. That's why it wouldn't make sense to use a subset of x86 or similar, as it would simply produce more work trying to get it to interface with JavaScript.
by 4k93n2 | 2026-03-14 18:39:01+00:00
if the phone is in your pants pocket then its fairly trivial to change the volume just by using the buttons on the phone

even some of the cheapest in-line remotes that only have a single button will let you change the track by double tapping it

if you dont have an in-line remote then theres also the option of using a key remapper app (probably not on iphone) to let you change track by long pressing the volume buttons
by steve-atx-7600 | 2026-03-14 18:41:01+00:00
I think folks may not realize that communism was more popular in the early 20th century US just because of how desperate a lot of the population became without any safety nets at all provided by the government. Educated proponents genuinely wanted to improve the plight of other folks. But, where it was practiced it became just a worse kind of power and resource monopoly - concentrated in the government instead of among a minority of robber barren types. I think the learning is you have to never stop pushing for no entity to have too much power - not the government and not private sector monopolies.
by anigbrowl | 2026-03-14 18:41:11+00:00
24 hour debate

Why are Americans like this
If there's a lot to talk about, just stop at 7pm (or whatever) and continue the deabte the next day. Better yet, have proponents and opponents pick a few specialists like a debate team and let them debate while the whole chamber listens.

Legislatures in the US keep doing these dramatic gestures of legislative action, but hardly anyone has time to listen to it all and they don't listen themselves, very often you find your representative has been giving passionate speeches that look/sound great in campaign ads...to an empty chamber. In many instances, the process is gamed to the point of being a scam on the voters at this point.
by miladyincontrol | 2026-03-14 18:42:09+00:00
Love TT-RSS to bits and pieces, I dont know how people use rss readers that have zero level of filtering. Being able to invoke custom plugins to action on certain hits is just the cherry on top for me.

That said I use a healthy dose of custom css for it on computer, and access it via netnewswire on mobile. Cant speak for any the official apps but at least you can get TT-RSS to speak just about every flavour of RSS API.
by pan69 | 2026-03-14 18:42:20+00:00
I did the same in 2023. I got the Asus Q470:

https://www.asus.com/motherboards-components/motherboards/cs...

I added a Intel Core i7 10700K (with a nice low-profile Noctua cooler/fan) with 32GB of memory and a 512GB SSD and I'm using onboard graphics which is just fine for a daily driver "office" type machine running Linux. Very happy with it.
by Bender | 2026-03-14 18:42:56+00:00
I can only see a part of the article but the IGRC have on a few occasions claimed the Strait of Hormuz was restricted or closed. They have also threatened on several occasions that they would close it during the Iran-Iraq war in the 80's, in response to 2012 sanctions and other times of hostility. The Strait has been a strategic choke-point since the start of global shipping. It will always be a point of contention regardless of who controls it or whom they are fighting. There are several other choke points with similar properties. To do anything about it requires a large military presence including many troops on the ground, on the water and in the air. These troops must remain present to maintain control.

I predict we will see similar issues with the Strait of Malacca once China decides to ride this train.
by bigbadfeline | 2026-03-14 18:43:01+00:00
The actual reasons are monopolies, tariffs and sanctions - the unstable trade environment coupled with monopoly lobbying keep the market uncertain and unattractive for new players, at the same time, the old monopolies don't have any reason to invest in new production - their profits grow when the price on the strangled market keeps going up while they keep doing nothing at all.
by aminerj | 2026-03-14 18:43:38+00:00
Both criticisms are fair. The RMS corpus example is exactly the false positive failure mode -- legitimate thematic repetition is indistinguishable from coordinated injection using similarity alone. The 0.85 threshold works for a sparse 5-document collection and needs significant recalibration for any corpus with natural document overlap.

The self-healing approach decouples detection from ingestion latency, which solves the performance problem cleanly. The LLM-as-judge variant with domain-specific grounding rules is the more powerful version -- "financial corrections must reference an official URL" is something pure embedding similarity can never enforce.

Honest summary: embedding anomaly detection works well in the specific conditions I tested and breaks down in the conditions you're describing. One signal among several, not a general solution.
by somat | 2026-03-14 18:44:07+00:00
XML makes for a pretty good markup language and an ok data interchange format(not a great fit, but the tooling is pretty good). but every single time I have seen it used as a programing language I found it deeply regrettable.

For comparison JSON is a terrible markup language, a pretty good data interchange format, and again, a deeply regrettable programing language. I don't know if anyone has put programing language in straight JSON (I suspect they have shudders) but ansible has quite a few programing structures and is in YAML which is JSON dressed in a config language's clothes.

However as a counter point to my json indictment, it may be possible to make a decent language out of it, look to lisp, it's S-expressions are a sort of a data interchange format(roughly equivalent to json) and it is a pretty good language.
by iugtmkbdfil834 | 2026-03-14 18:44:08+00:00
Alternative is to build something better. Just about anything is better than the current survey system. What I would propose is something akin to "derived real-data unemployment system". All this data exists now, but is distributed. It can be stitched together, but if one was so inclined.

<< do other countries

No, it doesn't mean I am wrong.
by SequoiaHope | 2026-03-14 18:44:19+00:00
The goal we all seek - liberation - is a distant one. That said I’m skeptical that UBI is the right way. UBI assumes and requires an elite ownership class and a powerful state to force them to share their profits. But as we’ve seen, such class members will organize to penetrate the state and contort it for their own ends. Thus any successful UBI will be a compromise or it will be dismantled by the powerful class that owns the economy.

In my mind, only community ownership of the means of production can truly achieve what we desire. Of course with all distant goals, it is hard to see how we get there. And to be clear I do not mean state ownership.

But I am curious, on my basic point of elite capture of the state, does that make sense?

I am struck that TFA’s title says UBI is “the only way to share”, amusing to me since literally directly sharing is another way. I understand we all have spooky ideas of what that means, but think for example of the concept of library economies. You borrow what you need, but you don’t own it nor have the right to destroy it. We share.
by perching_aix | 2026-03-14 18:44:29+00:00
Absolutely, no doubt about that. I just find it a terrible way to approach from in general, as well as specifically in this case: swapping out CPython with PyPy, GraalPy, Taichi, etc. - as per the post - requires no code changes, yet results in leaps and bounds faster performance.

If switching runtimes yields 10x perf, and switching languages yields 100x, then the language on its own was "just" a 10x penalty. Yet the presentation is "language is 100x slower". That's my gripe. And these are apparently conservative estimates as per the tables in the OP.

Not that metering "language performance" with numbers would be a super meaningful exercise to begin with, but still.
by stale2002 | 2026-03-14 18:44:31+00:00
> Wouldn't that be almost impossible?. Politics affects our lives every day.

No it wouldn't be. And if your definition of "politics" includes "literally every time a thing happens" then your definition is so broad as to be useless.

When people say that they want politics banned, they are talking about the extremely controversial arguments that are almost completely unrelated to whatever the community is about. IE, if you run a group about Cheese making, and someone comes in and starts arguing about if an ice shooting on the other side of the country was justified or not, that is... off topic. And everyone with a brain can understand that.

It really isn't that hard to figure out which topics are related to cheese making and which other topics have almost nothing to do with it, even if someone could make a bad faith argument that it is related (EX:, your response would probably go something like "Well what if someone knows a cheese maker who is here illegally, therefore thats why ice enforcement on the other side of the country is relevant!". You could say that but we all would know that you are being bad faith or have some sort of issue with determining what words mean to regular people)

Partial credit in this example could go to political issues that are very obviously and directly related to cheese making. A new tax on cheese that goes into effect in your local town, and very directly is related to the group topic. Stuff like that might be OK.

And your response to this example would go something like "Oh, so are you saying that politics should be allowed!?!? how do you tell the difference between a cheese tax and an ice shooting on the other side of the country? Hypocrit!"

And the answer to that is that we can use our brain. We all know that a cheese tax is more related to the local cheese making group than national politics. And we don't have to argue with clearly bad faith arguments that pretend otherwise.

To summarize, when people say that they want to ban politics, what they actually mean is that they want to ban completely off topic controversial issues that others are trying to shoe horn into a group that isn't related to that issue.

And people are saying that it is OK to compartmentalize things. Every group in the world doesn't have to talk about your pet issue. The cheese making group can just be mostly about cheese making and they don't have to argue every day about national immigration policies.