MurphyA/hacker-news huggingface dataset:
by Horos | 2026-03-03 18:09:48+00:00
Prompt injection detection library in Go, zero regex.

Most injection evasion works by making text look different to a scanner than to the LLM. Homoglyphs, leet speak, zero-width characters, base64 smuggling, ROT13, Unicode confusables — the LLM reads through all of it, but pattern matchers don't.

The project is two curated layers, not code:

Layer 1 — what attackers say. ~35 canonical intent phrases across 8 categories (override, extraction, jailbreak, delimiter, semantic worm, agent proxy, rendering...), multilingual, normalized.

Layer 2 — how they hide it. Curated tables of Unicode confusables, leet speak mappings, LLM-specific delimiters (
, 
, 
...), dangerous markup patterns. Each table is a maintained dataset that feeds a normalisation stage.

The engine itself is deliberately simple — a 10-stage normalisation pipeline that reduces evasion to canonical form, then strings.Contains + Levenshtein. Think ClamAV: the scan loop is trivial, the definitions are the product.

Long term I'd like both layers to become community-maintained — one curated corpus of injection intents and one of evasion techniques, consumable by any scanner regardless of language or engine.

Everything ships as go:embed JSON, hot-reloadable without rebuild. No regex (no ReDoS), no API calls, no ML in the loop. Single dependency (golang.org/x/text). Scans both inputs and LLM outputs.

result := injection.Scan(text, injection.DefaultIntents()) if result.Risk == "high" { ... }

https://github.com/hazyhaar/pkg/tree/main/injection
by NewsaHackO | 2026-03-03 18:09:51+00:00
I guess the thing that worries me is more so population effect versus direct personal ones. When companies know they can extract useful information from a source, there becomes a market for the information, which further incentivizes others to collect the information. The other thing is that even if you don't care about ads, I assume you care at least about browsing privacy. The main reason why GDPR was even passed was data privacy and security.It is difficult to know who has what personal information and for how long they keep it. Because of that, it just takes one breach where suddenly your email/username/personal information, along with all of your browsing activity, gets leaked. This wouldn't only be the ones that you purposely entered your email address in; it just takes one site to have your cookie "fingerprint" and email connected, and suddenly all the sites that recorded that fingerprint will have a record that you visited them. All in all, I agree that there is a low chance of personal harm to you, but I look at it like putting motor oil in the storm drain. "Low trust" cultures where people only care about the direct effects of actions to themselves instead of society as a whole always fare worse than cultures where everyone sets a standard of what is acceptable or not.
by philwelch | 2026-03-03 18:10:20+00:00
It’s possible to build mechanisms for this. Not perfect or foolproof ones. Maybe your phone stores a digital ID for its owner and sets a cryptographically signed “IsAdult” header. If you pull the signing key from the phone you can spoof that, but you can bring a fake ID to the bar too.

The problem is that the people who want age verification don’t really care about the technical details of how it’s implemented and the people who oppose age verification just want unfettered online pornography out of principle, so no one is actually thinking about how to implement age verification in a way that protects privacy.
by pinkmuffinere | 2026-03-03 18:10:28+00:00
Thankyou for your well-moderated reading of the text, you're absolutely right that Gizmodo's article is blowing it out of proportion. The actual ask is not so absurd. My reading of the text is that all of the following are encouraged:

- The national anthem / pledge of allegiance (explicitly suggested by the text)

- Civics-related stuff -- information about voting, how laws are passed, the branches of govt, the separation of powers, etc.

- Arts that are "truly" American -- Blues, Jazz, Rock n Roll, etc. I know there will be disagreement about what counts as "American", but I think it's clear that there are some art forms that wouldn't exist without America's unique mixture of cultures.

- Things about America's history -- speeches from George Washington/Lincoln/MLK/Other significant figures, the musical Hamilton, the emancipation proclamation, the text from the statue of liberty, discussion of Japanese internment camps, the history of Hawaii/Peurto Rico/Alaska/Any relevant state, etc

I'm sure there will also be some less inclusive bits of history that are endorsed by some broadcasters. But Carr's message is not asking for that, it's just encouraging an increased focus on America. America is a melting pot, and has a great history of including downtrodden people, as well as a long history of injustice. A focus on America _doesn't_ mean we endorse the injustice. If anything, I think the injustice should be discussed, because they make the big shifts even _more_ palpable. There are people alive today that went to segregated schools. That's insane, and personally I do think that knowledge changes my behavior. I'd be very happy to be reminded about those things by public radio.

There is one line that I felt was a bit concerning, but I think it really depends on your reading of the text (emphasis mine):

> The Pledge America Campaign [encourages broadcasters to air] ... _pro-America_ content"
by horsawlarway | 2026-03-03 18:10:44+00:00
I mean... it really doesn't matter.

There are only a couple of relatively niche spaces where things like cpu performance are really the bottleneck right now.

Hell - RPi 5 is perfectly fine for a huge range of development tasks. The 8gb version is very reasonable $125.

Can you find things that these boxes can't do? Absolutely. Do most developers do those things? ehhhh probably not. Especially not in the webdev space.

Would I still pick a nice machine if given the chance? Sure, I have cash to burn and I like having nice laptops (although not Apple...).

But part of the "AI craze" is that hardware genuinely is commoditized, and manufacturers really, REALLY wanted a new differentiating factor to sell people more laptops. There's not much reason to upgrade, especially if the old machine was a decent machine at time of purchase.

I have 8 year old dell XPS laptops that do just fine for modern dev.
by sillywalk | 2026-03-03 18:11:07+00:00
> The scary thing is that Indian juduciary is infamous for being incapable of tolerating any kind of criticism against it and not hesitating to put people in jail for "contempt" for just calling out corruption.

From [0]:

"India's Supreme Court has banned a school textbook after a chapter in it made a reference to corruption in the judiciary.

The revised social science book was published by the National Council of Educational Research and Training (NCERT), which designs the syllabus and textbooks for millions of schoolchildren in the country.

On Wednesday, after Chief Justice Surya Kant criticised the book, saying it could damage the reputation of the judiciary, NCERT apologised and withdrew it from distribution.

Now the court has ordered a complete halt on the book's publication, saying its contents were "extremely contemptuous" and "reckless".

"A complete blanket ban is hereby imposed on any further publication, reprinting or digital dissemination of the book," the court said on Thursday, according to legal news website LiveLaw.

The judges also issued notices to the top bureaucrat in the school education department and the NCERT director, asking them to explain why they should not be held in contempt of court for including the "offending chapter".

[0] https://www.bbc.com/news/articles/c627l7zexr8o
by jerf | 2026-03-03 18:11:12+00:00
"It is entirely jarring if an AI NPC that says something that's not consistent with the game state, or changes the game state in a way that violates the constraint of the understood rules/boundaries of the game"

I played with the Mantella mod for Skyrim a few months back and one of the problems with LLMs is you can't keep them on topic. I even used a custom trained one just for Skyrim, but the problem was it still has vast real world knowledge it shouldn't. For instance I asked a town guard where I could find Taylor Swift, who said she might be down at the tavern playing music. While the conversation didn't super overtly break the theme, the guard "stayed in character" and didn't start gushing about specific songs of hers or something, he still "knew" who she was. Current-gen AIs can't be fenced in very well. And almost every game idea needs some sort of fencing in.

If you play along with the AI it's not bad but if you poke the edges the illusion breaks quickly. You can't prompt a current-gen AI to just "forget everything you shouldn't know because it doesn't fit in the game universe."

I expect future architectures probably will fix this and that will help a lot. But we don't have them yet.
by rickydroll | 2026-03-03 18:11:17+00:00
Am I treating humans like machines or machines like they're human?

LLMs were created in our image. Hallucination, confabulation, sycophancy, psychopathy, learning, reasoning, and blackmail are all behaviours in LLMs that were first found in humans. All these behaviors are present in human writing and imagery captured in a training set. So to me, there's no surprise that LLMs exhibit these behaviors.

Do I think LLMs are sentient or sapient? I'm in the probably not camp. We don't have a good test for either, but they do illustrate the resistance to acknowledging any other being or creation as having the same capabilities as Homo sapiens.
by jodrellblank | 2026-03-03 18:11:28+00:00
GDPR has very little to do with dark patterns, nag screens, or online tracking?

> "all the rest of it is a terrible idea"

Having a legal right to ask a company for a copy of all the data they have on you is terrible?

Having a right to ask a company to correct errors in data about you, or delete data about you, that's terrible?

A company having to tell you what they intend do with data about you and stick to it for the threat of a big fine, that's bad?
by saghm | 2026-03-03 18:12:26+00:00
Sure, I don't disagree. I feel like I was pretty explicit about what I was claiming though:

> it doesn't seem that crazy to imagine they'll end up closing the gap even further to the point where you could probably assume a similar level of hardware support from Asahi for a year-old Macbook as you would for a year-old non-Apple laptop
by jakenotjay | 2026-03-03 18:12:30+00:00
Epoch Blue | Senior Full Stack Engineer, Senior Solutions Engineer | Hybrid (London, King's Cross) | Full-time | Visa sponsorship

We’re building the first-mile supply chain intelligence for agriculture and forestry. Our API and platform monitor 10M+ farms across 120M+ hectares - automating deforestation, carbon emissions, biodiversity metrics and water impact for enterprise agri-commodity brands, compliance platforms and NGOs. We’re API-first, geospatial driven and used by customers like Sphera, Assent, WWF and Golden-agri resources. We’re Google Cloud Partners too.

Small, high-output engineering team. Real ownership, direct work with founders.

Senior Full Stack Engineer - TypeScript across the full stack. TanStack Start / React 19 / Vite frontend with geospatial map views (Mapbox GL, MapLibre, Deck.gl). PostgreSQL with Drizzle ORM. You'll own database schema design, server-side APIs, auth architecture (Better Auth, enterprise SSO, B2B multi-tenancy), and ship features end-to-end.

Senior Solutions Engineer - Technical backbone of our customer engineering function. Own enterprise integrations end-to-end, run geospatial and statistical analyses on supply chain datasets (Python, GeoPandas, XArray, Dark), debug complex multi-system issues, build reference implementations, and be a credible technical voice in pre-sales. Strong Python, SQL, REST API, and geospatial data experience.

Both roles: competitive salary + equity, hybrid with our London office in King's Cross, visa sponsorship available (no relocation costs).

https://epoch.blue
william@epoch.blue
by dredmorbius | 2026-03-03 18:12:34+00:00
"Chumbox" has been a descriptive term since 2015:

"A Complete Taxonomy of Internet Chum" (4 June 2015)

<https://www.theawl.com/2015/06/a-complete-taxonomy-of-intern...>

<https://en.wikipedia.org/wiki/Chumbox>
by travelhead | 2026-03-03 18:12:41+00:00
Viib is a static ad generation platform that turns a single website URL into production ready ad creatives.

The core idea came from a simple frustration. Generating ads is repetitive, but the input data is usually already structured on the site itself. Brand colors, value props, product hierarchy, reviews, pricing language, hero images. Most ad tools ignore that structure and start from a blank prompt.

The focus is static ads because they are still the workhorse of performance marketing. Faster to test, cheaper to iterate, easier to scale.

Right now the system generates three ads on signup so people can see output quality immediately. No long onboarding.

Happy to answer technical or product questions.
by cloudlandsdev | 2026-03-03 18:13:01+00:00
I'm making one as a hobby project alongside my day job.

It's a debate chat game where two humans debate on a topic and a biased AI judge picks a winner. Over time players compete for ELO rankings like in chess or similar head-to-head competitive games.

I'll probably make a blog post someday about what's been involved but I think the points in OP are spot on. I've been struggling to make the format feel fun and lively. Two things really helped compared to my early versions - real-time streaming of the other person's arguments so you're not just staring at a timer while they're writing and very very short rounds so you get feedback and results quickly.

I've also tried a version with AI NPC opponents and it's much less fun than playing against real humans for reasons I can't entirely articulate. The AIs just don't make for very interesting debaters and the wins against them feel a bit shallow somehow. Right now, I've got NPCs on the game which you can opt into debating if you spend more than 30 seconds in the matchmaking queue but I hope once I get proper player counts I can disable them entirely.

I'm super biased, but proud of how the game has been coming along. Will make a show hn post someday but if anyone's curious my alpha version is live here: https://letsarg.com
by reckondigital | 2026-03-03 18:13:24+00:00
Reckon Digital | Full-Stack Software Engineer | UK or remote | Python, React, AWS

We are looking for an experienced Full-Stack Software Engineer to work with us on an upcoming project for a large humanitarian organisation. Required: Python, React, AWS, Postgres. The place of work is London, UK but we're open to remote applicants as well (UK or international).

More info on what we do at Reckon Digital: https://reckondigital.com/

Interested? Email us at jobs@reckondigital.com! Make sure you include an updated copy of your CV.
by trymas | 2026-03-03 18:13:25+00:00
Watch this video if you have time: https://youtu.be/6AtTk3XoQVs

TL;DW: 2010s intel mac era laptops have seen at very best 35% single core CPU performance over in 5 years time! This happens almost every year now with M line macs.

Rant:

Retina macs were great and had great form factor over unibody macs. Touch-bar macs in the mid 2010s was IMHO a disaster. Terrible keyboard, poorer thermal capacity, missing essential ports, adapters galore.

But when it comes to performance - early 2010s macbooks with dedicated gpus had serious overheating issues.

Retina macbooks were decent, both form factor and performance.

Touch-bar macs were totally abysmal, all performance gains over previous generations was all through pumping more heat. CPUs constantly pegged at 90C+, cannot have laptop on your lap, Apple planning and delaying release schedules around intel fumbling their tik/tok cycles (as far as i remember some macs did not get any improvements for 2 years+ if not way more). Upgrades sometimes were total jokes, because of thermal throttling there was no point to put more hardware than it could work with. From reviews buying higher level cpu sometimes didn’t give noticeable real life gains because, again, thermal throttling kicking in instantly. 2020 intel macbook pro has fans spinning almost all the time. Having a remote call - your battery is dead in 2h max (essentially 1% per 1min).

M1 mac gave insane perceived performance boost - no noticeable throttling. Macbook airs are fully passively cooled, never heard M Macbook pro with fans screeching.

Also real full work day battery doing real work without power adapter at full performance. Cool to touch most of the time.

I made homework for a job in 2020 on a 2013 personal macbook. Apart from memory footprint - I could not feel noticeable difference on development experience. Editing images was frustrating on both. With M macs - its silent, smooth fast.

Number of parallel cores matching best intel cpus on base models, GPU blowing any mobile gpu in price range out of the water with thermal capacity to peg it 100% no problem. Unified memory for those GPUs to do what you could only imagined doing on GPUs that cost 3 times more than the macbook.

It’s a such excellent architecture that yeah - it’s “boring” you can nitpick about M69 Ultra Pro Max performance, but take a base MBP of any M line and it blows almost any laptop out of the water, even to this day.
by pinkmuffinere | 2026-03-03 18:13:26+00:00
I'm disappointed by the discussion on this submission. Here's a list of things that would be encouraged by the main text of the request [1]:

- The national anthem / pledge of allegiance (explicitly suggested by the text)

- Civics-related stuff -- information about voting, how laws are passed, the branches of govt, the separation of powers, etc.

- Arts that are "truly" American -- Blues, Jazz, Rock n Roll, etc. I know there will be disagreement about what counts as "American", but it's clear that there are some art forms that wouldn't exist without America's unique mixture of cultures.

- Things about America's history -- speeches from George Washington/Lincoln/MLK/Other significant figures, the musical Hamilton, the emancipation proclamation, the text from the statue of liberty, discussion of Japanese internment camps, the history of Hawaii/Peurto Rico/Alaska/Any relevant state, etc

I think those would all be positive. I'm sure there will also be some less inclusive parts that will endorsed by some broadcasters (I think discussion of that is good, but not endorsement). Carr's message is not asking for that, it's just encouraging an increased focus on America.

[1] https://docs.fcc.gov/public/attachments/DOC-418890A1.pdf
by gdubs | 2026-03-03 18:13:28+00:00
One thing I've learned is, there's a ton of interesting stuff in the world. Super talented people. But, what surface and gets widespread recognition and adoption is often very much determined by luck, and these days by algorithms. It's very possible there's some really cool AI games out there already, and they just haven't been discovered.

The other aspect is that a lot of people in the AI community are completely hooked on the reward-seeking of 'new thing'. Every hour there's some new tool to try out that 'changes everything'. But, without grinding it out you might never create something interesting by constantly jumping to the next new thing. Because, technological capabilities are just one part of the story.

Third, what makes something 'fun' often requires tons of iteration and a lot of LLM-type tools still rely on snapshots of applications. They're not fully there yet in terms of what happens in between moments. There are lots of principles they can draw on from and get a good prototype quickly, but it again comes back to really just slogging through lots of iterations until you find something fun.

Finally, I think with every new medium you get a first wave that really just copies the medium that came before it. Early radio was a lot like theater. Early TV was a lot like radio. I think eventually we'll see people – probably younger people – who are fully into AI and will find interesting things about that medium to express in ideas, and we'll get some really new and interesting stuff as a result.
by armchairhacker | 2026-03-03 18:13:38+00:00
It’s not really, the patent is very narrow

https://old.reddit.com/r/Games/comments/1iyrbzd/clearing_up_...

https://patents.google.com/patent/US10926179B2/en

The patent was filed in 2016 and granted in 2021. If the system was so useful we would’ve seen it in another game before then, or a very similar system after.
Show HN: We want to displace Notion with collaborative Markdown files
by antics | 2026-03-03 18:13:45+00:00
Hi HN! We at Moment[1] are working on Notion alternative which is (1) rich and collaborative, but (2) also just plain-old Markdown files, stored in git (ok, technically in jj), on local disk. We think the era of rigid SaaS UI is, basically, over: coding agents (`claude`, `amp`, `copilot`, `opencode`, etc.) are good enough now that they instantly build custom UI that fits your needs exactly. The very best agents in the world are coding agents, and we want to allow people to simply use them, e.g., to build little internal tools—but without compromising on collaboration.

Moment aims to cover this and other gaps: seamless collaborative editing for teams, more robust programming capabilities built in (including a from-scratch React integration), and tools for accessing private APIs.

A lot of our challenge is just in making the collaborative editing work really well. We have found this is a lot harder than simply slapping Yjs on the frontend and calling it a day. We wrote about this previously and the post[2] did pretty well on HN: Lies I was Told About Collaborative editing (352 upvotes as of this writing). Beyond that, in part 2, we'll talk about the reasons we found it hard to get collab to run at 60fps consistently—for one, the Yjs ProseMirror bindings completely tear down and re-create the entire document on every single collaborative keystroke.

We hope you will try it out! At this stage even negative feedback is helpful. :)

[1]: https://www.moment.dev/

[2]: https://news.ycombinator.com/item?id=42343953
by zdragnar | 2026-03-03 18:13:55+00:00
I didn't mean to suggest that the government is going to hide under people's beds and stab them in their sleep if they get sick.

The government is responsible for funding every aspect of this process, though. It regulates the controls and rubrics over who gets what kind of care. The husband may have instigated it, but the system is broken if a person eligible for euthanasia isn't eligible for palliative care or hospice.

Most importantly, I continue to contend that MAID is turning into something that isn't what Canadians voted for. It is, however, turning into something that its opponents feared might come to pass.
by chrisjj | 2026-03-03 18:13:57+00:00
> beloch 9 hours ago | parent | prev | next [–]

"I inadvertently ended up with a paraphrased version of Shambaugh’s words rather than his actual words,” Edwards continued. He emphasized that the “text of the article was human-written by us"

... except the bit that wasn't.

Nomination for Weasel Words of the Year award.
by lproven | 2026-03-03 18:14:06+00:00
Interesting.

I almost never use Windows, and I don't want things like WSL or Docker anyway. I mainly keep it around for things like upgrading firmware, occasionally flashing new ROMs onto phones, stuff like that.

I tried the MyWhoosh virtual-cycling app on one of my boxes.

https://mywhoosh.com/

I was able to download and install the Windows Store direct from Microsoft with no problem at all.

https://apps.microsoft.com/detail/9wzdncrfjbmp?hl=en-GB&gl=I...

(I just Googled that link -- it might not be the right one. MyWhoosh is only available on the Store. It refused to run on my elderly GPU anyway, though.)

Thanks for the warning, though!