MurphyA/hacker-news huggingface dataset:
by remarkEon | 2026-03-09 03:49:25+00:00
I think what you are describing is technically possible (not my immediate domain, however). They don't have real-time insight into what the model is being used for, you are correct about this afaik. But the incident that kicked off this paranoia was Anthopic calling around after the fact to try to find out how JSOC was using the model during the Maduro raid. None of the context of those questions are public, and I doubt they will become public, but it stands to reason that the nature of the questions was concerning enough for the War Department to cause them insist on the "any lawful use" language to be inserted into the contract.

>The whole 'do not use our models for mass surveillance' is at the end of the day an honor system. Companies have no real way of enforcing that clause, or determining that it has been violated.

You are also correct here imo, with one important caveat. Even if private companies have the means for enforcing that clause, it is not their business to do so. Maybe that's the crux of the problem, one of perspective. The for-profit entity in these arrangements is not and can never be trusted as the mechanism of enforcement for whatever we, as a republic, decide are the rules. That is the realm of elected government. Anthropic employees are certainly making their voice heard on how they believe these tools should be used, but, again, this is an is versus ought problem for them.
by qingcharles | 2026-03-09 03:50:02+00:00
Moderating Reddit subs can be a huge money maker. I know people making $100K/year from it. There are cabals, especially in the adult sections. Reddit has tried to address this recently by limiting the number of subs a person can moderate, but that just causes these big accounts to create more user accounts and split all their subs up that way.
by defrost | 2026-03-09 03:50:11+00:00
> The people who pushed the button to launch the missiles that hit the school, and the people who ordered them to do that, are fully responsible here, not the tools they used.

Absolutely. A real issue here is the normalizing of "AI scapegoating".

The real failure? Not following through on human verification of a "strong lead".

The Iran school site absolutely was _once_ a target, in the distant past - it's sited on and within a former Iranian Guard post with airstrip, etc.

The part that needed strong checking was "history since last identified as a target" - and that site has a history of disrepair and abandonment.

The debatable issue was whether the larger site did indeed store significant military assets underground, etc. which was entirely possible.
by devonkelley | 2026-03-09 03:51:07+00:00
The irony is that the same models generating spam Show HN posts are the ones people are building products with. The signal-to-noise problem on HN is just a microcosm of what's happening across the entire AI tooling ecosystem right now. Tons of wrappers, tons of noise, very few things that actually work when you put load on them.
by gexla | 2026-03-09 03:51:56+00:00
Didn't read the articles, but at least the planners know and understand a map.

SO... a map is static reference. A calculator is deterministic computation. An LLM is probabilistic generation

In high-stakes environments like military planning, tools that generate new claims rather than reference known data introduce a different class of risk.

Yes, everyone is responsible for their own decisions. But then circle back to risk. How can the planners be sure they aren't dealing with hallucinations, questionable data, differing outputs based on prompts, and a long list of other things...
by qsera | 2026-03-09 03:52:00+00:00
I vote against this (and this is coming from some one who believes HN contains a lot of shills)

Bots are recognizable and can be selectively ignored. But an echo chamber that would result from measures like this cannot be, because you cannot see the potential comments and posts that were snuffed because some one didn't bother.

If you want HN to be a place to feel comfortable and your world view to be unchallenged, sure, go ahead. But then we already have reddit.
by throwaway2037 | 2026-03-09 03:52:03+00:00
When I read comments like this, I think about the average Joe who says: "Most people are terrible drivers." Then, someone asks them: "Are you a terrible driver?" They respond: "Of course not. I am an excellent driver." A few people roll their eyes.

> worthy of an instant ban

First, it is not always possible to identify an LLM-generated comment. There are too many false-positives. Imagine if this system was implemented, and one of your comments was identified as LLM-generated and you were instantly banned. How would you feel about it?
by rvz | 2026-03-09 03:52:13+00:00
It's quite naive to assume that. There is a reason why it is deprecated by Apple.

Apple is likely preparing to remove it for a secure alternative and all it takes is someone to find a single or a bunch of multiple vulnerabilities in sandbox-exec to give a wake up call to everyone why were they using it in the first place.

I predict that there is a CVE lurking in sandbox-exec waiting to be discovered.
by downboots | 2026-03-09 03:52:39+00:00
Good level-headed discussion on the erosion of knowledge and skill in organizations using AI. Which is an opposite direction to the hype about the promised super intelligence.

Howard makes a great analogy of LLMs interpolating between knowledge. This means LLMs can do combinatorial creativity but struggle with transformative creativity.

Also explains why LLMs are good at coding but not software engineering at a high level.
by shagie | 2026-03-09 03:54:21+00:00
What's up with Lobste.rs blocking the Brave browser? - https://news.ycombinator.com/item?id=42353473 (93 comments, and linking to https://lobste.rs/s/iopw1d/what_s_up_with_lobste_rs_blocking... which is about that, though if you browse with Brave you might have trouble with it)
by undeveloper | 2026-03-09 03:55:02+00:00
I'm not sure why people are so deeply scared. these are all pretty neat features for people who will need them (off rip seemingly mostly in the embedded world). It's not like the inclusion of these forces you to use them — I've never had to deal with unsafe rust for shipping web stuff, and I highly doubt I'd have to deal with most of these. For modeling's sake it would be nice to have pattern types and view types, I can see them being useful
by orbital-decay | 2026-03-09 03:55:15+00:00
>a camera in a restaurant in Istanbul captured two FBI agents on vacation sitting at a table with their families. A man with a backpack walks in and suddenly everyone at the table grabs their head as if in pain

So, the man was inconspicuously targeting a specific area in a public space without affecting himself and everyone else, using a device in a backpack? This just sounds... technically implausible.
by OneDeuxTriSeiGo | 2026-03-09 03:58:52+00:00
i.e. it becomes clear you are using it as a sockpuppet account (some users have been caught trying to do this), outright saying you aren't black, etc.

Like if you aren't being a niche internet celebrity and aren't trying to play main character on the internet it's unlikely you'd get caught unless you were particularly stupid but that's also kinda part of the point. It's a community and people in that community know each other both online and IRL. It'd be pretty hard to be involved in the community without leaving behind an evidence trail of you blatantly lying about who you are.
Show HN: A community catalog of CI certified agents
by jdiennbn | 2026-03-09 03:58:53+00:00
An "awesome list" with a twist: every entry is a verified case study, not just a link. To appear in this catalog, an agent must pass tracecore run --strict-spec in public CI — producing an immutable, schema-validated artifact as evidence.

GitHub Actions is the public gate. No human approval alone can certify an agent; the workflow must pass first.
by yash_chudasama | 2026-03-09 03:59:01+00:00
Thanks! Really appreciate the thoughtful feedback.

I’m thinking of handling this through separation of concerns + domain expertise.
Each AI employee would have a defined domain of authority. When disagreements happen, the system can score proposals based on expertise weighting, meaning the opinion of the domain expert carries more weight in that area.

For example, if it's an architecture decision, the CTO's score would dominate, while the CEO focuses more on strategy and constraints rather than the implementation details.

It’s still very early (literally day 1 ), so feedback like this is really helpful in shaping the architecture.

Thanks again for taking the time to write this.
by sidrag22 | 2026-03-09 04:00:13+00:00
https://beanhoard.com/

Coffee Roaster Aggregation ETL using fastapi, nextjs, bs4 etc etc. It's been fun, just finished up the oauth for discord that pairs nicely with the info required to make Discord dm notifications function. attempting to charge 6$ for the instant notifications, but doubt many people will be interested. up to 75 roasters and all of them are checked every 10 mins for new products.

Considering reusing the repo as a framework for other industries if this project ever gains any traction.
Also was considering adding a goofy rag discord bot to the server just because i love tossing in a rag layer everywhere lately, and feel like i fall a bit short on my filters for stuff like origin/flavor notes and all that junk. Semantic search with solid chunk strategies might create a better solution than if i did get all the filters working as well as possible.
by fc417fc802 | 2026-03-09 04:00:53+00:00
When I visit the page I get a modal paywall, the browser tab (small, could easily escape notice) takes on the title you report, and in huge letters across the page behind the paywall I see:

> She called 911 for an ambulance. She got a nightmare instead

As far as I'm concerned the second one is the title because (regardless of any technicalities such as metadata) that's how it's being presented to me when I visit.
by An0n_Jon | 2026-03-09 04:01:17+00:00
Hi HN — I built kroot to help debug Kubernetes failures by tracing
dependencies between resources.

Instead of only showing symptoms (CrashLoopBackOff, etc), it builds
a dependency graph of cluster resources and tries to answer:

"Why did this actually break?"

Example failure chain it can detect:

Secret/prod/db-password missing
↓
Pod/prod/payments-api CrashLoopBackOff
↓
Service/prod/payments has no endpoints
↓
Ingress returning 503

Would love feedback from people running Kubernetes in production.
by m463 | 2026-03-09 04:01:23+00:00
So, I've been through this. I found a couple things really helpful.

1) make plans with people. Do something with a friend or friends and say "want to make this a regular thing?" For me, I went hiking every saturday morning at 9am, and coffee afterwards with a friend. Another friend was regular weekly lunches.

2) write it down. You will have all these thoughts, about the relationship, about yourself, and more. Just write it down. It will show you who you are. You will begin to unpack things.

3) exercise. Wears you out, makes you sleep, makes you smarter, puts your head on straight.

4) give it time. Right now you can do anything. that's a negative, but will become a positive as you rediscover yourself and relax.
by marcus_holmes | 2026-03-09 04:04:18+00:00
y'see, I would not define a system as "highly autonomous" if it only responds to requests.

And I get that there are workarounds; effectively a cron job every second prompting "do the next thing".

But in my personal definition of "highly autonomous" it would not need prompting at all. It would be thinking all the time, independently of requests.
by anigbrowl | 2026-03-09 04:04:45+00:00
This is an absurd fantasy. Most of Iran's military capability is deep inside mountains. If the US & Israel wants to adopt a strategy of Vietnam-style carpet bombing to devastate the entire country, not only will they be making themselves pariahs (which they're already on the way to doing) but they will be incentivizing Iran to hit Israel with dirty bombs, which will collapse the Israeli economy in short order.
by notpushkin | 2026-03-09 04:07:24+00:00
That’s a clever way of doing it, yeah.

From UI side, I’d probably not autofill, but add autocomplete (e.g. using <datalist>¹). This way you can still have browser autofill the user’s address if saved (do also set the autocomplete² props correctly!), and suggest one or multiple variants you have in your database, and let the user fill it out manually still, without having to find and click “My address isn’t here”.

¹<datalist>: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...

(quick note re: compat; Firefox does support it for the text fields, check the table at the bottom)

²autocomplete: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/...
by paxys | 2026-03-09 04:07:30+00:00
Not sure I understand this. Agent CLIs already use sandbox-exec, and you can configure granular permissions. You are basically saying - give the agents access to everything, and configure permissions in this second sandbox-exec wrapper on top. But why use this over editing the CLI's settings file directly (e.g. https://code.claude.com/docs/en/sandboxing#configure-sandbox...)?
by yash_chudasama | 2026-03-09 04:08:51+00:00
Since this is open source, I'm still debating what Ajen should ultimately become.

One direction is turning it into a framework for building multi-agent companies, where developers can define roles, coordination logic, shared memory, and decision systems between AI employees.

The other direction is making it a product for founders, where you describe a startup and AI employees (CEO, CTO, CMO, etc.) collaborate to plan and build the company — writing product specs, designing the architecture, shipping the product, and planning the GTM strategy.

I'm curious which direction would be more interesting:

• Infrastructure for building AI organizations
• A practical AI co-founder product for founders

Also wondering whether the system should eventually include roles like finance, legal, operations, etc., or if it's better to keep the core roles minimal and let people define custom AI employees.
by cadamsdotcom | 2026-03-09 04:09:39+00:00
Would be interesting to turn this into code (or an external model call) that can check any writing, so instead of just handing it to an LLM and hoping the LLM obeys, a set of checks has to pass before the LLM’s writing is even shown to a human..

Kind of like enforcing linting or pre-commit checks but for prose.
by asim | 2026-03-09 04:12:45+00:00
For about a year I've been working on Mu - an app for everything without ads, algorithms or exploits. https://mu.xyz

Blog, news, chat, video, mail, web. Basically all the daily habits as little micro apps in one thing. I find it quite useful. Not sure anyone else does yet though.

Also separately worked on Reminder.dev which is a Quran app and API that bakes in LLM based search and motivational reminders.
by kouteiheika | 2026-03-09 04:13:22+00:00
> Anthropic were very vocal, well before this happened, that they were against the use case.

> I don't blame them. These use cases are like blaming MySQL for storing the lat/long of the school. AI can't be held accountable and the company was trying to protect us and, yes, it was too late.

They weren't trying to protect squat, and were not against this use case. Their only two red lines are "no mass domestic surveillance" and "no fully autonomous killing until the AI gets good enough to be able to do it". Assuming the story is true, there's no chance this was a fully autonomous act and was most certainly approved and executed by people.
by 101008 | 2026-03-09 04:15:07+00:00
Not sure if people interested, but since I use sqlite in a lot of my own projects, I am working on a lightweight monitoring and safety layer for production SQLite.

The idea is pretty simple: SQLite is amazing, but once it’s running in production you basically have zero observability. If something weird happens (unexpected writes, schema changes, background jobs touching tables, etc.) you only find out after the fact. It tries to solve that without touching application code. It's a Rust agent that runs next to your sqlite file, and connects to the server where everything is logged in. My current challenge right now is encryption and trust, mostly.

Curious if others here are running SQLite in production and if you would be interested in something like this.
by ChicagoDave | 2026-03-09 04:16:13+00:00
Completed:

- http://sharpee.net : Text Adventure authoring platform in Typescript

- https://github.com/ChicagoDave/tsf : A multi-target npm build tool

- https://devarch.ai : Claude Code guardrail workflow including hooks, agents, and skills

In progress:

- unnamed project to disrupt commercial site hosting including a new marketplace
by simplesocieties | 2026-03-09 04:17:10+00:00
The rust maintainers need to learn from the mistakes of the c++ design committee and understand that not adding a feature at all is in itself a desirable feature.

For example, your section on effects:

> Functions which guarantee they do not unwind (absence of the panic effect)

* I actually don’t see how this is any more beneficial than the existing no_panic macro
https://docs.rs/no-panic/latest/no_panic/

> Functions which guarantee they terminate (absence of the div effect)

> Functions which are guaranteed to be deterministic (absence of the ndet effect)

> Functions which are guaranteed to not call host APIs (absence of the io effect)

The vast majority of rust programs don’t need such validation. And for those that do, the Ferrocene project is maintaining a downstream fork of the compiler where this kind of feature would be more appropriate.

I think rust is in a perfect spot right now. Covers 99.99% of use cases and adding more syntax/functionality for 0.001% of users is only going to make the language worse. The compiler itself provides a powerful api via build.rs and proc macros which let downstream maintainers build their desired customization.
by godelski | 2026-03-09 04:17:27+00:00
> we'd still need desk jobs to maintain the guardrails.

Agreed. I don't get why people think it is a good idea not to. I'd wager even the AGI would agree. The reason is quite simple: different perspectives help. Really for mission critical things it makes sense to have multiple entities verifying one another. For nuclear launches there's a chain of responsibility and famously those launching have two distinct keys that must be activated simultaneously. Though what people don't realize is that there's a chain of people who act and act independently during this process. It isn't just the president deciding to nuke a location and everyone else carrying out the commands mindlessly. But in far lower stakes settings... we have code review. Or a common saying in physical engineering as well among many tradesmen "measure twice, cut once".

It would be absolutely bonkers to just hand over absolute control of any system to a machine before substantial verification. These vetting processes are in place for a reason. They can be annoying because they slow things down, but they're there because they speed things up in the long run. Because their existence tends to make things less sloppy, so they are less needed. But their existence also catches mistakes that were they made slow down processes far more than all the QA annoyances and slowdowns could ever cause combined.

> And why not? If you can get AI to do the work of the scientist for a tenth of the price

And what are the assumptions being made here? Equal quality work? To my question, this is part of the implication. Price is an incredibly naive metric. We use it because we need something, but a grave mistake is to interpret some metric as more meaningful than it actually is. Goodhart's Law? Or just look at any bureaucracy. I think we need to be more refined than "price". It's going to be god awfully hard to even define what "equal quality" means. But it seems like you're recognizing that given your other statements.
by taylorhou | 2026-03-09 04:17:43+00:00
A bunch of ideas that have had domains but never enough engineers. Now there isn't enough time it seems except when I've hit my LLM subscription limits and they need to cool down.

Already launched biz-in-a-box.org and a life-in-a-box.org spinoff as frameworks to replace every entity's QuickBooks. I'm using them myself for every project my agents are spinning up.

Stealth project is related to classpass but for another category of need that won't go away even in the age of AI that really is only possible with critical mass of supply to meet existing demand. Super excited cus there's no better time to build with unlimited agents that scale without people problems.

Lastly, can't wait to run local LLMs so no longer limited by tokens/money.
by gucci-on-fleek | 2026-03-09 04:19:14+00:00
> The Canadian gov debanked people during a legitimate protest using the emergency act (among other violations).

Ok, but I don't see how that's corruption. Switching to some American examples, I've never heard anyone refer to the jailing of MLK [0], the shooting of Vietnam War protesters [1], or Stonewall [2] as "corruption", and these are all much more extreme than the 2022 Canadian protests.

> This was later ruled to be an illegitimate use of this act.

Do you have a source for this? Because §28.7 of the report from the independent commission [3] states that its use was legitimate:

For these reasons, I have concluded that Cabinet was reasonably
concerned that the situation it was facing was worsening and at risk of
becoming dangerous and unmanageable. There was credible and compelling
evidence supporting both a subjective and objective reasonable belief in
the existence of a public order emergency. The decision to invoke the
Act was appropriate.

> Nobody has faced any consequences for this and none are expected.

It was a decision made by the Cabinet while acting in its official capacity, so parliamentary privilege [4] means that there could never be any criminal consequences, no matter how severe what they did was. Political actions generally only have political consequences, and considering that Justin Trudeau and much of the Cabinet resigned a couple years later [5], I'd argue that there were in fact some consequences.

[0]: https://en.wikipedia.org/wiki/Birmingham_campaign#Martin_Lut...

[1]: https://en.wikipedia.org/wiki/Kent_State_shootings

[2]: https://en.wikipedia.org/wiki/Stonewall_riots

[3]: https://publicorderemergencycommission.ca/files/documents/Fi...

[4]: https://en.wikipedia.org/wiki/Parliamentary_privilege#Canada

[5]: https://en.wikipedia.org/wiki/2024%E2%80%932025_Canadian_pol...
by super256 | 2026-03-09 04:22:15+00:00
No, this is wrong.

WSL2 distributions share the same Linux kernel. They only get their own root filesystem with a Linux userland (/bin, /usr, /lib etc), and some WSL config meta data. This is then stored as a virtual disk image (which is probably where your belief comes from). But the kernel runs in a single utility VM. The distros share that kernel instance and they are separated via namespaces only.

This makes running multiple WSL2 distributions in parallel very performant btw, as there is no world switch.