MurphyA/hacker-news huggingface dataset:
by Imustaskforhelp | 2026-03-10 14:48:41+00:00
Codeberg has always been like this for what its worth. One of the most starred projects on Codeberg is a wayland terminal called foot (Which I used to/use btw, highly recommended terminal) :]

> It was more of a comment on Codeberg than the project itself.

This is more so an observation of Centralization. Let me explain.

Centralized platforms like Reddit/Twitter/Github usually exist. Fediverse solutions like Lemmy/Mastodon/Codeberg (Codeberg is adding fediverse support) to some degree exist to counter the centralization.

You use mastodon because you don't want twitter/reddit. You don't want twitter/reddit because you don't ideologically support it or the idea of proprietory commercial solutions in general.

The latter community of fediverse is also more likely to care about Privacy in the sense that they sacrificed some comfort to support open source project by actually using it.

And when you think about it, This all boils down to ideology. We want open standards of internet, not Centralized behemoths. This Ideology is similar to anti AI resistance and for good reason because guess what or who again are training AI models on the corpus of text available on centralized media.

If not for Ideological reasons, then you had no reason to use codeberg for a long time. Now you do, because Github has turned to shit. But the reason I had made an account on Codeberg some 2 year ago was because of my ideology of not wanting a Github account in general and support open standards in general until I caved in to Github someday to make some issues and star some projects.

I am thinking of going back to codeberg seeing the enshittenification of github... Codeberg winning is a net positive for society in general given its open source/non-profit nature.

Reminder to donate to Codeberg as it actually runs on donations :]
by iam_circuit | 2026-03-10 14:49:18+00:00
This pattern should be default for any metered service. Budget exhaustion is a security failure mode — accidental (retry loops) and adversarial (amplification attacks) look identical to billing.

The gap: most platforms treat billing as purely financial. But spend limits are actually a form of resource isolation. When your Workers hit quota, you don't just lose money, you lose availability. Treating budget as a circuit breaker turns it into active defense.
by spiffyk | 2026-03-10 14:49:42+00:00
That is also my understanding. My personal theory is that many corporate compliance departments (or whoever is in charge of this at a particular place) just disallow any *GPL use in their company, regardless of whether it would actually cause problems, so this is an attempt to "unblock" the library for those. Instead of, you know, educating people about the nuances of different copyleft licenses.
by bigstrat2003 | 2026-03-10 14:50:08+00:00
> And a new OS needs to be significantly better than those to overcome the switching costs.

Who cares if nobody switches to it as their daily driver? The goal you proposed was "viable", not "widely used". The former is perfectly possible without LLMs (as history has proved), and the latter is unrelated to how you choose to make the OS.
by ryandrake | 2026-03-10 14:50:12+00:00
A lot of bad, unwanted features get written purely because "developers need something to do" and the same thing happens on the design side. I spent over a decade as a developer at various companies fighting bored designers who just had to redesign the look and feel of the app over and over because the current one was "stale" and "lacked pizzazz and pop!" But, then we devs would do the same thing to the feature list, refactoring and reimplementing and adding features for the sake of writing software, so... I was a hypocrite to complain.
by satisfice | 2026-03-10 14:50:21+00:00
"I don't know the exact internals of a car. But I can infer my car works by driving it."

No, you can't infer that it "works." Only that it CAN work. The car may be poisoning you with carbon monoxide. Your rear brakes may have become disconnected (happened to me). The antilock braking system may have a faulty sensor that only fails at very low speed, leading to them engaging when making a normal stop, but also preventing the mechanic from seeing the problem, because he didn't listen to your bug report and instead tried to repro the effect with high speed panic stops (also happened to me).

If I use a product and have a good experience, I can conclude that SOMETHING must be going well, but not that EVERYTHING is going well.

This is reasoning about evidence 101.
by dilipvamsi | 2026-03-10 14:50:42+00:00
I built this to support upcoming backend deployments for schools in India on local, low-power "potato" hardware.

The problem: `better-sqlite3` is incredibly fast, but it’s synchronous. On low-power CPUs, a single 50ms query blocks the Node.js event loop for every other concurrent request. This is a massive bottleneck on the edge where you can't just throw more hardware at the problem.

I built better-sqlite3-pool to handle this. Since reliability is critical for my use case, I spent the time to port and verify the entire `better-sqlite3` test suite against this implementation.

Key Features:
- Non-blocking: Uses worker threads (with auto-scaling) to keep the main event loop free for I/O.
- Verified Correctness: 100% of the original better-sqlite3 tests pass.
- WAL-safe Encryption: Handles the atomic key broadcast required for SQLCipher + WAL mode.
- Zombie Transaction Reaper: Auto-rolls back transactions idle for >30s to prevent permanent SQLITE_BUSY locks.

I’m sharing this now because the logic is fully verified. It solves exactly the kind of event-loop contention that usually makes people think SQLite isn't viable for Node.js production—especially on hardware where you can't afford to waste a single CPU cycle.
by sidkshatriya | 2026-03-10 14:50:54+00:00
> in part because I can’t decide whether to go with pkgbase or not…

pkgbase is optional in FreeBSD 15 BTW.

One way to upgrade the base system and another to upgrade packages just feels inconsistent to me and pkgbase finally resolves that. I've not had any problems with pkgbase. I love it and would highly recommend it.
by gruez | 2026-03-10 14:51:26+00:00
What does that even mean?

A: "Intel/AMD is adding instructions to accelerate AES"

B: "Might this enable a next level of DRM? Might this enable a deeper level of hardware attestation?"

A: "wtf are you talking about? It's just instructions to make certain types of computations faster, it has nothing to do with DRM or hardware attestation."

B: "Not yet."

I'm sure in some way it probably helps DRM or hardware attestation to some extent, but not any more than say, 3nm process node helps DRM or hardware attestation by making it faster.
by pixl97 | 2026-03-10 14:51:39+00:00
>a political trick - like firing unionized workers

1. Since when have companies needed trillions of dollars of AI to do that? In the US they've been able to get away with getting rid of unions for decades now.

2. Since when has HN given a shit about unions. Posting about unions, at least till recently has been a great way of getting your comment downvoted to [dead] in one easy step. For longer than LLMs have existed the HN answer to unions was "They are just there to keep me as an SWE from making as much money as I can". Only now do we see a little bit of pushback now that their heads may be next on the chopping block.
by roryirvine | 2026-03-10 14:51:43+00:00
BlueWave had that annoying "Ride the BlueWave!" default tagline, though. It might have been the progenitor of the plague of "Sent from my Blackberry/iphone" spamminess a few decades later...

Becoming a point (or even a private node) was the more hardcore option - running a mailer and tosser, exchanging bundles of mail with your upstream node using protocols like WaZoo and the gloriously-named YooHoo/2U2.
by receiptapp | 2026-03-10 14:51:44+00:00
RECEIPTS turns every win and loss into a thermal receipt card.
Log a gym session, money saved, hours studied, or a brutal loss — and RECEIPTS generates a stamped, verified, timestamped document with torn paper edges, a barcode, and a share button.
Not a graph. Not a streak counter. A receipt. Proof that you showed up.
Every tracking app shows you how you're doing. RECEIPTS proves you were there.
Your grind deserves a paper trail.
by throwaway5752 | 2026-03-10 14:52:11+00:00
CO2 levels are detectably weakening human bone and making you more anxious at current levels: https://link.springer.com/article/10.1007/s11869-026-01918-5 (look at the CO2 level over time image for a sense of perspective)

CO2 levels are increasing your risk of diabetes: https://www.sciencedirect.com/science/article/pii/S016041201...?

They are not slowly increasing, they are hockey sticking. The worst case is coming to pass. People are addicted to optimism here. It is unfounded - there is one action and it is to reduce CO2 emissions drastically at the expense of economic growth or we will destroy the world as we know it.

It cannot be overstated how dire the situation is.
by TurkTurkleton | 2026-03-10 14:53:00+00:00
As I recall, Wildcat was one of the more expensive BBS packages that was still within reach of hobbyist budgets--I want to say a license for a single-digit number of nodes was between $200 and $300 in mid-90s dollars (around $450-$650 in 2026 dollars)--so it's not surprising that it would have been mostly older people running it. IIRC, it was pretty popular where I grew up, and the demographics in that area definitely skewed a bit older.
by mihaitoth | 2026-03-10 14:54:04+00:00
This couldn't have happened sooner, for 2 reasons.

1) the world has become a bit too focused on LLMs (although I agree that the benefits & new horizons that LLMs bring are real). We need research on other types of models to continue.

2) I almost wrote "Europe needs some aces". Although I'm European, my attitude is not at all that one of competition. This is not a card game. What Europe DOES need is an ATTRACTIVE WORKPLACE, so that talent that is useful for AI can also find a place to work here, not only overseas!
by AStrangeMorrow | 2026-03-10 14:54:21+00:00
Yeah. I feel like that like many projects the last 20% take 80% of time, and imho we are not in the last 20%

Sure LLMs are getting better and better, and at least for me more and more useful, and more and more correct. Arguably better than humans at many tasks yet terribly lacking behind in some others.

Coding wise, one of the things it does “best”, it still has many issues: For me still some of the biggest issues are still lack of initiative and lack of reliable memory. When I do use it to write code the first manifests for me by often sticking to a suboptimal yet overly complex approach quite often. And lack of memory in that I have to keep reminding it of edge cases (else it often breaks functionality), or to stop reinventing the wheel instead of using functions/classes already implemented in the project.

All that can be mitigated by careful prompting, but no matter the claim about information recall accuracy I still find that even with that information in the prompt it is quite unreliable.

And more generally the simple fact that when you talk to one the only way to “store” these memories is externally (ie not by updating the weights), is kinda like dealing with someone that can’t retain memories and has to keep writing things down to even get a small chance to cope. I get that updating the weights is possible in theory but just not practical, still.
by vessenes | 2026-03-10 14:54:31+00:00
Partner in a fund that wrote a small check into this — I have no private knowledge of the deal - while I agree that one’s opinion on auto regressive models doesn’t matter, I think the fact of whether or not the auto regressive models work matters a lot, and particularly so in LeCun’s case.

What’s different about investing in this than investing in say a young researcher’s startup, or Ilya’s superintelligence? In both those cases, if a model architecture isn’t working out, I believe they will pivot. In YL’s case, I’m not sure that is true.

In that light, this bet is a bet on YL’s current view of the world. If his view is accurate, this is very good for Europe. If inaccurate, then this is sort of a nothing-burger; company will likely exit for roughly the investment amount - that money would not have gone to smaller European startups anyway - it’s a wash.

FWIW, I don’t think the original complaint about auto-regression “errors exist, errors always multiply under sequential token choice, ergo errors are endemic and this architecture sucks” is intellectually that compelling. Here: “world model errors exist, world model errors will always multiply under sequential token choice, ergo world model errors are endemic and this architecture sucks.” See what I did there?

On the other hand, we have a lot of unused training tokens in videos, I’d like very much to talk to a model with excellent ‘world’ knowledge and frontier textual capabilities, and I hope this goes well. Either way, as you say, Europe needs a frontier model company and this could be it.
by francink | 2026-03-10 14:54:48+00:00
Hi Horos,
thanks for your comments. I really appreciate!

1. Perhaps I am misusing the "blockchain" term. The access is granted with signed blocks. Each block can introduce some changes, like granting/removing access to other users, including the encryption key with an envelope. Each block links to the previous via hash. There is no consensus mechanism.

2. The vault is defined by a storage and the public keys of the creator. A client must know in advance the creator keys and he will use those keys to verify the signature. The creator then can grant admin rights to other users with specific blocks. An access grant not signed by an admin, will be rejected by a user. It is not really about data truth, because the target is more information exchange. Does it answer the question?

3. Go is the implementation language, not really a binding. I use Python in the first example because it is more compact. However the guide shows samples for all supported languages. The primary target is Go for server side and Dart for mobile. Python is effective for samples and experiments.
by jerf | 2026-03-10 14:55:15+00:00
The only things I'm aware of that I consider actual problems it solves are "it breaks classical encryption" and "you may be able to use it to directly model other quantum systems like for protein folding and such".

Everything else I consider pretty silly. "It can improve logistics" - I'm fairly sure computers are already as good as they can be, what dominates logistics calculations isn't an inability to optimize but the fact the real world can only conform so closely to any model you build. "It can improve finance" - same deal, really. All the other examples I see cited are problem where we've probably already got running code that is at the noise floor imposed by reality and its stubborn unwillingness to completely conform to plans.

If I had $1 to invest between AI and quantum computing I'd end up rounding the fraction of a cent that should rationally go to quantum computing and put the whole dollar in AI.

By far the most exciting possibility is one that Scott Aaronson has cited, which is, what if quantum computers fail somehow? To put it in simple and unsophisticated terms, what if we could prove that you can't entangle more than 1024 qubits and do a certain amount of calculation with them? What if the universe actually refuses to factor a thousand-digit prime number? The way in which it fails would inevitably be incredibly interesting.
by gowld | 2026-03-10 14:55:16+00:00
"most loud morons rise to the top" is very different from "most of the top are loud morons".

Also I don't think either is true in general, but it is partially true in fundamentally social regimes like sales an bureaucracy where mother nature isn't involved so truth isn't a major factor in success.

I think critics use the word "moron" too often to mean "someone whose intelligence is different from mine, and doesn't have a respect for truth as a universal principle". Ladder climbing "sociopaths" apply their intelligence to social puzzles that many engineers and scientists ignore or don't understand. And some people are smart but also bullies, and dominate people who might be smarter. That's different from being a dumb bully.
by sara_p2p | 2026-03-10 14:55:24+00:00
Senior Data Analyst at P2P.org, the largest institutional staking provider | Remote, GMT +-3/ Cyprus | Full-time Contractor

We are looking for a Senior Data Analyst to work on validation economics, blockchain ecosystem research, and end-to-end data solutions — from modeling and experimentation to dashboards and data platform setup (BigQuery, Python, Airflow/DBT). Crypto experience is a must.

The role involves close collaboration with internal teams, ownership of data marts and reporting, and supporting decisions around yield optimization, new networks, and risk/opportunity analysis across the staking and restaking landscape.

Please apply on: https://jobs.ashbyhq.com/p2p.org/1a780127-c77f-44c3-802b-501...
by eightys3v3n | 2026-03-10 14:55:35+00:00
All those cases also have huge penalties or effective costs associated with them. Is there an accurate "shame first, then penalties came later" stand point?

Automobile safety in my life has only changed after fines.
Sexual harrassment still happens and doesn't seem to be helped by shaming someone as much as firing them. Though we often don't have the guts or legal backing to publically shame someone.
by oren1531 | 2026-03-10 14:55:36+00:00
I built agent-triage - CLI that automates diagnosing AI agent failures in production.

I was spending way too much time staring at logs and web dashboards trying to figure out why my multi-agent setups kept failing.

You just point it at your traces (LangSmith, Langfuse, OpenTelemetry, or a JSON file). It pulls the system prompts directly from the logs, extracts the behavioral rules, and uses an LLM-as-a-judge to replay each conversation step-by-step.

It flags exactly which turn broke things, which agent caused it, and traces cascading failures across routing, handoffs, and retrieval.

It aggregates root causes across all of them: "24 out of 51 failures are missing escalations." You know exactly what to fix first.

Runs locally. Only LLM API calls leave your machine. You can try it without installing anything.

https://github.com/converra/agent-triage
by Scapeghost | 2026-03-10 14:55:39+00:00
Man... How did yall white Westerners turn out to be the weakest people in the world?

You were supposed to be the bastions of freedom and justice, and the rest of the world admired you for that and were slowly improving to become like you, but ever since 9/11/2001 the rich old people that rule you have been feeding you boogeyman to make you their complacent b*tches and you lay down and crawl along and accept everything without even a whimper.

Now your countries are no different than Russia or China or Dubai etc where the old money cabals run everything, and you yourself are the worst victims of all their wars and laws.
by MCPAmpel | 2026-03-10 14:55:42+00:00
I built this because single-engine scanners kept giving me different answers. Trivy finds dependency CVEs but not hardcoded secrets. detect-secrets finds credentials but not overly broad MCP tool permissions. Custom YARA rules catch MCP-specific threats that no general-purpose scanner was designed to look for. There are 15+ MCP security scanners now, and each one catches different things.

MCPAmpel runs 16 engines in parallel, each in its own sandboxed Docker container. No engine sees another's output. Results are aggregated with a weighted scoring system: start at 10.0, deduct severity_weight * engine_weight per finding, cap at 3.0 per engine so one noisy tool can't dominate. Full methodology at mcpampel.com/docs/scoring.

The data that surprised me most: only 7.2% of repos passed all 16 engines clean. And 72.4% were flagged by 3 or more engines independently. Single-engine scanners would mark most of the yellow-zone repos as passing.

What it doesn't do:
- No runtime analysis. Static only.
- 3 LLM-powered engines are disabled (need external API keys I haven't integrated)
- 216 repos is a sample from public registries, not the full ecosystem
- Informational engines (Syft, ScanCode) produce findings but don't affect the score
by iso1631 | 2026-03-10 14:56:03+00:00
Water is wet.

All for making sites to send a header with restrictions as they apply in law (age rating per location for example -- so a site could send "US:16 US-TX:18 IE:14 GB:18 DE:16" etc), and even categorise as not required in law (category=gambling or category=healthcare)

That gives the browser/app/accessing device the power to display or not display

The second part of this is to empower parents -- let them choose the age rating which can only be changed with a parental code etc. Make this the law on all consumer commercial devices -- i.e phones, macbooks, windows.

This is trivial and worthwhile.

Yes some 15 year old will build something in python in a user session to work around it as they have a general purpose computer, that's a tiny amount of the problem. Solve the 90% problem first.
by squidbeak | 2026-03-10 14:56:30+00:00
The 'machine' existed long before the AI companies in university art studies, galleries and republication, and the scale came from the graduates or ordinary acolytes borrowing wholesale the ideas and techniques they admired. Scale shouldn't alter the principle. Once there's a right to compensation established for derivation, you have to explain why it doesn't apply to the millions of artists making a living from exactly that.
by MarkusQ | 2026-03-10 14:57:07+00:00
I've seen some forums (mostly political) where you have to prove that you can act like a child to be welcome. So that's kind of like what you're talking about?

(If anyone is offended by this, don't worry, I'm talking about the other side; I'm sure your side is full of reasonable adults who just get a little carried away sometimes.)
by palata | 2026-03-10 14:57:15+00:00
> So you comment that thing. The idea that "good" code avoids anything non-obvious, that those are "exceptions", is frankly bizarre to me.

What I find interesting from the comments here is that there are obviously different perspectives on that. Granted, I cannot say that my way is better. Just as you cannot say that your way is better.

But I am annoyed when I have to deal with code following your standards, and I assume you are annoyed when you have to deal with code following mine :-).

Or maybe, I imagine that people who defend literate programming mean more comments than I think is reasonable, and people who disagree with me (like you) imagine that I mean fewer comments than you think is reasonable. And maybe in reality, given actual code samples, we would totally agree :-).

Communication is hard.
by atmavatar | 2026-03-10 14:57:28+00:00
Yes.

I'm rather curious where this is actually the case, particularly as you claim it's not uncommon.

My experience has been the opposite, though I'd hardly claim it to be representative. My prior employer had all single-occupant, unisex bathrooms originally, until one woman high up the management chain demanded there be women's only bathrooms. So, a women's only placard was placed on a couple of the unisex bathrooms, and suddenly, guys had to semi-frequently wait on for the remaining available unisex bathrooms during the day.

It was very clearly discriminatory, and I have no problem claiming the reverse would be just as bad.