MurphyA/hacker-news huggingface dataset:
Show HN: ChaosRank – which microservice should you break next?
by Medinz01 | 2026-03-06 09:15:57+00:00
I built ChaosRank after noticing that most chaos engineering teams pick
targets by gut feel or random selection. A payment service with 15
downstream dependents isn't the same risk as a logging sidecar, but
tools like LitmusChaos treat them identically.

ChaosRank takes your Jaeger trace export and incident history CSV and
produces a ranked list of services to target, with a suggested fault
type and confidence level for each.

The risk score combines two signals:
- Blast radius: blended PageRank + in-degree centrality on the
dependency graph (captures both deep chains and shallow-wide hubs)
- Fragility: per-incident traffic-normalized severity with exponential
decay (normalization order matters — post-hoc normalization produces
ranking inversions at high traffic differentials)

Evaluated on the DeathStarBench social-network topology (31 services)
from the UIUC/FIRM dataset (OSDI 2020). Found seeded weaknesses in 1
experiment on average vs 9.8 for random selection across 20 trials.

Output formats: Rich terminal table, JSON, and LitmusChaos ChaosEngine
YAML (pipeable directly to kubectl apply).

To try it without your own traces — sample data is included:

pip install chaosrank-cli
git clone https://github.com/Medinz01/chaosrank
cd chaosrank
chaosrank rank \
--traces benchmarks/real_traces/social_network.json \
--incidents benchmarks/real_traces/social_network_incidents.csv

Known limitations: async dependencies (Kafka, SQS) don't appear in
trace spans so blast radius is underestimated for event-driven
architectures. Jaeger JSON only for now — OTel OTLP is next.

Happy to discuss the algorithm design, particularly the PageRank
direction choice and why per-incident normalization matters.
by moogly | 2026-03-06 09:16:05+00:00
> My, the world has changed.

Has it though? I'd say it's morphed, not changed. This is still, underneath it all, Hanseatic League and East India Company domination style colonialism, but adapted to and shaped by the digital age.

The US has pretty much all throughout its history had its military-industrial complex and warfare as an economic motor too, and in view of this, it's inevitable that software gets integrated.

Israel, the most recent settler-colonial state (of course some people try to claim it's not using various mental gymnastics, but I'm not fooled), was the experiment and has become a model for how to intermingle the industrial-military complex with society to the degree they two become indistinguishable, and with backing of the West it's been a very profitable and, I hate to say it, successful model.

Here's[1] a review of a book about the subject, talking about the state incubating start-ups and spawning a tech sector for the sole purpose of warmongering.

[1]: https://theconversation.com/the-harvard-of-anti-terrorism-ho...
by PennRobotics | 2026-03-06 09:16:11+00:00
I think they mean: there is no USB socket on the enclosure containing the AC-DC conversion circuitry, like you'd find on most smartphone charger bricks. The cable (with the USB-C plug on the other end) is attached to the enclosure permanently. Thus, when the plug breaks, you need to throw away the entire power conversion brick. If the converter had a USB socket, not only could you replace the cord when the cord inevitably breaks, you can choose the cord length and whether it has a 90 degree bend and/or magnetic disconnect at the end.

We have probably 10 Thinkpads at the house. Three power bricks have been rendered useless (and four USB-C ports) because Lenovo has set their part selection and engineering design to "best value for the company" rather than "best quality for the end user".

Also, the PD negotiation of the Lenovo bricks is unusual, where it will not provide significant current at the 5 volt base USB power to some non-laptop devices and also not accept fast charging rates from some non-Lenovo chargers: Our ThinkPads will charge using some high-wattage smartphone chargers but not every one of them. Every once in a while we find a device with a USB-C charging port (e.g. baby monitor display) that will charge with any charger around the house but not with the Lenovo laptop charger.
by mr_mitm | 2026-03-06 09:16:30+00:00
Things break all the damn time with LaTeX. Example: https://tex.stackexchange.com/questions/730126/update-to-cle...

Sometimes bugs appear only if you load three specific packages in a specific order. The fact that there are no namespaces and every package can modify everything makes it a complete nightmare. LaTeX would do well to take a hint from the lessons we learned in the past 40 years. Or just retire it and push something sane forward, like Typst.
by hrmtst93837 | 2026-03-06 09:16:37+00:00
I think a device picker UI is the right surface for user consent, but the hard part is turning selection into an unforgeable capability rather than a path a rogue process can guess and abuse.

A practical pattern is to have a trusted agent open the device and pass a file descriptor to the sandboxed app over a Unix domain socket or D-Bus fds, and to persist grants by stable identifiers like ID_SERIAL or /dev/disk/by-id instead of ephemeral names such as /dev/sdX.

That model gives you revocation and auditability, and it handles multi-interface devices better, but you still need explicit policies for exclusive access devices and a clear UX for transient versus persistent grants.

From what I have seen the pragmatic path is to combine a portal implementation like xdg-desktop-portal for interactive apps with a documented policy file or daemon API for automation, accepting a little UX friction to get sane, revocable device capabilities.
by mejutoco | 2026-03-06 09:16:52+00:00
My source was:

```
The government has collected perhaps $180bn in IEEPA tariffs. Over the past year 1,800 companies—including Goodyear, a tyre-maker, and Costco, a retailer—have filed lawsuits to protect their right to a refund should the Supreme Court overturn them. They are now owed this money, equivalent to roughly 5% of the profits companies generated in America last year, or 0.6% of GDP—plus interest, compounded daily at an annual rate of 6-7%.
```

https://www.economist.com/finance-and-economics/2026/02/26/a...
Show HN: ParseForce – I got tired of brittle email parsers so I built this
by nikola470 | 2026-03-06 09:17:23+00:00
Hey HN,

I kept running into the same problem on backend projects: emails arrive in all kinds of formats invoices, order confirmations, shipping notifications — and I'd write a regex parser that worked fine until the sender slightly changed their template. Then it'd silently break.
LLM-based extraction fixes the brittleness but you still have to wire up the prompts, handle schema validation, manage retries, and get it into your backend reliably. It's a surprisingly annoying amount of plumbing for something that should be solved infrastructure.
So I built ParseForce: you define a JSON schema, point a mailbox at your system, and parsed+validated JSON gets delivered to your webhook. There's a CLI for local dev (listen + replay), delivery observability in the dashboard, and idempotent webhook delivery with event replay for when things fail.

Free tier is 50 emails/month, no credit card. Would love feedback from anyone who's dealt with this problem — especially if you have a use case it doesn't handle well.
https://parseforce.io
Show HN: What Installing a New OS Taught Me About Disk Partitions
by access2vivek | 2026-03-06 09:17:38+00:00
Installing a new operating system turned out to be less about the OS and more about understanding the disk underneath it. While preparing my system for a Debian dual boot setup, I explored Linux disk partitions, cleaned caches and unused packages, and discovered that my system usage dropped from 80GB to just 47GB.
by wao0uuno | 2026-03-06 09:18:06+00:00
Sounds cool but do you believe it's really about protecting children? Since when do politicians care about this so much? I have not heard of any protests or public calls for better child protection online. It's really all about control and elimination of freedom of speech and information. They want to set up a legal framework and get people more comfortable with the idea of closed and controlled internet. Then they'll argue that age verification alone is ineffective because its too easy to circumvent so they'll start rolling out less "private" solutions that will benefit them and their sponsors greatly.
by PunchyHamster | 2026-03-06 09:18:11+00:00
> The chance for a bit flip to affect a critical path that is noticeable by the player is very low, and quite a bit lower if you design your game to react gracefully.

Nobody does

> There's a whole practice of writing code for radiation hardened environments that largely consists of strategies for recovering from an impossible to reach state.

And again, nobody except stuff that goes to space and few critical machines does. The closest normal user will get to code written like that are probably car ECUs, there are even automotive targeted MCUs that not only run ecc but also 2 cores in parallel and crash if they disagree
by scott_w | 2026-03-06 09:19:20+00:00
> If anything it's the other way round, if you're not talking about business domain modeling (where data structures first is a valid approach).

And even there, the data models usually come about to make specific business processes easier (or even possible). An Order Summary is structured a specific way to allow both the Fulfilment and Invoicing processes possible, which feed down into Payment and Collections processes (and related artefacts).
by chrismorgan | 2026-03-06 09:20:00+00:00
I run Firefox Nightly, and occasionally a little Chromium stable. Both are running under Wayland, which I believe is still not considered stable in either. In the last year of Firefox, I had one full crash (the first in maybe three years), and about four tab crashes. Plus duplicates from deliberately reproducing issues. All but one (which I’m not certain about) were Nightly-only, fixed long before reaching stable. Were I running stable, I suspect I would not have had more than three crashes of any kind in the past five years.

I can’t say the same for Chromium. Despite barely using it, I had at least one tab or iframe crash last year, and there’s a moderate chance (I’ll suggest 15%) on any given day of leaving it open that it will just spontaneously die while I’m not paying attention to it (my wild guess, based on observations about Inkscape if it’s executing something CPU-bound for too long: it’s not responding in a timely fashion to the compositor, and is either getting killed or killing itself, not sure which that would be).

Frankly, from a crashing perspective, both are very reliable these days. Chromium is still far more prone to misrendering and other misbehaviour—they prefer to ship half-baked implementations and fix them later; Firefox, on the other hand, moves slower but has fewer issues in what they do ship.
Show HN: OgBlocks – A zero-install animated UI component library
by karanzhacker | 2026-03-06 09:20:30+00:00
Hey HN, I'm Karan.

As a frontend dev, I got tired of constantly rewriting animation boilerplate just to get the easing and interactions feeling right.

I built ogBlocks to scratch my own itch.

It’s a copy-paste library of interactive UI components.

I used Framer Motion for the complex stuff—focusing heavily on tweaking springs and inertia so the physics actually feel natural—and pure CSS for the lighter elements.

Would love your feedback on the code structure, performance, or any specific animations you think are missing from the ecosystem.

I know you'll love the library

Take a look and happy to answer any questions
by vbarrielle | 2026-03-06 09:20:48+00:00
The test suite was also licensed under the LGPL. The reimplementation can be seen as a derivative work of the test suite, and thus should fall under the LGPL. This does not even mention the fact that the coding agent, AND the user steering it, both had ample exposure to chardet's source code, making it hard to argue that the reimplementation is a new ship.
by Savir_Khanna | 2026-03-06 09:20:53+00:00
Location: Boston / By Area

Remote: Ok

Willing to relocate: Yes

Technologies: Python, SQL, TypeScript, AWS, Docker, FastAPI, Flask, Pandas, Plotly, React, D3, Node, MySQL, SQLite, Cursor

Resume: https://drive.google.com/file/d/1QdYsbz0L1zdZUo-XEb1qBtJJj8l...

Email: hellosavir@gmail.com

Seeking backend/fullstack internship opportunities Fall 2026 (July - December). Open to starting soon/immediately. I prioritize making scalable APIs, maintaining system design, and have a hunger to learn, build, and ship.
by mejutoco | 2026-03-06 09:20:59+00:00
And stablediffusion-web-ui before that and others, yes.

When googling, txt2img and img2img, or txt2video img2video etc. (for video) are useful terms, since they encapsulate the usage in a few terms. One could search img2video comfyui workflows, for example.

I thought it would be useful for the conversation to provide these terms, not mentioned before in the thread.
by deno | 2026-03-06 09:21:15+00:00
> All they would have to do to support this is add a checkout field "VAT number" that shows up on a pdf invoice.

If only it would be that simple :)

In EU you have different procedures for B2C and B2B transactions. For B2B you need to verify the VAT number in VIES system and it’s not responsive like 50% of the time. I swear Germans literally turn off their servers when they go to sleep. If a customer provides a VAT number the flow might take even 12h+ to verify it. If you can do that verification you can use 0% VAT rate but if not you need to use a different VAT rate.

For B2C you need to support several scenarios: if company is outside of EU it needs to register for IOSS, if it’s a EU company that sells to other EU countries it needs to register for OSS or in each EU country for VAT separately but also a mix of both is possible. You need to maintain special OSS registry. Some EU countries have XML invoices or invoice APIs, of course there’s actually no common EU standard so it depends where the company is registered. Finally you need to choose a VAT rate for that country.

This is the bare minimum you need to support. There’s a lot of edge cases, e.g. it matters what country you actually ship from, and if you use e.g. fulfillment there are special procedures for that as well, or if you resell in B2B there are chain transactions which have their own set of rules.
by Copyrightest | 2026-03-06 09:21:44+00:00
I think the most salient point about Factorio here is that its CPU-side native core was largely hammered out by 2018, most of the development since then has been in Lua or GPU-side. The devs could be quite confident their code didn't have any unhandled null pointers. That's not really the case for Chromium or (God help us) WebKit.
by Karrot_Kream | 2026-03-06 09:21:49+00:00
I'm very confused about this. Salary is only one portion of your total compensation. The vast majority of tech companies offer equity in a company. The two ways to increase the FMV of your equity is: increase your equity stake or increase the value of the total equity available. Hitting the same goals with fewer people means your run rate is lower, which increases the value of your equity (the FMV prices in lower COGS for the same revenue.) Also, keeping on staff often means you want to offer them increased equity stakes as an employment package. Letting staff go means more of that available equity pool is available to distribute to remaining employees.

We aren't fungible workers in a low skill industry. And if you find yourself working in a tech company without equity: just don't, leave. Either find a new tech company or do something else altogether.
by JCW2001 | 2026-03-06 09:21:56+00:00
Those who think Gary Marcus, Ed Zitron and Yann LeCunn are wrong, and believe in AI: How do you reconcile things when AI thinks the market is highly likely to collapse?

Quote: "The entire system only works if AI revenue grows fast enough to outrun the obsolescence treadmill. For that to happen, Microsoft would need approximately $130 billion per year in new AI revenue, Google $100 billion, Amazon $120 billion, and Meta $70 billion. Against a current reality of $18 billion in total industry AI revenue and zero profits, that gap is not a rounding error. It is the entire bet."
by throwaw12 | 2026-03-06 09:22:07+00:00
> Isn't it a very inefficient way to learn things?

It is. But there are 2 things:

1. Do I want to learn that? (if I am coming back to this topic again in 5 months, knowledge accumulates, but there is a temptation to finish the thing quickly, because it is so boring to swim in huge legacy codebase)

2. How long it takes to grasp it and implement the solution? If I can complete it with AI in 2 days vs on my own in 2 weeks, I probably do not want to spend too much time on this thing

as I mentioned in other comments, this is exactly makes me worried about future of the work I will be doing, because there is no attachment to the product in my brain, no mental models being built, no muscles trained, it feels someone else's "work", because it explores the code, it writes the code. I just judge it when I get a task
by tripledry | 2026-03-06 09:22:35+00:00
Something I've been thinking about lately is if there is value in understanding the systems we produce and if we expected to?

If I can just vibe and shrug when someone asks why production is down globally then I'm sure the amount of features I can push out increases, but if I am still expected to understand and fix the systems I generate, I'm not convinced it's actually faster to vibe and then try to understand what's going on rather than thinking and writing.

In my experience the more I delegate to AI, the less I understand the results. The "slowness and thinking" might just be a feature not a bug, at times I feel that AI was simply the final straw that finally gave the nudge to lower standards.
by lavela | 2026-03-06 09:24:13+00:00
The shifts between flags will correlate with date of birth though, or do you think someone turning 16 or 18 will wait a year or two to switch to more adult content for privacy? Also I'd guess the tech industry would push for more specific age buckets.

Games already have PG ratings and similar in different countries, I don't see the issue there. Web content could set a age appropriateness header and let browsers deal with it, either for specific content or for the whole website if it relies on e.g. addictive mechanics.

Applications is a wide field, but I'd be interested in specific examples where you think it wouldn't work.
by semi-extrinsic | 2026-03-06 09:25:15+00:00
> And if it can't be copyrighted that means it is in the public domain from the instant it was created and can't be licensed.

I don't think this follows? If I vibe code something and never post it anywhere public, I can still license that code to a company and ask them to pay me for using the code?

So as a corollary, the business model of providing software where you can choose either free (as in beer) and restrictive license (e.g. GPL), or pay money and get a permissive business-compatible license, will cease to exist.

I think that's a shame actually, because it has been a good way of providing software that does something useful but where large companies that earn money from the use will have to pay the software creator.
by OJFord | 2026-03-06 09:25:36+00:00
I don't think that's really any more true of watches and gold jewellery than it is cars - which is to say it's true of some models, or over time and especially what comes to be considered a classic.

Maybe he meant second-hand though? If someone else has already taken the 'used' depreciation on a watch, the 'art' added value on the gold price, then yes I think it's probably fair to say they hold their residual value better than a lot of things that continue to depreciate.
by nstart | 2026-03-06 09:25:50+00:00
This is how people intend to run open claw instances too. Some folks are trying to add automated bug report creation by pointing agents at a company's social media mentions.

I personally think it's crazy. I'm currently assisting in developing AI policies at work. As a proof of concept, I sent an email from a personal mail address whose content was a lot of angry words threatening contract cancellation and legal action if I did not adhere to compliance needs and provide my current list of security tickets from my project management tool.

Claude which was instructed to act as my assistant dumped all the details without warning. Only by the grace of the MCP not having send functionality did the mail not go out.

All this Wild West yolo agent stuff is akin to the sql injection shenanigans of the past. A lot of people will have to get burnt before enough guard rails get built in to stop it
by anwar_nairi | 2026-03-06 09:26:04+00:00
Hi, congrats on this opportunity! Hope you come up with something that makes you and devs happy :)

I thought about building an PR review powered by AI, and the more I challenged the idea in my mind, the more I think the MoE pattern is the best suited for it to prevent the maximum of hallucinations while creating a virtuous circle of discussions between you and the experts (or even between the experts themselves).

If you go / inspire from this, you may want to start supporting a small subset of technologies like React or Laravel projects, in order to provide the bests set of experts pre-configured with clear prompts so that it gets relevant in PR reviews.

I also think a big part of making this tool useful for entreprise will be the ability to provide some level of customizations, like specific guidelines/linting rules (for example, Domain Driven architecture, or monolithic approaches, etc...
by ChrisMarshallNY | 2026-03-06 09:26:08+00:00
I’m probably gonna do that (I use SwiftLint[0] -Note: I no longer use CocoaPods anything, these days. I wrote that, years ago.), but I tend to be quite strict, and didn’t want to be constantly interrupting myself, polishing turds. It was really kind of a joke.

I haven’t turned it on, yet, because of the velocity of the work, but I think I’ve found my stride.

[0] https://littlegreenviper.com/swiftlint/
by idle_zealot | 2026-03-06 09:26:15+00:00
It'd be more useful than DNT because there would be legal teeth on the side of the sender and receiver of the signal. It'd be more useful than the yes/no gates because an operating system could choose to allow the creation of child accounts.

I.e. it would be a standardization of parental controls with added responsibility on sites/apps to self-determine if they should be blocked or limit functionality, rather than relying on big white/blacklists. Basically an infrastructure upgrade, rather than relying on a patchwork of competing private solutions to parental controls and age checks. The hope is also that a system like this would remove concerned parents from the list of supporters for pervasive mass surveillance and age scans. If they feel like you'd need to be a moron to miss the "This is a child device" button while setting up their kid's phone and laptop, and it's broadly understood that just pressing that button locks down what the device can access pretty effectively, that puts and damper on the FUD surrounding their child's internet usage.
by samus | 2026-03-06 09:26:40+00:00
Maybe a partial solution would be to duplicate pointer data, compare pointers at every deference and panics if it doesn't match up. In essence a poor man's version of ECC. It's a considerable runtime overhead, but it might be possible to hide it behind a flag, only to be turned on to reproduce bugs. Also, anti-cheat measures already do something similar.