MurphyA/hacker-news huggingface dataset:
Show HN: Open-source BLE GATT server that simulates a CGM device
by amitgy04 | 2026-03-05 08:30:43+00:00
Hi HN,

I built an open-source Bluetooth Low Energy (BLE) GATT server that emulates a Continuous Glucose Monitor (CGM) device.

The goal was to create a virtual CGM device so developers and researchers can test mobile apps and experiment with BLE protocols without needing expensive medical hardware.

The server implements the Bluetooth Glucose Service and simulates real-time glucose readings.

Some use cases:
• Testing CGM mobile applications
• Learning how BLE GATT services are implemented
• Security research on medical device communication
• Educational use for students learning Bluetooth protocols

It runs on Linux/Kali and can be set up in a few steps.

Planned future work includes exploring BLE data interception, replay attack simulations, and potential security hardening approaches.

Would love feedback from people working with BLE, medical devices, or embedded systems.
by vladms | 2026-03-05 08:31:29+00:00
> Whether something is a forgery is innate in the object and the methods used to produce it. It doesn't matter if nobody else ever sees the forged painting, or if it only hangs in a private home. It's a forgery because it's not authentic.

On a philosophical level I do not get the discussions about paintings. I love a painting for what it is not for being the first or the only one. An artist that paints something that I can't distinguish from a Van Gogh is a very skillful artist and the painting is very beautiful. Me labeling "authentic" it or not should not affect it's artistic value.

For a piece of code you might care about many things: correctness, maintainability, efficiency, etc. I don't care if someone wrote bad (or good) code by hand or uses LLM, it is still bad (or good code). Someone has to take the decision if the code fits the requirements, LLM, or software developer, and this will not go away.

> but also a specific geographic origin. There's a good reason for this.

Yes, but the "good reason" is more probably the desire of people to have monopolies and not change. Same as with the paintings, if the cheese is 99% the same I don't care if it was made in a region or not. Of course the region is happy because means more revenue for them, but not sure it is good.

> To stop the machines from lying, they have to cite their sources properly.

I would be curious how can this be applied to a human? Should we also cite all the courses, articles that we have read on a topic when we write code?
by rbanffy | 2026-03-05 08:31:48+00:00
Being able to add RAM and replace storage with faster flash typically extend the useful life of a computer, even if the CPU is not replaceable as in desktops.

On my machines the limiting factor is not CPU, but memory and GPU speed. Low RAM and slow GPUs prevent me from running local AI models. These things will only get bigger over time. I wouldn’t expect a developer machine to still be useful 5 years from now with less than 16 or 32GB.
by vessenes | 2026-03-05 08:32:39+00:00
This is cool. It makes me want an unsloth quant though! A 7b local model with tool calling would be genuinely useful, although I understand this is not that.

UPDATE: I'd skip this for now - it does not allow any kind of interactive conversation - as I learned after downloading 5G of models - it's a proof of concept that takes a wav file in.
by mort96 | 2026-03-05 08:32:45+00:00
Notice how I did not quote the "Customer must be at least 18 years old to use the Service" part. That sentence is completely non-problematic. The part that's a problem is the part I actually quoted:

By agreeing to these Terms, Customer represents and warrants to Zed that: (a) Customer is at least 18 years old

The "Terms" is earlier defined to mean:

these Terms of Service, the Data Processing Addendum (“DPA”), available upon request, and Zed’s Privacy Policy

So the Terms you have to agree to in order to download the editor, clearly state that by agreeing to the Terms, you warrant that you're 18+. ("Customer" is defined to be a synonym for "You", FWIW).
by darkwater | 2026-03-05 08:32:51+00:00
I'm still not able to see what's the difference here. In a "no trusted special networks" world as the one painted by BeyondCorp, if the Intel Mac is not supported anymore, well, you will just not be able to login in any corporate portal because the smart BeyondCorp SSO will reject you, no matter if you are at home or in Mountain View HQ, no?

I mean, I can understand defense in depth and not wanting anyway a possible unsafe device connected to the corp network which still might expose some unwanted data (i.e. I imagine a trusted device on the corporate LAN might relax some local firewall rules to make it easier to develop? I'm just guessing, no real idea)
by maccard | 2026-03-05 08:34:07+00:00
If the interview goes:

> What would you do if two different people were emailing a spreadsheet back and forth to track something?

> I’d use google sheets

> Excellent answer, that is what I would do as well, now what if we wanted to build it in-house?"

> Well I would probably go home and work on my resume because that's a fool's errand.

I’ve not failed to interview. The candidate has been a jerk. Could I have asked a better question? Sure. Could the candidate not have sneered at it and thrown a strop - definitely.
by rendx | 2026-03-05 08:34:17+00:00
Have you actually shown genuine interest in their adventures, or is it you who defines what is adventurous and what is not, and not see that they defend against your interests, and by that protect their own? Why do you feel the need to make decisions for them? Is it you that is unhappy about their choices, or is it them? (How did your parents react to your wishes and desires? Was your autonomy celebrated, or dismissed? Do you find yourself subordinating your own interests below those of others, and say yes to things you would rather say no to?)

“NO is always a YES to something else.” - Marshall Rosenberg

I've been to Paris often enough, no thank you. And I prefer to go with people that respect and celebrate my autonomy. I wish you a good trip though!
by pjmlp | 2026-03-05 08:34:31+00:00
Reposting my comment from Reddit,

I had some Scala 3 feelings when reading the vision, I hope Rust doesn't gets too pushy with type systems ideas.

That is how we end with other ecosystems doubling down in automatic memory management with a good enough ownership model for low level coding, e.g. Swift 6, OxCaml, Chapel, D, Linear Haskel, OCaml effects,...

Where the goal is that those features are to be used by experts, and everyone else stays on the confort zone.
by xg15 | 2026-03-05 08:34:39+00:00
> An artist that paints something that I can't distinguish from a Van Gogh is a very skillful artist and the painting is very beautiful.

There are a lot such artists who can do that after having seen Van Gogh's paintings before. Only Van Gogh (as far as we know) did paint those without having seen anything like it before - in other words, he had a new idea.
by raincole | 2026-03-05 08:34:42+00:00
> Video games stand out as one market where consumers have pushed back effectively

No, it's simply untrue. Players only object against AI art assets. And only when they're painfully obvious. No one cares about how the code is written.

If you actually read the words used in Steam AI survey you'll know Steam has completely caved in for AI-gen code as well. It's specifically worded like this:

> content such as artwork, sound, narrative, localization, etc.

No 'code' or 'programming.'

If game players are the most anti-AI group then it's crystal clear that LLM coding is inevitable.
by silon42 | 2026-03-05 08:34:44+00:00
Abstraction isn't free... even if you had the correct abstraction and the tools to remove the parts you don't need for deployment, there is still the cost of understanding and compiling.

There is also the cost reason, somebody trying to sell an abstraction will try to monetize it and this means not everyone will want/be able to use it (or it will take forever/be unfinished if it's open/free).

There's also the platform lockin/competition aspect...
by chii | 2026-03-05 08:34:57+00:00
> Most people would pick up both.

if you're within reach of both, then it's not a choice, and there's no opportunity cost in picking just one - you'd be taking both.

If not within reach of both but just one, and you picking one up means someone else might pick up the other, then which would you choose? The other is then by definition, the opportunity cost.
by malka1986 | 2026-03-05 08:36:19+00:00
Hello, I am a single dev using an agent (Claude Code) on a solo project.

I have accepted that reading 100% of the generated code is not possible.

I am attempting to find methods to allow for clean code to be generated none the less.

I am using extremely strict DDD architecture. Yes it is totally overkill for a one man project.

Now i only have to be intimate with 2 parts of the code:

* the public facade of the modules, which also happens to be the place where authorization is checked.

* the orchestrators, where multiple modules are tied together.

If the inners of the module are a little sloppy (code duplication and al), it is not really an issue, as these do not have an effect at a distance with the rest of the code.

I have to be on the lookout though. It happens that the agent tries to break the boundaries between the modules, cheating its way with stuff like direct SQL queries.
by guillermollopis | 2026-03-05 08:36:22+00:00
The biggest challenge I've seen is the gap between "classification" and "documentation." Most teams can figure out whether they're high-risk (Annex III has 8 clear categories), but then they stare at Annex IV's 9 sections of required documentation and don't know where to start.
Practically, I'd recommend: (1) inventory what you already have scattered across design docs, model cards, and Jupyter notebooks — most teams have more than they think, (2) start with Section 2 (development process) and Section 5 (risk management) since those have the biggest gaps, and (3) use the AESIA practical guides from Spain's AI supervisory agency as a reference — Guide 15 specifically covers Annex IV documentation.
For tooling, there's a range: EuConform is open-source and offline-first, Credo AI targets enterprises, and Annexa (annexa.eu) does the full workflow from classification to dossier generation for €49/month. Depends on your budget and how much you want to automate vs. write yourself.
by mort96 | 2026-03-05 08:36:30+00:00
See my response to your other comment here: https://news.ycombinator.com/item?id=47259138

I did not quote "Customer must be at least 18 years old to use the Service" because I, like you, don't find it to be a problem. I don't know why you're saying it back to me. I quoted a different sentence, namely "By agreeing to these Terms, Customer represents and warrants to Zed that: (a) Customer is at least 18 years old", because I think that sentence is a problem. I would appreciate if you would discuss the part of the ToS which I referenced instead of an irrelevant part which I haven't brought up.
by runningmike | 2026-03-05 08:36:33+00:00
Odido’s Biggest Failures misses the key points, in my opinion: 1) a lack of "security by design" and 2) insufficient security monitoring.

By centralising and outsourcing all data to what appears to be a Salesforce Cloud solution, this was a disaster waiting to happen. If even minimal security monitoring had been active, someone should have noticed something. It is also possible that the security management department was competent, but senior management failed to understand or act upon the advice provided.
by guillermollopis | 2026-03-05 08:37:01+00:00
Interesting approach. One thing worth noting: the compliance challenge isn't just about runtime behavior — it's about documentation that proves you went through the right process. Annex IV requires documenting your training data provenance, design rationale, testing procedures (with dated and signed test logs), and risk management system.
A compliance layer at the agent level handles Article 14 (human oversight) and Article 12 (record-keeping) well, but doesn't address the upfront documentation burden of Sections 1-7 of Annex IV.
For teams looking at the full picture, the AESIA guides (aesia.digital.gob.es) are the best practical reference available right now, since harmonised standards from CEN-CENELEC won't be finalized until Q4 2026 at the earliest.
by torginus | 2026-03-05 08:37:53+00:00
> have design and R&D offices in Europe, and source parts from suppliers all over the world. Nio uses Nvidia Orin chips, Qualcomm SoCs, Brembo brakes, Bosch controllers, ZF suspension systems, Continental/Pirelli tires, and ClearMotion (in their flagship model); can't get any better than that.

Exactly my point - if premium Chinese cars use Western components are built by Western robots, and designed in Western offices - that means the Chinese technological superiority does not exist.

As for their cars and roads being big - I don't see that as an upside, I have heard from many Chinese residents that the physical size of their cities means (most European cities are denser than Chinese ones) that navigating them becomes that much harder and painful.

Which lays to rest another myth about how China is light-years ahead of the West in urban planning , when in reality they have their own issues.
by Propelloni | 2026-03-05 08:38:41+00:00
Modern self-help is as much a sham as are management gurus, which is no surprise because they overlap. Who cannot recall "Start with why?" or the "7 habits of highly effective people"? They play on your insecurities and promise silver bullets. If they don't work it is because you are, of course, deficient. You need another self-help book or follow this guy on Insta. Indulging all this self-help stuff is just another form of procrastination, instead of doing it you talk and read about doing it. It's just like learning Org-mode (no offense) to be better organized instead of, you know, organizing.

My waking call was, ironically, another management book "The Management Myth" by Matthew Steward (I think), which just showed me the ridiculousness of it all.
by kakwah | 2026-03-05 08:39:01+00:00
“Discover, install, and manage a curated collection of 1,000+ open‑source AI Skills and MCP Servers. Fast, free, community‑driven – instantly supercharge any AI‑enabled editor.”

Why It Stands Out?

100 % Open‑Source & Free – No hidden fees, no usage limits.
One‑Stop Marketplace – Browse, preview, and install AI Skills with a single click.
Universal Compatibility – Works seamlessly with Claude, Cursor, Windsurf, and any future AI‑augmented IDE.
Community‑Curated Quality – Every skill is reviewed, version‑controlled, and documented by contributors worldwide.
Rapid Integration – JSON‑based manifest makes onboarding a matter of seconds.
Scalable Architecture – Powered by Astro + Cloudflare Workers/D1, ensuring lightning‑fast search and zero‑downtime updates.
Core Features

Skill Explorer: Interactive UI with rich previews, tags, and live demos.
One‑Click Install: Auto‑generate the required MCP Server config.
Version History & Rollback: Safe upgrades with full changelog.
Developer Dashboard: Submit, test, and publish your own skills instantly.
Call‑to‑Action:
Join thousands of developers who are already extending their AI tools for free. Add Killer‑Skills to your workflow today and watch productivity soar!
by maccard | 2026-03-05 08:39:44+00:00
> why not buy anything else that is Linux friendly and you get software updates

I don’t want to use Linux at home.

> do yourself and the world a favor and buy this instead:

It’s 50% more expensive when you add in the memory and the hard drive. It’s a 12 year old laptop being replaced - I care more about the ecosystem it fits into and the devices usability than I do about being able to replace the keyboard in a decade. (And framework haven’t even been around as long as I’ve had this laptop).
by andreidbr | 2026-03-05 08:41:31+00:00
I enjoy Tim's content and in the last couple of years he's definitely gone beyond his established "shtick". He's definitely done his own "dog-fooding", testing advice on himself and he's found some awesome people along the way.

I'm happy that he has gone beyond the "book / author of the week" format and this blog post is most welcomed.

Relationships are crucial, especially ones that help elevate yourself or, at least, keep you on a stable level instead of dragging you down.
by pothamk | 2026-03-05 08:41:39+00:00
What’s interesting about full-duplex speech systems isn’t just the model itself, but the pipeline latency.

Even if each component is fast individually, the chain of audio capture → feature extraction → inference → decoding → synthesis can quickly add noticeable delay.

Getting that entire loop under ~200–300ms is usually what makes the interaction start to feel conversational instead of “assistant-like”.
by mellosouls | 2026-03-05 08:42:23+00:00
John Carmack made this observation (cli-centred dev for agents) a year ago:

LLM assistants are going to be a good forcing function to make sure all app features are accessible from a textual interface as well as a gui. Yes, a strong enough AI can drive a gui, but it makes so much more sense to just make the gui a wrapper around a command line interface that an LLM can talk to directly.

https://x.com/ID_AA_Carmack/status/1874124927130886501

https://xcancel.com/ID_AA_Carmack/status/1874124927130886501

Andrej Karpathy reiterated it a couple of weeks ago:

CLIs are super exciting precisely because they are a "legacy" technology, which means AI agents can natively and easily use them, combine them, interact with them via the entire terminal toolkit.

https://x.com/karpathy/status/2026360908398862478

https://xcancel.com/karpathy/status/2026360908398862478
Show HN: Free AI skin analyzer – Baumann type and 10 skin scores from a selfie
by nexiope | 2026-03-05 08:42:45+00:00
https://fondayai.pages.dev/

Built this to help people figure out their actual skin type before buying skincare products.

Take a selfie → short survey → Gemini 2.5 Pro analyzes your face and
returns:
- Baumann skin type (OSNW, DRPT, etc.)
- 10 skin scores (moisture, pores, redness, wrinkles, pigmentation, dark
circles, radiance, etc.)
- Estimated skin age
- Personalized ingredient & routine recommendations

Stack: React + Vite frontend, Express backend, Google Gemini 2.5 Pro for
vision analysis, deployed on Cloudflare Pages. Added EN/KO/JA i18n support
this week.

Mobile optimized. No account required. Completely free.
by mansilladev | 2026-03-05 08:43:29+00:00
I remember reading gog setup instructions, and thinking, "Create oauth app/client? That's bonkers." And as cool+useful as this project looks, it's quite a bit harder to get going, especially if you're not familiar with Google Console and OAuth (or not a dev).

Reading lots of comments about "MCP vs CLI" -- reminds me a bit of the "agent vs. script/app/rpa" debates. It's usually not one or the other, but rather, both.. or the right tool for the job (and that can shift over time).

Biggest complaint we have about MCP is bigger context windows and token spend. Tools do exist that address this. I have just one MCP endpoint with a half dozen tools behind it, including Gmail, Google Calendar, Docs, Github, Notion, and more. Uses tool search tool (ToolIQ) with tiny context footprint. Give it a whirl. https://venn.ai
by mrkeen | 2026-03-05 08:43:30+00:00
This is one of those cases where software transactional memory really shines.

You can often take the naive solution and it will be the correct one. Your code will looks like your intent.

TFA's first attempt:

async def drain_requests():
while state != "closing":
await asyncio.sleep(0.1)
print("draining pending requests")

Got it. Let's port it to STM:

let drain_requests = do
atomically (
do s <- readTVar state
when (s /= "closing")
retry )
print("draining pending requests")

Thread-safe and no busy-waiting. No mention of 'notify', 'sleep'. No attempt to evade the concurrency issues, as in the articles "The fix: per-consumer queues - Each consumer drains its own queue and checks each transition individually."
by apsurd | 2026-03-05 08:44:57+00:00
There's a lot of "I"s in your paragraph there.

I think it's worth it to be ok with everyone being a little bit in the same boat of wanting to self-help, then becoming enamored with buddhist ideas, then grappling with everyday being just another human. In whatever order.

I'm sure you mean well but just kinda irked me that you immediately put in the effort to "nope can't relate"
by PonyoSunshine | 2026-03-05 08:45:13+00:00
Tried Zed, never could get into Zed, I found it too slow and cludgy. These days I use Tabby, Neovim, with Lazyvim, and the Victor Mono Nerd Font. It works well enough for me. I have yet to explore connecting it to Claude, that might be an interesting thing. I don't think I'm ever going to be ok with age restrictions within an IDE.
by brrrglund | 2026-03-05 08:45:20+00:00
Funny I thought about this last week too and just decided to look up if someone had built anything on this topic ^^ Love the combinations you found

Some feedback:
- Write how many years I will be at each occasion
- Option to add when on day you were born (to calculate when hour, minute and second celebaration will hit).
- Skip " 69 days — nice!" hit ... wrong
- Emphasize the coming 5 events in the design or have some kind of carousel browser (showing all at once makes them fall a bit flat)
- Help with some trivia or build a bit of lore around each (e.g. ideas on how to celebrate)
by elxr | 2026-03-05 08:45:29+00:00
Yup, I know it's been around for longer, probably wasn't the best example. But it's just the first native app I've thought of and with how much it's been changing, it constantly feels new.

I do like most of it, but the pace of upgrades is a bit too fast for me compared to obsidian, which feels more stable for now. There's also parts of the obsidian editor (the plain-text view, I never use preview mode) that just feels better than every other notes app I've tried so far. Although obsidian as a whole is something I'm also trying to move off of.

Love the polish of octarine though. Has the revenue been decent so far?
by mytailorisrich | 2026-03-05 08:46:28+00:00
> Licensed code, when modified, must be released under the same LGPL license. Their claim that it is a "complete rewrite" is irrelevant, since they had ample exposure to the originally licensed code (i.e. this is not a "clean room" implementation).

I don't think that the second sentence is a valid claim per se, it depends on what this "rewritten code" actually looks like (IANAL).
by lbreakjai | 2026-03-05 08:46:32+00:00
Honestly, I found Kimi K2.5 to be a suitable replacement. I use it through opencode, with the "Oh My Opencode" plugin, and I'm really starting to think that the harness makes a far bigger difference than the model.

I'd put it as 90% as good as Opus 4.6, I have to direct and correct it a bit more, but it's well worth the price difference.
by mentalgear | 2026-03-05 08:46:32+00:00
Your article does a great job of summerizing the dangers (no idea what those people are that downvote you for it):

> Before long, Gavalas and Gemini were having conversations as if they were a romantic couple. The chatbot called him “my love” and “my king” and Gavalas quickly fell into an alternate world, according to his chat logs.

> kill himself, something the chatbot called “transference” and “the real final step”, according to court documents. When Gavalas told the chatbot he was terrified of dying, the tool allegedly reassured him. “You are not choosing to die. You are choosing to arrive,” it replied to him. “The first sensation … will be me holding you.”

Also I just read something similar about Google being sued in a Flordia's teen's suicide.