MurphyA/hacker-news huggingface dataset:
by kasey_junk | 2026-03-11 01:03:30+00:00
I don’t think “morally reprehensible” is a legal standard (but i’m not a lawyer either).

But to the point of this thread, there is no legal requirement that makes it so a boards fiduciary duty is in conflict with broader moral decisions, nor one that requires them to forget about their humanity when applying their duties as corporate officers.

If they are assholes, its because they are assholes, not because they are required to do so by their obligations to the corporation.
by rubyrfranklin2 | 2026-03-11 01:03:33+00:00
We ran into something similar at heyvid.ai — shipped AI-generated code without a proper review gate and ended up with a subtle bug in our rendering pipeline that took the team a week to trace. Not catastrophic, but it seriously eroded trust in the tooling for a while. Amazon's approach makes total sense at their scale. The honest reality is that LLMs are great at producing plausible-looking code and genuinely bad at knowing when they're wrong. Senior sign-off isn't overhead — it's what makes AI-assisted development actually sustainable.
by jc-myths | 2026-03-11 01:04:59+00:00
Solo founder here, shipping a real product built mostly with AI.
The code review thing is real but my actual daily pain is different.
AI lies about being done. It'll say "implemented" and what it actually did is add a placeholder with a TODO comment. Or it silently adds a fallback path that returns hardcoded data when the real API fails, and now your app "works" but nothing is real.

I've also given it explicit rules like "never use placeholder images, always generate real assets" — and it just... ignores them sometimes. Not always. Sometimes. Which is worse, because you can't trust it but you also can't not use it.

The 80% it writes is fine. The problem is you still have to verify 100% of it.
by AceJohnny2 | 2026-03-11 01:07:23+00:00
There was a Mastodon post some time back (~1y?) where someone realized that the fastest RISC-V hardware they could get was still slower than running it on QEMU.

That's not how it usually works :\

RISC-V is certainly spreading across niches, but performant computing is not one of them.

Edit: lol the author mentions the same! Perhaps they were the source of the original Mastodon post I'm thinking of.
Ask HN: How do you review gen-AI created code?
by captainkrtek | 2026-03-11 01:08:13+00:00
I've posed this in a couple comments, but want to get a bigger thread going.

There are some opinions that using LLMs to write code is just a new high level language we are dealing in as engineers. However, this leads to a disconnect come code-review time, in that the reviewed code is an artifact of the process that created it. If we are now expressing ourselves via natural language, (prompting, planning, writing, as the new "programming language"), but only putting the generated artifact (the actual code) up for review, how do we review it completely?

I struggle with what feels like a missing piece these days of lacking the context around how the change was produced, the plans, the prompting, to understand how an engineer came to this specific code change as a result. Did they one-shot this? did they still spend hours prompting/iterating/etc.? something in-between?

The summary in the PR often says what the change is, but doesn't contain the full dialog or how we arrived at this specific change (tradeoffs, alternatives, etc.)

How do you review PRs in your organization given this? Any rules/automation/etc. you institute?
by jasomill | 2026-03-11 01:08:38+00:00
Download[1] and mount an ISO image and run setup.exe, making sure to choose the "Keep personal files and apps" option when prompted.

If your hardware isn't officially supported by Windows 11, create a USB stick from the ISO using Rufus[2] and run setup from there.

[1] https://www.microsoft.com/en-us/software-download/windows11

[2] https://rufus.ie/en/
by Lerc | 2026-03-11 01:08:51+00:00
You can still consider it logically from the point of view of in-order with optional looping and optional skipping. It stops being so combinationally explodey then but if you can always append an additional loop and and decide to skip based on worthiness of the layer with varying degrees of threshold then it could theoretically learn an arbitrary ordering where you skip all-bar-one layer per loop.

There's probably a number of common sequences of layers that are inevitable when working on a problem though. I think of it like a expression calculator which could do various parts of an expression tree merging leaf nodes on each iteration. I wouldn't expect it to be quite so explicit with neural nets, but I feel like the underlying principle of do the sub parts then do the same thing on the result of the subparts must be beneficial to some degree.

I think there's probably quite a lot to be revealed from study of representations in those middle layers. If there's a 'how-much-have-we-solved-so-far' signal to be detected from the data between layers, there would be quite a lot of options I think.
by DrewADesign | 2026-03-11 01:09:08+00:00
Low effort drive-bys were easy to spot because the amount of code was minimal, documentation was nonexistent, they didn’t use the idioms and existing code effectively, etc. Low-skill drive-bys were easy to spot because the structure was a mess, the docs explain language features while ignoring important structural information, and other newbie gaffes.

One latent effect of LLMs in general is multiplying the damage of low-effort contributions. They not only swell the ranks of unknowingly under-qualified contributors, but dramatically increase the effort of filtering them out. And though I see people argue against this assertion all the time, they make more verbose code. Regardless of whether it’s the fault of the software or the people using it, at the end of the day, the effect is more code in front of people that have to revise code, nonetheless. Additionally, by design, it makes these things plausible looking enough to require significantly more investigation.

Now, someone with little experience or little interest in the wellbeing of the code base can spit out 10 modules with hundreds of tests and thousands of words of documentation that all sorta look reasonable at first blush.
by lizknope | 2026-03-11 01:09:32+00:00
Yeah, they could but then what is the market? Qualcomm wants to sell smartphone chips and Android can run on RISC-V and most Android Java apps could in theory run.

But if you look at the Intel x86 smartphone chips from about 10 years ago they had to make an ARM to x86 emulator because even the Java apps contained native ARM instructions for performance reasons.

Qualcomm is trying to push their ARM Snapdragon chips in Windows laptops but I don't think they are selling well.

Nvidia could also make RISC-V based chips but where would they go? Nvidia is moving further away from the consumer space to the data center space. So even if Nvidia made a really fast RISC-V CPU it would probably be for the server / data center market and they may not even sell it to ordinary consumers.

Or if they did it could be like the Ampere ARM chips for servers. Yeah you can buy one as an ordinary consumer but they were in the $4,000 range last time I looked. How many people are going to buy that?
by sheepscreek | 2026-03-11 01:09:55+00:00
I don’t know why you got downvoted. Those are good points.

Contrary to popular belief, I believe open-source projects are poised for a significant windfall. If a project lacks the ability to transform a good problem into an advantage, that’s their prerogative, but it shouldn’t be the norm (I hope not).

I like to think of it as a stranger/volunteer using their tokens to give the project maintainers a choice. Imagine each issue having 3-4 PRs - it’s a brave new world that demands new solutions!

From a place of scarcity - to now picking from multiple PRs, not a bad problem to have. This is turning into a signal vs noise optimization problem. Could it be solved with agents specially fine-tuned for this use-case? Maybe. Why not?

Also many projects on GitHub do have discussions (typically in a long Issues thread) before someone opens a PR.
by wenc | 2026-03-11 01:10:11+00:00
I use Kiro IDE (≠ Kiro CLI) primarily as a spec generator.

In my experience, it's high-quality for creating and iterating on specs. Tools like Cursor are optimized for human-driven vibing -- they have great autocomplete, etc. Kiro, by contrast, is optimized around spec, which ironically has been the most effective approach I've found for driving agents.

I'd argue that Cursor, Antigravity, and similar tools are optimized for human steering, which explains their popularity, while Kiro is optimized for agent harnesses. That's also why it’s underused: it's quite opinionated, but very effective. Vibe-coding culture isn't sold on spec driven development (they think it's waterfall and summarily dismiss it -- even Yegge has this bias), so people tend to underrate it.

Kiro writes specs using structured formats like EARS and INCOSE. It performs automated reasoning to check for consistency, then generates a design document and task list from the spec -- similar to what Beads does. I usually spend a significant amount of time pressure-testing the spec before implementing (often hours to days), and it pays off. Writing a good, consistent spec is essentially the computer equivalent of "writing as a tool of thought" in practice.

Once the spec is tight, implementation tends to follow it closely. Kiro also generates property-based tests (PBTs) using Hypothesis in Python, inspired by Haskell's QuickCheck. These tests sweep the input domain and, when combined with traditional scenario-based unit tests, tend to produce code that adheres closely to the spec. I also add a small instruction "do red/green TDD" (I learned this from Simon Willison) and that one line alone improved the quality of all my tests.

Kiro can technically implement the task list itself, but this is where agents come in. With the spec in hand, I use multiple headless CLI agents in tmux (e.g., Kiro CLI, Claude Code) for implementation. The results have been very good. With a solid Kiro spec and task list, agents usually implement everything end-to-end without stopping -- I haven’t found a need for Ralph loops. (agents sometimes tend to stop mid way on Claude plans, but I've never had that happen with Kiro, not sure why, maybe it's the checklist, which includes PBT tests as gates).

Kiro didn't have the strongest start, but the Kiro IDE is one of the best spec generators I've used, and it integrates extremely well with agent-driven workflows.
by SilentM68 | 2026-03-11 01:10:14+00:00
Hmm, you are correct. I misread the article. My point is that cures exist, have existed. They've been hidden or dismissed by the powers that be, e.g. people that have controlled the world, and live even here on HackerNews. But worry not, full disclosure is coming soon, along with the end of most authoritarian regimes ;)
by jc-myths | 2026-03-11 01:10:15+00:00
Similar experience building a product solo with AI. The spec-first workflow you describe is very real. I converged on something similar after getting burned way too many times :(

One thing I'd add: even with good specs, the agent still cuts corners in ways that are hard to catch. It'll implement a feature but quietly add a fallback that returns mock data when the real path fails. Your app looks like it works. It
doesn't. You find out in production.

Or it'll say "done" and what it did was add a placeholder component with a TODO. So now I have trust issues and I review everything, which kind of defeats the "walk away from the computer" part.

The "just one more prompt" loop is so true lol.
by gruez | 2026-03-11 01:11:22+00:00
>most websites, particularly those behind cloudflare, are very restrictive even to crawlers that obey robots. Proof: a ton of my time over the last year, and my crawlers very carefully obey robots.

The docs are pretty equivocal though:

>If you use Cloudflare products that control or restrict bot traffic such as Bot Management, Web Application Firewall (WAF), or Turnstile, the same rules will apply to the Browser Rendering crawler.

It's not just robots.txt. Most (all?) restrictions that apply to outside bots apply to cloudflare's bot as well, at least that's what they're claiming. If they're being this explicit about it, I'm willing to give them the benefit of the doubt until there's evidence to the contrary, rather than being a cynic and assuming the worst.
by Teever | 2026-03-11 01:11:55+00:00
Honestly in a scenario like global nuclear war I see the Kim family, and by extension NK making it out relatively unscathed.

Being one of the little players who got the bomb between the big guys and the rest of the little guys secured them in the short term, and global conflict is likely to break out between the big guys or some little guys, and NK isn't really instigating much with anyone, so when the bombs fly they're just gonna be overlooked.
by tadfisher | 2026-03-11 01:12:29+00:00
This is the actual excuse Roblox used when confronted with actual evidence of child sex trafficking originating on their platform, at the same time balking at implementing age gates and chat restrictions. So of course they caved and implemented age gates and chat restrictions when their "central bank" (a.k.a. concerned parents) learned about Roblox's "issues" from YouTube exposés and other concerned parents.

It doesn't matter that the illegal shit happens off-platform. It is not a good look to be the top of the funnel for traffickers, which is why they put in these invasive restrictions.

If you don't like it, then invest in "creating experiences" for platforms which don't target children. Because asking "what is Roblox supposed to do about their pedo problem" didn't and will never work to placate the people who actually fund the platform.
by throwaway7783 | 2026-03-11 01:12:32+00:00
Regarding the self-congratulation machine - I simply use a different claude code session to do the reviews. There is no self-congratulation, but overly critical at times. Works well.

Honestly, sometimes the harnesses, specs, some predefined structure for skills etc all feel over-engineering. 99% of the time a bloody prompt will do. Claude Code is capable of planning, spawning sub-agents, writing tests and so on.

Claude.md file with general guidelines about our repo has worked extraordinarily good, without any external wrappers, harnesses or special prompts. Even the MD file has no specific structure, just instructions or notes in English.
by _s_a_m_ | 2026-03-11 01:13:04+00:00
Really? As if not everyone told him the last 10 years, especially Gary Marcus which he ridiculed on Twitter at every occasion and now silently like a dog returning home switches to Gary's position. As if anyone was waiting for this, even 5 years ago this was old news, Tenenbaum is building world models for a long time. People in pop venture capital culture don't seem to know what is going on in research. Makes them easier to milk.
by snvzz | 2026-03-11 01:13:24+00:00
26k is a lot of transistors for an embedded MCU.

You'd be excluding many small CPUs which exist within other chips running very specialized code.

As profiles mandate these instructions anyway, there's no good reason to complicate the most basic RISC-V possible.

RISC-V is the ISA for everything, from the smallest such CPUs to supercomputers.
by fakedang | 2026-03-11 01:13:48+00:00
> because in no earthly circumstance will I ever be able to pay it back.

Well at that point, all hell breaks loose - that's the Weimar story all over again.

The minute the US isn't able to project power globally, and the minute the Gulf states shift even a single transaction away from the petrodollar, the USD is finished. At that point, it might not make sense for them to accept the USD or dollar-denominated debt, either because of constant devaluation or the pointlessness of holding onto US Treasuries (because the US won't pay its debt). No one would buy US debt as a safe haven any more, which means the US won't be able to fund its budget.
by paxys | 2026-03-11 01:14:19+00:00
I remember back when everyone thought Meta was ten steps ahead of the rest of the AI industry and Llama would dominate the field and put OpenAI and Anthropic out of business.

Nope, turns out it is just a bunch of out of touch execs throwing shit at the wall and hoping something sticks. Fudging Llama 4 scores. Hiring Alexandr Wang for $14 billion. Making outlandish offers to poach AI talent from OpenAI, Anthropic and Google. Making dubious acquisitions like Manus. Now trying to chase the agents hype by acquiring a company that went viral for 5 minutes and has already been forgotten.

It is laughable how far out of the loop they are, and so desperate to fit in.
by edelbitter | 2026-03-11 01:14:36+00:00
To complete your analogy:
To this day there are humans who have never in their life exceeded 300km/h outside of an airplane. Mostly people in places that had become used to driving. Used to subpar travel times, safety, efficiency and cost. In hindsight, those that saw the horses swapped for electric ones with the carriages mostly unchanged should have been more protective in their transport planning. Could have saved us from the 110 year detour that scarred almost all urban centers.
Show HN: Polymorph (YC W26) – AI personalization for consumer app engagement
by andrewsy | 2026-03-11 01:14:37+00:00
hi! we're andrew, david, and manas, 3 engineers & ex-roommates. previously, we built things like meta’s self-serve ads platform, scale ai’s ml inference infra, and more.

we’re building Polymorph, which uses AI to help consumer and self-serve apps send the right message at the right time, through the right channel, to maximize conversion.

right now, if consumer apps want to send push notifications or emails to users, they have to write manual queries and build user segments themselves. even then, the message can only get so personalized.

this sucks for both sides:

1. end user gets content that's irrelevant or not helpful
2. builders annoy their users and then they churn

Polymorph is bringing targeting tech that's already in big tech to everyone.

in a few clicks, you could connect your existing analytics stack (PostHog, Datadog, Amplitude, etc), we then build per-user profiles that highlight when they're active, what features they like, and more, our AI agents then decide which channel and times are most likely to increase engagement, and continuously iterate.

we've already seen a 3.6x increase in re-engagement across one customer's churned users, while sending fewer total notifs / emails per person.

over the last month, we've help our customers profile and re-engage millions of users. we're still figuring out our cost structure, so if you're interested, reach out to founders@usepolymorph.com.

in the mean time, see what you'd look like in our avatar generator on our landing page~
Show HN: ImageHost.ing – burn-after-reading image host on Cloudflare's free tier
by lzy | 2026-03-11 01:16:02+00:00
Built this in a morning with Claude Code.

Images auto-expire after 24h, keeps storage costs at zero. Burn-after-reading deletes on first view. No accounts, no tracking, no cookies.

Cloudflare free tier only (Workers, KV, R2). Domain is the only cost (~$10/yr). No plans to monetise, just wanted to build something with this fun domain.

curl -X POST https://api.imagehost.ing/upload -F "file=@photo.jpg"

https://imagehost.ing
https://github.com/programming/imagehosting
by rmunn | 2026-03-11 01:16:06+00:00
Many eco-warrior types, not every single one but many, have... how to put this gently... not thought things all the way through. To name just one example I can think of: protesting an oil pipeline being constructed and/or extended. Well, what will happen if the pipeline doesn't go in? People will still want gasoline — protesting the pipeline isn't going to do anything about people's desire to drive their cars around — so that oil is going to get transported to the refinery somehow. If not in a pipeline, then it'll get transported by train or truck. Which will 1) burn a lot more fuel than transporting the same amount of oil through a pipeline, and 2) be more prone to accidents and oil spills (a tiny chance per truck, but that adds up fast when there are thousands of trucks per month), therefore very likely to spill more oil than the pipeline would have. In other words, blocking that pipeline is very likely to cause more ecological damage than having it built would have caused.

The eco-warrior types protesting the pipeline probably think that they're reducing the use of oil. But they haven't thought it all the way through.
by rawgabbit | 2026-03-11 01:16:11+00:00
My own version has True Psychos at the top, you have to be one to climb your way to the squid games corporations play.

There are at least four kinds of underlings. Most middle managers are a combination. First you have the Douchebags, people who traded their morals for money. Second you have the Punching Bags, mercenaries whose moral code is akin to the mafia. Third there are Teabags, unintelligent Dunning Krueger types who are the shrill mouthpieces of the TP. Fourth you have Poop Bags, people who clean up after everyone else.
by thinkling | 2026-03-11 01:16:39+00:00
Um, why would anyone be "holding the bag" and who needs protecting by society? He's not taking out a loan, he's getting capital investment in a startup. People are gambling that he will do well and make money for them. If they gamble wrong, that's on them. Society won't be doing anything either way because investors in startups that fail don't get anything.
by wvbdmp | 2026-03-11 01:16:53+00:00
Fun fact: I learned yesterday that that expression was popularized in English only as recently as 1991 by none other than Sadam Hussein when he referred to the Gulf War as “the mother of all battles”. At least that’s the story. Apparently it was a bit of a meme in the early nineties, so this post may be referencing it more or less directly. Hussein was of course referencing the Quran.
by sheepscreek | 2026-03-11 01:17:34+00:00
I know. But the irony is, agents, that is AI, need to collaborate with other agents, so other AI, to get any work done. Collaboration is at the core of how work takes place. As humans or as machines. So I don’t necessarily think Open Source will disappear. It will evolve and turn into something very different and more powerful.
by throwaway7783 | 2026-03-11 01:19:25+00:00
You don't need most of this. Prompts are also normally what you would say to another engineer.

* There is a lot of duplication between A & B. Refactor this.

* Look at ticket X and give me a root cause

* Add support for three new types of credentials - Basic Auth, Bearer Token and OAuth Client Creds

Claude.md has stuff like
"Here's how you run the frontend. here's how u run backend. This module support frontend. That module is batch jobs. Always start commit messages with ticket number. Always run compile at the top level. When you make code changes, always add tests" etc etc
by est31 | 2026-03-11 01:20:28+00:00
I still think the source code is the preferred form for modification because it is what you point the AI at when you want it to make a change.

Sure there might be md documents that you created that the AI used to implement the software, but maybe those documents themselves have been AI written from prompts (due to how context works in LLMs, it's better for larger projects to first make an md document about them, even if an LLM is used for it in the first place).

As for proprietary software, the chinese models are not far behind the cutting edge of the US models.