MurphyA/hacker-news huggingface dataset:
by semiquaver | 2026-03-13 13:58:03+00:00
The waste of slow JS bundles is nothing compared to the cost of bloated interpreted runtimes or inefficient abstractions. Most production software is multiple orders of magnitude slower than it needs to be. Just look at all the electron apps that use multiple GB of ram doing nothing and are laggier than similar software written 40 years ago despite having access to an incredibly luxurious amount of resources from any sane historical perspective.
by graemefawcett | 2026-03-13 13:58:42+00:00
Exactly. They've implemented a VM inside a transformer, turned an O(1) memory access call into O(n), optimized it down to O(log n) and wrote a post about how smart they are.

It's a nice bit of engineering, if you don't subscribe to YAGNI. If you do, you must ask the obvious question of what capability this delivers that wasn't available before. The only answer I've got is that someone must have been a bit chilly and couldn't figure out the thermostat
by satring | 2026-03-13 13:58:44+00:00
The same pattern is playing out in API payments right now. Traditional API billing (Stripe subscriptions, API keys, monthly invoices) is the "bank branch" model: it works, but it requires human setup, identity verification, and ongoing account management for every provider.

HTTP 402 "Payment Required" has been a reserved status code since 1997, unused for nearly 30 years. Now protocols like x402 and L402 are finally implementing it: a server returns a 402 with a payment instruction, the client pays (stablecoins or Lightning), and gets access. No signup, no API key, no billing relationship.

This isn't replacing Stripe any more than ATMs replaced tellers. Most API providers will keep using traditional billing. But there's a new category of consumer that can't use the old model at all: autonomous software agents. An AI agent can't fill out a signup form, pass KYC, or manage a credit card. Per-request micropayments over 402 let agents acquire API access without any human in the loop.

The parallel to the article is exact. ATMs automated a task within the existing branch paradigm. Mobile banking eliminated the need for the branch. Similarly, better developer portals automated API key management within the existing billing paradigm. Machine-to-machine micropayments eliminate the need for the billing account entirely.
by vite_throwaway | 2026-03-13 13:58:50+00:00
I have a small React project using vite 7 and have the following in my config so that vite interprets ".js" files as JSX:

// See https://github.com/vitejs/vite/discussions/14652
esbuild: {
loader: "jsx",
include: /.*\.jsx?$/,
exclude: [],
},
optimizeDeps: {
esbuildOptions: {
loader: {
".js": "jsx",
},
},
},

Note the comment at the top. I had no idea how to come up with this config by checking the documentation pages of vite and its various related tools. Luckily I found the GitHub issue and someone else had come up with the right incantation.

Now this new vite uses new tools, and their documentation is still lacking. I spent half an hour trying to figure out how vite (and related tools that I had to navigate and try to piece a coherent view of: esbuild, oxc, rolldown, etc.) might be convinced, but gave up and stayed with vite 7.

Someone could respond with a working solution and it would help, sure, but these tools sure as hell have documentation issues.
by aspenmartin | 2026-03-13 13:58:56+00:00
That is indeed a paper lol.

But in seriousness: not news and doesn’t change any of what I said. You have a class of 20 objects that they recall as they dream. Same setup (fMRI), small n, very very simplified design.

Look the reason we can’t do this is both physics AND information theoretic. You are getting in the best case an EXTREMELY reduced dimensionality, it’s not as though this is an early days of AI thing where it’s like “it’s not possible today but there’s nothing in principle stopping us from a Kurzweil like world”. It’s just not really possible.

Anyway the studies on this are restricted to specific neuroscience questions. Paper shows dreams contain object-like representations in the visual cortex — this is cool! And important! But it doesn’t imply anything for decoding thoughts and dreams.
by lordgroff | 2026-03-13 13:59:03+00:00
It's incredibly distressing, but I think the issue here lies with 'we'. Those at the very top are a very, shall we say, unique group. Those who seek power at such a level are not like the rest of us. There's established research showing that psychopathic and sociopathic traits are vastly more common among the "CEO class". It's not that wealth and power _makes_ them so, it's that relatively few are willing to be completely amoral or malicious in order to obtain as much power as possible. I believe that this effect is greatly magnified at the very top.

It's a tale as old as Plato: those most likely to WANT to rule are exactly the 'candidates' who absolutely should not.
by treesknees | 2026-03-13 13:59:15+00:00
It could be a move to have parity with TikTok, where they claim it’s for safety reasons. I’ve been seeing advertisements for Instagram touting their child/teen protection features. Seems like they’re really trying to beat the allegations that Instagram is bad for children’s health.

https://news.ycombinator.com/item?id=47241817
by m132 | 2026-03-13 13:59:30+00:00
> The real problem is this hodgepodge of laws; it's the growth of the surveillance state. From voting rights in the United States, facing Trump's Orwellian-named SAVE America Act, to Ring's doggie tracking system that can also be used to follow people, to Trump booting Anthropic to the side for refusing to allow its AI tools to be used for mass surveillance, privacy is on the decline.

I understand it is popular to pick on the current administration, and there are plenty of rightful reasons to, but let's not forget this has been happening way before either of Trump's terms (see: KYC laws). The only difference between then and now is that current administration has essentially taken a mask-off approach, so we get to see this discussion finally brought up by mainstream media outlets.
by komali2 | 2026-03-13 13:59:32+00:00
I'm not the only one who read the constitution, the constitutional court did, and in doing so directed that it doesn't constitute a claim to a specific territory, thus setting in stone the fact that the Taiwanese government makes no claim to PRC territory.

You may interpret the Taiwanese constitution however you please; since you aren't the Taiwanese judiciary nor legislative yuan, your interpretation is meaningless in terms of answering the question of whether Taiwan makes claims to PRC territory.
by PeterisP | 2026-03-13 13:59:58+00:00
The root cause of identity theft in USA and some other places is the lack of "proper" national identity and the associated use of various personal "secrets" (not that secret) for identity verification because there are no good easy other ways.

Businesses in Scandinavia and many other countries would not treat someone knowing your personal information as any evidence of identity (because it's not); having all that information is not sufficient to impersonate you there - identity theft does happen but it would require stealing or forging physical documents or actual credentials to things like bank accounts; knowing all of what your mother or spouse would know is not enough to e.g. get credit or get valuable goods in your name.
by avgDev | 2026-03-13 14:01:09+00:00
As a parent, most parents are trash. I don't know why, maybe it's capitalism, laziness, low iq, poor education, poor role models, trying to make kids happy and allowing whatever they want? Idk.

The amount of terrible parenting I have witnessed in 5 years of my child's life....is...terrifying. I could write a book about.

One small story, we attend a kids party, the kids are 4 year old. This lady comes with a child, the child misbehaves terribly, I have to tell him not to do things because he is hurting other kids. The mother makes a statement, "I love these parties my kid can play and I can have pizza and hang out for 2 hours without having to watch him". You can't make this up.

The moral of the story is, that if AI will keep kids occupied many parents will allow it. They don't think, "will this have a negative impact on my child"?
by quietfireai | 2026-03-13 14:01:29+00:00
I spent three years building this on consumer hardware because I needed
to run AI agents against real client data and couldn't find anything that
actually enforced boundaries at the action level.

Every agent starts at QUARANTINE. Five trust tiers: QUARANTINE → PROBATION
→ RESIDENT → CITIZEN → AGENT. Promotion is sequential and requires a human
to authorize each step. Demotion is instant. An agent cannot change its own
trust tier.

Every action runs through an 8-step governance pipeline. Every decision is
written to a SHA-256 hash-chained audit trail. One API call kills any agent
instantly — suspended until a human reinstates it.

746 tests passing. 51 SOC 2 controls documented. HIPAA, HITRUST, CJIS,
GDPR, PCI DSS, ABA Model Rules all mapped to source files and passing tests.

Apache 2.0. Runs on a Raspberry Pi or a cloud VM. No subscription. No data
leaves your hardware.

Live demo on HuggingFace — actual governance decisions, not a simulation:
https://huggingface.co/spaces/QuietFireAI/TelsonBase
by strken | 2026-03-13 14:01:31+00:00
Well, he could have done what Pasteur or Koch did and become a pivotal figure in inventing germ theory.

He could also have just lived out his life in obscurity and made things a little better in his hospital, doing what he could and quietly regretting that he couldn't change everyone's mind, until the emergence of germ theory.

Instead, he got beaten to death by asylum guards after annoying and alienating everyone around him. That seems like a very obvious bad ending to me.

I can't sketch out an approach to make the entire global population to listen to you. I can, however, warn you that being a gigantic douchebag to all your colleagues will not make them take your proposals seriously.
by coldpie | 2026-03-13 14:01:33+00:00
> It's a shame Wayland dropped this.

It... really isn't. Like you said, remote X was barely usable even over an entirely local network. Most applications these days are also not designed for it, using loads of bitmap graphics instead of efficient, low-level primitives. So you end up being just one tiny step away from simply streaming a video of your windows. We have better tools for doing things remotely these days, there's a reason approximately no one has used remote X after the mid-90s. It's a neat party trick, but I don't blame the Wayland authors for not wanting to support it.
by Dagger2 | 2026-03-13 14:02:11+00:00
It does exist though. The OS part is 464xlat and the router part is NAT64. You can try the second part out by setting your DNS server to one of the ones listed on https://nat64.net/, which will work with hostnames. To get IP literals to work you need 464xlat, which is currently a bit annoying to set up on Linux.

(Note that using the servers provided by nat64.net is equivalent to using an open proxy, so you probably don't want it for general-purpose use. You would probably want either your ISP to run the NAT64 (equivalent to CGNAT), or to run it on your own router (equivalent to NAT).)

The standard prefix for NAT64 is 64:ff9b::/96, although you can pick any unused prefix for it. ::ffff:0:0/96 is the prefix for a completely different compatibility mechanism that's specifically just for allowing an application to talk to the kernel's v4 stack over AF_INET6 sockets (as you figured out). It was a confusing choice of prefix to use to describe NAT64.
by vova_hn2 | 2026-03-13 14:02:41+00:00
My point is that I don't see any scenario in which sending a ton of input tokens (the whole past conversation) and expecting output that literally does nothing is absolutely pointless.

Like, sure, if the model were "smarter" it would probably generate something like "Okay, I won't do it.". What is the value of the response "Okay, I won't do it."? Why did you just waisted time and compute to generate it?

> Do you never have a second thought after looking at your output, or realize you forgot something you wanted to include? Could it be that they saw "one new function", thought "boy, there should really be two... what happened?" and changed their mind?

Sure, all of those are totally valid. And in each of this cases it would be better to just don't make the request at all or make the request with the correction.

> like calling your intern

LLM is not human. It can't act on it's own without you triggering it to act. Unlike the intern in your example who will be wasting time and getting frustrated if they don't receive a response from you. With model you can just abandon this "conversation" (which is really just a growing context that you send again and again with every request) forever or until you are ready to continue it. There is no situation when just adding "no" to the conversation is useful.
by ryanmcbride | 2026-03-13 14:02:52+00:00
I'm more than happy to be a test case. I'm pushing 40 but I will do every single thing in my power to give false information to the surveillance machine.

If I get arrested for lying about my age, when I'm of age, then they could probably get me on a whim already anyway. No point in trying to fall in line.
by embedding-shape | 2026-03-13 14:03:08+00:00
> collected from recursive DNS servers around the world

Yes, of course, because those DNS servers are literally receiving the queries, eg "receiving the data".

Again, there is nothing "leaking" here, that's like saying you leak what HTTP path you're requesting to a server, when you're sending a HTTP request to that server. Of course, that's how the protocol works!
by naftalibeder | 2026-03-13 14:03:10+00:00
I got a cracked copy of 3ds Max at a LAN party (back when it was "Discreet 3dsmax"), and immediately dragged dozens of cubes, spheres, and cones into the scene.

Then I closed it for a year. Opened it up again one day, followed a box-modeling tutorial (from the documentation PDF linked in the Help menu!), and I was hooked. Spline modeling, rigging, walk cycles, texturing, lighting experiments, every spare minute for the rest of high school.

I still remember the whole-body panic of accidentally turning on "adaptive degradation", which replaced all meshes with their bounding cubes when rotating the viewport camera, and thinking I had broken my video card.
by NegativeK | 2026-03-13 14:03:32+00:00
Abortion prosecution or societal ostracization.

Streamer doxing.

Literally just being trans.

HIV fear mongering.

Illegal fuckery with your insurance rates.

Employment discrimination.

Stalking.

Racial discrimination.

Can you imagine trying to fully trust a mental health professional today? A patient can't see a therapist's notes, but they sure as hell can be breached.

There is zero LEGITIMATE use for your breached health data.
by EGreg | 2026-03-13 14:03:45+00:00
I love how this paper describes what actually happens and what the current tradeoffs are.

That having been said, many LLMs are being run on SIMD GPUs, in warps, basically they are just doing a lot of vector multiplications, activation functions and kv self attention (the expendive step).

The issue is we want the LLMs to be one-way through the layers, whereas turing-complete programming languages support loops and no well-defined stopping time. You can stick a simple computer into an LLM, but it won’t be able to do long loops.

However, for these specific workloads, the need to attend only to the latest state is indeed a huge optimization! Gone is the need for n^2 complexity that dominates the cost, now it is (log n)^2 attention which is far smaller.
by ghoulishly | 2026-03-13 14:03:48+00:00
I actually gave a de-gendered draft of the essay to some friends a few days ago and heard that it landed with a thud — the essay is largely written about myself, in the third person, retrospectively, so removing the pronoun made the autobiographical thread harder to follow. I switched it to "he" to make that clearer.

I think if I used "she" it would've made the "That kid was me" transition harder — it would either involve some gymnastics to make it make sense or it would introduce a reading I didn't intend.
by lesostep | 2026-03-13 14:04:06+00:00
"Reject all" doesn't have to be cookie, the answer could go to the browser storage.

Basically it just exists in your browser, telling it "the user didn't agree to cookies, so don't send this data and don't render those blocks". The only thing that web server knows is that requests come from someone who didn't send any cookies.

I believe it's a very common implementation.
by mr_Fatalyst | 2026-03-13 14:04:37+00:00
Just pip install oxyde, that's it. The Rust core (oxyde-core) ships as pre-built wheels for Linux, macOS, and Windows, so no Rust toolchain needed. Python-side dependencies are just pydantic, msgpack, and typer for the CLI. Database drivers are bundled in the Rust core (uses sqlx under the hood), so you don't need to install asyncpg/aiosqlite/etc separately either.
by einr | 2026-03-13 14:04:40+00:00
The original phrasing from the attacker, from the website that put the data up for download/sale, was ”documents (for electronic signing)” which implies that they’re documents that would be signed in said system. I would take all of this with a large helping of salt though. CGI claims it’s not real production data anyway; maybe it is and maybe it’s not.

The best case scenario is in line with what CGI claims: these are lorem ipsum fake docs from an old git repo for a test instance of the system.
by singron | 2026-03-13 14:05:11+00:00
In the CA bill, "User" means child. It's pretty clear that non-human users aren't covered and don't have to participate. E.g. the API can return N/A or any other value for non-humans. If there is a way to make the API applicable only to human children users, then it doesn't even need to be callable for other entities. E.g. on android, each app gets its own uid, so the unix user doesn't correspond to a child, so the API will instead (probably) be associated with another entity (e.g. their Google account, an android profile, or an android (non-unix) user)
by PurpleRamen | 2026-03-13 14:05:17+00:00
> there is nothing textual about the UIs being shown here.

Well, except:

> a 1:1 representation of the concept within character cells.

TUI is build from text, and living within its constraints and what it's engine (usually the terminal) allows. GUI is build from graphics, and has basically a pixel perfect control of its own. This is a very notable difference, especially at the time when these terms were coined.

> TUIs are generally built for effectiveness and power

No, this is a result of different architectures and their constraints.

> But once you start adding mouse clickable tabs, buttons, checkboxes etc. you

TUI and mouse are predating the GUI (more or less). We had them already 40-50 years ago at the dawn of interfaces. We are now just moving back to them for practical reasons.
by grvdrm | 2026-03-13 14:05:27+00:00
Fascinating to hear. I am trying to cut alcohol - still not entirely successful.

But I've been able to cut for months at a time. Whenever the cut happens, I feel my brain sort of "return" roughly a week or two in.

I'm not sure how to explain it other than something like fog clearing. Obviously makes some intuitive sense when you read it.

However, as someone that has consumed alcohol somewhat regularly (sometimes more, sometimes less) since college, it's bizarre to think about that consumption in retrospect. In effect, years and years of "fog" - it makes me wonder how different or similar life would have been without that fog.

Can't change the past now, but a data point and strong signal for the future.
by Aurornis | 2026-03-13 14:06:08+00:00
The salient point of my comment is singular paper

The rational mind should not be seeing singular papers and assuming they’re correct. There are a lot of incentives for researchers to publish amazing results that benefit their career. They find ways to publish these through small sample sizes, p-hacking, or worse like faking results.

The amazing results usually disappear in larger studies by more rigorous researchers. There are so many papers showing amazing things in a handful of mice in a lab or even human volunteers that do not appear again in properly powered studies.
by Schmerika | 2026-03-13 14:06:37+00:00
> there is just a ton of people who are natural born minions

Yeah I think that's kind of it.

I'd prefer to believe that it's school/culture/religion making people like that... And those are definitely factors.

However, I personally think that it's probably just more effective, evolutionarily speaking, to not have too many independent thinkers in a tribe.

The 'funny' part is that we call the people who are naturally resistant to following the herd "neurodivergent" - and then try to medicate them into conformity. As if the herd is doing such a great job right now.
by bombcar | 2026-03-13 14:06:41+00:00
Life with air conditioning is nice, but life without it wasn't as bad as it is now when the a/c fails.

Cars had vents that would blow outside air right were it was needed without using the heater/fan system, or wing windows that you could direct "relatively quiet" air at you.

Now if your car's a/c fails, you get to roll the window down and that's about it.
by otras | 2026-03-13 14:07:05+00:00
As a mentor, I like to set explicit expectations for how much time someone should spend digging before asking for help, and I encourage others to do the same.

For an intern or new grad whose information gathering skills likely have gaps they don't even know about, I'll tell them to come check with me if they're completely blocked and haven't made progress for an hour, as it's frequently a small pointer or hint from me that can get them back on track. As they get more more knowledge about the systems and experience unblocking themselves, this grows to half a day, a day, and more from there.

The same applies even for experienced engineers who are new to the team, though the timeboxes grow much faster. There will always be little things to learn, and there's no point burning a day of chasing threads if it's some quirk in the system you just happen to not be aware of.
by photobombastic | 2026-03-13 14:07:08+00:00
Thank you so much! Huge bug. Action steps (uses:) were silently skipped, which meant any workflow relying on setup actions would just fail.

This should be fixed in v0.1.3. Action steps now pause instead of auto-skipping, and PipeStep offers to run a local equivalent when one exists. It also parses with: inputs, so setup-node with node-version: 18 actually installs Node 18 in the container. Currently supported: checkout, setup-node, setup-python, setup-go, setup-java, cache, upload/download-artifact. Anything unrecognized gives you a clear pause to run commands manually.

Would genuinely appreciate it if you gave it another shot (pip install --upgrade pipestep) and if you hit anything else, issues on GitHub would be incredibly helpful. The "why did you think I wrote them?" line was exactly the kind of thing I want more of.
by vodkapump | 2026-03-13 14:07:18+00:00
There's paid services that pull it for you, most charging around 100nok (10eur) per lookup.[1]

Media is also allowed to pull "top" lists like the 100 people with the most income in a city, 100 people with the most wealth in a city, etc.

[1] https://sjekkskatt.no/
by ericzundel | 2026-03-13 14:07:28+00:00
Of course, it's a serious issue, but I love the sense of humor here, buried deep down:

Full legal indemnification*
Through our offshore subsidiary in a jurisdiction that doesn't recognize software copyright

...

The MalusCorp Guarantee™
If any of our liberated code is found to infringe on the original license, we'll provide a full refund and relocate our corporate headquarters to international waters.

*This has never happened because it legally cannot happen. Trust us.