MurphyA/hacker-news huggingface dataset:
by kelnos | 2026-03-05 21:12:54+00:00
You're missing the point. Just because it's possible for that tracking to happen, it doesn't mean it has to happen. We could have strong privacy laws. Mobile carriers (and anyone else) could be required to not store this data at all, or at the very least delete it after a short time. We could have mandated surprise audits to ensure this actually happens. We could have significant, company-ending fines for non-compliance.

We don't, and that sucks. But it's not a binary choice between "you can carry your phone everywhere" or "you can avoid having your movements stored in a database indefinitely". There are other options that we as a society could choose, if we could get our acts together.

Sure, the opsec ideal is that you don't have to trust other parties in the first place. But honestly, for the vast majority of people, that sort of thing doesn't matter, and having strong, readily-enforced privacy laws would be more than sufficient to keep people safe and secure.
by surround | 2026-03-05 21:13:19+00:00
> What You Can Do To Protect Yourself

> 1. Disable your mobile advertising ID

> 2. Review apps you’ve granted location permissions to.

I'm surprised they missed the most important step, which is blocking the advertisers from collecting your data in the first place. This is easily done in the browser with uBlock Origin and system-wide with DNS filtering.
by 46493168 | 2026-03-05 21:13:28+00:00
https://www.psychologytoday.com/us/blog/addiction-outlook/20...

The delivery system modulates speed and magnitude of the hit, which affects how rapidly and how strongly dependence forms, but every form produces dependence with sustained use.

There isn’t anyone who is going to say “nicotine in purer forms is okay actually” because there isn’t anyone who is tasked with answering such a broad question.

Also, be careful not to shift the frame. Spivak ranked nicotine with other drugs. You changed the framing to “all are highly addictive.” These are different assertions, and both can be true at the same time. That’s why it’s more important and more interesting to discuss it in terms of addiction subtypes
Show HN: GitHub-powered instant developer portfolios
by plsft | 2026-03-05 21:15:07+00:00
I built remotedevelopers.com because I never want to write a resume again.

Connect your GitHub → it pulls your repos, skills, activity → generates a portfolio that's always up-to-date.

No resume. No cover letter. Just code you've shipped. You can add articles, posts, videos and other content into your timeline for potential employers to get a complete picture of your work.

It's AEO/SEO-ready, generates llm.txt files for each profile, and has an MCP for AI recruiters we all know are really making decisions.

I would love feedback.
by kelnos | 2026-03-05 21:15:08+00:00
You're confusing a technical limitation with a policy decision. Just because the cell tower (as currently designed) needs to know your fairly-precise location at all times, it doesn't mean that location needs to be stored indefinitely or used against you.

We could live in a world where we have strictly-enforced privacy laws. We don't, and that sucks, and if anything, we're moving further away from that state of affairs very day. But we could.
by Analemma_ | 2026-03-05 21:15:11+00:00
Yeah, now that this door is cracked open, it's now possible to decapitate SpaceX, which is at least as natsec-critical as Anthropic. The owner is a drug addict, has business interests in China, and is a Russian sympathizer (recall all the restrictions on Ukraine using Starlink), which all together is way stronger evidence for SCR designation than anything Anthropic has done. They're quickly going to come to regret opening this can of worms, but what else is new.
by antics | 2026-03-05 21:15:39+00:00
I think responses like this are a good reminder that technology is most leveraged when it's useful to both people who are technical and nontechnical. For the first time in the the 70+ year history of software, the cost profile of "integration software" is approaching cents per app. A child can magic up an NES emulator from the ether; semi- and non-technical users can instantly create something personalized to their use, which is useful to their specific team and their specific company.

I'm not going to be the one to shut them out of this change. We will work to help both of these audiences.
by lelanthran | 2026-03-05 21:16:13+00:00
> How do you know that the author is capable of communicating fluently in english?

Irrelevant; they can do the best they can and I'll do the best I can.

If the best they can do is have it ghost-written, then the best that I will do is not read it.

> What if it were the case the the author was so excited about sharing a project but didn't know how to properly explained it and so took the extra effort to learn how to get a piece of software to explain it for them?

That's not extra effort, that's less effort.

> Would that then satisfy your requirement that the human behind the project has done enough work to earn your interest?

Look, if someone isn't going to bother to write something, why would others bother to read it?
by Philip-J-Fry | 2026-03-05 21:17:21+00:00
I find it quite funny how this blog post has a big "Ask ChatGPT" box at the bottom. So you might think you could ask a question about the contents of the blog post, so you type the text "summarise this blog post". And it opens a new chat window with the link to the blog post followed by "summarise this blog post". Only to be told "I can't access external URLs directly, but if you can paste the relevant text or describe the content you're interested in from the page, I can help you summarize it. Feel free to share!"

That's hilarious. Does OpenAI even know this doesn't work?
by csh0 | 2026-03-05 21:17:33+00:00
It’s all part of the game it seems.

The US bugged the “toilet partitions” of the Russian embassy in D.C. during its construction[0] and the FBI built a tunnel under it for espionage purposes in the 80s[1].

[0] https://www.cia.gov/readingroom/document/CIA-RDP90-00965R000...

[1] https://web.archive.org/web/20100514112651/http://articles.o...
by LUmBULtERA | 2026-03-05 21:17:35+00:00
>The vast majority of websites you visit don’t have usable APIs and very poor discovery of the those APIs.

I think an important thing here is that a lot of websites/platforms don't want AIs to have direct API access, because they are afraid that AIs would take the customer "away" from the website/platform, making the consumer a customer of the AI rather than a customer of the website/platform. Therefore for AIs to be able to do what customers want them to do, they need their browsing to look just like the customer's browsing/browser.
by antics | 2026-03-05 21:17:39+00:00
Our approach, which is behind a feature flag right now, is to allow users to attach "assets" to jj change IDs (these are sort of like stable git commit SHAs). This is how we will power inline comments, and it's how we'll power Notion-style SQLite-based databases. We already have, checked in, an implementation of IVM built on top of SQLite, specifically for this purpose. I don't see how we could be a Notion competitor without them.
by ok_dad | 2026-03-05 21:18:36+00:00
The legal definition of supply chain risk:

> “Supply chain risk” means the risk that an adversary may sabotage, maliciously introduce unwanted function, or otherwise subvert the design, integrity, manufacturing, production, distribution, installation, operation, or maintenance of a covered system so as to surveil, deny, disrupt, or otherwise degrade the function, use, or operation of such system (see 10 U.S.C. 3252).

Naming a US company a "supply chain risk" is basically saying "this company is an adversary of the USA", which is FUCKING INSANE.
by eszed | 2026-03-05 21:18:54+00:00
Yep. If you hear Chaucer read aloud by someone who knows the phonetics and the meaning it's instantly like 75% comprehensible. If they give you a bit (like, half a class-period) more help, you'll get to ~90% without any more effort than that. Chaucer is more or less as incomprehensible as Glaswegian - that is to say, it's a bit tricky, and you won't know all the slang, but you can get used to it pretty quickly.

What's really fun is that if you keep the dialect in your head, and try reading it out loud with your best "Chaucer accent" it feels like slipping on a pair of glasses: you immediately "get" stuff that you'd have thought was impenetrable just looking at the page.

Source: my medieval lit classes, with a teacher who was really good.
by xpe | 2026-03-05 21:19:06+00:00
> I'm just curious what the most unhinged response to this might be.

Are you asking how dangerous open-weight models are? You could start with:

Ryan Greenblatt on the AI Alignment Forum : "When is it important that open-weight models aren't released?" https://www.alignmentforum.org/posts/TeF8Az2EiWenR9APF/when-...

From the Centre for Future Generations : "Can open-weight models ever be safe?" https://cfg.eu/can-open-weight-models-ever-be-safe/

From OpenAI authors, far from neutral : "Estimating Worst-Case Frontier Risks of Open-Weight LLMs" https://arxiv.org/abs/2508.03153
by wizzwizz4 | 2026-03-05 21:19:08+00:00
GP is referring to manufacturing variance in the radio equipment, not the deliberately-inserted tracking identifiers. See, for example, doi:10.1016/j.dsp.2025.105201 and doi:10.3390/rs17152659 for relatively cheap approaches.

The solution to this is just to make it illegal to store and process the results of such analysis applied to radio signals, without consent of the data subject (GDPR jurisdictions have that already), and to enforce that law.
by shagie | 2026-03-05 21:19:26+00:00
My apologies if I didn't make that clear - my "yes" was to the question "Do you think anyone explains it to them?"

And yep, she was a very good English teacher. It was a more fun class than the other English classes I had through the years. Composition was a pain, but that the teacher was a stickler for everything it helped with my writing and communication skills today. English lit from Beowulf to Pope was a slog. Ancient was ok (mostly Ancient Greek which got into more philosophy rather than word choice because it was a translation). Modern literature was only enjoyable because of Thoreau - I think that was also where I read Waiting for Godot and Rosencrantz and Guildenstern are Dead ... the other plays weren't as memorable.

Aside on that - read The Necklace (in English) in one of those classes... I'm fairly sure that was senior year. In college I took French to finish out my foreign language requirement and the final exam was reading comprehension for La Parure in French. I knew the story and so was able to quickly skim for vocabulary rather than needing to read every page.

All in all, looking back it was good, but as with most school classes, they weren't classes that I enjoyed going to at the time.
by 1-more | 2026-03-05 21:19:31+00:00
Fun finance fact: "time on a machine that makes a precious commodity" is the first known futures contract, although in _Debt_ David Graeber posits that futures contracts are the original form of currency. The concrete example I'm thinking of is https://en.wikipedia.org/wiki/Thales_of_Miletus#Olive_presse...
by 0xbadcafebee | 2026-03-05 21:19:45+00:00
> or have zero insurances that the model doesn't get discontinued within weeks

Why are you using the same model after a month? Every month a better model comes out. They are all accessible via the same API. You can pay per-token. This is the first time in, like, all of technology history, that a useful paid service is so interoperable between providers that switching is as easy as changing a URL.
by WorldMaker | 2026-03-05 21:19:46+00:00
There are US states that are very deep into multi-stream recycling with 5 or 6 different bins. (Most of them are on the West Coast.)

There's an interesting debate on single-stream versus multi-stream recycling and its perverse incentives. Multi-stream recycling is more labor efficient, so in some cases more profitable, pushing labor to the unpaid consumer so that fewer laborers are needed at the recycling plants. Multi-stream recycling is often less efficient at overall recycling. Improperly sorted items are more likely to end up in landfills when the specialized recycling plant is an entirely different company with its own delivery schedule and process, versus a single-stream company that has to sort everything anyway.

In a somewhat surprising twist, some of the most efficient recyclers are the landfill companies themselves. Landfills take up space and don't produce income on their own. Finding any things that are recyclable and resellable is sometimes big profit. Sorting work is thus incentivized as profit growth. There are cities investigating going truly "single stream" again for all trash and continuing to incentivize the landfill companies to grow their recycling sorting processes.

Not only is that itself an illustration that companies need to be incentivized to do the right thing more than people need to be incentivized to do extra labor that result in less efficient outcomes, but it is also another example of how certain corporation's propaganda pushed the narrative from corporate action to consumer action.

The original lesson plan in the 1990s designed by some smart teachers was the Three R's: Reduce, Reuse, Recycle. They were put in this order specifically because they are in order of importance. Debates on if we are doing enough our own individual parts for Recycling have already lost the battle on how much corporations are helping us to Reuse things rather than recycle them, and better yet, to Reduce the number of things we need to even consider reusing or recycling or trashing. Both reduce and reuse require more collective action. They require companies to work outside of the "single use" box. Single use is more profitable, because it sells more single use things.
by kelnos | 2026-03-05 21:19:59+00:00
I'm getting to the point where I believe representative democracy on the scale of hundreds of millions of people just doesn't work all that well. I've never been one of those "states' rights" people, but these days I am becoming convinced that the US should have a much smaller federal government, and states, counties, cities, and towns should have more autonomy in deciding their fates.

This is not an easy problem to solve. Certainly I want more things at the federal level than the authors of the constitution envisioned (currency, international diplomacy, military, etc.): some things really need to be done at the national level (like environmental regulation).

Anyway. Sure, those figures may be true for the US Congress (or not, I haven't verified), but I bet you those figures aren't even close to true for town and city councils and county government. And perhaps not even state government as well.
by AlienRobot | 2026-03-05 21:20:11+00:00
Every time I see SVG mentioned with Flash I just think it's immensely ignorant. No offense, but programmers love to think of "vectors" as SVG because it's all they know. For several years I kept hearing people say "we have HTML5 and SVG now, so we don't need Flash anymore." And with that Flash animations and games were lost forever and I'm still bitter about it.

For artists, SVG is probably the worst vector format imaginable. In fact, I'd say any project that uses SVG as backend is doomed to fail with artists. It's pretty much a red flag at this point that if "supports vector" means "support SVG" they're doing it wrong and just chose the easiest to implement vector graphics because you probably have a billion open source SVG libraries at this point instead of rolling their own proprietary vector rendering algorithm that actually improves the artists' workflow.

To answer your question, the important thing about Flash wasn't the vector rendering but the vector art authoring tools. You could make Inkscape work like Flash, but nobody has done that yet. All you need is a brush tool that automatically does union of shapes of same color and subtraction of shapes of different color so the whole layer is always "flattened" with no shapes overlapping. This is the sort of thing that made Flash exceedingly easy to use for artists. It was a vector art program that worked exactly the same way as a raster digital art program. It thought of vectors not as shapes that the program was going to render but as paint strokes on a canvas.

If you were building a vector art software today you probably would want all sorts of things that SVG doesn't provide, e.g. line art with varying thickness based on tablet pressure (although Flash didn't need this, since you could draw shapes instead of strokes). You might also want to take a look at OpenToonz' vector implementation, which has "fills" that automatically expand when you change the enclosing strokes and an indexed color palette system, and CSP's line art vectors that let you use textured raster brushes with settings like dab scattering in vector strokes.

By the way, I also believe the idea that HTML5 could replace Flash games was insanely stupid. Anyone could make a Flash game and deploy it to web browsers in one click. Do that in HTML? With Javascript? Which means you need to download all these images/audio from the Internet? You want to play it locally? CORS issues, baby! Now you need to turn this mess into an electron app or use the most disgusting build step imaginable to turn whole jpegs into a base64 strings so you can create a single HTML file that is several megabytes. How did the entire world convince themselves that this was an actual replacement of Flash's functionality is honestly beyond me. For Flash websites, sure, you have <video> now, but for everything else that Flash provided there has never been a proper replacement (at least until Godot/Unity started WASM'ing, but that was a long time after).
by Chance-Device | 2026-03-05 21:20:49+00:00
Anthropic should never have gotten into bed with the military or intelligence services to begin with. They wanted to make a deal with the devil and dictate the terms, that is the problem. If they had stayed out this wouldn’t be happening. Yes, someone else will probably step in and do all the evil you have just refused to do, but that isn’t a reason to instead decide to do it personally.

Note that I give them a lot of credit for trying to stop and to have their own red lines about the use of their technology, and to stick to those red lines to the end.
by kobi3290 | 2026-03-05 21:21:06+00:00
I was recently nominated for the Cybersecurity Excellence Awards in the "CISO of the Year" category.

Over the past years I've been working on security in the digital asset and crypto infrastructure space, focusing on building resilient systems and improving security practices in a fast-moving industry.

If the community finds this work valuable, I would appreciate the support.

Thanks to everyone working to make the internet more secure.
by shimman | 2026-03-05 21:21:40+00:00
On the contrary, hopefully this gives the next democratic ammunition to take down big tech. Might as well classify Meta, Microsoft, Amazon, and Apple as supply-chain risks too with this logic.

Too bad that Congress has abdicated their responsibility to the executive branch, no reason why Congress couldn't have more control over the Pentagon. The President only has legal authority to command forces, not control an entire institution; but this would require Congress actually doing their job and not justifying more corporate welfare forever.
by bombcar | 2026-03-05 21:21:48+00:00
Even just seeing people cleaning up is enough to begin to change perceptions, because it turns it from an impersonal action to a personal one - "I'm throwing this wrapper on the ground" vs "I'm throwing this wrapper on the ground for old Joe to pick up."

We can all be the change we want to see, even if it's just a minor effort.

Around here major cleanups are done by some of the local "community groups" but they also have a department of parks that does some additional to named trails.
by Alifatisk | 2026-03-05 21:21:50+00:00
So let me get this straight, OpenAi previously had an issue with LOTS of different models snd versions being available. Then they solved this by introducing GPT-5 which was more like a router that put all these models under the hood so you only had to prompt to GPT-5, and it would route to the best suitable model. This worked great I assume and made the ui for the user comprehensible. But now, they are starting to introduce more of different models again?

We got:

- GPT-5.1

- GPT-5.2 Thinking

- GPT-5.3 (codex)

- GPT-5.3 Instant

- GPT-5.4 Thinking

- GPT-5.4 Pro

Who’s to blame for this ridiculous path they are taking? I’m so glad I am not a Chat user, because this adds so much unnecessary cognitive load.

The good news here is the support for 1M context window, finally it has caught up to Gemini.
by ViewTrick1002 | 2026-03-05 21:21:55+00:00
You mean middle eastern labor and design that doesn’t fly with western regulations?

Sounds applicable!

Let’s first acknowledge that KHNP pulled out of all western projects except the Czech one after their settlement with Westinghouse. They don’t exist as an option.

Then let’s look at the Czech subsidies. They aren’t materially different compared to any other modern western nuclear construction.

They’ve shaved a few billion from the headline number but the project is still pure cost plus putting all construction and financial risk on the governments tab.
by hrmtst93837 | 2026-03-05 21:22:00+00:00
I think autofill-based credential harvesting is harder than it sounds because browsers and password managers treat saved credentials as a separate trust boundary, and every vendor implements different heuristics. The tricky part is getting autofill to fire without a real user gesture and then exfiltrating values, since many browsers require exact form attributes or a user activation and several managers ignore synthetic events.

If an attacker wanted passwords en masse they could inject fake login forms and try to simulate focus and typing, but that chain is brittle across browsers, easy to detect and far lower yield than stealing session tokens or planting persistent XSS. Defenders should assume autofill will be targeted and raise the bar with HttpOnly cookies, SameSite=strict where practical, multifactor auth, strict Content Security Policy plus Subresource Integrity, and client side detection that reports unexpected DOM mutations.