MurphyA/hacker-news huggingface dataset:
by MrBuddyCasino | 2026-03-09 10:40:08+00:00
> Take it to the final form. It's game theory. The US is promoting system that enables a Nash equilibrium. By playing by the US' rules you empower yourself and you empower those around you. And the US takes a service fee for operating the market.

This is what an empire, that is competently run, should do. The US is not an empire, and it is not competently run. It has no attributes in common with empires of history. It does not occupy foreign lands, it does not extract taxes, it does not (directly) control foreign governments. If anything, in this case, the US is under the control of a foreign government.
by mnky9800n | 2026-03-09 10:40:12+00:00
rainy-city.com! rainy-city.com is an ambient rain sound generator that is also a kind of city simulation. it is my recurse center project. it's suppose to be more of an ambient experience than a city simulator. it's a total work in progress, I've implemented buildings but haven't made a PR yet because they don't really work the way I want them to, and so I had to rebuild the tiling for them. So right now, there is no city. lol. just rain. but eventually it will have all this stuff you would expect. there are whales.

https://rainy-city.com/
by ryan14975 | 2026-03-09 10:40:35+00:00
Eazip (https://eazip.io) — ZIP remote files in one API call.

I built a service that lets developers bundle remote files into a ZIP with a single POST request. You send a list of URLs, we fetch, package, and return a signed download link.

The problem: creating ZIPs from remote files (S3, R2, CDN) usually means downloading to a server, zipping locally, managing temp storage, and cleaning up. It's surprisingly painful at scale — especially with large files or thousands of items.

Eazip handles all of that. ZIP64 support for files over 4GB, up to 5,000 files per job, zero egress fees on downloads, and no infrastructure to manage.

Use cases so far: e-commerce photo bundles, document delivery (invoices/contracts), creative asset distribution, and backup/export tooling.

Free tier available, no credit card required. Would love feedback from the HN community.
by justinclift | 2026-03-09 10:40:50+00:00
> For all they know, your legitimate charges were the fraudulent charges that triggered the cancellation.

Literally years of paying the bills. ;)

> I cannot fathom why you keep using the term "expired" when that is a very different scenario to "cancelled by the issuing bank".

That seems like a you problem. No worries, hope your day is going ok.
by quibono | 2026-03-09 10:41:05+00:00
I used to feel apprehensive about emailing people until one day I just decided to power through and do it. I agree with the post, it's like you unlock an additional layer of communications. Everyone is suddenly contactable! I would also say that most poeple are really nice 1-1, I cannot remember a nasty reply (worst that happened to me was just my email being left ignored).
by njoyablpnting | 2026-03-09 10:41:22+00:00
Clearance jobs will be some of the highest targets for automation. For one, the US government has already shown a willingness to work with AI companies in the most sensitive fields. Also, sandboxing is getting to the point where if you know what you're doing it's no more risky than relying on another human. The obvious benefit of not needing to worry about an LLM being a Chinese spy is just too good to not optimize.
by dathinab | 2026-03-09 10:41:32+00:00
If "usage imply consent" then couldn't you just write unpleasant TOS updates so that they end up in the spam filter and then argue the user complied.

sending email + user using does not in any sane way guarantee that the user did even know about it

and if usage implies consent how do you even delete you account if you disagree with contract changes, as that requires logging in which can easily be maliciously seen as using the application as any landing page contains app functionality
by seriocomic | 2026-03-09 10:42:42+00:00
Working on an all in one "platform" that runs multiple different checks on a website/domain. Got sick of having to run different checks in different places to ensure everything is at it should be - SSL, HTML, SEO, redirects etc.

Extended the checking to monitoring and change detection/alerting. You can try for free at https://www.augsentric.com - built for my own needs, but made it for others if there's interest... feedback welcome
by vintagedave | 2026-03-09 10:42:47+00:00
That is fascinating. I never never seen GCC IR, only LLVM IR, which to me is more assembly-like in a generic no-specific-machine kind of way.

I (briefly) searched for more info but this SO answer[0] implies they're quite similar. I'd be interested in understanding more. I feel like much of computer science has normalised to specific approaches that 'won' in the industry, where Lisp is an example of something interesting that largely didn't win -- with notable exceptions like HN itself! [1] :) And so hearing about uses of things like Lisp concepts in areas we might not know they're being used would be wonderful HN content.

[0] https://stackoverflow.com/questions/40799696/how-is-gcc-ir-d...

[1] https://news.ycombinator.com/item?id=43089415
by nickd2001 | 2026-03-09 10:42:47+00:00
Follow the above advice as its great :) People need each other. Volunteering, apart from being worthwhile for its own sake, is one of the best ways to meet people and put your own life in perspective. There's a ton of stuff in the world that needs doing, that capitalism leaves un-done as there's no money to be made in it. It can either be directly helping people such as providing food, resources, support for homeless, supporting people with disabilities to participate in activities, generally helping others in some sort of need. Or things like tree-planting which helps everyone. Some of, either the people you help, or fellow volunteers, or both, will become great companions. Can also be a great way to find another partner ;) Some of the most happiest most stable couples my wife and I know, met volunteering - its a good foundation for a relationship, that both people sought to go out and help others even before they met each other.
by eagleman | 2026-03-09 10:43:20+00:00
Hi HN,

I built commitgen-cc, a CLI that generates Conventional Commit messages directly from your git diff. I know there are lots of commit message generators out there, but this one runs fully locally with Ollama, so your code never leaves your machine. Cloud models are optional.

Quick workflow:

-> git add .

-> aic

→ e.g.:

- feat(api): add pagination support to users endpoint

I’d love feedback on the workflow, missing features, or anything you’d like to see added to make this more useful in real projects.
by bArray | 2026-03-09 10:43:27+00:00
It was either PCBWay or JLCPCB, but they had a "review window" where it was possible to make changes or cancel an order. They recently switched this to be an automated review, so there was no opportunity for corrections. It could be that the card companies blacklisted them after people started cancelling orders with their credit cards, because their UI stopped supporting the feature.
by Havoc | 2026-03-09 10:44:12+00:00
Reminds me of the Sony bash.org joke

> <DmncAtrny> I will write on a huge cement block "BY ACCEPTING THIS BRICK THROUGH YOUR WINDOW, YOU ACCEPT IT AS IS AND AGREE TO MY DISCLAIMER OF ALL WARRANTIES, EXPRESS OR IMPLIED, AS WELL AS DISCLAIMERS OF ALL LIABILITY, DIRECT, INDIRECT, CONSEQUENTIAL OR INCIDENTAL, THAT MAY ARISE FROM THE INSTALLATION OF THIS BRICK INTO YOUR BUILDING."

<DmncAtrny> And then hurl it through the window of a Sony officer

<DmncAtrny> and run like hell
by kwakubiney | 2026-03-09 10:44:20+00:00
I’m working on a small deployment tool called push2start[1].
The goal is to make Docker Compose apps easier to deploy from a laptop to a remote server without a lot of custom scripts.
Right now, I’m trying to keep Compose as the source of truth and avoid creating another mini orchestrator.
You point it at a compose file, it transfers only the images that need to come from local, then deploys and gives status, logs, and restart controls from one CLI.

[1]https://github.com/kwakubiney/push2start
by flohofwoe | 2026-03-09 10:44:45+00:00
...'mostly works' describes pretty much every debugging experience outside Visual Studio. But I really can't complain, I've set up 'F5-debugging' in VSCode, pressing F5 starts a local web server, starts Chrome with the debuggee, and starts a remote debug session in VSCode and stops at the first breakpoint (and interestingly all this happens 'immediately', while debugging a native Cocoa macOS app via LLDB easily takes 5 to 10 seconds until the first breakpoint is reached).

TL;DR: It works just fine (early versions of the DWARF extension had problems catching 'early breakpoints' but that had been fixed towards the end of 2024.
by milind-soni | 2026-03-09 10:44:54+00:00
jsonmaps.dev its a way to create maps and create storytelling maps that you can embed in your react application, I was quite tired of how AI wasn't able to generate reliable maps in my applications.Every map library has its own imperative API and the AI output was always broken, hallucinated, or unmaintainable with so many different formats that you can put on the map.

The story map part came out of wanting to build Mapbox-style scrollytelling easily. You define chapters with a camera view and content, and it handles the scroll-driven camera interpolation.

Stack: MapLibre under the hood, React, published as an npm package.

https://jsonmaps.dev/
by stinkbeetle | 2026-03-09 10:45:07+00:00
But some terms were claimed to be reasonable. If power being disproportionate is sufficient to void terms, why not those terms too?

> The government is not there just to enforce laws, but also to legislate such that the scales are balanced. Otherwise we may as well live in a dictatorship.

Should the state just prohibit all agreements between two parties unless the state's adjudicator decides they are exactly equal in "power" and permits it? Sounds horrific, like a dictatorship. The government is not my guardian and does not do my thinking for me. I get that many people are subservient and would much prefer that, but that's no good either. There's an enormous middle ground between anarchy and "the state intervenes to allegedly 'balance the scales' in every aspect of peoples' private lives".
by hiyer | 2026-03-09 10:45:41+00:00
I loved their dry seasoning [1]. Bought some when I visited the bay area several years back and used to use it on everything from toasts to pasta. Sadly, haven't visited US since to be able to pick up some more :-(

1. https://www.amazon.com/Pepper-Plant-Seasoning-11-oz/dp/B01LY...
by tsimionescu | 2026-03-09 10:46:06+00:00
> What does a company do when they want to increase rates, or change their products? They send out a notification that starting on a certain date, the prices will go up. I don't think anyone objects to that.

Of course you do. I have a fixed contract with my mobile carrier - if they want to change rates, tough luck. Once the current contract expires, they can indeed notify me that the new contract will auto-renew with a new rate, and I can either accept it or choose a new carrier. But they very much can't change prices, or alter services rendered, while the current contract is in force.
by quietsegfault | 2026-03-09 10:46:16+00:00
Right, because on Mac (and windows) you’re running a VM rather than just setting up kernel namespaces. How cpu and network intensive are these pets? Or is it more of a principle thing, which I totally understand?

I prefer containerization because it gives me a repeatable environment that I know works, where on my system things can change as the os updates and applications evolve.

But I can understand the benefit of sandboxing for sure! Thank you.
by Lothbrok | 2026-03-09 10:46:51+00:00
The interesting thing in that thread is how many people have landed on isolation as a workaround while still lacking a real control plane on top of it. Containers reduce blast radius, but they don’t answer approvals, policy, or auditability. That’s the gap I keep seeing in these setups. I've found a software, called Daedalab, that instead of sandboxing AI puts deterministic control on agents actions.
by latexr | 2026-03-09 10:47:11+00:00
This is the equivalent of “only 90’s kids will get this”. What’s the point of such a comment? It’s basically engagement bait. Don’t shame others for not knowing a reference you like, share it with them instead.

https://xkcd.com/1053/ (The alt text is particularly relevant)

Though I disagree it would be tragic to lose this reference. It’s not a good movie. It’s basically “say thing, immediately interpret it literally”. Throw in some stereotypes from time to time. Rinse and repeat. Boring and predictable.
Show HN: Unpinched – open-source PinchTab and CDP bridge detector
by Siri_D | 2026-03-09 10:47:54+00:00
We published a free CLI tool after writing about PinchTab — a browser hijacking
technique that abuses Chrome DevTools Protocol to give attackers (or compromised
AI agents) silent access to live browser sessions. No malware signature. No process
injection. Most EDRs don't see it at all.

Unpinched is a point-in-time scanner — think nmap for PinchTab presence. Single Go
binary, no install required, runs in ~3 seconds.

It checks four things:
- Local ports for a PinchTab HTTP API server (with signature verification)
- Running processes matching known PinchTab binary names
- Unauthenticated CDP exposure on localhost:9222
- Known filesystem artifact paths across macOS, Linux, Windows

Also ships as a GitHub Action so you can gate deploys on a clean scan result.

GitHub: https://github.com/Helixar-AI/Unpinched

The underlying research on why CDP-based attacks evade conventional security stacks
is here if you're curious:
https://helixar.ai/press/pinchtab-stealth-browser-attacks-yo...

Happy to answer questions on the detection logic or the threat model.
by antonymoose | 2026-03-09 10:47:58+00:00
I’ve never really been a fan of it as a direct condiment so I’m inclined to agree.

I think the first time I tried it was about 15 years ago. Out to lunch at a bahn mi spot with coworkers and all the guys were drenching their sandwiches in the stuff. I think in that context it’s overpowering and awful and ruins a good sandwich. Preferentially, I love the Three Mountain Yellow Sriracha as a condiment for a lettuce wrap or a sandwich.

Where I feel red sriracha is a staple item is making sauces and marinades. Whenever I’m making vaguely Thai peanut sauces at home for a pad Thai or a satay it’s the #2 ingredient after the peanut butter itself and often at a 1:1 ratio. Combined with allergy ingredients it mellows out the harsh flavors and makes a wonderful layered sauce.
by levleontiev | 2026-03-09 10:48:05+00:00
Working on Fairvisor — a tool for API governance and usage control.

The problem: one buggy integration, scraper, or infinite retry loop can suddenly explode your API costs or overload infrastructure before anyone notices.

Fairvisor acts as a guardrail in front of your API:

per-tenant and per-route rate limits

request budgets and soft/hard caps

anomaly alerts for sudden spikes

The edge component is open source (OpenResty / Nginx + Lua) and the SaaS part provides policy management and audit.

Still early, validating whether teams would use something like this instead of building internal scripts.

https://github.com/fairvisor/edge
by mark_round | 2026-03-09 10:48:12+00:00
Author here, thanks for posting this! Any questions, comments or "You're wrong and this is why" let me know :) I do find myself wondering about the future of Rails (and I guess the wider Ruby ecosystem) though. I'm definitely in the "you can prise it from my cold, dead hands" camp but after years of watching them both slide down developer surveys it does make me concerned.

I'm kinda attached to "odd" outsider technologies like the Amiga and BeOS (which does make me wonder if there's a common thread there) so am used to seeing old packages and documentation gradually fade away but that's clearly not something that points to a sustainable future.

There's enough of the core components still active and after 20-odd years you could just say "it's done" (as I allude to in the Wrap Up) but I do wonder how many here would start a new project on Rails or make a Ruby platform a critical part of a new start-up ?
Show HN: Yawn – Yet Another Worktree Navigator (CLI, Pipes into Fzf)
by ComeBertrand | 2026-03-09 10:48:15+00:00
Working with AI coding agents means I now juggle a lot more git worktrees than I used to. I built yawn to make that manageable: it discovers all your git projects & worktrees, lets you fuzzy-pick one (fzf, rofi, ...), and opens it. Worktree creation handles branch resolution, copies over untracked config files like .env, and runs setup commands automatically.

There's no AI integration in the tool itself, that's intentional. Project switching and worktree management are just plumbing, and I wanted something that does that well without opinions about what you do inside them.
by dryarzeg | 2026-03-09 10:49:02+00:00
For me, the main issue with all kinds of recent "advancements" in LLMs is their lack in ability to generalize and extrapolate existing knowledge; they often can be quite weak when it comes to complex associations. Because while many LLMs can demonstrate sufficient theoretical knowledge in maths and physics - and by "sufficient" I mean at least postgraduate level - they often simply fail to apply this knowledge in fields that are closer to real life. At least, that's what I've seen from my experience. They're fine with theory, but once it comes to application, it's all messed up - even in their main "specializations" such as web development or other software-related tasks. And that's... kinda disappointing for me and even makes me a bit sad. We have a powerful tool, but we can't use it's true potential either because we're using it in the wrong way or because it's architecture cannot support this true potential.
by close04 | 2026-03-09 10:49:03+00:00
The workaround is that each change is a new contract. If you don’t accept the changes the existing contract ends and that’s it. But the power is mostly with the provider, you need it more than it needs you, so you will want the new contract. You can also ask and negotiate terms and the provider has the same choice. If there’s healthy competition you have some power, otherwise you are out of luck.
by textembedding | 2026-03-09 10:49:29+00:00
This story and its retellings appear on Reddit's front page every two months like clockwork.

https://www.reddit.com/search/?q=huy+fong

Each time it gets retold, the sriracha cartoon villain's mustache grows longer and more twirled.

Somehow, Underwood Ranches' competing product never gets failed to get mentioned in a top comment, along with all the places you can buy it, how much better/hotter it tastes, and how superior its ingredients are.

I've never seen something so obviously and clumsily astroturfed, yet be so effective. Their entire growth strategy is enemy positioning on social media. You gotta hand it to the COO (who according to the story he's crafted is the loyal and virtuous hero) as he's running circles around the incompetent and out-of-touch management at sriricha who likely have no idea what's going on.

It appears sheer spite and vengeance is what brought Underwood Ranches back from the brink of bankruptcy. Now that's a genuine American success story.
by threethirtytwo | 2026-03-09 10:50:13+00:00
>And if it DOES work, then all of the previous was done correctly, but without any decent definition of what correct means.

If a program works, it means it's correct. If we know it's correct, it means we have a definition of what correct means otherwise how can we classify anything as "correct" or "incorrect". Then we can look at the prompts and see what was done in those prompts and those would be a "correct" way of prompting the LLM.
by lwansbrough | 2026-03-09 10:50:14+00:00
I never mentioned the Cuban Missile Crisis. You’ve misinterpreted what I said.

The USSR getting nukes in the first place lead to several incidents which were a judgment call away from armageddon. With the benefit of hindsight the correct call would have been to exhaust all options to prevent the soviets from acquiring nukes.

We just got lucky. Whether it was the Cuban Missile Crisis, the soviet early warning system malfunction in Sept 83, or Able Archer 83 in November, there was a lot of dumb luck.

Proliferation will bring the end of humanity. There will be too many actors, too many variables. You can get lucky with 2 actors. You can’t keep getting lucky. The only option is to ensure you don’t have to be lucky.
by vintagedave | 2026-03-09 10:50:46+00:00
This sounds great, and I like it being EU-based (and, presumably, not reusing Yandex like Kagi famously does?)

Could you share more info about how you're building it? Like Kagi it wraps / reuses multiple other providers? How do you do that affordably, and how do you merge the results together into a good answer?
by Imustaskforhelp | 2026-03-09 10:53:02+00:00
> How do we communicate this to the engineers at YouTube who refuse to make an offramp for children from the infinite baby shark AI video loop?

Actually I have a thought which I'd like to share. Why don't we upload good quality/human-curated children media to archive.org and create a more human curated platform instead of shark AI video and we can upload videos for free on archive.org right now. The issue seems to be the more human filter which seems to be the issue.

Sharing this because Youtube Kids is absolutely not safe for kids and youtube is turning a blind eye to all of this because of their monopoly and also (profit? from having children watch a single thing on loop for so long)

Also a minor reason why I don't trust corporations which say protect the kids or governments when they can try to regulate a public company like youtube much easier than trying to control every device but it feels like surveillance goals more than anything to me.

I had watched some video on rabbithole/ "horrors on YT kids" video[0] sometime ago and I rewatched it again and there are even things like Animal Ai Abuse and so so much more vile things being shown to YT kids.

There are comments on that video like: "My 7 year old younger brother came up to me asking if you can drink chlorine. I asked him where he heard this and he told me that he was watching a lego building video on youtube KIDS, where suddenly mid video they started saying stuff like this."

[0] https://www.youtube.com/watch?v=w3PtN-CmybE&t=64s (Caution: The thumbnail is terrifying/horrifying and in general the video is not-safe-for-work while showing things are available on YT Kids so just take that into account on how horrifying the thumbnail/videos in YT kids can be)
by threethirtytwo | 2026-03-09 10:53:09+00:00
Should be extremely low effort to try this out with an agent.

The thing is, I feel an agent can read code as if it was english. It doesn't differentiate one as hard and the other as much more readable as we do. So it could end up just increasing the token burn amount just to get through a program because it has to run through the literate part as well as the actual code part.
by noosphr | 2026-03-09 10:54:17+00:00
- gym every day. No excuses. If you don’t know what to do or lack motivation- get a personal trainer.

Do you people even go to the gym at all?

You need time to recover. Between 3 to 5 days is the most you can humanly do. And that's if you vary your exercises as suggested by a (good) personal trainer. Any more than that and you're just asking for overtraining syndrome. Doubly so if you're nearly 40.