MurphyA/hacker-news huggingface dataset:
by MarkusQ | 2026-03-11 14:17:00+00:00
From the article:

"Microscopy showed that neuronal and synaptic membranes were intact, and tests for mitochondrial activity revealed no metabolic damage. Electrical recordings of neurons showed that, despite moderate deviations compared with control cells, the neurons’ responses to electrical stimuli were near normal.

Hippocampal neuronal pathways still showed the synaptic strengthening or ‘long-term potentiation’ that underlies learning and memory."
by squigg | 2026-03-11 14:17:07+00:00
TB-303 owner here. If my TB-303 sounded this bad I'd set fire to it ;-)

Really this is just an implementation of a basic oscillator, filter and envelope. No harm in that all and it's more than I could manage - it's fun and nice, but it's nothing like a 303. "Building an acid synth" would be fairer.

The accent and glide are core components of the sound, as is the really quite unique sequencer control - from the strange bendy growls to the classic acid bark the accent brings out. Would have been nice to see a deeper dive into why that is and why it's different from implementing a normal portamento-style glide as many other synths do, like the SH-101 - which cannot sound that close to a 303 due to that glide. Well it's also got a different oscillator and filter, with no accent either, but I don't want that to ruin the story ;-)
by Imustaskforhelp | 2026-03-11 14:17:08+00:00
Looks great! Tried to add my domain (https://mirror.forum) and have a minor suggestion to anyone if they want to add their own domain that protonmail doesn't send complete text in its normal mode and I had to go find that out which took many tries.

Also had to go and omit some things to get from 1.2 kb to <1kb and another point to anyone, remove/disable cloudflare analytics as it could add the <script> part and I had to go wait for sometime after updating that for the change to occur.

I also didn't know much about sourcehut, I was definitely very confused within the start.
by zozbot234 | 2026-03-11 14:17:35+00:00
What OpenAI did was train increasingly large transformer model instances. which was sensible because transformers allowed for a scaling up of training compared to earlier models. The resulting instances (GPT) showed good understanding of natural language syntax and generation of mostly sensible text (which was unprecedented at the time) so they made ChatGPT by adding new stages of supervised fine tuning and RLHF to their pretrained text-prediction models.
by joenot443 | 2026-03-11 14:17:43+00:00
> One of those unprotected endpoints wrote user search queries to the database. The values were safely parameterised, but the JSON keys — the field names — were concatenated directly into SQL.

I was expecting prompt injection, but in this case it was just good ol' fashioned SQL injection, possible only due to the naivety of the LLM which wrote McKinsey's AI platform.
by brainwad | 2026-03-11 14:17:53+00:00
Most of the push for e-voting in Switzerland is from the Swiss abroad (10% of the electorate), who have a right to vote, but whose exercise of that right is subject to the vagaries of the international postal system. I personally have had problems with receiving postal ballots from Australia to Switzerland with not enough time to return them; presumably Swiss voters in Australia have similar problems, let alone less-developed countries.
by jmyeet | 2026-03-11 14:19:58+00:00
I've always wondered what the endgame of that farce was. Cost-cutting was clearly always a pretense and a bad one at that. There's made up claims about 300 year olds getting Social Security but I think this only proves that the SSA database was an explicit goal and that was cover.

But why? The only conclusion I can come to is "stealing elections". I'll include this partial list I made of Republican voter suppression efforts going back decades [1].

I believe out there someone is collecting all this data into an AI model to predict how people will vote, something that Cambridge Analytica was a toy version of. But it goes beyond how people will vote but whether they will vote. Likewise, data will be constructed to strike off people from voter rolls if the system believes they won't vote how you want. We've seen efforts like this where similar-sounding names of felons in other states are used to strike off people from voter rolls. And that's a real problem because people might not know they're no longer registered to vote and in some states you have to register 30 or more days before the election.

There is essentially infinite money available to fund Republicans stealing elections because it results in public funding cuts to give even more tax breaks to billionaires.

You can't directly use the SSA databsae obviously so any effort must be small enough to not draw attention, involve part or all of the computing done overseas to avoid legal scrutiny and/or "washing" that data through data provider services. I would bet if you started exhaustively looking at various companies in or adjacent to these spaces, you'd find some pretty dodgy stuff.

[1]: https://news.ycombinator.com/item?id=47053453
by seiferteric | 2026-03-11 14:20:14+00:00
I think I don't like income tax as it disincentivizes labor and also makes it harder for working people to build up wealth. Making a million a year sounds like a lot, but who knows how long someone might be making that kind of money? Meanwhile already wealthy people are mostly untouched. Would rather see majority of taxes come from corporate taxes and capital gains.
by sigmar | 2026-03-11 14:20:23+00:00
It may not have been your intent, but this comment seems to downplay the crime here. It's a crime to take the data even if he wasn't shopping it around as alleged. and the fact that he was 'young and stupid' makes the circumstances of how this happened much more important for an investigation by the IG (ie why was an immature person given so much power?)
by AnimalMuppet | 2026-03-11 14:20:24+00:00
> Markets being completely free got us in this mess, and while sound on paper has so many potential ways to go wrong it should be controlled by the working class either directly or indirectly through voting

Is that what got us into this mess? (Which mess?) Take medical care, for instance. Is that a free market? Not really, no.

I mean, there are clearly markets that can be too free. No, you can't put poison in food and call it "free market". You can't roll through the farmer's market with guns and take everybody's stuff and call it "free market". There is a level of regulation where markets work best, and they work worse with either too much or too little regulation.

But something like the medical market... most people can't shop around for insurance; their employer works with only one insurer. Most people can't shop around freely for doctors; they have to go to someone within their plan. And so on. That's not even close to a free market.

> Theft is a symptom, not a disease. Eliminate the disease and theft effectively disappears

Great. Now tell us what you think the disease is, and how you think we should eliminate it.

> Educational choice deserves to be respected so long as it isn't being used to propagate objectively false information

And who is going to authoritatively determine what is objectively false? You just appointed that person dictator of the educational system. (See previous remarks about free markets.)
by lenerdenator | 2026-03-11 14:20:38+00:00
Cool. Investigate it. If they really did take data off a government system without permission, charge them with the most serious thing you can find in a district where they're likely to be convicted. Then send them to prison to delete years or decades off their lives.

See if Musk was in any way involved, or acted with such reckless disregard for known security standards that he could be civilly or criminally liable. Do the same as above for him.

The only way this stops is if consequences are introduced.
by Horos | 2026-03-11 14:20:43+00:00
Thanks for sharing — always a pleasure to discover what others are building.

A few thoughts after your answers:

The E2E file sync part has existing solutions, and your access rights system is really a signed append-only log rather than a blockchain (no consensus, no decentralization) — which is fine, but the term might create misleading expectations.

What I'm more curious about is the access model itself. How are access tokens created and transferred? Who consumes them, and how does authorization propagate? Have you considered a salted API where each user carries a unique identifier, so the whole grant/revoke/delegate flow goes through a single unified mechanism regardless of what's being accessed?

The SQL sync layer is what actually caught my eye — I've worked on similar problems for specific use cases, and encrypted database sync between peers is a genuinely hard problem. That feels like your real differentiator.

On that note: does the SQL layer reference the file content or file paths? I'm guessing you built both interfaces because they're correlated — the SQL holds structured data that points to the encrypted files. If so, that's worth making explicit, because right now they look like two unrelated features rather than two sides of the same system.
by dspillett | 2026-03-11 14:21:12+00:00
> zero desire to keep any copy of work code or other data on any personal device

Same. I won't even have Teams or Authenticator on my phone unlike most others here (though wrt Teams, that is at least as much about not wanting work to bother me as it is about the danger of data seepage). I need the authenticator to do the job, but I have an old factory-reset phone that has that (and, just in case, Teams) on it.

> But when I was younger? I could totally imagine getting a big juicy dataset like that and wanting a copy for myself.

I'm pretty sure I never would have done. I've always resisted knowing credentials and personal information that aren't mine (so if anything untoward happens with/using that information there is no way it can be my fault/doing, as well as the less selfish reasons) despite people falling over themselves to do things like tell me their passwords & such when they were wanting some for of tech support.

But I think there is a different attitude to data risk in that age group today. They've grown up in a world where very little is really private, and every app and its dog has wanted their contact details and other information (and all too often information about their friends & family), do the idea that data is a free-for-all is dangerously normalised in their heads.

I find older people are similarly very lax with their own data, in fact often being rather too trusting of others generally, but not so much with other peoples. There are a lot more people who are appropriately careful (or even paranoid) in their 30s/40s/50s (I'm late 40s myself) - I think we are lucky to be in the middle, being exposed to information dangers enough to not have that “naivety or age” and not desensitised by having lax information security pushed at us from an early age.
by miltieIV2 | 2026-03-11 14:21:16+00:00
No way to submit bug reports other than email - I'll forward this.
How about at least a GitHub stub repo for Issue reports?
Lot's of permissions (but missing "Full Disk Access" in the UI setup flow)
I didn't know it also needed FDA until I did "ash status".
Why is there a Login?
GitHub login broken - 404.

No Source - This is a security tool that can't be audited.
You had your 5 minutes on HN, but you'll need the community for Linux and Windows.

Yeah, overloaded name - how about AgSh.app / agsh?
It's not too late to fix it.
by colinator | 2026-03-11 14:21:22+00:00
I've got one of these! Mine is called 'roboflex' (github.com/flexrobotics). It's c++/python, not rust. But similarly born out of frustration with ros. Writing your own robotics middleware seems to be a rite of passage. Just like 'writing your own game engine'. Nothing wrong with that - ros is powerful but has legit problems, and we need alternatives.

Although tbh, these days I'm questioning the utility. If I'm the one writing the robot code, then I care a lot about the ergonomics of the libraries or frameworks. But if LLMs are writing it, do I really care? That's a genuine, not rhetorical question. I suppose ergonomics still matter (and maybe matter even more) if I'm the one that has to check all the LLM code....
by pixl97 | 2026-03-11 14:21:28+00:00
This is Goodhart's law at scale. Number of released papers/number of citations is a target. Correctness of those papers/citations is much more difficult so is not being used as a measure.

With that said, due to the apparent sizes of the fraud networks I'm not sure this will be easy to address. Having some kind of kill flag for individuals found to have committed fraud will be needed, but with nation state backing and the size of the groups this may quickly turn into a tit for tat where fraud accusations may not end up being an accurate signal.

May you live in interesting times.
by elicash | 2026-03-11 14:21:59+00:00
I don't think you deserve downvotes; I think it's totally plausible that some people would steal this data just to feel special.

But:

1) That's why we have traditionally had the safeguards that we have had, to protect against this sort of crime, and

2) The allegation in this case is that he later approached coworkers to do something with this data, even if they ultimately didn't help him do it. So it doesn't appear to be hoarding just for the sake of it here.
by thinkingtoilet | 2026-03-11 14:22:09+00:00
Lego is still amazing and you don't have to buy expensive sets for your kids to enjoy them. My son loves Legos and if he gets a set for his birthday it doesn't last long before he takes it apart and starts building other stuff with it.

This is one of those instances where it feels like people are terminally online. Or like the meme of the guy standing in the corner while everyone else is having fun at the party. You can find Legos being given away in a local buy-nothing group. It's still just as magical for kids as it ever was. These complaints are only from an adult who doesn't play with Legos. Who cares if sets become collectibles? Get other sets and have fun with Legos. These are toys that are meant to be played with. Play with them.
by ndiddy | 2026-03-11 14:22:14+00:00
I agree with your analysis. A senator posted his notes from yesterday's private war briefing yesterday here: https://x.com/ChrisMurphyCT/status/2031531835453309125

The US leadership knows they can't destroy Iran's nuclear weapons program or cause regime change. The objective seems to be mainly destroying lots of missile launchers, boats, and drone factories (which Iran demonstrated could do enough damage and use up enough interceptors to make Israel stop attacking them and sue for peace during the 12 day war). When the bombing stops and Iran restarts production, the US will go bomb them again. The US also didn't seem to expect that Iran would close the Strait of Hormuz, and currently has no plan as to how to get it safely back open.

In essence the war is about making Iran less of a threat to Israel no matter the cost to the US or to the rest of the West.
by mafia15 | 2026-03-11 14:22:44+00:00
I got tired of my inbox being noisy so I built a classifier instead of paying for yet another AI email app.
The pipeline: PII redaction first, then embeddings matched against past labeled emails via vector search, Bayesian sender reputation on top of that, a cross-encoder for reranking, and an LLM fallback only when confidence is low. The fine-tuned model handles ~80% of cases before it ever hits the LLM.
Biggest surprise — sender reputation scoring ended up mattering more than I expected. Who sends the email is often a stronger signal than what's in it.
It's hooked into Gmail and Outlook. I've been using it daily for a few months and my triage time is basically zero now.
Happy to talk about any part of the architecture if anyone's curious.
by garbawarb | 2026-03-11 14:23:07+00:00
When I was a new grad moving to the US and deciding where to live and work, the biggest draw of Seattle was its lack of income tax. Of course this particular $1 million threshold wouldn't apply to me until I'm very late in my career, or have a lucky year, or get married to a high-income person (the $1 million threshold applies to married couples, not just individuals) but Seattle loses a lot of its appeal if it's not financially advantageous. Of the other tech hubs, SF beats Seattle on weather and jobs and New York beats it on urban lifestyle. Or if you want to avoid income taxes, why not go to Florida or Texas.

I wonder if introducing income taxes will impact Seattle's tech hub status going forward. Sometimes people talk about how much these measures will lead to rich people moving away, but discouraging high-income people from moving there I think is a bigger long-term impact.
by skeledrew | 2026-03-11 14:23:38+00:00
No matter how you look at it, the dependencies have to go somewhere. Node uses node_modules, most compiled languages require compiled libraries (or they're a huge blob), etc. Idk about PHP but I'm pretty sure 3rd party things for any given app also live somewhere. Different ways of managing dependencies. It's recommended that venvs are used in Python because you may accidentally nuke a system script by doing global installs, and otherwise there still needs to be some sort of 3p version handling when you have multiple projects going.

Once something works in Python (which uv now makes trivial; before it could be a pain), updating 3rd party packages rarely cause breakage. But yes, I think many who use it hardly update, because things usually continue to work for years and the attack surface is pretty narrow[0]. Heck just a few days ago I checked out a project that I hadn't touched in years, which I wrote in Python 3.7; updated to 3.13 and it continued to just work. Compare to PHP which has a far higher attack surface[1] and often has breaking changes. I've heard a couple nightmare stories of a v7.x -> v8.x move being delayed because it required a serious codebase rewrite.

[0] https://www.cvedetails.com/product/18230/Python-Python.html?...
[1] https://www.cvedetails.com/product/128/PHP-PHP.html?vendor_i...
by andy12_ | 2026-03-11 14:23:38+00:00
There is some things that just don't transfer really well without specific training. I tried to create diagrams in Typst with Cetz (a Processing and Tikz inspired graphing library), and even with documentation, GPT 5.2-thinking can't really do complex nice diagrams like it can in Tikz. It can do simple things that are similar to the shown examples, but nothing really interesting. Typst and specially Cetz is too new for any current model to really "get it", so they can't use it. I need to wait to the next batch of frontier models so that they learn Typst and Cetz examples during pre-training.
by saalweachter | 2026-03-11 14:23:44+00:00
I mean, insider risk is insider risk.

In the DOGE case, they specifically broke all the controls that existed to manage insider risk and keep people from making copies like this, but (especially 20-30 years ago) I've been on plenty of networks that just had no concept of insider risk and everything was just open for anyone to access (or protected by shared passwords everyone knew).
by andsoitis | 2026-03-11 14:23:44+00:00
> The constraints enforced in the language still matter. A language which offers certain correctness guarantees may still be the most efficient way to build a particular piece of software even when it's a machine writing the code.

I think this is right. Strategically, do you have a mental model of some key elements such a new programming language should exhibit? I'm curious about which existing programming languages might be best suited or where the opportunity is for designing something new that could throw away all the optimizations we've done for humans and instead optimize for AI programmers.
by smadam9 | 2026-03-11 14:23:50+00:00
I was curious about how the creator economy actually works, not the influencer marketing pitch decks, but the actual structure.

- Who mentions who in their videos?

- Which brands keep showing up across the same creators?

So I built a pipeline that analyzes YouTube videos at scale, extracts every person mentioned and every brand sponsor, and builds a relationship graph from it. No manual data entry. Everything is extracted from what creators actually say and show.

Current data: 32K creators, 55K relationship edges, 2,700 brands. Started deep in fitness and gaming YouTube.

Things to try out:

- Search "Gymshark". See their sponsored creators, which categories they target, and which brands compete for the same roster

- Search "MrBeast". See his connection network

- Click a category tab on the homepage to filter both creators and brands

The hardest technical problem was entity resolution. The same person gets mentioned as "Jeff Nippard", "Jeff", "Nippard" across thousands of videos. Getting that right is what makes the graph useful.

Stack: FastAPI, Next.js, PostgreSQL, Fly.io. Gemini 2.0 Flash for structured extraction.

No signup, no paywall.
by bee_rider | 2026-03-11 14:24:05+00:00
I don’t love the title here. Maybe this is a “me” problem, but when I see “AI agent does X,” the idea that it might be one of those molt-y agents with obfuscated ownership pops into my head.

In this case, a group of pentesters used an AI agent to select McKinsey and then used the AI agent to do the pentesting.

While it is conventional to attribute actions to inanimate objects (car hits pedestrians), IMO we should be more explicit these days, now that unfortunately some folks attribute agency to these agentic systems.
by skavi | 2026-03-11 14:24:23+00:00
I am going to ask a question that is is definitely not the place for, but I am not involved with Zig in any way and am curious, so I hope you'll indulge me.

I noticed the following comment was added to lib/std/multi_array_list.zig [0] with this change:

/// This pointer is always aligned to the boundary `sizes.big_align`; this is not specified
/// in the type to avoid `MultiArrayList(T)` depending on the alignment of `T` because this
/// can lead to dependency loops. See `allocatedBytes` which `@alignCast`s this pointer to
/// the correct type.

How could relying on `@alignOf(T)` in the definition of `MultiArrayList(T)` cause a loop? Even with `T` itself being a MultiArrayList, surely that is a fully distinct, monomorphized type? I expect I am missing something obvious.

[0]: https://codeberg.org/ziglang/zig/pulls/31403/files#diff-a6fc...
by slibhb | 2026-03-11 14:24:29+00:00
People will have to be more intentional about using their increased leisure time in a healthy way. There was no point in exercising if you were a peasant who worked the field all day. Today, if you sit down in an office all day, you need to exercise intentionally. People have figured this out!

Along the same lines, AI will necessitate a shift where people intentionally use their extra intellectual leisure time. Reading, writing, chess, learning a new language, etc.

Not everyone will do this. Some people will be the intellectual equivalent of obese. But people will figure it out eventually.
by YCpedohaven | 2026-03-11 14:24:29+00:00
> It's not something government should regulate but it is something that government policy should incentivize.

Every time this comes up, there are numerous instances reported of welfare states in Europe, Asia, etc. trying this and it not working.

The west, and especially the US is falling out of love with republicans and liberal democracy as they learn that some problems need to solved with an iron fist.