MurphyA/hacker-news huggingface dataset:
by littlestymaar | 2026-03-13 17:46:07+00:00
While your remark is valid, there's two small inaccuracies here:

> GPT-OSS-20B has 3.6B active parameters, so it should perform similarly to a 3-4B dense model, while requiring enough VRAM to fit the whole 20B model.

First, the token generation speed is going to be comparable, but not the prefil speed (context processing is going to be much slower on a big MoE than on a small dense model).

Second, without speculative decoding, it is correct to say that a small dense model and a bigger MoE with the same amount of active parameters are going to be roughly as fast. But if you use a small dense model you will see token generation performance improvements with speculative decoding (up to x3 the speed), whereas you probably won't gain much from speculative decoding on a MoE model (because two consecutive tokens won't trigger the same “experts”, so you'd need to load more weight to the compute units, using more bandwidth).
by mikehall314 | 2026-03-13 17:46:15+00:00
You're correct but as Uvix has said, BBC Enterprises made film copies for overseas sales before the original tapes were erased.

The earliest episode to survive on its original videotape is Ambassadors of Death episode 1 from 1970. None of the original 60s tapes still survive, though I believe there is at least one tape that we know used to have Doctor Who on it but which now has another programme.

The earliest episode to survive in its original medium is possibly The Dalek Invasion of Earth episode 5 (The Waking Ally). That's because, while this was shot on electronic studio cameras as usual, there were no videotape machines available to record.

Instead the output of those cameras was telerecorded straight to 35mm film. AIUI the negative of that telerecording still exists.
Show HN: MCPS – Cryptographic identity and message signing for MCP agents
by AskCarX | 2026-03-13 17:46:17+00:00
We scanned 39 agent frameworks against the OWASP Agentic AI Top 10. 13 FAIL, 17 WARN, 9 PASS. Open Interpreter scored 80/100 risk. AutoGPT 65. Even LangChain flagged WARN for prompt injection vectors.

MCP has no identity layer. No message signing. No tool integrity. 41% of MCP servers have zero authentication (TapAuth research). CVE-2025-6514 scored CVSS 9.6.

MCPS adds a cryptographic security layer on top of MCP – like TLS for HTTP:

- Agent Passports (ECDSA P-256 signed identity)
- Message signing (every JSON-RPC call wrapped in signed envelope)
- Tool integrity (signed definitions prevent poisoning)
- Replay protection (nonce + timestamp window)
- Trust levels L0-L4 (enforce minimum per server)
- Real-time revocation via Trust Authority

Mitigates 8/10 OWASP MCP risks. Zero dependencies.

npm install mcp-secure
pip install mcp-secure

Background: I filed OWASP security assessments against LangChain (github.com/langchain-ai/langchain/issues/35803) and other frameworks. The LangChain community implemented AST filtering fixes based on the findings. That work led to building MCPS as the protocol-level fix.

Full spec: github.com/razashariff/mcps/blob/main/SPEC.md
Scan results for all 39 agents: mcp-secure.dev/#registry
by klodolph | 2026-03-13 17:46:29+00:00
> How can you invest in SP500 minus TSLA without racking up exorbitant fees?

Various options…

1. Direct indexing (requires minimum amount of assets),

2. Certain actively-managed ETFs like GGRW, which is not exactly SP500 minus TSLA but it’s not too far off

3. Buying passively-managed ETFs in sectors that don’t include TSLA,

4. TSLQ, maybe. You get fees and other problems. I wouldn’t.

Direct indexing costs more than ETFs in terms of fees, but there’s apparently some kind of tax loss harvesting that you can do with direct indexing to offset the fees, and some people say you can come out ahead. I don’t understand how tax loss harvesting works at a satisfactory level (I’ve read articles and watched videos, but I think I would need to take an accounting class and really sit down with a spreadsheet before I could say that I understand how direct indexing and tax loss harvesting work together.)
by 9rx | 2026-03-13 17:46:32+00:00
Remember, when it comes to government — at least a democratic one — the people complaining are also the leadership. Now, think about it from their perspective:

- If they do a good job with leadership, only one team will be necessary. Anything else is truly a waste.

- If they do a poor job with leadership, every team will fail. Any more than one is also truly a waste[1].

The latter is the most likely outcome, of course. Now, when you absolve yourself from the process then those points still apply, but now you have several leaders duking it out to see which one doesn't fail. But, for the same reasons, those leaders each only benefit from having one team.

[1] You could argue that all teams are truly a waste, but one team is necessary to show that leadership failed. That brings abstract value, even if it fails to deliver the intended value. You don't know until you try.
by embedding-shape | 2026-03-13 17:46:57+00:00
> Would any of these reveals actually be "stunning",

Everyone knew the NSA spied on everyone, yet Snowden leaks were truly stunning, because no one had evidence of the sheer scale of what the NSA (and collaborators) were engaged in. Wyden Siren was already firing off about that many years beforehand, before we knew the actual truth, so considering his record, I'm also skeptical it'll be "truly shocking" for the average HN tech-nerd, but for the general public, to have evidence of what the government does? Probably will be "stunning", but the one who lives will see.
by nradov | 2026-03-13 17:47:06+00:00
A leaky abstraction is like obscenity: I know it when I see it. It's impossible to define the concept in a rigorous way, and yet it impacts everything that we do.

You're simply wrong to claim that we accept the situation without spending any real effort. In reality the more experienced developers who build abstraction layers tend to spend a lot of time trying to prevent leaks, but they can't have perfect foresight to predict what capabilities others will need. Software abstractions often last through multiple major generations of hardware technology with wildly different capabilities: you can't prevent those changes from leaking through to higher levels and it would be foolhardy to even try.
by mindslight | 2026-03-13 17:47:09+00:00
Good list of more reasons! I focused on what I consider the two most important.

To expand on your #3, it also gives parents a way to have different policies on different devices for the same child. Perhaps absolutely no social media on their phone (which is always drawing them, and can be used in private when they're supposed to be doing something else), but allowing it on a desktop computer in an observable area (ie accountability).

The way the proposed legislation is made, once companies have cleared the hurdle of what the law requires, parents are then left up to the mercy of whatever the companies deem appropriate for their kids. Which isn't terribly surprising for regulatory capture legislation, but since it's branded with protecting kids and helping parents, we need to be shouting about all the ways it actually undermines those goals.
by AnthonyMouse | 2026-03-13 17:47:15+00:00
> You're making very specific and bold claims related to the fungibility of oil, oil infrastructure, transpiration, etc and they simply don't line up with my experience.

I'm not arguing that they're always and instantaneously fungible, my point is that the aren't any less fungible than they are when the thing you're transporting isn't oil, so it doesn't make much sense to make a special carve out for the cases where the load is also the fuel.

> You won't replace oil pipelines or sea-based transportation by importing tanker trucks, its completely inpheasible on any reasonable timescale.

An oil tanker ship holds around 55 million gallons. An oil tanker truck holds around 10,000. Trucks per ship is therefore around 5500. If the round trip is around two hours, and assuming that pumping is a relatively small proportion of the time (you have high capacity pumps at both ends or bring a few percent more trucks so drivers can switch trucks instead of waiting or both), you'd need around 500 trucks and, assuming 8 hour shifts, 1500 drivers per oil tanker ship per day. In normal times something like 60 oil tanker ships go through the Straight per day, so if you had to do all of them it would be on the order of 30,000 trucks and 90,000 drivers.

That's not a small number, but at the scale of global trade, it doesn't seem like an impossible number. And you wouldn't actually be doing all of them this way, you would be diverting as many as you can to other paths and only doing this where it's the least bad alternative. 10 ships a day would be ~5000 trucks. Is it infeasible to find 5000 tanker trucks in the world?

> Similarly, you will never replace petroleum-based transportation at scale in any near term future with electric or other non-petroleum sources.

Again, you're not trying to replace all of it instantaneously, you're trying to substitute at the margins. Does it make sense to try to use electric trucks if you were doing the above, trying to run the trucks continuously in a place that presumably doesn't have adequate charging infrastructure? Almost certainly not.

Does it make sense to convert fleets of millions of delivery trucks to electric or plug-in hybrids, when they're doing continuous stop and go that benefits from regenerative braking? Absolutely it does. Does it make sense to add a battery car to already-hybrid diesel electric freight trains so they can do regenerative braking on down grades, and add a pantograph and some overhead lines to the up grades so they can run electric there instead of burning diesel? Also yes.

> The power to weight ratio of oil, ease of transport of liquid oil, and scale of petroleum a powered vehicles is simply unmatched. Go ahead and do the math on what it takes to replace a diesel oil tanker at sea to cross from Iran to China or the US to Europe, and don't forget to consider all the materials required to make battery storage equipment for such a trip.

This seems like a pretty attractive option for large ships if you're worried about power to weight ratio:

https://interestingengineering.com/energy/hd-hyundai-abs-pla...
by 0xbadcafebee | 2026-03-13 17:47:47+00:00
> The only way to stop this from happening is half the country refuse to buy any tech that implements OS age verification

No, the way to stop it is to talk to your representatives.

You have the power. You just have to pick up a phone, and ask your friends, relatives, neighbors, to do the same. (They will, because it affects all of them.) Tell your reps to remove the legislation or you're voting them out. They don't want to lose their jobs. They will change if you tell them to. But only if you tell them. That is your power. Use it or lose it.
by Aurornis | 2026-03-13 17:47:50+00:00
I agree. I tried reading some of the documents and they're full of this:

> LIMITATION: Direct PDF downloads returned 403 errors. ProPublica Schedule I viewer loads data dynamically (JavaScript), preventing extraction via WebFetch. The 2024 public disclosure copy on sixteenthirtyfund.org was also blocked.

> Tech Transparency Project report: The article "Inside Meta's Spin Machine on Kids and Social Media" at techtransparencyproject.org likely contains detailed ConnectSafely/Meta funding analysis but was blocked (403)

The least they could have done is read their own reports and then provided the documents to the LLM. Instead they just let it run and propose connections, asked it to generate some graphs, and then hit publish.
by kazinator | 2026-03-13 17:48:29+00:00
> When I was around 10, in 1975, I built a giant computer out of a cardboard box.

In around 1976, when I was five, I followed a smaller design: mine fit entirely inside an egg carton, with the tops painted various colors representing buttons. I had a roll of punched paper tape as a souvenir from my aunt, who worked in accounting for textile company. I fed that tape into the egg carton as input.

And so here we are ...
by phendrenad2 | 2026-03-13 17:49:28+00:00
I looked up Section 702 and top result was an official government powerpoint justifying it to the public. https://www.dni.gov/files/icotr/Section702-Basics-Infographi...

Under "Oversight", they point out that the Privacy and Civil Liberties Oversight Board concluded that that the government's Section 702 program operates within legal constraints, as recently as 2014! Wow! </sarc>
by 827a | 2026-03-13 17:49:46+00:00
I'm not sure I fully grok the hypothesis that Meta is materially advantaged by pushing for OS-level age verification. I suppose its another intelligence signal for ad targeting, but they have to believe that at least on platforms like iOS this signal is going to be obfuscated from them. Its hard to believe it'd be any more valuable than the other non-verified heuristics they're already gathering.

Arguably they would be more materially advantaged if they were forced to KYC/validate ages, not the platform; because sure, there's a cost to doing it, but presumably having hard data on who your customer actually is, with age and address and everything, is worth a lot more than the verification cost. And being able to say "We're legally required to gather this" gives a lot of PR cover (even though it'd be followed with "but we're giddy to do so and we will abuse this data and you every way we possibly can. No one at Meta believes you are human. We hate you as much as you hate us, but we're stuck in this together, endlessly loathing the supernatural force that keeps us working together.")

But, On the flip side: I also don't doubt that Meta is doing this, because the purpose of a system is what it does, and the leadership at Meta has done nothing in the past four years to demonstrate that they're capable of cogent thought and execution. We want to believe there's some evil plan, and maybe there is, but in all likelihood one day we'll learn that they're just... unintelligent.
by renewiltord | 2026-03-13 17:49:48+00:00
You started some “oh only in America” crap and promptly started acting all noble once it was pointed out as bullshittery? Nice try.

If the results were swapped and this had said “13 dead after being misidentified” vs “1 jailed for 5 months in post office scandal” I’m supposed to believe you’d be all “well, at least they’re doing something about the 13 dead”?

I think we both know you’re just talking a load of crap. Admit you were wrong to downplay a large tragedy and move on.
by bediger4000 | 2026-03-13 17:49:50+00:00
The ProPublica article specifically said "hand recount". That was in April of 2021, as I read The Internet.

There's also risk limiting audits done by most or all vote-by-mail states. The selection of ballots that are used in the audit is via randomly seeded RNG. I've only looked at Colorado:s RLA in detail, but it seems like RLA would be done by hand. I wrote a program to simulate CO's RLA algorithm so I can understand it. It detected "wrong candidate won" with far fewer audited ballots than "correct candidate won".

I agree about the incentive to tamper. Qanon Tina Peters did so, as did a Republican team led by Sidney "release the kraken" Powell, in Coffee County, GA in 2021.
by kolinko | 2026-03-13 17:50:08+00:00
The thing is - without Falcon9 / Starship they really cannot - both China and EU are ~10-20 years (sic) behind SpaceX, and without thousands of satellites on LEO you just cannot have terminal similar to SpaceX's.

(And don't get me started on how bad Iris2 is/will be. It's a program that EU has to shut down discussions on how terribly behind we are.

The last time I checked, a year ago, EU's plans were to have first Falcon9-level flights around 2035 (!!!), and that was assuming no delays, so absurdly optimistic. Adding a few years for ramping up the production, 2040 is the earliest we can have optimistically something like Starlink from 2020.
by vlowther | 2026-03-13 17:50:23+00:00
My usecase was building an append-only blob store with mandatory encryption, but using a semaphore + direct goroutine calls to limit background write concurrency instead of a channel + dedicated writer goroutines was a net win across a wide variety of write sizes and max concurrent inflight writes. It is interesting that frankenphp + caddy came up with almost the same conclusion despite vastly different work being done.
by pbronez | 2026-03-13 17:50:29+00:00
The docs page addresses this:

> A Mixture of Experts model splits its parameters into groups called "experts." On each token, only a few experts are active — for example, Mixtral 8x7B has 46.7B total parameters but only activates ~12.9B per token. This means you get the quality of a larger model with the speed of a smaller one. The tradeoff: the full model still needs to fit in memory, even though only part of it runs at inference time.

> A dense model activates all its parameters for every token — what you see is what you get. A MoE model has more total parameters but only uses a subset per token. Dense models are simpler and more predictable in terms of memory/speed. MoE models can punch above their weight in quality but need more VRAM than their active parameter count suggests.

https://www.canirun.ai/docs
by Someone | 2026-03-13 17:50:34+00:00
FTA:

void boundingBox(Circle c) {
if (c instanceof Circle(Point(int x, int y), double radius)) {

That looks weird. An if whose condition always is right looks superfluous. It also makes it look as if one could write things such as

if (c instanceof Circle(Point(int x, int y), double 1.0)) {
…
} else {
…
}

Finally, that code is wordy. I know that is the Java way, but couldn’t it be slightly shorter by not requiring specifying basic types as in

if (c instanceof Circle(Point(x, y), radius)) {

? (I wouldn’t go as far as

if (c instanceof Circle((x, y), radius)) {

. That doesnt feel Java to me)
by meatmanek | 2026-03-13 17:51:40+00:00
For ASR/STT on a budget, you want https://huggingface.co/nvidia/parakeet-tdt-0.6b-v3 - it works great on CPU.

I haven't tried on a raspberry pi, but on Intel it uses a little less than 1s of CPU time per second of audio. Using https://github.com/NVIDIA-NeMo/NeMo/blob/main/examples/asr/a... for chunked streaming inference, it takes 6 cores to process audio ~5x faster than realtime. I expect with all cores on a Pi 4 or 5, you'd probably be able to at least keep up with realtime.

(Batch inference, where you give it the whole audio file up front, is slightly more efficient, since chunked streaming inference is basically running batch inference on overlapping windows of audio.)

EDIT: there are also the multitalker-parakeet-streaming-0.6b-v1 and nemotron-speech-streaming-en-0.6b models, which have similar resource requirements but are built for true streaming inference instead of chunked inference. In my tests, these are slightly less accurate. In particular, they seem to completely omit any sentence at the beginning or end of a stream that was partially cut off.
by icedchai | 2026-03-13 17:51:51+00:00
DOS / Desqview support filesystem locking with "share.exe." Honestly I am not sure how well this worked, but I knew guys who ran multi-line BBSes under DOS and Desqview (and later OS/2) without issue.

Even with multiple PCs you would also have similar "shared filesystem" issues. You'd need some sort of fileserver and a shared, network drive. Novell was popular at the time.
by wing-_-nuts | 2026-03-13 17:51:51+00:00
Everyone who's not terribly worried about privacy always uses the line 'if you're not doing anything wrong, you have nothing to worry about', but my line of thinking is not 'do i trust the government' it's 'do I have faith in all future forms of government who will have access to this data'

Given how fast and lose I've seen the DODGE folks play with the data they have, absolutely not. I still shudder over the fact that my OPM data was hacked years ago
by DennisP | 2026-03-13 17:51:55+00:00
You seem to be on the right track because supposedly for good gut health we need to eat at least thirty different plant foods each week. You've got twelve just for breakfast!

https://www.theguardian.com/wellness/2024/apr/04/30-plants-w...

https://mydoctor.kaiserpermanente.org/mas/news/eating-30-dif...
by hinkley | 2026-03-13 17:53:07+00:00
How many data centers have had a server room burn to the ground?

We had a halon system in an on-prem data center twice the size of my bedroom. We had to knock out a wall because the volume was too small for the smallest cooling system we could get installed in the building. That was 20 years ago, and we had to do it for insurance reasons. In the United States, which I know you Europeans like to make fun of for being sooo amusingly Neanderthal.

What the absolute fuck, OVH.
by aesoh | 2026-03-13 17:53:44+00:00
Interesting points! I see what you mean about age verification being used as a foundation for more signals in the OS. I think the tricky part is balancing privacy and verification — making sure applications can verify identity or age without over-collecting sensitive data. Biometric verification could be useful, but it also raises questions about how much control users have over their personal information. Curious to hear how you’d design it in a way that’s secure but respects user privacy.
by perennialmind | 2026-03-13 17:53:46+00:00
There was no upside for an ISP to operate a 6to4 relay, so the anycast address was worse than a blackhole route. It would occasionally permit a connection, but mostly just caused timeouts. Without that poison pill, it could have been a nice way to allow for connecting private subnets that otherwise use conflicting RFC1918 subnets. That's what I used it for.
by gamefamecame | 2026-03-13 17:53:46+00:00
Electron apps tend to use a lot of memory because the framework favors developer productivity and portability over runtime efficiency.

- Every Electron app ships with its own copy of Chromium (for rendering the UI) and Node.js (for system APIs). So even simple apps start with a fairly large memory footprint. It also means that electron essentially ships 2 instances of v8 engine (JIT-compiler used in Chromium and NodeJS), which just goes to show how bloated it is.

- Electron renders the UI using HTML, CSS, and JavaScript. That means the app needs a DOM tree, CSS layout engine, and the browser rendering pipeline. Native frameworks use OS widgets, which are usually lighter and use less memory.

- Lastly the problem is the modern web dev ecosystem itself; it is not just Electron that prioritises developer experience over everything else. UI frameworks like React or Vue use things like a Virtual DOM to track UI changes. This helps developers build complex UIs faster, but it adds extra memory and runtime overhead compared to simpler approaches. And obviously don't get me started on npm and node_modules.
by grayscale-dev | 2026-03-13 17:54:11+00:00
One thing I’ve noticed building things is that tools and platforms grow very differently.

Tools can start with just a few people because they solve a specific problem. Platforms are harder because they need activity from both sides before they’re useful.

What I’ve seen work is starting with something that behaves more like a tool first, even if the long-term goal is a platform. If a small group gets value right away, they create the first bit of activity that makes the platform useful later.

I ran into this while building a product recently — feature requests coming from email, support chats, random messages, etc. It got messy fast, so I ended up building a simple system to collect feedback and share a roadmap.

Curious how other people here have dealt with the early chicken-and-egg phase.
by brcmthrowaway | 2026-03-13 17:55:42+00:00
Basically LM Studio has a server that serves models over HTTP (localhost). Configure/enable the server and connect OpenCode to it.

Try this article
https://advanced-stack.com/fields-notes/qwen35-opencode-lm-s...

I'm looking for an alternative to OpenCode though, I can barely see the UI.