MurphyA/hacker-news huggingface dataset:
by tharkun__ | 2026-03-06 01:52:30+00:00
I never understood that pull.

One of the very first things I always do in any OS is to set the desktop background to solid color, usually black. I almost never ever will see it, coz there's always going to be a window on top of it, except upon startup for some brief period of time or if I accidentally minimize everything.

I work with full screen windows. Always (tiny number of exceptional cases maybe). I switch between windows with Alt+Tab when necessary. I also have a relatively small screen, both for work and personal stuff (14" for at least 10 years now).

You do you of course.
by blooalien | 2026-03-06 01:53:40+00:00
> I feel like I'm going insane and living in some kind of weird bizzaro world.

You're (probably) not going insane. Much of humanity's leadership is going insane, and their cult-like worshippers are right there with them. You're just bein' the "odd man out" tryin' to stay sane in a crazy world ruled by crazy people with way too much money and power.
by fc417fc802 | 2026-03-06 01:53:49+00:00
> verified through a disposable email address

To the extent it works that's a loophole. I can't speak to proton specifically but the majority of services don't want to permit disposable email because the entire point is to cut down on spam and abuse.

I can appreciate having the option of providing a phone number or email or whatever but I think the state of the ecosystem is telling. The option for anonymous email with PoW per outgoing email isn't provided despite largely addressing the commonly cited rationale for requiring some sort of verification. And we're still stuck bashing PGP, shilling for competing E2E message solutions while it's plain as day that the vast majority of commerce isn't going to move off of email any time soon. Meanwhile TLS can figure out how to distribute public keys via DNS as part of implementing ECH in all major browsers over a period of less than a decade.
by kmeisthax | 2026-03-06 01:54:51+00:00
The Overton window has not shifted, at least not among rank-and-file tech workers. There was very loud and vocal internal opposition to building and selling weapons[0]. They all lost the argument in the boardrooms because the US government writes very big checks. But I am told they are very much still around.

CEOs are bound to sociopathically amoral behavior - not by the law, but by the Pareto-optimal behavior of the job market for executives. The law obligates you to act in the interests of the shareholders, but it does not mandate[1] that Line Go Up. That is a function of a specific brand of shareholder that fires their CEOs every 18 months until the line goes up.

In 2007, Big Tech had plenty of the consumer market to conquer, so they could afford to pretend to be opposed to selling to the military. But the game they were playing was always going to end with them selling to the military. Once they were entrenched they could ignore the no-longer-useful-to-us-right-now dissenters, change their politics on a dime, and go after the "real money".

[0] Several of the sibling comments are mentioning hypothetical scenarios involving dual-use technologies or obfuscated purposes. Those are also relevant, but not the whole story.

[1] There are plenty of arguments a CEO could use to defend against a shareholder lawsuit that they did not take a particularly short-sighted action. Notably, that most line-go-up actions tend to be bad long-term decisions. You're allowed to sell low-risk investments.
by Chance-Device | 2026-03-06 01:55:02+00:00
Dario, you are making a conscious choice to start developing autonomous AI weapons. That is what all of this is about, that is what you have offered to work with the DoW towards. Your red line is not that autonomous AI weapons are inherently wrong, potentially an existential threat to humanity and should be banned via treaty like chemical and biological weapons; rather you believe Claude is just not there yet and you want to help close the gap.

Do you have plans to work on a kinder, gentler form of domestic mass surveillance as well? Or will you simply leave it up to others to disguise the eventual turning of your foreign surveillance models inwards towards the United States themselves?
by asveikau | 2026-03-06 01:55:37+00:00
> No war since has been even close to as unpopular or frankly as salient.

Iraq.

Spoiler alert, a bunch of the current ones are going to be seen similarly too.

Also keep in mind when making comparisons that the Vietnam war was not unpopular with Americans at the beginning, and many people justified it all throughout, using language that will be similar to observers of later wars.
by pnexk | 2026-03-06 01:56:42+00:00
true. This is a good essay but there’s, as to be expected, not too much of an acknowledgement of the economic and political backdrop of the arena this played out in. A lot of discussions of this essay therefore get diluted into musings about aspects of human nature and its tendency to obsess over status and while missing the broader point about the role these sorts of strategies play in modern societal wellbeing.
by mft_ | 2026-03-06 01:57:19+00:00
With respect, you’ve given the typical German response to virtually any outsider’s criticism anything German: no, it’s simple, you’re just not doing/understanding it correctly, just learn a, b and c, and then do d, e, f and g.

(Except Deutsche Bahn; no-one argues at criticism there. It’s quite refreshing!)
by tw04 | 2026-03-06 01:57:45+00:00
> I really what Steve Jobs would've done were he still alive. Tim Apple has bent the knee and kissed the ring. Would Steve Jobs have done the same? I'm not so sure. He may well have been ousted (again) because of it.

Given that Steve Jobs was best friends with Larry Ellison, I’d say he wouldn’t have bent the knee because he would’ve been standing hand in hand with Trump, just like Larry.
Show HN: MCPSec – OWASP MCP Top Scanner for Model Context Protocol Configs
by iamdesertpaul | 2026-03-06 01:58:41+00:00
Most developers running MCP servers locally or in CI have no idea what's in
their config files. Hardcoded API keys, missing auth, tools with wildcard
permissions — it's the early days of Docker Hub all over again.

MCPSec scans MCP server configs (Claude Desktop, Cursor, VS Code, DXT
extensions) for the OWASP MCP Top 10 risks. Written in Go, outputs OCSF
JSON, has a pluggable YAML rules engine for community detections.
by tedd4u | 2026-03-06 01:59:24+00:00
We deserve to know if Claude was involved with targeting the girls’ school that was bombed in the first hours of the attack on Iran. 50-100+ girls are reported to have been killed.

Claude is integrated into Palantir’s Project Maven targeting system. The Pentagon has touted how many more targets they were able to attack with this system (1,000’s).

https://www.nytimes.com/2026/03/05/world/middleeast/iran-sch...
by tharkun__ | 2026-03-06 01:59:47+00:00
Plug and Pray!

They weren't fake long file names. They were actual long files names but of course the operating system that didn't support long files names didn't know what to do with the (very real) long file names. It only knew the 8.3 file name that was also set for compatibility.

Of course it sucked if you looked at or worked with DOS based apps. But it was one of those things that was always good about Microsoft Windows: Backwards compatibility.

They literally would build in (bug-) compatibility layers for specific games, where if they detected you were running a particular game, they'd not use the fixed or optimized code paths, but the old ones / emulate / patch things as the game expected them to be. And that was not because Windows was buggy and the games were good. It was the other way around. Games used trickery and internal knowledge that they shouldn't and if/when MS would block those paths or change internals, those games would stop working or crash.
by iandanforth | 2026-03-06 02:00:07+00:00
I don't think we won't get AGI if Anthropic were to implode, and frankly, right now, I'd rather have someone say clearly, "They cannot stomach the existence of someone telling them 'No' or adhering to moral principles. Like spoiled children they can't hear the former and are terrified by later because it might expose them to the condemnation they deserve."
by filipeegarcia | 2026-03-06 02:00:49+00:00
Location: São Paulo, Brazil (UTC-3)

Remote: Yes

Willing to relocate: No

Technologies: Go, Node, Kotlin, AWS, Distributed Systems, Microservices, Event-Driven Architecture, PostgreSQL, Terraform, Docker, CI/CD, Observability, Claude Code, Cursor

LinkedIn: https://www.linkedin.com/in/filipegarcias

Email: me@filipe.tech

Resume: available at filipe.tech

Engineering Manager / Tech Lead with 10+ years of experience building and scaling backend systems in fintech and high-throughput platforms.

I currently lead a cross-functional team responsible for mission-critical services. My focus is on building strong engineering teams, hiring and mentoring engineers, and delivering reliable systems that can scale. I stay close to architecture and technical decisions while making sure the team can execute effectively.

Recently we’ve been heavily integrating AI into our development workflow, using it to accelerate delivery, improve code quality, and support engineering productivity.
by lowsong | 2026-03-06 02:01:35+00:00
I've been in this game a long time and I've seen a lot, but this AI hype cycle is exhausting. Like no technology before it I've watched extremely smart and capable engineers fall into AI like it's a cult. I've had colleagues and friends I've known for years drop head first into this shit.

At first I was interested in the tech, I deep-dived into it. Understood as much as I could. I understand how an LLM works and what it can and can't do. So, I realised pretty quickly that their use is limited. I figured it would blow over in a few years, the real use cases would be weeded out, and we'd all move on to the next thing like normal.

What I didn't account for is how addictive this technology. The moment something "feels" like a person it's ascribed magical qualities, and people fall for it. Anyone can, doesn't matter how smart you are.

For the past six months I've felt nothing beyond a deep melancholic sadness. Not that my industry is changing, it isn't. Not really. These models will not replace people, and anyone who thinks they can is either trying to sell you something or is delusional. The readjustment and the end of the hype cycle will come eventually. But, I fear many people will never be able to let it go. I'm saddened that we're going to lose a generation of brilliant people to fiddling with token predictors, and many of them will never recover from it.

AI will set the industry back twenty years. Not because we will be replaced, but because so many people will be dragged into psychosis and addiction or waste decades chasing the future on a lie.

And there's nothing any of us can do about it now.
Show HN: Md-pattern-studio – Markdown patterns for report-style documents
by datanewbie | 2026-03-06 02:01:40+00:00
I built a small project called md-pattern-studio.

https://github.com/sungreong/md-pattern-studio

While working with LLM-generated content, I noticed Markdown is great for writing or generating documents, but turning it into a nicely structured report is surprisingly awkward.

Typical approaches are:

- Convert Markdown to HTML using a renderer
- Ask the LLM to generate full HTML

Both have issues. Markdown renderers are limited in layout control, and LLM-generated HTML often becomes verbose and expensive in tokens.

So I tried a different approach.

Instead of changing Markdown significantly, this project introduces a small set of patterns that allow structured layouts like:

- Cover pages
- Sections
- Multi-column layouts
- Report-style blocks

The goal is to keep Markdown readable while still producing visually structured HTML.

This is still an early project, but I’m curious if others working with LLM-generated documents have run into the same issue.

Feedback is welcome.
by jakelazaroff | 2026-03-06 02:02:27+00:00
What do you mean, "hallucinates and kills people"? Killing people is the thing the military is using them for; it's not some accidental side effect. It's the "moral choice" the same way a cruise missile is — some person half a world away can lean back in their chair, take a sip of coffee, click a few buttons and end human lives, without ever fully appreciating or caring about what they've done.
by Saline9515 | 2026-03-06 02:02:54+00:00
There are better ways than tariffs. For instance, you can increase VAT and use the proceeds to decrease taxes on work, or cut taxes for specific sectors. This way your economy is more competitive internationally, while avoiding the distorsions of tariffs.

Tariffs can also be footguns as they increase costs on imports for upstream supplies, making downstream local producers less competitive. VAT is much better for this as it is refunded when you export.
by fc417fc802 | 2026-03-06 02:03:12+00:00
> yes I know you can theoretically detect receivers through signal attenuation but at these distances it’s effectively impossible to do

Well if that's part of your threat model then you should also consider the RF put out by the motors. Remember the part where we densely blanked the inhabited parts of the world with highly sensitive antennas over the past 3 decades?
by skeledrew | 2026-03-06 02:03:30+00:00
You can do whatever you want. And someone else can - and will, if it's worth it - now do a deep analysis and have it reimplemented with said analysis, all via LLM. And particularly, since the law is now that AI creations can't be copyrighted, that reimplementation will be firmly in public domain. Nobody will have to even look at 1.1.0. See Valkey as one of the more recent examples, and there isn't even any LLM involved there.
by dakolli | 2026-03-06 02:04:54+00:00
uBlock Origin does not protect you from this, this is a fingerprinting problem. You need to use a fingerprinting resistant browser. And even then, there are new fingerprinting methods emerging frequently and you can't prevent fingerprinting from inside apps on android/iOs..

Most slop mobile applications, that many people have on their phones are basically spyware pretending to be games/whatever.

Programatic advertising technology was created for intelligence purposes, these companies and their methods are very sophisticated.
by raddan | 2026-03-06 02:04:57+00:00
There’s a difference between a collapse and a slowdown. We don’t need a collapse for hiring to slow down [1,2]. I think we’re finally just seeing the maturation of software development. Software is increasingly a commodity, so maybe the era of crazy growth and hiring is over. I don’t think that we need AI to explain this either, although possibly AI will simply commodify more kinds of software.

[1] https://www.npr.org/2026/02/12/nx-s1-5711455/revised-labor-d...

[2] https://www.marketplace.org/story/2025/12/18/expect-more-of-...
by Kiboneu | 2026-03-06 02:05:05+00:00
The SSD lies :) TRIM is a scam.

What happens when you XOR a 0 with a byte in a one time pad? You get the corresponding byte from the pad, right? And the block full of 1s or 0s is exactly a case the scrambler needs to be used.

It's not for compression or anything like that, it is used because the cells are packed so tightly that sharp changes in energy gradients over the space will even themselves out by donating electrons to their neighbors (flipping bits). It's kind of like rowhammer.

Instead of just a ont-time-pad, a more complicated and often proprietary scrambler is used. But it's towards the same end. It's a deterministic, pseudo-random bit sequence.

If you can bypass the controller (read directly from NAND) you will see the true values that it returns, and it will likely be scrambled even if the flash controller reports otherwise. This also allows you to recover the scrambler, since you know that the other side of the XOR operation is 0.
by wakawaka28 | 2026-03-06 02:05:32+00:00
#1 is already possible and always has been. I never heard of a case of anyone actually trying it. #2 is too nitpicky and unnecessarily costly for LLMs. It would be better to just ask it to generate a spec and tests based on the original, them create a separate implementation based on that. A person can do that today free and clear. If LLMs will be able to do this, we will just need to cope. Perhaps the future is in validating software instead of writing it.
by Mars008 | 2026-03-06 02:06:20+00:00
In Tor got: "Our tests indicate that you have you have strong protection against Web tracking."

In normal Firefox: "uBlock Origin has prevented the following page from loading:

https://eviltracker.net/kcarter-reporting-nojs?a="

In normal Firefox with 'real tracking company' ON (default): "uBlock Origin has prevented the following page from loading:

https://trackersimulator.org/kcarter-reporting-nojs"

Sort of failed?
Show HN: Titan Gate – cryptographic receipts for AI-assisted code changes
by rmasoodx22 | 2026-03-06 02:06:43+00:00
AI writes code fast. SOC2 auditors ask: how do you know what changed, who approved it, and that the record wasn't altered?

Titan Gate answers with cryptographic receipts — not process docs.

Every PR gets evaluated by a three-judge engine (structural, semantic, policy), scored, signed with HMAC-SHA256, chained to the previous receipt, and stored at .titan/receipts/ in your repo.

Any engineer can verify a receipt independently:

python scripts/titan_verify.py .titan/receipts/2026-03-06/<id>.json --key <key>

Output:
VERIFICATION : PASS
Signature : VALID
Hash : VALID

The audit trail travels with the code. SOC2 controls CC6, CC7, CC8 covered.

One-line GitHub Action integration. 555 tests. Apache 2.0.
by tomhow | 2026-03-06 02:07:15+00:00
The point is that when your position is presented with these hyperbolic barbs and this enraged tone, it closes off the opportunity for discussion rather than opening it, and erases any opportunity for a curious conversation. This is a theme in much of your activity on HN, particularly in discussions about politics and the aspects of the tech industry that displease you, and also in the way you engage with the moderators. We need this to stop, because it's poisonous to the culture here. HN is only a place where people want to participate because others make an effort to raise the standards rather than drag them down. You're welcome to email us (hn@ycombinator.com) if you want to discuss this further.
by hammock | 2026-03-06 02:07:17+00:00
So the cutting edge things are happening in places where brand doesn’t matter. I could think of better examples but moldbot/clawdworld comes to mind. Or ASML, or national lab physics, or cheap attack drones, or.. idk can anyone think of better examples?

And “brand age” (as a broad moniker) is another way of saying innovation has stagnated.
by theturtletalks | 2026-03-06 02:08:19+00:00
Essay's very insightful, but it misses a big distinction. Watches are straight-up B2C consumer luxury. Once the real engineering edge vanished brand and scarcity could carry everything forever. Buyers pay extra precisely because it's status jewelry that doesn't need to improve year after year.

Most software especially SaaS like Salesforce or Shopify is B2B infrastructure. Brand loyalty there is way thinner and more fragile. Businesses don't pick tools to feel cool or exclusive. They pick what actually runs the operation better keeps their data safe and doesn't screw them long-term. Unlike a finished watch you own outright, software is a live service. You never know if tomorrow they'll yank a feature you rely on, hide it behind a new paywall, churn the UI, or jack up prices to please shareholders. Enshittification is brutal in this space because companies have to keep growing revenue forever. Open-source or self-hosted options keep winning ground for exactly that reason. True ownership and predictability beat any brand when it's your P&L on the line.
by guiambros | 2026-03-06 02:09:11+00:00
And how do you actually identify who should pay that $0.000713? And who should receive it? How do you make the process effortless, so the user doesn't have to spend 5 minutes registering on a website, just to send $0.000713?

Now make it work 10,000 times per day, for every page you visit, posts, news, short form content you scroll, long form video you watch. And multiply this by billions of users.

And once you've done that, how do you deal with spam, bots? How do you prevent invalid traffic? Fraudulent chargebacks? And how do you take quality into consideration (NYT prob want to charge more than my crappy personal blog)?

Transferring money is one small element of large and complex equation.

Advertising is not perfect, but it's the best alternative for a free and open web I have seen in my 30+ years online. Subscription works for large ticket items (and for the affluent minority), but it doesn't solve the other 95% of cases.
by toofy | 2026-03-06 02:09:55+00:00
i can’t speak for the journalists who wrote the story, but i assume it’s due to how prominently proton markets their email as safe/private/encrypted and then it turns out they may be sharing data with the swiss government who then gives it to the us government.

it absolutely should be news when the company who heavily promoted themselves to normies as safe, encrypted, and private is sharing customers data which is ending up in the hands of authoritarian foreign governments who are hunting for protesters.
by _pdp_ | 2026-03-06 02:10:34+00:00
cool

Although... the agent orchestration is really the easy part. It is just a loop. You can solve this in many different ways and yes some languages are more suitable for this than others. But still - very straightforward.

The hard part is making sure these agents can do useful things which requires connecting them to tools. Although just adding bash might seem like checking that box the reality is more complex when it comes to authentication (not only). It is even more problematic when you need to run this in some sort of distributed way where you need to inject context midway, abort or pause and do so with all the constraints in mind like timing issues for minted urls and tokens, etc. Btw, adding messages to the context while LLM is doing some other job (which you might want to do for all kinds of reasons) does not always work because the system is not deterministic. So you need to solve this somehow.

Even harder is coming up with useful ways to apply the technology. The technical side of things can be solved with good engineering but most of the applications of these agents are around pretty basic use-cases and the adoption is sort of stagnated. 99% of these agents are question/answer bots, task/calendar organisers, something to do with spam and the most useful one is coding assistants.

And so frankly I think the framework is irrelevant at this point unless one figures out how to do useful things.
by carloshmccarlos | 2026-03-06 02:10:37+00:00
MorseAI is an AI-powered audio-to-Morse translator that turns your voice into dots and dashes in seconds.

Built with React and Cloudflare Workers, it uses Deepgram’s Nova-2 AI to transcribe live recordings or uploaded audio into text, which is then instantly converted into precise Morse code.

Top Features:

Voice-to-Morse: Record or upload audio (up to 30s) for instant AI transcription.

Audio Playback: Hear your Morse code with adjustable WPM speed.

Visual Signal: Use "Lamp Mode" to see your message as a blinking light.

Learning Mode: Practice your decoding skills with interactive Morse challenges.

It’s the perfect tool for students, radio hobbyists, and anyone exploring the art of telegraphy with a modern AI twist.