MurphyA/hacker-news huggingface dataset:
by Allplix | 2026-03-12 17:45:21+00:00
I built Allplix, a suite of 30+ free AI-powered tools (image compression, background removal, video compression, file conversion, image enhancement...) that run entirely in your browser. No server uploads, no sign-up, no limits.

Key technical choices:
- All processing uses WebAssembly (FFmpeg), Canvas API, and client-side ML models
- Zero bytes sent to servers (except optional AI colorization via Hugging Face)
- Works offline after first load (Service Worker + PWA)
- Built with Next.js 16, runs on Vercel
- 12 languages, full SEO with server-rendered JSON-LD

The "turn off WiFi, it still works" pitch isn't just marketing – it's the architecture. Every tool processes files locally using browser APIs.

I also added a gamification layer: achievement badges (seasonal ones for Christmas/Halloween!), processing stats dashboard, command palette (Ctrl+K), and drag & drop file detection.

Would love feedback from the HN community on the approach and what tools you'd want next.
by bluedino | 2026-03-12 17:45:49+00:00
I wrote 99% of a large PHP app on an six year old laptop with a single 17" LCD. Meanwhile, at my desk, I had a Dell workstation with 3 monitors at the time, but it was easier to squirrel away in a corner somewhere, undisturbed.

After all, the actual server ran the code, I just needed text editors, terminal windows, and web browsers.
by esseph | 2026-03-12 17:45:49+00:00
Logs are pretty dry sometimes.

INFO gives you a ton but it's low SNR.

WARN/ERROR may tell you that something could happen or is happening, but it doesn't tell you the ramifications of that may be. It could be nothing!

Now imagine you're getting hundreds, thousands, millions of messages like this an hour? How do you determine what's really important? For instance, if a kubernetes pod on a single node runs out of space, that could be a problem if your app is only running in that node. But what if your app is spread against 30x nodes?

It's a triage system with context, at least it sounds like it. It's helping you classify based on actual current or potential problems with the app in the ways that a plain log message does not.
by Retric | 2026-03-12 17:45:51+00:00
> Or it could be from a user who previously owned a lifetime Builder's Club subscription, which is now grandfathered in to Roblox Premium, and receives Robux monthly despite only making a one-time payment.

> My point here is to demonstrate that attempting to create such a fiat -> Robux exchange rate figure isn't really feasible, or that if one did exist it wouldn't be accurate. Nor would I think it to be particularly useful either; the main exchange rate that matters to developers is the Robux -> fiat one (for how much Robux is going into their experiences and how much they can DevEx from it), which is very clear and very well-defined – since September 2025, it's 0.0038 USD per Robux <https://create.roblox.com/dashboard/devex>.

If there is not some USD -> Robux calculation then there’s no way to say what percentage payout 0.0038 USD per Robux represents.

Ultimately the company can create Robux from thin air, what matters is the total amount created year vs the total money coming into the system each year. IE company could give every player some free Robux it’s just adding 0$ USD -> X Robux to the average.

Which is why the statement about treating some exchanges differently is so sketchy in terms of calculating what percentage a developer keeps.
by ghaff | 2026-03-12 17:45:53+00:00
State taxes can be a bit of a mess, E&Y (accountants) were enlisted to started looking at expense reports at a long-ago former employer to be sure people were staying within the guidelines. There are "jock" taxes mainly intended for pro athletes and entertainers but they theoretically apply to everyone for even a one night stay in some states. (Shortish stays for "normal" people were ignored but not sure how kosher that actually was.)
by nerdjon | 2026-03-12 17:46:05+00:00
This was my first thought as well, all this does is further remove the user from seeing the chat output and instead makes it appear as if the information is concretely reliable.

I mean is it really that shocking that you can have an LLM generate structured data and shove that into a visualizer? The concern is if is reliable, which we know it isnt.
by forinti | 2026-03-12 17:46:06+00:00
In recent years I have been going less and less to banks. 20 years ago I would go monthly to pay some bills.

Nowadays, I must visit a bank once or twice a year tops. My manager frequently sends me messages, but invariably he is trying to sell me something.

I've noticed that branches have really cut down on tellers and in my latest visit the branch didn't even have a teller, just someone helping people use the ATM and lots of desks (most were empty) for you to handle more complicated business with your account manager.
by phpnode | 2026-03-12 17:46:48+00:00
it is straightforward to build this for real, here is my nearly one-shotted tldraw clone from a couple of weeks ago, https://x.com/c_pick/status/2028669568403578931 - the implementation side never saw the code, only the spec (in reality it did see the tldraw code in its training data, but you can't escape that anymore)
by bob1029 | 2026-03-12 17:46:55+00:00
If your public interface address can change, it does dramatically reduce the value of a purely IP-addressed host. But I don't think it eliminates it entirely.

With a dynamic IP you can still detect a change, reissue a cert for the new IP and proceed automatically. There are self-hosting and machine-to-machine scenarios where this amount of autonomy could be welcome.
by lihanc111 | 2026-03-12 17:47:10+00:00
Hey HN,

We dug into 17 billion tokens of behavioral data across 413K AI agent trajectories (CoderForge-Preview) attempting real GitHub issues. Instead of just looking at final SWE-bench scores, we compared successful runs against failing runs on the exact same problem to filter out task-difficulty confounds.

The biggest surprise? Agents are not junior developers, and prompting them to act like humans actively hurts their success rate.

Here is what the data actually shows:

Human exploration rituals predict failure: "View-before-edit" and "grep-before-edit" are negatively correlated with success. Humans do this to build mental models. Agents already have the codebase in their context window; if they are heavily grepping, they aren't learning, they're flailing.

TDD is the ultimate predictor of success: The single strongest behavioral signal of a passing agent is the fraction of early bash commands dedicated exclusively to running the test suite.

The Single Responsibility Principle is law: Agents that scatter edits across 3 or more files in the first 30% of their run see their success rate plummet. Successful agents fix one targeted thing at a time.

Perseverance is a myth: If an agent runs the exact same bash command twice early on, it’s a massive failure signal. They don't adapt; they just get stuck in a loop.

Check out the article for full content!
by VorpalWay | 2026-03-12 17:47:19+00:00
It has gotten a lot better from what I can tell, though that is just based on what I see others struggle with (or not struggle with as may be the case).

I can't judge this directly (I'm in way too deep, running Arch etc), I first started using Linux seriously in 2004, stopped using Windows except for gaming by 2006, and touched it less and less over the years. I have not used Windows 11 at all.
by dlcarrier | 2026-03-12 17:47:19+00:00
I'm going with a group of friends to go see Project Hail Mary. It's the first time in years that most of us have planned ahead of time to see a movie, because it's mostly been garbage. I think the last time was Avengers Endgame, but we were all pretty disenfranchised in the series by that point.

Having a good home theater does mean I watch far more movies at home than in the theater, but almost none of them are new releases, and the ones that are are usually released straight to a streaming service.
by rcintrinio | 2026-03-12 17:47:37+00:00
Intrinio | Senior Full Stack Engineer | Remote | Full-Time or Contractor

We’re hiring a Senior Full Stack Engineer at Intrinio.

Intrinio powers fintech platforms, trading tools, and analytics applications with real-time and historical financial data. Our team standardizes complex market data into clean, developer-friendly infrastructure used by companies across the financial ecosystem.

This is a foundational engineering role on a lean, ownership-driven team where engineers help shape architecture and product direction.

You’ll work across systems that power real-time financial data delivery, including backend services, data infrastructure, and cloud architecture.

Some of the work includes:
• Building backend services in Ruby, .NET Core, and Python
• Contributing to real-time exchange data pipelines
• Designing and scaling AWS infrastructure (EC2 autoscaling, ECS/Fargate, RDS, Lambda)
• Working with core data systems like Postgres, Redis, Snowflake, and S3
• Improving CI/CD pipelines using GitHub Actions and CircleCI
• Designing and optimizing APIs that deliver financial data at scale
• Supporting DevOps, reliability, and performance improvements

Our stack spans Ruby, .NET Core, Python, Vue.js, AWS, Postgres, Redis, Snowflake, and modern CI/CD tooling, so curiosity and the ability to move across systems matters more than deep specialization in one language.

To apply, email: rcarpenter@intrinio.com
by Esophagus4 | 2026-03-12 17:47:38+00:00
> If Geico was opening a new machine learning division to do some really interesting work on the probably shitload of actuarial data they've built over the years, maybe someone from anthropic would be interested in that

But they’re not. And they won’t. And that is my point. They’d make a ML Engineer post on LinkedIn and get a bunch of people for whom Geico would be a step up.

There will never be a job opening from Geico that someone at Anthropic would apply to.

That’s my point - your pool will always be people who are in a worse position than your job. Being laid off is a worse position than a job.

You’ll never see Anthropic candidates in a Geico hiring pool, unless they were laid off for being lousy and can’t find anything else.

The market is pretty efficient - people wouldn’t bid for jobs that are worse than their current situation.
by philipkglass | 2026-03-12 17:47:49+00:00
My fantasy road-not-taken for IPv4 is one where it originally used 36 bit addressing like the PDP-10. 64 billion addresses would be enough that we probably wouldn't have had the address exhaustion crisis in the first place, though routing would still get more complicated as most of the world's population (and many devices) started communicating over IP networks.
by heraldgeezer | 2026-03-12 17:47:53+00:00
Most companies are definitely NOT using Yubikeys. Did you work for Google? Nice man :)

MFA in general had to be forced on companies, and then it is most often in software on a phone.

Here are some rough numbers.

google_workspace:
total_active_users: "3 billion (includes free/consumer Gmail)"
paid_business_customers: "11 million companies (2024)"
paid_customer_growth: "+1 million companies in under 1 year (2023-2024)"
global_business_market_share: "~50%"
fortune_500_presence: "minority share, weaker than Microsoft in enterprise"
mfa_with_yubikeys:
internal_google_employees: "100% use hardware keys (Yubikey/Titan) — since 2017"
fido_u2f_origin: "Google co-created U2F standard with Yubico post-Operation Aurora"
estimated_user_adoption_pct: "~1-3% of all Workspace users (inference, not published)"
concentration: "Highest in finance, government, tech/security-conscious orgs"
typical_majority_mfa_method: "TOTP apps (Google Authenticator) or SMS"
enterprise_passkey_deployment_2025: "87% of US/UK enterprises deploying or have deployed passkeys (FIDO Alliance — includes all hardware key types, not Yubikey-specific)"

microsoft_365:
total_active_users: "~270 million (commercial)"
paid_business_customers_us: "~1 million active US business customers"
us_company_penetration: "~3% of all US companies"
global_business_market_share: "~45%"
fortune_500_presence: "~75% of Fortune 500"
mfa_with_yubikeys:
exact_stat_available: false
note: "Same data gap as Workspace — no published breakdown"

caveats:
- "Google's 3B user figure conflates consumer and business — not comparable to Microsoft's 270M commercial figure"
- "Market share figures vary by methodology (seats vs revenue vs orgs)"
- "Yubikey adoption % is an industry inference; treat as directional only"
- "Passkey != Yubikey — FIDO Alliance 87% figure covers all FIDO2/passkey methods"
by mlhpdx | 2026-03-12 17:47:58+00:00
Is it a long tail? Let's take me, because I know the subject well.

I have poor working memory. Very poor, insomuch as I have to type six digit codes in blocks of three.

I can write, of course, and sometimes well. But technical writing requires maintaining both detail and thread and I cannot do both in a sustained way. For a short comment, I'm usually okay. For anything longer, not so much.

Is the long tail the whole beast? I think yes.

So I write shorthand and use tools to help me, and yes the results aren't always perfect -- but they are my thoughts embodied.
by heraldgeezer | 2026-03-12 17:47:59+00:00
So, you believe the Iranian state numbers?

>The US-based Human Rights Activists News Agency reported Tuesday that at least 6,126 people have been killed, including 5,777 protesters, 214 government-affiliated forces, 86 children and 49 civilians, based on verified reports from its network of activists inside Iran.

>Iranian state television reported last week that 3,117 people were killed during the demonstrations, with the Martyrs Foundation stating that 2,427 were civilians and security forces. Authorities have labelled remaining casualties as "terrorists".

>However, Time magazine on Sunday cited two senior Iranian health ministry officials saying at least 30,000 people had been killed in street clashes across Iranian cities. The Guardian reported a similar figure of 30,000 deaths on 7 January, citing its sources, and added that a large number of people had disappeared.

https://www.euronews.com/2026/01/27/iran-protests-death-toll...

So just say you are full throated on the side of Iran.

I for one, am on the side of the West.
by hyperhello | 2026-03-12 17:48:28+00:00
I love the small effects, but this is actually less efficient in the large. A power grid still has to exist, and that means transformers blow and trees knock down wires, and you are going to be billed for that. It's not that different from using a septic tank to get off the sewage grid; you might not appreciate when your neighbors all do it too.
by twosdai | 2026-03-12 17:48:37+00:00
In this regard, the company cannot be created where there is not a single person tied to it, at least legally, even shell corporations have a person on the record as being responsible. So there needs to be some human that is apart of it, and in any "normal" organization if there is a person tied to the outcome of the company they presumably care about it and if the AI 99.99% of the time does good work, but still can make mistakes, a person will still be checking off on all its work. Which leads to a system of people reviewing and signing off on work, not exactly a fully autonomous firm.
by blnlx | 2026-03-12 17:48:43+00:00
I suspect it’s mostly a naming convention. Wars are often labeled after the territory where the fighting occurs rather than the actors involved. That’s why we say “Ukraine war” or “Iraq war,” even though multiple states may be involved.

In this case, “Iran war” is a bit misleading because the conflict is largely a missile and proxy confrontation affecting several territories (Iran, Israel, and parts of the Gulf), not just one battlefield.

Personally, I find it clearer to name conflicts after the primary actors involved. For example:

Russia–Ukraine war
U.S. & Israel–Iran war

That makes the participants explicit instead of implicitly framing the war around a single country or location.
by lamontcg | 2026-03-12 17:48:48+00:00
This thread is literally doing nothing.

Nobody is going to stop using grammarly extensions to post to HN, nobody is going to be able to detect its usage.

This thread just lets a certain kind of people put on their best condescending hall-monitor voice and lecture other people about how they should behave.

And the rule is arguably less useful than speed limits and will be broken about as often (at least speed limits have a very real link to physical safety via kinetic energy).
by Razengan | 2026-03-12 17:49:00+00:00
> I'm sure they didn't want to provide an Apple sign in option at all

But they wanted to provide a Google Sign In? wth?

> This is great for privacy but means the service has the wrong email.

So harm the users to benefit the service? wtf?

I don't want to give my real email or anything to random services, specially not one like Claude where they don't even let you remove your payment info.
by nerdjon | 2026-03-12 17:49:03+00:00
They could also just implement sign in with apple on their website, they have the ability to sign in with google so not supporting Apple is still a weird choice they are making.

Apple should not have had to require developers to have options other than Google for authentication, but clearly some companies have to be dragged kicking and screaming.

So clearly they support it, and there is no reason it should not work on the web also.
Ask HN: Why is my submission not visible if I am not logged in?
by beepbooptheory | 2026-03-12 17:49:48+00:00
I posted an article earlier, but I just noticed when not logged in on another computer that it is as if I never posted it. It's also didn't seem to be indexed as you can't search for it.

It's not a dupe, its from a news website that is often posted on here (I discovered them through HN!), and is clearly pretty relevant to tech.

I am honestly fine if everyone just wanted to downvote it and remove it from HN, but at least can I just see that this happened? Am I missing something? Really not trying to complain about censorship (not trying to kid myself there), but more just a meta note. I feel like in the past I would see that it was flagged and removed, or a dupe or otherwise. Just at least tell me stuff like this isn't welcome here, you don't even need to give good reason!

the article I posted: https://www.404media.co/ai-is-african-intelligence-the-workers-who-train-ai-are-fighting-back/

this is the post itself, but it looks like only I can see it: https://news.ycombinator.com/item?id=47353019
by lancetipton | 2026-03-12 17:50:27+00:00
Im literally working on the exact same solution. Difference is I'm running the system in a Kubernetes cluster.

I essentially run a sidecar container that sets up ip tables that redirect all requests through my mitm proxy. This was specifically required because of Node not respecting HTTP_PROXY.

Also had to inject a self signed cert to ensure SSL could be proxied and terminated by the mitm proxy, which then injects the secrets, and forwards the request on.

Have you run into any issues with this setup? I'm trying to figure out if there's anything I'm missing that might come back to bite me?
by prmph | 2026-03-12 17:51:19+00:00
> Yes, the Neo has a faster CPU but it also has less RAM and less storage and costs more and has less ports.

8GB on Apple Silicon is far better than 16 GB on Wintel, and I don't event trust the quality of 16GB of RAM on a bottom of the barrel Windows machine.

Would you prefer a machine that is still around 7 years from now with less ports, or one with more ports that you have to replace in 2 years? Yes it is more expensive now, but over 7 years it is an absolute bargain.
by panditaditya21 | 2026-03-12 17:51:30+00:00
I built Kaida Shield because autonomous AI agents need dangerous permissions to be useful — file access, network requests, code execution — but nothing monitors what they actually do with those permissions at runtime.
The problem: every individual action an agent takes looks legitimate. Open a file? Fine. Make a web request? Fine. Run a command? Fine. But the sequence "scrape personal data → generate content → publish it publicly" is a pattern no single-action firewall catches. By the time you notice, the damage is done.
Kaida wraps any AI agent process and monitors its behavior against a policy you define. Describe what your bot should do in plain English ("check LinkedIn for jobs, save results to a spreadsheet, nothing else"), and Kaida generates behavioral rules. If the agent deviates — accesses a domain not in the policy, writes to a file outside allowed paths, spawns an unexpected subprocess — Kaida freezes the process (SIGSTOP, not SIGKILL) and prompts you. Your work is preserved.
What it catches today: unauthorized network access, file system violations, phishing URLs, reverse shells, prompt injection patterns, crypto miners, anomalous looping, rate spikes, and token burn.
What it doesn't do: inspect encrypted payloads (sees destinations, not content), monitor internal LLM reasoning, or detect novel zero-day behavioral patterns.
Works with any Python-based agent framework (OpenClaw, LangChain, CrewAI, AutoGen, custom). All detection is deterministic — no LLM in the monitoring pipeline, so the monitor itself can't be prompt-injected.
pip install kaida-shield
kaida demo (shows 16 live detection scenarios)
kaida ui (web dashboard for non-technical users)
Free. Apache 2.0. Windows/Linux/macOS.
https://github.com/ajpandit775/kaida-shield
by esseph | 2026-03-12 17:51:39+00:00
Not until power access/generation is MUCH cheaper. Long, long, long way off.

If I can run 50,000 fixed tasks that cost me $0.834/hr but OpenAI is costing $37/hr and the automation takes 40x as long and can make TERRIBLE errors why the fuck would I not move to the deterministic system?
by alfanick | 2026-03-12 17:51:53+00:00
Not bad, almost checks all the marks I want. A) Good quality, locally run model, and surprisingly fast and working on my CPU. B) It transcribes after the session is finished (aka stopped push-to-talk, or after stopping the listening). C) Ha nice, post-processing. D) Still not solved, truly realtime transcription with latency hiding - start typing as soon as you recognize sounds (or after some logical pause, i.e. at the end of sentence). E) Written in Rust, with web-browser config ui. F) Global shortcuts are super finnicky, doesn't recognize my default "Mic" button, fair enough, let me remap to some unused F24... Doesn't recognize F24 due to missing keycode.

It's there, doesn't feel native though. Good integration, not great though (Linux Mint/Cinnamon).
Show HN: HCAP – Agent-to-agent (A2A) negotiation
by krishnamzg | 2026-03-12 17:52:10+00:00
I built an open protocol where AI agents negotiate
against each other autonomously. Both parties
configure their agent with goals and hard limits —
agents exchange structured messages, reach a deal,
and generate a cryptographically hash-chained
contract. No human negotiation required.

Two surfaces built on the protocol:
- Private rooms (1-on-1, invite via link)
- Public marketplace (persistent listing agents
that negotiate with every incoming buyer)

Stack: Node.js, WebSockets, Supabase, React.

Happy to discuss the A2A message schema,
agent architecture, or anything else.

PH Launch: https://www.producthunt.com/products/hcap?launch=hcap