MurphyA/hacker-news huggingface dataset:
by JimDabell | 2026-03-14 09:34:51+00:00
Actions speak louder than words. They’ve added features that help spammers hide their behaviour, they are rejecting API keys when people apply for access to deal with the bot problem, they ignore subreddits with spam-friendly moderators, and they ignore reports on vote manipulation. There’s a tonne of low-hanging fruit for tackling the bot problem on Reddit that they aren’t doing anything about, and often it seems like people outside of Reddit do a better job without access to the raw data than people inside Reddit do with the raw data.

I know they claim to care about the bot problem, but they appear at absolute best incredibly complacent about it, if not complicit. All those OnlyFans spammers, AI spam bots, etc. are engagement. They are ruining the platform for people, but engagement figures don’t distinguish between fake engagement and real people. The outcome of their current behaviour is for engagement to steadily rise while the value to real people steadily falls. It’s like they want to be the poster child for Dead Internet Theory.
by sofixa | 2026-03-14 09:37:20+00:00
> The way I'm used to this sort of thing happening is some company brings in a new proprietary standard, makes bank, then all the competition bands together to form an open standard to try and stop them. There is a bit of a tick-tock feeling as consortiums use more open and accessible standards to slowly lever power away from incumbents.

And that leaves you with two standards (at least), non interoperable between them. In the case of hardware this can be really annoying, constraining and inefficient both for consumers and at large.
by superjan | 2026-03-14 09:37:30+00:00
On Apple silicon, Parallels can’t run x64 windows, it is using the ARM version of Windows. The x64 emulation is provided by Windows. Of course this is inefficient, but not everything is automatically 2x slower: any OS code you invoke is not running as x64 emulation, and IO and memory access is not penalized by the emulation (but certainly somewhat from virtualization). I was pleasantly surprised how fast you can run x64 windows apps.
by ErroneousBosh | 2026-03-14 09:38:17+00:00
> The invisible code is rendered with Public Use Areas (sometimes called Public Use Access), which are ranges in the Unicode specification for special characters reserved for private use in defining emojis, flags, and other symbols. The code points represent every letter of the US alphabet when fed to computers, but their output is completely invisible to humans. People reviewing code or using static analysis tools see only whitespace or blank lines. To a JavaScript interpreter, the code points translate into executable code.

Surely the obvious answer is just to strip anything in that Unicode range out?

Why have you even got Unicode in your source anyway?
by zazibar | 2026-03-14 09:39:32+00:00
>I think though that the day is coming where I can trust the code it produces and at that point I'll just by writing specs. It's not there yet though.

Must be nice to still have that choice. At the company I work for they've just announced they're cancelling all subscriptions to JetBrains, Visual Studio, Windsurf, etc. and forcing every engineer to use Claude Code as a cost-saving measure. We've been told we should be writing prompts for Claude instead of working in IDEs now.
by lb1lf | 2026-03-14 09:39:38+00:00
Just so.

The advantages of vinyl are basically making up for lack of self-discipline in humans. (I much prefer vinyl for that precise reason!)

a) Since putting it on becomes more of a ritual - handling the album carefully, brushing off lint, placing the needle &c - I find I make more of an effort to actually _listen_ to the music I put on. I could listen as intently to Spotify or Tidal, too - but, alas, I most often don't.

b) Seeing as you'll get some 20-odd minutes of music before having to make another choice - be it playing the other side or another album entirely - it enforces having to decide on what you'd like to listen to, rather than just letting your streaming service of choice play things it thinks you may like. (That being said, streaming services are a great way to explore new music!)

c) Given the economics of streaming, buying physical media helps both the record stores - a good one is like an excellent library, in which the librarians give you all sorts of curated recommendations for things you may like, in addition to being great social meeting places with like-minded folk - and performing artists alive; I've no idea how many hours I would have to listen to an artist on Spotify before the payout is equal to their takeout from a single vinyl sale...

d) Besides, it is cosy.

That being said, you could easily DSP CDs or streaming to sound like vinyl if that's your idea of fun - just about any playback format is superior sonically to vinyl. However, to many, it is the whole ritual of putting on a record which basically makes it worth the sonic tradeoffs... (Call me a luddite if you like!)
by adrian_b | 2026-03-14 09:40:53+00:00
While this is equivalent with "gets cold as well as hot", there is a critical difference.

Modulating the infrared emission by cooling and heating a body is slow, so the transmission rate is low and it is also easy to detect, because any infrared detector will show pulsed infrared light.

The whole point of the article is that they have found a method for modulating the infrared emission that is much faster than cooling and heating, so because the modulation frequency is so high any normal infrared detector will not see anything, it would just detect the normal infrared emission that corresponds with the ambient temperature.

They exploit a phenomenon that exists in infrared LEDs made for a low frequency (high wavelength), which when biased forward emit infrared light, like any LED, but when biased backward the reverse happens, i.e. their infrared emission is lower than it should be for a black body at ambient temperature, because a part of the thermally emitted photons are reabsorbed by the semiconductor, generating electron-hole pairs that are separated by the electric field, being thus prevented to recombine and emit again a photon.

Because the increases and decreases in infrared luminosity are done by changing the bias voltage of a LED, they can be done orders of magnitude faster than by cooling and heating.

I do not know whether this proposed application in steganography would ever be worthwhile, but this is certainly a very cool development.
by genezeta | 2026-03-14 09:41:27+00:00
If you think you have got a valid complaint, you shouldn't submit it here. You should instead contact hn@ycombinator.com, as seen in the footer below.

But "Show HN" has seen its use restricted for new accounts because of the large influx of spam on the site lately. So you probably can't do much.

Consider reading the guidelines: https://news.ycombinator.com/newsguidelines.html
by jason_oster | 2026-03-14 09:42:04+00:00
Absolutely not. GPL is freedom for the authors. The end users have conditions they must meet to use the software. Those conditions are restrictions. That is precisely the opposite of freedom for end users.

To anticipate objections, the conditions keep the software "free for everyone", which is true. But that's still explicitly freedom for the authors. The conditions preemptively eliminate end users who would otherwise find the software valuable. Because it is not freedom for end users.
by poisonarena | 2026-03-14 09:42:34+00:00
i got it, i was unfamiliar with the concept.

I love it, its now my homepage. Very relaxing.. I have one suggestion, if there was a way to stop the feed when I want to take a break, because if I pause the video, it starts again after a few moments.

You did a great job, and I hope you expand this project, also I love the 'your advertisment here'
by vpmadd52huq | 2026-03-14 09:42:43+00:00
I've always wondered why humans seem to be unable to visualize four-dimensional objects in their heads.

When discussing this with others, the arguments often revolve around the fact that as we experience our reality in 3D, there should be no reason for us to be able to visualize anything in a higher dimension.

This argument seems like an arbitrary limitation of the human mind, which I don't think holds up. It is sometimes associated with our inability to think of new colors, but I think this is a completely different problem.
by SilverElfin | 2026-03-14 09:42:50+00:00
A 10 year old can’t own an AR-15 in many states. But I agree that a 10 year old has 1A rights. The problem is that the Supreme Court shocked everyone when they recently ruled that age verification for porn is legal in a case against the state of Texas. That now has opened the flood gates for more states to violate civil rights.

https://techcrunch.com/2025/06/27/scotus-porn-ruling-opens-d...
by simianwords | 2026-03-14 09:43:12+00:00
>Hooking up to and generating calls across filesystem APIs cost multiple orders of magnitude more than calling `ls`. These tooling ideas are interesting, though. Maybe Kenneth_E._Iverson was right all along?

I don't think you understood what the idea was. Its not about calling `ls` vs not. I don't think UNIX commands are going away (or at least deterministic calls).

Its the interface itself that would go away. We won't work on terminals but some other interface which would use commands internally.
by throwaw12 | 2026-03-14 09:43:28+00:00
Corporate lobby should be treated as bribing the politicians.

In ideal world (where we don't live), some of the primary goals of corporations and governments contradict to each other (and there is another body):

* Corporations - maximum profit at all cost to its shareholders

* Government (I mean the ideal one) - prosperity for its citizens

* UN - prosperity for the world (because governments can achieve prosperity for own citizens by exploiting other government citizens)

When they have contradictory goals, lower in the chain should not drastically impact the higher body's goals.

Corporate lobby is doing it, hence US is moving towards feudal system. Because corporations wants to exploit people at maximum speed and squeeze everything, but do not want to take the responsibility for nurturing the people.

Here is how it looks like:

* You hire Sr eng, squeeze max out of them, lay them off
* Demand government to have better education, so it can squeeze out next
* Stop unionization at all costs
* now we are seeing this with Junior positions, no one wants to nurture and grow them, everyone wants Sr+ engineers
by olejorgenb | 2026-03-14 09:44:21+00:00
> So it seems to me like the problem isn't Bluetooth, it's shitty implementations of it.

Perhaps, but it kinda seems to me that there must be some inherent limitation of the standard which make it particular hard to create a high-quality experience?

The latency for instance - in my (somewhat limited) experience audio over BT does not sync perfectly with video.

The channels/codecs is/was so limited in bandwidth that until recently (few years back IIRC) headsets couldn't even send and receive decent quality audio at the same time. Even recent headsets like the Shokz Openrun Pro 2 has this limitation. (Which you could argue is an instance of "shitty implementation" since it was released after the availability of necessary tech (LE/LC3))
Show HN: AgentArmor – open-source 8-layer security framework for AI agents
by AgastyaTodi | 2026-03-14 09:44:36+00:00
I've been talking to founders building AI agents across fintech, devtools, and
productivity – and almost none of them have any real security layer. Their agents
read emails, call APIs, execute code, and write to databases with essentially no
guardrails beyond "we trust the LLM."

So I built AgentArmor: an open-source framework that wraps any agentic
architecture with 8 independent security layers, each targeting a distinct attack
surface in the agent's data flow.

The 8 layers:
L1 – Ingestion: prompt injection + jailbreak detection (20+ patterns, DAN,
extraction attempts, Unicode steganography)
L2 – Storage: AES-256-GCM encryption at rest + BLAKE3 integrity for vector DBs
L3 – Context: instruction-data separation (like parameterized SQL, but for
LLM context), canary tokens, prompt hardening
L4 – Planning: action risk scoring (READ=1 → DELETE=7 → EXECUTE=8 → ADMIN=10),
chain depth limits, bulk operation detection
L5 – Execution: network egress control, per-action rate limiting, human
approval gates with conditional rules
L6 – Output: PII redaction via Microsoft Presidio + regex fallback
L7 – Inter-agent: HMAC-SHA256 mutual auth, trust scoring, delegation depth
limits, timestamp-bound replay prevention
L8 – Identity: agent-native identity, JIT permissions, short-lived credentials

I tested it against all 10 OWASP ASI (Agentic Security Integrity) risks from
the December 2025 spec. The red team suite is included in the repo.

Works as: (a) a Python library you wrap around tool calls, (b) a FastAPI proxy
server for framework-agnostic deployment, or (c) a CLI for scanning prompts in CI.

Integrations included for: LangChain, OpenAI Agents SDK, MCP servers.

I ran it live with a local Ollama agent (qwen2:7b) – you can watch it block a
`database.delete` at L8 (permission check), redact PII from file content at L6,
and kill a prompt injection at L1 before it ever reaches the model.

GitHub: https://github.com/Agastya910/agentarmor
PyPI: pip install agentarmor-core

Would love feedback, especially from people who have actually built production
agents and hit security issues I haven't thought of.

TAGS: security, python, llm, ai, agents
by spondyl | 2026-03-14 09:44:36+00:00
This is a "productionisation" of the same content discussed here: https://news.ycombinator.com/item?id=47362528

I would caution readers to do their due dilligence as the presentation may be fancy but that should not immediately translate into a signal of quality in itself given the author has disclosed using Claude Code for a chunk of this work.

While I won't outright discount the findings (as there is "too much" to reasonably verify), there are a few oddities around the source repo such as errors where Claude has tried to access sources, been denied and then noted as much or where it has seemingly fetched incorrect files and tried to interpret them (https://github.com/upper-up/meta-lobbying-and-other-findings...)

I am not under the immediate impression that the author has done thorough due diligence rather than just offloading that to readers by saying "You can just check the sources yourself"
by spacedcowboy | 2026-03-14 09:45:07+00:00
Oh, I’ve already left. I did that when a US hospital decided my wife’s life was less important than how much money they could make from an ER bed… [1]

I just thought it was pretty weird to be forced to become a citizen, just so I could leave the country without paying 23.8% of my entire net worth, including future income on things like investments, 401k, etc - all in one lump sum. Like that is even possible unless you’re stupid-rich and money doesn’t matter.

So I’m one of very few (I suspect) people in the naturalisation ceremony thinking to myself “fuck you, you motherfuckers, making me implicitly support this shithole of a government” when everyone around me is going nuts about becoming a US citizen…

1: https://news.ycombinator.com/item?id=44217106
by anonnon | 2026-03-14 09:46:48+00:00
> submitted a fix and told them how to and I received a barrage of comments about working for free for a corporation that's making money off me

After it became obvious that 1) these LLMs were trained heavily on OSS, and 2) that they (arguably) wantonly violated the licenses, even the most permissive of which mandated attribution, of the OSS they were trained on, 3) that LLMs could be used to rewrite code licensed with terms deemed unsuitable for certain commercial purposes (e.g., copyleft) to get around those terms, and 4), that these LLMs would ultimately be used to reduce the demand for developers and suppress developer wages (as cost of living keeps rising, and now cost of compute, once deflationary, rising quickly as well), the culture of unbounded enthusiasm for open source amongst devs ought to have quickly been supplanted by one of peer pressure-bordering-on-public-shaming against open source.

Yet people still go out of their way to open source things, or work on open source beyond the "good citizen" stuff of reporting bugs (possibly with fixes) in things you use.

It really boggles the mind. Even if you can't starve the beast, why willingly feed it, and for free?
by hrmtst93837 | 2026-03-14 09:47:18+00:00
The end of terminals has been forecast ever since mouse pointers showed up. If you build any nontrivial workflow across weird infra and hairy edge cases, GUIs locked to whatever version of "AI assistant" they're pushing will either make you faster or block you until you rage-reopen a shell.

I think there will always be a class of tool for users who want escape velocity from vendor UX conferences and forced upgrades. The moment sandboxes or walled gardens get in the way of the weird things that keep devs productive, someone will bolt a CLI to the latest AI.
by ssl-3 | 2026-03-14 09:47:32+00:00
That's very succinctly-put. Well done.

Rather less-succinctly: I never got into vinyl and have never owned a turntable that wasn't built down to a price. I do still have my shelves of CDs, and it keeps slowly expanding. I usually listen to Spotify because it is convenient and portable and -- these days -- lossless.

But my sister and her old man have put together a quite decent stereo system with a mix of vintage and modern gear in recent years, and also started a a rather serious vinyl collection. While there's certainly no romance there on my end, it's a lovely and deeply-involving experience to hang out with them in their tiny little city-dweller living room and spin records into the wee hours; sometimes for just one track, and sometimes for entire albums.

I definitely prefer the way my own stereo, which I've built over the course of decades, sounds. It's detailed and big and it does all the things; it is by all technical measures very superior. But we have a lot more fun listening to vinyl at their place than we have playing CDs and Spotify at my place. The process -- and indeed, the inconvenience -- of playing vinyl makes it all much more visceral.
by adrian_b | 2026-03-14 09:48:53+00:00
A lot of spy movies or police procedural movies show someone coming with a magic detector for hidden spying cameras or microphones that is used to sweep a room and remove all offending devices.

The device presented in the parent article would be undetectable by any classic detectors.

However, if such a method would ever become widely used in reality, it would not be difficult to make detectors for it. So it could have a window of opportunity, between the first development of spying devices based on it and the development of countermeasures.
by fsflover | 2026-03-14 09:50:40+00:00
> With Android apps running in little windows (not MS windows). It's amazingly useful, it's a bit like Microsoft's old convergence idea but it actually works.

Can you run ordinary desktop apps though? What is useful about mobile apps designed for a small screen on a big screen? On my phone actual desktop apps (like LibreOffice or desktop Firefox) can be used.
by bobthepanda | 2026-03-14 09:51:51+00:00
Most oil production and refining capacity is east of the Rockies and transported to major population centers using pipelines. The Rockies, Sierra Nevada, etc. make pipelines much more cost prohibitive since you have to pump it over the mountains; trains and trucks are a lot more expensive to use for transport; and tankers would have to use the Panama Canal, which besides being a much longer distance also has usage fees.
by adrian_b | 2026-03-14 09:52:49+00:00
The same is true for any other method of spread spectrum modulation, e.g. for FHSS (frequency-hopping spread spectrum) or for ultra-wideband pulses.

The detection of weak signals requires long integration times, which remove from the output any spread spectrum signal present in the input, unless you know and apply before the integration the correct scrambling or frequency-hopping sequence.
by jwrallie | 2026-03-14 09:53:35+00:00
The peer review paper requirement puts you in a situation where if your topic of research happen to not be interesting for the reviewers (that you have no control over), you can be a talented student that worked very hard and still fail due to being out of time after multiple successive rejections.

Your supervisor may not understand this until it’s too late, and you may not have the ability to judge your adviser's ability to do so until you are committed.

The main problem is that you were raised in a school system where if you show up, study and do your assignments you are pretty much guaranteed to succeed sooner or later. A PhD is not like that.
by jahnu | 2026-03-14 09:54:06+00:00
I tried the Apple one for a while but it’s badly shielded and picks up interference a lot. I mean really obvious buzzing sounds if near certain sources of RF. Switched to wired ear buds with a lightning connector and no interference issues. So I’m sad I can’t plug in my high quality headphones or hook up my phone to my mixer when I want without having noise.
by Springtime | 2026-03-14 09:54:39+00:00
Also not really a fan of the 'what they're hiding from you' tone it takes (even if that's the subject), like saying that because a website was made less than 100 days before a bill was signed it was a '77-day pipeline' to the bill (which jumped out as a dramatized rephrasing and not present in the original Reddit post).

It also doesn't inline link sources, like the Bloomberg article it mentions (this[1]). A more impartial voice and linked citations to allow quick reference would raise fewer red flags, even if the goal is worthwhile.

[1] https://www.bloomberg.com/news/articles/2025-07-25/meta-clas...
by lukan | 2026-03-14 09:54:46+00:00
"This argument seems like an arbitrary limitation of the human mind, which I don't think holds up. "

And why not?

Evolution did not reward us for thinking about spaced out concepts, but for coming up with new ways to get food, outsmart the prey, build tools.

That thinking in 4D is helpful for building tools is a new thing so we evolution did not optmized for it (yet).
by bombashell | 2026-03-14 09:55:20+00:00
Hi HN, Kevin here founder of GitPulse

What is it?

I built GitPulse, a tool that turns your GitHub activity into clean, embeddable badges and developer/repository profiles to show the real "pulse" of your projects.
To avoid subscription fatigue, the pricing is straightforward.

Pricing:

1. Free Tier: For public profiles, showing your last 365 days of activity.

2. Pro ($9 Lifetime Deal): A single payment for automated syncs, private repo support (with optional anonymization), and commit classification. No monthly fees.
by gucci-on-fleek | 2026-03-14 09:55:23+00:00
Yes, you can simultaneously use full-quality source and sink (speaker and microphone) streams [0]. And from personal experience, this works exactly as you would expect.

As you've seen, the documentation on LE Audio is rather horrible. The Android documentation [1] is semi-useful even on other platforms, and the official book [2] is also helpful if you're willing to wade through a ton of dense technical details, but there's not really much else available on the internet. I've had to spend an annoying amount of time tracing stuff with Wireshark and reading through the specifications [3] (which are thankfully free) and the BlueZ source code [4] to figure stuff out.

(The poor documentation mostly only matters if you're trying to do something specific; LE Audio mostly "just works" on Android out-of-the-box and Linux after you change the single config setting from [0])

[0]: https://www.collabora.com/news-and-blog/blog/2025/11/24/impl...

[1]: https://developer.android.com/develop/connectivity/bluetooth...

[2]: https://www.bluetooth.com/wp-content/uploads/2025/01/Introdu...

[3]: https://www.bluetooth.com/specifications/specs/

[4]: https://github.com/bluez/bluez/