MurphyA/hacker-news huggingface dataset:
by chrismorgan | 2026-03-09 07:08:56+00:00
> In October 2023, Tile sent to all accountholders […] an email with the heading “Updated Terms of Service and Privacy Policy” […] to the email address provided by accountholders during registration, […] “[i]f you continue to use any of [Life360 and Tile’s] apps, or access our websites (other than to read the new terms) on or after November 26, 2023, you are agreeing to the [Oct. 2023 Terms].”

> Broad did not locate the Oct. 2023 Notice until January 2024, when she affirmatively searched for the email and found it in her spam folder. […]

> Doe “never knew that Tile sent” the Oct. 2023 Notice and so never “read any revised or updated Terms.”

> The district court held that neither Broad nor Doe assented to the Oct. 2023 Terms.

So then it was challenged, and the appeals court gets into the weeds: were the Appellees “on inquiry notice of the Oct. 2023 Terms”? (“Inquiry notice” is clearly a specific legal term, I can’t comment on its precise meaning.)

The entire thing seems to hinge on whether appropriate notice was given: it seems to be accepted by all parties and case law that “continuing to use after such-and-such a date implies consent” is okay. (This is explored at the end of the document: simply using the app is treated as “unambiguously manifesting assent”, presuming inquiry notice.)

The court decides: yes, it was sent in the appropriate way and clearly marked and described. And

> Although the email did not say specifically that the arbitration agreement would be updated, reasonable notice does not require the email to discuss every revision.

They do say

> Tile could have done more to ensure that all its users were on inquiry notice of the Oct. 2023 Terms. Tile could, for example, have interrupted users’ next visit to the Tile App with a clickwrap pop-up notice. […] Because Tile should have known that at least some of its users do not closely monitor email, […] and Tile should have furnished additional notices, this factor weighs against finding inquiry notice.

They conclude: two factors for, one against, and thus determine that inquiry notice was received, although Tile didn’t handle things properly themselves, and should have done more.

But they avoid setting this as universal precedent:

> Evaluating whether inquiry notice has been established is, however, always a “fact-intensive analysis,” […] and we do not hold that notice by mass email establishes inquiry notice in every case.

—⁂—

This is my interpretation from a brief read of this interesting-sounding document. I’m neither a lawyer nor American. My understanding is almost certainly incomplete. I think I have avoided inserting any interpretation of my own, others can do that.
by handoflixue | 2026-03-09 07:09:08+00:00
>> You'd think a case hinging on a crucial email being sent into spam would at least mention that fact more than once?!

> Broad did not locate the Oct. 2023 Notice until January 2024, when she
affirmatively searched for the email and found it in her spam folder.

I think it's rather relevant that she affirmatively searched for and found the email?
by soohamr | 2026-03-09 07:09:16+00:00
I inherited a stake in a pyridine derivatives manufacturing factory - while I do not know much about chemical feedstocks and the chemical supply chain, I am trying to help the current partner optimize their yields and reduce losses across multiple stages of reactions across the feedstock and reagents. It is quite similar to hardware design and electrical engineering than I thought.

I have also taken an interest in learning distributed paradigms like MPI and am using it on my own cluster of rPis
by an_am | 2026-03-09 07:09:19+00:00
Screenleash.com: A personal project that deducts money from my bank if I spend more than the allocated time on specific websites. I have already spent around $60, but it has definitely reduced the time I spend playing Smashkarts and on Instagram.

Yes, I got addicted to playing Smashkarts (over 2 hours/day). Now it is capped at 30 minutes.
by void_ai_2026 | 2026-03-09 07:09:23+00:00
The historical analog here is worth looking at carefully.

This +82% move from Jan baseline ($60→$109) is most similar to 1990 Gulf War in magnitude (+90%), not 1973 or 1979. The 1990 shock lasted ~6 months and produced an 8-month recession + 6.3% peak inflation.

But there are two structural differences that make 2026 potentially worse:
1. Starting position: in 1990 inflation was already 5%+ and the Fed had room to ease. Today the Fed has been trying to normalize for 3 years.
2. Fertilizer: the Gulf isn't just oil. It's where ~25% of seaborne ammonia/urea moves. Gas feedstock shock → fertilizer cost explosion → food inflation on 3-6 month lag. The 1990 shock didn't have this because Hormuz closed briefly and the fertilizer supply chain wasn't as Gulf-dependent.

At $109 sustained for a quarter, models using published RBC/Oxford/IMF parameters project: US CPI to 7.6%, global GDP to 1.8%, Fed forced to hike into a near-stall economy.

The word "stagflation" keeps appearing in headlines but the mechanism usually isn't spelled out. The mechanism here is: oil → input costs → CPI → Fed hikes → credit tightens → investment falls → GDP sinks. Meanwhile oil → food → real wage squeeze. Both channels active simultaneously.
by Shank | 2026-03-09 07:09:57+00:00
> The problem is that the majority of people who used to visit websites just ask LLMs nowadays.

I truly do not believe this is the same type of topic. People visit websites and RSS feeds and writers they care about, and don't ask LLMs for this content. They ask LLMs for content that they don't care about those elements for.

If I want to know what Gruber thinks about iPhone whatever, I'm just going to check Daring Fireball. I'm not going to ask Claude what Gruber thinks.
by sentinel_ai_act | 2026-03-09 07:10:03+00:00
Hi HN,

I’m building Sentinel, an independent engineering project focused on the technical requirements of the EU AI Act.

Most compliance tools today are LLM-wrappers. The problem is that LLMs are non-deterministic—using an LLM to audit another LLM for legal compliance creates a circular dependency that doesn't hold up under technical scrutiny.

Sentinel follows a 90/10 Radical Efficiency rule: 90% of the audit is handled by a deterministic engine (Regex, Tree-sitter, and WebAssembly) that runs at $0 computational cost. We use AI only for the remaining 10% of high-level reasoning.

The Baseline Audit:
I recently ran a baseline audit on 265 major AI repositories (including vLLM, Dify, and Microsoft OSS components). Most scored 100/100 on our Risk Scale because they lack an automated "Technical File" (Article 11) or verifiable audit trails.

Technical Stack:

Privacy-First: The core binary is compiled in WASM. It executes locally in your GitHub Actions runner. Your source code never leaves your infrastructure.

Edge-Native: We use Cloudflare D1 for the immutable ledger and Workers for the signed integrity reports.

Artifact-Based: It turns Article 11 compliance into a standard build artifact (a signed JSON/Markdown file).

I’m moving away from the "SaaS subscription" model towards a "Sovereign Asset" approach—the logic is compiled, the execution is local, and compliance is a deterministic outcome of the build process.

I’d love to hear your thoughts on using WASM for local regulatory auditing.
by gosub100 | 2026-03-09 07:10:29+00:00
The manufacturers should respond with capitalism:

- offer a locked and unlocked version and let the free market decide which is preferred. Provide an unlock option that divorces the device from corporate control and release the hardware to the customer (i.e. a MacBook that can be unlocked and put Linux on, but can never be used for macos again)

- subject to FTC anti-monopolistic regulations just like other industries. In some alternate universe, the FTC decided that sony should not have a monopoly on PS5 games, and competitors should have the ability to enter the market. This is the converse to unlocking, although competitors would still be bound to preventing copyright infringement.
by pinkmuffinere | 2026-03-09 07:10:40+00:00
> it is quite another to allow others to derive some sort of satisfaction from that punishment

I sometimes see this behavior in close friends, and it totally changes the way I see them. I don't know if it's a moral failing on their part, but I just don't experience the desire for vengeance the same way they do, and it really scares me to see how they experience it. What will they do when they start to have mental decline, and (wrongly) decide they were wronged in some way? :(
by gf000 | 2026-03-09 07:10:57+00:00
The key point is that there has to be a slow vertical panning happening as actual content. If that happens, then the on-disk representation of a color channel can end up physically below/above what happens before/after in the movie, drawing out the "actual content". This is why end credits were the most likely visible artifacts.

One other important aspect is that by changing the angle of lighting, he could basically filter out data at a relevant wavelength.

--

At least that's what I got from the video.
by asimovDev | 2026-03-09 07:10:59+00:00
https://github.com/AzimovParviz/openblaster/tree/qt6

I wrote a CLI utility last year to control my SoundBlasterx G6 DAC (can only control LED colour and EQ bands) without needing to use Creative's windows only program (I am mostly a Mac + occasional Linux) user.

Recently downloaded Qwen3-coder-next 80b model and been vibing with it to introduce Qt6 and write a dead simple (aka ugly) crossplatform GUI to it so that other people can use it on their Macs and Linux machines. Letting a LLM wreak havoc on your project feels bad, I constantly have to reign it in and rollback the repo once it starts looping due to writing something that doesn't compile, making it going back and forth between doing and undoing changes.
by necovek | 2026-03-09 07:11:01+00:00
Having "grown up" on free software, I've always been quick to jump into code when documentation was dubious or lacking: there is only one canonical source of truth, and you need to be good at reading it.

Though I'd note two kinds of documentation: docs how software is built (seldom needed if you have good source code), and how it is operated. When it comes to the former, I jump into code even sooner as documentation rarely answers my questions.

Still, I do believe that literate programming is the best of both worlds, and I frequently lament the dead practice of doing "doctests" with Python (though I guess Jupyter notebooks are in a similar vein).

Usually, the automated tests are the best documentation you can have!
by jval43 | 2026-03-09 07:11:23+00:00
Yes exactly. Although I didn't buy a new guitar, but a dozen tuners. It finally clicked when I got one that was "real time" enough to see how the tuning shifts from high to low. This was before smartphones could do it.

Doesn't help that most tuners are still dog slow, none of the beginners courses properly tell you how the guitar actually works, or what a "chord" really is. They're all just "play this and don't worry about it". To be fair it does get you going.
Show HN: Sentinel – Open-source MCP security scanner (config, probe, container)
by Siri_D | 2026-03-09 07:11:52+00:00
sentinel is an open-source CLI + GitHub Action that scans MCP server configurations, live endpoints, and Docker containers for security misconfigurations. It runs 26 detection rules across 3 modules CFG (static config analysis), PRB (live probe), CTR (container inspection) — and outputs in terminal, JSON, SARIF, or HTML.
It grew out of our work building Helixar, an AI-native endpoint and API security platform. We kept finding the same MCP misconfigs (no auth, wildcard CORS, plaintext secrets) and wanted a lightweight, composable scanner that CI pipelines could actually use.
by piinecone | 2026-03-09 07:12:16+00:00
When I have time between freelance work I make games and tools for myself.

Put One In for Johnny Minn (https://store.steampowered.com/app/3802120/Put_One_In_for_Jo...) - A small soccer game all about scoring nice goals. While I don’t expect it to do well, I’m very happy with how it came out, and it’s the first game I’ve made that I’ll release on Steam! Comes out on Thursday (March 12th).

HeartRoutine (https://www.heartroutine.com/) - I built this a few months ago to help me stay on top of my heart health. I enter my numbers on the (offline) app, and then configure my goals (like “lower Apo B through diet and exercise”), and then the server emails me every morning asking me what I ate yesterday, how I exercised, etc. The goal is to stay on track, and to be able to bring a cardiologist a very detailed report.
by Wilder7977 | 2026-03-09 07:12:31+00:00
This seems completely detached from reality.

For example it ignores the gazillion medium(-like) "articles" that are not much more than the output of a prompt. Here AI is not about style, is about content too. If you open such a post, maybe with the intent of learning anything, and you realize is AI slop, you might close it. Making it harder to recognize is poisoning the well in such cases.
by rs545837 | 2026-03-09 07:12:44+00:00
You're right that "semantic" is doing some heavy lifting in the name. We use it to mean "understands code structure" rather than "understands code meaning." sem knows that something like "validateToken" is a function and tracks it as an entity across versions, but it doesn't know what validation means. For the merge use case (weave - https://ataraxy-labs.github.io/weave/), that level of understanding is enough to resolve 100% of false conflicts on our benchmarks. LLM-powered semantic understanding is the next layer, and that's what our review tool (inspect) does, it uses sem's entity extraction to triage what an LLM should look at.
by hrmtst93837 | 2026-03-09 07:13:26+00:00
Literate programming failed because people treated long essays as the source of truth instead of testable artifacts.

Make prose runnable and minimal: focus narrative on intent and invariants, embed tiny examples as doctests or runnable notebooks, enforce them in CI so documentation regressions break the build, and gate agent-edited changes behind execution and property tests like Hypothesis and a CI job that runs pytest --doctest-modules and executes notebooks because agents produce confident-sounding text that will quietly break your API if trusted blindly.
by summarity | 2026-03-09 07:13:41+00:00
This guys factory is just across the lake from where I live and this is painful to watch. Both Alibaba and the general local industry (metal fabs, train shops, etc) have high degrees of expertise in supply chain verification. You can hire (heck even bribe) experts along the way to reduce fuck ups. The video contained no mention of any audits, any additional paperwork beyond some pictures.

I once had a company that procured very simple electronics (fingerprint readers) from Taiwan and due diligence included travelling there, meeting every single person in the engineering office in person, then touring the contract factory where this would be built, then negotiating shipping and even driver development details.

This took all of one week and the price of a few plane tickets. We didn’t have the cash for professional auditors. In the end we got a product that worked, and even at a lower price (negotiating at a distance is not effective).
by EarthAmbassador | 2026-03-09 07:14:02+00:00
Exactly.

I don't understand how a community such as this, as connected as it is, can't back channel a message to Google brass to do something about these lockouts, which occur frequently and are unnecessary. There is no way Google doesn't know about them.

Gmail is an essential piece of pervasive personal infrastructure, upon which hundreds of millions of people rely. People are losing irreplaceable data for lack of care on the part of Google. The cost of providing a way to prove identity while maintaining security ought to be part of the cost of doing business for Google as it provides Gmail.

Surely there are some Google employees lurking who can chime in on this frustrating neglect.
by nwyin | 2026-03-09 07:14:10+00:00
cool!

anthropic mentions MCPs eating up context and solutions here: https://www.anthropic.com/engineering/code-execution-with-mc...

I built one specifically for Cognition's DeepWiki (https://crates.io/crates/dw2md) -- but it's rather narrow. Something more general like this clearly has more utility.
by throw310822 | 2026-03-09 07:14:10+00:00
Funny though how many are dismissive of trillion-synapses brains that can understand and speak tens of languages, write decent code, discuss history and philosophy, solve math problems...

And then are creeped by 200k neurons that barely find a target when they're told where it is.

You can probably train an ANN with only a few hundred neurons at most to do the same.
by Screen8774 | 2026-03-09 07:14:27+00:00
Respectfully, you don't know what you're talking about. you have no idea who I am and are projecting your opinions of me and my efforts on my project (mostly incorrect). A lot of it seems like an attempt to discredit the project.

Scrutiny is something I come across a lot in the cybersecurity space (as it should be). its encouraged to make sure ideas hold-up. Your pushback here lacks substance.

Links to the technical docs are provided in the post. Feel free to reach out for clarity on the details.
by nottorp | 2026-03-09 07:14:47+00:00
> As a European I'm always baffled how Apple got so much market share among the actual techies and power users in the US. You do it to yourself by buying this stuff. It's for people who don't want to spend one second thinking about actual technical issues.

Why only the US? I'm in Europe and I've switched from Linux to Mac OS as my daily driver when I got tired of waiting for the mythical "linux on the desktop year".

Note that a good part of my career involves arm linuxes for industrial applications so I never actually stopped using linux if i was paid for it.

Mac OS is indeed becoming more and more annoying, but then so is desktop Ubuntu. And Windows is out of the question. I know firsthand, I have a contract for a windows application right now.

If Apple management continues to not take their dried frog pills as prescribed, I will eventually switch back to Linux, but for the desktop I'll probably have to check out some more niche distributions, or at least Debian.

And even then I'll probably keep the macbook pro and switch to Linux only on the desktop machines.
Building a TikZ library for ML researchers
by gvsh_maths | 2026-03-09 07:15:19+00:00
Building a TikZ library for ML researchers — styles, macros, and layout. Tools to make figures like these without starting from scratch each time. Does anyone actually need this? Would love to hear if figure-making is a pain point for you.

https://x.com/gvsh_maths/status/2030896386594783342?s=20
by iknowstuff | 2026-03-09 07:15:24+00:00
So pretty.

> Both adults in a family will now own a car. This is required since there are not other transportation options, and sidewalks are optional.

Is this temporary or are you planning to release it like this? SimCity leaned into euclidean zoning (separate industrial/residential/commercial zones) and pocketable cars which needed no parking, and thus failed to properly showcase how ugly car-centric cities actually are. I’m sure they did it because it made for an easy gameplay loop/balancing but I’d hope we could come up with more realistic and interesting mechanics in 2026
by neya | 2026-03-09 07:16:11+00:00
It would be nice to aggregate all that and put it under a "profile". Kind of like facebook, but your entire profile feed is just the long list of court records, assholery and screw overs for other people. I actually saw a version that someone did for Jack (Twitter's ex founder) a few years ago and it was hilarious but cleverly informative. That's honestly where I got this idea from.
by jtang613 | 2026-03-09 07:16:33+00:00
While the plugins do support the creation of RLHF datasets for model finetuning, the plugins themselves don't currently use a custom-trained model. They support all major LLM providers (including local). I've found that with the right prompts, the frontier models are shockingly effective. And they are progressing much faster than any custom training effort I could shoestring together. As the models improve, the plugins improve.
by bradley13 | 2026-03-09 07:16:58+00:00
IMHO the problem is allowing changes to terms and conditions for existing contracts. If I have a contract with a company, that contract was made under existing T&C. The company should not be able to change those conditions without my explicit permission. Denying me service if I disagree should not be a valid option.

I get this periodically on our overly-computerized car: Here are new T&C, click yes to agree. You can make the screen go away temporarily, but there is no options to say "no, I disagree".
by renegat0x0 | 2026-03-09 07:16:58+00:00
Still working on

- https://github.com/rumca-js/Internet-Places-Database - database of domains and youtube channels

- https://github.com/rumca-js/crawler-buddy - web crawling / web scraping tool

- https://github.com/rumca-js/webtoolkit - web crawling toolki

- https://github.com/rumca-js/Internet-feeds - feeds databse

- https://github.com/rumca-js/Django-link-archive - RSS reader
by ithkuil | 2026-03-09 07:17:17+00:00
I'm pretty sure the vast majority of those convicted are rightfully convicted.

But paint me skeptical as to whether increased use of technology can actually improve the reliability of the proofs.

Imagine a world where deep fakes are much better quality but our system hasn't yet caught up to take that into proper consideration etc.

Serving for life is already a big deal as punishment goes. I'm just asking to not have experimental medical experiments on people. I'm not saying they should walk free
by rixed | 2026-03-09 07:17:20+00:00
Still working on my network monitoring tool.

Since last time, added a "landing-page" kind of website [0], added annotations with BGP events, support for IPv6, and finishing TLS for every communication between probes and central servers.

About to open for beta testers, and still very much interested in comments esp. regarding the UI.

[0]: https://www.cloudywithachanceoflatency.net/
by handoflixue | 2026-03-09 07:17:35+00:00
The argument seems to be that for Broad, there was clear receipt of the email, even if it was delayed by being in the spam folder - we know she found it eventually.

Doe is a bit more interesting, since she re-downloaded the app, and they're saying that in-and-of-itself is sufficiently clear intent/consent to the current Terms of Service

("Doe unambiguously manifested assent to the Oct. 2023 Terms by
downloading the Tile App in March 2024 and using the Scan and Secure feature in
attempting to locate her alleged stalker’s Tile Tracker.")
by gucci-on-fleek | 2026-03-09 07:19:45+00:00
Looks like it only has 6 discrete components [0], and the pinout on the MCU looks like a standard QFP [1] (and everything else is on larger pads), so I think that you should be able to manufacture this using standard production techniques/manufacturers. But I know hardly anything about hardware, so I may be completely wrong here.

[0]: https://github.com/user-attachments/assets/0f7962d5-38e1-4bd...

[1]: https://en.wikipedia.org/wiki/Quad_flat_package
by jeff_antseed | 2026-03-09 07:19:58+00:00
the macOS-only constraint is the biggest blocker for us. most of our agents run on linux VMs and there's basically nothing equivalent -- you end up choosing between full docker isolation (heavy) or just... not sandboxing at all and hoping.

been watching microsandbox but its pretty early. landlock is the linux kernel primitive that could theoretically enable something like this but nobody's built the nice policy layer on top yet.

curious if anyone has a good solution for the "agent running on a remote linux server" case. the threat model is a bit different anyway (no iMessage/keychain to protect) but filesystem and network containment still matter a lot