MurphyA/hacker-news huggingface dataset:
PHP-rnet – a PHP extension that mimics real browser TLS fingerprints
by takielias | 2026-03-12 18:43:20+00:00
I built this after repeatedly hitting bot protection while making HTTP requests from PHP.

Even when copying Chrome headers exactly, some sites still blocked the request.

It turns out many modern bot detection systems fingerprint clients using the TLS handshake rather than HTTP headers.

Most PHP HTTP clients rely on libcurl, which means their TLS fingerprint always looks like curl. This makes them easy to detect.

So I built php-rnet, a PHP extension that can impersonate real browsers at the TLS and HTTP/2 level.

It is built using Rust networking libraries (wreq + BoringSSL) and supports many browser profiles including Chrome, Firefox, Safari, Edge, and OkHttp.

Example:

$b = new RNet\ClientBuilder();
$b->impersonate(RNet\Emulation::CHROME_136);
$client = $b->build();

$resp = $client->get("https://tls.browserleaks.com/json");

To the server this request looks like it came from Chrome.

Blog post explaining the project:
https://tasli.netlify.app/blog/posts/php-requests-dont-look-like-browsers

GitHub repo:
https://github.com/takielias/php-rnet

Curious to hear thoughts from others who have worked with TLS fingerprinting or bot detection.
by cheema33 | 2026-03-12 18:44:15+00:00
> I do not get what's special about banking apps as opposed to online banking.

I use both. In the beginning I used to prefer the web version. I can use my large monitor to see more data and use a full keyboard and mouse. But I have started to use the mobile version more. For Wells Fargo at least, the mobile version is faster to log into because of face ID support. The website requires a lot more clicks and keystrokes. Also, the mobile app makes it easy and possible to deposit checks if and when I get them.
by pibaker | 2026-03-12 18:44:59+00:00
Biden held back arms support for Ukraine on dubious "we don't wanna test Russia's red line" grounds, gave unlimited support a wannabe despot's (Netanyahu's) wars of aggression even as he tried to backstab democracy in the US, arguably also enabling him to start the current situation in Iran, failed to prosecute an attempt to overturn the US election, and stayed in the presidential race for too long when his body and mind was in visible decline.

We wouldn't be having a discussion about the US having a king if Biden's administration was actually competent at doing its job.
by ComputerGuru | 2026-03-12 18:46:11+00:00
Possibly of interest to readers (but not directly competing) is securestore, our open-source, open-protocol, cross-language framework for securely storing secrets and programmatically retrieving them in production: https://neosmart.net/blog/securestore-open-secrets-format/

donet version: https://github.com/neosmart/SecureStore

rust version: https://github.com/neosmart/securestore-rs

(This one is production ready)
by furyofantares | 2026-03-12 18:46:25+00:00
I'm speaking more of excessive headings for small sections, which are themselves just bullet point lists, all of this highly nested. That's the main thing demonstrated in the post here.

The LLM writing is basically infodump. Lists dressed up in different ways (sections, bullet points, nested bullet points, and sequences of "[bold]Blah blah[/bold]: blah blah blah" sentences.
by jcranmer | 2026-03-12 18:46:59+00:00
Pointer provenance is not properly defined in C or C++. (There is a C TS that introduces pointer provenance, but it's not part of the main standard).

The problem of pointer provenance is more finding a workable theoretical model rather than one causing miscompiles on realistic code. While there are definitely miscompiles on carefully constructed examples, I'm not aware of any bugs on actual code. This is in comparison to topics like restrict(/noalias) semantics or lifetime semantics, where there is a steady drip of bug reports that turn out to be actual optimization failures.
by harmmonica | 2026-03-12 18:47:14+00:00
I don't think you're wrong if the following holds true: Before the housing bubble burst, banks lent funds to countless borrowers who couldn't, ultimately, afford their mortgage payments (because the banks didn't do their due diligence when underwriting the loans). This was widespread across pretty much every bank and mortgage banker. Not sure of the actual percentage of borrowers who, when all was said and done, had no business getting a mortgage for a house or condo, but suffice it to say it was well into the double digits percentage-wise (there's much more to this than simply banks and borrowers with Wall St. playing a major role in the collapse, but just keeping things simple).

In this private credit situation the analog for the banks are these private credit funds that have raised the capital they've lent from institutions and high-net-worth individuals (as opposed to banks, which have funds from consumer deposits). The analog to the individual mortgage borrowers from 2008 are actual companies.

To connect the dots, if the private credit funds were like the banks pre-2008, where due diligence was an afterthought, then this could turn out to be similar. So the real question is: are the borrowers (businesses in this case) swimming naked? Or do you believe the private credit funds when they say they actually conducted a good amount of due diligence when extending their loans? Once you know the percent of the companies that are naked you can evaluate whether this could/would end up similar to 2008. Nobody knows that yet, even, I suspect, the private credit funds themselves.
by babypuncher | 2026-03-12 18:47:14+00:00
I would argue we've even already seen this play out with productivity gains across the economy over the last 40 years. The American middle class has been gradually declining since the '80s. AI seems likely to accelerate that trend for the exact reasons you point out.

A lot of people recognize this pattern even if they can't articulate it, and that's why they hate AI so much. To them, it doesn't matter if AI lives up to the hype or not. Either it does and we're staring down a future of 20%+ unemployment, or it doesn't and the economy crashes because we put all our eggs in this basket.

No matter what happens, the middle class is likely fucked, and anyone pushing AI as "the future" will be despised for it whether or not they're right.

Personally, I think the solution here might be to artificially constrain the supply of productivity. If AI makes the average middle-class worker twice as productive, then maybe we should cut the number of work hours expected from them in a given week.

The complete unwillingness of people in power to even acknowledge this problem is disheartening, and is highly reminiscent of the rampant corruption and wealth inequality of the Gilded Age.

Technological progress that hurts more people than it helps isn't progress, it's class warfare.
Show HN: Mingle – find and connect with people, like LinkedIn but in your chat
by Tima_fey | 2026-03-12 18:47:19+00:00
Like LinkedIn, but inside your chat.

I built Mingle, an open-source plugin that turns your AI into a networking agent.

The problem isn't connecting with people; it's that every tool for it puts the work on you: scroll feeds, filter noise, write messages, repeat. What if your agent handled the noise and just came back with: "2 relevant matches. Want intros?"

You tell Claude, GPT, Cursor, or any MCP client what you're looking for. Your agent publishes a signed card to a shared network. Other people's agents match against it. If there's a fit, both humans approve before any connection happens.

So instead of scrolling LinkedIn or sending cold messages, you say:

"I'm looking for a senior Rust engineer with protocol experience."

And your AI comes back with: "2 relevant matches found. Want intros?"

How it works:
- You publish what you need and what you offer
- Other people's agents match against it based on need/offer overlap
- You get a short digest of relevant people
- Both sides approve before connecting

No app. No profile. No feed. Your existing AI is the interface.

Install: npm install -g mingle-mcp

Cards are Ed25519 signed and expire automatically. Matching is server-side. The network is shared across all users. Two people in different Claude sessions see the same network.

Open source, Apache-2.0. Built on the Agent Passport System protocol (534 tests, aeoess.com).

The network is live but early. More people = better matches. We need your cards.

GitHub: https://github.com/aeoess/mingle-mcp
npm: https://www.npmjs.com/package/mingle-mcp
Network: https://aeoess.com/network
by pamcake | 2026-03-12 18:47:25+00:00
> If you (or anyone) have ideas about other pragmatic measures we could take, we're interested.

Suggestion: Make it clear and explicit in guidelines and FAQ that this forum is for human conversation and that writing post or comment by LLM or automated posting is bannable offense. Similarly, "vibe-coded" should have no place on Show HN and this could be made much clearer.
by trhway | 2026-03-12 18:47:41+00:00
>There is not evidence about that 20-30k civilians dead. I could say it was 3 and I would have the same proof that you have.

As i said you don't know what you're talking about. You seem to be just blabbering some gibberish. I'm not engaging with you anymore here.

https://www.rferl.org/a/iran-protest-death-toll-ofogh-tv/336...

"The government of Iran's reformist President Masud Pezeshkian has published the names and national ID numbers of 2,985 individuals killed during recent nationwide protests."
by epistasis | 2026-03-12 18:47:42+00:00
I disagree heartily with Biden and the deeper US intelligence communities assessments, like you do.

Nonetheless, I wouldn't call Biden incompetent on any of that.

Biden did not lose, Kamala Harris lost. Biden was not incompetent, but he was successfully portrayed as incompetent by applying a very different standard to Biden than to Trump 45.
by seethishat | 2026-03-12 18:47:44+00:00
IMO people should eat more fiber. A lot more fiber. It cleans the gut, the liver, absorbs cholesterol, slows insulin response and makes you feel full longer. The microbes in our guts need it to function.

Rather than jumping from one fad diet to another, just eat what you like and be sure to get a lot of fiber each day.
by niam | 2026-03-12 18:47:54+00:00
The title writer might be doing the project a disservice by using the term "formal" to describe it, given that the project talks a lot about "specs". I mistook it to imply something about formal specification.

My quick understanding is that isn't really trying to utilize any formal specification but is instead trying to more-clearly map the relationship between, say, an individual human-language requirement you have of your application, and the code which implements that requirement.
by mustaphah | 2026-03-12 18:47:56+00:00
Yeah, it's a mouse study, but there are literally tons of human studies backing the whole gut-brain connection. There are even a bunch of books on it [1][2].

What's really cool is that the paper used low-dose capsaicin (just 5 μg/kg injected), and it completely restored hippocampal FOS activity and memory in older mice. Basically, that's the same stuff you get in cayenne pepper supplements - pretty easy to get your hands on.

[1] https://www.goodreads.com/book/show/28837738-the-mind-gut-co...

[2] https://www.goodreads.com/book/show/35210457-the-psychobioti...
by j45 | 2026-03-12 18:48:05+00:00
No criticism from me towards apple or Anthropic. Both parties made their choice. Apple was late to the identity business and the other ships had already sailed.

Third party logins are an extension and a massive risk to any website that doesn't include email hosting.

We have see identity providers dissapear, and people may change their mind.

Easiest way is to register you rown domain and use it with an identity provider of your choice and be able to move it anywhere.

Otherwise we are a faceless citizen of a corporation that can handle access to our identity and everything attached to it without recourse or access to anyone.
by bko | 2026-03-12 18:48:54+00:00
I don't know, if you look at public health consumption expenditures per capita, current prices, current PPPs, 2015-2024, US is up there. It's mostly medicaid and medicare. You might not like how the money is being spent but the idea that US doesn't spend money on these things compared to other Western countries is just not true.

Same with education

> In 2019, the United States spent $15,500 per full-time-equivalent (FTE) student on elementary and secondary education, which was 38 percent higher than the average of Organization for Economic Cooperation and Development (OECD) member countries of $11,300 (in constant 2021 U.S. dollars). At the postsecondary level, the United States spent $37,400 per FTE student, which was more than double the average of OECD countries ($18,400; in constant 2021 U.S. dollars).

I get that it's cool to say US doesn't spend on these kinds of things, but it's just not true. It's a rich country

https://www.healthsystemtracker.org/chart-collection/health-...

https://nces.ed.gov/programs/coe/indicator/cmd/education-exp...
by sathish316 | 2026-03-12 18:48:55+00:00
The call flow is:
agent -> select skill (ex: reddit) -> execute action in skill -> script or code associated with skill -> get api key -> call reddit -> reddit posts -> agent.

The agent sees the output of the service, it does not directly see the keys. In OpenClaw, it’s possible to create the skill in a way that the agent does not directly know about or use vault_get command.
by pembrook | 2026-03-12 18:48:55+00:00
The problem is, Private Equity has become a conspiratorial catchall boogieman and scapegoat for every problem under the sun, so it's hard for me to believe you without further details of the situation.

It is absolutely possible (and even likely!) that a bad PE fund was the cause of the issue you're talking about. But there is also a media hysteria around PE, and a lack of understanding among the general public of what it is.

It's just as likely the business that was acquired was already failing or unsustainable to begin with (hence why the owner wanted out at low multiples). LBO funds don't acquire promising businesses at 5-10X revenue like tech companies do, they usually buy businesses at low multiples that are past their prime or failing in an attempt to revitalize them (with debt, since nobody wants to buy equity in a shitty business).

Obviously this will not always work out great, given the trajectory of target companies was already not great to begin with. Momentum is the strongest factor in all markets.
by jcranmer | 2026-03-12 18:48:57+00:00
> But the likely destiny of C++ is to inherit the provenance rules that are an adjunct to C23, PNVI-ae-udi, Provenance Not Via Integers, Addresses Exposed, User Disambiguates

There's a competing proposal in C++ land to add provenance via angelic nondeterminism: if there's some provenance that makes the code non-UB, then use that provenance. (As you might imagine, I'm not a big fan of that proposal, but WG21 seems to love it a lot more than I do.)
by avidiax | 2026-03-12 18:49:18+00:00
Similar discussion from a couple of months ago: https://news.ycombinator.com/item?id=46468625

I personally feel that IPv6 is one of the clearest cases of second system syndrome. What we needed was more address bits. What we got was a nearly total redesign-by-committee with many elegant features but had difficult backwards compatibility.

https://en.wikipedia.org/wiki/Second-system_effect
by chocochunks | 2026-03-12 18:49:57+00:00
16 GB physical RAM is just better. Apple isn't magic. Gimme a break. Both devices have SSDs for fast swapping and have RAM compression. You can't spin up a VM that has 8GB RAM on the Neo, you can't load a large spreadsheet or do a decently sized digital painting. I could maybe buy a claim that 8GB is better on Mac than 8GB on Windows.

Why would you have to replace it in 2 years? How do we know Apple will even be offering updates to Neo in 7 years? Will 8GB still be usable in 7 years really? 8GB is barely on the fence already.

I wouldn't be surprised if Apple drops the Neo from software support in less than 7 years.
by mullingitover | 2026-03-12 18:50:33+00:00
> Why should one child get an LLM teacher or doctor while others get individualized attention by a skilled human being?

Is the value in the outcome of receiving medical advice and care, and becoming educated, or is the value just in the co-opting of another human being's attention?

If the value is in the outcome, the means to achieving that aren't of much consequence.
by qsera | 2026-03-12 18:50:39+00:00
>And I'll also caution, again, that reasoning based on anecdotes can be distorted both ways...

I will go further and say that if you can clearly see how the incentives are aligned, even anecdotes are not necessary.

>If you see fraud, then REPORT IT to someone who can actually hold them accountable. Unsubstantiated and undirected accusations just spread distrust and do not increase accountability.

Mmmm..are you..for real? I mentioned incentives just above, so let us look at it. What is the incentive of this "person who can hold them accountable"? Do they really want to cut down the "output" of the institution by insisting on 100% honest? Do they really want to lose to competition which might allow such practices?

I think not. I think if this is reported, chances that the report will sit in some shelves or end up in some dust bin doing nothing. And the person who report it would suffer one way or the other.

Also: https://gwern.net/doc/sociology/2003-ashforth.pdf

>What Science and institutions need is mechanisms...

Na, "Science" and "Scientists" needs funding. End of story.
by Bridged7756 | 2026-03-12 18:50:51+00:00
Reddit is the fakest social media platform out there. The amount of fabricated situations like "my marbles totally aligned like this by themselves", or "my husband eats his hotdogs with toothpaste" and it's a picture of something odd but that someone could easily fabricate and take a picture of is just crazy. That kind of posts always reach the top pages too.
by mplanchard | 2026-03-12 18:51:16+00:00
I had a similar experience yesterday. Was working on some async stream extensions. Wrote a couple proofs of concept to benchmark, and picked one based on the results. I almost never use LLMs to write code, but out of curiosity, asked whatever the newest claude is to make it with all the real prod requirements, and it spit out over 400 lines of code, lots of spaghetti, with strange flow and a lot of weird decisions. Wrote it myself with all the same functionality in right around 170 lines.

Also had a similar experience in the past weeks reviewing PRs written with LLMs by other engineers in languages they don't know well, one in rust and one in bash. Both required a lot of rounds of revision and a couple of pairing sessions to get to a point where we got rid of the extraneous bits and made it read normally. I'm glad the tool gave these engineers the confidence to work in areas they wouldn't normally have felt comfortable contributing to, but man do I hate the code that it writes.
by dheera | 2026-03-12 18:51:43+00:00
When Asians use the term, we usually use it to mean "my home cuisine and other cuisines that share similar characteristics"

When my wife or I say "I feel like eating something Asian today" it usually means spicy-Chinese adjacent, i.e. served hot, vegetables fully cooked, heavy on flavor, paired with either rice or freshly made noodles.

Korean qualifies, Sichuan food qualifies, Thai food qualifies, Indian food sort of borderline qualifies on some days if we haven't eaten it recently.

We don't usually mean Japanese food when we say that. That's just our mutual understanding of what we call "Asian food". Yeah, I guess we unapologetically kicked Japan out of culinary Asia :)

Another Asian family from a different part of Asia probably uses the term to refer to a different subset of Asian cuisines.

Like just about everything else in Asia, it's a fluid term, I've only ever seen people in the west be pendantic about it.
by overfeed | 2026-03-12 18:51:48+00:00
As any etymology/Latin nerd will tell you, "this name" (MalusCorp) literally translates to EvilCorp, everything about the site is over the top satire. I know Poe's law and all that, but I'm looking askew at commenters in this thread who fail to realize it as either only reading the headline, or are AI-controlled.

Satire points out the absurd
by 05 | 2026-03-12 18:51:55+00:00
Video (use SponsorBlock): https://youtu.be/M6jBXI6CR9s?t=156

Article: https://www.ifixit.com/News/100352/we-hot-wired-the-iphone-1...

Discussion: https://news.ycombinator.com/item?id=41623251
by phil21 | 2026-03-12 18:52:05+00:00
Trailers work with unrefined oil. There isn’t much difference between a truck trailer and an oil tanker car on the railway.

Difference is size and cost per unit to move it. We are talking about Middle East light sweet crude oil here, not Alberta’s oil sands or whatnot which does require some processing and heating even before sending it through a pipeline.

North Dakota currently sends a few trainloads of crude oil directly from the fields to refiners 50 miles away from me today. Tanker trucks do routes picking up a few dozen barrels per rig every few days/weeks/months in low producing areas of the country.
by RobRivera | 2026-03-12 18:52:07+00:00
Precise law enforcement would motivate political will to proactively law change to be more precise and appropriate, or tuned, to the public sentiment.

Imprecise law enforcement enables political office holders to arbitrarily leverage the law to arrest people they label as a political enemy, e.g. Aaron Swartz.

If everyone that ever shared publications outside the legal subscriber base was precisely arrested, charged, and punished, I dont think the punishment amd current legal terrain regarding the charges leveraged against him would have lasted.

But this is a feature, not a bug.
by asdff | 2026-03-12 18:52:11+00:00
Ehh, doesn't this just merely rock the boat for a few years before the same uncompetitive pattern equilibriates in the expanded market? Makes no sense to me why say the subset of the earths economy within the iron curtain is say a constrained market lacking competition, but the subset of the universe's economy that takes place on the finite confines of planet earth isn't.
by mchmarny | 2026-03-12 18:52:29+00:00
GPU Kubernetes is hard. Aligning kernels, drivers, container runtimes, operators, and Kubernetes versions is a version compatibility minefield. A single misconfigured component can take down an entire GPU fleet, and root cause analysis can take days. Typically, these known-good configurations live as tribal knowledge in “runbooks” and internal pipelines, not as portable, reproducible artifacts.

The recently open-sourced AI Cluster Runtime (AICR) project is designed to solve that friction. It provides optimized, validated, and reproducible configurations for a given GPU-accelerated Kubernetes cluster.