MurphyA/hacker-news huggingface dataset:
by 1313ed01 | 2026-03-03 16:03:50+00:00
That is pretty much what I hope will happen here.

Step 1 is to fix the time at any UTC+N. I don't particularly care what n.

Step 2 is adjust all times in society to work with whatever UTC+N we are now stuck with.

I think step 2 will sort itself out, as it has historically. Schools begin at a certain time because of whatever historical reason tied to what timezone we are in. If we change to a different timezone schools should naturally drift towards starting at some other time in the day, unless people for some unrelated reason changed their mind about what s good time for school start would be.

I really only care about fixing the clocks and stop doing the annual changes back and forth. What number should be seen on the clock for specific events during the day, like school starts, can be adjusted later.
Show HN: SEL Deploy – Tamper-evident deployment timeline (Ed25519, hash-chained)
by chokriabouzid | 2026-03-03 16:03:55+00:00
Every post-mortem starts with: "What exactly deployed before the incident?"

SEL Deploy records every deployment as a cryptographically-signed attestation,
chained to the previous one. Modify any record — the chain breaks instantly.

Demo: https://asciinema.org/a/LDZVa0z3OVdLt7Zv

$ sel-deploy run -- kubectl apply -f deploy.yaml
Hash: sel:v1.0:sha256:3541d13b...
Chained to: sel:v1.0:sha256:1a2b3c4d...

$ sel-deploy verify
Chain intact

# (modify one byte manually)

$ sel-deploy verify
Hash mismatch — attestation tampered
Chain broken

Built on SEL Core (deterministic engine, 33/33 tests).
MIT licensed. No SaaS. Fully local.

GitHub: https://github.com/chokriabouzid-star/sel-deploy
by jbellis | 2026-03-03 16:03:56+00:00
I chased down what the "4x faster at AI tasks" was measuring:

> Testing conducted by Apple in January 2026 using preproduction 13-inch and 15-inch MacBook Air systems with Apple M5, 10-core CPU, 10-core GPU, 32GB of unified memory, and 4TB SSD, and production 13-inch and 15-inch MacBook Air systems with Apple M4, 10-core CPU, 10-core GPU, 32GB of unified memory, and 2TB SSD. Time to first token measured with an 8K-token prompt using a 14-billion parameter model with 4-bit quantization, and LM Studio 0.4.1 (Build 1). Performance tests are conducted using specific computer systems and reflect the approximate performance of MacBook Air.
by fragmede | 2026-03-03 16:04:04+00:00
That's also a stereotype. Gen Z (born 1997 to 2012) is roughly 2 billion people. Among them are the technorati, and the tech literate. The influencers and the influenced. It's fair to compare what was available to them growing up, vs yourself (I learned to program before there was Google), but it's hard to say things that are going to be universally true across that many humans that are interesting. Most of them will have two arms and two legs but will most be able to navigate /etc/systemd/user/? Can't say.
by Xeoncross | 2026-03-03 16:04:11+00:00
I'm glad the air now comes standard with 16GB of RAM and 512GB disk space.

It's not that the M1 with 8/256GB was slow at all, but even browsing the web gets into 12GB of usage and exhausting the 256GB is fairly easy if you backup your 256GB phone, try to edit a few videos, download enough Gradle/Go/Cargo/Node packages, or install enough 20GB office apps.

Any apple silicon with 16GB / 512GB of stage (even the M1 series) should have a much longer useful life and avoid disk/storage aging as rapidly from the constant swapping.
by jacquesm | 2026-03-03 16:04:19+00:00
It isn't doing that now, but you can't be sure about what they're going to be up to a little ways down the line, the fact that they are clearly trying to misdirect the traffic is proof positive they're up to no good.

Just do a bit of risk assessment if something like this were to be shipped to people that have come to blindly trust the source and you'll see why letting this slip is a very bad idea.
by CommieBobDole | 2026-03-03 16:04:19+00:00
When thinking about verifying your identity with a service, you have to ask yourself "what will be the impact to me if everything this service knows about me, every click I've made, everything I've watched/read/uploaded is posted publicly on the internet, attached to my full name, address and photo?". Because those are the very real stakes; if you verify with enough services, this will happen to you.

Weigh that against the value of using the service. A lot of times that will still probably come out in favor of using the service. Sometimes, especially given the kind of services that want age verification, the potential cost is such that you would be insane to verify.
by shadowgovt | 2026-03-03 16:04:36+00:00
Comparing the two sites side-by-side (nanoclaw.net, the fake, and nanoclaw.dev, the correct one), there's also the issue that nanoclaw.net is doing a better job of looking like a correct website.

The fake site:

- includes a copyright statement

- includes a bottom sitemap

- includes an "author" meta-tag

- includes a sameAs to discord "nanoclaw", where the real site references some random string discord server

- has a .net instead of a .dev

Given all that plus the PageRank feedback loop of the .net having been up longer and enough people having found what they're looking for from it to not trigger Google's low-quality signals, author is fighting an uphill battle here; the squatters know what they're doing.
by guerython | 2026-03-03 16:04:37+00:00
With our own rack we nearly went down the once-through river route, but the state made it clear the delta had to stay below about 3°F and we had to log DO/temperature/flow constantly before they would even look at the permit. In the end we sealed the cooling loop, run the plate heat exchangers into the office HVAC and a dry cooler, and we only add makeup water for the evaporative losses. That lets us reuse the waste heat and keeps the creek from seeing a hot plume.
by pakmania | 2026-03-03 16:04:46+00:00
Six weeks ago I got curious what’s actually inside the AI agent “skills” people install from ClawHub, not the descriptions, but the source code.

So I built a scanner.

It pulls skill source from GitHub, runs a set of static analysis checks (shell execution patterns, environment variable access, hardcoded credentials, SSRF patterns, eval usage, basic obfuscation detection, etc.), and then runs a second pass using an LLM to classify whether the flagged pattern looks contextual vs. potentially risky.

So far I’ve scanned 277 public skills.

Some aggregate observations:

70% triggered at least one static rule

9,710 total findings across all scans

Common patterns included unsanitized shell execution and unrestricted environment variable reads

Important caveats:

Many findings are low severity.

Static analysis is noisy.

“70%” means at least one rule triggered — not that 70% are malicious.

No dynamic/runtime execution — this is source-based analysis only.

Binary-only skills are conservatively capped due to limited visibility.

The tool is live at clawdefend.com — you can paste any ClawHub or GitHub skill URL and get a report in ~30 seconds. No login required.

There’s also a simple API if you want to integrate scans into CI or publishing workflows.

Curious how others are thinking about security models for agent marketplaces. Is static + contextual classification reasonable here, or is there a better approach?

Solo project. Happy to go deeper on methodology.
by epicepicurean | 2026-03-03 16:05:20+00:00
When I say crash tolerance, I mean the entire system going down. Given the emphasis on async BEAM processes, which all work in memory, I find it hard to understand why they're more reliable than the "standard" approaches of SQL dbs or crash-tolerant queues like kafka.

Take this example from the article:

def handle_call({:process, order}, _from, state) do
customer = Customers.fetch!(order.customer_id)
charge = PaymentGateway.charge!(customer, order.total)
Notifications.send_confirmation!(customer, charge)
{:reply, :ok, state}
end

I'd assume we want PaymentGateway to commit to a DB. But there's no transactionality with notifications, hence notifications can be lost if the entire runtime goes down. For an article trying to "sell" BEAM to me, I just don't see the value.

> I guess maybe the question is why use BEAM if it also doesn't solve the general systems are problem?

I interpreted the tone of the article to mean it does solve all these problems. Resulting in my general confusion as to the actual advantages. I think this whole actor business somewhat reminds me of the Smalltalk people saying it's all about message passing, but I just don't understand what's the difference between passing a message to and object, and doing obj.function(message). At least for BEAM the whole supervisor tree seems neat, but other than that, it sounds like go routines with channels, or just a queue in python.
by thewebguyd | 2026-03-03 16:05:28+00:00
And yet, it's the generation that struggles the most with managing files on their work laptops and on SMB shares.

They know app silos, not file system hierarchy. Ask a teenager where a file is on their phone and the will tell you the name of an app. Ask them how to copy it somewhere else, and they'll use the share sheet and send it to another app.

High adoption doesn't equate to high literacy.
by alephnerd | 2026-03-03 16:05:34+00:00
> The manager at my structural engineers can still calculate a beam size, he is better at it than his staff. So why in software should an engineering manager move away from tech...

Because a manager at a structural engineering company is essentially acting as the equivalent of what a Product Manager or Forward Deployed Engineer is in the tech industry, because they are expected to be a technical domain expert and own delivery.

Meanwhile, for most software companies the underlying codebase isn't want generates revenue - it's the codification of business logic that does. Additionally, companies tend to have a separate Princiapl Eng to Distinguished Engineer/Architect track that outranks EMs and is in direct contact with leadership.

> Is it this MBA idea that management itself is a profession, rather than being 'a higher level thinker than the others'

Most Engineering Managers and Beancounters aren't MBAs - no company wants to sponsor an employee at a PTMBA which can cost upwards of $250K now.
by kuschku | 2026-03-03 16:05:42+00:00
In that case, I'd recommend jooq, which is just linq in Java :D

create.select(AUTHOR.FIRST_NAME, AUTHOR.LAST_NAME, count())
.from(AUTHOR)
.join(BOOK).on(AUTHOR.ID.equal(BOOK.AUTHOR_ID))
.where(BOOK.LANGUAGE.eq("DE"))
.and(BOOK.PUBLISHED.gt(date("2008-01-01")))
.groupBy(AUTHOR.FIRST_NAME, AUTHOR.LAST_NAME)
.having(count().gt(5))
.orderBy(AUTHOR.LAST_NAME.asc().nullsFirst())
.limit(2)
.offset(1)
by amiga386 | 2026-03-03 16:05:48+00:00
Islam does not tell you to do this. It's the cultural practises of specific kinship networks in the UK, especially from Mirpur. And the practise is also currently on the decline.

https://en.wikipedia.org/wiki/British_Pakistanis#Consanguine...

https://en.wikipedia.org/wiki/British_Mirpuris#Endogamy_and_...

The irony is, of course, that this law is being proposed while the NHS has been advised (by a quango, not the government) to stop discouraging cousin-marriage: https://www.thetimes.com/uk/healthcare/article/first-cousin-... -- the NHS is not required to accept this advice, and indeed the links above show that cosanguinity is decreasing, partly because of public health initiatives telling people what the harms are!
by uyzstvqs | 2026-03-03 16:06:07+00:00
I did some experimenting using different search engines and AIs. Here's the results:

Google and Brave linked to the official GitHub repo followed by the fake domain. DuckDuckGo and Bing linked to the fake domain first, followed by the official GitHub. Mojeek gave higher ranking to two third party articles, but linked to both the official GitHub and website without fakes. Qwant was the worst, as the official website was the second result amongst multiple fake websites and an unrelated GitHub repo.

Then there the AIs. ChatGPT, Google AI mode, Gemini, Grok, Perplexity, and Brave Search "Ask" all linked to the official website, and some added the GitHub repo as well. DuckDuckGo Search Assist linked to just the official GitHub. Google AI mode, Gemini and Grok also explicitly warned about the fake websites. Copilot got the official website and GitHub right, but linked to a presumably fake X account as well.

Conclusion: Google, Brave and Mojeek win in search. AI is very good and clearly beats search overall. Google AI mode, Gemini and Grok stand out in quality.
by walthamstow | 2026-03-03 16:06:12+00:00
Weird extrapolation. They're popular in lots of places - Law & Order has been running 30 years.

None of this is unique to the UK. I'm old enough to remember 24, the show that whitewashed torture while people were getting renditioned by the CIA.

I'd be more surprised if there was a country where this kind of thing didn't happen.
by bombcar | 2026-03-03 16:06:13+00:00
The Studio (Stud IO™) is the new Mac Pro - it's not "worth it" unless you need the most performance period - or you have money to spare.

Or you really, really need to drive eight displays from a single machine.

For "home user" stuff a Mac mini or MacBook is going to do everything you ever need (in fact, they have the problem where the M1 systems are still perfectly capable, six years later).
Show HN: I built a skill that lets your OpenClaw call you on the phone
by thisismyswamp | 2026-03-03 16:06:17+00:00
I've been using openclaw for a while and the one thing I think differentiates it from traditional setups is that the agent can take the initiative, meaning that you don't always have to prompt it for it to do something.

I thought it would be cool to get real phone calls from my AI agent letting me know about urgent things I care about, so I went about creating clawr.ing.

Openclaw has a voice call plugin but it needs a lot of setup with external services, API keys, and webhooks, and it doesn't let you do things like interrupt the agent or have it use tools during the call while you listen to hold music. I also wanted to build something super easy to set up where you only have to copy paste a single prompt.

You can tell it to call you when something happens, like to watch for an important email or monitor a stock price. It works well with the heartbeat functionality that's already included.

I'm based in Portugal and it calls my number fine so you can get your openclaw agent to call you anywhere in the world.

The service is already above $100 MRR with 20+ subscribers doing calls daily.

Your feedback is super appreciated!
by ontern | 2026-03-03 16:06:59+00:00
thank you for calling this out. Tern does implement
the Svix/Standard Webhooks format internally the svix-style payload
({id}.{timestamp}.{body}) and header conventions are handled as a first-class
config in the SignatureConfig type, so yes, any Standard Webhooks compatible
provider works out of the box. there is custom config in which you can choose algorithm, signature header, signature format... covering all types of svix style webhooks

Will make sure this is more visible in the docs. Thanks for the tip
by ttepasse | 2026-03-03 16:07:15+00:00
> I live and work in a multi-lingual environment, and have set up a keyboard shortcut to switch between the German and English keyboard. MacOS does not have a keyboard shortcut for this.

MacOS has since the early OS X days the default shortcut CTRL+Space for that. It may be deactivated for newer releases. It's findable under:

Settings → Keyboard → Keyboard Shortcuts → Inputsomething

(Einstellungen → Tastatur → Tastaturkurzbefehle → Eingabequellen)

Personally I dream of a Mac keyboard with OLED key caps for multilingual keyboard layouts.
by JohnLocke4 | 2026-03-03 16:07:30+00:00
Interesting story. I have noticed that certain parameters are often ignored not because they're unimportant, but instead because they're hard to quantify.

Another story is how the first product made by Jobs and Wozniak at Apple was a hacked phone that could be used to make international calls for free. They called the Vatican and pretended to be Henry Kissinger wanting to speak to the pope - they noticed and promptly hung up before they reached him
by GlibMonkeyDeath | 2026-03-03 16:07:42+00:00
The arguments:

* It's a bad time to move away from tech

As a manager your role isn't to be the "best technical person" anyway. You still need to understand fast-changing capabilities of course. But you are managing people now, and the required skills are different. See below.

* The ladder is very competitive

It's always competitive, and in my experience it was the exact opposite - there were far fewer VP-level technical roles than VP people managers.

* The pay is lower (for senior managers vs. senior technical track)

Again, this is the opposite of my experience (besides at the first-line manager level, where pay was comparable.) Where I worked managers could quickly get paid more with more responsibility. I always thought it was because managing people is actually a lot less fun (at least for me it was.)

The biggest reason not to become a manager is because _it is a completely different job_. Although managers need to be technically competent, management skills are much more about people (and politics.) If that isn't your jam, then don't become a manager.
by kuerbel | 2026-03-03 16:07:43+00:00
In Germany, ads are not subject to prior government approval, as that would violate the constitution's prohibition of prior restraint. However, advertising is heavily regulated, especially in areas like medicine, gambling, and tobacco.

There is also industry self-regulation through bodies like the German Advertising Standards Council, which reviews complaints and can issue public reprimands.

So the system is not "you must get permission before speaking," but rather "you are free to publish, but you are accountable if you violate clear legal standards."

I’m also skeptical of pre-approval mechanisms in principle. I think the German mechanism works really well.
by rayiner | 2026-03-03 16:07:48+00:00
Even if you pay foreign workers the same, which I doubt is true, it’s still a form of labor suppression. These workers have completely different expectations than native born workers. My dad grew up in a village in Bangladesh. My aunts and uncles were college educated professionals from affluent families, but their apartments (in the 1990s) were like NYC housing projects. So my tolerance for grinding for my job is completely different than that of most native born Americans. And I got my citizenship in high school. I can’t imagine what it’d be like if I was trying to keep my H1B. How hard could you get Americans to work if getting fired meant they had to move to Bangladesh?

Look at it this way. Except at the tippy top, employers aren’t looking to hire “the best.” They decide what the role is worth, and then select from the pool of people willing to work for that level of pay. A de facto path to U.S. citizenship for someone and their kids is basically a form of non-cash compensation for H1Bs. So even if the cash pay is the same, the foreigner worker is getting more real compensation than the American worker. The effect on labor competition is the same as if the government paid additional cash bonuses for foreign workers. At every level of job, the American worker is competing with more qualified and motivated foreign workers than they would be if that additional non-cash compensation wasn’t on the table.

For a long time, I faulted Americans who didn’t teach their kids to “learn to work 16 hours a day” like my dad taught me. But I have kids of my own now, and they don’t have the mentality of someone who is a generation away from having to take a boat to school during monsoon season. And that’s probably a good thing that we should want as a society.
by devilbunny | 2026-03-03 16:07:56+00:00
I really like my X1 Carbon gen 7, aside from the bizarre Ethernet "port" (it has built-in Ethernet, but they didn't have room for RJ45, so instead of just telling you to buy a USB one it's on a dongle that blocks one of its two USB-C ports when plugged in, eliminating the advantage of "doesn't use a USB port"). But aside from fantastic Linux support, it's got little to recommend it over a similar-vintage MBA, which has a much better look and feel.
by zarzavat | 2026-03-03 16:08:05+00:00
I swear that AI could independently develop a cure for cancer and people would still say that it's not actually intelligent, just matrix multiplications giving a statistically probable answer!

LLMs are at least designed to be intelligent. Our monkey brains have much less reason to be intelligent, since we only evolved to survive nature, not to understand it.

We are at this moment extremely deep into what most people would have been considered to be actual artificial intelligence a mere 15 years ago. We're not quite at human levels of intelligence, but it's close.
by asr | 2026-03-03 16:08:09+00:00
I use lights every day, but I know way less about electricity than my grandparents, two of whom who could remember when their town was electrified as children and who therefore treated it as the marvel it truly is. And also because we've worked out a ton of bugs in electricity and it often just works.

My kids will know way less about filesystems than I do, because I had to learn DOS commands to navigate around the operating system if I wanted to play computer games, which led to a lifelong interest in how computers actually work at a level they can (and, so far, do) happily ignore.
by ivannovazzi | 2026-03-03 16:08:16+00:00
Appreciate the pushback — you clearly know this space well.

On open source: no, KeyEnv is not open source. That's a real trade-off and I should have said so directly.

On pricing math: you're right in that scenario. For 10 devs with 10 total secrets, AWS SM is dramatically cheaper. Our pricing makes more sense when teams have dozens of secrets per environment across multiple projects (dev/staging/prod) — where the per-user flat rate becomes predictable. But I take the point that the break-even is higher than I'd like.

On hyperscaler friction: fair, it's gotten much better. The main gap we see is local dev DX — injecting secrets into `npm start` or `docker compose up` without writing files. But you could wrap that around SM too.

Honest feedback helps. Thanks.
by iandanforth | 2026-03-03 16:08:24+00:00
TLDR (story, not math) - Knuth poses a problem, his friend uses Claude to conduct 30 some explorations, with careful human guidance, and Claude eventually writes a Python program that can find a solution for all odd values. Knuth then writes a proof of the approach and is very pleased by Claude's contribution. Even values remain an open question (Claude couldn't make much progress on them)