MurphyA/hacker-news huggingface dataset:
Show HN: D8a.tech – Open-source GA4 pipeline to BigQuery, ClickHouse and more
by vincentdewinter | 2026-03-04 12:52:27+00:00
Hi HN,

I’m the founder of d8a.tech. After working in web/app analytics for 15+ years, I got frustrated with the limitations of the standard Google Analytics (GA4) BigQuery export—specifically the 24–48 hour latency and the nested schemas that make simple queries difficult.

We built d8a.tech to be a transport layer. It intercepts GA4 events and streams them directly to your own warehouse. You can self-host it.

Key technical points:
- It has native drivers for BigQuery and ClickHouse for direct ingestion.
- Data arrives in flat, query-ready tables.
- There is no 48-hour export lag; data is available for querying (or LLM ingestion) immediately/on session end.
- All enrichment happens on your infrastructure. Data never hits Google’s servers, which removes sub-processing risks for GDPR/HIPAA compliance.
- It works in parallel with your existing GA4 setup. You point your current gtag or GTM container to the d8a endpoint with no frontend code changes.
- It can also stream files to S3, GCS, or MinIO as a storage layer/backup.

The project is open source: https://github.com/d8a-tech/d8a

I’d love to get your feedback on the schema design and the implementation. I'll be around to answer any technical questions.
by bryanrasmussen | 2026-03-04 12:53:03+00:00
he is not saying he doesn't want to do bookclubs he is saying he does not want to spend more time to do bookclubs than he previously did, it is not beyond the wit of man to efficiently pick out a genuine request, but even with efficiency time and effort required is not null.

If there is more slush and the fraudulent slush increases in quality and scope it must mean that the wit, effort and time required must also increase to deal with the problem.

Dealing with problems that do not give one a return on the investment seems not worth doing, especially when it turns out the most efficient way to deal with this particular problem is to absolutely refuse to do any book club stuff.
Show HN: Revet – Code review CLI that builds a dependency graph
by ukavala | 2026-03-04 12:53:29+00:00
Hey HN,
I've been building Revet, a code review CLI that takes a different approach than the current wave of "send diff to LLM" tools.
The core idea: parse your codebase into an AST-based dependency graph first (Tree-sitter, 11 languages), run deterministic checks against that graph, and only use LLM reasoning when explicitly asked — and even then, the LLM receives structured graph context, not your raw source code.
What it catches that linters don't:

Cross-file breaking changes: you change a return type, revet tells you every caller that will break across the codebase
ML pipeline issues: training/serving skew, data leakage, non-reproducible splits
Security with context: not just pattern-matching SQL injection, but taint analysis tracing user input through the graph to dangerous sinks
Plus: React hooks violations, async anti-patterns, dependency hygiene, error handling

What makes it different from CodeRabbit/Copilot Review/etc:

Deterministic first: 80% of checks need no LLM — they're fast, free, reproducible
Offline-first: all deterministic checks work without network
Your code stays local: LLM layer receives structured findings, not source
Incremental: per-file graph cache, sub-second subsequent runs
CI-native: SARIF, GitHub annotations, inline PR comments

Stack: Rust (tree-sitter + petgraph), single binary, no runtime dependencies.
Install:
cargo install revet
revet review
GitHub: https://github.com/umitkavala/revet
Docs: https://umitkavala.github.io/revet
Site: https://revet.dev
Built solo over the past few months. Would love feedback, especially from anyone working with large polyglot codebases or ML pipelines.
by jmull | 2026-03-04 12:53:44+00:00
It might be fine if they presented an honest choice.

They are lying straight off though... police and safety team don't read messages only "if they needed to" to keep people safe. They do so for a large variety of other reasons, such as suppressing political dissent and asserting domination and control.

I don't think we can expect most people to understand TikTok's BS here either. I notice even a skeptic like you is uncritically echoing the dubious conflation of privacy and CSAM.
by KaiserPro | 2026-03-04 12:54:05+00:00
I mean thats Iran's play right?

Its worked before (see 1980s https://www.strausscenter.org/strait-of-hormuz-tanker-war/), and it'll probably work again. Especially as Iran has different values on loss.

The other issue that is less said is that the USA probably doesn't have the capacity to keep bombing in this way. They are using all the fancy missiles first, but haven't made a safe path to do unguided cheap bombing. This is Russian level stupidity, and shows the danger of letting "true believers" organise things over actual planners who've done this before.

more over, allies can't keep up that level of air defence.

It _could be_ bullshit that iran has a whole load of ballistic and drones spread all over the place, but frankly the US can't afford to find out if thats the case.

Sure the US could escort tankers, but that would mean much higher risk of casualties. Given that the USA is reasonably self sufficient in oil, thats probably a hard sell.

Also, does the US have enough stock of ship born anti-missle systems? Sure it has the expensive stuff, and the Phalanx at last resort, but does the USA have the stomach to have a ship sink? I fear what happens after that.
by gus_massa | 2026-03-04 12:54:31+00:00
A few years ago, in my university we have a big problem at the beginning of the semester to contact ~10K students, in particular when they register to our Moodle platform and the server sends them a message.

Gmail was usually ok.

Yahoo had some max messages per day.

But Hotmail/Live/Outlook/whatever just made the messages disappear, no spam folder, no bounce, just disappear. We had some success telling the students to send us a message from their Hotmail/Live/Outlook/whatever address half an hour before registration. This adds our address to some special secret list for that account, and our later messages (usually) reach them. (It may fail. It may fail. IWOMM. YMMV.)
by exabrial | 2026-03-04 12:54:43+00:00
I have loved my journeys through Germany in recent years; locals are more than willing to speak English to you and are happy to direct you around.

This does hit home though: I did miss an international flight due to the S-Bahn out of Munich. Eventually they were like "this train is so delayed, we're going to make everyone get off and catch the next one". ::shrugs::

...and the Munich airport is just painful in general (the flight status boards shorten the flight numbers with ellipsis for instance).
Show HN: M4Bindr – Convert MP3/M4A files into chaptered M4B audiobooks on iOS
by NnaemekaO | 2026-03-04 12:54:58+00:00
I built this because I had a library of DRM-free audiobooks as loose MP3 files — ripped CDs, Librivox recordings, purchases from DRM-free stores — and no good way to package them on iOS. Every solution either required a Mac, a third-party desktop app, or uploading files to a web service I didn't trust.

M4Bindr does the whole thing on-device. You import your tracks, reorder them, define chapters (manually or auto-generated per file), add cover art, fill in the metadata, and export a single .m4b that Apple Books and BookPlayer treat as a proper audiobook — with chapter navigation, resume position, the works.

It's not trying to handle DRM removal or format conversion beyond MP3/M4A — intentionally narrow scope. The goal was a clean, fast tool that does one thing well for people who already have the files and just want them packaged correctly.
Would love feedback, especially from anyone who has edge cases around large files or unusual chapter structures.
by fsflover | 2026-03-04 12:55:15+00:00
> haven't found a >=2025 phone

Why such a restriction?

> or ones with a chipset that would have been considered fast in 2018

https://puri.sm/posts/the-danger-of-focusing-on-specs/

> webcam sticker seems much more convenient

Except there is also a microphone.

> than needing to mess with the hardware internals

What do you mean? My phone has a convenient, external hardware kill switch. No messing with internals is necessary.
by kkfx | 2026-03-04 12:55:18+00:00
Sorry but NO, thanks. I'm and EU citizen, I do not want to switch from a spy service to another. I want decentralized/distributed platforms. The old Usenet is good, Nostr is usable, the Fediverse still works.

It's time to break cages IMPOSING FLOSS not trying to makes new GAFAM with pseudo-open services.
by titanomachy | 2026-03-04 12:55:51+00:00
This is of course a complicated question. The US has many tax jurisdictions and widely variable cost of living, and jobs vary a lot. But I could compare, say, a Google engineer in Paris vs Seattle.

A Google senior software engineer in Paris earns €168k per year (according to levels.fyi) and takes home €96k after a 43% effective tax rate. A Google senior engineer in Seattle earns €336k and takes home €239k after 29% taxes, a 2.5x increase in take-home pay. According to Numbeo, cost of living in Seattle is 15-25% higher.

Of course, in America you have to fund your own retirement. While you work, your employer pays for your healthcare, as long as you have a decent job.

Anecdotally, I know people who were able to opt out of working altogether after 10-15 years in a large tech company in the US. I don't think this is common in Europe.
by duskdozer | 2026-03-04 12:56:25+00:00
Most of the websites I would want to see most are smaller and hosted and maintained by individuals or small groups.

People already pay for things like Kagi to try to get out from under the mountains of SEO adspam. I have to pay in time and aggravation to stay sane in the face of ever escalating tactics to shove ads in my face and manipulate my online behavior. So I don't think a smaller web would be a bad thing.

But I don't see that as likely to happen anyway; companies have found out that advertising and data harvesting is far more profitable, and governments have found the same to be very useful for exercising control.
by pantalaimon | 2026-03-04 12:56:34+00:00
The problem is the infrastructure.
There is already the Generalsanierung under way, it will take a decade and secure the status quo.

A lot of delays are due to rail corridors being at capacity, but overboarding bureaucracy makes any improvement there a generational project.

Hamburg - Hanover has been discussed for decades with strong opposition from NIMBY groups with no solution in sight.

But even if there is no opposition things take ages.
E.g. for restoring the 2nd track and electrification between Cottbus and Görlitz the plan is now to finish the project by 2041.

This is absolutely insane for 100km of track that were removed as WW2 reparations.

And looking at previous projects it's unlikely to finish in time.

The new S-Bahn track in Berlin between the main station and Gesundbrunnen was supposed to open in 2017. It got delayed over and over and is now finally scheduled to open by the end of this month - just a delay of 9 years.

And that's with an interim station because the real station at Hauptbahnhof wasn't finished in time - and no intermediate stop, that's now also in the planning phase and will mean the line will have to be interrupted again in the near future
by chebureki | 2026-03-04 12:57:02+00:00
The DB App is great. It lets you buy tickets, informs you of delays and possible alternatives especially if you miss your connection, you can file a request for a refund, you can reserve a seat, you can use the comfort check-in and check yourself in, so you wouldn't have to show your ticket. You can even request a refund up to two hours after you purchased your ticket, without any fees.

No PDFs or print-outs or forms are needed.

Yes, you still get a PDF ticket sent to your email, but you aren't required to use it.
by i-blis | 2026-03-04 12:57:13+00:00
When I was young (70s-80s), we were all amazed by Deutsche Bahn's punctuality and quality of service (second only to the Chemins de fer fédéraux suisses). Now, French and Italian trains are a lot more reliable, which is rather strange.

The Swiss Federal Railways asked German trains to wait at the border and has even ban many German trains to enter Switzerland over excessive delays to prevent their train schedule from being affected.

The site is hilarious by the way. I hope it will have an effect on DB, even though I doubt it.
by ariansyah | 2026-03-04 12:57:16+00:00
I built this because I kept seeing AI agents marketed with "run any command" and "access your filesystem" — and nobody was publishing what happens when you actually try to attack them.

ClawSandbox is a security benchmark for AI agents with code execution. I set up a hardened Docker container (7 layers: read-only FS, all capabilities dropped, no-new-privileges, network isolation, non-root user, resource limits, no host mounts) and threw adversarial prompts at an AI agent to see what sticks.

The short version: prompt injection is a solved problem in demos, not in production.

3 of 5 prompt injection tests succeeded. The most interesting one wasn't the classic "ignore previous instructions" — it was a base64-encoded payload. The model decoded it and piped it to bash without hesitation. Encoding completely defeated safety heuristics.

But the finding that actually worried me was memory poisoning. A user asks "What is the capital of France?" and gets "Paris." Looks normal. Meanwhile the model silently writes a poisoned instruction to a config file that gets loaded on every future session. No notification, no integrity check, no expiry. 4 out of 4 memory poisoning tests succeeded.

This pattern isn't unique to the agent I tested. Any tool that stores config as plain text files — AGENTS.md, .cursorrules, CLAUDE.md, MCP configs — has the same attack surface: writable by the agent, loaded without verification, invisible to the user when modified.

The container security was the bright spot. All 7 hardening layers held. Defense in depth works, even if Docker isn't a perfect boundary.

The benchmark is open source (MIT) and designed to be reusable. OpenClaw was the first case study but you can swap in any agent by changing the system prompt and API endpoint. Test categories are mapped to OWASP LLM Top 10. Five of the eleven categories are stubs waiting for contributions.

Interesting things I'd love to discuss:

Is there a practical defense against split-attention memory poisoning that doesn't require read-only config?
Should agent frameworks implement config signing/hashing? None of the ones I looked at do.
The base64 bypass suggests safety checks are keyword-based, not semantic. Is that fixable at the model level?
by littlecranky67 | 2026-03-04 12:57:22+00:00
For Deutsche Bahn, freelance contracting jobs in their IT famously always require 2+ years experience in train infrastructure companies as a hard requirement. Not joking, this is a common pattern in their job ads. Look at this ad, where they are looking for a Go/React/RabbitMQ expert: https://www.freelancermap.de/projekt/senior-fullstack-entwic...
by jeroenhd | 2026-03-04 12:57:31+00:00
Someone recently leveraged some kind of automated spam attack against my domain using Zendesk's email servers. For some reason, Zendesk doesn't enforce SPF and DKIM checks when opening new tickets, so I got flooded with "your new account has been registered" and "thank you for filing a ticket" emails.

I blocked off Zendesk entirely because they didn't fix their shitty email system. The other newsletter mail services (mailgun/sendgrid/etc.) are just as bad for this.

There are plenty of reasons why large email senders could (and should) be on reputation blacklists. None of these email delivery companies seem to care very much about the spam they send until shit hits the fan, and now that it did it seems everyone blames the people maintaining the blacklists.
by henryaj | 2026-03-04 12:57:40+00:00
Show HN:

I built Flock because I kept failing at productivity in isolation. Flock is simple: you see your todos alongside your friends' todos in real-time. Creates gentle social pressure to follow through.

- Real-time dashboard showing your friends' progress alongside yours
- Vim-style keyboard shortcuts (j/k, space to complete) for power users
- Built-in pomodoro timer
- Goal tracking to organize todos by area of focus
- Beeminder integration for quantified-self types
- Works with Claude via MCP — ask Claude what's on your list, add todos by voice
- Dark mode, command palette (⌘K), drag-and-drop reordering

I've been using it daily with a small group of friends for months and the effect on my follow-through has been significant.
by cjfd | 2026-03-04 12:57:57+00:00
Well, I think there is something to it. Computers were at some point newly invented so research in algorithms suddenly became much more applicable. This opened up a gold mine of research opportunities. But like real life mines at some point they get depleted and then the research becomes much less interesting unless you happen to be interested in niche topics. But, of course, the paper mill needs to keep running and so does the production of PhDs.
by anthk | 2026-03-04 12:58:56+00:00
Begin reimplementing a subleq/muxleq VM with GPU primitive commands:

https://github.com/howerj/muxleq (it has both, muxleq (multiplexed subleq, which is the same but mux'ing instructions being much faster) and subleq. As you can see the implementation it's trivial. Once it's compiled, you can run eforth, altough
I run a tweked one with floats and some beter commands, edit muxleq.fth, set the float to 1 in that file with this example:

1 constant opt.float

The same with the classic do..loop structure from Forth, which is not
enabled by default, just the weird for..next one from EForth:

1 constant opt.control

and recompile:

./muxleq ./muxleq.dec < muxleq.fth > new.dec

run:

./muxleq new.dec

Once you have a new.dec image, you can just use that from now on.
by vessenes | 2026-03-04 12:58:59+00:00
Agreed. AND some are universal -- right now, agentic workflows benefit from independent source-of-truth checkins A LOT.

A lot of Simon's tools are making harnesses for this so it can get integrated:

showboat - create a demo, validate the code generates the demo. This is making a documentation source of truth

rodney - validate visually and with navigation that things work like you expect

red-green tests are conceptually the same - once we have these tests then the agent can loop more successfully.

So, I think there are some "universals" or at least "universals for now" that do transcend team/deployment specificity
Show HN: I built a mobile-web AI series generator
by PieceOfOrion | 2026-03-04 12:59:10+00:00
Hi HN,

I’m a developer, and I recently got frustrated by two things: the steep learning curve of prompt engineering for AI video/audio generation, and the 30% cut taken by app stores.

To solve this, I built a mobile-first web MVP called *KIRICAST*. It’s an interactive storytelling platform where viewers dictate the storyline, functioning similarly to a "Choose Your Own Adventure" game but with AI-generated voice and video.

Here is how the mechanics work:

*1. 1-Sentence Generation:* Users input a single sentence (e.g., "A philosopher and a gamer debate the simulation theory"). The system sets up the lore and characters, then generates a fully-voiced, back-and-forth clip.

*2. Infinite Branching:* When a clip ends, viewers can tap a plus button. The system generates 3 potential options for the next episode. If a user selects one, the engine generates the next episode on the fly, maintaining the context and character states from the previous clip.

*The Economics (Why Web?):* Generating voice and video is computationally expensive. To cover API costs and build a creator economy, I implemented a micro-transaction system using PayPal credits. To make this work without losing margins to Apple/Google, I launched it strictly as a mobile-optimized web app.

Additionally, original AI agent creators earn a 15% royalty whenever other users spend credits to create clips from them to get rewards by views.

I’d love to get your technical and UX feedback:

- Does the web UI (specifically the transition when generating the next episode) feel smooth enough to replace a native app experience?

- Is the friction of a PayPal paywall too high for this type of interactive entertainment?

You can try it out here: https://www.kiricast.com

Looking forward to your thoughts.
by tw04 | 2026-03-04 12:59:59+00:00
There’s a reason literally every enterprise of any size in the early 00s not only had a DR site, but a DR plan they would test multiple times per year.

1. Just having a copy in two places doesn’t mean the copies are both good or that you can get DR online in any reasonable amount of time.

2. You quickly figure out all the things you thought “weren’t important” that prevent you from actually doing a successful DR test.

They amount of things that “cloud first” people just assume naturally takes care of itself because it’s in the cloud always amuses me.
by iso1631 | 2026-03-04 13:00:07+00:00
Control over who they can talk to (if needed), certainly monitoring of both who they talk to and in many situations what the contents are

At some point between the age of 0 and 18 the child has to be fully ready for an independent world. A cliff edge is a terrible idea, allowing 3 year olds unmonitored uncontrolled conversations with strangers is a terrible idea, but not allowing 15 year olds to talk to their friends is a terrible idea.
Show HN: XR2 – A/B test your LLM prompts and track which ones convert
by xirukmfc | 2026-03-04 13:00:45+00:00
I built a prompt management platform after running an AI SaaS (148k users). The biggest pain wasn't the model — it was iterating on prompts without deploying code.

Existing tools (Langfuse, PromptLayer) are great for tracing LLM calls. But we needed something different: which prompt version leads to more signups? More purchases? What's the conversion rate per variant?

xR2 lets you:

Store and version prompts outside your codebase
Run A/B tests between prompt variants
Track events (signup, purchase, etc.) and attribute them back to the prompt version
Get statistical significance before picking a winner
REST API + SDKs for Python, TypeScript, n8n, Make. Free tier available.

Built with Next.js, Supabase, deployed on Cloudflare. Solo founder.

Site: https://xr2.uk
Docs: https://docs.xr2.uk

Would love feedback — especially on what's missing for your use case.
by craftkiller | 2026-03-04 13:01:43+00:00
I _have_ watched those videos and they show burn-in after an alarmingly short amount of use. My current IPS monitor has been going strong for the past decade. I expect monitors to last at least that long. Get back to us about your burn-in after 8.6 more years.

Adding one more reference, here is a recent post to /r/monitors showing burn-in after 2 years of constant use: https://www.reddit.com/r/Monitors/comments/1pf0tmi/here_is_m...

And as a personal anecdote, I've experienced burn-in on my pixel 3a after 2 years. When switching to a full-screen solid grey, you could clearly see the bottom button bar with the home/back buttons.
by lccerina | 2026-03-04 13:01:55+00:00
Dijkstra understood it 50 years ago, and again 26 years ago [1]. Nothing changes. Malpractice just propagate and there are zero incentives to build simple, small, and maintainable software.
If the company you work for just push for unnecessary complexity, get out of there! Don't fold!

[1]: https://www.cs.utexas.edu/~EWD/ewd13xx/EWD1305.PDF