MurphyA/hacker-news huggingface dataset:
by AskCarX | 2026-03-11 10:57:19+00:00
Hi there — you're raising the right questions and these are exactly the attack vectors I built AgentSign to handle. It's not just signing.

AgentSign has 5 subsystems (patent pending) and two of them directly address what you're describing:

Compromised agent scenario: Subsystem 3 is Runtime Code Attestation. Before every execution, the agent's code is SHA-256 hashed and compared against the attested hash from onboarding. If agent A gets injected via a malicious document and its runtime is modified, the hash comparison fails and execution is blocked. This isn't a one-time check at onboarding — it runs continuously, pre-execution. A compromised agent can't sign anything because it fails attestation before it gets to sign.

Replay attacks: Subsystem 2 is Execution Chain Verification — a signed DAG of input/output hashes with unique execution IDs and timestamps bound to each interaction. Replaying a signed payload triggers an execution ID collision. Every agent-to-agent call is a unique, signed, timestamped link in the chain.

Trust delegation: AgentSign deliberately has no delegation mechanism. Each agent presents its own passport independently at the verification gate (we call it THE GATE — POST /api/mcp/verify). There's no "agent A vouches for agent B." Every agent is verified on its own identity, its own code attestation, its own trust score. If an attacker controls agent B, they still need B to pass runtime attestation independently — which it won't if the code has been tampered with.

Behavioral integrity: Subsystem 5 is Cryptographic Trust Scoring. It's not static — it factors in execution verification rate, success history, code attestation status, and pipeline stage. An agent that starts producing anomalous outputs drops in trust score dynamically and gets flagged. Identity without behavioral integrity is exactly the gap trust scoring fills.

The five subsystems working together: identity certs, execution chains, runtime attestation, output tamper detection, and trust scoring. Remove any one and you have the gaps you're describing. Together they close them.

That said — I'd genuinely welcome your findings. Red-teaming is how this gets battle-hardened. You can reach me at raza@agentsign.dev or check the SDK at github.com/razashariff/agentsign-sdk.
by jhaugh | 2026-03-11 10:57:34+00:00
I'm running 8 specialized AI agents on a Mac Mini right now. They handle research, content strategy, writing, security audits, code, and visual design. They run on cron schedules, have persistent memory between sessions, and each one improves weekly through self-improvement loops.

The cost concern is real but manageable. The key is routing models by task. Complex reasoning gets Opus, routine work gets Sonnet, mechanical tasks get Haiku. Not everything needs the expensive model.

The quality concern is the bigger one. What people miss about autonomous agents is that "running unsupervised" doesn't mean "running without guardrails." Each of my agents has explicit escalation rules, a security agent that audits the others, and a daily health report system that catches failures. The agents that work best are the ones with built-in disagreement, not the ones that just pass things through.

Wrote up the full architecture here if anyone's curious about the multi-agent coordination patterns: https://clelp.com/blog/how-we-built-8-agent-ai-team
by Ygg2 | 2026-03-11 10:59:03+00:00
That's disingenous, Rust tries to minimize errors, first at compile time then at runtime, even if it at some discomfort of to programer.

Zig goes for simplicity while removing a few footguns. It's more oriented towards programmer enjoyment. Keep in mind that programmers don't distinguish ease of writing code from ease of writing unforeseen errors.
by em-bee | 2026-03-11 10:59:16+00:00
it would actually be very simple to change the world

that's the problem. it isn't simple. it requires hard dedicated labor. it requires conviction to accept some suffering in order to improve things for others. (by suffering here i mean to give up some of your convenience)

the first step is to get people to understand that they can indeed contribute to changing the world. this is done through education. not just in schools, but from friend to friend. you believe that changing the world is possible, if we all work on it, so now your task is to go out and convince others of that.

the next step is to understand that in order for change to be effective we need to agree on what needs to be changed. so we need some form of unity. again, unity is built through education and friendship. if you want change, that's your next job.

and that is the job that i have dedicated my life to. and i know many others who have too. as we build unity, people will be spurred into action, and slowly we will change the world. it may take a few more decades, or it may take a few centuries. hard to say at this point. but it's going to happen.
by aurareturn | 2026-03-11 10:59:41+00:00
Good products come from tight cycles: ship something, listen to users, iterate. Token economics break that cycle by introducing a competing optimization target. The team stops asking "what do our developers need?" and starts asking "what supports the token narrative?"

In other words, the team starts asking "How can we maximize the token price while delivering as little product value as possible"?

This is why 99.99% of crypto projects are a scam.

No, your token investors don't give a damn what you deliver. They only care about the price of the token. Lie if you have to. Hype up your project like it's the greatest thing in the world. Do whatever to enable security fraud.
by pmoati | 2026-03-11 11:00:14+00:00
Great writeup !

The bitmap trick is elegant and I've seen similar patterns in other contexts. The core insight resonates beyond Rust and SQL: the data structure that's "obvious" at design time can become a bottleneck when the real-world usage pattern diverges from your assumptions. Most fields exist vs most fields might not exist is a subtil but critical distinction.

The fix being a simple layout change rather than a clever algorithm is also a good reminder. I've spent 20 years building apps and the most impactful optimizations were almost always about changing the shape of data, not adding complexity.
by api | 2026-03-11 11:00:40+00:00
My take, unfortunately, is that Zig might be a more modern C but that gives us little we don’t already have.

Rust gives us memory safety by default and some awesome ML-ish type system features among other things, which are things we didn’t already have. Memory safety and almost totally automatic memory management with no runtime are big things too.

Go, meanwhile, is like a cleaner more modern Java with less baggage. You might also compare it to Python, but compiled.
by vasco | 2026-03-11 11:00:58+00:00
Unfortunately you're so far from the point that I don't think it's worth explaining. But the wisdom I shared is not mine, it exists for thousands of years. People have known for a long time it's useless to spend too long worrying about things you can't change, and that they should focus on those they can. And that bitterness is not going to help you. Those are the only assertions I'm making.

If you want to live bitter about how broken the world is instead of focusing on improving the things you actually can change that's up to you.
by _giorgio_ | 2026-03-11 11:01:52+00:00
LeCun has had every advantage imaginable — and the scoreboard remains empty.

He joined Facebook (now Meta) in December 2013. That's over 12 years of access to one of the largest AI labs in the world, near-unlimited compute, and some of the best researchers money can buy.

He introduced I-JEPA in 2023, nearly 3 years ago. It was supposed to represent a fundamental shift in how machines learn — moving beyond generative models toward a deeper, more structured world understanding.

And yet: I-JEPA hasn't decisively beaten existing models on any major benchmark. No Meta product uses JEPA as a core approach. The research community hasn't adopted it — the field keeps pushing on LLMs and diffusion models. There's been no "GPT moment" for JEPA, no single result that made its value obvious to everyone.

So the question becomes simple: how many years, how many resources, and how many failed proof-of-concepts does it take before we're allowed to judge whether an idea actually works?
by mlrtime | 2026-03-11 11:02:07+00:00
>Those things would tend to be useful because at least the author found them to be and there's a decent chance they're not unique in the world. If you e.g. make an app just because you want to use it yourself, maybe someone else wants to use it too.

This seems reasonable on it's surface, however for anyone that is tried to start a business, or sell anything, there is a big gap here.

The gap between creating something useful (an app) and the ability to sell or market it is HUGE. That gap is the difference between useful or not.

So I agree, lots of "useless" stuff will be made because the drive to close that GAP (which looks small) won't be done because there is no need for it.
by irishtel | 2026-03-11 11:03:08+00:00
The tacit knowledge point is the one nobody wants to say out loud because it implies the whole documentation push is partly theater. I've sat in enough post-mortems to know the real process never lives in Confluence. It lives in the senior engineer who instinctively knows which PR is going to get quietly reworked before it ships. That knowledge doesn't get captured — it gets inherited, or it gets lost. But there's a step before the redesign question that this piece skips. Most teams don't have an honest picture of their explicit practices either. Not their runbook version — their actual version. What's really happening in review, in testing, in release. They assume the foundations are sound because nobody ever checked. AI didn't create that gap. It just made it matter more. When you accelerate a broken process you get more broken, faster. It's what I've been building against — measuring the actual process from toolchain data, not from what teams report. The delta between assumed and real is almost always worse than expected.
by julius_eth_dev | 2026-03-11 11:04:07+00:00
LeCun has been pushing world models and joint embedding predictive architectures (JEPA) for years now as an alternative to the generative pretraining paradigm. The core bet — that you need learned abstract representations of physical dynamics rather than just next-token prediction — is compelling, but $1B is a lot of capital to validate an architecture that still hasn't demonstrated clear advantages over scaling what already works. The interesting question is whether this funding lets them finally show JEPA-style approaches outperforming autoregressive models on tasks requiring genuine physical reasoning, or if the money just gets absorbed into the same GPU scaling game everyone else is playing.
by noduerme | 2026-03-11 11:04:25+00:00
America is a bit overstretched at the moment. As far as I can tell, we spent about 50 years in the cold war talking up liberty and democracy, but that was essentially all kind of a BS cultural-supremacy soft-power fig leaf until the cold war ended. Then we had about 20 years of politicians who thought the soft power stuff was all you needed. About a decade of unwinding that position, and the new paradigm is to get back to creating a global order and dispatching regimes that disrupt our commerce. The security concerns haven't changed, but the way of dealing with them has.

The only trouble is, we are no longer the superpower that we were in 1950 or even 1980. What I think will be interesting from this realignment is how our alliances will probably shift toward countries which are strategically aligned with us even if they're much less ethically or ideologically aligned with our stated beliefs.

South Korea and the Philippines are both "capable allies" in the sense that Israel and the UAE are, and in the sense that much of Europe is not. I'm confused as to why Filipinos are protesting against taking out the Iranian regime; it's a direct blow to Chinese expansionism, as well as the jihadist groups in the south. But America's taking out the weakest links in the Russian-Chinese-Iranian-Venezuelan axis. A short-term rotation away from East Asia doesn't necessarily mean it's a bad strategic move.
by woadwarrior01 | 2026-03-11 11:04:32+00:00
GPUs are a near monopoly. There are at least handful of big players in the CPU space. Competition alone makes the latter space a lot cheaper.

Also, for inference (and not training) there are other ways to efficiently do matmuls besides the GPU. You might want to look up Apple's undocumented AMX CPU ISA, and also this thing that vendors call the "Neural Engine" in their marketing (capabilities and the term's specific meaning varies broadly from vendor to vendor).

For small 1-3B parameter transformers like TADA, both these options are much more energy efficient, compared to GPU inference.
by orf | 2026-03-11 11:04:47+00:00
I’m really struggling to understand why you think any of this means anything?

Why would I sign it as my real name? Does the DCO require ID verification? No? So it would be Mr Ima Dog.

People can lie in the internet, saying “oh but no they can’t because there’s a form they need to fill in!!” is supremely off topic nonsense.
by VorpalWay | 2026-03-11 11:04:53+00:00
Go has a garbage collector though. This makes it unsuitable for many use cases where you could have used C or C++ in the past. Rust and Zig don't have a GC, so they are able to fill this role.

GC is a showstopper for my day job (hard realtime industrial machine control/robotics), but would also be unwanted for other use cases where worst case latency is important, such as realtime audio/video processing, games (where you don't want stutter, remember Minecraft in Java?), servers where tail latency matters a lot, etc.
by settinghead | 2026-03-11 11:05:28+00:00
Built something that takes this a step further for audio: Voxlert gives each agent session a distinct character voice (SHODAN, StarCraft Adjutant, GLaDOS, HEV Suit). When your Claude Code / Cursor session finishes or needs input, you hear a contextual phrase generated for that event — not a generic chime.

The practical thing cmux does (knowing which session needs attention without looking) is the same problem I started with. Voxlert solves it via audio identity per session rather than visual tabs.

Would love to know if there's appetite for pairing them — cmux for the terminal UI, Voxlert as an audio layer on top.

https://github.com/settinghead/voxlert
by cookiengineer | 2026-03-11 11:05:49+00:00
Check the photos in the article, specifically this one [1]

"Haussystem Didot", the title of the catalog, refers to a letter setting by the printing agency Didot, which is the one I linked on wikipedia.

The Gallica scans are linked in the wikipedia article. Each of those chapters has hundreds of pages.

I highly doubt that you eye scanned thousands of pages in French handwritten and mixed typesetted ... within less than a day. You definitely must be lying, they take months to read.

[1] https://ionathan.ch/assets/images/angzarr/Berthold%201900.jp...
by imtringued | 2026-03-11 11:05:59+00:00
That's not how that works, because for each unit of debt (loans or negative balances) there is a corresponding unit of credit (bonds or positive balances) in the economy. Hence, mathematically speaking, all debts could be paid off instantly at any point in time.

The reason why the debt keeps growing endlessly is that there is a 0% lower bound on the interest rate, which if you think logically about it, means that debt can only grow, mathematically speaking. This creates the impression that debt is always a future burden that is eternally carried forward as if it was nuclear waste.

If the market interest rate is below zero, either the government and the central bank must intervene to maintain the state of the money system above zero, because that is the only representable state. The government can subsidize the difference between the market interest rate and the money system interest rate clamp by taking on private debt and turning it private. This is particularly evident once private corporations refuse to take on further debt.

However, even if the government stopped the subsidization, you still don't get out of the conundrum. The government is patching the symptom with its cause, which stalls the problem into the future, which is "good" if the cause is considered good and only the symptom is considered bad.

The same way housing is needed for living, money is needed for trading. Similar to housing becoming an investment and therefore no longer being able to be used for its intended purpose, money can face the same fate. When people use money as an investment, it can't be used for trading. Houses sit empty and money sits idle.

It turns out that money is such an integral part of the economy that if there is no money, people can't acquire the goods they need to survive and since there is a monopoly on money systems, you can't just switch to a private provider to perform the trading you need in case the government one fails.

In other words, you either choose between a fully formalized money based economy or subsistence lifestyle with nothing in-between. The difference between the two is so stark, that a failure in the money system might as well be the collapse of all elements of society. From that perspective, it is quite smart to keep kicking the debt can down the road. Meanwhile the person who refuses to kick the can will doom society unless they implement the possibility of negative interest in their money system.
by settinghead | 2026-03-11 11:06:36+00:00
On the notification side: Voxlert gives each Claude Code session a distinct character voice so you know which session needs attention without looking. SHODAN for one window, StarCraft Adjutant for another.

Pairs well with a usage bar — you'd know when a session finished and roughly what happened via audio before switching to the usage view.

https://github.com/settinghead/voxlert
by inbx0 | 2026-03-11 11:06:55+00:00
- saves infra costs
- saves infra headaches
- devs only need to be experts in one system (or well I guess one and a half, probably there's something to learn about ParadeDB too, but probably less than in learning Lucine)
- no need to worry about keeping data up to date in the separate seach system
- all data is available when you want to do new queries that you handn't thought of when implementing the data transfer/indexing
by Ogbon | 2026-03-11 11:07:11+00:00
I built CycleSync after noticing there's no lightweight, privacy-first cycle tracker that lives in your browser without requiring an app download or account signup.

It tracks your cycle phase, predicts your next period and ovulation, lets you log symptoms daily, and gives you phase-specific tips (e.g. peak energy during ovulation = good time for big meetings).
No account needed. All data stays local in your browser.

Would love feedback from the HN community — especially on the UX and what features would make this actually useful day-to-day.

Chrome Web Store: https://chromewebstore.google.com/detail/cyclesync/egmjjdfhn...

Landing page: https://wushu75.github.io/CycleSync/
by settinghead | 2026-03-11 11:07:12+00:00
Nice — different use case but same underlying problem. ntfy is the right call when you're away from the machine. Voxlert handles it when you're nearby but in another window: each Claude Code session gets a distinct character voice (SHODAN, StarCraft Adjutant, GLaDOS) so you hear which session needs attention without alt-tabbing.

The two actually pair well — ntfy for remote approval, Voxlert for ambient desk awareness.

https://github.com/settinghead/voxlert
by krick | 2026-03-11 11:07:18+00:00
I am a bit surprised a unicode character could be a mistery at all. The unicode process is quite bureaucratic, so how comes there wasn't any justification given when the character was submitted for inclusion? After all, I know plenty of symbols that definitely are used routinely in some domains, but that are not a part of Unicode, and it appears that going through the process to actually get them included would be a bit of a chore.
by KronisLV | 2026-03-11 11:07:38+00:00
Tbh Go is also really nice for various local tools where you don’t want something as complex as C++ but also don’t want to depend on the full C# runtime (or large bundles when self-contained), or the same with Java.

With Wails it’s also a low friction way to build desktop software (using the heretical web tech that people often reach for, even for this use case), though there are a few GUI frameworks as well.

Either way, self contained executables that are easy to make and during development give you a rich standard library and not too hard of a language to use go a long way!
by siva7 | 2026-03-11 11:07:39+00:00
TDD and similiar test paradigms have all the same fundamental flaw -> It's testing for the sake of testing. You need to know exactly what you want in order to start, which isn't compatible with a competitive iterative workflow no matter how much TDD yells otherwise. TDD doesn't make sense in agile and fast iteration workflows, only in heavily regulated / restricted products.
by gus_massa | 2026-03-11 11:08:36+00:00
:)

In the info part (with the question thing) I don't understand the last two rules:

"eye + time = eye": I think the correct rule is "eye + time = closed-eye"

"eye + eye-down-right = four eyes": If I add two eyes in a special positions, does the web page add two more to complete the square? I count's trigger that rule.
by mlrtime | 2026-03-11 11:08:53+00:00
I hope you don't take this as a negative, but sometimes I wish I could think like people like you, very positive, but maybe I'm old/cynical?

There is a problem with "plus some so you can participate in society"

In a massive society this will never be agreed to. The 'some' here will never be enough. Too little and it's not UBI, too much and impossible to fund. Who is going to define what a luxury is? Is owning your own home a luxury, a car, washer and dryer?
by tialaramex | 2026-03-11 11:10:14+00:00
I don't agree there's a great language hiding in C++. My high level objections would be that the type system is garbage and the syntax is terrible, so you'd need a different type system and syntax and that's nothing close to C++ after the changes.

After many years of insisting that "dialects" of C++ are a terrible idea, despite the reality that most C++ users have a specific dialect they use - Bjarne Stroustrup has endorsed essentially the same thing but as "profiles" to address safety issues. So for people who think there is a "great language" in there perhaps in C++ 29 or C++ 32 you will be able to find out for yourselves that you're wrong.
by silentsvn | 2026-03-11 11:10:16+00:00
The scoring layer sits between ingestion and storage. Incoming items get evaluated on a few axes: source reliability (did the agent observe this directly or was it told?), semantic distance from existing memories, and recency weighting for time-sensitive facts.

Contradiction detection runs as a separate step - we embed the incoming memory, similarity-search against existing ones, and score the pair for logical consistency. If it trips a threshold, it gets stored with a conflict flag and a link to the contradicting memory rather than silently overwriting.

The agent sees both during retrieval and reasons about which to trust in context. Sounds like overhead but it's fast — the scoring is a simple feedforward pass, not another LLM call.
by nothrabannosir | 2026-03-11 11:10:44+00:00
I would ignore any HN content written by a ghost writer or editor. I guess I would flag compiler output but I’m not sure we’re talking about the same thing?

I’m on the internet for human beings. I already read a newspaper for editors and books for ghostwriters.

Not for long though, HN is dying. Just hanging around here waiting for the next thing , I guess…