MurphyA/hacker-news huggingface dataset:
by Aachen | 2026-03-04 11:43:12+00:00
I haven't found a >=2025 phone (I started looking in the summer) with a headphone jack that I can actually use more conveniently than a tablet. Everything now requires two hands, not counting warrantyless china phones like the jelly star, or ones with a chipset that would have been considered fast in 2018

As for the camera, a webcam sticker seems much more convenient than needing to mess with the hardware internals
by carpenecopinum | 2026-03-04 11:43:40+00:00
I mean, GrapheneOS hits at least 2/3 of your demands pretty well.
The Play services are "regular" apps with permissions that you can take away.
For contacts and files you get "scopes", i.e. you decide what the app can see, while the app is left to believe that it can see everything there is.

That said, I think the marketing of GrapheneOS could be better. Every introduction of GrapheneOS I've seen paints the image of Graphene being "Absolute security, no compromises", whereas in reality GrapheneOS is the most "Things need to work, no compromises. Then make the rest as safe as possible" custom ROM that I've used thus far (in particular regarding them allowing you to install Google Play, rather than using MicroG).
by stinkbeetle | 2026-03-04 11:43:45+00:00
It does have negative connotations. And it does get used by news corporations to influence opinion. I have rarely if ever seen them feel the need to explain why a topic they report is important or newsworthy, and just stating without evidence that something is controversial really doesn't either.

> Usually it is used in topics that are very binary, for or against.

It can be for those topics, but very rarely to describe the side of such topics with which they align.
by paffdragon | 2026-03-04 11:44:03+00:00
I often click accept, at least for site banners that get through ublock. But my browser blocks 3rd party cookies and then it clears all cookies on close (except for trusted sites). I also use private browsing for random sites where I dont bother rejecting cookies usually.

I really think this cookie consent concept should have been a browser functionality, so I can make my default choice for all sites and be done with it.
by szmarczak | 2026-03-04 11:46:38+00:00
What you're describing is a SNI, not ECH. Those two serve very different purposes.

> Also reverse lookup has nothing to do with hosting own DNS resolver.

It has everything to do with that. Had you used two brain cells, you would've known that they can memorize the IP address and the domain name, and if you connect to that IP in a short period of time, most likely you visited that domain name.
by jpgvm | 2026-03-04 11:47:12+00:00
Sort of?

My journey up from Senior/Staff was mostly on the back of proposing and then leading cross-functional projects.

Which means I was doing Principal work before being granted the title. To be honest it was (and remains) a huge amount of work and I wouldn't continue doing it if the recognition and compensation hadn't been forthcoming in the following perf reviews.

If you are doing this stuff and aren't moving up where you are then you should be going somewhere else as that is probably a very exploitive work relationship.
by mamonster | 2026-03-04 11:48:29+00:00
This sounds like something that they came up with over the weekend and not a well developed plan.

1. Go look at a topology map of Iran. You don't want to be conducting an offensive operation from Kurdish regions.

2. Other assets/revolutionaries in Iran were heavily repressed a month ago. If this was planned well you would sync them up.

3. USA sat back while Shaaraa strong armed Kurds into submission. Now comes back with Iran promises.

4. Anything involving Kurds, even in Iran, requires Erdogan to be onboard. I don't get the sense he has been paid off and he is likely the next target if Iran is gone.
by Aachen | 2026-03-04 11:49:03+00:00
No, it's not small, but it's afaik the smallest model you can find that's still unlockable and runs any ungoogled OS

> I'll be forced to go back to dumbphones in the future... along with many others, I guess.

Going back to a dumbphone for me would mean changing my outdoor hobbies (like contributing to openstreetmap), so I'll take my losses and continue on a smartphone, but I share the sentiment. Power to you if you do it!
by jsheard | 2026-03-04 11:49:20+00:00
> yeah, clearly nobody buys Samsung Galaxy S series for years, they are like the least popular Android phone model... /s

I don't think the base Galaxy S is what people generally mean when they talk about small phones, that's still much bigger than the iPhone Mini was.

https://www.phonearena.com/phones/size/Samsung-Galaxy-S26,Ap...
by ethan_zhao | 2026-03-04 11:49:21+00:00
Good question. The short answer: a single global threshold (cosine similarity ≥ 0.7) works surprisingly well for news, but it's not because embeddings handle idioms perfectly — it's because news articles are structurally constrained.

News articles about the same event tend to share named entities (people, places, organizations), numbers, and factual structure even across languages. "EU approves AI regulation" is a factual statement that embeds similarly regardless of language. This is very different from, say, opinion pieces or cultural commentary where idioms and local framing would diverge more.

That said, similarity alone isn't enough. The real reliability comes from non-semantic constraints layered on top:

- Time gap ≤ 18 hours between article and story — prevents "same topic, different month" false merges

- Story age ≤ 36 hours — old stories stop absorbing new articles

- Two-pass design — matching against refined story embeddings (average of recent articles) is more stable than raw article-to-article comparison

Where it does break: regional stories with heavy local context. A Japanese domestic politics article and an English wire service summary of the same event sometimes land just below threshold because the framing is so different. I accept some missed merges there rather than lowering the threshold and getting false positives.

No per-language thresholds so far — the embedding model (Qwen3) seems to normalize well across the languages I cover. But I wouldn't be surprised if that changes when adding languages with less training data representation.
by hrmtst93837 | 2026-03-04 11:49:44+00:00
I think LLMs didn't remove the need to verify code and shifted the failure modes from syntax mistakes to subtle design and security regressions that slip past casual eyeballs. In my experience with OCaml and htmx the right belt and suspenders are the OCaml type checker, ppx_expect snapshot tests for generated markup, QCheck property tests for invariants, and a CI step that runs html-validate plus a simple fuzz of input values to expose XSS or broken attributes. I've found the practical lesson is to treat LLM output like a junior dev, keep prompts small and testable, require human review for security or API design, and accept that you buy speed now but pay with maintenance debt at 2am.
by DiscourseFan | 2026-03-04 11:50:00+00:00
You are overvaluing “clean code.” Code is code, it either works within spec or it doesn’t; or, it does but there are errors, more or less catastrophic, waiting to show themselves at any moment. But even in that latter case, no single individual can know for certain, no matter how much work they put in, that their code is perfect. But they can know its useable, and someone else can check to make sure it doesn’t blow something else up, and that is the most important thing.
by ben_w | 2026-03-04 11:50:00+00:00
> Find another service. Find another platform. Or make one.

1. Which is the topic of the post, and where the solution is being objected to.

2. Network effects are a thing

3. Efforts to deeply integrate these networks into societies, make them seem irreplaceable, are a thing; in the case of Twitter in particular, it appears to have full-throated support of the US government, despite how this kind of thing is what DOGE itself was objecting to when it was in the form of fairly cheap radio stations in random 3rd world nations.

> You say "un-elected corporations" as if to imply something sinister about the fact that businesses can have terms of service, but every business in existence is un-elected and has terms of service. What is the alternative, to have a grand jury decide everything?

When it's a matter of freedom of speech, that can be encoded into the law, then it is just like the various bans on discrimination against protected groups. Are those done with grand juries?

> The alternative is direct government control of all online platforms and all means of communication and replacing private censorship with government censorship

Not so. First: there are many laws governing corporations and online platforms and means of communication, none of which are "direct control". All corporate law, in fact. It is a setting of the rules of the game, and no more "direct control" than a referee in a ball game.

Second: The US government has the 1st Amendment, the EU has the Charter of Fundamental Rights of the European Union (amongst other things), these are meta-rules, rules about which rules may exist, restrictions against other restrictions.

> because Musk can't put people in jail or shoot them dead in the street for their speech.

There are plenty of people arguing the case that Musk's purchase of Twitter bought him the US government. Were they right? I am uncertain.

> I can far more easily leave Twitter than I can my government's sphere of influence.

Can you leave Twitter's sphere of influence, just by leaving the site?

Private corporations have tried moving advertising away from Twitter only to be met with legal retaliation from Musk. Speech about Twitter showing what it gets wrong has met with retaliation from Musk that exceeds the budgets of those making that speech, silencing the critics. Nations demanding Twitter does not interfere with trials about domestic attempts at overthrowing elections have been met with Musk trying to circumvent those rules. Nations whose population and government both demand that Twitter does not spread CSAM are now facing threats from the US government itself.
by irthomasthomas | 2026-03-04 11:50:00+00:00
I do this too, but then you need some method to handle it, because now you have to read and test and verify multiple work streams. It can become overwhelming. In the past week I had the following problems from parallel agents:

Gemini running an benchmark- everything ran smoothly for an hour. But on verification it had hallucinated the model used for judging, invalidating the whole run.

Another task used Opus and I manually specified the model to use. It still used the wrong model.

This type of hallucination has happened to me at least 4-5 times in the past fortnight using opus 4.6 and gemini-3.1-pro. GLM-5 does not seem to hallucinate so much.

So if you are not actively monitoring your agent and making the corrections, you need something else that is.
by TonyTrapp | 2026-03-04 11:50:20+00:00
I've had this exact problem for years. My IP addresses have been used for 15+ years for sending e-mail, they are spam-free, but Microsoft keeps blocking them. Every two months or so I have to ask them to unblock the IP again, then I can send mails to Outlook again, until they just random decide to block me again. It's an absolute clown show.
by _heimdall | 2026-03-04 11:51:08+00:00
A human needs to be able to distinguish the buttons though, both visually and via accessibility tools.

I would hope those two buttons and forms include labels, description text, indicators for required fields, etc. All of that should live in the HTML and includes attributes as needed for a11y. LLMs can use that, they don't need yet another API to describe it.
by giancarlostoro | 2026-03-04 11:51:27+00:00
I forget if its WhatsApp that technically lets you sync chats in unencrypted form to iCloud which is the “loophole” around this, though you can lockdown your iCloud even tighter, not sure it Apple can do much if you fully lock down your iCloud, not sure if this has been legally tested? Its not a very advertised feature its just a setting.
by JasonADrury | 2026-03-04 11:51:30+00:00
Why should Israel have a right to exist? And under what parameters? Within which borders? Who gets citizenship?

Surely there's no moral case to be made for Israel having a right to exist in its current religious ethnostate form? People who presumably should have citizenship due to their ties to the land area are excluded because they believe in the wrong ancient delusions.
by codingdave | 2026-03-04 11:51:55+00:00
Sure they do. You just need to spell it out in business terms, not tech terms:

"Reduced incidents by 80%", "Decreased costs by 40%", "Increased performance by 33% while decreasing server footprint by 25%"

Simplicity for its own sake is not valued. The results of simplicity are highly valued.
by user2722 | 2026-03-04 11:51:56+00:00
I do hope however having a Snapdragon device will be beneficial to having postmarketOS support.

For now having Android-type OS on a daily driver is a must, but for older devices (thinking of 10 years time) I'd like to explore an OS which doesn't depend of Google open-source drops and delayed security open-source drops, which is the situation for ROMs without an ODM partner.
by b112 | 2026-03-04 11:51:57+00:00
I think is great, if there are no ramifications when skilled people unlock it.

There's just too much hacking going on, malicious behaviour, to allow uneducated masses to have root on a phone. I've seen so many people just not understanding the outcome of their actions. You'd get people rooting because some shady app lied about why, and just wanted control.

And we don't need more botnets. And it's why banks sometimes throw a fit.

So if a recompile does the trick, and no downside, then it'd be fine.
by matrixgard | 2026-03-04 11:52:42+00:00
The mission's interesting but the execution path isn't clear yet. "AI-generated software that runs on any device" is a distribution strategy, not a product — and those two things need to be figured out in sequence, not together.

The MCP angle could actually be the right starting point if it's solving a real constraint for the people you're trying to help. But before any project plan makes sense, you'd want to get really specific about who the first 10 users are and what they'd actually do with it in the first week.

What does "restore agency" look like in a concrete action for one specific person?
by matrixgard | 2026-03-04 11:52:53+00:00
The "refactored the auth module" nod is painfully real. I've worked with non-technical founders who spent months not knowing their dev had basically been gold-plating infrastructure while the core product sat untouched.

The visibility problem is real but the deeper issue is usually trust — founders don't know enough to push back even when something feels off. A report tells you what shipped, but it doesn't help you know whether it was the right thing to ship.

Curious how you handle that — does Gitmore surface any signal about whether the work actually moved toward the product goals, or is it purely an activity summary?
by matrixgard | 2026-03-04 11:53:04+00:00
The OOM/restart loop problem is one of those things that eats engineers alive at 2am because the actual root cause is almost never in the container logs themselves — it's usually misconfigured resource limits, noisy neighbors on the node, or a memory leak that only surfaces under specific request patterns. The autonomous RCA angle is interesting but I'm curious whether you're correlating against node-level metrics or just container events, because without that layer you'll chase a lot of false leads.

One thing I've seen bite teams hard at this stage: the investigation agent needs read-only access to work, but most setups end up giving it broader Docker socket permissions "temporarily" and that never gets cleaned up. That's a real blast radius problem if the agent itself gets exploited or misbehaves.

What does your permission model for the agent look like right now?
by matrixgard | 2026-03-04 11:53:14+00:00
The audit trail problem here is more nuanced than most teams realize until they're mid-SOC2 audit and the auditor asks "can you show me every action your AI system took on behalf of a user and who approved it?" WebAuthn as the signing primitive is clever because the origin binding gives you some protection against replays, though I'd be curious how you handle the case where the agent is running server-side and the WebAuthn assertion has to be transported back — that round-trip introduces timing issues in fast-moving tool chains.

What compliance frameworks are you seeing the most demand from? My hunch is it's less SOC2 Type II and more the FedRAMP crowd and financial services teams who are starting to gate AI agent deployments on exactly this kind of provability.

Are you seeing that or is it more developer-driven demand right now?
by zozbot234 | 2026-03-04 11:53:26+00:00
If anything, GPUs combine large private per-compute unit private address spaces and a separate shared/global memory, which doesn't mesh very well with linear memory access, just high locality. You can kinda get to the same arrangement on CPU by pushing NUMA (Non-Uniform Memory: only the "global" memory is truly Unified on a GPU!) to the extreme, but that's quite uncommon. "Compute-in-memory" is a related idea that kind of points to the same constraint: you want to maximize spatial locality these days, because moving data in bulk is an expensive operation that burns power.
by wccrawford | 2026-03-04 11:53:42+00:00
It feels like there's quite a lot of spin on this. There's no hint as to how many users were actually affected. It only really seems to mention Estonia, and probably only a region of it.

The ISP there claims they haven't received any reports of SPAM. But that sounds wrong. No reports probably means your reporting system is broken.

So putting that together, it seems like a small ISP screwed up and let spammers go wild, and Outlook blocked them for it. I can't really fault Outlook for that.
by DimmieMan | 2026-03-04 11:53:44+00:00
'first class' member of the .net ecosystem, so C# users won't use it.

'first class' member of the .net ecosystem, so nobody else will use it either.

I love F# but it seems doomed to sit in a weird limbo of an ecosystem that for the most part doesn't want it and struggling able to attract people outside said ecosystem.
by ashv | 2026-03-04 11:53:58+00:00
Hey folks!

I recently came across a book (Rodriguez, Julie, and Kaczmarek, Piotr. Visualizing Financial Data) where it describes an interesting tool used in finance. Known as Chernoff faces, it help you quickly identify anomalies within a bunch of multivariate data.

It got me thinking, this would be fun way to monitor/compare infra telemetry in real time. So I built chernoffOT, which pulls OpenTelemetry data from your infra, and renders a wall of Chernoff faces. Happy faces tells you everything's healthy, and an angry face means somethings broken. Basically, the idea is that you can monitor stuff in a quick glance without digging through graphs.

Would love to know what you think!
by sirwhinesalot | 2026-03-04 11:54:59+00:00
Then why are the APIs they provide such turds?

Cocoa is excellent but who knows when Apple will deprecate it for SwiftUI (which is not very good yet, if it ever will be)?

Windows is a disaster of half-finished APIs. Win32 doesn't even support dark mode. Windows Forms was on life support for ages and only now is getting some love, but it doesn't have a native look despite being built on Win32. WPF is stuck on DirectX 9 and was also on life support for a long time. UWP is dead, effectively. WinUI3 requires bundling 38MB worth of DLLs (many DLLs), is a pain to install and setup a project with and somehow performs worse than electron apps (don't look at the callstack when you click a button, it is scarier than RE9).

And Linux... well there's Qt which really wants you to drop QtWidgets and use QtQuick instead that nobody likes, and GTK is actively developer hostile with a severe disdain for backwards compatibility.
by jmalicki | 2026-03-04 11:55:17+00:00
Glancing at what it's doing is part of your multitasking rounds.

Also instead of just prompting, having it write a quick summary of exactly what it will do where the AI writes a plan including class names branch names file locations specific tests etc. is helpful before I hit go, since the code outline is smaller and quicker to correct.

That takes more wall clock time per agent, but gets better results, so fewer redo steps.
by akshay2603 | 2026-03-04 11:55:26+00:00
I am one of those PMs at a big tech that just shipped a PR in prod:

My take:
1. Doing this moves my team faster. I now use sourcegraph MCP all the time to file much better bugs. And when the actual bug fixing TAT is larger than bug filing TAT, I rather just do it myself. My engineers appreciate it, truly.
2. This not only helps me do bug filing but just get comfortable with code. And this improves my PRDs, my MVPs and my overall thinking. There is no way that I can do this in isolation. I have to get comfortable with code and that involves shipping the occasional PR.
3. This improves my craft. I am obsessively shipping on the side. The codebase for my personal side projects is manageable. I would love to ship at work as well but that's not doable because of codebase complexity and the inability to read code. However, traditional product management is collapsing and this is the new normal.
by gchamonlive | 2026-03-04 11:56:12+00:00
Does pixel support alternate OSes or it just doesn't get in the way of custom firmware developers?

And for the gaming aspect, there is a huge market for mobile gaming, specially in Asia, so having a manufacturer like Motorola adopting GrapheneOS as a first class citizen will improve the chances that high performance applications will have better performance in such OSes which is a big win.
Show HN: My colleague said my prompts were unreadable. I built a prompt builder
by hkonte | 2026-03-04 11:56:39+00:00
Last week I started using Claude Code. My colleague, who has been prompting AI models
for months, looked at what I was sending and said he had no idea what I was asking for.

If an experienced user couldn't parse it, the model definitely wasn't getting the best version of it either.

So I built flompt. The idea is simple: instead of writing a prompt as a wall of text,
you decompose it into typed visual blocks (role, context, objective, constraints, examples,
output format), arrange them, and compile to a structured format optimized for the model
you're targeting. Claude gets XML, ChatGPT and Gemini get Markdown, each formatted the
way the model actually processes it best.

It also ships as a Claude Code MCP so you can build and inject structured prompts
directly from your editor, and as a Chrome extension that puts it as a sidebar
inside ChatGPT, Claude and Gemini.

A few things I cared about:
- Assembly is 100% local, nothing leaves your browser during compile
- No account required
- You can paste a rough idea and let the AI decompose it into blocks automatically

Try it: https://flompt.dev/app
Chrome extension: https://chromewebstore.google.com/detail/mbobfapnkflkbcflmed...

https://flompt.dev
by fatbobman | 2026-03-04 11:57:46+00:00
When the same concurrency-related code fails to compile in Xcode 16 but builds cleanly in Xcode 26, what’s your first instinct? Mine was that the compiler had gotten smarter — but reality turned out to be more nuanced. This post documents a recent debugging journey: starting from a test failure, tracing all the way down to the Core Data SDK interface, and ultimately discovering that the key change had nothing to do with the Swift compiler itself — it was how NSManagedObjectContext is imported into Swift that had changed.