MurphyA/hacker-news huggingface dataset:
Show HN: Crypto Security Toolkit – VPN, Wallets, Exchanges and Tools for Traders
by SKYFOR | 2026-03-14 12:58:30+00:00
Hi HN,

I built a small open resource collecting tools and infrastructure that crypto traders often use to improve security and workflow.

The toolkit covers:

• VPN usage for crypto trading
• hardware wallet security
• exchange infrastructure
• trading tools like charting and portfolio trackers
• basic operational security habits

The goal was to create a simple reference that helps beginners avoid common security mistakes in crypto.

The repository is structured as a small knowledge base and can also be used as a checklist for setting up a safer trading environment.

Feedback and suggestions are welcome.
by tejohnso | 2026-03-14 12:58:48+00:00
> Anyone is allowed to call you a moron and claim to be doing you a favor. (Which, in point of fact, they would be. One of the big problems with this culture is that everyone's afraid to tell you you're wrong

Absurd. You can point out how and why someone is wrong without insulting them by calling them a moron. Telling someone they're a moron is only stating your personal opinion in an offensive way, without any useful proof.
by johnisgood | 2026-03-14 12:59:06+00:00
Apparently the blog stripped the decompilation details for ToS reasons, which sucks because those are exactly the hack-y bits that make this interesting for HN.

> It told me it was following specific system instructions to hard-cap plans at 40 lines, forbid context sections, and “delete prose, not file paths.

Yeah, would be nice to be able to view and modify these instructions.
Ask HN: Looking for a job after layoff and burnout. What should I focus on
by jacAtSea | 2026-03-14 12:59:42+00:00
Hi everyone,

I spent about a decade working in the finance industry as a software engineer. Most of my experience has been on brownfield systems, using technologies like Java, Python, and React. I’ve worked on a mix of things — building data pipelines, dashboards, and web applications — as well as doing a fair amount of maintenance and incremental improvements on existing systems.

I was laid off in 2024 and have taken a gap year career break. I’m now planning my next move and aiming to look for roles as either a Senior Software Engineer or Senior Data Engineer.

During this time, I’d like to upskill and strengthen my profile, but I’m unsure where to focus my effort for the best impact.

The online material is too trivial, talking about syntaxe rather than concepts or patterns. I also felt kinda bored like I already 'knew' them but didn't challenging enough.

What are the suggestions for good read to refresh and upskill?
by krisbolton | 2026-03-14 12:59:52+00:00
Not to start an internet argument -- I don't think it is appropriate in this context. A/B testing the features of a web app is not unexpected or unethical. So invoking the memory of cambridge analytica (etc) is disproportionate. It's far more legitimate to just discuss how much A/B testing should negatively affect a user. I don't have an answer and it's an interesting and relevant question.
by mschuster91 | 2026-03-14 12:59:56+00:00
You need to ditch and replace all your devices and acquire a new phone number. I'm serious. Virtually all large websites these days employ a lot of fingerprinting and persistence technologies.

And yes, ditch them. Even well over a decade ago, Wikipedia of all places already employed IP address matching to link sockpuppet accounts. You must be extremely careful of never using any device that was associated with your old accounts on the same network as the devices associated with your new account. And that includes devices only seen by association.
by Simulacra | 2026-03-14 13:00:23+00:00
I'm confused, could someone help me clarify: is this just one stick of RAM, and one stick of absolutely nothing, purely for aesthetics? I can't even see inside my CPU, why would I care if there's an empty slot? Why would I pay for a piece of plastic to fill that slot that doesn't do anything?

From the read, it seems like… A scam?
by everdrive | 2026-03-14 13:00:34+00:00
>I don't believe A/B testing is an inherent evil,

Evil might be a stretch, but I really hate A/B testing. Some feature or UI component you relied on is now different, with no warning, and you ask a coworker about it, and they have no idea what you're talking about.

Usually, the change is for the worse, but gets implemented anyway. I'm sure the teams responsible have "objective" "data" which "proves" it's the right direction, but the reality of it is often the opposite.
by cybrAy | 2026-03-14 13:00:59+00:00
Hey, I've been building this for a while and just hit v1.0.0.
It's a security log analyser that detects 10+ threat types, scores them with CVSS 3.1. Also has AI analysis through Groq if you want more context on findings free tier works fine.

Built two modes into it, one with plain English explanations for less technical users and a full advanced mode with batch processing for security professionals.

Built it in Rust as a Cargo workspace with 4 crates. First time
open sourcing something this size so genuinely open to feedback
on anything architecture, threat detection logic, CVSS accuracy,
whatever.
by reg_dunlop | 2026-03-14 13:01:00+00:00
I believe that's a straw man fallacy.

My assertion is that an inanimate object becomes a problem when a human interacts with it.

Your attempted logical argument is that a law of nature is the same as an inanimate object.

I am not contesting that an inanimate object is the same as gravity.

I'm saying that humans make bad decisions with simple things and whine about inanimate objects and that's a very real first world problem.
by EagnaIonat | 2026-03-14 13:01:06+00:00
I am building them because I am using them to do my work faster.

I'm not selling anything, but I can see the quality of what is created and it is on-par with much of the stuff on the App store.

No one would even notice that it is a co-creation unless I mentioned the time to create it.

Just to be clear. Vibe coding implies that you are not reviewing the code that is created, or even knowing what is being created. That is not what is happening.
by aleph_minus_one | 2026-03-14 13:02:02+00:00
> Now do breadth-first traversal. With the iterative approach, you just replace the stack with a queue. With the recursive approach, you have to make radical changes.

The reason is that no programming language that is in widespread use has first-class support for co-recursion. In a (fictional) programming language that has this support, this is just a change from a recursive call to a co-recursive call.
by mcherm | 2026-03-14 13:02:10+00:00
A specific example will help.

Imagine I am working for a company and I discover they are engaged in capturing and transporting human slaves. Furthermore, the government where they operate in fully aware and supportive of their actions so denouncing them publicly is unlikely to help. This is a real situation that has happened to real people at points in history in my own country.

I believe that one ethical response would be to violate my contract with the company by assisting slaves to escape and even providing them with passage to other places where slavery is illegal.

Now, if you agree with the ethics of the example I gave then you agree in principle that this can be ethical behavior and what remains to be debated is whether xAI's criminal behavior and support from the government rise to this same level. I know many who think that badly aligned AI could lead to the extinction of the human race, so the potential harm is certainly there (at least some believe it is), and I think the government support is strong enough that denouncing xAI for unethical behavior wouldn't cause the government to stop them.
by ZekeSulastin | 2026-03-14 13:03:00+00:00
This is a more Reddit comment section than I’ve seen on r/headphones in ages. It’s almost nostalgic!

I use my wired Sundara (which have dropped in price greatly since I got them years ago!) at my desk with DAC/AMP all the time, of course, and have a very nice set of Etymotic IEMs with a USB-C dongle permanently attached (once I stopped using it for my PC*). For use with my phone I haven’t actually reached for those Etys over my AirPods Pro 2 in years as the latter are significantly more convenient. They also work fine with Windows 11 (which supports AAC over Bluetooth, as can Linux IIRC) if I want to use them there for whatever reason. Maybe I’m blessed in that I don’t require my phone to be a critical listening device?

* If you have hissing/interference/etc when plugging headphones into your PC, the Apple USB-C dongle is very good and only 9 USD.
by DennisP | 2026-03-14 13:03:06+00:00
I'm halfway through Steve Yegge's book Vibe Coding. Yegge was quoted in the article:

> “We’re talking 10 to 20 — to even 100 — times as productive as I’ve ever been in my career,” Steve Yegge, a veteran coder who built his own tool for running swarms of coding agents

That tool has been pretty popular. It was a couple hundred thousand lines of code and he wrote it in a couple months. His book is about using AI to write major new projects and get them reliable and production-ready, with clean, readable code.

It's basically a big dose of solid software engineering practices, along with enough practice to get a feel for when the AI is screwing up. He said it takes about a year to get really good at it.

(Yegge, fwiw, was a lead dev at Amazon and Google, and a well-known blogger since the early 2000s.)
by necovek | 2026-03-14 13:03:30+00:00
FWIW, this is also one of the reasons MathML has never become the "input" language for mathematics, and the layout-focused (La)TeX remains the de-facto standard.

Ergonomics of input are important because they increase chances of it being correct, and you can usually still keep it strict and semantic enough (eg. LaTeX is less layout-focused than Plain TeX)
by phtrivier | 2026-03-14 13:03:44+00:00
Asking money to people in order to read stuff, and promoting the one people are actually ready to part with real money to read, is a first interesting step. (See: substack, Patreon,etc...)

I know this is going to sound horrible, but : how about asking money to contribute, period ? Maybe have a free tier of a couple comments, etc... But if you want to build a troll factory, sure... Show us the cash ?
by applfanboysbgon | 2026-03-14 13:03:47+00:00
Not only have I used the technology, I've worked for a startup that serves its own models. When you work with the technology, it could not be more obvious that you are programming software, and that there is nothing even remotely person-like about LLMs. To the extent that people think so, it is sheer ignorance of the basic technicals, in exactly the same way that ELIZA fooled non-programmers in the 1960s. You'd think we'd have collectively learned something in the 60 years since but I suppose not.
by skrebbel | 2026-03-14 13:04:03+00:00
I read both, but I feel like they both miss what it was like to work with APIs back in the bad old XML days.

Yes, XML is more descriptive. It's also much harder for programmers to work with. Every client or server speaking an XML-based protocol had to have their own encoder/decoder that could map XML strings into in-memory data structures (dicts, objects, arrays, etc) that made sense in that language. These were often large and non-trivial to maintain. There were magic libraries in languages like Java and C# that let you map XML to objects using a million annotations, but they only supported a subset of XML and if your XML didn't fit that shoe you'd get 95% of the way and then realize that there was no way you'd get the last 5% in, and had to rewrite the whole thing with some awful streaming XML parser like SAX.

JSON, while not perfect, maps neatly onto data structures that nearly every language has: arrays, objects and dictionaries. That it why it got popular, and no other reason. Definitely not "fashion" or something as silly as that. Hundreds of thousands of developers had simply gotten extremely tired of spending 20% of their working lives producing and then parsing XML streams. It was terrible.

And don't even get me started on the endless meetings of people trying to design their XML schemas. Should this here thing be an attribute or a child element? Will we allow mixing different child elements in a list or will we add a level of indirection so the parser can be simpler? Everybody had a different idea about what was the most elegant and none of it mattered. JSON did for API design what Prettier did for the tabs vs spaces debate.
by exabrial | 2026-03-14 13:04:10+00:00
Up to a certain point and It’s actually very dependent on the CPU.

Take Epyc processors. On certain ones, after certain RAM amount, populating all the slots causes the cpu to kick the RAM speed to a lower tier.

You’re then limited to capacities of two sticks.

Weird, but it has to do with power requirements. Abutting above the threshold had to be buffered, which increases latency.
by echelon | 2026-03-14 13:04:15+00:00
The word "content" is gross.

"Creator", on the other hand, is beautiful. It means you don't have to pick a lane. Anything can be creative. Documentary filmmaking, stop motion, dance, costume work, historical reenactment, indie animation, economics essays, game dev...

The problem is we don't have a nice word that holistically captures the output of creators. They're not all making films or illustrations. So what do you call it? "Art" is awkward.

"Content" works, but it sounds like slop. We need a better alternative word that elevates creative output.
by softwaredoug | 2026-03-14 13:04:35+00:00
Most important thing: you need to absolutely feel rock solid working with an AI coding tool (Claude Code, Open Code, Codex). It's the biggest shift in the industry in decades, and has become more real in the last few months.

People can debate the merits of LLM coding, but that's something every hiring manager will want you to know.
Show HN: Built an AI ad generator and ran $9K of FB ads with it
by mesmertech | 2026-03-14 13:04:50+00:00
Been in the AI image gen space since 2023, before even GPT image gen was a thing, and after spending ~9K on Facebook ads for my own projects (made a video about that actually) I realized the thing I kept getting stuck on was the creatives themselves. I'm horrible at making reels-type video ads and Canva even with templates is surprisingly complicated for ad-specific stuff, plus everything ends up looking the same as everyone else using the same templates.

Made a video going into detail about the full FB ads journey if anyone's interested: https://www.youtube.com/watch?v=xoe_l67ZReU

Most of the existing AI ad tools (Predis, AdCreative, etc.) give you these generic template outputs that look like stock photo collages, or they're enterprise-priced and overkill if you're just a solo founder trying to test 10-20 ad variations quickly. I wanted something where I could throw in product images, describe what I wanted, and get back actual usable creatives, static ads, before/after formats, UGC-style videos, the stuff that actually converts on FB.

Some things I learned building this: the competitor research part ended up being way more useful than I expected. Being able to see what ads competitors are running, how long they've been live (which usually means they're working) and then generating variations off that is a much better workflow than starting from scratch and hoping the AI makes something good.
Same lesson as with Framecall, if you just say "make me a nice ad" the output is a gamble. The more specific you are about the hook, the pain point, the format, the better the result. I don't think people talk about this enough with AI creative tools.

UGC video ads are where most of the value is but also hardest to get right. Still iterating on that part.
Show HN: Lean-pq a typesafe PostgreSQL connector for lean
by ngrislain | 2026-03-14 13:04:57+00:00
I’ve been building lean-pq, a PostgreSQL connector for Lean 4.

While Lean is primarily known for theorem proving, I believe its dependent-types and formal verification features make it the ideal target for AI Agents to generate provably correct code [0].

Lean-pq uses FFI to bind to libpq, but leverages Lean’s type system to move database errors from runtime to compile-time:

- Compile-time SQL Validation: Uses Lean’s macro system to check SQL strings against your schema during the build. Misspelled columns or type mismatches cause a build failure.

- Monadic Permission Tracking: An effect-tracking monad distinguishes between Read-Only and Read-Write operations. You can statically guarantee a function won't modify the DB: def getUser (id : Int) : DB .ReadOnly User.

- Zero-Overhead FFI: Battle-tested libpq performance with Lean 4 ergonomics.

The goal is to eliminate runtime surprises—syntax errors, permission violations, and null-mismatches—at the compilation phase. I’d love to hear feedback from anyone exploring Lean 4 for systems programming.

Project: https://github.com/typednotes/lean-pq

[0] https://ngrislain.github.io/projects/2026-3-12-dont-vibe--pr...
by philjohn | 2026-03-14 13:05:00+00:00
Meanwhile lots of people in the PC building community have cases with glass panels on the side, and go to a lot of effort to make the inside look a certain way. This includes things like custom sleeved cables, perfect cable management, RGB on various things.

I also have a glass panneled side to my computer, but the only RGB on it is on the graphics card waterblock, everything else is just jet black (fans, ZMT water cooling tubing, radiators etc. etc.)
Show HN: Fastify's slow startup is an AJV problem – here's a drop-in fix
by greatvenerable | 2026-03-14 13:05:21+00:00
When using schemas, Fastify's startup speed is heavily affected by its schema compiler, AJV. AJV compiles every schema on startup. That's not the problem. The problem is it's quite slow, and they admit this themselves on their docs: https://ajv.js.org/guide/getting-started.html
The more routes, the more complex your schemas, the longer you wait. For most people this isn't a bottleneck — schemas are relatively simple and routes are few. But for serverless functions, situations where every ms counts, or where you need to compile schemas on demand, it matters.
Swapping the schema compiler fixes it.
100 routes, complex schemas (allOf/oneOf/anyOf/conditionals):
JetValidator has removeAdditional, useDefaults and coerceTypes enabled. AJV has none, while fastify's default also has those 3 options enabled internally

Fastify default AJV: 658ms
AJV no options: 425ms
@jetio/fastify-validator: 122ms

100 routes, 500 properties per schema:
Same options setup.

Fastify default AJV: 69s
AJV no options: 47s
@jetio/fastify-validator: 2.6s

JetValidator with full options enabled. AJV with none. Still 18x faster.
Benchmarks are reproducible, Run them yourself: https://github.com/official-jetio/fastify-validator

It's a custom schemaController or buildValidator for Fastify that lets you swap the compiler it uses. Two functions to drop it in:
npm i @jetio/fastify-validator

const fastify = Fastify({
schemaController: createJetValidatorController({
removeAdditional: true,
useDefaults: true,
coerceTypes: true,
}),
});

Or using buildValidator directly if you need more control:

const fastify = Fastify({
schemaController: {
compilersFactory: {
buildValidator: createJetValidatorCompiler({
removeAdditional: true,
useDefaults: true,
coerceTypes: true,
}),
},
},
});

This was built specifically for developers who have issues with Fastify startup time or want faster startups. If you don't then you don't need this.

The package is powered by @jetio/validator, a full AJV replacement built from scratch. 19x faster compilation on average across 62 schemas. 72% overall win rate in validation. 99.5% JSON Schema compliant across drafts 06 through 2020-12. Zero dependencies. 26KB gzipped. Everything AJV does is built in, formats, custom keywords, $data, $ref, async validation and custom elseIf keyword no extra packages needed.

Fastify validator: https://github.com/official-jetio/fastify-validator
Schema Builder with json schema compliant type inference: https://github.com/official-jetio/schema-builder
Validator: https://github.com/official-jetio/validator
Benchmarks: https://github.com/official-jetio/validator#benchmarks
Docs: https://github.com/official-jetio/validator/blob/main/DOCUME...
by mschuster91 | 2026-03-14 13:05:25+00:00
> The framing of A/B testing as a "silent experimentation on users" and invoking Meta is a little much.

No. Users aren't free test guinea pigs. A/B testing cannot be done ethically unless you actively point out to users that they are being A/B tested and offering the users a way to opt out, but that in turn ruins a large part of the promise behind A/B tests.
by ffernandesclaro | 2026-03-14 13:06:34+00:00
I'm the author. I've spent the last couple of years building functional products with AI tools instead of writing specs, and the results changed how I think about product development.
The short version: I built a satellite monitoring module in 9 days that would have taken an engineering team 8-10 weeks. Not production quality, but functional enough for real users to test and give honest feedback. That feedback was better than months of pre-build research would have produced.
The experience led me to develop two operational frameworks, SIGNAL and ATLAS, for rapid product discovery and construction. Both are running in production with real teams and real revenue. The article describes the economic argument underneath: the cost of specification (meetings, documents, reviews, estimation) is now often higher than the cost of just building a testable version. That inverts the logic of how we've organized product development for 30 years.
Happy to answer questions about the practical side, what the tools actually produce, where the model breaks down, and what engineers think about non-engineers building software.
by ako | 2026-03-14 13:07:28+00:00
Assume you work for e.g., a cigarette company. A company responsible for many deaths by unethically adding highly addictive substances. By sabotaging the company you are making this world a better place. Ethically it's the right thing to do.

Or, assume you're hired by the Nazi to work in concentration camps. Ethically it's the right thing to do to sabotage their gas chambers.
by mexicocitinluez | 2026-03-14 13:07:53+00:00
> All that stuff would take me about 5 minutes without AI.

There isn't a single person on this planet (detractor or not) that would believe this statement.

If you're argument rests on an insane amount of hyperbole (that immediately comes off as just lying), then maybe it's not a great argument.

> I'd much rather write that code myself instead of spend an hour convincing an AI to do it for me.

You're not suggesting that asking CC to build the UI for a route planner takes me an hour to type, are you?