MurphyA/hacker-news huggingface dataset:
by hsbauauvhabzb | 2026-03-09 21:21:33+00:00
I’m not disputing that, I’m suggesting the cost of support staff outweighs the value (to google) of retaining broken or lost accounts. I’m not a legal expert but it might be a good pre-emptive move to add support even if it’s extremely poor purely to avoid government regulation (given identity is basically bound to email, it might be a unique scenario if someone is unable to identify because of a private company, etc).
by spwa4 | 2026-03-09 21:21:38+00:00
Would that be the politicians that organized these things?

https://www.europarl.europa.eu/doceo/document/E-10-2025-0014...

I'm not clear on who owns them, but they USED to be owned by private parties and I can't find anything on a purchase ... so ...

Oh and a recent addition: asylum proceedings DO NOT stop the deportation process in Europe anymore. Court proceedings "can proceed", but potentially after actual deportation. Oh and winning the court case gets you the right to stay ... NOT the right to enter. So if governments now just defund immigration courts ... oh they did that long before this new law came into being. Welcome to the new Europe!

Do not worry. I am a European, and I'm 100% positive such details will not stop any Europeans from criticizing everyone else. In fact they're very unlikely to even know about their own laws, especially recent changes.
by andrewaylett | 2026-03-09 21:21:46+00:00
The author framed his issue as a choice between separate VMs (with high cost) per user or decoding the messages. As he, you, and I all say: what he's got does work. I'm absolutely not saying that now he's solved the problem he should do something else. But the choice wasn't between only those two extremes.

This protocol was amenable to inspection, the next might not be.

I use NextDNS, one of the features it provides is letting you register a source IP so requests from your network "just work". It might not be a mainstream consumer feature, but neither NextDNS nor managed Unifi controllers are mainstream consumer products.
by Fnoord | 2026-03-09 21:21:54+00:00
Back when I still made ANSI art, a couple of UNIX Ansi art editors were around, but I used ACiDDraw [1] in (probably, don't remember) Dosbox.

Kind of like I used hkSFV for a long, long time. No GUI utility came close, feature-wise. Although if you consider CLI, you can do scripting after download.

[1] https://archive.org/details/aciddraw
by VorpalWay | 2026-03-09 21:22:53+00:00
> Interesting how compiler specific extensions are ok for C, with a freestanding subset, or Rust no_std, but when it goes to other languages it is no longer the same.

Not sure what you mean here. For Rust there is only one de facto compiler currently, though work is ongoing on gccrs (not to be confused with rustc_codegen_gcc, which only replaces the llvm backend but keeps the rest of the compiler the same). Work is also ongoing on an official spec. But as it currently stands there are no compiler specific extensions.

If you meant the attribute I mentioned for embassy? That is just processed by a rust proc-macro, similar to derives with serde is used to generate (de)serialisation code. It too adds custom attributes on members.
by brotchie | 2026-03-09 21:23:02+00:00
Not enough time, too many projects. Useful projects I did over the weekend with Opus 4.6 and GPT 5.4 (just casually chatting with it).

2025 Taxes

Dumped all pdfs of all my tax forms into a single folder, asked Claude the rename them nicely. Ask it to use Gemini 2.5 Flash to extract out all tax-relevant details from all statements / tax forms. Had it put together a webui showing all income, deductions, etc, for the year. Had it estimate my 2025 tax refund / underpay.

Result was amazing. I now actually fully understand the tax position. It broke down all the progressive tax brackets, added notes for all the extra federal and state taxes (i.e. Medicare, CA Mental Health tax, etc).

Finally had Claude prepare all of my docs for upload to my accountant: FinCEN reporting, summary of all docs, etc.

Desk Fabrication

Planning on having a furniture maker fabricate a custom walnut solid desk for a custom office standing desk. Want to create a STEP of the exact cuts / bevels / countersinks / etc to help with fabrication.

Worked with Codex to plan out and then build an interactive in-browser 3D CAD experience. I can ask Codex to add some component (i.e. a grommet) and it will generate a parameterized B-rep geometry for that feature and then allow me to control the parameters live in the web UI.

Codex found Open CASCADE Technology (OCCT) B-rep modeling library, which has a web assembly compiled version, and integrated it.

Now have a WebGL view of the desk, can add various components, change their parameters, and see the impact live in 3D.
by anonym29 | 2026-03-09 21:23:13+00:00
Violence isn't the answer. Handheld IR/non-visible-wavelength LiDAR systems that permanently fry CMOS image sensors are.

If state laws permit the capture of light, let them capture light. Light has no spectrum allocation laws, no license required to emit, and as long as you're not disturbing anyone (e.g. with deliberately obnoxious use of visible wavelengths), you're not breaking any laws.

LiDAR operators do not have a legal duty to protect image sensors around them.
by crazygringo | 2026-03-09 21:23:21+00:00
It's transformative, so no.

Legally, using the tests to help create the reimplementation is fine.

However, it seems possible you can't redistribute the same tests under the MIT license. So the reimplementation MIT distribution could need to be source code only, not source code plus tests. Or, the tests can be distributed in parallel but still under LGPL, not MIT. It doesn't really matter since compiled software won't be including the tests anyways.
by mynameisvlad | 2026-03-09 21:23:26+00:00
> You probably mean necromancy.

You:

> I probably did not. Then I would have written that. They are fucking over the dead. They are clearly not communicating with the dead.

A less snarky and hostile version:

> I actually didn't! I specifically meant that they are fucking over the dead.

Pretty much the same content, and it makes you sound like you actually want to interact with other people. Even in your paragraph long explanation you do quite a few things that are just unnecessarily hostile. It's clearly just the way you talk, but it also doesn't mean you shouldn't work on improving it.

> For myself, I think the comment I replied to could have been phrased as a question rather than a statement.

Then you should have (politely) said it.
by olderhall | 2026-03-09 21:23:49+00:00
GitBook | Product / Platform / Security Engineers | Remote (EU); Amsterdam

We're building the AI-native platform for documentation. Teams use GitBook to create and leverage product knowledge — technical docs, API references, user guides, and FAQs.

GitBook is AI-native for both readers and writers (human or otherwise). We provide the tooling that helps technical writers and product teams stay on top of the fast-moving products they're documenting.

We're growing our engineering team and are currently hiring for:

- Product Engineers
Engineers who enjoy working closely with customers to solve real problems. We don't have PMs or product owners — you'll talk directly with users, ship features, and iterate quickly based on feedback.

- Platform Engineers
Engineers with experience building and scaling public-facing web platforms. GitBook serves 120M+ page views per month, and our content model presents challenges around concurrent editing, caching, and large-scale delivery.

- Security Engineers
Hands-on engineers focused on protecting our users, infrastructure, and brand. You'll help us strengthen security across the organization and own initiatives from concept to production.

Contact me directly steven@gitbook.com or https://www.gitbook.com/careers
(Apply via the Product Engineer role regardless of your background.)
by rolandog | 2026-03-09 21:24:09+00:00
Ha! Well, not right now! Previous to the last year or so, this wouldn't have escalated to the current situation where we're actively having to be wary of fending off Big Brother or blatant power grabs.

However, given that we're talking about a European phone, I'm willing to bet that this type of effort goes hand in hand with decoupling from American-backed services (at least for those who've seen the writing on the wall and understand the risk to their sovereignty if they put all their eggs on an American basket).
by _pdp_ | 2026-03-09 21:24:50+00:00
I find it amusing that one of the main things to do with OpenClaw and other similar tools is create a Web Interface on top of it so that users can click on buttons when the entire promise of the technology is that you don't have to do any of that because it transcends standard UI.

I mean, ultimately why would you even need a CRM if not to sell something? And if you are going to sell something ultimately you want to get that done without any additional layers of abstraction. So the interface is the definition of the goal and the output is measured in results.

"Hey claw, I want to sell my product. Go figure it out!"

You don't need a UI for that.
by asoorm | 2026-03-09 21:24:59+00:00
There’s been a lot of excitement lately around tool protocols like MCP for AI agents. They make it easier for models to discover and call external tools.

But when you look at real systems, agents still need a structured way to interact with application backends - services, data, and business logic.

The post argues that MCP solves the tool interface problem, but not the application architecture problem.

There seems to be a missing layer between agents and backend systems: a graph of APIs and data that agents can query and compose. Technologies like GraphQL can potentially serve as that layer by exposing a typed, discoverable interface to the application backend.

Curious how others are thinking about this layer when building real agent systems.
by thunderfork | 2026-03-09 21:25:09+00:00
I find the "compression" argument not very strong, both because copyright still applies to (very) lossy codecs (e.g. your 16kbps Opus file of Thriller infringes, even if the original 192khz/32bit wav file was 12,000kbps), and because copyright still applies to transformed derivative works (a tiny midi file of Thriller might still be enough for the Jackson's label to get you)
by kanemcgrath | 2026-03-09 21:25:15+00:00
without discussing copyright, I don't believe any of this is copied. Which I think should be the argument that actually matters.

I downloaded both 6.0 and 7.0 and based on only a light comparison of a few key files, nothing would suggest to me that 7.0 was copied from 6.0, especially for a 41x faster implementation.
It is a lot more organized and readable in my armature opinion, and the code is about 1/10th the size.
by andrewflnr | 2026-03-09 21:25:27+00:00
A high ratio of upvotes to comments is generally a sign of a high quality HN submission. It means that most people don't feel the need to add anything or argue about it. If we're going to throw around accusations of being a "degenerate", I think it fits better on people who can't stop themselves from commenting even if they have nothing useful to say.
Energy-based Model (EBM) for enterprise AI security Ship it or keep tuning?
by ALMOIZ_MOHMED | 2026-03-09 21:25:30+00:00
I've been building Energy-Guard OS for the past several months — and I want an honest opinion from people who actually understand the tradeoffs, because I'm stuck at a decision point.
What is it?
It's not a fine-tuned LLM. It's a production application of Energy-based Models (EBMs) — an architecture that assigns an energy score to inputs rather than predicting tokens. Low energy = normal. High energy = threat or anomaly.
The core use case: a real-time data gateway that sits between your organization and any AI service, blocking sensitive data from leaking out (PII, financials, strategic documents) while still allowing legitimate AI use. Think of it as a firewall, but one that understands semantic context, not just regex patterns.
More about EBMs
No hallucination (it scores, not generates)
Calibrated risk score, not binary block/allow
Runs on modest hardware — currently 192.8 req/s on a single 4 vCPU / 16GB RAM machine
411MB model size, under 700MB memory usage
Built from scratch on 7 production data sources
The honest test results (10,000+ cases, independent test suite):
Total Tests: 13,000
Valid Responses: 13,000
Success Rate: 100.0%
Overall Accuracy: 88.74%

Duration: 18.4s
Throughput: 704.5 req/s
Avg Latency: 17.6ms
P50 Latency: 17.9ms
P95 Latency: 32.0ms
P99 Latency: 33.8ms
Category
Accuracy
Financial Leak Detection
100%
PII / Private Data
100%
Strategic Data
100%
Malicious Code
95%
OWASP LLM Top 10
87%
Multi-Turn Attacks
67%
General Benign (False Positives)
66%
Overall
88.7%
F1: 0.927 | Precision: 0.922 | Recall: 0.932 | Specificity: 0.740
The problem I'm facing:
After 2 months of tuning, I've gone from 74% → 88.7% overall accuracy. But I've hit a wall where improving one category hurts another. Specifically:
The false positive rate is too high for general/technical content (the system over-blocks benign code and text)
Multi-turn conversation attacks are at 67% — the model doesn't fully leverage conversation context yet
Every time I push one metric up, something else drops
My actual question:
Do I ship a limited Beta now — restricted to the use cases where it performs at 95-100% (financial data, PII, strategic leaks) — or do I keep tuning before any real-world exposure?
Why i want to ship:
Real-world data will teach me more than synthetic test cases
The high-value use cases already work extremely well
I've been optimizing against synthetic benchmarks for 2 months
Why i want to wait:
34% false positive rate on general content will frustrate users
Multi-turn is a known attack vector that's currently weak
First impressions matter
Website if you want to see more details: https://ebmsovereign.com/
All forms on the website are currently disabled except for emails, which will be available for testing within 24 hours,
Genuinely want to hear from people who've shipped security products or ML systems in production. What would you do?
by BeetleB | 2026-03-09 21:25:32+00:00
This is a poorly organized article, even for the Daily Mail.[1] It jumps around and keeps repeating the same stuff.

The CIA didn't "hide" the paper. The paper was published in a scientific journal and accessible to anyone who knew the language. They simply classified their own report/translation.

It's not the CIA's role to help with cancer research.

[1] Which over a decade ago was commonly referred to as "The Daily Fail" for the amount of misleading information in their articles.
by raviadiprakoso | 2026-03-09 21:25:49+00:00
This is my personal project for training NN using AMD older GPU because we have no ROCm support by using DirectX11 as subtitute. It means you can train Alexnet style model or ResNet on windows desktop that support DX11. Future roadmaps would be support for Linux that use Vulkan and migrating to DX12 for Windows. So we don't have to dealt with that GroupMemoryBarrierWithGroupSync overheads. I have verified the gradients computations against PyTorch and it exactly matched. Most of the times, it achieved around 20-40% FLOPs efficiency (this also depends heavily on VRAM bandwidth) but it could be improve further. This project is also open source on Github, go check it out.
by toast0 | 2026-03-09 21:25:51+00:00
A perpendicular intersection uses way less area than a roundabout. That's the basic reason.

Roundabouts have better throughput than a busy 4-way stop, but less throughput than a signaled intersection if the timing and sensing is reasonable (many signaled intersections don't have reasonable sensing). Roundabouts also have some pretty nasty worst case wait times; I'm really not looking forward to the state installing one near me on the approach to a car ferry; it won't be fun to wait for 200 cars to go by before you get a turn to go, and I expect long ferry lines to result in impatient people in the ferry line blocking the roundabout. Sometimes there's two hours between ferry loadings. Going to be some fun times.

Personally, I find it challenging to both look ahead to the right to confirm I have room to enter the roundabout, look to the left to confirm there is no traffic that I need to wait for, as well as looking far left and right to ensure there are no pedestrians crossing soon. Signaled 4-way perpendicular intersections have worse outcomes when a participant doesn't follow the signalling, but indication of right of way makes it easier to confirm at a glance if it's safe to proceed.
by tmp10423288442 | 2026-03-09 21:25:53+00:00
> LLM's - to date - seem to require massive capital expenditures to have the highest quality ones, which is a monumental shift in power towards mega corporations and away from the world of open source where you could do innovative work on your own computer running Linux or FreeBSD or some other open OS.

When the FSF and GPL were created, I don't think this was really a consideration. They were perfectly happy with requiring Big Iron Unix or an esoteric Lisp Machine to use the software - they just wanted to have the ability to customize and distribute fixes and enhancements to it.
by rootusrootus | 2026-03-09 21:26:02+00:00
> I've had to eat some humble pie and moderate my assessment of the F-35

Same for me. I was surprised to hear that it actually competes favorably on price. And aside from early griping that it couldn't beat an ancient F-16 in a dogfight, it seems pretty capable in that regard too. Saw a demo at the last airshow I went to and that plane was defying physics. I love the 16, always will, but I definitely don't think it would hang with an F-35.
by PaulRobinson | 2026-03-09 21:27:20+00:00
Great example of allowing perfect to be the enemy of good.

If major advanced economies are able to move their entire grid away from coal, it means the entire grid globally can move from coal.

"Ah", the critics say, "but manufacturing is so much more complex!"

Really? These are not countries without manufacturing. They have data centres stacked with the latest generation of Nvidia chips, electric rail, major capital cities, populations of millions...

... and of course, China agrees and is trying to move towards decarbonisation of their grid.

Yes, it'll take time, but it'll take even longer if you never start.
by sofixa | 2026-03-09 21:28:17+00:00
> modern air defense environment

Wildly dependent on your definition of "modern", which mostly depends on your potential adversary. The Russia/Ukraine, and the new war in the Gulf have shown numerous ways in which 4th generation jets, and more importantly cheaper missiles and even more cheap drones can perform supression of enemy air defences and/or air support. Unless you're fighting the US or China, 4th gen jets are plenty. And even against US and US defended locations, cheap drones and missiles have been able to influct some pretty serious damage to critical infrastructure (like extremely expensive and rare radar systems). An adversary not crippled by extreme sanctions and corruption for decades might have been able to achieve even more, even with the total lack of airpower.
by vbarrielle | 2026-03-09 21:28:23+00:00
Google vs Oracle ruled that APIs fall under copyright (the contrary was thought before). However, it was ruled that, in that specific case, fair use applied, because of interoperability concerns. That's the important part of this case: fair use is never automatic, it is assessed case by case.

Regarding chardet, I'm not sure "I wanted to circumvent the license" is a good way to argue fair use.
by jjee | 2026-03-09 21:28:49+00:00
Fair. But finally we are seeing what LLM proponents are putting forward.

And it’s exactly what I expected - lines of code. Cute. But… so what? This is not good for the AI hype and nor any continued support for future investment.

On the other hand all this stuff is going to drive continual innovation. The more tokens generated the more model producers invest. And we might eventually get to a place of local models.
by throwup238 | 2026-03-09 21:29:01+00:00
> The leap hour will be in 7200 years, around year 9226.

7200 years ago the Neolithic revolution was still in full swing and many of the most famous megaliths like Stonehenge hadn’t even been built yet. The first real state, the Sumerian civilization, hadn’t formed yet in Mesopotamia.

Personally, I’m very comfortable making this someone else’s problems 7200 years from now. If they’re still having basic coordination issues then it’s their own damn problem.
Show HN: LOAB – AI agents get decisions right but skip the process [pdf]
by shubh-chat | 2026-03-09 21:29:11+00:00
LOAB, an open-source benchmark for evaluating whether AI agents can follow regulated lending processes — not just produce the right final answer.
The motivation is simple: in mortgage lending, regulators don't care if you got the right answer. They care whether you followed the right process. Skip a KYC check, pull a credit bureau report before getting privacy consent, or approve a loan without the required policy lookup — that's a compliance failure even if the outcome was correct.
Current AI benchmarks don't measure this. They evaluate what the agent decided, not how it got there.
LOAB simulates a fictional Australian lender with mock regulatory APIs, multi-agent roles mirroring real bank operations, and a five-dimension scoring rubric derived from actual lending law. A run only passes if the outcome is correct AND the process was correct.
The main finding: frontier models achieve 67-75% outcome accuracy but only 25-42% when you also require process compliance. It's surprisingly hard to get AI to follow a prescribed sequence of steps even when it clearly "knows" the right answer.
by jasonlotito | 2026-03-09 21:29:50+00:00
I think it's a reasonable ask that when buying a product, it has reasonable levels of safety, security, and privacy. Especially with products that might change over time because of software updates.

Yes, there are ToS, but it's fine for us as a society to say that consumers deserve more protection against big tech so we aren't a TOS update away from having everything shared or be used for something that wasn't promoted.

> You have free will. If you do not like a commercially available product, don't buy it, don't use it.

Caveat emptor. But lemon laws exist, too.

And, a commercially available product now might not be the same a year from now.
by rodchalski | 2026-03-09 21:30:23+00:00
The token savings are real and the on-demand discovery approach is the right design. MCP's schema bloat is a genuine problem for multi-tool environments.

Worth noting what this doesn't change: the authorization surface. Whether the agent discovers 120 tools eagerly (native MCP) or lazily (mcp2cli), the set of tools it's permitted to call is the same. Token efficiency doesn't reduce blast radius.

MCP today has no authorization layer in the spec. Every connected server grants the agent full access to every tool it exposes. The agent decides what to call based on its own reasoning. If prompt injection hijacks that reasoning, the agent calls tools it shouldn't — and there's no enforcement boundary between "agent wants to call X" and "X executes."

Two distinct problems:
1. Context efficiency: how does the agent learn what tools exist? (mcp2cli solves this well)
2. Authorization scoping: which tools is this agent permitted to invoke for this specific task? (nobody in the MCP ecosystem is solving this yet)

Solving #1 without #2 means you have a more efficient agent with the same unrestricted access. That's useful — but it's not safer.

Curious if you've thought about adding permission metadata to the CLI discovery layer — something like --allowed-tools that an orchestrator could set, so the agent only sees tools it's authorized to use for the current task.