MurphyA/hacker-news huggingface dataset:
by genshii | 2026-03-12 13:39:41+00:00
I've been presented with this thought experiment before and I always feel like I'm missing something when other people talk about it. Why would you ever take both boxes?

The premise is that the predictor is always right. So whether you take one or both boxes, the predictor would have predicted that choice. We know from the setup that if the predictor said you would take the one box, it will have a million dollars. Therefore, if you take the one box it will have a million dollars in it (because whatever you choose is what the predictor predicted).

As an aside, I think whatever this says about free will or if you're actually making a "choice" is irrelevant in regards to if the million dollars is in the box. The way I see both choices is this:

You "decide" to take both boxes -> the perfect predictor predicted this -> the opaque box has zero dollars -> you get a thousand dollars

You "decide" to take the opaque (one) box -> the perfect predictor predicted this -> the opaque box has a million dollars -> you get a million dollars

If you want to consider the version of this where the predictor is almost perfect instead of truly perfect, I don't think that changes anything. Say it's 99% accurate or even 90% accurate.

You take the opaque box -> the predictor has a 90% chance of predicting this -> it follows that there's a 90% chance that the box has a million dollars -> you have a 90% chance of getting a million dollars

Had you picked both boxes, you have a 90% chance of not getting the million.
by JumpCrisscross | 2026-03-12 13:39:42+00:00
> Headline makes it sound like retail credit

I’m coming at this loaded with jargon, so excuse my blind spot, but why would the term private credit bring to mind anything to do with retail specifically?

(The term private credit in American—and, I believe, European—finance refers to “debt financing provided by non-bank lenders directly to companies or projects through privately negotiated agreements” [1].)

[1] https://corporatefinanceinstitute.com/resources/capital_mark...
by frannyPS | 2026-03-12 13:40:31+00:00
As a follow-up: If the four-quadrant model (S_v, S_u, E_v, E_u) feels a bit too abstract, I wrote a companion piece applying this exact framework to analyze a recent, massive Amazon outage.

It shows practically how the accumulation of unverified behaviors (or verification without deliberate specification) plays out at a hyper-scale, and how the "verification paradox" turns localized failures into cascading system collapse.

You can read the case study here: https://doi.org/10.5281/zenodo.18980467

I think looking at real-world post-mortems through this lens makes the danger of the AI-driven "E_v trap" much more tangible.
by dormento | 2026-03-12 13:40:35+00:00
(op, i just realized you might be mentioning things other's believe, and it might not be an opinion of your own. In this case, I'm sorry if i came as too blunt, its just that i come from a background of religious extremist and i'm particularly picky about some things. I can remove it if you wish, but I'd rather take the criticism.)

This reminds me of https://en.wikipedia.org/wiki/Not_even_wrong . Its a classic categorization mistake. Its not exactly wrong (its also not right, mind you...), its just non-constructive and almost not worthy of a reply. But since this is a discussion forum, I'll bite.

It judges others on their "ignorance", while embracing it. It talks about religious "narratives" and compares it to belief in the "one true capital G god" (the "real" truthy truth). Meaning it puts one set of beliefs (subjective experiences) above all others, and seems completely unaware of the contradiction while doing so.

It also misunderstands the concept of a mitochondrial Eve. She was not the first, and not the only one alive at the time, she was just the one whose direct lineage survived. Before her there were others. The name "Eve" is doing a lot of work here...

> Fun facts all of the main major religious scriptures Hindu, Jewish, Christian, Buddhist has description or prophecy of Muhammad one way or another.

You mean that $HOLY_BOOK also has a description of the prophecy of the One True Prophet Bob? It must be true, because I'm pretty sure it is.

There's also your point about monotheism.

> overtime by ignorance, people started worshipping idols alongside the original God.

Being someone with a certain admiration for the scientific method, i'm inclined to point out that as far as the history of religion goes (and please correct me about this statement), monotheism seems to be a more recent development (I'm pretty sure hn has people far more qualified than me to add substance here).
Show HN: RAG knowledge base poisoning lab, 100% local
by aminerj | 2026-03-12 13:40:36+00:00
I'm the author. The lab runs entirely on LM Studio +
Qwen2.5-7B-Instruct (Q4_K_M) + ChromaDB — no cloud APIs, no GPU
required, no API keys.

From zero to seeing the poisoning succeed: git clone, make setup,
make attack1. About 10 minutes.

Two things worth flagging upfront:

- The 95% success rate is against a 5-document corpus (best case for
the attacker). In a mature collection you need proportionally more
poisoned docs to dominate retrieval — but the mechanism is the same.

- Embedding anomaly detection at ingestion was the biggest surprise:
95% → 20% as a standalone control, outperforming all three
generation-phase defenses combined. It runs on embeddings your
pipeline already produces — no additional model.

All five layers combined: 10% residual.

Full attack breakdown and defense architecture:
https://aminrj.com/posts/rag-document-poisoning/

Happy to discuss methodology, the PoisonedRAG comparison, or anything
that looks off.
Show HN: DollarDeploy AI, agent to deploy your web apps to production
by huksley | 2026-03-12 13:41:02+00:00
Hi HackerNews,

Ruslan here.

I once posted here a story how I got AWS $4k surprise bill for one day (https://news.ycombinator.com/item?id=31907374), which is why I built DollarDeploy. I believe 95% of apps don't need complicated AWS infrastructure and can be hosted using simple server from Hetzner, Digital Ocean, etc.

Today I am launching an AI agent on DollarDeploy. The AI agent can automatically build and deploy your NextJS/React, Go, Rust, or other types of apps to your own servers, running all commands via SSH on your server. You just type your commands or paste your GitHub repo link!

DollarDeploy is similar to Dokploy expected there is no self-hosted version, because we want to offer a simple solution which you don't configure and maintain - just add your GitHub repo and you are good to go.

What makes DollarDeploy different is that we run apps as isolated Systemd processes on your server, and you can install Redis, Postgres, and other services to your host in a single click. Everything works locally, with low overhead as normal Linux processes, without the need of third party services.

Try deploying your app — takes under 5 minutes. Looking for your feedback and opinion! Happy to answer any questions you have!

FAQ: 1) To use DollarDeploy, you need to bring your own server or provision one directly through UI/AI. 2) We have 14-day trial. 3) We are using OpenAI LLMs (probably will change soon) 4) You can use quick boilerplate to launch the app, or a template for open source software, including running GPT-OSS LLM model
Show HN: We analyzed 1,573 Claude Code sessions to see how AI agents work
by keks0r | 2026-03-12 13:41:12+00:00
We built rudel.ai after realizing we had no visibility into our own Claude Code sessions. We were using it daily but had no idea which sessions were efficient, why some got abandoned, or whether we were actually improving over time.

So we built an analytics layer for it. After connecting our own sessions, we ended up with a dataset of 1,573 real Claude Code sessions, 15M+ tokens, 270K+ interactions.

Some things we found that surprised us:
- Skills were only being used in 4% of our sessions
- 26% of sessions are abandoned, most within the first 60 seconds
- Session success rate varies significantly by task type (documentation scores highest, refactoring lowest)
- Error cascade patterns appear in the first 2 minutes and predict abandonment with reasonable accuracy
- There is no meaningful benchmark for 'good' agentic session performance, we are building one.

The tool is free to use and fully open source, happy to answer questions about the data or how we built it.
by hrmtst93837 | 2026-03-12 13:41:14+00:00
Storing pitch and yaw breaks down once you want arbitrary camera rolls, or if you need to interpolate between orientations, because of gimbal lock. Using angles for small UI bits or flat objects is fine, but when those billboard particles need more than one axis of freedom, you usually end up needing quats anyway. Quats are opaque, but conversion functions and debug views help when you actually need to read what's going on. Trig shortcuts mostly pay off for simple or highly constrained motion, but scaling them up tends to introduce messy edge cases.
by throw10920 | 2026-03-12 13:41:59+00:00
They absolutely are. You ever done any work fighting spam? It's all about making it hard and expensive enough for spam to land that it's no longer economically viable - you den't and can't actually stop all spam. Same thing here.

Sure, the bad actors don't particularly care for the guidelines - until their accounts start losing karma and getting dead'd/banned. Then they do, and that still materially improves the site.
by hermanzegerman | 2026-03-12 13:42:05+00:00
Not if you're powerusing it like in the Article and relying heavily on Swap.

Also there are countless reports of bricked M1 8GB MacBook Airs that are bricked because the SSD used up it's write cycles

https://youtu.be/0qbrLiGY4Cg?si=mjKn2oLjqAb36hPU
by coldpie | 2026-03-12 13:42:12+00:00
> The problem is all these over-leveraged sectors will drag everybody else

Well, the good news is that's what good public policy is for, to blunt the impact of the damage with strong anti-trust enforcement and careful cash injections to weak-but-critical areas of the economy to help stabilize in rough times.

Now, hang on for just one moment while I crawl out from under this rock and take a look at who we have entrusted to set our public policy.
by bluGill | 2026-03-12 13:42:26+00:00
Even in the worst part of the great depression 75% of the people had a job. Most years where much better.

Don't get me wrong, if you don't have a job things are bad. If you have a job but it isn't giving good raises, or it is a worse job than you are qualified for things are bad. However things are not hopeless for the majority of people even when things are really bad, and you can get through it.
by dns_snek | 2026-03-12 13:43:32+00:00
> Firewalls don't replace OS permissions, OS permissions don't replace encryption

Of course but the crucial difference is that these operate using an allow list, not a block list.

If I extend the analogy, if my OS required me to block-list every user who shouldn't have access to my files then I wouldn't trust that mechanism to provide a security barrier. If my firewall worked in such a manner that it allowed all traffic by default and I had to manually block every attacker on the public internet then I wouldn't rely on it either.

My own analogy is that this it a bit like saying that you want a relatively safe car and then buying one without any airbags or seatbelts, and thinking it's fine because it has lane departure warnings and automatic braking. I've got nothing against you personally, I just find this sort of viewpoint extremely puzzling (and oddly common). I make the same criticism when people just disable post-install scripts instead of using a sandbox.
by Fnoord | 2026-03-12 13:43:36+00:00
For archiving, DVD is 4 GB and who knows how long the medium will last.

LTO-6 drives go for 300-500 EUR refurbished. You need a FC switch or HBA. Each tape holds 2+ TB uncompressed data.

As for NVMe, if you do a lot of writes (e.g. DB's, Docker), go for enterprise. If you do that, grab one with PLP. You'd use it also as a cache for ZFS.
by victxrlarixs | 2026-03-12 13:43:55+00:00
Remember when your desktop looked like a beige microwave, chmod was life, and Netscape Navigator was your gateway to the web?

Introducing CDE Time Capsule: the 1990s Unix Common Desktop Environment, fully recreated in your browser.

Play around with it here → https://debian.com.mx

Built for nostalgia, engineered for the pixel. If you ever wanted to feel like a 90s sysadmin again, this is your time machine.
by pdimitar | 2026-03-12 13:44:00+00:00
It's also quite amazing how macOS doesn't support containerization which is hugely important for a hefty chunk of all devs out there. So, Docker Desktop, Colima, OrbStack. VMs. Deal with it.

Not to mention the amazing amount of services running in the background, at least 80% of which I haven't needed in the 6.5 years I have my Mac, but can't stop / remove / disable.

My Linux laptop is supposedly 40% weaker than my desktop Mac, so the online sheets say at least. It runs my work's integration test suite 15% faster.

A lot of us have given Macs a very honest chance. It's okay and it's very workable, that much is a fact -- but if one is willing to pimp their machine and OS -- nowadays made even easier by LLMs -- then the experience and everyday ergonomics and actual dev-enhancing abilities quickly outpace a Mac.

And I wish that wasn't true because I wasn't looking forward to changing my main machine. But the annoyances and slowness and closeness just compound until they start literally reducing your everyday productivity.
by phkahler | 2026-03-12 13:44:05+00:00
>> The engineering confidence this gives for actual planetary defense is massive.

I've been waiting for this a long time. They initially reported significant changes to the orbit of the smaller rock around the larger one which was cool and all, but I kept wanting to hear how much it affected the whole system. I suspect it's taken several years to answer that because it's such a tiny change in velocity. Dimorphos we can deflect, Didymos not so much.
by Aurornis | 2026-03-12 13:44:10+00:00
I have an older 8GB MacBook Air. This is false. I routinely have Slack, Chrome, iTerm, Visual Studio Code, and more open on it. It’s fine.

Those apps don’t need every single byte of memory you see in Activity Monitor to be active in RAM all of the time. The OS swaps out unused parts to the very fast SSD. If you push it so far that active pages are constantly being swapped out as apps compete then you start to notice, but the threshold for that is a lot higher than HN comments seem to think.
by kryogen1c | 2026-03-12 13:45:11+00:00
> liquidity crisis in the former to cause a crisis of confidence in the latter

Wait what? Your thesis is the GFC was caused by a liquidity crunch/bank run? Isn't that... not true?

Isn't the proximal to distal chain of events government encouraged subprime loans -> inaacurately valued MBS -> exponential, unregulated derivative instruments -> leveraged contagion. What does market confidence have to do with any of that?
by ajross | 2026-03-12 13:45:35+00:00
> I’ve been tempted to buy one and do “real dev work” on it just to show people it’s not this handicapped little machine.

But... you can do the same exercise with a $350 windows thing. Everyone knows you can do "real dev work" on it, because "real dev work" isn't a performance case anymore, hasn't been for like a decade now, and anyone who says otherwise is just a snob wanting an excuse to expense a $4k designer fashion accessory.

IMHO the important questions to answer are business side: will this displace sales of $350 windows machines or not, and (critically) will it displace sales of $1.3k Airs?

HN always wants to talk about the technical stuff, but the technical stuff here isn't really interesting. The MacBook Neo is indeed the best laptop you can get for $6-700.

But that's a weird price point in the market right now, as it underperforms the $1k "business laptops" (to avoid cannibalizing Air sales) and sits well above the "value laptop" price range.
by mikrl | 2026-03-12 13:46:00+00:00
>so much of what software engineers do all day isn't in that space

Seems to me that critical infra that supports a lot of modern computing is in that space though.

If you want to develop that depth of knowledge you need to go into HPC/scientific, trading or accelerator hardware. I didn’t get into this sometimes crazy industry to NOT learn stuff and push the limits of my computer.

I’m glad I know about those applications now, but I wonder how much of a disservice we did to the industry by just focusing on frameworks and abstraction especially now that you can just sling a lot of that out with a prompt…
by dormento | 2026-03-12 13:46:03+00:00
> Although I would argue the Trinity (which is a modern Christian invention) and many aspects of reverence for saints and angels is pseudo-polytheistic, and likely a result of the syncretism of the various pagan traditions into Christianity as it spread throughout Europe, although that came later.

Good point. There are many "local versions" of Mary, for example, in Latin America. All of them display unique traits indicative of "synchretization" (sp?) of say african Orishas, probably dating back to the time of the slave trade.
by delichon | 2026-03-12 13:46:18+00:00
Yesterday I asked a frontier model to help generate a report. It said great, it can do that, and output a table. I asked it to evaluate its prompt compliance in the result. It concluded that it had failed on every requirement. I asked why it had expressed such confidence, was it analagous to narcissism or psycopathy? It said no, and then said that if I just had to anthropomorphize it, I should think of it as a brilliant friend with severe frontal lobe brain damage.

That actually helps.
Show HN: I built proxy that keeps RAG working while hiding PII
by rohansx | 2026-03-12 13:46:20+00:00
Hey HN,

When you send real documents or customer data to LLMs, you face a painful tradeoff:

- Send raw text → privacy disaster
- Redact with [REDACTED] → embeddings break, RAG retrieval fails, multi-turn chats become useless, and the model often refuses to answer questions about the redacted entities.

The practical solution is consistent pseudonymization: the same real entity always maps to the same token (e.g. “Tata Motors” → ORG_7 everywhere). This preserves semantic meaning for vector search and reasoning, then you rehydrate the response so the provider never sees actual names, numbers or addresses.

I got fed up fighting this with Presidio + custom glue (truncated RAG chunks, declension in Indian languages, fuzzy merging for typos/siblings, LLM confusion, percentages breaking math). So I built Cloakpipe as a tiny single-binary Rust proxy.

It does:
• Multi-layer detection (regex + financial rules + optional GLiNER2 ONNX NER + custom TOML)
• Consistent reversible mapping in an AES-256-GCM encrypted vault (memory zeroized)
• Smart rehydration that survives truncated chunks like [[ADDRESS:A00
• Built-in fuzzy resolution for typos and similar names
• Numeric reasoning mode so percentages still work for calculations

Fully open source (MIT), zero Python dependencies, <5 ms overhead.

Repo: https://github.com/rohansx/cloakpipe
Demo & quick start: https://app.cloakpipe.co/demo

Would love feedback from anyone who has audited their RAG data flow or is struggling with the redaction-vs-semantics problem — especially in legal, fintech, or non-English workflows.

What approaches have you landed on?
by multidude | 2026-03-12 13:46:32+00:00
The model choice matters a lot for cost. I've been running a production NLP pipeline on OpenClaw using Claude Haiku exclusively — it's roughly 25x cheaper than Opus for inference tasks where you don't need the full reasoning power. For most "read this text, classify it" tasks Haiku is more than sufficient.

The hard part for a new user who knows about VMs isn't the VM setup — it's knowing which model to reach for. Opus for complex reasoning, Sonnet for balanced tasks, Haiku for high-volume classification or anything where you're calling the API repeatedly in a loop. Getting that wrong is where bills explode.

A sensible default for a hosted product like Klaus would be Sonnet with Haiku available for bulk operations. Opus should require an explicit opt-in with a cost warning.
by toofy | 2026-03-12 13:47:03+00:00
reading through the comments,

how would a company respond if you had a bot do your job interview in your place? or do your rent applications?

they wouldn’t accept it.

growing up, my first job as a teenager at a restaurant that had ridiculous uniforms, i lasted about two months. i realized it irritated me that the owner would hang out at the restaurant in street clothes but expected us to look like little dancing monkeys. i quit and never worked another job where the owner asked us to do things they would never lower themselves to do.

i understand on the surface jt sounds petty, but it has proven to be a fairly strong indicator of how employees are treated.

if the people in power look at those who make them money as less than, if those in power expect others to jump through hoops they wouldn’t do themselves, it’s time to seriously reevaluate the situation.
by palmotea | 2026-03-12 13:47:10+00:00
> We're going to add that. I've resisted adding reasons-for-flagging for years, but even I can change my mind every decade or so.

You need a reason that means "this person is talking about something helpful that an admin needs to fix." Flagging currently has a negative connotation (too many flags and the comment gets deleted), but sometimes you want to flag a comment that says something like "the link is broken and should be X" to just bring it to admin attention without the implied negative judgement.
by the__alchemist | 2026-03-12 13:47:12+00:00
Concur on most interesting! I really hope it works out, but am cautious.

It is surprising to me seeing the rust web backend scene; many libraries, server frameworks, and users, but they are all Flask-analogs, without the benefit of the reasonably-robust ecosystem Flask has. My suspicion is that people are using them for micro-services and not websites/webapps, but I haven't been able to get a straight answer on this about how people are using these tools. I.e. even though rust is my favorite overall language and see no reason it couldn't be used for web work, I still use Django.

Axos, Axum, Rocket, Diesel etc, are all IMO not in the same league as Django. My understanding is that addressing this is Loco's Raison d'etre.

Another aspect of the Rust web ecosystem: It's almost fully gone Async.
by lesuorac | 2026-03-12 13:47:14+00:00
> Versus e-voting where may conceivably manage to swing the vote with a handful of people.

No the thing you're missing is that the ballots are always electronically counted. Sure, at the very low level they'll manually count each ballot but the sums are then provided to different people electronically who then report the combined total sum.

But also a handful of people can just remove registered voters to have the same effect.

The fraud is easy to scale though because it if you win local offices you can use that to control state offices which you can then uses to control federal offices.
by maciusr | 2026-03-12 13:48:13+00:00
BeLLMark — a self-hosted LLM evaluation studio for blind A/B/C testing across 9 providers.
I got frustrated trying to pick between models for compliance-related tasks at work. Public benchmarks told me nothing useful about my specific domain. So I built a tool where you can run your own prompts through Claude, GPT, Gemini, Grok, etc., judge the outputs blind (without knowing which model produced which), and get honest data about what actually works for your use case.
One-time purchase, self-hosted, PolyForm Noncommercial license. Targeting AI consultants and compliance teams who need to justify model choices with real evidence rather than vibes and vendor marketing.
About 3-4 weeks from launch. Early comments always nicely welcome: https://bellmark.ai/