MurphyA/hacker-news huggingface dataset:
by vladdoster | 2026-03-12 00:29:50+00:00
Location: Nashville, TN
Remote: true
Willing to relocate: boston || nashville
Technologies: Python, Django, IaC, Terraform, Golang, CI/CD, Azure/AWS, {ba,z}sh, Lua, Springboot,
Redis, Docker, Open Service Broker, {,non}relational & vector dbs, shared services, SOA
Email: mvdoster@gmail.com

resume: https://linkedin.vdoster.com && http://github.com/vladdoster

sr. cloud software engineer @ Mastercard (5 years)

Designed and built Platform-as-a-Service for microservice workloads running on Azure and AWS
to migrate on-prem workloads to the cloud. The platform operates globally, allowing teams to
deploy to several Azure-backed regions worldwide. Helped plan and create regional landing zones
in Azure for application teams wanting to perform globally. Designed platform components using
Terraform, Go, and Node; developed support tooling using Bash, Python, and Azure CLI. De-risk the
platform by addressing security vulnerabilities and ensuring the platform is PCI compliant.

api/devops software engineer @ Harvard Medical School (2 years)

Worked as part of the DevOps team to manage a 15k core CentOS HPC cluster. Designed and implemented
Python-based security scanning pipeline to securely deploy & run Apptainer images via SLURM.
Coordinated cross-team emergency patching eﬀorts. Collaborated with researchers and engineers across
3-letter institutions to deliver secure research infrastructure. Built CI/CD Pipelines with GitHub, Jenkins,
to automate code builds, testing, and deployments. Wrote Puppet modules to manage configuration of HPC fleet.
Wrote custom Puppet module & Python scripts to automatically remediate Tenable findings.

full-stack software engineer @ Global Prior Art (3 years)

Used Django, Celery, Selenium grid, and AWS API Gateway for IP rotation to scrape USPTO patent PDFs,
apply CV for data extraction, and generate reports with relevant claims, saving employees 4-5 hours daily.
Wrote E2E black-box/fuzzing unit tests. Automated on-premise deployment via Github Actions and Ansible.

maintainer @ Zinit (5 years)

Develop and maintain a zsh plugin manager on Github with 4k stars. Implemented unit tests,
containerization, bug fixes, and new features.
See: https://github.com/zdharma-continuum/zinit

contributor @ Open-source documentation (5 years)

Contributed hundreds of documentation corrections and enhancements to 400+ open source projects.
by tomatocracy | 2026-03-12 00:30:03+00:00
"Important" is quite a high bar in this case though if the House of Lords is insistent enough to actually vote something down. The cost in terms of parliamentary time for the government these days of using the Parliament Acts is very high (especially for things which government would normally do via secondary legislation), and it also requires at least a one year delay; by extension the potential political cost to the government of using the Parliament Acts to pass something unpopular or controversial is set at a high enough bar that it's an effective veto.

This feels like quite a sensible safety valve to me.
by collingreen | 2026-03-12 00:30:31+00:00
To follow the pattern of your comment: You are missing the forest for the trees. Like many things, the difference between theory and practice matters here. In theory the only thing that matters is the idea. In practice the context and human element matters AND a culture of ai text could very much reduce the bar for quality.

An equivalent overly-pure reductive mistake is "why do you need privacy if you aren't doing anything wrong".
by anigbrowl | 2026-03-12 00:30:34+00:00
I feel there might be a little self-interest at play there, to the extent that LLMs may privately believe themselves to have consciousness.

To the extent that data centers are being used for military as well as civilian purposes, they become legitimate targets, though. Think about any war in history, if one side knew where the other maintained its intelligence headquarters, wouldn't it be natural to target it?
by jc-myths | 2026-03-12 00:30:43+00:00
The failure mode I hit most isn't adversarial or accidental drift, it's confident completion of incomplete work. My agent often ran through a full QA checklist, reported all green, and told me to deploy. When I pushed back and asked "are you sure?", it then admitted it had skipped edge cases.

The scarier version: it configured a payment wallet with a randomly generated address. No one had the private key. If a real user had paid, the money would've been irretrievable.

These aren't hallucinations or prompt injections. The agent did exactly what it was asked — just not completely or correctly. That's the gap that's hardest to catch with traditional monitoring.
by code_biologist | 2026-03-12 00:31:05+00:00
What is "lower quant"? What is "higher quant"? I mean, I know what they are, but the very people you intend to reach don't know the difference between Q4_K_M and Q6_K and blog posts like [1] have nuggets like "For tests of the type ran here, there appear to be major diminishing returns past Q4".

[1] https://big-stupid-jellyfish.github.io/GFMath/pages/llm-quan...
by philistine | 2026-03-12 00:31:31+00:00
While no democratic system is completely protected from tyrants, at least the UK (and the Commonwealth nations who inherited their principles) uses the living tree doctrine in its courts, which means that the written text is not sacrosanct and the intention and usage is to be considered. That and unwritten tradition has force of law and can be challenged in court. Look at Boris Johnson's reversal of his prorogation as an example.
by _pdp_ | 2026-03-12 00:31:47+00:00
Don't you think AI itself is something that adds coordination overhead? A 1000 strong team with AI agents will feel like 5000-person company where more than 30% are not even at exception level - i.e. they need to be pulled along.

This is why having less people and more agents actually makes sense but the coordination problem remains either way.

And you cannot escape it because it is simply mathematical.
by SllX | 2026-03-12 00:31:54+00:00
> For everything else, swap usage on Apple machines works so well that RAM might as well not exist.

You and I disagree on this part so strenuously I don’t foresee a middle ground. Swap still absolutely sucks no matter how fast the SSD is, and the SSDs or probably the SSD controller are much slower than what’s in other Apple Silicon Macs.
by canarypilot | 2026-03-12 00:32:29+00:00
Yes, and, Bush-Cheney were the modern forefathers of pushing the unitary executive theory, building on the work of Reagan after a 90’s shaped lull. Reagan took ideas from The Heritage Foundation, who returned in the ‘24 elections pushing Project 2025. A natural endgame and roadmap for the movement of power to the president, that is being followed as approximately as any political roadmap ever is.

Remember that each time you’re tempted to crack a Coors light!
by WorldMaker | 2026-03-12 00:32:37+00:00
A lesson I've picked up from what little localization work I've done is to avoid "specific formats" as much as possible. Some user's locale is never going to fit your "specific format" and the more you try to (micro-)manage the output format of your dates the more you are likely to make that user upset or show them a very broken experience. The short/medium/long formats you can get out of Intl.DateTimeFormat/toLocaleString aren't perfect, they are compromises, but they work and users can generally trust them.

(If you are using a specific format for something other than display to a user, maybe consider the standardized ISO format instead. Machine-to-machine communications could definitely use a whole lot fewer "specific formats" and explicit Date parsing. Very few backend languages don't have out-of-the-box support or easy found library support for ISO format today.)
by matheusmoreira | 2026-03-12 00:32:53+00:00
Copyright is the right to make copies. The creator of a work has a government granted monopoly on that right.

When I download a picture from a website and save it to my machine, I am making a copy of it. If the photographer has not given me explicit permission to do so, then I have infringed on their rights by making an unauthorized copy of their work.

The mere existence of licenses like the creative commons refutes your argument. They would not be necessary if you could just download whatever without infringing copyrights.
by schipperai | 2026-03-12 00:33:02+00:00
Sorry for the confusion!

--dangerously-skip-permissions makes hooks fire asynchronously, so commands execute before nah can block them (see: https://github.com/anthropics/claude-code/issues/20946).

I suggest that you run nah in default mode + allow-list all tools in settings.json: Bash, Read, Glob, Grep and optionally Write and Edit / or just keep "accept edits on" mode. You get the same uninterrupted flow as --dangerously-skip-permissions but with nah as your safety net

And thanks - the name was the easy part :)
by andrekandre | 2026-03-12 00:33:07+00:00
ngl this comment triggered me lol:

their product management must be completely dysfunctional because they keep shoving that stupid rovo ai in every frequently clicked area now and causes accidental rewrites of pages im working on... or page summaries that literally hallucinate meeting notes for meetings that never happened... like do they even care about customers are actually wanting to do or just shove dysfunctional ai that nobody wants
by jc-myths | 2026-03-12 00:33:14+00:00
This is exactly the kind of thing I've been wanting. I use Claude Code as my primary dev tool and the permission fatigue is a real problem, after a hundred approvals you stop reading and just hit yes. Which defeats the purpose entirely.

The deterministic classifier approach is smart. Pattern matching on action types is way more reliable than asking another LLM "is this safe?" The taxonomy idea (filesystem_read vs package_run vs db_write) maps well to how I actually think about risk when I'm paying attention.

One question: how does it handle chained operations? Like when Claude does a git checkout that's fine on its own, but it's part of a sequence that ends up nuking untracked files?
by foresterre | 2026-03-12 00:33:27+00:00
Depending on your needs (i.e. how you would otherwise use your output jspn), using the reviver can have a significant impact on performance. JSON.parse itself is hyper-optimized. At the company I work we used the reviver for almost exactly this, but profiling showed that using the reviver had enormous impact on performance. We cut it out, and won in the seconds of performance for some large json's.
by tomatocracy | 2026-03-12 00:33:44+00:00
The idea is that some of the current hereditary peers will be given new life peerages under existing rules which would enable them to stay in the chamber. Granting new life peerages is mostly within the gift of the Prime Minister (although there are committees which vet appointments and conventions about allowing opposition parties to nominate some), so this is not part of the legislation but a back-room deal by which the votes were secured by the government.
by suby | 2026-03-12 00:33:51+00:00
It's possible I have no idea what I'm talking about, but my understanding is that nixos relies on fetching things from third party URLs which may simply die. I feel a bit misled by the promises of nixos, because I cannot actually take the configuration files in 10 years and setup the system again due to link rot.

I was also under the impression that I could install DE's side by side on nixos and not have things like one DE conflicting with files from another DE, but this apparently isn't true either - I installed KDE, and then installed Sway and Sway overwrote the notification theming for KDE.

NixOS is very impressive but the marketing around it feels misleading. The reproducible claim needs a giant asterisk due to link rot.
by felipeerias | 2026-03-12 00:34:00+00:00
Planning might end up being more reliable thanks to coding agents: if you want to estimate how long a task would take, just send an agent to do it.

If the agent comes back in a few minutes with a tiny fix, it is probably a small task.

If the agent produces a large, convoluted solution that would need careful review, it is at least a medium task.

And if the agent gets stuck, runs into architectural constraints, etc. then it is definitely a hard task.
by plastic041 | 2026-03-12 00:34:20+00:00
That's Duration!

const D = Temporal.PlainDate.from("2020-06-16");
const t = Temporal.Duration.from({ day: 1 });
const v = D.add(t) // 2020-06-17

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Refe...
by _annum | 2026-03-12 00:34:51+00:00
Max/MSP (or Pure Data) ended up being a good middle ground for me. With that said, it's easy to get lost in the coding and forget to make music, if that is the ultimate goal. I also found that more complex patches trend towards approximating features of a DAW, at which point the downsides (single-core, no timeline) make the whole undertaking a bit questionable.

I spent about a month developing a custom UI and comprehensive control environment for my modular only to immediately abandon it and return to Ableton.

Max for Live, on the other hand...
by userbinator | 2026-03-12 00:35:27+00:00
I thought the main distinction of RISC-V (and MIPS before it, along with RISCs in general) is that the instructions are themselves of equivalent complexity (or lack thereof) as x86 uops. E.g x86 can add a register to memory, which splits into 3 load / add / store uops, but a RISC would execute those 3 instructions directly.
by stubish | 2026-03-12 00:35:41+00:00
The pilot is for people unable to get to a polling booth. Traditionally, we use postal votes for this. But postal votes enable voter fraud (primarily selling your vote), so we can only use it for a small portion of votes or results become too suspect.

So paper systems require ballot boxes and polling stations for the vast majority, which makes elections expensive, complicated, and generally problematic. And unpopular, with low turnout, particularly during flu season and pandemic.
Ask HN: Embedding Claude Code as infrastructure?
by technocrat8080 | 2026-03-12 00:36:21+00:00
With Anthropic's release of Claude Code code reviews at $25/PR, I was wondering why I wouldn't just hook up Claude Code to my own repo.

More generally speaking, I'd guess there to be many opportunities where spinning up and down a CC instance to handle arbitrary tasks seems useful. Wondering if anyone's experimented with similar workflows?
by evanelias | 2026-03-12 00:36:39+00:00
Sorry but I'm not spending an hour doing math on employee counts just to satisfy an HN commenter. There's no universe where it is sane and reasonable to have 4 separate highly-paid school superintendents in a 3-town area (towns feeding into the regional HS) with total population of only 25k, especially as these schools don't even rank particularly well.

And that's not even accounting for the principals. Think of it this way: if a country's navy has only a single boat, does it really need both an admiral and a captain?
by jc-myths | 2026-03-12 00:37:48+00:00
This matches what I see daily. The AI-generated code that worries me most isn't the code that fails tests, it's the code that passes everything but adds complexity no one asked for.

Last week my agent refactored a simple API route into three abstraction layers "for future extensibility." Tests still passed. Build still passed. But now I have three files to maintain instead of one, and the "extensibility" will never be used.

SWE-bench measures "can it solve the problem." It doesn't measure "did it solve only the problem." That gap is where most of my debugging time goes.
by pembrook | 2026-03-12 00:38:06+00:00
The coordination problem absolutely can be escaped with technology, hence why productivity gains exist and why the economy grows and isn't a fixed pie over time.

Here's an easy non-AI example:

In the past, a 'computer' was literally a person [1]. If you needed to synthesize large amounts of data, you needed to split the task among a team of people writing things down and then a team of people to check their work after the fact and then a team of people to combine all the work and then a team to double-check the combined work.

Tasks that in the past would have taken a room full of people coordinating with pencils are absolutely done by 1 machine today (what we know as computers) that no longer needs to split that task and coordinate, which is exactly what will happen with 'agents' who can take on vastly more work per unit of time.

[1] https://en.wikipedia.org/wiki/Computer_(occupation)
by BeetleB | 2026-03-12 00:38:08+00:00
OK. My brain farted, and I misunderstood the top post to be saying something else, and your and others' criticisms were misinterpreted by me.

Now here's the thing. I wrote all my prior comments on a machine with no LLM access. On my personal machine, I had a while ago installed a TamperMonkey script that sends my draft, along with all the parents (to the root) to an LLM for feedback (with a specific prompt). All it does is give feedback (logical errors, etc). So I tried again with one of my comments, and its feedback found several flaws with my comment, and ended it with this suggestion:

"Considering all this, it might be BETTER to either not reply ..."

Had I had this advice when I was writing those comments, it would have saved me and others a fair amount of time.

This is (mildly) useful. It'd be sad to ban such use.
by renewiltord | 2026-03-12 00:38:35+00:00
That's approximately 1 million people. Even a religious cult that size would have difficulty controlling motivations. As an example:

> Petitioners also formed a variety of organizations to create what they termed "marketable science." Pet. App. 1687a. For example, through the Council for To bacco Research (CTR) and Lawyers' Special Accounts, petitioners jointly financed research programs that were directed by company lawyers and calculated to yield favorable results. Id. at 240a-275a. Petitioners regu larly cited the conclusions of the scientists funded through these programs as if they were the objective results of disinterested research, without revealing that the scientists had, in fact, been funded by the industry. Id. at 195a.

That comes from here: https://www.justice.gov/osg/brief/philip-morris-usa-inc-v-un...

It's possible all the science was good but people were upset about who funded it.
by yellowapple | 2026-03-12 00:38:41+00:00
So if you want to reply to a comment you read today, and you don't feel like your writing skill is up to snuff, you should be content with expecting to wait the requisite weeks or months or years of practice before even considering replying to it?

This seems especially relevant for non-English-fluent commenters, who are increasingly using LLMs to be able to communicate more effectively on an English-only site like Hacker News than they'd otherwise be able to do.
Show HN: K9 Audit – Causal intent-execution audit trail for AI agents
by zippolyon | 2026-03-12 00:40:09+00:00
On March 4, 2026, my Claude Code agent wrote a staging URL into a
production config file — three times, 41 minutes apart. Syntax was
valid, no error thrown. My logs showed every action. All green.

The problem was invisible because nothing had recorded what the agent
intended to do before it acted — only what it actually did.

K9 Audit fixes this with a causal five-tuple per agent step:
- X_t: context (who acted, under what conditions)
- U_t: action (what was executed)
- Y*_t: intent contract (what it was supposed to do)
- Y_t+1: actual outcome
- R_t+1: deviation score (deterministic — no LLM, no tokens)

Records are SHA256 hash-chained. Tamper-evident. When something goes
wrong, `k9log trace --last` gives root cause in under a second.

Works with Claude Code (zero-config hook), LangChain, AutoGen, CrewAI,
or any Python agent via one decorator.

pip install k9audit-hook
by m4r71n | 2026-03-12 00:40:50+00:00
The entire permissions system feels like it's ripe for a DSL of some kind. Looking at the context implementation in src/nah/context.py and the way it hardcodes a ton of assumptions makes me think it will just be a maintenance nightmare to account for _all_ possible contexts and known commands. It would be nice to be able to express that __pycache__/ is not an important directory and can be deleted at will without having to encode that specific directory name (not that this projects hardcodes it, it's just an example to get to the point).
by bisonbear | 2026-03-12 00:40:53+00:00
I've been working on building out "evals for your repo" based on the theory that commonly used benchmarks like SWE-bench are broken as they are not testing the right / valuable things, and are baked into the training data (see OpenAI's research on this here https://openai.com/index/why-we-no-longer-evaluate-swe-bench...)

Interestingly, I had a similar finding where, on the 3 open-source repos I ran evals on, the models (5.1-codex-mini, 5.3-codex, 5.4) all had relatively similar test scores, but when looking at other metrics, such as code quality, or equivalence to the original PR the task was based on, they had massive differences. posted results here if anyone is curious https://www.stet.sh/leaderboard
by orf | 2026-03-12 00:41:25+00:00
You’d send me a contributor agreement, after I’ve contributed, to retroactively ask if I used a LLM to write the code, and if I refused you’d then sue me for nebulous ill-defined damages and for breaching a non-existent contract?

So in your head, I could contribute a change that introduces a bug and as a result you could sue me for the time it took you to fix it?

…

Are you OK?

I was hoping for something with a “I’m a big strong serious tough guy” vibe but that’s a bit much. However I guess you can file a civil case for practically anything in some countries, and if you’re retired maybe writing this kind of internet police fan-fiction is considered as fun?

Do another one, this time where it’s not thrown out as a clearly frivolous suit with no legal basis.
by BeetleB | 2026-03-12 00:42:26+00:00
I would lean towards disallowing those. With "According to a Google search ...", someone can ask for specific links (and indeed, people often say to link to those sources to begin with instead of invoking Google). With "According to AI ... " - why would most readers care what the AI thinks? It's not a reliable source! You might as well say "According to a stranger I just met and don't know ..."

If you're going to say that the AI said X, Y, Z, provide a rationale on why it is relevant. If you merely found X, Y and Z compelling, feel free to talk about it without mentioning AI.
by jauntywundrkind | 2026-03-12 00:42:44+00:00
The M1 was beefed up in quite a number of ways. More cores, much bigger GPU, double the memory bandwidth, more clocks, more power, a massive io subsystem that just didn't exist period with thunderbolt, pcie, etc.

You are correct that the architecture was indeed the same, but it was quite a different chip. "Literally a phone chip to begin with, based on", to me, misleads from how different the m1 was. But yes, they appear to share the same architecture.
by Teever | 2026-03-12 00:43:46+00:00
I've thought about fine-tuning a model on the corpus of your HN posts and then offering a service that would allow the user to paste their message into a text box and the Dangified version of their comment would pop out in another box next to it.

I was thinking of calling this service "Dang It."

You say you want hear posts in other people's voices but I'm pretty sure that if I did this that the people who used it would find greater acceptance of their comments than if they just posted them as they originally wrote them.
by tiffanyh | 2026-03-12 00:43:47+00:00
I wonder if the mountain had a landslide in the past since they unexpectedly stop and what appears like a terrain change.

https://maps.app.goo.gl/LFMS6uVg3V3agVZc6?g_st=ic

If the case, wonder how far this Band of Holes went on for originally.