MurphyA/hacker-news huggingface dataset:
by orangeboats | 2026-01-29 17:34:43+00:00
>Support for IPv6 is notoriously bad in residential modems.

No? Over here at (South) East Asia we have been deploying IPv6 for nearly a decade now. The users are getting their IPv6 connectivity. Before someone jumps out and shouts SeCuRiTy: the firewall is enabled by default.

I am not saying the support is perfect. I know some people moan about lackluster IPv6 configuration in many routers. But for 90% of residential internet users (who care about pretty much nothing but the ability to watch YouTube and browsing social media), it damn sure is.
by heliumtera | 2026-01-29 17:35:12+00:00
There is definitely more to the inability for models to perform well at SRE. One, it is not engineering, it is next token prediction, it is vibes. They could do Site Reliability Vibing or something like that.

When we ask it to generate an image, any image will do it. We couldn't care less. Try to sculpt it, try to rotate it 45 degrees and all hell breaks loose. The image would be rotated but the hair color could change as well. Pure vibes!

When you ask it to refactor your code, any pattern would do it. You could rearrange the code in infinite ways, rename variables in infinite ways without fundamentally breaking logic. You could make as many arbitrary bullshit abstraction and call it good, as people have done it for years with OOP. It does not matter at all, any result would do it in this cases.

When you want to hit an specific gRPC endpoint, you need an specific address and the method expects an specific contract to be honored. This either matches or it doesn't.
When you wish the llms could implement a solution that captures specifics syscalls from specifics hosts and send traces to an specific platform, using an specific protocol, consolidating records on a specific bucket...you have one state that satisfy your needs and 100 requirement that needs to necessarily be fulfilled. It either meet all the requirements or it's no good.

It truly is different from Vibing and llms will never be able to do in this. Maybe agents will, depending on the harnesses, on the systems in place, but one model just generate words words words with no care about nothing else
by MSFT_Edging | 2026-01-29 17:35:17+00:00
I've had graphical installs inexplicably lock up or silently fail before, so it could be nice on a minimal system.

Personally, I get joy out of setting up a new machine exactly how I want. I haven't broken an arch install bad enough to require re-installing in almost 10 years so its rare I'm actually installing it anyway. If I want a system up quick I'll pick another distro.
by dcrazy | 2026-01-29 17:36:03+00:00
In addition to the article’s stated benefits of faster charging than Li-ion, less temperature sensitivity, and lower propensity of thermal runaway, does switching to sodium also potentially address a raw materials problem? (Imagine if desalination could be made ecologically viable by harvesting the waste sodium for batteries…)

And what’s the downside? More complex chemistry to make the cathode?
by nuzzl | 2026-01-29 17:36:05+00:00
I’ve been building Cylect, an AI-powered OSINT engine, and recently used it to deconstruct a live phishing campaign targeting Hotpads users.

What’s interesting here isn't just the phishing site itself, but the exfiltration path. Most of these scripts are "black boxes" to the average user, but by sending them a CanaryToken, was able to uncover their infrastructure behind it all:

The Collection: The victim enters credentials into a pixel-perfect Hotpads clone.

The Bundle: A script bundles the credit card information into a JSON payload.

The Transport: The script utilizes the Telegram API as a lightweight C2 (Command & Control) channel. It pings 149.154.161.248 (Telegram’s infrastructure).

The Attribution: The data was being routed to a receiver at 213.59.3.178, an IP located in Russia.

The Problem I'm Solving: Investigating this manually usually involves jumping between 20+ different browser tabs (VirusTotal, WHOIS, Hunter, URLScan, etc.). I built Cylect to unify 475+ OSINT tools into a single AI-powered workspace that can automate the "pivoting" between data points.

Additionally, doing this research in a completely separate VM Browser ensures that there is no attribution to you, while still having access to all 475+ OSINT tools, and Cylect AI, and an infinite Mind Map with notes.

The Business Model: I recently pivoted from a standard SaaS sub to a $5 Day Pass model. I found that OSINT researchers often have "bursty" workloads—they need deep access for 24 hours of intense investigation but don't want a recurring monthly bill.

I'd love to hear your thoughts on the investigation flow or the "Day Pass" model for developer tools!
by crystal_revenge | 2026-01-29 17:36:09+00:00
> that's governments job

Why do people take these AI "safety" research projects at face value? The real reason you need AI that is "safe" and "governable" is so that when you start having it promote advertisers content or support the current administration, you don't have to worry about it going "off the rails" and promoting a competing product to criticizing the administration.

I'm sure plenty of researchers in this space also believe they are working for the good of humanity, but I suspect the real am is much more practical and perfectly aligned with the business interests of all the companies sponsoring this type of work.
by jph | 2026-01-29 17:36:17+00:00
If you want a quick easy way to add some colors to your own shell scripts:

export STDOUT_COLOR_START='[34m'
export STDOUT_COLOR_STOP='[0m'
export STDERR_COLOR_START='[31m'
export STDERR_COLOR_STOP='[0m'

In your shell script:

print_stdout() {
printf %s%s%s\\n "${STDOUT_COLOR_START:-}" "$*" "${STDOUT_COLOR_STOP:-}"
}

print_stderr() {
>&2 printf %s%s%s\\n "${STDERR_COLOR_START:-}" "$*" "${STDERR_COLOR_STOP:-}"
}

Source: https://github.com/sixarm/unix-shell-script-kit

The source also has functions for nocolor, and detecting a dumb terminal setup that doesn't use colors, etc.
by mrguyorama | 2026-01-29 17:36:35+00:00
Don't worry, we are well into "car branded fuel only" territory with electric vehicles.

"Buy our electricity at a huge markup to power your vehicle. Oh, you don't have one of our vehicles? Sorry, that's an extra 10% on top"

This was dystopic scifi like 20 years ago and Americans are so clueless they just sleepwalked into it because they'd rather not have a government at all.
by mitchbob | 2026-01-29 17:36:47+00:00
> “The single strongest predictor of economic mobility across areas is the fraction of higher-income friends that low-income people have,” Chetty told me. “In communities where you have more cross-class interaction, kids do much better."

https://archive.ph/2026.01.29-172547/https://www.nytimes.com...
by j-bos | 2026-01-29 17:36:51+00:00
> Mozilla is focused on deploying its roughly $1.4 billion worth of reserves to support “mission driven” organizations, according to a new report.

Back of the envelope math says that's worth 50-70 million dollars a year, taking into account inflation. A cracked developer is worth 1/2 a million per year, both of Mozilla's core offerings are OSS so benefit from free code contributions. Is that not enough for a dozen highly paid software engineers, a well paid CEO and infra? This is ignoring future donations.
by prewett | 2026-01-29 17:37:02+00:00
But new media also lets creativity blossom. The printing press eventually enabled novels through cost reduction. Prussian blue pigment is a large part of ukyio-e's attraction; it got used a lot because it was new and was a better blue. The Gothic arch's improved strength compared to the circular arch enabled cathedrals with huge windows. Concrete enabled all sorts of fluid architecture; Soviet bus stations, for instance [1].

[1] https://www.russiabeyond.com/arts/327147-10-best-soviet-bus-...
by jhnhnsn | 2026-01-29 17:37:08+00:00
Here's a little side project I made with a lot of help from Claude. I'm trying to learn CW/Morse Code and I really like the trainer G4FON Koch Trainer Version 10 (https://www.g4fon.net/) As far as I know it only runs on Windows and I want to be able to practice anytime. Decided on Flutter because I've always been interested. This is just a thing I threw together but wanted to post in case anyone was looking for something similar. The training method and docs are all heavily inspired by G4FON. It's my first public project so hit me up with any feedback on Github. I've only tested on Windows and Android. Not sure how it'll work on other platforms. Happy to fix bugs if I have time. Thanks!
by simonw | 2026-01-29 17:37:30+00:00
"Including the test suite which is something lacking in SQLite"

That's not entirely true. SQLite has a TON of tests that are part of the public domain project: https://github.com/sqlite/sqlite/tree/master/test

They do have a test suite that's private which I understand to be more about testing for different hardware - they sell access to that for companies that want SQLite to work on their custom embedded hardware, details here: https://sqlite.org/th3.html

> SQLite Test Harness #3 (hereafter "TH3") is one of three test harnesses used for testing SQLite.
by renewiltord | 2026-01-29 17:38:27+00:00
Do they go to jail?

That is not my experience here in the Bay Area. In fact here is a pretty typical recent example https://www.nbcbayarea.com/news/local/community-members-mour...

The driver cuts in front of one person on an e-bike so fast they can’t react and hit them. Then after being hit they step on the accelerator and go over the sidewalk on the other side of the road killing a 4 year old. No charges filed.

This driver will be back on the street right away.
by 9rx | 2026-01-29 17:38:33+00:00
> it looks like pglite is only useful for web apps

Where else other than web apps (herein meaning network-attached database servers that, more often than not, although not strictly so, use HTTP as the transport layer) are at meaningful risk of bumping up against SQLite write contention? If your mobile/desktop app has that problem, it is much more likely that you have a fundamental design issue and not a scaling problem.
by RegW | 2026-01-29 17:38:44+00:00
I really enjoyed unchecking all those cookie controls. Of the 1668 partner companies who are so interested in me, a good third have a "legitimate interest". With each wanting to drop several cookies, it seems odd that Privacy Badger only thinks there are 19 cookies to block. Could some of them be fakes - flooding the zone?

Damn. I forgot to read the article.
by Aurornis | 2026-01-29 17:38:58+00:00
Non-determinism isn’t the same as degradation.

The non-determinism means that even with a temperature of 0.0, you can’t expect the outputs to be the same across API calls.

In practice people tend to index to the best results they’ve experienced and view anything else as degradation. In practice it may just be randomness in either direction from the prompts. When you’re getting good results you assume it’s normal. When things feel off you think something abnormal is happening. Rerun the exact same prompts and context with temperature 0 and you might get a different result.
by throwup238 | 2026-01-29 17:39:08+00:00
There is zero chance they’re shipping sub-assemblies for some random African shop to weld together, unless they’re selling to an established auto manufacturer (which is not what this article is implying). The entire point of selling a chassis is that the manufacturer has done the hard work of assembling it and making sure it meets quality and safety standards, so that downstream customers can modify it without spending hundreds of millions on crash tests.

You can clearly see from the driver cab that this is a cab chassis meant to provide the minimum required safety for a single occupant. This is a structure welded together by robots in Toyota factories with decades of tuning and process improvements, not something welded by a third hand Lincoln tombstone. The only “innovative” feature I can see is that it’s a chassis tailored to meet safety standards in Africa for a lower cost, rather than California or the EU where that cab would never be allowed on the road.

(I stopped reading when the author pivoted to their housing pet issue so I may have missed some details, but none of the quotes from Toyota imply anything but a standard rolling chassis to me)
by seanmcdirmid | 2026-01-29 17:39:13+00:00
The limit is 20 MPH in Washington state, in California the default is 25 MPH, but is going to 20 MPH soon and can be further lowered to 15 MPH with special considerations.

The real killer here is the crazy American on street parking, which limits visibility of both pedestrians and oncoming vehicles. Every school should be a no street parking zone. But parents are going to whine they can't load and unload their kids close to the school.
Ask HN: Bookmarking service with snapshots and context based (local LLM?) search
by haunter | 2026-01-29 17:39:28+00:00
My main problem with bookmarks that I forget about them.
I don't need a bookmark keeping service, I need one which would bring them forward when I look for something, based on context too.
Something like which also makes a plain text searchable snapshot of the page? Maybe LLMs can solve that?
by phren0logy | 2026-01-29 17:39:34+00:00
Most of this hype appears to be coming from grifters who aren't actually connected to the project. So, it's there, but not the fault of the people doing the work.

This has come up in a few recent statements by the project lead, including scammy memecoins and name-sniping. One source:

https://www.theregister.com/2026/01/27/clawdbot_moltbot_secu...
by DangitBobby | 2026-01-29 17:39:39+00:00
You literally said:

> You should forgive yourself instead, become part of the grown-ups!

Or maybe you also have amnesia? In case this is hard to understand, you implied (intentionally insultingly) that I'm not a grown-up. So you invited ridicule on yourself. I think people like you are fucking idiots and I love having an excuse to tell you because you decided to stop being civil.
by ericmay | 2026-01-29 17:40:14+00:00
I wouldn't frame EU activity as decoupling from the United States, though the irony of "decoupling" from the US and cozying up to China is super cringe* despite our bombastic and rude American president. *

Instead the EU is engaging in increasingly protectionist activity to build more domestic industry. I don't have a problem with that, but I'm also more on the protectionist side given the current state of global affairs and the need for the US to decouple from China - or is it only the EU that gets to decouple from a major trading partner and the US isn't allowed? At least that's what is parroted on the Internet. :)

* Just a quick note, there's a lot of uproar on the Internet over Greenland. Deservedly. But if the EU "decouples" from the US, there's no incentive for the US to not, for example, take over Greenland. These are the kinds of push-pull engagements that are continually failed to take into account by most commentaries and in most discussions. Again it's centered around what the EU will do, or what China will do, and so forth and the analysis never makes it past this, despite the most important activities happening downstream from initial activities.

* I'm an Ukraine hawk - US should have went straight to war with Russia over the invasion - being overly simplistic here but just to illustrate my hawkish-ness. But the EU is sitting here telling us it's this huge problem that Russia is invading Ukraine, yet they're happy to increase cooperation and trading with China who is providing support to Russia for their invasion? Of course, these things are all part of a negotiating mix. Maybe increasing trade will help China stop helping Russia's war against Ukraine, but if we wanted to stop analysis at the very first thing we see as everyone seems to want to do with respect to the EU or China, we could just look at that activity and say, well, maybe we shouldn't help the EU here and if they really think Ukraine is a problem they should take these other actions instead, whatever they may be.
by dtkav | 2026-01-29 17:40:26+00:00
We just have all meeting transcripts go to Obsidian (and get processed/mined) as well as our collaborative notes (our startup makes Obsidian collaborative) for our standups and then use claude code to summarize each day into the next.

We avoid the browser agents entirely, and thus avoid the scattered context. Claude code + markdown files in our vault.

It works remarkably well. I am bullish on unix tools and text files - dom parsing, rag, etc feels like solutions to unnecessary problems.
by Davidbombal | 2026-01-29 17:41:11+00:00
A cybersecurity specialist , ethical hacker and pentester who developed tools like MRcutter(https://github.com/Ronny12345-art/MRcutter) and Hypocritespy(https://github.com/Ronny12345-art/Hypocritespy) has just launched another repo which includes Real darkweb links for investigation and analysis for pentesters(https://github.com/Ronny12345-art/Real-darkweb-links)
by jeyjeyemem | 2026-01-29 17:41:17+00:00
You can still strictly adhere to section III if you choose to - by only loading the environment variables, but Externalized Properties allows more than that if needed.

By using ExternalizedProperties instead of direct System.getenv() you get other useful features such as automatic conversions, variable expansion, and processing (e.g. automatic decryption/automatic base64 decode, etc)
Show HN: Cueso – iPhone app for location-based grocery reminders
by riqbal4 | 2026-01-29 17:41:23+00:00
Hi HN,

I built Cueso, an iPhone app that reminds you of your grocery list when you arrive at stores you already shop at.

It’s fully on-device, uses location awareness, and opens the right list automatically when you are near a store.

App Store: https://apps.apple.com/us/app/cueso/id6756196364
Short demo: https://www.youtube.com/watch?v=d9jkFA8-qwo

I would love feedback on the UX, usefulness, and edge cases.

Happy to answer questions about the design or implementation.
by jjmarr | 2026-01-29 17:41:34+00:00
The research hospital in my neighborhood has a whole biomedical engineering dept and regularly tries out new medical technology on me.

They consistently try non-standard approaches if they feel like it can improve the standard of care since their commercialization team can make more money. They can also iterate faster and deliver better outcomes.

I'm guessing either EHR software is uncompetitive or nobody has tried it yet. Or it's just because I live in Toronto and we have a really good healthcare system.
by dstroot | 2026-01-29 17:42:42+00:00
Anyone who owns a tesla vehicle with "full self driving" is probably chuckling to themselves about Tesla ever making useful general purpose robots any time soon. Disclaimer, I own two tesla's with FSD and it's far from "full" or "self". I am very sceptical of robotaxis unless they have the appropriate sensors & SW (e.g. Waymo) which Elon has not done.

Finally, I know lots of people who own cars, but none who own robots. Many friends will not have Alexa in their homes due to privacy concerns. How many people will trust Elon to have a robot in their homes and assume he's being benign and safe with your personal data?
by some_furry | 2026-01-29 17:43:03+00:00
> In 2026 there will be a focus on building tools and features for those who want AI, and for those who do not. We are the only browser who does this - and likely the only one that will.[1]

I don't want any AI features to exist in the Firefox source code, since this increases Firefox's attack surface for no real gain to the product I want to use. The AI-enabled browser should be a separate product line for people who want that.
by Roark66 | 2026-01-29 17:43:44+00:00
I use litellm (slightly modified to allow cloud code telemetry pass through) and langfuse.

There is no need for MitM, you can set Api base address to your own proxy in all the coding assistants (at least all I know - Claude Code, opencode, gemini, vc plugin).

The changes I made allow use of the models endpoint in litellm at the same base url as telemetry and passing through Claude Max auth. This is not about using your Max with another cli tool, but about recording everything that happens.

There is a tool that can send CC json logs to langfuse but the results are much inferior. You loose parts of the tool call results, timing info etc.

I'm quite happy with this. If anyone is interested I can post a github link.
by tjade273 | 2026-01-29 17:44:02+00:00
There is some interesting discussion/context/drama from Filippo on why ML-DSA is not planned for inclusion in the `crypto` standard library soon. He is intentionally delaying inclusion in order to encourage protocols to fundamentally evolve away from long-lived signatures, rather than simply replacing ECDSA with ML-DSA. This is a pretty contentious use of his authority as a maintainer. It gets at a fundamental question in crypto maintainership - when do you provide algorithms because people need them, vs. only providing ones which you believe _should_ be used? This isn't a trivial question even in more clear-cut cases like 3DES and FFDH.

----

> We designed protocols for 30 years on the assumption that signatures and public keys are marginally ~free. Suddenly replacing them with multi-KB blobs is sub-optimal, but we have the time to do better, especially in the context of synchronous protocols like TLS! (Stuff like firmware signing with timelines in the decades is different, granted, but this CA/BF ballot is about server authentication, proving that the moment we implement this it will be used for TLS.)

----

> Sigstore is a great example, actually. Right now Sigstore works like this:

> Generate a short-lived private key.
Log in to Sigstore with OIDC to obtain a certificate for the key that includes the OIDC metadata.
Use the private key to sign an attestation.
Send the signed artifact and certificate back to Sigstore to get a signed inclusion proof in the transparency log.
Every transparency log entry contains at least one public key and two signatures (one on the cert, one on the artifact). That was fine when they were free, but they are not with ML-DSA!

> Instead, here's a small change to Sigstore that leads to a much better post-quantum system:

> Log in to Sigstore with OIDC and provide the artifact, get back a signed inclusion proof in the transparency log.

>This is completely equivalent in security, but removes both public key and signatures from transparency log leaves. You can then move to ML-DSA for signing the transparency log tree heads (a smaller transition, because it doesn't affect as many parts of the stack).

>ML-DSA support in Go is not the blocker for the bulk of this work.

https://github.com/golang/go/issues/64537#issuecomment-34516...
by NoGravitas | 2026-01-29 17:44:44+00:00
That sucks, and I love to hate on "self driving" cars. But it wasn't speeding to start with (assuming speed limit in the school zone was 20 or 25), braked as much as possible, and the company took over all the things a human driver would have been expected to do in the same situation. Could have been a lot worse, probably wouldn't have been any better with a human driver (just going to ignore as no-signal Waymo's models that say an attentive human driver would have been worse). It's "fine". In this situation, cars period are the problem, not "self driving" cars.
by johnnyanmac | 2026-01-29 17:44:50+00:00
That's a small part on why people became more cynical of tech over the decades. At least with the internet there were large efforts to try and nail down security in the early 00's. Imagine if we instead left it devolve into a moderator-less hellscape where every other media post is some goatse style jump scare.

That's what it feels like with AI. But perhaps worse since companies are lobbying to keep the chaos instead of making a board of standards and etiquette.