MurphyA/hacker-news huggingface dataset:
by mjr00 | 2026-01-12 01:35:00+00:00
Right, which goes back to the main point; "total control of your computing environment" fundamentally means that you are responsible for figuring out which applications to trust, based on your own choice of heuristics (FOSS? # of downloads/Github stars? Project age? Reputation of maintainers and file host? etc...) Many, maybe most people don't actually want to do this, and would much rather outsource that determination of trust to Microsoft/Google/Apple.
by tkgally | 2026-01-12 01:35:03+00:00
I used Claude Code just yesterday in a similar way: to solve a computer problem that I previously would have tried googling.

I had a 30-year-old file on my Mac that I wanted to read the content of. I had created it in some kind of word processing software, but I couldn’t remember which (Nexus? Word? MacWrite? ClarisWorks? EGWORD?) and the file didn’t have an extension. I couldn’t read its content in any of the applications I have on my Mac now.

So I pointed CC at it and asked what it could tell me about the file. It looked inside the file data, identified the file type and the multiple character encodings in it, and went through a couple of conversion steps before outputting as clean plain text what I had written in 1996.

Maybe I could have found a utility on the web to do the same thing, but CC felt much quicker and easier.
by westurner | 2026-01-12 01:35:12+00:00
Technique or method may have been a better choice of words; but that is a "neat trick"

> 0.3516 to 0.9844

With what density in the lattice compared to other redundancy protocols? Is there a limit to how tightly such CNOT stars can be packed into a lattice?

Would you just fab lattices in that shape instead, or should the 2D and 3D lattice layouts change?

Would there be value in vortically curving the trace arms (?) of the lattices; is there even more stability in vortices in this application too?

If stars work,
Are there snowflake or crystal designs that are even more error-free, for 2D layer coding or 3D surface coding?

What of this changes in moving to optical qudits, for example?
by FireBeyond | 2026-01-12 01:35:39+00:00
I feel like this has something to do with Apple fucking with DP 1.4 for the ProDisplay XDR.

My 2019 Mac Pro with Catalina could happily drive 2 4K monitors in HDR @ 144 Hz.

People wondered how Apple got the math to work to drive the ProDisplay.

Big Sur? Not any more. 95Hz for 4K SDR, 60Hz for 4K HDR. Not the cables, not the monitors. Indeed, "downgrading" the monitors advertised support to DP 1.2 gave better options, 120Hz SDR, 75Hz HDR.

And it was never fixed, not in Big Sur, Monterey or Ventura, when I had switched monitors.

Hundreds of reports, hundreds of video/monitor combinations.
by e-dant | 2026-01-12 01:36:19+00:00
The issue this paper is grappling with (to what extent humans have a place in the middlespace between them asking an ai to do something, and the ai doing it) is interesting (although I disagree with how the paper tries to solve it).

I’m empathetic to a non-native English speaker using ai to help communicate. I mean, seriously, I would do the same thing if the lingua franca was Japanese.

The author is here saying, well yeah, there’s this weird thing that happens when I use ai by which the ideas that come out the other end are a bit different from what the author intended.

I think the sentiment “well you shouldn’t have used ai” is incomplete.

The paper is not great, but it’s an interesting question.
by rgoulter | 2026-01-12 01:36:29+00:00
> The rest of us just build tons of cool stuff for personal use or for $JOB. Releasing stuff to the public is, in general, a massive amount of extra work for very little benefit. There are loads of FOSS maintainers trapped spending as much time managing their communities as they do their actual projects and many of us just don't have time for that.

I wouldn't worry about this.

There are many examples of people sharing a project they've used LLMs to help write, and the result was not a huge amount of attention & expectation of burden.

Perhaps "I don't share it because I'm worried people will love it too much" even suggests the opposite: you can concretely demonstrate the kinds of things you've been able to build using LLMs.

> This is such a tired response at this point.

Lack of specificity & concrete examples frequently mean all that's left for discussion is emotion for hype and anti-hype, though.

In this thread, the discussion was:

pro: use LLMs or get left behind

conserve: okay, I'll start using LLMs when they're good

pro: no no they won't be that good, it takes effort to get to use them

conserve: do you have any examples?

pro: why should we have to share examples?

I like LLMs. But making big claims while being reticent about concrete claims and demonstrations is irksome.
by ptero | 2026-01-12 01:36:44+00:00
I came in to say the same thing -- major, major respect to Powell.

I am not a big fan of his earlier policies (or of Greenspan's and anyone after him for that matter). His "unlearn the importance of M2" did not age well. He made the tail end of the ZIRP more painful than it needed to be. But those were honest mistakes from a public servant who did his best and believed in what he is doing.

And standing up for what he believes is right, against this insanity from the president is the gold standard of what we need from public servants. My 2c.
by krupan | 2026-01-12 01:36:46+00:00
Oh my gosh, everything you want to host comes with a docker compose file that requires you to tweak maybe two settings. Caddy as your web proxy has the absolute simplest setup possible. You don't need AI to help you with this. You got this. You want to make sure you understand the basics so you (or your LLM doesn't do anything brain dead stupid). It's not that hard, you can do it!
by 8bitsrule | 2026-01-12 01:37:15+00:00
>I don't see how you get around LLMs scraping data without also stopping humans from retrieving valid data.

I do a lot of online research. I find that many information sources have a prominent copyright notice on their pages. Since the LLM's can read, that ought to be a stopper.

I'm getting tired of running into all of these "verifying if you're human" checks ... which often fail miserably and keep me from reading (not copying) the pages they're paid to 'protect'.

(It's not as though using the web wasn't already much harder in recent years.)
by skeptic_ai | 2026-01-12 01:37:30+00:00
You can try docker compose with Watch tower. Then you just deploy a new branch: dev, prod. On server side counterparty you fetch updates on git, if anybody change, it will run docker compose, which will build your image and put it live.

Worked well for me a few years.

Problems: when you have issues you need to look into pertainer logs to see why it failed.

That’s one big problem, if prefer something like Jenkins to build it instead.

And if you have more groups of docker compose, you just put another sh script to do this piling on the main infrastructure git repo, which on git change will spawn new git watchers
by Frost1x | 2026-01-12 01:37:31+00:00
Complain to our representatives who will do absolutely nothing because the system is ripe for abuse and we’ve put people who actively want to abuse and exploit it into office.

I keep telling everyone and have been for a year, it’s not just our problem, due to global US positioning it’s now a world problem. Just ask Venezuela. Regardless of what you think about the end result the ends did not justify the means.

I for one will be collecting my (completely legal) hunting rifles and weapons I’ve had in storage since I was a kid, have them professionally serviced and grab some ammunition, on the terrible case I need to defend myself which I thought I’d never ever have to consider and I’d just sell them some day. But alas we have a lot of really really stupid as well as downright toxic voters in this country.
by m0llusk | 2026-01-12 01:37:41+00:00
> ... what is Apple supposed to do? ...

This seems like an example of a situation that modern machine learning could help with. Take bug reports permissively and look through all of them for patterns. Loss of focus should be the kind of thing that would stand out and could be analyzed for similarities and recurring features. Making sense of large amounts of often vague and rambling reports has been a problem for a long time and seems like a domain that machine learning is well set for.
by HarHarVeryFunny | 2026-01-12 01:38:00+00:00
Doesn't have to be that way though. As discussed here recently, a basic local agent like Claude Code is only a couple hundred lines of code, and could easily be written by something like Claude Code if you didn't want to do it yourself.

If you have your own agent, then it can talk to whatever you want - could be OpenRouter configured to some free model, or could be to a local model too. If the local model wasn't knowledgeable enough for sysadmin you could perhaps use installable skills (scripts/programs) for sysadmin tasks, with those having been written by a more powerful model/agent.
by noosphr | 2026-01-12 01:38:23+00:00
Indeed, filling the adversitsed context more than 1/4 full is a bad idea in general. 50k tokens is a fair bit, but works out to between 1 and 10k lines of code.

Perfect for a demo or work on a single self contained file.

Disastrous for a large code base with logic scattered all throughout it.
by credit_guy | 2026-01-12 01:38:27+00:00
> who can be relied upon to run these things, who can be trusted to regulate them and the failure modes of accidents.

I personally trust the Nuclear Regulatory Commission. I also trust the Canadian Nuclear Safety Commission, and the regulatory bodies in the UK and the EU.

Why?

The failure modes are not binary. A reactor is not just operating fine or going boom. There are multiple small failures that can happen, and you can get an idea if a country's nuclear fleet is run with safety in mind or not.

Chernobyl happened during a safety exercise, an exercise that was attempted 3 times before and failed 3 times before. In principle the plant should not even have been allowed to operate until the exercise had been completed. The exercise was supposed to demonstrate if in case of reactor emergency shut-down the cooling water can be kept circulating in the core for one minute, the amount of time it took for the Diesel generators to ramp up power; it was an essential exercise to perform before starting full power operations. The fact that the plant was allowed to operate for 3 years without completing this exercise - no, actually, while failing this exercise multiple times, tells you a lot about the safety mentality of the nuclear industry in the Soviet Union.

In the US, the NRC performs a lot of monitoring, and the results are published. For example, here's [1] a dashboard of performance indicators. There are 17, such as: Unplanned Scrams per 7000 Critical Hours, Unplanned Power Changes, Residual Heat Removal System, Reactor Coolant System Leak, etc. Out of about 100 reactors, you can see only green, with the exception of one yellow; that yellow is for the Palisades plant that is not currently operating, it is in the process of restarting operations, and I am sure it will not be allowed to restart until all the performance indicators are green.

[1]https://www.nrc.gov/reactors/operating/oversight/pi-summary
by grayhatter | 2026-01-12 01:39:04+00:00
Show me what you've made with AI?

What's the impressive thing that can convince me it's equivalent, or better than anything created before, or without it?

I understand you've produced a lot of things, and that your clout (which depends on the AI ferver) is based largely because of how refined a workflow you've invented. But I want to see the product, rather than the hype.

Make me say; I wish I was good enough to create this!

Without that, all I can see is the cost, or the negative impact on society.
Show HN: Constela – Build web pages using JSON instead of JavaScript
by yuu1ch13 | 2026-01-12 01:39:19+00:00
Hi everyone,

I’ve been building a programming language called Constela.

Constela lets you build web pages using JSON instead of JavaScript. UI structure, state, and events are described as a constrained JSON DSL, which is validated and compiled before execution.

The idea is to treat UI not as handwritten code, but as verifiable data. This allows issues like undefined state references, invalid updates, or broken UI structure to be detected before the UI ever runs.

This approach is especially aimed at workflows where UI is generated or heavily modified by machines or AI, where runtime-only errors make correctness hard to reason about.

Project:
https://github.com/yuuichieguchi/constela

Docs:
https://constela-dev.vercel.app/

I’d be interested in feedback from people working on compilers, UI frameworks, or AI-assisted development.
by mattmaroon | 2026-01-12 01:40:03+00:00
That link actually clearly says down in the body that they could pick the lemon lime out from the colas, which makes sense.

Throwing together sugar, acid, and carbonation does not overwhelm your sense of taste. Thats most bottled beverages. If you believe this, you should see a doctor.

But many beverages are very similar to other beverages. It’s not an inherent flaw in taste perception that Coke and Pepsi taste alike to most people, it’s that one was intentionally made to be only slightly different than the other.
by Imustaskforhelp | 2026-01-12 01:40:04+00:00
I understand where you are coming from but no, containers aren't enough isolation.

If you are running some public service, it might have bugs and of course we see some RCE issues as well or there can be some misconfig and containers by default dont provide enough security if an hacker tries to break in. Containers aren't secure in that sense.

Virtual machines are the intended use case for that. But they can be full of friction at time.

If you want something of a middle compromise, I can't recommend incus enough. https://linuxcontainers.org/incus/

It allows you to setup vm's as containers and even provides a web ui and provides the amount of isolation that you can trust (usually) everything on.

I'd say to not take chances with your home server because that server can be inside your firewall and can infect on a worst case scenario other devices but virtualization with things like incus or proxmox (another well respected tool) are the safest and provide isolation that you can trust with. I highly recommend that you should take a look at it if you deploy public serving services.
by Anamon | 2026-01-12 01:40:26+00:00
Someone seems to be running a campaign like this with Amazon accounts currently. I don't know the password reset process for Instagram, but maybe a similar thing could be happening that people assumed is behind the Amazon wave:

Amazon sends you a 6-digit code to reset your password. The code is valid for five minutes before a new one is generated. I don't know what the rate limit is, but even if you can just try five times within those five minutes, your chance of guessing it right would be 1 in 200,000. Now assume the attackers are running this on several million accounts in parallel, and you can assume they'd be able to steal a few accounts just with lucky guesses.

It worried me enough that I removed my phone number from my account, through which the password reset requests were initiated. The absolute risk for each user may be low, but overall it seems like a terrible system with regards to security.
by spankibalt | 2026-01-12 01:40:44+00:00
The MAGA crowd and their lickspittles/enablers are so far removed from reality that they only believe their leader.

And many others will vote for system-wreckers (broadly: conservatives) again, because the democrats cannot fix much of the damage done within the next legislative periods, let alone just one... even if the miracle of a trifecta happens and SCOTUS loses its majority on top of it. Rinse, repeat.
by jdejean | 2026-01-12 01:40:47+00:00
Most of my gripes are probably Gnome specific in this case
- When you screenshot something it pins the image temporarily on the screen. If I drag into any open app it avoids saving it to disk.
- Pressing CMD W or Q consistently closes any app (works on some gnome apps)
- Mac keychain passkeys (I don’t own a usb stick)
- Third party window management (through accessibility privileges only)
- Apps respecting dark mode settings
- The app menu (file, edit, window, etc) being in the same spot every time

Definitely not exhaustive since I only spent a few weeks with it. There were also plenty of things I liked about Gnome more but not enough to tip the scale for me
by drpepper42 | 2026-01-12 01:41:05+00:00
The interest rates? If you wanted to crash demand for dollar various things makes a bit more sense. Venezuela might be more about threatening BRICS if you squint at it. The EU–Mercosur agreement looks like it might pass - timing is kind of weird. There is maybe a kind of logic to it for exports but I think it lowers the standard of living for us plebs.
by mlok | 2026-01-12 01:41:51+00:00
Unfortunately, no. CORS will block this on Chrome and Firefox.

https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/COR...

The security risk : https://www.mozilla.org/en-US/security/advisories/mfsa2019-2...

You need a local webserver. Or bundle everything in one html file.
by trinsic2 | 2026-01-12 01:41:53+00:00
> You can be pro-AI and pro regulation of AI.

Not in this climate. The laws are being circumvented by criminals. Everything is different now. You can tell yourself all you want that its ok to support a technology that is being used to enslave us, but its not going to change the outcome, we are still being harmed by people that have control over the technology.

The best thing to do right now is to stop supporting the tech where its being used by corporations that are in the business of harming the people by there actions and inaction.
by mrstackdump | 2026-01-12 01:43:22+00:00
> The threat of criminal charges is a consequence of the Federal Reserve setting interest rates based on our best assessment of what will serve the public

Preface with: I hate Trump and don't support him nor his policies. That being said Powell is no better, and this is a bald-faced lie. He's increased interest rates because labor got too much power. WFH, increasing pressure for fair wages... this mobster just jacked up the rate to put the power back in the hands of capital and he's been unrelenting about it. I don't think he's much of an individual at all, just the current face of an extremely oppressive system. We should abolish the fed.
by defrost | 2026-01-12 01:43:26+00:00
> And yes the CSIRO report is Australia-specific but the timeframes for building nuclear power in the US are similar

* The US has existing commercial scale nucleat power stations. Australia does not.

* The US has an existing nuclear weapons industry. Australia does not.

* The US has existing advanced courses on nuclear technology for workforce scale populations. Australia has extremely limited coursework.

* The US actively builds and maintains SMRs for submarine use. Australia does not.

These are fairly critical differences in terms of additional costs to Australia above and beyond build times.
by simonw | 2026-01-12 01:43:49+00:00
It's mostly a statistical text model, although the RL "reasoning" stuff added in the past 12 months makes that a slightly less true statement - it has extra tricks now to help it bias bits of code to statistically predict that are more likely to work.

The real unlock though is the coding agent harnesses. It doesn't matter any more if it statistically predicts junk code that doesn't compile, because it will see the compiler error and fix it. If you tell it "use red/green TDD" it will write the tests first, then spot when the code fails to pass them and fix that too.

> How are they not seeing the propensity for both Claude + ChatGPT to spit out tons of completely pointless error handling code, making what should be a 5 line function a 50 line one?

TDD helps there a lot - it makes it less likely the model will spit out lines of code that are never executed.

> How are they not seeing that you constantly have to nag it to use modern syntax. Typescript, C#, Python, doesn't matter what you're writing in, it will regularly spit out code patterns that are 10 years out of date.

I find that if I use it in a codebase with modern syntax it will stick to that syntax. A prompting trick I use a lot is "git clone org/repo into /tmp and look at that for inspiration" - that way even a fresh codebase will be able to follow some good conventions from the start.

Plus the moment I see it write code in a style I don't like I tell it what I like instead.

> And that's not even including the bit where the AI obviously decided to edit the wrong search function in a totally different part of the codebase that had nothing to do with what my colleague was doing.

I usually tell it which part of the codebase to execute - or if it decides itself I spot that and tell it that it did the wrong thing - or discard the session entirely and start again with a better prompt.
by TheCraiggers | 2026-01-12 01:43:53+00:00
Port scanners don't try to ssh into my server with various username/password combinations.

I prefer to hide my port instead of using F2B for a few reasons.

1. Log spam. Looking in my audit logs for anything suspicious is horrendous when there's just megs of login attempts for days.

2. F2B has banned me in the past due to various oopsies on my part. Which is not good when I'm out of town and really need to get into my server.

3. Zero days may be incredibly rare in ssh, but maybe not so much in Immich or any other relatively new software stack being exposed. I'd prefer not to risk it when simple alternatives exist.

Besides the above, using Tailscale gives me other options, such as locking down cloud servers (or other devices I may not have hardware control over) so that they can only be connected to, but not out of.
by ece | 2026-01-12 01:44:33+00:00
Like I said, this is a cat and mouse game, if you had terminals to spare or even just fake battery operated transmitting antennas, you could waste a lot of drone time. There are also masking techniques and it's not like the drones can't be tracked or misguided. It would take orders of magnitude more effort to stop Starlink than to keep using it minimally. Iran is a big country, it just depends on how determined and prepared the protestors are to evade censorship. Which by itself is hopefully just a start to other actions.
by gerdesj | 2026-01-12 01:45:02+00:00
>Oh, the other day I had just 70 `iptables -m set --match-set` rules, and did you know how apparently inefficient source/destination address hashing algorithm for the set match is?! It was debugged with perf as well!

>I'm talking about ~4Gbit/s sudden limitation on a 10Gbit link.

I think you need to look into things if 70 IPs in a table are causing issues, such that a 10Gb link ends up at four Gb/s. I presume that if you remove the ipset, that 10Gb/s is restored?

Testing throughput and latency is also quite a challenge - how do you do it?
by Madmallard | 2026-01-12 01:45:35+00:00
Man it's really obvious you are so invested (likely monetarily) in this topic.

It was already shown repeatedly in GitHub repositories in the last year that authors are really unhappy with AI generated pull-requests and test cases.

Just because 1% of users can get a meaningful output from high levels of domain expertise using the tools, does not make the tools a great buttress for everyone and something that should be evangelized.
by charcircuit | 2026-01-12 01:46:06+00:00
Linus doesn't release a linked version of the kernel so that FAQ does not apply

>I don't consider dependence on Google as "working for the users".

Why not? They work more for users than other organizations that you would try and replace them with.

>Obeying Google is not "security"

I don't know what you are referring to.